$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/55/98abe5-bd01-464f-96ab-40b6d67fcd94/1/L2pDTEtdI5xObkG35YXI1Y-Jlas.mft File: L2pDTEtdI5xObkG35YXI1Y-Jlas.mft (raw, json) Hash identifier: S/6uU3Rq/0FdtuLEJ81Yb+Fo6l0MtAv2Hottqx+5Mow= Subject key identifier: 04:CC:17:35:46:F6:88:40:7E:C2:5E:72:4F:9B:E5:46:AE:C4:31:38 Authority key identifier: 2F:6A:43:4C:4B:5D:23:9C:4E:6E:41:B7:E5:85:C8:D5:8F:89:95:AB Certificate issuer: /CN=2f6a434c4b5d239c4e6e41b7e585c8d58f8995ab Certificate serial: 0198D5BB9893F61CCD96D918C8B1EF7B13E4 Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/L2pDTEtdI5xObkG35YXI1Y-Jlas.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/55/98abe5-bd01-464f-96ab-40b6d67fcd94/1/L2pDTEtdI5xObkG35YXI1Y-Jlas.mft Manifest number: 1414 Signing time: Sat 23 Aug 2025 07:01:37 +0000 Manifest this update: Sat 23 Aug 2025 07:01:37 +0000 Manifest next update: Sun 24 Aug 2025 07:01:37 +0000 Files and hashes: 1: 4Daq3sRA17ZdprqbzGRyjmXgl1E.roa (hash: VSeTV1A+yIJMWw7g87Rk+9SxMblNEgNbsAxn9i/toOI=) 2: 8QONkg1-sVvu25nrTHQAiE7_PVc.roa (hash: Y3bPcPPsDbmx1nSMSrbsDz9GOPEu4THJBnIThId/cto=) 3: Dy3_-2-qchhqwV6ugXKT-692o-I.roa (hash: lFXyJxAwe/vhzRI9PjKD7egxkU6i67oTKHLLv3nHv9Y=) 4: L2pDTEtdI5xObkG35YXI1Y-Jlas.crl (hash: rFypalG+yQCaVtrraumAgZscvVpF9RdLYIrayuW3we0=) 5: TUsdn5UyypZAySyIwD0122dO4hk.roa (hash: qROUQY1/zeBb3m/9z4pmEZOzjkUX8dhi6BLpMApkjMw=) 6: UXKY_-h8u5j67TK9xWF4UA7Jum8.roa (hash: 6VqcQkz1/ixl50Kan0s1XUnUbJsWVx2QWylK6fqZbBI=) 7: iW4jUtG7M3vR2-jFtBNHAot1NRM.roa (hash: Jswk6MQzcR9/sq8RsWIzzKqrfUgP4qUKY0b1aM6D8zs=) 8: qdxw7ICFkhNmOD2y920CquCl8Zs.roa (hash: 0IGxrItYdslNNm2Z4pvBdqn/xC9v6YAG/wAr3FTvC0g=) 9: qoKgk8neCLLMajChHz0fftLejzg.roa (hash: ehm4GjwYCbP5+m0/y/D+332hrTelfkErSjs/0NX8/E0=) 10: r2Z-6B7wzSFh8CFa58Ppt1a-Jd0.roa (hash: xfkbqEdmN7XjFZmN6oSuaNI7G5H9sMv6GRd/iC9k870=) 11: wqBm7rPN_QCGYMr0G_aOxp5hD2w.roa (hash: luljtEiBvQ077ULzFpsCWlvJ3NF6749HEShaCtOITcM=) Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/55/98abe5-bd01-464f-96ab-40b6d67fcd94/1/L2pDTEtdI5xObkG35YXI1Y-Jlas.crl rsync://rpki.ripe.net/repository/DEFAULT/55/98abe5-bd01-464f-96ab-40b6d67fcd94/1/L2pDTEtdI5xObkG35YXI1Y-Jlas.mft rsync://rpki.ripe.net/repository/DEFAULT/L2pDTEtdI5xObkG35YXI1Y-Jlas.