$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/90/c48271-dee5-4841-a7dd-b0d72e910efe/1/SIxl3DWbWMprpdPa64dPBYaE6MY.mft File: SIxl3DWbWMprpdPa64dPBYaE6MY.mft (raw, json) Hash identifier: UsFMBtPjhQHu+ix8JXpt7YMXjgOelhFIRcT+j8j5R+g= Subject key identifier: 57:BA:18:BE:51:90:52:17:CE:34:E0:BA:68:AE:B8:F9:B9:5E:97:06 Authority key identifier: 48:8C:65:DC:35:9B:58:CA:6B:A5:D3:DA:EB:87:4F:05:86:84:E8:C6 Certificate issuer: /CN=488c65dc359b58ca6ba5d3daeb874f058684e8c6 Certificate serial: 0198D5F1A769BD9BC5012789FDCA7EF95020 Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/SIxl3DWbWMprpdPa64dPBYaE6MY.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/90/c48271-dee5-4841-a7dd-b0d72e910efe/1/SIxl3DWbWMprpdPa64dPBYaE6MY.mft Manifest number: 0BA7 Signing time: Sat 23 Aug 2025 08:00:40 +0000 Manifest this update: Sat 23 Aug 2025 08:00:40 +0000 Manifest next update: Sun 24 Aug 2025 08:00:40 +0000 Files and hashes: 1: 1-aj5T9Cp2VGdvqAo0BLyNQl0OP0.roa (hash: wS9UY1GzEmJu3DzghbibQIVXymTHZMRkgirREpKzVig=) 2: CUbuh0PM3yqW-CpytCXAWwYdQ7Q.roa (hash: j6MdXA11jocwq2zYd6v7F0+Oq8jAXnx5FNp5BWwzZDI=) 3: GlW6zMLj6EttAmWKHy7iwfBhWZE.roa (hash: ABJiNZOFb+afM+eJQ3jwpevUgACzN0c5eNSdwc405sQ=) 4: L80pK6ObZRSScU_AZIXdqKhbLPs.roa (hash: 18whVklVMP7ZtNSmFR8DrFdceRMOWEFp28FcU5z0yMo=) 5: OZiwI2QkuuLbAOllr-XJlZEbneE.roa (hash: mXAIyClIU1Z4vpuyMsGiBBynCYmQ4v0FodyB8WIXhxk=) 6: PIHm_2dfJM_TGdcbwqQtnYwPXVY.roa (hash: kVHy+yISe5vrX43T3bIZxXbjFq8ypYr+GWkGUxqbMqI=) 7: SIxl3DWbWMprpdPa64dPBYaE6MY.crl (hash: KbXMkAKqoRxPYuf+Rl9aGkLF9g2wmU/dtl6FZzr4yqs=) 8: cSVJv9Y-FnxxLG20frdAri_noBk.roa (hash: 34paWKddNtWaw0Vl7xzlk/3/M190Z6IXyvbGbAK4Tj8=) 9: ea6BO6jv5qXL6KOn3swl4W7fpN8.roa (hash: qb7RyOCex8dd5d/iXyz9TFdFXAm9eOIl5Q9VrGqRffk=) 10: f83w0UBpgcJD0dA64iAq7lmXARw.roa (hash: f9wovq1EqzUTh58ehH2r8oD0Nk4JJQcPOCa3DaAqpnI=) 11: h-PNQcjWOScse8WjyOhQeSbv950.roa (hash: /sFDGAAGqPfiAFmlm5KuC6NUsSeC3ZuPzrCQYYwFUic=) 12: mNSZJOUVeZicld4QAL_-bUUCGDI.roa (hash: nBD9zjll4ut7eXUVf0/WxLdu+1b2MWKBGI9qLKkr07w=) 13: qxsheS1XzS3dymYbKGRvC_3BiO4.roa (hash: VtweZ6shC74Bgwh1irW6gEbqeXbHeH8CL8orxJ3cqko=) 14: sejuuPdZzCrTGWMQL8q6fL6s1bI.roa (hash: Ijpq2YAMnAhyxDacqfun38Wp4QxYF9meZt2cnqXBEVs=) 15: z4bsjVbTnI81Y7pi92gQtwuMcMA.roa (hash: 6k5So3y2nhT6Ksfiwx9bk8ELUKmJlBzOynlhbHwQFMg=) Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/90/c48271-dee5-4841-a7dd-b0d72e910efe/1/SIxl3DWbWMprpdPa64dPBYaE6MY.crl rsync://rpki.ripe.net/repository/DEFAULT/90/c48271-dee5-4841-a7dd-b0d72e910efe/1/SIxl3DWbWMprpdPa64dPBYaE6MY.mft rsync://rpki.ripe.net/repository/DEFAULT/SIxl3DWbWMprpdPa64dPBYaE6MY.