$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/6e/829fdf-ba63-4c23-91d1-d2bbf37dabb4/1/C1Vqy187lhtcwkoplfNO6R953BY.mft File: C1Vqy187lhtcwkoplfNO6R953BY.mft (raw, json) Hash identifier: 5FVF4OzYn9quxWOGrfoQoW15Ddvd9adY1+t7egDTtHI= Subject key identifier: 21:FF:FB:46:31:CC:71:26:D6:2C:19:A4:71:47:97:E1:3B:80:2E:2E Authority key identifier: 0B:55:6A:CB:5F:3B:96:1B:5C:C2:4A:29:95:F3:4E:E9:1F:79:DC:16 Certificate issuer: /CN=0b556acb5f3b961b5cc24a2995f34ee91f79dc16 Certificate serial: 0198D472DF1A81224994E4DE52A2F327EBAE Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/C1Vqy187lhtcwkoplfNO6R953BY.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/6e/829fdf-ba63-4c23-91d1-d2bbf37dabb4/1/C1Vqy187lhtcwkoplfNO6R953BY.mft Manifest number: 1668 Signing time: Sat 23 Aug 2025 01:02:34 +0000 Manifest this update: Sat 23 Aug 2025 01:02:34 +0000 Manifest next update: Sun 24 Aug 2025 01:02:34 +0000 Files and hashes: 1: 7AEnLXSB1YaAfgMGKA-kT_KobA0.roa (hash: 5AKbmZJGLK7UnAttUygeGitl8Ob/t23TtR2u6flJg/c=) 2: C1Vqy187lhtcwkoplfNO6R953BY.crl (hash: ABoI33Eft60VuRPMwS0Z3B66mlLmnXuJqPC0TlKzvCw=) 3: QmJcakWH1CARNak1a46tlM2ytyE.roa (hash: v8cGIzbtBdgrBgCJGkJKF+awirm33gkAmHePtYlNHWc=) 4: Ufuhf0_wn9lleED4LQKhcdXKZLY.roa (hash: f4Ng8ktmuEshcdJiOHZjPJAwq7/nitwlptaYvO0/DHU=) 5: XFCPjaaIP04nEp4Rlitk1zUJ8nA.roa (hash: 9Hrw22EfwJiPVEvx9iOeq1/U32N9ujjXKgQDN7kPNnY=) 6: bzDr7kn2LfhqjYsoZQLZ-uHwvQI.roa (hash: ETCcL6Lmgpdi6iyG4gf+W9Umfg+Mzqif1q2dVBD62g4=) 7: e38Kg8iCKqOVcGx8ZyJTu1IrTwc.roa (hash: yWG15kNG/dsh9zB22D/eO5GMJKGaRyWMaUm0mhvs7uI=) 8: irmafOolxajIUAAu4T-WCDDYGuE.roa (hash: B2dN9t4bHqneaqFXcxWnKXREXDW4ZcJ7+Z7DVVfobpU=) 9: n7XNxY-sa2O-8oAFuyK34I07FxU.roa (hash: 7HgkBdxidw6ZJ5Ks5cBFOnu0xmnIR/zyHKV2JfMTPLM=) 10: nikI6XTmNMIUEKKUIOhaKpaRfTY.roa (hash: 3OTWr1t7MNgVLjxLDAQClENVYG0IMxrFr2dhuyh8iLU=) 11: pkcx_-V9HNVC8HzviAJSCvzoxJg.roa (hash: V4tEVQoUWw/5eT8C/Z8qztjVCTQ8kgfSRy2bETB0V2w=) 12: wq6Oybyru5PjGYeKDTrdRRIxOok.roa (hash: +NxS5vTeW/Lv7n0fJHcbikUT3d8Gb7EPQOKgAIeQnGs=) 13: xYF8GskQRTruWnq0Q7-vo_GqfiQ.roa (hash: cnwhIOGst+6jb701ygWNYFM0wdy5cssALvw1jcPBdd8=) Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/6e/829fdf-ba63-4c23-91d1-d2bbf37dabb4/1/C1Vqy187lhtcwkoplfNO6R953BY.crl rsync://rpki.ripe.net/repository/DEFAULT/6e/829fdf-ba63-4c23-91d1-d2bbf37dabb4/1/C1Vqy187lhtcwkoplfNO6R953BY.mft rsync://rpki.ripe.net/repository/DEFAULT/C1Vqy187lhtcwkoplfNO6R953BY.