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Sun 24 Aug 2025 05:01:29 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:98:d5:bb:98:93:f6:1c:cd:96:d9:18:c8:b1:ef:7b:13:e4 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=2f6a434c4b5d239c4e6e41b7e585c8d58f8995ab Validity Not Before: Aug 23 07:01:37 2025 GMT Not After : Aug 24 07:01:37 2025 GMT Subject: CN=04cc173546f688407ec25e724f9be546aec43138 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:aa:14:4c:f0:3c:03:90:cb:07:62:0a:90:64:7c: 70:9c:eb:47:a4:04:33:f5:83:17:17:b9:ad:0f:04: 64:62:ea:f2:69:d4:b0:94:5d:a0:c8:57:93:ca:97: 5a:59:58:7e:40:cc:40:ee:45:d0:4f:39:03:7f:bf: df:3e:98:ac:0a:a6:e1:31:1a:91:7a:00:8c:dd:d4: e8:39:b5:44:3a:15:a0:8f:12:8b:f4:dd:84:99:bf: 61:21:68:63:3b:4e:50:4d:91:80:85:c9:a1:91:de: e4:1a:d5:9f:ca:de:84:95:92:e6:ac:c0:f1:61:6c: 16:af:a1:5b:e6:18:ca:26:74:9c:ae:b5:dd:61:1f: f1:02:9b:44:d2:1a:b9:12:29:c3:3c:d9:b0:b6:06: 39:7f:33:c5:08:c9:65:fa:d9:5c:85:e8:66:c9:13: ab:c4:dd:d3:7e:82:4c:fe:23:52:d4:b0:5d:d5:fc: 6d:a7:6d:59:4c:a4:34:5a:a1:25:c9:f5:47:67:f6: d3:b5:79:7d:68:c7:37:f8:a6:5d:77:f6:29:bf:ea: be:26:40:69:85:6e:dc:65:46:6c:e0:0d:d5:81:ee: 6f:b0:32:fc:4f:9c:43:da:f1:9a:4a:fd:9e:a9:fa: d5:fa:ad:45:75:14:40:44:b4:67:08:60:30:b3:82: e0:a5 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 04:CC:17:35:46:F6:88:40:7E:C2:5E:72:4F:9B:E5:46:AE:C4:31:38 X509v3 Authority Key Identifier: keyid:2F:6A:43:4C:4B:5D:23:9C:4E:6E:41:B7:E5:85:C8:D5:8F:89:95:AB X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/L2pDTEtdI5xObkG35YXI1Y-Jlas.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/55/98abe5-bd01-464f-96ab-40b6d67fcd94/1/L2pDTEtdI5xObkG35YXI1Y-Jlas.mft X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/55/98abe5-bd01-464f-96ab-40b6d67fcd94/1/L2pDTEtdI5xObkG35YXI1Y-Jlas.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 31:70:09:8c:40:87:d9:09:a5:bf:17:8e:36:20:88:d4:13:10: 19:ab:a4:06:9a:09:d4:9a:64:f4:0d:c4:b0:71:30:c7:61:8d: ec:16:90:65:a3:c1:6c:e1:37:c7:5b:23:1a:4d:97:7f:ef:3a: f8:15:c9:f4:b6:e6:3d:23:cf:0e:94:e1:d9:13:49:9b:8f:66: 8f:1e:fb:b3:2e:9c:25:9f:40:5a:0a:0f:4a:b2:56:ca:58:05: 