$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/89/d00889-e5ca-4090-a6a4-2ac6ff75beb0/1/p23Z2tdYd_fSjRTgjcVbEzC9E7c.mft File: p23Z2tdYd_fSjRTgjcVbEzC9E7c.mft (raw, json) Hash identifier: gHAUUQ2o2BJ8EYvrqArX6Z0pFojq+FNyf8lVBRVrAV0= Subject key identifier: 22:17:2C:BC:CE:84:EF:F7:25:77:89:00:99:0D:A7:83:1D:C7:44:6D Authority key identifier: A7:6D:D9:DA:D7:58:77:F7:D2:8D:14:E0:8D:C5:5B:13:30:BD:13:B7 Certificate issuer: /CN=a76dd9dad75877f7d28d14e08dc55b1330bd13b7 Certificate serial: 0198D70627963B2E7A2CB5D56224A8FA7907 Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/p23Z2tdYd_fSjRTgjcVbEzC9E7c.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/89/d00889-e5ca-4090-a6a4-2ac6ff75beb0/1/p23Z2tdYd_fSjRTgjcVbEzC9E7c.mft Manifest number: 1661 Signing time: Sat 23 Aug 2025 13:02:41 +0000 Manifest this update: Sat 23 Aug 2025 13:02:41 +0000 Manifest next update: Sun 24 Aug 2025 13:02:41 +0000 Files and hashes: 1: QT7D6zXAVoUxNK5Dz_Sr3Ysp0jY.roa (hash: NxSCkfWg+RxkMBPwT+VShHgw3RROnFUgM7kWEk11WTI=) 2: XbTeM1PqMKcQqGHBF2Epuf32B9A.roa (hash: hOnMCvxmcOEtS0aimUSMyI+EYwi7WWRIO2fcpaLnTMo=) 3: hRG76VocwZXhxkxCAJrESxkkjbY.roa (hash: R6reBqJWi+zQpuGx/72cFGp8W0OEKy5DLaWeb2k91DA=) 4: iWHLz7pb0VOnknWH2cLTUErxOZo.roa (hash: jWeDGrOMaI4VEcetBFaHjDSN9dYVfQeBBIRCHkcbqGg=) 5: l-wNxi1bPZkNern9TbmWMfg4MJ4.roa (hash: WyFvbV1rJyTWSGqAchaQ6NeEA4bf29r+mAAX5z8uy7I=) 6: nWpFu-ia2X0bjJCOwDt5OD3QhUU.roa (hash: j+w1oRLaR1UCeH6IJgbFlYRh4McsjrNOg64gWYp7KyE=) 7: p23Z2tdYd_fSjRTgjcVbEzC9E7c.crl (hash: eImM2GaiJagK1pynfytD3c21K/vOVqeodvDjCyjcunQ=) 8: qK4AAnwuTwRwNOb2CLLZs8W9VuI.roa (hash: cqQ7l3QbvSMEr2phGWC5VDW+4MerE13RpRcZdGJsAvw=) 9: vIlI_dchwexZNflF7gIM73uLcOg.roa (hash: pny1c3FWYabHzSSLkClEvdiIBKMwq09M8u+AIiKsPlk=) 10: ydZkgwYcvYbM7mbYd53RAsEkq3U.roa (hash: qwmH6QR7NKSIBlvN+e3NJdnmXczvm/lNUAul9UFFgLI=) Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/89/d00889-e5ca-4090-a6a4-2ac6ff75beb0/1/p23Z2tdYd_fSjRTgjcVbEzC9E7c.crl rsync://rpki.ripe.net/repository/DEFAULT/89/d00889-e5ca-4090-a6a4-2ac6ff75beb0/1/p23Z2tdYd_fSjRTgjcVbEzC9E7c.mft rsync://rpki.ripe.net/repository/DEFAULT/p23Z2tdYd_fSjRTgjcVbEzC9E7c.