$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/7e/ce6ccb-25cf-4917-b3cd-3056af9a335e/1/q8jb5SCDrTNcnx_eYBbsi0kpMUA.mft File: q8jb5SCDrTNcnx_eYBbsi0kpMUA.mft (raw, json) Hash identifier: f9vo+4Mn4iWKVD1MrNFrkrtosMC3zuXTE/2tpBYzUpw= Subject key identifier: 61:F0:11:A2:77:49:71:D1:4C:DE:E8:0E:F9:5C:F5:30:69:6A:BA:ED Authority key identifier: AB:C8:DB:E5:20:83:AD:33:5C:9F:1F:DE:60:16:EC:8B:49:29:31:40 Certificate issuer: /CN=abc8dbe52083ad335c9f1fde6016ec8b49293140 Certificate serial: 0197CACC38984D9F6D4972B777893A3E552C Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/q8jb5SCDrTNcnx_eYBbsi0kpMUA.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/7e/ce6ccb-25cf-4917-b3cd-3056af9a335e/1/q8jb5SCDrTNcnx_eYBbsi0kpMUA.mft Manifest number: 1613 Signing time: Wed 02 Jul 2025 11:01:10 +0000 Manifest this update: Wed 02 Jul 2025 11:01:10 +0000 Manifest next update: Thu 03 Jul 2025 11:01:10 +0000 Files and hashes: 1: 3rSRd0RZU7FekSH23KpB4AjQvCA.roa (hash: dHJ5VK5jy4AG5zWMS9JzXCYfEPP9KtWlYIJ17BPZ8p4=) 2: 79SKiAPGItgSBiSdHsbiPNmxzdA.roa (hash: bp4Hzk1UysrE74qZJaWtC8IolTv/126MWUfJ4dgAP+w=) 3: 8CD_BDNohDu7BFPue0FAVtqeSKE.roa (hash: MBbBcYx0OZxz+xXv93fCUqPEHeogAGDOWRTI0SELjnU=) 4: DLGzg4PXXfMLLz9uU9Jb8GzjTYQ.roa (hash: UyDgyJqrwARZHVBt5A9PQUxwD+TJu3qnXyFQy1aEp9I=) 5: FmNEfzs-SRSfbomfiiNIeqQS1sk.roa (hash: DZqchwYxSvfrNSJm9BmQA3cTvM8eHMT7t5woC6TuhyE=) 6: Qdu0d9QLtNBsD5iH6QjOkHOjfR0.roa (hash: WIh4dCuUbUKwr5ezCX9dxWL5StxMpA6ugd95qMzqKA4=) 7: U3lA_e0y8319DjoZ7X8Ks2r2M7w.roa (hash: fqverKbNHsV3jVuR9y0WWha056JePZs0l3+H4zjSxfA=) 8: W4bkJ6IHGpMDnc-eERRMgLecaRY.roa (hash: f8DGWIOVKEtO1y7kX/yc0GrbmCyQ2M3bGkc6cPKnJfo=) 9: XWgY9IE5WPWEYKpZb_DdJSKgmNk.roa (hash: RjaBA1nT0ZNCp2uF/Bf1faWMk5+nUdGucIKvPd+4FJg=) 10: afCUdciEL8e1tl5gYWrtb0HNTsk.roa (hash: 5NoCDBuBZUGC39cg06n8OGy1uzMRcXZWmjT1H17s8qs=) 11: eeDfIlNHz-MS84Jn8ZaBvfv9TTY.roa (hash: Nuu5BDy0CuOnKoHwa87Nw4BNQ/P69UXEmPo5SaswqxY=) 12: ic4TzeBOLx46VAxZ0kBOyLnL-aA.roa (hash: o/eumNvuz+9CmmVOqXWqv98TZutXQn/8mhjgfl+DMUM=) 13: jEkIkDjyHf0Y5CHlkh_SAYrLMi8.roa (hash: nK+7va5r0DKn11vhjaj1KeeLmtO5MjFetghK5DI3nyo=) 14: k1o7H-5eEgCdvmr2Au7FXonmUIc.roa (hash: cPZnlWd1NF/fLPFMgOLyjHXmXf8GfrHrU0SBnmHDHvY=) 15: lSOxZN--Nv76VTwU3O8Fys07u2M.roa (hash: KF0YUVuZrHgrWuxvGjcknBz1cOoRQsrm28h1CM9VPOI=) 16: oRojqrF2upd4qpGF9qwuvKkB85M.roa (hash: rI1ZvEDD5nBz4EJV2sl7C1HlZDCYTwKf5IAxKcbibxk=) 17: q8jb5SCDrTNcnx_eYBbsi0kpMUA.crl (hash: CVH3Vmm3JphTRgV4yB6cHUB6db1MUGEyfHlpbkBjKms=) 18: