$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/5b/4abf3f-158f-4f62-a9eb-ddf567eded03/1/jRrIPuOj-WjWatL99GFue7Hk0dc.mft File: jRrIPuOj-WjWatL99GFue7Hk0dc.mft (raw, json) Hash identifier: RjkM+FGYf2rSmmDAFXHQziH3m1WQjVZofkQuX144jq4= Subject key identifier: 64:9D:AE:D5:D5:53:76:C8:22:44:73:9C:A6:85:AA:37:43:86:6E:9A Authority key identifier: 8D:1A:C8:3E:E3:A3:F9:68:D6:6A:D2:FD:F4:61:6E:7B:B1:E4:D1:D7 Certificate issuer: /CN=8d1ac83ee3a3f968d66ad2fdf4616e7bb1e4d1d7 Certificate serial: 0198D54E1D9EA63966B289610755500F9D17 Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/jRrIPuOj-WjWatL99GFue7Hk0dc.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/5b/4abf3f-158f-4f62-a9eb-ddf567eded03/1/jRrIPuOj-WjWatL99GFue7Hk0dc.mft Manifest number: 0BD2 Signing time: Sat 23 Aug 2025 05:02:03 +0000 Manifest this update: Sat 23 Aug 2025 05:02:03 +0000 Manifest next update: Sun 24 Aug 2025 05:02:03 +0000 Files and hashes: 1: 0hcYkFvLnPnX3tJPZIl-Uhot1i0.roa (hash: 6/eHz/J+k5SuDY5b5eslxHZpd3P/l7+bfENiu84Xo/Y=) 2: 2MTjWcnAZaBZxr6B57_xkNelCyo.roa (hash: LwS+Lia49xksIy+sqAnEnU2btZ36QZE/qsN4N2FlYK8=) 3: 5Xz9E7C6BAcx16iIMjwvM4HlgAw.roa (hash: O79+vzMdI2uDnbGewEwtLl1GFqHouBivbXJnQ4WHjFs=) 4: A3vCnLdcCAHsjG0TKS7PepEiSRQ.roa (hash: 8/8TxF0wXw7stYTcBeXGRpf0HZpKR5xHMrhdKNPhjb4=) 5: Eb3nQCsubyrRRwgtef25b2tcJbQ.roa (hash: sgX7PEOSSTdMVUw2kIAqvpDSoV+TN56cGW37Ykizvek=) 6: FQFiaH-Uhznyo9tuv-39hg1SgIc.roa (hash: AaAgvoQWwsBdEDlzs9JJLKseENMJxUCvDZ1+feCaadI=) 7: JtkTsuHPsoBKn0hRChOrC4JXTN4.roa (hash: M9uGhnRBSZAnmB8BCT/jdRx465I3Ctf37Vtgm+Jt4nc=) 8: LNIAH1MylX8WQQ-W8xfPHTlOsW0.roa (hash: GFXXpakvt3mJ4yGbBFawI3+WVF7sKNF14A1lgtziIek=) 9: Lxv8RdYN9P2vj1nZyAjFF9lNkU8.roa (hash: xMtpILHpW8icGyga3EnNkKUNmrRxGITTuJWIIZqDxDI=) 10: MudRzNeUk2R859eEP09GJeDExf0.roa (hash: 2o3NbfW7AkgEJtAc91HUgnIB/5KesUMTjVvuVU09fp4=) 11: RTZYU-7DG4fUoipBd0qSh8BirjI.roa (hash: 3eo6AFVTXAYcIIpYV9OFjF0R4DRTO3nfrXKCxpb3Q8c=) 12: XO5629FFpWYFF8ZRrD5XKcMM2vo.roa (hash: wKy5dCiE9pBzbJNPaAeHBHoxO/6aKqqjDAe2f2qYl60=) 13: gwSC7EAy3C72kqaOxsQmMkrjxyA.roa (hash: oVgyYlrKyPjekvA+50Kp0/QR+pQendS8nmEKcr8YBXw=) 14: jRrIPuOj-WjWatL99GFue7Hk0dc.crl (hash: MZ/Hn3U8tQG3FGZUvX7qsP97TKz2yby43Cf2cikNWfQ=) 15: koWcD6_YJsplq6MpdAuoeyxurzM.roa (hash: 2bTDDvlz5M3JHeYmPpa6SlfroaAlw505uc1zw7/pXCU=) 16: lO8z4PUnAAW_FQZ30LG2G_SaC34.roa (hash: TP4CK9avYURoeZBLUriM0sZhHgj7m8xB680P8/Q/778=) 17: ptIzMM5pGR32qdt6NWym3eUNiak.roa (hash: bSsM8QyZGEjlRqx/UPAoekl3qkyD03EUapHU3WIbdX4=) 18: tesrxSIX8wDOD0usavdzlelTyC8.roa (hash: 2mw6qDJEVPvk2SB5Frfa2IZ+DHf6Rgtla+C91qwtmwA=) Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/5b/4abf3f-158f-4f62-a9eb-ddf567eded03/1/jRrIPuOj-WjWatL99GFue7Hk0dc.crl rsync://rpki.ripe.net/repository/DEFAULT/5b/4abf3f-158f-4f62-a9eb-ddf567eded03/1/jRrIPuOj-WjWatL99GFue7Hk0dc.mft rsync://rpki.ripe.net/repository/DEFAULT/jRrIPuOj-WjWatL99GFue7Hk0dc.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Sun 24 Aug 2025 00:37:04 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:98:d5:4e:1d:9e:a6:39:66:b2:89:61:07:55:50:0f:9d:17 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=8d1ac83ee3a3f968d66ad2fdf4616e7bb1e4d1d7 Validity Not Before: Aug 23 05:02:03 2025 GMT Not After : Aug 24 05:02:03 2025 GMT Subject: CN=649daed5d55376c82244739ca685aa3743866e9a Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:d7:af:8c:13:3d:8e:15:d9:18:67:48:b0:31:2e: 9c:c2:33:4e:ba:0d:0e:9c:12:2c:c0:3f:02:94:4c: 2f:92:8c:2c:95:0b:c0:e5:8b:45:03:e2:eb:de:14: 2d:71:1d:d0:98:4f:ac:af:44:1f:f3:af:a3:cf:6f: 34:a6:bd:38:43:3d:a8:ce:7d:36:62:13:18:60:d0: a4:eb:0b:b7:72:4e:61:b1:83:91:d4:67:e4:0a:d2: 34:bc:18:25:9d:6e:3f:10:2f:7e:e0:94:bc:c2:d6: 04:09:05:7f:23:3a:18:06:59:a3:eb:e1:8a:1b:ed: e3:a4:2c:13:87:86:5c:60:94:6a:44:c1:26:ab:58: cf:e4:83:29:e5:47:d6:fb:32:95:f1:a7:da:e8:9a: 45:a2:6b:b1:40:49:33:cf:3c:fb:3a:18:d6:60:54: 76:6a:50:b6:8e:7a:22:83:10:29:f2:57:27:08:b6: 52:ac:95:37:91:b4:7b:5e:cb:8a:47:44:75:aa:43: 33:f7:29:47:b4:2c:15:9f:78:5d:86:c8:3c:67:76: a4:81:e5:49:9a:c2:71:b4:67:e3:1c:77:41:4d:87: c0:5d:eb:84:8f:61:87:3b:17:c8:db:84:af:6d:d3: ed:2c:ad:47:67:52:ed:9f:77:71:4e:bf:fb:1c:33: 28:87 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 64:9D:AE:D5:D5:53:76:C8:22:44:73:9C:A6:85:AA:37:43:86:6E:9A X509v3 Authority Key Identifier: keyid:8D:1A:C8:3E:E3:A3:F9:68:D6:6A:D2:FD:F4:61:6E:7B:B1:E4:D1:D7 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/jRrIPuOj-WjWatL99GFue7Hk0dc.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/5b/4abf3f-158f-4f62-a9eb-ddf567eded03/1/jRrIPuOj-WjWatL99GFue7Hk0dc.mft X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/5b/4abf3f-158f-4f62-a9eb-ddf567eded03/1/jRrIPuOj-WjWatL99GFue7Hk0dc.