$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/5f/956db9-c8f7-4b9f-a56e-bc6db7248add/1/cPmxat8v0xmIhZkitEV0gd1-70A.mft File: cPmxat8v0xmIhZkitEV0gd1-70A.mft (raw, json) Hash identifier: DTvMnuDj19EMDorkeONZYkaIcNe0IDS4KsVc2mwozag= Subject key identifier: A9:5E:70:AE:08:EE:7D:19:7A:55:F6:DE:CB:0B:39:85:B9:21:74:88 Authority key identifier: 70:F9:B1:6A:DF:2F:D3:19:88:85:99:22:B4:45:74:81:DD:7E:EF:40 Certificate issuer: /CN=70f9b16adf2fd31988859922b4457481dd7eef40 Certificate serial: 0198D54E9267670104ABF6240D50B540A61F Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/cPmxat8v0xmIhZkitEV0gd1-70A.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/5f/956db9-c8f7-4b9f-a56e-bc6db7248add/1/cPmxat8v0xmIhZkitEV0gd1-70A.mft Manifest number: 13E3 Signing time: Sat 23 Aug 2025 05:02:32 +0000 Manifest this update: Sat 23 Aug 2025 05:02:32 +0000 Manifest next update: Sun 24 Aug 2025 05:02:32 +0000 Files and hashes: 1: 5WpWrypca4XGx0ISHtuZYRT_cno.roa (hash: R8ZoU8UZw1Z3gy7t3IJTFumdlDzgJjWSubPKAJkbvV0=) 2: 6Tq_leUsVpFgI85zp_wIyChN4WA.roa (hash: //rXy+p6IdrQ6jHZrRlFQGf563PHiLpmYBPTnbSHBxk=) 3: 8-icgNG9YFfARW17qjTdCn9yD80.roa (hash: vebs5VRK2d7EVc4VYZnrKXN0FKJQS1X4sYhCt1gzy4o=) 4: 8wA7Z8R93JqOIr4nUCX1S5SLIf0.roa (hash: 8DXy5Yj333BXczsMQt5oYuiRo4BwLMddhajfUUPGovk=) 5: ElpdsCAHWnrspf_BQqwQgScgsBo.roa (hash: qGJ7OM5aBe7dvyjzLtp4kDohE2tNL4nfvnY6+uLyiBw=) 6: JOBERo-vgg6dldBoWViTCfV7X-A.roa (hash: ce+d5taUPY+G9x5sjcA70ndAe38v7dhbZx0JrAG/CD4=) 7: RYSW4-JdkoBKfIznV9vyOBl6v0k.roa (hash: tfbM0g7bQsYb1raiS9o3/ZoSCJhkN7ErYxyrCWx4xjs=) 8: T1V76bxlhezLMl4Tzlvgqgk0pcg.roa (hash: Hk9kWyBSS3VZQ3ORtc2F2qsaXDclUxsqlus/HDJzLds=) 9: Z5phhVwVfpK6dkc5C1-vYmhcYUU.roa (hash: iIyIPk2NBxkdVR06TYJeH+vh01QOalQb+F2tpumtM+w=) 10: cPmxat8v0xmIhZkitEV0gd1-70A.crl (hash: 9H8ERywMwdz1RuYyaiDxj6TYnuAHX9flaUFZBFxfeWo=) 11: ezMLdhISIqr2PAqGoulAf-qQ6FY.roa (hash: MoVmtNQ9G0A/NJidABkGuBmF42AfIIukbBtAhp8lY68=) 12: fC3AtSHj4uWnRNCJOJWyffnxb_c.roa (hash: k4yZxxd7Kbg9gUH1VtnIM62vxLC45Jz4VtvfU0eH3rQ=) 13: mA4IEAHXR0LDJS0AO7AgvdyymfA.roa (hash: B62czMPy2pKQJ5FL2R2C5ZUZdywtpL+Cj+O5hZ16Rv4=) 14: qQMnV_AHkaoypfzXBStNqOIC8i4.roa (hash: 8/gHPP6AgbL3NuW+OG2JLB+jSLFsV5WrdZq7Of0LMpg=) 15: t-GC4kGf7lvSnOYAiTpgmlkKEL4.roa (hash: 9rNbslHDQxGg0Ew50MQa2Fk3HC4+vs4VNNeusuZLYr8=) Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/5f/956db9-c8f7-4b9f-a56e-bc6db7248add/1/cPmxat8v0xmIhZkitEV0gd1-70A.crl rsync://rpki.ripe.net/repository/DEFAULT/5f/956db9-c8f7-4b9f-a56e-bc6db7248add/1/cPmxat8v0xmIhZkitEV0gd1-70A.mft rsync://rpki.ripe.net/repository/DEFAULT/cPmxat8v0xmIhZkitEV0gd1-70A.