rbJzreDbHp60Zc3UJ6AODADth8g.roa (hash: BpjTDuP8RPY+luxryeSysWVMte9pS4i/E17bDx01jBk=) 19: rq4z53nTY235oXOYEJGf8J9hSBk.roa (hash: ALoDf8xPedv7a4y1Cobi6nNzEhORdIhw3weFRomPawE=) 20: wWbDK40S4dgNgIeoUbg-t_w6Qx0.roa (hash: SQUX4nOmlr/84KlBRvNtQfHH9k/9TOfWpMlz56zCIZQ=) Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/7e/ce6ccb-25cf-4917-b3cd-3056af9a335e/1/q8jb5SCDrTNcnx_eYBbsi0kpMUA.crl rsync://rpki.ripe.net/repository/DEFAULT/7e/ce6ccb-25cf-4917-b3cd-3056af9a335e/1/q8jb5SCDrTNcnx_eYBbsi0kpMUA.mft rsync://rpki.ripe.net/repository/DEFAULT/q8jb5SCDrTNcnx_eYBbsi0kpMUA.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Thu 03 Jul 2025 11:00:42 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:97:ca:cc:38:98:4d:9f:6d:49:72:b7:77:89:3a:3e:55:2c Signature Algorithm: sha256WithRSAEncryption Issuer: CN=abc8dbe52083ad335c9f1fde6016ec8b49293140 Validity Not Before: Jul 2 11:01:10 2025 GMT Not After : Jul 3 11:01:10 2025 GMT Subject: CN=61f011a2774971d14cdee80ef95cf530696abaed Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:c9:1f:97:22:2d:bb:03:ea:62:69:58:5d:8f:1d: b7:4a:1e:16:33:7c:80:aa:53:47:ca:8f:fb:78:be: 9d:d4:de:71:4a:e9:93:24:c9:f6:86:07:90:2b:f9: 52:8f:4e:f7:3b:04:38:e6:88:53:eb:d0:56:99:7c: 9b:31:e7:ad:62:25:2f:ac:28:f1:23:76:e8:46:65: dd:31:23:e3:f1:bd:8b:0d:6e:8c:81:a7:ac:aa:7c: 48:1f:57:b8:14:90:62:64:ef:7e:68:8e:f5:0f:76: 49:98:df:c5:2a:21:1a:94:db:b3:37:93:1a:08:28: 22:e3:6e:16:11:7b:77:fc:7d:84:0a:74:0b:58:3e: 5a:15:b3:be:bb:6f:7f:94:cf:de:64:bd:90:6e:aa: da:d4:5f:b5:21:45:99:e2:e0:96:cf:3f:69:f6:57: e6:9f:53:61:2a:cd:17:51:10:5e:e1:b7:0c:e9:fd: 32:3c:9e:9a:2b:a5:83:3c:77:3f:02:b6:29:23:50: 45:27:b0:47:16:c4:39:fd:d1:ce:3b:3b:e6:32:6b: a5:70:8d:54:5e:54:83:05:15:5a:97:72:86:4e:f1: 5f:a1:7e:f3:eb:05:6e:89:33:b9:b3:ec:c7:af:40: c7:1a:3f:66:c1:d5:53:76:3d:4c:6f:7a:cd:bc:c4: 9a:07 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 61:F0:11:A2:77:49:71:D1:4C:DE:E8:0E:F9:5C:F5:30:69:6A:BA:ED X509v3 Authority Key Identifier: keyid:AB:C8:DB:E5:20:83:AD:33:5C:9F:1F:DE:60:16:EC:8B:49:29:31:40 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/q8jb5SCDrTNcnx_eYBbsi0kpMUA.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/7e/ce6ccb-25cf-4917-b3cd-3056af9a335e/1/q8jb5SCDrTNcnx_eYBbsi0kpMUA.mft X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/7e/ce6ccb-25cf-4917-b3cd-3056af9a335e/1/q8jb5SCDrTNcnx_eYBbsi0kpMUA.