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Sun 24 Aug 2025 05:01:29 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:98:d5:f1:a7:69:bd:9b:c5:01:27:89:fd:ca:7e:f9:50:20 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=488c65dc359b58ca6ba5d3daeb874f058684e8c6 Validity Not Before: Aug 23 08:00:40 2025 GMT Not After : Aug 24 08:00:40 2025 GMT Subject: CN=57ba18be51905217ce34e0ba68aeb8f9b95e9706 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:d5:5c:35:92:0d:fa:15:66:c2:50:6f:8e:1a:a4: b4:fb:ce:c3:70:bc:aa:5c:62:ca:2c:54:93:ef:ff: 7f:a7:f7:ad:04:28:c9:86:04:5b:c2:12:4b:d0:8b: fa:4d:bf:5c:97:f8:f2:85:94:e1:4c:1a:98:62:b6: 03:b5:e1:26:fd:ab:02:49:00:6a:40:1b:37:57:6a: a4:ae:33:cc:37:23:0b:3d:58:5f:e1:7c:8b:10:87: 72:8e:52:44:dc:79:66:78:a1:29:50:ff:2a:67:9d: df:40:61:62:c1:a5:30:be:5d:84:9b:ab:34:12:ac: ca:e3:aa:e2:80:9b:13:e7:3f:66:07:1d:26:f8:3a: 6c:a9:9f:4a:30:90:56:89:67:4c:1a:fb:8d:b6:21: 1f:ee:5d:b2:3c:8a:f9:ce:46:62:fa:1d:0e:78:7b: 4a:d4:95:3e:5f:a1:22:b8:fb:db:9a:63:bd:ef:33: e4:04:e4:56:5d:9f:95:a7:41:e1:aa:c1:d9:e7:19: 01:44:d1:39:10:9a:90:ce:ae:9a:43:21:06:6e:12: bd:00:eb:38:76:94:53:c6:f8:ee:01:4f:2e:be:87: db:71:b1:c3:e0:87:fd:fe:58:7b:b8:28:fb:9b:78: fe:9e:91:69:93:cb:43:a5:47:2d:be:20:c9:36:8c: ae:65 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 57:BA:18:BE:51:90:52:17:CE:34:E0:BA:68:AE:B8:F9:B9:5E:97:06 X509v3 Authority Key Identifier: keyid:48:8C:65:DC:35:9B:58:CA:6B:A5:D3:DA:EB:87:4F:05:86:84:E8:C6 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/SIxl3DWbWMprpdPa64dPBYaE6MY.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/90/c48271-dee5-4841-a7dd-b0d72e910efe/1/SIxl3DWbWMprpdPa64dPBYaE6MY.mft X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/90/c48271-dee5-4841-a7dd-b0d72e910efe/1/SIxl3DWbWMprpdPa64dPBYaE6MY.