$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/5b/5e5c30-8aa4-47e8-bd8f-fbe1a0d0aa98/1/VXsKwQuGQqJ909dO1ste4EXme5c.mft File: VXsKwQuGQqJ909dO1ste4EXme5c.mft (raw, json) Hash identifier: gvGb0Fut2JKtLcWDai1l4TTr1U+Bio+Powqs8nFTkxM= Subject key identifier: 21:65:8E:FB:69:79:F9:D0:97:BE:1B:4C:8C:95:FD:29:E3:80:12:FF Authority key identifier: 55:7B:0A:C1:0B:86:42:A2:7D:D3:D7:4E:D6:CB:5E:E0:45:E6:7B:97 Certificate issuer: /CN=557b0ac10b8642a27dd3d74ed6cb5ee045e67b97 Certificate serial: 0198D69835EAD92D81233AFB710B432833F5 Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/VXsKwQuGQqJ909dO1ste4EXme5c.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/5b/5e5c30-8aa4-47e8-bd8f-fbe1a0d0aa98/1/VXsKwQuGQqJ909dO1ste4EXme5c.mft Manifest number: 0AA1 Signing time: Sat 23 Aug 2025 11:02:35 +0000 Manifest this update: Sat 23 Aug 2025 11:02:35 +0000 Manifest next update: Sun 24 Aug 2025 11:02:35 +0000 Files and hashes: 1: 21k07trihuOq_p0d1xoi4bxuPZA.roa (hash: 7OFU6XWsgxZjBgc5/9Z26TjwR0mC8/oQG4kPqRbf13g=) 2: 4iaJi_OBKAE3o8h175iBu_IZyfI.roa (hash: lDCEAMXE0clsOMjNyholsrUDxhoIrjK4k3xcCfxPkUY=) 3: 5BopT6zWN2-PdGYdxH2aUB0jmhg.roa (hash: /mHqZKMlZJCdgH7Kawl3aGGRgWwqt/sVMAcpLcw5mXU=) 4: Geel9OdOaQ9FlrEzFHKlpiWE30U.roa (hash: mEBGWZVn+mmpTlkiNI5Af3AFG/t42zkx+akYj/Nw/0M=) 5: JWpMTh79Cpipv8z2TiqFetsx4Z0.roa (hash: EeuLpYtgLdl6hvIb6vNrTtAuFpAgpCnIwfpYkuwZmkQ=) 6: ORkWSvHyz7xVlACj3J643SMA1t4.roa (hash: 9HyAWLxiFAOsSF7hRfVc73gtPaqofO7sI7vq8SdYSfA=) 7: Tg1n5Fp1pJd7zBO6W_NcYtcUcjs.roa (hash: 2JSaIkit5yVDVUZV0/gM1VkpGy+fdm5Z9IWeQFjGnCA=) 8: VXsKwQuGQqJ909dO1ste4EXme5c.crl (hash: GxqExiWh6TWxyFGsJqj5YHr2OyGQqqtJQ4naW8mu3N8=) 9: eEIU-7XZaVcC-f6y_l8FbyGXkYs.roa (hash: ccjF0pRALTvlsj4nghUXMFhD4eJgmm2vuAU1GU9bybw=) 10: gk0o9JIYrdgKiCEVnFxYDFCmm6g.roa (hash: U5lgDtUaYRY5Jq/t8D2zh/ImkX7ABdChH50k3iWkRSA=) 11: isVEUZfOAYWgwQz8Wasb0pXP9-c.roa (hash: KMpoK0MvGBO62nHjsAV0aozmo8+TgCC0xqPegTe+AGU=) 12: plBE2K-1jhmKq6eM8fW4KaXWZeQ.roa (hash: Fhmhnyiel4/Ua1E2ksX/40TvHfAVYkZD+dMm3wF8AAw=) 13: q5iwhkLWHaHzrsMDMRUmBmBn11k.roa (hash: 2neeMv5dtKfWXLBDuxY5lIZ8bbDinZSWs3Ol+x9qe8Y=) 14: qGHwRT5XaADoYIFvBSiB_qBc8VI.roa (hash: 1jerdKXo29tvZCLipnWCYRKXmzqu+SKDN+L+wjo2w8c=) 15: qSnacK2T8IuqCW3tI5c1Sj5K99M.roa (hash: WK1c1s6zKzUYTVUxjbT3jBDMbmv6j/g+GMi3AvdtgQY=) 16: rCp1o_nOqwsF2hOj4c5kBCN-sNQ.roa (hash: hkXBdU7Mx+s+1UvYnZlcv2/hPwhLGz/FrQNM7+jLYxI=) 17: uNvKhwe5KEaAzLU0ACWU9sZ7Bm4.roa (hash: jacfmgDqnbUtNbN3r/NGjMzBlVkGGEbKEgbjHG7ah6U=) Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/5b/5e5c30-8aa4-47e8-bd8f-fbe1a0d0aa98/1/VXsKwQuGQqJ909dO1ste4EXme5c.crl rsync://rpki.ripe.net/repository/DEFAULT/5b/5e5c30-8aa4-47e8-bd8f-fbe1a0d0aa98/1/VXsKwQuGQqJ909dO1ste4EXme5c.mft rsync://rpki.ripe.net/repository/DEFAULT/VXsKwQuGQqJ909dO1ste4EXme5c.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Sun 24 Aug 2025 05:01:29 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:98:d6:98:35:ea:d9:2d:81:23:3a:fb:71:0b:43:28:33:f5 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=557b0ac10b8642a27dd3d74ed6cb5ee045e67b97 Validity Not Before: Aug 23 11:02:35 2025 GMT Not After : Aug 24 11:02:35 2025 GMT Subject: CN=21658efb6979f9d097be1b4c8c95fd29e38012ff Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:b1:39:65:67:ab:5c:2d:44:d2:a1:69:4d:9e:ef: 22:86:5a:07:c1:d0:fa:6b:96:ef:ae:a8:68:49:28: 0f:6d:83:68:70:92:cc:ef:62:fb:cb:f9:5a:f8:65: d1:8e:ff:81:09:a5:46:3d:65:26:f3:5b:f5:df:13: db:77:9d:9e:d9:f9:e3:0a:b9:5b:6c:86:cd:b1:c5: 1a:7b:16:31:b7:75:ee:99:63:88:b2:c0:fc:f3:5c: c5:0d:aa:c7:97:2f:12:85:2b:1a:1f:c2:74:1a:8a: 7e:fa:47:ab:48:85:41:6d:cc:0c:d9:d7:05:89:31: 8d:a2:04:5f:b5:97:8d:eb:4f:d5:db:72:46:87:14: de:29:a6:8e:e5:a4:f4:b7:9c:9f:c2:b7:8b:3a:05: d5:f4:4d:42:22:47:59:37:da:78:5e:51:eb:75:41: a8:ed:8c:09:08:56:a1:2b:d5:1e:36:07:4f:9e:c6: 52:6f:d2:70:6a:30:77:06:ef:7b:be:0f:e2:c3:1f: 13:d6:4a:cd:9a:61:bc:6d:15:bb:24:0c:ee:f8:b1: 00:4a:26:eb:10:22:64:2a:06:16:33:5e:ff:3f:22: 45:47:f2:44:16:54:86:59:33:bd:4f:47:f8:bc:08: 79:c9:c3:6d:3e:93:4a:c6:1a:8c:87:5f:31:70:ba: 48:01 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 21:65:8E:FB:69:79:F9:D0:97:BE:1B:4C:8C:95:FD:29:E3:80:12:FF X509v3 Authority Key Identifier: keyid:55:7B:0A:C1:0B:86:42:A2:7D:D3:D7:4E:D6:CB:5E:E0:45:E6:7B:97 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/VXsKwQuGQqJ909dO1ste4EXme5c.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/5b/5e5c30-8aa4-47e8-bd8f-fbe1a0d0aa98/1/VXsKwQuGQqJ909dO1ste4EXme5c.mft X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/5b/5e5c30-8aa4-47e8-bd8f-fbe1a0d0aa98/1/VXsKwQuGQqJ909dO1ste4EXme5c.