$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/57/3b51b8-10c6-438b-a120-15f13e3f7d85/1/2Cy0PKPAxXgWzuNgR40M-IIgf9I.mft File: 2Cy0PKPAxXgWzuNgR40M-IIgf9I.mft (raw, json) Hash identifier: 5YAL9TWSwQtLqEC7D1gmOdOBGAijPsLCiaAYvxNRMOk= Subject key identifier: FC:95:90:F0:55:45:05:1E:10:C9:35:52:B4:1B:BA:CE:3E:39:2C:E4 Authority key identifier: D8:2C:B4:3C:A3:C0:C5:78:16:CE:E3:60:47:8D:0C:F8:82:20:7F:D2 Certificate issuer: /CN=d82cb43ca3c0c57816cee360478d0cf882207fd2 Certificate serial: 0198D583630950039C8F8224FDD63CCB9882 Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/2Cy0PKPAxXgWzuNgR40M-IIgf9I.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/57/3b51b8-10c6-438b-a120-15f13e3f7d85/1/2Cy0PKPAxXgWzuNgR40M-IIgf9I.mft Manifest number: 04FB Signing time: Sat 23 Aug 2025 06:00:14 +0000 Manifest this update: Sat 23 Aug 2025 06:00:14 +0000 Manifest next update: Sun 24 Aug 2025 06:00:14 +0000 Files and hashes: 1: 2Cy0PKPAxXgWzuNgR40M-IIgf9I.crl (hash: Y0rnNycvgO8evrbzzC4IYSukRaSCqaXQi7alyqG/lNc=) 2: 3NKK36OzbyCVvAW6QnBXCk0vC-E.roa (hash: gHjjORGkqgV1v9V5gvG+Gu8C2uJp9VohURGk9hhqXCY=) 3: DWnysDNu_v7yNNJ1aIjDqps-5LM.roa (hash: JPD53SzaSyMUMEmsWnAbUrfvGclz72WlfPM6q3RIsCk=) 4: RaE5smqHwTpdBVtd89_5CUvQKsE.roa (hash: UtehD4VO0l8o+LKAy2Z/geys1UM7QHPafm/iIQaT0/U=) 5: SOWcqaYhZ7YX4OOHhJe96In9itw.roa (hash: UaSEArJ4Ty/99oB9k6ZnmXrGKJLGr0L+yE1xo+K6dEg=) 6: f7lR2qdNzNhMHZctwhySnx52rh8.roa (hash: uc/3dtcmzwA7XSJMfP+6pPiS8XT6tGwBC3iJr2Zlmhg=) 7: kcbMP36K9zR3OAqVvtstfD6Qc1E.roa (hash: kKzo7D93m1wQVJ52FPItkIqrFxN6fMh/dyqt/5KaXWw=) 8: ksCUkPPXGRQEiQCKOl3Wp67HpYk.roa (hash: Fa0gD5gnN233i5uopk4/0YW9tKdVwYrJaJzPk4e1vT4=) 9: p8WEIwXo7Clnw_lkUVuyGNIeOvM.roa (hash: Ur1mz6OTaNWSYai5Ah9bPYej/Ck8pv/XZW+9ZEpR3q8=) 10: qJyacpBlbWQwXSv5l4Lxk3gU7sA.roa (hash: A2lDMN5zFwbdpcFJxDl5a8uW8CFGyTpmaP19LpWfeHE=) 11: r9xTyNget5zcXlE9TLs7M3SNT04.roa (hash: AESrTW2Rp0Ova6EIN8mRWsiWri5RUSzYkj7e2h2UwnM=) 12: wBcaC1_PamN7lirmMN3fzCp6jH4.roa (hash: G/3j6WArnTAj7/DCB5dCgU40hqdUmgoP9O96RyuFd1M=) 13: wWRwvyrn-LAOgtkAhCo3MlchYWQ.roa (hash: Uba3h/vRuJ26W0MxcGsxkEurmXFyfeD+ONZVIUG7QEM=) 14: xQ1rwm6oO8jHA9kZhQvVDEfMToU.roa (hash: rR/azYUh2GUL8HTdYkb3GDWX8S5vRgxNHhornEovZ9o=) Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/57/3b51b8-10c6-438b-a120-15f13e3f7d85/1/2Cy0PKPAxXgWzuNgR40M-IIgf9I.crl rsync://rpki.ripe.net/repository/DEFAULT/57/3b51b8-10c6-438b-a120-15f13e3f7d85/1/2Cy0PKPAxXgWzuNgR40M-IIgf9I.mft rsync://rpki.ripe.net/repository/DEFAULT/2Cy0PKPAxXgWzuNgR40M-IIgf9I.