$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/71/914d39-3020-4b79-ad26-d87affb8bc61/1/S0BcqrNLv95rjuZsYAhgxs6W8ys.mft File: S0BcqrNLv95rjuZsYAhgxs6W8ys.mft (raw, json) Hash identifier: 5EDyghkT0w3kqWAadYCx1QuyRo6alBqUQtItCjlemp8= Subject key identifier: F3:FE:DD:BB:40:30:9A:25:50:85:62:98:FD:43:07:E7:8F:A2:E1:B1 Authority key identifier: 4B:40:5C:AA:B3:4B:BF:DE:6B:8E:E6:6C:60:08:60:C6:CE:96:F3:2B Certificate issuer: /CN=4b405caab34bbfde6b8ee66c600860c6ce96f32b Certificate serial: 0198D705D80D6075D717A4BC186390468592 Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/S0BcqrNLv95rjuZsYAhgxs6W8ys.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/71/914d39-3020-4b79-ad26-d87affb8bc61/1/S0BcqrNLv95rjuZsYAhgxs6W8ys.mft Manifest number: 1651 Signing time: Sat 23 Aug 2025 13:02:21 +0000 Manifest this update: Sat 23 Aug 2025 13:02:21 +0000 Manifest next update: Sun 24 Aug 2025 13:02:21 +0000 Files and hashes: 1: 11HD7yYKcpDp91MDnZ2qx4f7DA4.roa (hash: I82O47jamEqwRmGn3/G2hhZ8d3EhBnYIg9JLsYyDdcE=) 2: EVFSBas9Aq_MdNVwUd8bGuaA3Ws.roa (hash: BhtgRPsHAejHOiiDvH3HRPbC4SYTxdKvHTv4FGSpdUs=) 3: EwIzZdJ1IhMaFw8VKQftgylzjgE.roa (hash: TssNiQ/Zpv1pzvYDHFFLNu5wfEVQ4u0fKOIDHY91aqk=) 4: LVgdGGp1BXM3wqsV9OwWixTAngw.roa (hash: yASeozzYpGQSF5fg0wPLHaGxwKLjvcatKKCkqykA4I8=) 5: MJIbLhSmNC8a874fA2nbq57HEtg.roa (hash: WaRYM9CvEVYhUP+ZoiflR5McAGOB5Og+0p9cf3/LEak=) 6: P1A1BXCqCADzQosrk4MwUKPYxTk.roa (hash: LXH4t2ODNhUtfiB03lL7Y51z/AGbNaW0Y11NO+KNqsc=) 7: QHWMs-MZjDSwChSISEL6Gl0q8mw.roa (hash: MTwg/6CPgLRHHoER9F5LK/UDna9Vp7Lok94EKexAIUI=) 8: S0BcqrNLv95rjuZsYAhgxs6W8ys.crl (hash: cBov4lt030sAn3PuEL/qVyazmE0eWbZelP8ngkBN8VY=) 9: Xdvj43KnSMHPF5yK-nfEWq4KZoY.roa (hash: 0KUoHz1/LcxNxADlsv04gqLb680zAS0Z8MaiKDomgYY=) 10: foffFzsX_C0XZVackxzc9TT3Ql0.roa (hash: v5tw1DCZvp0dZORs+mozhjde3hmTpwW0Pvc0v2NmjrU=) Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/71/914d39-3020-4b79-ad26-d87affb8bc61/1/S0BcqrNLv95rjuZsYAhgxs6W8ys.crl rsync://rpki.ripe.net/repository/DEFAULT/71/914d39-3020-4b79-ad26-d87affb8bc61/1/S0BcqrNLv95rjuZsYAhgxs6W8ys.mft rsync://rpki.ripe.net/repository/DEFAULT/S0BcqrNLv95rjuZsYAhgxs6W8ys.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Sun 24 Aug 2025 13:02:21 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:98:d7:05:d8:0d:60:75:d7:17:a4:bc:18:63:90:46:85:92 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=4b405caab34bbfde6b8ee66c600860c6ce96f32b Validity Not Before: Aug 23 13:02:21 2025 GMT Not After : Aug 24 13:02:21 2025 GMT Subject: CN=f3feddbb40309a2550856298fd4307e78fa2e1b1 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:cf:d1:e3:50:3e:e7:70:63:4a:03:9f:4f:ac:92: df:b0:c9:00:1a:aa:76:4b:53:cc:46:56:8b:f5:19: dd:4e:b5:cb:36:07:49:54:dd:b9:f2:29:2c:d1:9f: cd:e5:8a:4c:78:94:e8:35:07:b4:b8:0b:c7:f7:11: 4c:38:04:d4:c4:9a:c1:f6:2d:a4:77:fb:09:31:fa: f8:a7:33:42:6f:9f:5f:f6:4f:70:11:4b:74:cf:08: 96:1c:e6:c8:e2:97:64:bd:4d:32:51:af:77:8f:5b: 4a:c3:ac:d3:d0:1a:0f:fa:44:9e:2a:f0:e4:1a:9a: 45:aa:18:4f:9f:1c:2c:10:fe:f1:96:5e:71:1b:c6: 51:2d:18:d3:2b:51:de:99:33:67:1b:c7:c4:f5:76: 1a:b4:b6:f4:8c:09:1c:63:d5:9c:44:f0:0c:4b:d1: 24:3a:39:f6:43:59:0a:5e:68:c0:13:fd:a6:0d:22: 84:08:5f:82:bb:f6:fc:07:7e:28:b1:b3:b4:82:d2: 9d:ff:3d:a2:45:22:79:a2:6a:01:29:0b:1c:94:0a: ec:01:00:39:b6:eb:44:d9:a4:ac:b7:ed:2d:e7:4e: 78:89:b1:59:04:e1:0b:92:f4:1c:e9:21:0d:b6:17: ea:e7:e4:34:5a:1d:71:de:8c:8a:f2:1d:da:59:5c: 2a:61 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: F3:FE:DD:BB:40:30:9A:25:50:85:62:98:FD:43:07:E7:8F:A2:E1:B1 X509v3 Authority Key Identifier: keyid:4B:40:5C:AA:B3:4B:BF:DE:6B:8E:E6:6C:60:08:60:C6:CE:96:F3:2B X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/S0BcqrNLv95rjuZsYAhgxs6W8ys.