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Sat 23 Aug 2025 20:00:04 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:98:d4:72:df:1a:81:22:49:94:e4:de:52:a2:f3:27:eb:ae Signature Algorithm: sha256WithRSAEncryption Issuer: CN=0b556acb5f3b961b5cc24a2995f34ee91f79dc16 Validity Not Before: Aug 23 01:02:34 2025 GMT Not After : Aug 24 01:02:34 2025 GMT Subject: CN=21fffb4631cc7126d62c19a4714797e13b802e2e Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:9d:8c:e7:23:3b:2a:34:0b:7d:28:e2:53:11:2b: 74:59:e1:5d:28:7f:46:39:f1:07:16:37:8c:03:46: ea:17:ea:db:ff:05:ba:83:d1:14:db:51:41:36:52: 77:63:61:0c:c3:74:85:a9:bf:d4:00:41:0d:82:17: 75:80:1a:98:76:51:ae:25:27:f7:6c:fb:1d:ff:e9: 04:26:7a:84:5e:c6:03:90:4d:4a:65:62:2c:4f:43: 02:d2:67:c7:f0:b1:09:06:5a:68:67:13:ab:dd:e3: ce:93:01:d9:18:60:98:07:f4:c6:47:97:8f:1d:4f: 11:35:8b:21:78:6a:7b:0d:94:0a:80:61:94:e0:f5: fc:8d:63:15:1f:d9:36:1b:6e:64:37:de:49:49:f9: 57:65:21:be:48:6b:5c:63:2a:22:76:a3:fa:29:86: 97:33:d0:e5:82:b6:dc:07:6d:33:f2:e6:0b:34:83: c7:a0:c2:56:ed:98:66:7b:4e:a3:6a:89:69:1d:9c: e2:a3:fa:e0:5c:3b:0e:fa:fd:76:9d:97:76:4a:f1: 36:b5:fa:3f:be:8b:4b:8c:3a:48:57:87:b2:9f:6f: 79:94:07:00:40:45:32:e5:83:52:d1:a2:da:48:ab: 10:28:74:40:a8:0b:12:f3:e1:f2:2d:63:53:02:d9: d7:81 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 21:FF:FB:46:31:CC:71:26:D6:2C:19:A4:71:47:97:E1:3B:80:2E:2E X509v3 Authority Key Identifier: keyid:0B:55:6A:CB:5F:3B:96:1B:5C:C2:4A:29:95:F3:4E:E9:1F:79:DC:16 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/C1Vqy187lhtcwkoplfNO6R953BY.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/6e/829fdf-ba63-4c23-91d1-d2bbf37dabb4/1/C1Vqy187lhtcwkoplfNO6R953BY.mft X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/6e/829fdf-ba63-4c23-91d1-d2bbf37dabb4/1/C1Vqy187lhtcwkoplfNO6R953BY.