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Sun 24 Aug 2025 05:01:29 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:98:d5:83:63:09:50:03:9c:8f:82:24:fd:d6:3c:cb:98:82 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=d82cb43ca3c0c57816cee360478d0cf882207fd2 Validity Not Before: Aug 23 06:00:14 2025 GMT Not After : Aug 24 06:00:14 2025 GMT Subject: CN=fc9590f05545051e10c93552b41bbace3e392ce4 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:90:c6:c4:96:36:0e:6f:3e:84:ac:23:bb:eb:0d: 31:41:b7:d5:5c:e0:cd:87:64:74:5f:98:31:46:2a: ad:54:8a:f7:45:be:1a:b4:7c:9c:6c:b6:9d:08:1a: 11:27:bc:a5:4c:d4:db:d2:9a:58:91:19:bc:2f:58: 31:33:da:3e:3c:a9:9c:55:fc:08:07:51:8c:29:3e: f7:0d:7d:5f:cb:5f:0d:40:56:af:b5:22:ae:32:75: 95:79:9f:83:6d:d7:42:9e:48:a8:37:f9:eb:81:d0: b7:ca:13:e4:17:87:31:fb:39:81:0c:c0:07:e8:f1: 6c:88:f8:de:f4:34:9c:1e:f9:9d:c5:43:10:33:46: 04:c9:68:f2:e9:40:7a:29:28:8e:43:47:b0:a8:82: 8a:08:54:ae:25:48:6e:9e:3b:fa:ad:0a:24:25:a3: be:ba:96:ca:09:35:e0:9a:a0:2d:33:ef:b2:99:9b: 22:72:6b:b1:b5:e1:54:4b:c3:d3:a0:fc:be:e1:0b: 7b:f1:3e:88:76:ef:76:0f:3e:b8:a7:41:42:03:76: ae:20:5e:c0:b9:da:75:8a:75:21:b1:c2:94:a7:dc: a4:d8:d4:5d:0c:56:94:71:dc:41:1a:fc:ac:26:bc: cb:9a:07:e0:10:65:7e:ec:6c:56:e0:2d:ae:5e:c7: 54:4d Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: FC:95:90:F0:55:45:05:1E:10:C9:35:52:B4:1B:BA:CE:3E:39:2C:E4 X509v3 Authority Key Identifier: keyid:D8:2C:B4:3C:A3:C0:C5:78:16:CE:E3:60:47:8D:0C:F8:82:20:7F:D2 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/2Cy0PKPAxXgWzuNgR40M-IIgf9I.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/57/3b51b8-10c6-438b-a120-15f13e3f7d85/1/2Cy0PKPAxXgWzuNgR40M-IIgf9I.mft X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/57/3b51b8-10c6-438b-a120-15f13e3f7d85/1/2Cy0PKPAxXgWzuNgR40M-IIgf9I.