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 68:27:c6:20:0d:56:91:dd:47:38:04:b1:d5:6d:e8:c1:8b:3e: 89:97:7d:77:11:4b:f1:f5:eb:ce:d1:89:a4:f5:a2:29:95:e1: 0f:51:67:45:5d:bc:f5:95:93:77:ea:f3:d6:4a:eb:6f:b7:e1: 12:c6:4b:ff:72:1b:9f:cf:79:2a:56:31:00:16:39:4f:4f:8c: 5f:39:e3:80:61:77:fe:e9:37:52:6a:1d:00:26:00:dc:54:39: 06:c3:93:93:07:76:56:41:c7:cb:74:2b:3d:58:91:df:e6:05: 02:95:8c:38:a7:c0:af:8a:3c:8d:c9:09:d2:3c:81:7a:18:08: 00:22:c9:1c:f8:33:7e:9c:9e:06:48:cb:85:72:70:16:5e:34: 56:56:5f:82:c3:04:b2:ef:15:66:3d:e0:36:36:eb:a7:5b:7d: 48:74:fd:bd:91:fe:fe:e3:e1:17:41:2b:5c:fa:33:51:48:39: 69:10:82:66:9a:d1:32:18:60:37:b1:ca:ac:29:23:68:ca:39: cd:4c:e0:6e:8d:ec:c0:06:5b:6d:d5:62:28:d6:cd:ef:e1:f6: 20:b6:de:dd:95:a8:45:2e:bc:63:8e:b9:ef:7b:0d:e4:c8:78: d9:03:d8:cc:a3:f6:f9:e1:d5:de:cc:87:84:be:dc:67:af:77: dc:80:13:01 -----BEGIN CERTIFICATE----- MIIFFjCCA/6gAwIBAgISAZjVTh2epjlmsolhB1VQD50XMA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKDhkMWFjODNlZTNhM2Y5NjhkNjZhZDJmZGY0NjE2ZTdiYjFl NGQxZDcwHhcNMjUwODIzMDUwMjAzWhcNMjUwODI0MDUwMjAzWjAzMTEwLwYDVQQD Eyg2NDlkYWVkNWQ1NTM3NmM4MjI0NDczOWNhNjg1YWEzNzQzODY2ZTlhMIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEA16+MEz2OFdkYZ0iwMS6cwjNOug0O nBIswD8ClEwvkowslQvA5YtFA+Lr3hQtcR3QmE+sr0Qf86+jz280pr04Qz2ozn02 YhMYYNCk6wu3ck5hsYOR1GfkCtI0vBglnW4/EC9+4JS8wtYECQV/IzoYBlmj6+GK G+3jpCwTh4ZcYJRqRMEmq1jP5IMp5UfW+zKV8afa6JpFomuxQEkzzzz7OhjWYFR2 alC2jnoigxAp8lcnCLZSrJU3kbR7XsuKR0R1qkMz9ylHtCwVn3hdhsg8Z3akgeVJ msJxtGfjHHdBTYfAXeuEj2GHOxfI24SvbdPtLK1HZ1Ltn3dxTr/7HDMohwIDAQAB o4ICIjCCAh4wHQYDVR0OBBYEFGSdrtXVU3bIIkRznKaFqjdDhm6aMB8GA1UdIwQY MBaAFI0ayD7jo/lo1mrS/fRhbnux5NHXMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvalJySVB1T2otV2pXYXRMOTlHRnVlN0hrMGRjLmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC81Yi80YWJmM2YtMTU4Zi00ZjYyLWE5ZWIt ZGRmNTY3ZWRlZDAzLzEvalJySVB1T2otV2pXYXRMOTlHRnVlN0hrMGRjLm1mdDCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC81Yi80YWJmM2YtMTU4Zi00ZjYyLWE5ZWItZGRmNTY3ZWRlZDAz LzEvalJySVB1T2otV2pXYXRMOTlHRnVlN0hrMGRjLmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAaCfGIA1W kd1HOASx1W3owYs+iZd9dxFL8fXrztGJpPWiKZXhD1FnRV289ZWTd+rz1krrb7fh EsZL/3Ibn895KlYxABY5T0+MXznjgGF3/uk3UmodACYA3FQ5BsOTkwd2VkHHy3Qr PViR3+YFApWMOKfAr4o8jckJ0jyBehgIACLJHPgzfpyeBkjLhXJwFl40VlZfgsME su8VZj3gNjbrp1t9SHT9vZH+/uPhF0ErXPozUUg5aRCCZprRMhhgN7HKrCkjaMo5 zUzgbo3swAZbbdViKNbN7+H2ILbe3ZWoRS68Y46573sN5Mh42QPYzKP2+eHV3syH hL7cZ6933IATAQ== -----END CERTIFICATE-----Generated at Sat Aug 23 10:10:03 2025 by rpki-client