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 80:cd:14:95:c5:f2:48:0d:06:20:ad:65:fb:48:0c:e7:62:4b: 81:ef:79:51:30:1b:08:49:a4:75:97:c4:5d:06:e0:84:01:08: ae:06:55:9b:d4:34:cc:4b:45:5e:b1:c4:df:7e:c6:6e:7b:15: 4a:85:48:4a:73:64:a4:74:3e:e8:0e:e3:ae:a9:b7:20:3b:9c: ac:c6:16:8c:37:ad:df:1f:05:5c:aa:dc:22:10:14:58:66:00: 47:3a:92:d3:3b:9a:9f:ce:45:2e:6d:bb:db:ea:05:87:aa:e3: 66:74:7e:79:18:1a:5b:79:bd:17:9e:f8:1f:3b:5b:3c:1b:d5: e4:ff:b1:a5:d1:c3:9b:30:53:65:24:3a:6e:43:c3:a3:04:8e: 1d:42:80:48:ba:eb:c2:b8:ce:a6:b8:0d:45:59:8d:26:22:5c: 87:68:ea:84:d3:7b:0b:bb:d4:34:70:93:40:25:7b:ea:13:cf: 4c:13:a0:73:6c:67:77:ed:a0:cd:eb:c8:36:b6:18:06:d1:59: 6e:bb:b8:14:7a:f6:07:e4:8a:6c:c0:d9:08:3d:c3:75:e0:bc: e3:08:0a:3e:88:66:8e:41:1a:06:d3:b0:a7:16:1c:59:e9:59: e8:82:aa:32:d5:70:d4:fd:36:3e:79:c4:e5:e1:c1:e7:ce:4f: c1:3e:1f:be -----BEGIN CERTIFICATE----- MIIFFjCCA/6gAwIBAgISAZjV8adpvZvFASeJ/cp++VAgMA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKDQ4OGM2NWRjMzU5YjU4Y2E2YmE1ZDNkYWViODc0ZjA1ODY4 NGU4YzYwHhcNMjUwODIzMDgwMDQwWhcNMjUwODI0MDgwMDQwWjAzMTEwLwYDVQQD Eyg1N2JhMThiZTUxOTA1MjE3Y2UzNGUwYmE2OGFlYjhmOWI5NWU5NzA2MIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEA1Vw1kg36FWbCUG+OGqS0+87DcLyq XGLKLFST7/9/p/etBCjJhgRbwhJL0Iv6Tb9cl/jyhZThTBqYYrYDteEm/asCSQBq QBs3V2qkrjPMNyMLPVhf4XyLEIdyjlJE3HlmeKEpUP8qZ53fQGFiwaUwvl2Em6s0 EqzK46rigJsT5z9mBx0m+DpsqZ9KMJBWiWdMGvuNtiEf7l2yPIr5zkZi+h0OeHtK 1JU+X6EiuPvbmmO97zPkBORWXZ+Vp0HhqsHZ5xkBRNE5EJqQzq6aQyEGbhK9AOs4 dpRTxvjuAU8uvofbcbHD4If9/lh7uCj7m3j+npFpk8tDpUctviDJNoyuZQIDAQAB o4ICIjCCAh4wHQYDVR0OBBYEFFe6GL5RkFIXzjTgumiuuPm5XpcGMB8GA1UdIwQY MBaAFEiMZdw1m1jKa6XT2uuHTwWGhOjGMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvU0l4bDNEV2JXTXBycGRQYTY0ZFBCWWFFNk1ZLmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC85MC9jNDgyNzEtZGVlNS00ODQxLWE3ZGQt YjBkNzJlOTEwZWZlLzEvU0l4bDNEV2JXTXBycGRQYTY0ZFBCWWFFNk1ZLm1mdDCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC85MC9jNDgyNzEtZGVlNS00ODQxLWE3ZGQtYjBkNzJlOTEwZWZl LzEvU0l4bDNEV2JXTXBycGRQYTY0ZFBCWWFFNk1ZLmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAgM0UlcXy SA0GIK1l+0gM52JLge95UTAbCEmkdZfEXQbghAEIrgZVm9Q0zEtFXrHE337GbnsV SoVISnNkpHQ+6A7jrqm3IDucrMYWjDet3x8FXKrcIhAUWGYARzqS0zuan85FLm27 2+oFh6rjZnR+eRgaW3m9F574HztbPBvV5P+xpdHDmzBTZSQ6bkPDowSOHUKASLrr wrjOprgNRVmNJiJch2jqhNN7C7vUNHCTQCV76hPPTBOgc2xnd+2gzevINrYYBtFZ bru4FHr2B+SKbMDZCD3DdeC84wgKPohmjkEaBtOwpxYcWelZ6IKqMtVw1P02PnnE 5eHB585PwT4fvg== -----END CERTIFICATE-----Generated at Sat Aug 23 15:33:28 2025 by rpki-client