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 5a:e6:23:f0:e8:84:73:e0:f5:2c:8e:1c:21:b0:11:aa:99:d5: f7:37:b0:98:88:99:4e:14:db:5f:56:95:b9:1d:f1:6c:6e:4f: ff:94:c6:bb:4d:cf:cb:36:79:64:75:5a:6b:ba:03:dc:4c:26: f8:2a:03:8a:85:8c:42:b8:32:38:1f:e1:8c:6b:0b:2d:b7:1b: 2e:e9:75:39:e4:f7:aa:dd:5c:b1:d8:8c:c9:e3:1d:9b:99:af: 5d:89:a9:23:73:02:03:53:02:23:67:3a:43:81:50:ca:5b:c8: b3:e0:12:05:c7:27:f4:bb:47:3f:19:58:5b:3c:6f:3f:c1:11: fc:a8:f8:0b:9d:d0:c7:e6:71:e1:38:31:60:98:c3:20:ad:ff: 34:36:37:7b:d4:cd:69:4f:c5:e5:66:50:47:f4:68:06:7e:c7: 8e:e8:c7:7f:12:9d:ea:dd:b1:8f:13:5f:07:b0:d8:1e:5b:3c: 9b:21:9c:5e:60:73:37:da:61:60:fe:66:b0:0f:10:cd:c1:c0: 76:38:48:63:91:6f:32:21:f9:33:09:52:54:77:7f:31:3c:1b: 27:4a:77:fd:95:6d:32:3d:db:f5:70:64:98:d0:68:d8:35:9f: 47:16:78:c4:78:72:ee:fe:c8:36:58:4b:92:45:8b:ac:5d:43: a3:d6:88:43 -----BEGIN CERTIFICATE----- MIIFFjCCA/6gAwIBAgISAZfKzDiYTZ9tSXK3d4k6PlUsMA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKGFiYzhkYmU1MjA4M2FkMzM1YzlmMWZkZTYwMTZlYzhiNDky OTMxNDAwHhcNMjUwNzAyMTEwMTEwWhcNMjUwNzAzMTEwMTEwWjAzMTEwLwYDVQQD Eyg2MWYwMTFhMjc3NDk3MWQxNGNkZWU4MGVmOTVjZjUzMDY5NmFiYWVkMIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAyR+XIi27A+piaVhdjx23Sh4WM3yA qlNHyo/7eL6d1N5xSumTJMn2hgeQK/lSj073OwQ45ohT69BWmXybMeetYiUvrCjx I3boRmXdMSPj8b2LDW6MgaesqnxIH1e4FJBiZO9+aI71D3ZJmN/FKiEalNuzN5Ma CCgi424WEXt3/H2ECnQLWD5aFbO+u29/lM/eZL2Qbqra1F+1IUWZ4uCWzz9p9lfm n1NhKs0XURBe4bcM6f0yPJ6aK6WDPHc/ArYpI1BFJ7BHFsQ5/dHOOzvmMmulcI1U XlSDBRVal3KGTvFfoX7z6wVuiTO5s+zHr0DHGj9mwdVTdj1Mb3rNvMSaBwIDAQAB o4ICIjCCAh4wHQYDVR0OBBYEFGHwEaJ3SXHRTN7oDvlc9TBparrtMB8GA1UdIwQY MBaAFKvI2+Ugg60zXJ8f3mAW7ItJKTFAMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvcThqYjVTQ0RyVE5jbnhfZVlCYnNpMGtwTVVBLmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC83ZS9jZTZjY2ItMjVjZi00OTE3LWIzY2Qt MzA1NmFmOWEzMzVlLzEvcThqYjVTQ0RyVE5jbnhfZVlCYnNpMGtwTVVBLm1mdDCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC83ZS9jZTZjY2ItMjVjZi00OTE3LWIzY2QtMzA1NmFmOWEzMzVl LzEvcThqYjVTQ0RyVE5jbnhfZVlCYnNpMGtwTVVBLmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAWuYj8OiE c+D1LI4cIbARqpnV9zewmIiZThTbX1aVuR3xbG5P/5TGu03PyzZ5ZHVaa7oD3Ewm +CoDioWMQrgyOB/hjGsLLbcbLul1OeT3qt1csdiMyeMdm5mvXYmpI3MCA1MCI2c6 Q4FQylvIs+ASBccn9LtHPxlYWzxvP8ER/Kj4C53Qx+Zx4TgxYJjDIK3/NDY3e9TN aU/F5WZQR/RoBn7HjujHfxKd6t2xjxNfB7DYHls8myGcXmBzN9phYP5msA8QzcHA djhIY5FvMiH5MwlSVHd/MTwbJ0p3/ZVtMj3b9XBkmNBo2DWfRxZ4xHhy7v7INlhL kkWLrF1Do9aIQw== -----END CERTIFICATE-----Generated at Wed Jul 2 20:17:16 2025 by rpki-client