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Sun 24 Aug 2025 05:01:29 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:98:d5:4e:92:67:67:01:04:ab:f6:24:0d:50:b5:40:a6:1f Signature Algorithm: sha256WithRSAEncryption Issuer: CN=70f9b16adf2fd31988859922b4457481dd7eef40 Validity Not Before: Aug 23 05:02:32 2025 GMT Not After : Aug 24 05:02:32 2025 GMT Subject: CN=a95e70ae08ee7d197a55f6decb0b3985b9217488 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:ac:62:78:43:e1:e3:40:8d:7d:ef:55:1c:b7:74: 39:ff:7f:9f:da:50:2a:e6:4b:15:b8:83:d1:86:6a: 96:a6:57:3d:75:63:be:d4:dc:40:a0:0a:ed:89:41: b0:19:6b:cb:2c:c3:99:cd:7f:78:75:98:27:4d:d5: 3d:38:85:b7:20:49:aa:59:f3:c6:df:c0:9c:c3:40: 9f:54:b8:35:65:c0:a9:09:9a:38:7f:56:cc:bd:6f: de:16:6a:16:31:37:f4:dd:07:ed:f9:0b:39:6a:07: 4a:12:4d:a7:2a:cf:c7:de:29:67:a0:f5:f1:b4:e0: b3:06:f7:fd:ec:19:16:99:ed:78:ce:d0:05:be:11: b1:a5:96:7f:03:88:85:65:15:0a:b2:ca:72:6b:1e: 39:72:a0:83:5b:4b:2b:fe:fb:f3:01:e7:5b:1c:fe: 4a:a4:43:23:79:44:d3:73:d6:37:8a:c0:92:40:ab: e4:ba:c2:de:d2:44:22:f4:16:98:67:54:6e:74:a8: 04:60:50:3d:99:90:51:63:89:e7:04:22:0d:29:d8: 0c:b4:64:07:2a:9a:cd:c1:c0:bf:03:e6:17:aa:7d: b9:a2:47:3d:30:d5:57:8c:d9:c6:90:61:7f:b0:83: 80:1c:e5:c4:20:7c:2f:f5:78:46:e0:c4:50:52:3a: 54:11 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: A9:5E:70:AE:08:EE:7D:19:7A:55:F6:DE:CB:0B:39:85:B9:21:74:88 X509v3 Authority Key Identifier: keyid:70:F9:B1:6A:DF:2F:D3:19:88:85:99:22:B4:45:74:81:DD:7E:EF:40 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/cPmxat8v0xmIhZkitEV0gd1-70A.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/5f/956db9-c8f7-4b9f-a56e-bc6db7248add/1/cPmxat8v0xmIhZkitEV0gd1-70A.mft X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/5f/956db9-c8f7-4b9f-a56e-bc6db7248add/1/cPmxat8v0xmIhZkitEV0gd1-70A.