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/71/914d39-3020-4b79-ad26-d87affb8bc61/1/S0BcqrNLv95rjuZsYAhgxs6W8ys.mft X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/71/914d39-3020-4b79-ad26-d87affb8bc61/1/S0BcqrNLv95rjuZsYAhgxs6W8ys.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 15:2d:0f:03:3d:38:7c:e1:26:62:95:0d:b0:a3:47:bf:c4:e9: 83:7b:7a:48:02:66:42:32:1d:e2:6c:ea:63:6d:d5:eb:fa:37: 69:61:a0:d8:69:a7:2c:b5:54:b3:e6:87:66:1a:2c:31:16:4e: 5d:ae:7d:29:cd:d1:61:36:6c:52:26:eb:62:6b:70:a9:04:4f: a2:18:2a:d6:c2:9b:1d:db:98:d4:b1:4e:c1:b7:c6:6a:bb:3f: 34:2d:5b:c9:2d:4d:c4:cb:5f:e9:ca:7d:0f:b9:88:24:66:53: ef:2f:00:a6:bd:31:aa:a8:8b:17:38:a3:fe:ff:b0:93:55:65: 71:af:96:a1:a6:58:26:f6:57:f2:9b:b7:c7:22:e7:ed:a0:f2: e5:c1:c1:1f:a9:0c:33:25:d0:2e:2d:9e:77:2f:61:7c:f3:80: 4f:04:d8:2c:e0:2c:60:eb:0f:b5:46:07:8c:ec:79:5a:9a:76: d3:10:33:71:93:88:93:63:c8:12:9c:12:72:e9:37:5a:3f:62: 21:75:ec:70:4f:6e:61:64:9f:33:fd:79:ad:4e:3c:02:a9:87: 18:a1:ea:d4:c1:ff:ad:8c:5f:af:81:60:44:84:56:e1:0f:4e: bc:d0:3d:9c:12:d3:29:c2:03:a7:34:fe:de:a6:3e:9b:c6:d3: 35:f9:2f:4f -----BEGIN CERTIFICATE----- MIIFFjCCA/6gAwIBAgISAZjXBdgNYHXXF6S8GGOQRoWSMA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKDRiNDA1Y2FhYjM0YmJmZGU2YjhlZTY2YzYwMDg2MGM2Y2U5 NmYzMmIwHhcNMjUwODIzMTMwMjIxWhcNMjUwODI0MTMwMjIxWjAzMTEwLwYDVQQD EyhmM2ZlZGRiYjQwMzA5YTI1NTA4NTYyOThmZDQzMDdlNzhmYTJlMWIxMIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAz9HjUD7ncGNKA59PrJLfsMkAGqp2 S1PMRlaL9RndTrXLNgdJVN258iks0Z/N5YpMeJToNQe0uAvH9xFMOATUxJrB9i2k d/sJMfr4pzNCb59f9k9wEUt0zwiWHObI4pdkvU0yUa93j1tKw6zT0BoP+kSeKvDk GppFqhhPnxwsEP7xll5xG8ZRLRjTK1HemTNnG8fE9XYatLb0jAkcY9WcRPAMS9Ek Ojn2Q1kKXmjAE/2mDSKECF+Cu/b8B34osbO0gtKd/z2iRSJ5omoBKQsclArsAQA5 tutE2aSst+0t5054ibFZBOELkvQc6SENthfq5+Q0Wh1x3oyK8h3aWVwqYQIDAQAB o4ICIjCCAh4wHQYDVR0OBBYEFPP+3btAMJolUIVimP1DB+ePouGxMB8GA1UdIwQY MBaAFEtAXKqzS7/ea47mbGAIYMbOlvMrMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvUzBCY3FyTkx2OTVyanVac1lBaGd4czZXOHlzLmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC83MS85MTRkMzktMzAyMC00Yjc5LWFkMjYt ZDg3YWZmYjhiYzYxLzEvUzBCY3FyTkx2OTVyanVac1lBaGd4czZXOHlzLm1mdDCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC83MS85MTRkMzktMzAyMC00Yjc5LWFkMjYtZDg3YWZmYjhiYzYx LzEvUzBCY3FyTkx2OTVyanVac1lBaGd4czZXOHlzLmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAFS0PAz04 fOEmYpUNsKNHv8Tpg3t6SAJmQjId4mzqY23V6/o3aWGg2GmnLLVUs+aHZhosMRZO Xa59Kc3RYTZsUibrYmtwqQRPohgq1sKbHduY1LFOwbfGars/NC1byS1NxMtf6cp9 D7mIJGZT7y8Apr0xqqiLFzij/v+wk1Vlca+WoaZYJvZX8pu3xyLn7aDy5cHBH6kM MyXQLi2edy9hfPOATwTYLOAsYOsPtUYHjOx5Wpp20xAzcZOIk2PIEpwScuk3Wj9i IXXscE9uYWSfM/15rU48AqmHGKHq1MH/rYxfr4FgRIRW4Q9OvNA9nBLTKcIDpzT+ 3qY+m8bTNfkvTw== -----END CERTIFICATE-----Generated at Sat Aug 23 19:36:27 2025 by rpki-client