$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/5f/b4d75d-953a-4036-9839-57cd68d9cb4e/1/_2mO6y5J_LX5xlqZhXrynOBmQdk.mft File: _2mO6y5J_LX5xlqZhXrynOBmQdk.mft (raw, json) Hash identifier: 6+/bCx5Tk/IM9g8oHlJdy1aOq/2MXES/EA9nFh8adms= Subject key identifier: D7:20:AC:FC:DC:6F:57:3A:76:91:73:4D:99:5A:DC:93:38:6F:1B:5B Authority key identifier: FF:69:8E:EB:2E:49:FC:B5:F9:C6:5A:99:85:7A:F2:9C:E0:66:41:D9 Certificate issuer: /CN=ff698eeb2e49fcb5f9c65a99857af29ce06641d9 Certificate serial: 0198D54E150A727EF65CDAE027A014066162 Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/_2mO6y5J_LX5xlqZhXrynOBmQdk.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/5f/b4d75d-953a-4036-9839-57cd68d9cb4e/1/_2mO6y5J_LX5xlqZhXrynOBmQdk.mft Manifest number: 1654 Signing time: Sat 23 Aug 2025 05:02:00 +0000 Manifest this update: Sat 23 Aug 2025 05:02:00 +0000 Manifest next update: Sun 24 Aug 2025 05:02:00 +0000 Files and hashes: 1: 0nspkNZBD4AF3c6BuZHawbNEn4s.roa (hash: uIJdsMvT5D3zL8bAjl80cE2Pwz5BnxnpyFyZ11QSq50=) 2: 54-UEvGfxV4WPcy4WxLxIFxxE-U.roa (hash: ojna0RnGjI7OjDPWs+roB1Amf6WKyl5pMZi5IPEPWP8=) 3: 5Tf-mqxbzy7qofAM2dNl7l1t3mU.roa (hash: 6mVr252OaOJiHsmGk/+j0aXnhIUGcpjMKQ+02iLXgcA=) 4: HIpztZT__B_f9n2gN6auamR5pIU.roa (hash: rJY52okWB1TeezbKU/iuTbv7tjIWb1W5p6bbeWIcdzo=) 5: LuyH1oX8EXWypVZ7iAaDpvRYVVc.roa (hash: PwqXxZGK4PUOy9TXRGdRnGJ0Q9f2SZmolPNVfAk0WgM=) 6: NkdsfBqVz48X5H2Y1WQJSu8vlt4.roa (hash: tuiwHFcQQ4SB/tCeR0sJ8nBN9XREzDRoO1cXDj6kEqo=) 7: UjPxDMGW7lYqCuTCh7JHOA6hizY.roa (hash: ANkRdXMj6bkHEGkvb/XWLCpMoxX6nYg0dbetuBTbz8U=) 8: _2mO6y5J_LX5xlqZhXrynOBmQdk.crl (hash: qjrcnJtCu+hsqURnOwnU0JYbkLaoP8cV/uYSUyk/uuc=) 9: jqfbqOe3Dnj2fXOhZ9LOHypCFAI.roa (hash: /x0Hcf4qFuhf8+J5QzDuB3C52+I2nDMc1dbR/JkR1Cw=) 10: meQ5SBMnqJBkFHe-JOcEGhCsKFY.roa (hash: TMc5toGudrJJLzHO6dJLOGc8MvIeTEaZ3Nzvom9Ftsw=) Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/5f/b4d75d-953a-4036-9839-57cd68d9cb4e/1/_2mO6y5J_LX5xlqZhXrynOBmQdk.crl rsync://rpki.ripe.net/repository/DEFAULT/5f/b4d75d-953a-4036-9839-57cd68d9cb4e/1/_2mO6y5J_LX5xlqZhXrynOBmQdk.mft rsync://rpki.ripe.net/repository/DEFAULT/_2mO6y5J_LX5xlqZhXrynOBmQdk.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Sun 24 Aug 2025 05:01:29 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:98:d5:4e:15:0a:72:7e:f6:5c:da:e0:27:a0:14:06:61:62 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=ff698eeb2e49fcb5f9c65a99857af29ce06641d9 Validity Not Before: Aug 23 05:02:00 2025 GMT Not After : Aug 24 05:02:00 2025 GMT Subject: CN=d720acfcdc6f573a7691734d995adc93386f1b5b Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:9b:07:1b:0b:3b:51:46:7f:c3:02:2c:c8:57:5b: 89:57:de:28:5f:93:89:ba:f7:4c:09:69:04:41:a7: 15:5c:94:b8:17:55:75:da:2f:36:6f:9d:ad:c2:91: e3:1d:91:5b:d7:c2:00:d5:77:83:fd:18:8f:d7:67: 55:a8:e3:88:6b:6d:9d:21:2d:cd:92:24:7a:14:4e: 69:84:dc:94:e3:75:71:a5:95:ec:02:d3:8e:75:44: 1f:e1:96:50:64:bb:34:a5:64:3b:a9:00:b4:57:52: 38:25:23:d1:5c:86:e5:a7:ed:2c:c6:10:fd:ec:ef: 47:1f:6c:54:06:9d:fe:f2:7c:78:3a:be:ee:15:38: 99:7c:0a:ec:5f:61:38:4b:f0:6a:b2:77:00:f7:41: 4b:d7:e6:3f:16:08:1b:df:9c:61:6e:ed:3a:c4:ed: 31:7a:6c:cd:2b:d0:e4:fa:2c:15:85:a5:41:e7:ac: 1d:16:09:3e:b7:7b:3b:9c:e5:77:4f:d9:fa:ee:9c: bc:e4:bb:d2:28:50:d2:2b:02:50:82:1c:e6:61:e4: 4b:76:d7:bd:75:92:bd:67:78:91:03:6b:4f:91:47: b8:7f:6d:8c:30:eb:e8:8b:cc:9e:09:55:27:34:51: f7:6b:c8:99:b8:b3:ca:8a:a5:12:50:c9:6f:f9:7b: 9a:05 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: D7:20:AC:FC:DC:6F:57:3A:76:91:73:4D:99:5A:DC:93:38:6F:1B:5B X509v3 Authority Key Identifier: keyid:FF:69:8E:EB:2E:49:FC:B5:F9:C6:5A:99:85:7A:F2:9C:E0:66:41:D9 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/_2mO6y5J_LX5xlqZhXrynOBmQdk.