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Sun 24 Aug 2025 12:50:04 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:98:d7:06:27:96:3b:2e:7a:2c:b5:d5:62:24:a8:fa:79:07 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=a76dd9dad75877f7d28d14e08dc55b1330bd13b7 Validity Not Before: Aug 23 13:02:41 2025 GMT Not After : Aug 24 13:02:41 2025 GMT Subject: CN=22172cbcce84eff725778900990da7831dc7446d Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:e0:0c:0d:c7:f9:36:80:3e:a5:c6:67:39:b3:24: 49:a5:9d:d4:7d:7d:f3:24:f7:3b:1e:57:a5:25:4f: d6:1a:a8:76:c0:4f:db:c3:d4:c5:49:34:a6:df:5a: 4f:5e:38:57:48:54:ae:68:e9:c9:02:f4:5c:31:82: f3:33:6d:1c:7b:9c:f2:c3:bf:cd:47:03:b4:7f:33: bd:45:12:69:a6:cb:bb:bf:9b:9a:8f:28:71:dc:47: c8:08:4f:0c:c8:af:a4:fa:d0:59:34:1e:24:42:b4: e8:4a:8d:1b:7c:92:d4:3d:27:9c:62:9d:db:71:49: 05:c5:89:6a:0a:f7:76:d6:b7:81:94:eb:d2:b0:da: d0:d9:c3:77:6c:97:71:a6:3f:85:b0:e1:d9:60:c3: 41:3a:6d:6e:f7:a8:56:37:18:d8:a8:47:10:2a:a4: 2f:32:96:b3:02:52:ed:7c:26:d5:15:e8:7b:21:96: d7:bc:9f:31:d1:56:c8:8f:c0:fb:82:d7:28:c4:c9: 33:8e:69:8f:bc:b9:87:7a:9a:20:06:79:f7:84:7b: e5:4f:4e:38:1b:a7:c9:31:53:ce:47:c8:a9:4e:38: ee:c7:a6:74:ea:13:d8:f0:9a:93:7f:fc:ca:39:39: 93:a3:e8:d0:f8:80:5f:6d:2e:d6:86:5a:cf:64:f5: 29:73 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 22:17:2C:BC:CE:84:EF:F7:25:77:89:00:99:0D:A7:83:1D:C7:44:6D X509v3 Authority Key Identifier: keyid:A7:6D:D9:DA:D7:58:77:F7:D2:8D:14:E0:8D:C5:5B:13:30:BD:13:B7 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/p23Z2tdYd_fSjRTgjcVbEzC9E7c.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/89/d00889-e5ca-4090-a6a4-2ac6ff75beb0/1/p23Z2tdYd_fSjRTgjcVbEzC9E7c.mft X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/89/d00889-e5ca-4090-a6a4-2ac6ff75beb0/1/p23Z2tdYd_fSjRTgjcVbEzC9E7c.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 5d:5f:42:13:1d:ec:ef:fb:40:c0:59:11:f6:eb:fe:47:b3:b8: cb:e0:cf:cf:17:24:47:f7:bf:b0:26:0f:5b:40:78:d0:fa:64: b8:36:c7:77:fd:b4:75:29:32:f6:bc:57:7a:bb:b5:69:69:6d: 67:f6:68:a6:fa:51:ea:7a:45:59:e4:21:42:fc:48:7a:a1:af: ba:5f:79:87:07:d2:02:da:c4:d0:de:76:b7:2f:d6:fd:0e:e5: 93:7b:38:b0:df:21:55:de:19:b3:62:1e:b5:de:40:f6:a9:82: b9:0f:c1:fe:c2:3c:82:5d:00:e7:9b:97:b9:fa:bd:90:6e:11: 18:57:77:6e:b8:46:9d:5e:63:ab:44:a6:d8:23:c5:66:d3:5d: ab:04:35:ae:de:2a:d6:af:36:a0:8f:3b:75:d4:bd:9a:fd:01: 5e:12:3d:cd:95:97:b9:ee:24:3d:ed:b8:23:b4:0f:6b:41:b3: bb:cb:b0:fa:6e:d7:12:e4:a2:ad:7e:0d:d1:2b:83:52:2d:a2: b5:dd:21:f3:10:92:87:53:71:76:33:e2:07:87:9b:b9:45:94: 92:78:7c:6c:b0:3b:3e:7a:20:e0:75:77:7b:af:c9:7e:7d:00: 18:56:c8:aa:13:3e:d0:d8:86:f5:3c:14:a8:79:00:21:90:00: 14:ea:8d:3c -----BEGIN CERTIFICATE----- MIIFFjCCA/6gAwIBAgISAZjXBieWOy56LLXVYiSo+nkHMA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKGE3NmRkOWRhZDc1ODc3ZjdkMjhkMTRlMDhkYzU1YjEzMzBi ZDEzYjcwHhcNMjUwODIzMTMwMjQxWhcNMjUwODI0MTMwMjQxWjAzMTEwLwYDVQQD EygyMjE3MmNiY2NlODRlZmY3MjU3Nzg5MDA5OTBkYTc4MzFkYzc0NDZkMIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEA4AwNx/k2gD6lxmc5syRJpZ3UfX3z JPc7HlelJU/WGqh2wE/bw9TFSTSm31pPXjhXSFSuaOnJAvRcMYLzM20ce5zyw7/N RwO0fzO9RRJppsu7v5uajyhx3EfICE8MyK+k+tBZNB4kQrToSo0bfJLUPSecYp3b cUkFxYlqCvd21reBlOvSsNrQ2cN3bJdxpj+FsOHZYMNBOm1u96hWNxjYqEcQKqQv MpazAlLtfCbVFeh7IZbXvJ8x0VbIj8D7gtcoxMkzjmmPvLmHepogBnn3hHvlT044 G6fJMVPOR8ipTjjux6Z06hPY8JqTf/zKOTmTo+jQ+IBfbS7WhlrPZPUpcwIDAQAB o4ICIjCCAh4wHQYDVR0OBBYEFCIXLLzOhO/3JXeJAJkNp4Mdx0RtMB8GA1UdIwQY MBaAFKdt2drXWHf30o0U4I3FWxMwvRO3MA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvcDIzWjJ0ZFlkX2ZTalJUZ2pjVmJFekM5RTdjLmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC84OS9kMDA4ODktZTVjYS00MDkwLWE2YTQt MmFjNmZmNzViZWIwLzEvcDIzWjJ0ZFlkX2ZTalJUZ2pjVmJFekM5RTdjLm1mdDCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC84OS9kMDA4ODktZTVjYS00MDkwLWE2YTQtMmFjNmZmNzViZWIw LzEvcDIzWjJ0ZFlkX2ZTalJUZ2pjVmJFekM5RTdjLmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAXV9CEx3s 7/tAwFkR9uv+R7O4y+DPzxckR/e/sCYPW0B40PpkuDbHd/20dSky9rxXeru1aWlt Z/ZopvpR6npFWeQhQvxIeqGvul95hwfSAtrE0N52ty/W/Q7lk3s4sN8hVd4Zs2Ie td5A9qmCuQ/B/sI8gl0A55uXufq9kG4RGFd3brhGnV5jq0Sm2CPFZtNdqwQ1rt4q 1q82oI87ddS9mv0BXhI9zZWXue4kPe24I7QPa0Gzu8uw+m7XEuSirX4N0SuDUi2i td0h8xCSh1NxdjPiB4ebuUWUknh8bLA7Pnog4HV3e6/Jfn0AGFbIqhM+0NiG9TwU qHkAIZAAFOqNPA== -----END CERTIFICATE-----Generated at Sat Aug 23 16:11:03 2025 by rpki-client