$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/80/4984df-6db2-4e0a-91f8-bf05acc82bd1/1/CoH-kFn2ggvBitWALy8fynfSVLc.mft File: CoH-kFn2ggvBitWALy8fynfSVLc.mft (raw, json) Hash identifier: 1vl7ua0fEZsZWVtTJlZcc4knxqOX1f5V28obkSCx8No= Subject key identifier: 7E:46:D5:C1:FD:7F:8B:6D:DD:C8:25:B2:75:0B:82:D4:AE:D8:68:98 Authority key identifier: 0A:81:FE:90:59:F6:82:0B:C1:8A:D5:80:2F:2F:1F:CA:77:D2:54:B7 Certificate issuer: /CN=0a81fe9059f6820bc18ad5802f2f1fca77d254b7 Certificate serial: 0198D4A7F070BDF19F08A1AFC270EC3C2153 Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/CoH-kFn2ggvBitWALy8fynfSVLc.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/80/4984df-6db2-4e0a-91f8-bf05acc82bd1/1/CoH-kFn2ggvBitWALy8fynfSVLc.mft Manifest number: 09AA Signing time: Sat 23 Aug 2025 02:00:32 +0000 Manifest this update: Sat 23 Aug 2025 02:00:32 +0000 Manifest next update: Sun 24 Aug 2025 02:00:32 +0000 Files and hashes: 1: 31z7eSu8--35kebgOlCIABBeVf8.roa (hash: Bo6lIvIlV0RX6xhodzhO7tuvgscKOLMBcfTJSKlUYZw=) 2: 7pPLJaN3OTQBK8i-P4GOQNKJPho.roa (hash: HpLQLLrJKx/bS+zdiKUm5TCX+jRSuh5jVP1YSt/MOZY=) 3: CoH-kFn2ggvBitWALy8fynfSVLc.crl (hash: SjQ6c0Q4Dozm+WLZK4LKslfoix5/2FNZ3PG7XNUh9fo=) 4: EacbpO8P-LkG-h50-C35fVYJXyI.roa (hash: btUaf5jDz02025fLzDlihBUOmr88cX2MxuDiHPb5dc4=) 5: FstRBv2kO53NDHW81Q9Mg07SWg4.roa (hash: +uStvYqgj5hn3d6BL0rwAnmTzIsGb1x7W+G4jAHTkdA=) 6: Gf8Y2t4y9XW51teYl9-IOJM-QkE.roa (hash: JzLxoz0gWXWBbhQLZinkEP2bb0OKmAdUFJyyBJ71KUI=) 7: N0ylFt5LVYNjTI-_TsSgO84trzU.roa (hash: FGN5RCpPLee+DVEx92LqF5VUyDDoLbxxrafkYHnOVZg=) 8: PEEbtcraLxJZAPZLAW5H_KDLDwQ.roa (hash: wU0HPJ884+fnbW1G1BaCynti9gWD3Sn+0YrIsJUp3ns=) 9: hLdZE5q1FOXSO44ZofCjRXN9z7I.roa (hash: CmOCZv7BugezIWG5ZPHeIaee5S3CP9UP9zRJfwRzazg=) 10: i1bI7bZVKfcJ9vCnWPYEzcCSqOc.roa (hash: I9SME80ARJLDqvqmW5BBXCvNlxHc4Su4PKuf6AZPdG4=) 11: n_d7GjbZ9YbYK045nkHL_lX76pM.roa (hash: L6McSAJwh8T7ZY3ArgurepjkJRDGFkS06sAchDylLyc=) 12: pW-Kl5UPWqu6KG3_J4t1h52HuR0.roa (hash: 0HOBimxzzdToQy38vYlAJbGZVaBtPNrg0qioOLxF/+Q=) 13: tlqKEYYvFMWYK-JPntFn1nyKI1U.roa (hash: /wIoPxgkbhHCyNQ8NB2J0bNqG5fb1wxitY8EONuXMt0=) 14: yFPiywRMEHaITt3TRPzJux8bzAU.roa (hash: WnTskmfJ1KLR7sA0SYoAyMqXx6u45IJAhh3f7ztydOk=) Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/80/4984df-6db2-4e0a-91f8-bf05acc82bd1/1/CoH-kFn2ggvBitWALy8fynfSVLc.crl rsync://rpki.ripe.net/repository/DEFAULT/80/4984df-6db2-4e0a-91f8-bf05acc82bd1/1/CoH-kFn2ggvBitWALy8fynfSVLc.mft rsync://rpki.ripe.net/repository/DEFAULT/CoH-kFn2ggvBitWALy8fynfSVLc.