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 8e:2c:24:66:14:54:63:f9:f2:57:f4:72:18:8f:0b:44:0a:18: f6:8d:94:42:da:37:e4:fe:91:63:96:d1:e2:bd:d7:3a:26:e9: b5:7e:ba:dd:3d:06:1d:7f:b5:96:16:3c:5d:89:a6:55:42:71: 06:ed:d1:cc:24:09:a4:12:b9:da:dc:25:e8:b0:e0:f2:7f:38: db:49:9d:3e:0c:59:56:c1:06:33:bd:ad:c4:98:84:8e:ba:3c: e2:96:ea:ee:ba:de:a4:07:b2:90:cb:e2:5b:3f:f1:58:ea:9b: ea:81:71:b1:58:e1:2b:0b:17:93:08:90:1a:6e:d7:00:30:f2: 50:61:40:82:5e:c3:bb:34:cd:50:f1:ab:d2:24:39:28:38:73: fd:cf:67:c1:5f:4d:90:7d:89:60:07:1a:bd:20:09:8e:e7:97: 59:70:89:c3:52:4e:f3:63:49:16:14:32:45:9d:1e:c2:b3:b1: 75:f0:d0:52:e1:ed:f4:4b:72:92:0e:c8:80:9d:ab:1f:f8:2c: 9b:60:98:c0:9b:2e:13:10:f3:4a:6a:ea:ea:79:af:13:00:9b: af:ec:bd:ee:bd:e9:9b:a6:b1:f5:c4:4b:7f:29:db:1f:bb:ed: b1:9d:e1:97:fa:04:5f:ad:4c:37:4a:8e:62:47:05:d1:56:0b: fa:4d:36:c1 -----BEGIN CERTIFICATE----- MIIFFjCCA/6gAwIBAgISAZjVg2MJUAOcj4Ik/dY8y5iCMA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKGQ4MmNiNDNjYTNjMGM1NzgxNmNlZTM2MDQ3OGQwY2Y4ODIy MDdmZDIwHhcNMjUwODIzMDYwMDE0WhcNMjUwODI0MDYwMDE0WjAzMTEwLwYDVQQD EyhmYzk1OTBmMDU1NDUwNTFlMTBjOTM1NTJiNDFiYmFjZTNlMzkyY2U0MIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAkMbEljYObz6ErCO76w0xQbfVXODN h2R0X5gxRiqtVIr3Rb4atHycbLadCBoRJ7ylTNTb0ppYkRm8L1gxM9o+PKmcVfwI B1GMKT73DX1fy18NQFavtSKuMnWVeZ+DbddCnkioN/nrgdC3yhPkF4cx+zmBDMAH 6PFsiPje9DScHvmdxUMQM0YEyWjy6UB6KSiOQ0ewqIKKCFSuJUhunjv6rQokJaO+ upbKCTXgmqAtM++ymZsicmuxteFUS8PToPy+4Qt78T6Idu92Dz64p0FCA3auIF7A udp1inUhscKUp9yk2NRdDFaUcdxBGvysJrzLmgfgEGV+7GxW4C2uXsdUTQIDAQAB o4ICIjCCAh4wHQYDVR0OBBYEFPyVkPBVRQUeEMk1UrQbus4+OSzkMB8GA1UdIwQY MBaAFNgstDyjwMV4Fs7jYEeNDPiCIH/SMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvMkN5MFBLUEF4WGdXenVOZ1I0ME0tSUlnZjlJLmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC81Ny8zYjUxYjgtMTBjNi00MzhiLWExMjAt MTVmMTNlM2Y3ZDg1LzEvMkN5MFBLUEF4WGdXenVOZ1I0ME0tSUlnZjlJLm1mdDCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC81Ny8zYjUxYjgtMTBjNi00MzhiLWExMjAtMTVmMTNlM2Y3ZDg1 LzEvMkN5MFBLUEF4WGdXenVOZ1I0ME0tSUlnZjlJLmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAjiwkZhRU Y/nyV/RyGI8LRAoY9o2UQto35P6RY5bR4r3XOibptX663T0GHX+1lhY8XYmmVUJx Bu3RzCQJpBK52twl6LDg8n8420mdPgxZVsEGM72txJiEjro84pbq7rrepAeykMvi Wz/xWOqb6oFxsVjhKwsXkwiQGm7XADDyUGFAgl7DuzTNUPGr0iQ5KDhz/c9nwV9N kH2JYAcavSAJjueXWXCJw1JO82NJFhQyRZ0ewrOxdfDQUuHt9Etykg7IgJ2rH/gs m2CYwJsuExDzSmrq6nmvEwCbr+y97r3pm6ax9cRLfynbH7vtsZ3hl/oEX61MN0qO YkcF0VYL+k02wQ== -----END CERTIFICATE-----Generated at Sat Aug 23 12:53:31 2025 by rpki-client