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 62:54:37:54:73:ed:b2:0d:d4:22:dc:96:d4:36:ff:20:1c:97: e0:f4:49:ff:4a:f6:b5:6a:11:53:26:4f:66:c0:01:97:44:6a: ce:ed:a9:2c:03:f6:db:bb:42:9e:97:75:98:39:b7:17:48:05: 31:6f:5c:0f:b1:50:73:8f:26:e6:aa:f0:89:4b:aa:da:71:61: 35:7b:6e:88:93:b8:6e:74:27:48:45:82:a8:9b:b4:0d:43:ed: 15:e0:80:60:ac:bf:56:83:8c:dd:92:f6:72:eb:97:5f:97:2f: 2b:a6:bd:d6:fa:54:e5:86:3e:6b:2d:6a:92:d6:f4:ef:0e:57: 49:8e:3f:35:9b:bc:dd:04:2d:8e:14:c4:93:90:98:68:4a:75: f0:e8:b8:dc:b4:12:24:8f:87:97:86:d7:ba:f2:c0:3c:de:5c: 3c:60:9f:06:24:59:43:02:58:f2:e9:cd:5e:ba:33:95:22:45: 3d:de:fb:f9:a4:15:06:79:73:da:19:1b:00:51:9f:b7:a9:90: 67:b2:80:10:44:d0:b1:aa:31:5c:fa:53:ac:14:f0:31:07:d0: 2e:4f:90:15:b4:ba:4d:c5:7f:82:2b:d9:e0:a0:76:66:ea:96: c2:9c:f9:f1:46:59:09:1b:fb:ae:7a:6a:da:94:8f:65:bd:60: a7:5c:dc:44 -----BEGIN CERTIFICATE----- MIIFFjCCA/6gAwIBAgISAZjVTpJnZwEEq/YkDVC1QKYfMA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKDcwZjliMTZhZGYyZmQzMTk4ODg1OTkyMmI0NDU3NDgxZGQ3 ZWVmNDAwHhcNMjUwODIzMDUwMjMyWhcNMjUwODI0MDUwMjMyWjAzMTEwLwYDVQQD EyhhOTVlNzBhZTA4ZWU3ZDE5N2E1NWY2ZGVjYjBiMzk4NWI5MjE3NDg4MIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEArGJ4Q+HjQI1971Uct3Q5/3+f2lAq 5ksVuIPRhmqWplc9dWO+1NxAoArtiUGwGWvLLMOZzX94dZgnTdU9OIW3IEmqWfPG 38Ccw0CfVLg1ZcCpCZo4f1bMvW/eFmoWMTf03Qft+Qs5agdKEk2nKs/H3ilnoPXx tOCzBvf97BkWme14ztAFvhGxpZZ/A4iFZRUKsspyax45cqCDW0sr/vvzAedbHP5K pEMjeUTTc9Y3isCSQKvkusLe0kQi9BaYZ1RudKgEYFA9mZBRY4nnBCINKdgMtGQH KprNwcC/A+YXqn25okc9MNVXjNnGkGF/sIOAHOXEIHwv9XhG4MRQUjpUEQIDAQAB o4ICIjCCAh4wHQYDVR0OBBYEFKlecK4I7n0ZelX23ssLOYW5IXSIMB8GA1UdIwQY MBaAFHD5sWrfL9MZiIWZIrRFdIHdfu9AMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvY1BteGF0OHYweG1JaFpraXRFVjBnZDEtNzBBLmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC81Zi85NTZkYjktYzhmNy00YjlmLWE1NmUt YmM2ZGI3MjQ4YWRkLzEvY1BteGF0OHYweG1JaFpraXRFVjBnZDEtNzBBLm1mdDCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC81Zi85NTZkYjktYzhmNy00YjlmLWE1NmUtYmM2ZGI3MjQ4YWRk LzEvY1BteGF0OHYweG1JaFpraXRFVjBnZDEtNzBBLmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAYlQ3VHPt sg3UItyW1Db/IByX4PRJ/0r2tWoRUyZPZsABl0Rqzu2pLAP227tCnpd1mDm3F0gF MW9cD7FQc48m5qrwiUuq2nFhNXtuiJO4bnQnSEWCqJu0DUPtFeCAYKy/VoOM3ZL2 cuuXX5cvK6a91vpU5YY+ay1qktb07w5XSY4/NZu83QQtjhTEk5CYaEp18Oi43LQS JI+Hl4bXuvLAPN5cPGCfBiRZQwJY8unNXrozlSJFPd77+aQVBnlz2hkbAFGft6mQ Z7KAEETQsaoxXPpTrBTwMQfQLk+QFbS6TcV/givZ4KB2ZuqWwpz58UZZCRv7rnpq 2pSPZb1gp1zcRA== -----END CERTIFICATE-----Generated at Sat Aug 23 14:36:07 2025 by rpki-client