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Sun 24 Aug 2025 00:37:04 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:98:d4:a7:f0:70:bd:f1:9f:08:a1:af:c2:70:ec:3c:21:53 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=0a81fe9059f6820bc18ad5802f2f1fca77d254b7 Validity Not Before: Aug 23 02:00:32 2025 GMT Not After : Aug 24 02:00:32 2025 GMT Subject: CN=7e46d5c1fd7f8b6dddc825b2750b82d4aed86898 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:d6:dc:10:2c:65:f5:14:52:2f:a7:44:31:1c:c4: 60:a9:04:ea:b9:af:21:71:03:0a:88:06:65:d4:a8: 5d:11:d1:17:90:5c:3b:c2:c1:81:6c:00:cc:79:47: b0:56:a0:80:c4:05:4f:8a:21:bd:07:02:f9:1c:5f: 22:1e:c3:f6:0f:46:ef:df:2f:0c:d8:09:13:14:34: c5:d7:35:60:87:c3:78:5f:2e:13:2e:c0:9a:dc:2b: ed:90:29:e9:16:d4:7c:d0:40:11:6c:52:3d:5e:ee: ed:59:4a:77:b8:43:bb:6c:d1:84:cf:5b:7f:8c:18: 4a:55:8e:2a:56:e1:cd:5e:88:5f:32:36:ac:84:20: e4:1b:27:52:78:19:55:f8:a2:3d:f4:a7:e1:bd:55: 24:9e:cf:cd:21:d2:e5:2b:76:47:74:35:92:a0:34: 6f:61:81:b0:37:85:91:65:07:22:95:ab:76:c8:5c: 85:2b:37:3e:1d:e4:b0:b8:41:a5:5a:05:67:e8:4d: 60:e8:0f:a3:43:73:a5:dd:20:c1:17:1d:dd:f1:6e: 60:ab:7d:05:0d:03:51:b2:8b:98:83:90:68:ee:d0: e9:06:ef:46:b8:29:e2:b2:7c:f4:4f:1c:44:10:a2: 21:96:91:da:c3:b8:09:bf:3c:1f:15:d8:6d:ba:69: 5e:1b Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 7E:46:D5:C1:FD:7F:8B:6D:DD:C8:25:B2:75:0B:82:D4:AE:D8:68:98 X509v3 Authority Key Identifier: keyid:0A:81:FE:90:59:F6:82:0B:C1:8A:D5:80:2F:2F:1F:CA:77:D2:54:B7 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/CoH-kFn2ggvBitWALy8fynfSVLc.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/80/4984df-6db2-4e0a-91f8-bf05acc82bd1/1/CoH-kFn2ggvBitWALy8fynfSVLc.mft X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/80/4984df-6db2-4e0a-91f8-bf05acc82bd1/1/CoH-kFn2ggvBitWALy8fynfSVLc.