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption a6:0b:03:65:3a:35:e3:32:42:87:12:47:14:08:67:e7:ab:c5: 7e:97:ae:33:68:cc:76:7d:8d:27:b5:c9:19:21:a2:8b:b0:69: d8:ec:62:d9:d6:8a:49:71:d7:7e:2d:ee:79:30:84:65:dc:6e: bb:16:39:dc:cb:44:e9:70:2a:b9:4c:73:e4:5a:e2:80:b1:3d: 0d:13:67:a9:88:e6:b8:0e:42:2d:0d:db:8c:36:3d:11:2c:cf: 47:1d:24:6c:f5:a6:42:34:94:fd:38:fa:9c:d2:72:d6:1b:b6: 0a:2a:9e:65:88:32:d2:0f:96:7f:bf:26:20:52:54:0c:ca:71: 6e:7d:0e:b0:94:41:58:00:9d:a2:b3:63:bb:36:9f:22:61:90: 5f:e2:26:a7:b1:97:99:35:52:49:32:4b:cd:0a:33:bd:10:6a: ee:c7:08:70:2c:80:b9:80:92:2c:43:d1:d7:2b:27:ac:27:58: f3:4a:2f:5f:6a:0b:2c:ae:b2:12:e5:57:e6:de:c3:df:fb:b7: 24:cb:b6:8e:1b:c6:96:98:95:1b:5b:02:69:13:6c:f0:8b:94: c0:00:45:0f:22:3a:b9:02:e4:bc:31:bf:a9:0a:d2:10:e2:70: 85:ab:b3:94:3e:22:f1:dc:15:07:e8:a0:3e:ee:28:51:fa:d6: 5e:99:39:a8 -----BEGIN CERTIFICATE----- MIIFFjCCA/6gAwIBAgISAZjUct8agSJJlOTeUqLzJ+uuMA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKDBiNTU2YWNiNWYzYjk2MWI1Y2MyNGEyOTk1ZjM0ZWU5MWY3 OWRjMTYwHhcNMjUwODIzMDEwMjM0WhcNMjUwODI0MDEwMjM0WjAzMTEwLwYDVQQD EygyMWZmZmI0NjMxY2M3MTI2ZDYyYzE5YTQ3MTQ3OTdlMTNiODAyZTJlMIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAnYznIzsqNAt9KOJTESt0WeFdKH9G OfEHFjeMA0bqF+rb/wW6g9EU21FBNlJ3Y2EMw3SFqb/UAEENghd1gBqYdlGuJSf3 bPsd/+kEJnqEXsYDkE1KZWIsT0MC0mfH8LEJBlpoZxOr3ePOkwHZGGCYB/TGR5eP HU8RNYsheGp7DZQKgGGU4PX8jWMVH9k2G25kN95JSflXZSG+SGtcYyoidqP6KYaX M9DlgrbcB20z8uYLNIPHoMJW7Zhme06jaolpHZzio/rgXDsO+v12nZd2SvE2tfo/ votLjDpIV4eyn295lAcAQEUy5YNS0aLaSKsQKHRAqAsS8+HyLWNTAtnXgQIDAQAB o4ICIjCCAh4wHQYDVR0OBBYEFCH/+0YxzHEm1iwZpHFHl+E7gC4uMB8GA1UdIwQY MBaAFAtVastfO5YbXMJKKZXzTukfedwWMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvQzFWcXkxODdsaHRjd2tvcGxmTk82Ujk1M0JZLmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC82ZS84MjlmZGYtYmE2My00YzIzLTkxZDEt ZDJiYmYzN2RhYmI0LzEvQzFWcXkxODdsaHRjd2tvcGxmTk82Ujk1M0JZLm1mdDCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC82ZS84MjlmZGYtYmE2My00YzIzLTkxZDEtZDJiYmYzN2RhYmI0 LzEvQzFWcXkxODdsaHRjd2tvcGxmTk82Ujk1M0JZLmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEApgsDZTo1 4zJChxJHFAhn56vFfpeuM2jMdn2NJ7XJGSGii7Bp2Oxi2daKSXHXfi3ueTCEZdxu uxY53MtE6XAquUxz5FrigLE9DRNnqYjmuA5CLQ3bjDY9ESzPRx0kbPWmQjSU/Tj6 nNJy1hu2CiqeZYgy0g+Wf78mIFJUDMpxbn0OsJRBWACdorNjuzafImGQX+Imp7GX mTVSSTJLzQozvRBq7scIcCyAuYCSLEPR1ysnrCdY80ovX2oLLK6yEuVX5t7D3/u3 JMu2jhvGlpiVG1sCaRNs8IuUwABFDyI6uQLkvDG/qQrSEOJwhauzlD4i8dwVB+ig Pu4oUfrWXpk5qA== -----END CERTIFICATE-----Generated at Sat Aug 23 04:25:32 2025 by rpki-client