$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/56/f560e1-7840-4951-ab78-5001539d7185/1/i0eqCfLGEPb0S051wc2dzTiE5V0.mft File: i0eqCfLGEPb0S051wc2dzTiE5V0.mft (raw, json) Hash identifier: RDYzRV5q4J8KTNkWgwCyTAvpxjoS/6DDpevcErIMmKA= Subject key identifier: 35:CF:CA:DF:EB:4E:CA:A0:EC:13:FF:AF:E6:03:FE:82:00:4B:DF:35 Authority key identifier: 8B:47:AA:09:F2:C6:10:F6:F4:4B:4E:75:C1:CD:9D:CD:38:84:E5:5D Certificate issuer: /CN=8b47aa09f2c610f6f44b4e75c1cd9dcd3884e55d Certificate serial: 0198D5BC3FED2B7B852BA9E0FA292D41B0B4 Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/i0eqCfLGEPb0S051wc2dzTiE5V0.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/56/f560e1-7840-4951-ab78-5001539d7185/1/i0eqCfLGEPb0S051wc2dzTiE5V0.mft Manifest number: 06A8 Signing time: Sat 23 Aug 2025 07:02:20 +0000 Manifest this update: Sat 23 Aug 2025 07:02:20 +0000 Manifest next update: Sun 24 Aug 2025 07:02:20 +0000 Files and hashes: 1: 1N4Y-cxz_J8zvyVIPn4xaQ56W2I.roa (hash: LqNoYMeIHUvi7e8ZqSiPD8gSQPNLvRqFi/MU8NW82NY=) 2: 59PndGiGSGsbZj2RG0Ycf2mhgxQ.roa (hash: 4mRCrakJ34q1MdXD9vBIYWH6H5pZIK2v8drs+brvjAI=) 3: 6WgYdehy91JaGiXTQ4-mtet9hKA.roa (hash: k18cYqD3ZZMZ5W+a0Kjw8aqcJhfy210LAE8xFma2X2Y=) 4: 8WJg0FCb2fzG2APxfD0StVJRyKc.roa (hash: arSq4+uVAQechawGJq1Vs4dcHHn6a2tT+IBa0xaymvM=) 5: TI__S_5wBSs76T2sPdddnNR3NI4.roa (hash: 1cgm9AfaKeKcFrBAUFYpRgSienV4cq0Pog28Pn4vsBo=) 6: _ITSv8iuWxYF6Xi3_Ud63eugcVA.roa (hash: e1oaUiU/1FwcsXzZfTfjISFOH22WsphA6YVaiUR+Z3Y=) 7: clWNFKcGPCSVI8IczoLVlzymSwE.roa (hash: kwC3djRgAXxGmhjo7j0gZC7YajpIcaKz89NjkpuMd6c=) 8: d_GmJYSiWtstngRCp4D-3Nytktc.roa (hash: b5QdQbGkypzupkHkl6NURfR0Tou888+YLeKDY72J/ww=) 9: i0eqCfLGEPb0S051wc2dzTiE5V0.crl (hash: 91OtxEqskZat/LrCVI9+Uo4CmP8E1QAECAgLqThRNLI=) 10: t3F8K-eKkpIig0xnri8gdWPYoUc.roa (hash: 0LMmNIPY61uLEOsd/F4vx4OEiYbCbnmZs1SeTx2VOHc=) 11: vyRqPubr78kinBziiMEaPG49ruw.roa (hash: 9bi61mv9b1sVW+H/ztvpnoQsGJ5Kou6WnHLuM2n1U7U=) 12: xCwC0ruPjNW76bEQ25__qiX8bTI.roa (hash: /PNuMEC0HX9r4nNg0Hwe56qDotvTcrptdJE+VRq+wv0=) Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/56/f560e1-7840-4951-ab78-5001539d7185/1/i0eqCfLGEPb0S051wc2dzTiE5V0.crl rsync://rpki.ripe.net/repository/DEFAULT/56/f560e1-7840-4951-ab78-5001539d7185/1/i0eqCfLGEPb0S051wc2dzTiE5V0.mft rsync://rpki.ripe.net/repository/DEFAULT/i0eqCfLGEPb0S051wc2dzTiE5V0.