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 77:b9:9d:7a:8a:00:8f:26:7c:3b:63:76:8a:c7:f3:57:a9:5d: 03:68:f1:ae:f3:53:d0:c4:1a:a1:dc:6f:5c:47:d8:e3:3d:96: d3:cd:59:c8:cd:ad:84:59:9f:2c:f1:48:34:cb:41:66:c7:f1: 21:cb:fc:a6:8b:01:36:20:4d:fc:72:2e:ee:8f:cd:ae:6f:93: ca:ee:51:d6:cf:2d:1d:91:13:5a:ab:38:8d:d0:f7:7c:9e:6d: ea:84:28:51:3c:5f:03:c2:55:a1:6e:0d:97:ee:4c:2b:a8:af: 73:53:0d:9a:93:9f:96:ec:e9:75:30:95:2a:d5:f6:01:a3:a2: dd:6e:b2:5a:a0:98:74:3a:9f:50:04:bd:5c:25:fd:cc:31:36: 6a:7e:30:9c:26:2f:10:4f:be:af:1b:66:84:33:3f:93:46:8e: 2e:39:84:ee:b2:64:32:d5:74:1e:a4:03:42:63:ad:92:ae:38: 85:d6:59:6f:8f:2a:85:13:72:d8:8e:d4:24:b1:4e:53:3b:02: 63:8b:7f:e1:7b:62:25:f7:94:ed:4a:09:d7:a5:d5:42:a5:6d: 2b:3a:a8:41:16:9c:8e:a9:7e:be:5a:37:47:aa:04:0c:99:1a: 2f:ee:2d:41:02:08:74:10:ee:11:76:fc:41:fa:f4:43:80:80: 08:85:68:25 -----BEGIN CERTIFICATE----- MIIFFjCCA/6gAwIBAgISAZjUp/BwvfGfCKGvwnDsPCFTMA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKDBhODFmZTkwNTlmNjgyMGJjMThhZDU4MDJmMmYxZmNhNzdk MjU0YjcwHhcNMjUwODIzMDIwMDMyWhcNMjUwODI0MDIwMDMyWjAzMTEwLwYDVQQD Eyg3ZTQ2ZDVjMWZkN2Y4YjZkZGRjODI1YjI3NTBiODJkNGFlZDg2ODk4MIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEA1twQLGX1FFIvp0QxHMRgqQTqua8h cQMKiAZl1KhdEdEXkFw7wsGBbADMeUewVqCAxAVPiiG9BwL5HF8iHsP2D0bv3y8M 2AkTFDTF1zVgh8N4Xy4TLsCa3CvtkCnpFtR80EARbFI9Xu7tWUp3uEO7bNGEz1t/ jBhKVY4qVuHNXohfMjashCDkGydSeBlV+KI99KfhvVUkns/NIdLlK3ZHdDWSoDRv YYGwN4WRZQcilat2yFyFKzc+HeSwuEGlWgVn6E1g6A+jQ3Ol3SDBFx3d8W5gq30F DQNRsouYg5Bo7tDpBu9GuCnisnz0TxxEEKIhlpHaw7gJvzwfFdhtumleGwIDAQAB o4ICIjCCAh4wHQYDVR0OBBYEFH5G1cH9f4tt3cglsnULgtSu2GiYMB8GA1UdIwQY MBaAFAqB/pBZ9oILwYrVgC8vH8p30lS3MA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvQ29ILWtGbjJnZ3ZCaXRXQUx5OGZ5bmZTVkxjLmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC84MC80OTg0ZGYtNmRiMi00ZTBhLTkxZjgt YmYwNWFjYzgyYmQxLzEvQ29ILWtGbjJnZ3ZCaXRXQUx5OGZ5bmZTVkxjLm1mdDCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC84MC80OTg0ZGYtNmRiMi00ZTBhLTkxZjgtYmYwNWFjYzgyYmQx LzEvQ29ILWtGbjJnZ3ZCaXRXQUx5OGZ5bmZTVkxjLmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAd7mdeooA jyZ8O2N2isfzV6ldA2jxrvNT0MQaodxvXEfY4z2W081ZyM2thFmfLPFINMtBZsfx Icv8posBNiBN/HIu7o/Nrm+Tyu5R1s8tHZETWqs4jdD3fJ5t6oQoUTxfA8JVoW4N l+5MK6ivc1MNmpOfluzpdTCVKtX2AaOi3W6yWqCYdDqfUAS9XCX9zDE2an4wnCYv EE++rxtmhDM/k0aOLjmE7rJkMtV0HqQDQmOtkq44hdZZb48qhRNy2I7UJLFOUzsC Y4t/4XtiJfeU7UoJ16XVQqVtKzqoQRacjql+vlo3R6oEDJkaL+4tQQIIdBDuEXb8 Qfr0Q4CACIVoJQ== -----END CERTIFICATE-----Generated at Sat Aug 23 09:49:22 2025 by rpki-client