99:9e:aa:a5:30:55:3a:70:07:3d:33:cf:c6:ed:38:6a:08:3d: de:be:4b:a0:fb:8b:c7:ad:e6:e5:85:66:8d:cc:24:b9:2c:1d: e5:8e:85:f9:b2:51:e9:cd:68:96:ed:fb:03:80:6a:eb:eb:06: 7c:c4:d7:29:e5:42:9a:48:57:44:18:a3:df:c4:10:75:6b:62: 66:85:cc:f4:09:9b:35:84:4c:c5:57:55:d6:c8:10:f2:db:cb: a1:1f:86:a3:55:42:65:d6:69:a4:e0:ef:a6:61:65:e8:84:57: 41:8e:be:44:a5:70:35:e3:b1:46:ad:9f:16:f5:a0:4f:87:bc: bf:5a:c4:e2:9e:0a:32:8e:57:d0:2b:2a:1d:a4:0a:aa:48:ec: 3b:9c:5a:bd:4f:90:f9:cc:92:c1:ac:f2:3c:37:c9:9e:a3:7e: 0c:95:09:89 -----BEGIN CERTIFICATE----- MIIFFjCCA/6gAwIBAgISAZjVu5iT9hzNltkYyLHvexPkMA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKDJmNmE0MzRjNGI1ZDIzOWM0ZTZlNDFiN2U1ODVjOGQ1OGY4 OTk1YWIwHhcNMjUwODIzMDcwMTM3WhcNMjUwODI0MDcwMTM3WjAzMTEwLwYDVQQD EygwNGNjMTczNTQ2ZjY4ODQwN2VjMjVlNzI0ZjliZTU0NmFlYzQzMTM4MIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAqhRM8DwDkMsHYgqQZHxwnOtHpAQz 9YMXF7mtDwRkYuryadSwlF2gyFeTypdaWVh+QMxA7kXQTzkDf7/fPpisCqbhMRqR egCM3dToObVEOhWgjxKL9N2Emb9hIWhjO05QTZGAhcmhkd7kGtWfyt6ElZLmrMDx YWwWr6Fb5hjKJnScrrXdYR/xAptE0hq5EinDPNmwtgY5fzPFCMll+tlchehmyROr xN3TfoJM/iNS1LBd1fxtp21ZTKQ0WqElyfVHZ/bTtXl9aMc3+KZdd/Ypv+q+JkBp hW7cZUZs4A3Vge5vsDL8T5xD2vGaSv2eqfrV+q1FdRRARLRnCGAws4LgpQIDAQAB o4ICIjCCAh4wHQYDVR0OBBYEFATMFzVG9ohAfsJeck+b5UauxDE4MB8GA1UdIwQY MBaAFC9qQ0xLXSOcTm5Bt+WFyNWPiZWrMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvTDJwRFRFdGRJNXhPYmtHMzVZWEkxWS1KbGFzLmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC81NS85OGFiZTUtYmQwMS00NjRmLTk2YWIt NDBiNmQ2N2ZjZDk0LzEvTDJwRFRFdGRJNXhPYmtHMzVZWEkxWS1KbGFzLm1mdDCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC81NS85OGFiZTUtYmQwMS00NjRmLTk2YWItNDBiNmQ2N2ZjZDk0 LzEvTDJwRFRFdGRJNXhPYmtHMzVZWEkxWS1KbGFzLmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAMXAJjECH 2QmlvxeONiCI1BMQGaukBpoJ1Jpk9A3EsHEwx2GN7BaQZaPBbOE3x1sjGk2Xf+86 +BXJ9LbmPSPPDpTh2RNJm49mjx77sy6cJZ9AWgoPSrJWylgFmZ6qpTBVOnAHPTPP xu04agg93r5LoPuLx63m5YVmjcwkuSwd5Y6F+bJR6c1olu37A4Bq6+sGfMTXKeVC mkhXRBij38QQdWtiZoXM9AmbNYRMxVdV1sgQ8tvLoR+Go1VCZdZppODvpmFl6IRX QY6+RKVwNeOxRq2fFvWgT4e8v1rE4p4KMo5X0CsqHaQKqkjsO5xavU+Q+cySwazy PDfJnqN+DJUJiQ== -----END CERTIFICATE-----Generated at Sat Aug 23 12:35:36 2025 by rpki-client