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Sun 24 Aug 2025 00:37:04 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:98:d5:bc:3f:ed:2b:7b:85:2b:a9:e0:fa:29:2d:41:b0:b4 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=8b47aa09f2c610f6f44b4e75c1cd9dcd3884e55d Validity Not Before: Aug 23 07:02:20 2025 GMT Not After : Aug 24 07:02:20 2025 GMT Subject: CN=35cfcadfeb4ecaa0ec13ffafe603fe82004bdf35 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:d7:d8:ef:15:82:c7:78:57:3b:70:64:cd:5b:61: 38:51:11:1a:c8:d6:30:56:03:81:94:12:ca:8c:7b: 17:7d:6e:5d:f4:c4:f2:85:59:ac:f8:e9:98:50:36: 7a:a0:54:d6:f0:02:1d:b1:6b:61:ba:51:f2:05:7c: 0b:ec:c9:59:dc:48:d3:41:95:36:f5:c4:76:6d:96: a2:58:bb:b0:c7:9b:22:79:af:ce:aa:c3:dd:12:8c: 54:aa:6e:a9:d7:dc:76:1c:8b:e8:21:dc:ca:45:e5: 55:18:28:90:d3:04:c6:8d:47:2a:fc:64:02:2b:71: 07:1a:74:df:6e:f3:eb:51:13:ca:82:6d:82:0e:6f: bb:76:43:0e:ba:62:d7:e8:95:75:b5:3f:ce:b3:cf: 80:25:48:f3:0e:7a:c5:6f:c6:b4:c5:1e:3c:aa:25: d2:e4:5a:38:62:2c:58:33:d9:2f:a0:82:2a:74:5f: cb:95:e9:38:a8:c1:84:ce:8f:0b:51:e3:c2:44:25: 9d:6c:b9:ec:bb:09:ca:62:95:a4:eb:a8:bb:18:cd: 2b:ee:27:7f:67:57:6d:66:09:fe:4b:4b:29:f0:c4: 05:e9:bf:6e:64:0e:af:ea:b8:02:a8:bb:42:52:fc: 1a:8e:0f:9d:a5:10:1f:fc:1c:01:7a:c5:52:e8:8e: 14:df Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 35:CF:CA:DF:EB:4E:CA:A0:EC:13:FF:AF:E6:03:FE:82:00:4B:DF:35 X509v3 Authority Key Identifier: keyid:8B:47:AA:09:F2:C6:10:F6:F4:4B:4E:75:C1:CD:9D:CD:38:84:E5:5D X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/i0eqCfLGEPb0S051wc2dzTiE5V0.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/56/f560e1-7840-4951-ab78-5001539d7185/1/i0eqCfLGEPb0S051wc2dzTiE5V0.mft X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/56/f560e1-7840-4951-ab78-5001539d7185/1/i0eqCfLGEPb0S051wc2dzTiE5V0.