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/5f/b4d75d-953a-4036-9839-57cd68d9cb4e/1/_2mO6y5J_LX5xlqZhXrynOBmQdk.mft X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/5f/b4d75d-953a-4036-9839-57cd68d9cb4e/1/_2mO6y5J_LX5xlqZhXrynOBmQdk.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 9e:57:c5:9e:d7:5b:26:52:04:5e:13:01:16:9e:33:23:1d:a6: 87:8c:2a:e8:3a:cf:66:35:f8:47:e7:7f:9f:eb:b0:62:74:2e: c3:94:23:38:1d:e5:78:89:14:b6:f2:10:64:e7:52:40:cf:d3: 1a:86:55:e0:17:05:13:71:6b:c6:8e:4b:e2:39:ad:2d:79:df: 47:6a:08:1f:27:f5:a8:cc:4d:e5:d7:9a:e6:a6:0e:7f:77:fe: 4d:48:8e:fe:35:76:63:73:30:0f:16:a1:70:21:a6:fc:ce:2d: e3:d3:6d:b7:32:81:4e:40:37:05:a1:db:5d:18:0c:6c:36:4e: 24:cc:29:98:c5:c7:92:88:2f:41:f2:8f:2f:15:13:5f:31:1e: 01:35:50:9a:ed:7c:13:5f:15:95:4c:bf:93:58:8b:8e:ea:8b: e3:8b:9f:17:e3:e1:f6:ee:56:b9:44:1b:e2:0d:0b:6d:20:0e: b3:bb:be:f4:ce:42:ef:5d:1a:69:3b:1f:8e:36:06:cf:a1:61: 60:14:43:cf:f4:96:ea:8b:de:74:15:f1:a5:9f:21:3d:ff:38: f7:e3:e9:93:8e:72:f0:bd:d6:47:a6:1f:17:73:57:0c:aa:87: 6f:e3:d7:6f:c3:a4:52:ef:30:79:40:91:86:80:eb:90:8a:80: db:3f:e3:03 -----BEGIN CERTIFICATE----- MIIFFjCCA/6gAwIBAgISAZjVThUKcn72XNrgJ6AUBmFiMA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKGZmNjk4ZWViMmU0OWZjYjVmOWM2NWE5OTg1N2FmMjljZTA2 NjQxZDkwHhcNMjUwODIzMDUwMjAwWhcNMjUwODI0MDUwMjAwWjAzMTEwLwYDVQQD EyhkNzIwYWNmY2RjNmY1NzNhNzY5MTczNGQ5OTVhZGM5MzM4NmYxYjViMIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAmwcbCztRRn/DAizIV1uJV94oX5OJ uvdMCWkEQacVXJS4F1V12i82b52twpHjHZFb18IA1XeD/RiP12dVqOOIa22dIS3N kiR6FE5phNyU43VxpZXsAtOOdUQf4ZZQZLs0pWQ7qQC0V1I4JSPRXIblp+0sxhD9 7O9HH2xUBp3+8nx4Or7uFTiZfArsX2E4S/BqsncA90FL1+Y/Fggb35xhbu06xO0x emzNK9Dk+iwVhaVB56wdFgk+t3s7nOV3T9n67py85LvSKFDSKwJQghzmYeRLdte9 dZK9Z3iRA2tPkUe4f22MMOvoi8yeCVUnNFH3a8iZuLPKiqUSUMlv+XuaBQIDAQAB o4ICIjCCAh4wHQYDVR0OBBYEFNcgrPzcb1c6dpFzTZla3JM4bxtbMB8GA1UdIwQY MBaAFP9pjusuSfy1+cZamYV68pzgZkHZMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvXzJtTzZ5NUpfTFg1eGxxWmhYcnluT0JtUWRrLmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC81Zi9iNGQ3NWQtOTUzYS00MDM2LTk4Mzkt NTdjZDY4ZDljYjRlLzEvXzJtTzZ5NUpfTFg1eGxxWmhYcnluT0JtUWRrLm1mdDCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC81Zi9iNGQ3NWQtOTUzYS00MDM2LTk4MzktNTdjZDY4ZDljYjRl LzEvXzJtTzZ5NUpfTFg1eGxxWmhYcnluT0JtUWRrLmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAnlfFntdb JlIEXhMBFp4zIx2mh4wq6DrPZjX4R+d/n+uwYnQuw5QjOB3leIkUtvIQZOdSQM/T GoZV4BcFE3Frxo5L4jmtLXnfR2oIHyf1qMxN5dea5qYOf3f+TUiO/jV2Y3MwDxah cCGm/M4t49NttzKBTkA3BaHbXRgMbDZOJMwpmMXHkogvQfKPLxUTXzEeATVQmu18 E18VlUy/k1iLjuqL44ufF+Ph9u5WuUQb4g0LbSAOs7u+9M5C710aaTsfjjYGz6Fh YBRDz/SW6ovedBXxpZ8hPf849+Ppk45y8L3WR6YfF3NXDKqHb+PXb8OkUu8weUCR hoDrkIqA2z/jAw== -----END CERTIFICATE-----Generated at Sat Aug 23 13:51:58 2025 by rpki-client