$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/85/ede94e-ba2a-41ee-b12c-e0534e23859b/1/5llvGxY8qwxFqE7rEyYbZfGiKWI.mft File: 5llvGxY8qwxFqE7rEyYbZfGiKWI.mft (raw, json) Hash identifier: lAU130a81J5ZRAGGCbGJDiYE2dESbyjU47G7uTL1BHU= Subject key identifier: 4D:B1:87:D7:3B:5B:37:1F:11:CF:CB:E5:D1:E0:10:D3:AB:C3:7F:13 Authority key identifier: E6:59:6F:1B:16:3C:AB:0C:45:A8:4E:EB:13:26:1B:65:F1:A2:29:62 Certificate issuer: /CN=e6596f1b163cab0c45a84eeb13261b65f1a22962 Certificate serial: 0198D473719DDD265DB664C9B49A12722575 Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/5llvGxY8qwxFqE7rEyYbZfGiKWI.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/85/ede94e-ba2a-41ee-b12c-e0534e23859b/1/5llvGxY8qwxFqE7rEyYbZfGiKWI.mft Manifest number: 165C Signing time: Sat 23 Aug 2025 01:03:12 +0000 Manifest this update: Sat 23 Aug 2025 01:03:12 +0000 Manifest next update: Sun 24 Aug 2025 01:03:12 +0000 Files and hashes: 1: 5llvGxY8qwxFqE7rEyYbZfGiKWI.crl (hash: t9l5sLCIQ2R3Rzbc9jdZcJBHqIkmJzd17KjHt/hnqZE=) 2: EPrKtO_Wui_AIcoB1IjnBBpjTA0.roa (hash: Ns7k+bsMT28IYTUvIKM9gdNIwjEuXm0xT0/L3x28CpU=) 3: GSrzoMsqdrffXvz8XfRbb06cdoU.roa (hash: qO16W1LJUB1Sf5kzJO7kSt5JrIHbHWcZRaQOTtkSO+c=) 4: UY47b1nKTBymo-_2aL9oMC7vX38.roa (hash: bK73SZPBKj3iAjuEKmNGnIADIWNE9D/9YsMH7QmUlZ0=) 5: c9pIRKumzJnPv6L0_0S99z5-7Pw.roa (hash: JszoDngQwRDEsojUMs8/qjNo60rDhfYCdak0Z9nn2Bg=) 6: ffZavXQaQNIwwKVW84vxnOTS_2k.roa (hash: oA0RmBJXJ8Iaj/uIUokVdX89kZuQ0WJjVTCDBbmztv8=) 7: g7knCJ57jgLAS24rI4X3btb-M4c.roa (hash: 3UFtXY+vf3X8W6kWA8FvJJwhkGk4KqYw38fo24s58Sk=) 8: gFreThJqNlHPvyHQ79dnfJgTPWo.roa (hash: L3hMFyzcKxYUiA62qUifu4SJz3107QolnvNpa2edIOo=) 9: iwjx0AhvwxAf6vZnR0V70CNSj3k.roa (hash: s4vyo2AL6KEF6yGbsgdcSILxp1qahFdr2Um6ni3Nsz4=) 10: qZ2rbeeUwV9WnVFloyx-2WLLaic.roa (hash: PyKdiPPGb3idbj43k0xja1+Mj7fQbqPrKGkBwHfZq1c=) 11: tCNgCc7S1ewGtgMhWiXaNGTqwZ8.roa (hash: 0ar853JOpvsnmzIOleciC89u2nN3g3yWX8hEwIiz39U=) Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/85/ede94e-ba2a-41ee-b12c-e0534e23859b/1/5llvGxY8qwxFqE7rEyYbZfGiKWI.crl rsync://rpki.ripe.net/repository/DEFAULT/85/ede94e-ba2a-41ee-b12c-e0534e23859b/1/5llvGxY8qwxFqE7rEyYbZfGiKWI.mft rsync://rpki.ripe.net/repository/DEFAULT/5llvGxY8qwxFqE7rEyYbZfGiKWI.