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 9e:c8:8f:28:f3:bc:9e:45:b2:8a:32:42:ff:32:fa:d3:c5:d7: 66:87:ac:6c:a8:93:bf:dd:71:46:e4:21:60:96:d6:71:f2:4c: b0:af:ad:3a:82:37:20:39:53:17:e6:9f:4e:4c:4d:5e:4e:30: 0b:ca:bd:72:fa:c9:dd:50:a1:11:79:b2:15:72:84:ca:ce:4a: dd:5f:12:16:14:51:15:ba:b1:16:a6:92:6d:8f:79:f2:61:0d: 46:e9:ae:8b:8b:60:49:01:a5:22:ea:55:f4:7a:92:74:cb:05: 9c:98:0f:0c:fe:7c:c7:3b:ac:fd:c3:99:48:49:19:47:81:cb: 1c:df:39:ec:1a:df:e4:58:84:2f:99:df:fc:21:83:f9:15:b2: a0:c8:3d:67:14:04:f0:6d:d8:6a:1c:2e:a9:c2:9e:6b:44:d1: a8:7e:ca:41:12:5a:53:78:df:02:38:05:6d:09:5d:6a:72:79: 63:b0:ca:35:84:ce:ba:0a:e1:47:d8:b7:32:bb:a7:46:8a:18: 5b:9c:c9:ca:d5:f2:c3:20:18:28:6e:44:59:10:94:58:5a:f5: d4:5b:05:2f:f0:09:c8:1e:75:9e:82:a2:2d:44:d8:54:a0:b9: 65:83:0d:9c:5e:33:56:7d:54:5d:17:e5:8f:9a:64:97:31:c6: b1:e1:8d:2c -----BEGIN CERTIFICATE----- MIIFFjCCA/6gAwIBAgISAZjVvD/tK3uFK6ng+iktQbC0MA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKDhiNDdhYTA5ZjJjNjEwZjZmNDRiNGU3NWMxY2Q5ZGNkMzg4 NGU1NWQwHhcNMjUwODIzMDcwMjIwWhcNMjUwODI0MDcwMjIwWjAzMTEwLwYDVQQD EygzNWNmY2FkZmViNGVjYWEwZWMxM2ZmYWZlNjAzZmU4MjAwNGJkZjM1MIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEA19jvFYLHeFc7cGTNW2E4UREayNYw VgOBlBLKjHsXfW5d9MTyhVms+OmYUDZ6oFTW8AIdsWthulHyBXwL7MlZ3EjTQZU2 9cR2bZaiWLuwx5siea/OqsPdEoxUqm6p19x2HIvoIdzKReVVGCiQ0wTGjUcq/GQC K3EHGnTfbvPrURPKgm2CDm+7dkMOumLX6JV1tT/Os8+AJUjzDnrFb8a0xR48qiXS 5Fo4YixYM9kvoIIqdF/Llek4qMGEzo8LUePCRCWdbLnsuwnKYpWk66i7GM0r7id/ Z1dtZgn+S0sp8MQF6b9uZA6v6rgCqLtCUvwajg+dpRAf/BwBesVS6I4U3wIDAQAB o4ICIjCCAh4wHQYDVR0OBBYEFDXPyt/rTsqg7BP/r+YD/oIAS981MB8GA1UdIwQY MBaAFItHqgnyxhD29EtOdcHNnc04hOVdMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvaTBlcUNmTEdFUGIwUzA1MXdjMmR6VGlFNVYwLmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC81Ni9mNTYwZTEtNzg0MC00OTUxLWFiNzgt NTAwMTUzOWQ3MTg1LzEvaTBlcUNmTEdFUGIwUzA1MXdjMmR6VGlFNVYwLm1mdDCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC81Ni9mNTYwZTEtNzg0MC00OTUxLWFiNzgtNTAwMTUzOWQ3MTg1 LzEvaTBlcUNmTEdFUGIwUzA1MXdjMmR6VGlFNVYwLmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAnsiPKPO8 nkWyijJC/zL608XXZoesbKiTv91xRuQhYJbWcfJMsK+tOoI3IDlTF+afTkxNXk4w C8q9cvrJ3VChEXmyFXKEys5K3V8SFhRRFbqxFqaSbY958mENRumui4tgSQGlIupV 9HqSdMsFnJgPDP58xzus/cOZSEkZR4HLHN857Brf5FiEL5nf/CGD+RWyoMg9ZxQE 8G3YahwuqcKea0TRqH7KQRJaU3jfAjgFbQldanJ5Y7DKNYTOugrhR9i3MrunRooY W5zJytXywyAYKG5EWRCUWFr11FsFL/AJyB51noKiLUTYVKC5ZYMNnF4zVn1UXRfl j5pklzHGseGNLA== -----END CERTIFICATE-----Generated at Sat Aug 23 09:43:34 2025 by rpki-client