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 3c:e4:89:a9:03:46:38:96:22:83:ea:5e:d5:01:8f:16:21:ce: bf:bd:b9:6b:47:25:d9:57:54:dc:af:d2:49:5f:05:47:d7:2e: ad:2e:85:e0:ec:88:fa:0d:63:6b:21:73:bc:13:f1:f4:f7:70: a8:be:a9:59:3e:a4:4c:8d:0e:41:fe:a4:f8:18:b2:82:3a:a9: 8a:b9:97:b6:2b:2b:76:3a:0d:a4:a7:45:4c:ce:5a:38:63:25: f6:26:a1:82:0b:ac:54:55:4b:ac:8e:8b:8d:62:f9:3c:03:23: 4e:de:13:90:94:f6:b8:7f:d6:bd:ab:72:07:b6:91:62:0b:93: f9:e1:32:88:ae:17:a2:5a:78:01:82:2e:55:be:99:08:0d:1e: e6:82:41:41:5f:a4:e7:ba:35:fb:80:ed:97:2a:95:b9:6e:33: 24:29:f3:60:57:e4:36:96:26:00:6f:b5:30:02:ed:14:21:02: 83:51:98:25:09:fd:e4:a7:7b:d1:69:9f:d2:23:25:f1:f7:4d: dd:3d:8e:21:cd:bb:59:ba:bd:dd:c8:ae:83:77:ea:30:ad:45: 48:0e:f9:13:35:0b:b5:fb:91:4f:d8:43:15:62:26:a0:d1:c5: b0:3c:11:2c:f6:79:96:5d:d9:51:2c:97:34:20:78:e1:c4:e8: ca:c1:fe:61 -----BEGIN CERTIFICATE----- MIIFFjCCA/6gAwIBAgISAZjWmDXq2S2BIzr7cQtDKDP1MA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKDU1N2IwYWMxMGI4NjQyYTI3ZGQzZDc0ZWQ2Y2I1ZWUwNDVl NjdiOTcwHhcNMjUwODIzMTEwMjM1WhcNMjUwODI0MTEwMjM1WjAzMTEwLwYDVQQD EygyMTY1OGVmYjY5NzlmOWQwOTdiZTFiNGM4Yzk1ZmQyOWUzODAxMmZmMIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAsTllZ6tcLUTSoWlNnu8ihloHwdD6 a5bvrqhoSSgPbYNocJLM72L7y/la+GXRjv+BCaVGPWUm81v13xPbd52e2fnjCrlb bIbNscUaexYxt3XumWOIssD881zFDarHly8ShSsaH8J0Gop++kerSIVBbcwM2dcF iTGNogRftZeN60/V23JGhxTeKaaO5aT0t5yfwreLOgXV9E1CIkdZN9p4XlHrdUGo 7YwJCFahK9UeNgdPnsZSb9JwajB3Bu97vg/iwx8T1krNmmG8bRW7JAzu+LEASibr ECJkKgYWM17/PyJFR/JEFlSGWTO9T0f4vAh5ycNtPpNKxhqMh18xcLpIAQIDAQAB o4ICIjCCAh4wHQYDVR0OBBYEFCFljvtpefnQl74bTIyV/SnjgBL/MB8GA1UdIwQY MBaAFFV7CsELhkKifdPXTtbLXuBF5nuXMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvVlhzS3dRdUdRcUo5MDlkTzFzdGU0RVhtZTVjLmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC81Yi81ZTVjMzAtOGFhNC00N2U4LWJkOGYt ZmJlMWEwZDBhYTk4LzEvVlhzS3dRdUdRcUo5MDlkTzFzdGU0RVhtZTVjLm1mdDCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC81Yi81ZTVjMzAtOGFhNC00N2U4LWJkOGYtZmJlMWEwZDBhYTk4 LzEvVlhzS3dRdUdRcUo5MDlkTzFzdGU0RVhtZTVjLmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAPOSJqQNG OJYig+pe1QGPFiHOv725a0cl2VdU3K/SSV8FR9curS6F4OyI+g1jayFzvBPx9Pdw qL6pWT6kTI0OQf6k+BiygjqpirmXtisrdjoNpKdFTM5aOGMl9iahggusVFVLrI6L jWL5PAMjTt4TkJT2uH/WvatyB7aRYguT+eEyiK4Xolp4AYIuVb6ZCA0e5oJBQV+k 57o1+4DtlyqVuW4zJCnzYFfkNpYmAG+1MALtFCECg1GYJQn95Kd70Wmf0iMl8fdN 3T2OIc27Wbq93ciug3fqMK1FSA75EzULtfuRT9hDFWImoNHFsDwRLPZ5ll3ZUSyX NCB44cToysH+YQ== -----END CERTIFICATE-----Generated at Sat Aug 23 13:32:23 2025 by rpki-client