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Sun 24 Aug 2025 01:03:12 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:98:d4:73:71:9d:dd:26:5d:b6:64:c9:b4:9a:12:72:25:75 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=e6596f1b163cab0c45a84eeb13261b65f1a22962 Validity Not Before: Aug 23 01:03:12 2025 GMT Not After : Aug 24 01:03:12 2025 GMT Subject: CN=4db187d73b5b371f11cfcbe5d1e010d3abc37f13 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:a9:9b:f0:9f:a4:a9:5d:5f:01:e3:dc:71:3b:b1: 4a:ed:e8:67:6e:44:dc:84:de:bb:5c:26:33:c5:58: 90:20:e5:6d:5d:d8:7b:b3:6c:d9:d7:a7:dc:93:38: de:74:a4:00:07:68:d1:c2:46:77:23:d7:0a:77:25: 45:c7:74:d4:65:6f:49:c4:6b:54:81:b7:ca:6f:7b: 4f:c8:30:18:4e:ca:c8:13:9a:cd:d6:54:d2:de:6c: 77:56:c3:7a:75:cb:c5:26:e2:db:44:0d:c4:22:e0: 53:a1:f6:a8:d8:59:f1:19:de:3d:ff:95:02:85:ce: 0b:32:a5:e1:9d:17:e6:0e:f7:0b:4d:a2:1d:91:b3: fd:55:47:d0:ad:54:90:f3:52:30:dc:18:cc:f1:e7: 63:51:8f:88:1b:f6:52:28:c8:e8:47:31:c8:2c:89: 21:b2:8b:a2:ca:87:51:a3:f5:87:39:1d:46:3a:73: b5:b1:28:5a:1a:fa:17:3a:15:c2:aa:f0:98:e2:d2: 3f:2e:13:25:77:bb:f1:26:8e:11:4d:e0:a1:06:07: 4a:e8:0e:77:35:19:4b:f3:8a:64:e2:44:7b:4a:a2: 2f:1d:fb:c3:a3:19:3f:86:c5:67:31:f4:9a:15:a5: 2e:60:ec:65:ab:87:02:c8:8e:00:46:55:bf:67:0a: 07:f9 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 4D:B1:87:D7:3B:5B:37:1F:11:CF:CB:E5:D1:E0:10:D3:AB:C3:7F:13 X509v3 Authority Key Identifier: keyid:E6:59:6F:1B:16:3C:AB:0C:45:A8:4E:EB:13:26:1B:65:F1:A2:29:62 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/5llvGxY8qwxFqE7rEyYbZfGiKWI.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/85/ede94e-ba2a-41ee-b12c-e0534e23859b/1/5llvGxY8qwxFqE7rEyYbZfGiKWI.mft X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/85/ede94e-ba2a-41ee-b12c-e0534e23859b/1/5llvGxY8qwxFqE7rEyYbZfGiKWI.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption cc:d4:3d:76:77:1b:67:34:f7:3d:2f:d9:12:aa:51:bf:61:c1: 6d:2f:2a:23:0b:06:89:a5:8c:ca:81:8d:f5:ef:3f:1f:28:92: c7:d1:46:a1:74:42:70:6d:13:c7:5f:b2:c5:d8:dd:53:95:28: e4:c9:a8:15:c0:90:b8:43:16:90:7b:04:42:61:a5:92:59:61: 0b:c1:7a:76:69:f7:fb:12:c6:b9:29:84:4e:b3:90:5f:74:3f: c0:7e:15:38:7e:c1:fb:0b:54:b4:fe:82:a8:fd:32:68:7f:87: f9:f4:d7:09:32:06:82:b9:13:a8:62:47:85:82:7b:77:47:8d: 34:54:53:51:40:8c:4d:dd:71:33:9c:17:c1:98:e8:23:cf:2a: 8c:6b:33:7a:b1:f3:df:bf:ee:ca:c8:c4:3b:6a:ce:96:7b:d0: a2:d9:47:34:d1:5e:e3:42:ed:3d:a8:14:a5:6a:af:96:82:a8: d9:f6:a7:f4:8e:9a:e4:c8:04:5b:2a:8b:4a:d9:82:08:1d:5f: 57:73:dc:8d:28:06:0c:4e:8d:8a:a4:50:67:0c:71:ac:7a:6c: 52:f8:56:49:9c:5f:d4:17:a5:51:05:0b:03:c2:fb:ea:94:82: ea:1d:b5:83:bb:b4:a6:cd:33:ba:06:5d:f9:3e:49:f4:7c:20: e0:41:bb:c8 -----BEGIN CERTIFICATE----- MIIFFjCCA/6gAwIBAgISAZjUc3Gd3SZdtmTJtJoSciV1MA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKGU2NTk2ZjFiMTYzY2FiMGM0NWE4NGVlYjEzMjYxYjY1ZjFh MjI5NjIwHhcNMjUwODIzMDEwMzEyWhcNMjUwODI0MDEwMzEyWjAzMTEwLwYDVQQD Eyg0ZGIxODdkNzNiNWIzNzFmMTFjZmNiZTVkMWUwMTBkM2FiYzM3ZjEzMIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAqZvwn6SpXV8B49xxO7FK7ehnbkTc hN67XCYzxViQIOVtXdh7s2zZ16fckzjedKQAB2jRwkZ3I9cKdyVFx3TUZW9JxGtU gbfKb3tPyDAYTsrIE5rN1lTS3mx3VsN6dcvFJuLbRA3EIuBTofao2FnxGd49/5UC hc4LMqXhnRfmDvcLTaIdkbP9VUfQrVSQ81Iw3BjM8edjUY+IG/ZSKMjoRzHILIkh souiyodRo/WHOR1GOnO1sShaGvoXOhXCqvCY4tI/LhMld7vxJo4RTeChBgdK6A53 NRlL84pk4kR7SqIvHfvDoxk/hsVnMfSaFaUuYOxlq4cCyI4ARlW/ZwoH+QIDAQAB o4ICIjCCAh4wHQYDVR0OBBYEFE2xh9c7WzcfEc/L5dHgENOrw38TMB8GA1UdIwQY MBaAFOZZbxsWPKsMRahO6xMmG2XxoiliMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvNWxsdkd4WThxd3hGcUU3ckV5WWJaZkdpS1dJLmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC84NS9lZGU5NGUtYmEyYS00MWVlLWIxMmMt ZTA1MzRlMjM4NTliLzEvNWxsdkd4WThxd3hGcUU3ckV5WWJaZkdpS1dJLm1mdDCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC84NS9lZGU5NGUtYmEyYS00MWVlLWIxMmMtZTA1MzRlMjM4NTli LzEvNWxsdkd4WThxd3hGcUU3ckV5WWJaZkdpS1dJLmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAzNQ9dncb ZzT3PS/ZEqpRv2HBbS8qIwsGiaWMyoGN9e8/HyiSx9FGoXRCcG0Tx1+yxdjdU5Uo 5MmoFcCQuEMWkHsEQmGlkllhC8F6dmn3+xLGuSmETrOQX3Q/wH4VOH7B+wtUtP6C qP0yaH+H+fTXCTIGgrkTqGJHhYJ7d0eNNFRTUUCMTd1xM5wXwZjoI88qjGszerHz 37/uysjEO2rOlnvQotlHNNFe40LtPagUpWqvloKo2fan9I6a5MgEWyqLStmCCB1f V3PcjSgGDE6NiqRQZwxxrHpsUvhWSZxf1BelUQULA8L76pSC6h21g7u0ps0zugZd +T5J9Hwg4EG7yA== -----END CERTIFICATE-----Generated at Sat Aug 23 11:44:29 2025 by rpki-client