$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/92/f153dc-cbfb-4a4f-80d2-745e08fe58c6/1/sLWoCnEG4KS4VFyBULtyxpn8yaA.mft File: sLWoCnEG4KS4VFyBULtyxpn8yaA.mft (raw, json) Hash identifier: lY/wvEm5z1ryhJIkdqrWyeyGDoVp7wZGXVxOdj1NNdY= Subject key identifier: 9E:D4:D5:6B:42:C6:42:5B:A9:19:05:14:65:A5:4E:F6:3F:26:D0:4E Authority key identifier: B0:B5:A8:0A:71:06:E0:A4:B8:54:5C:81:50:BB:72:C6:99:FC:C9:A0 Certificate issuer: /CN=b0b5a80a7106e0a4b8545c8150bb72c699fcc9a0 Certificate serial: 0198D65FEA02467A0694C05592A500A3F09C Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/sLWoCnEG4KS4VFyBULtyxpn8yaA.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/92/f153dc-cbfb-4a4f-80d2-745e08fe58c6/1/sLWoCnEG4KS4VFyBULtyxpn8yaA.mft Manifest number: 1668 Signing time: Sat 23 Aug 2025 10:01:06 +0000 Manifest this update: Sat 23 Aug 2025 10:01:06 +0000 Manifest next update: Sun 24 Aug 2025 10:01:06 +0000 Files and hashes: 1: 60jG5Ay8pKNRLAaYiabGAbMAWcU.roa (hash: mGDjXdclRD6cM00fzezmu8njPZGu0i86EMmzQCWdsaI=) 2: 8NknCKB4mqEufbZ6UbHgAa8xKGk.roa (hash: +VuXhmjH2zdhVZOeQIf+1XfhIBEvtUJA5CNUFP6jbIc=) 3: Cwb1KDzjyZP06ERQCkOqE8eDn-Q.roa (hash: qEbiLSfggbr/wcV1CfVb4G8sOcwZPVPdEo2xFZT7GWw=) 4: ULGt5CdhlE1JEjeG7VsVStOraA8.roa (hash: RKuD3ZtjSv+b+szTB+emIP6q+hmA+ntSP7hJQn+VQLA=) 5: XXx0PZbW0VSnHcKqWvct0KGeX5o.roa (hash: fg2kYbNMaJFsDmSVzEYMa+3owPgOnqiysynI+fCXGgg=) 6: XqyfpygCBb8Q3tIPPqdoPK94M0A.roa (hash: 2VTgMTAP00AWrF9/qszpE/dPLTmJ6fjO0h7TyCaHdtE=) 7: _xekjSFtSAUujx70CN_lqAzDOTI.roa (hash: RCBKZCow8/qZDtOMSChrlpX+0rMSwhsyivwOBDzZ8y0=) 8: d5wYN4sqYmgKKKUN9X-8jp9PKTs.roa (hash: /7Xb7BgMP/VziPk4Q/U+uMUdmAyttT7O93i5sL6urDU=) 9: jU-enqBlwHSK5LFQUkQMv3mnQ3c.roa (hash: XGjlZdDrp7Q05Es+vT4dQhjxGrAgZ9KHZykl/3VpHuk=) 10: rgPd-lPBT_KjoGNurNCPr8-tYLM.roa (hash: 7UFfmlghHed6gv5YUhlj2bi7/Km6EbVr9jqYqXUYH8o=) 11: sLWoCnEG4KS4VFyBULtyxpn8yaA.crl (hash: QHNtg81iHs/I6IhipNBcMI9+EDM026/hLhE9QjOM098=) 12: uYQNZGrXH6jilfHVW7M6-uKjZF8.roa (hash: K7dbhIw3GKL8CpYsfdoECZtVDjcGxNIlpZxMSzxg0fc=) 13: zad7TKoNmHhoc0CyHOzgSXKr6f4.roa (hash: LQ6zogTRTgGoz9vqyWdA5yZND4PDb2ytjo7mWtS7rF8=) Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/92/f153dc-cbfb-4a4f-80d2-745e08fe58c6/1/sLWoCnEG4KS4VFyBULtyxpn8yaA.crl rsync://rpki.ripe.net/repository/DEFAULT/92/f153dc-cbfb-4a4f-80d2-745e08fe58c6/1/sLWoCnEG4KS4VFyBULtyxpn8yaA.mft rsync://rpki.ripe.net/repository/DEFAULT/sLWoCnEG4KS4VFyBULtyxpn8yaA.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Sun 24 Aug 2025 05:01:29 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:98:d6:5f:ea:02:46:7a:06:94:c0:55:92:a5:00:a3:f0:9c Signature Algorithm: sha256WithRSAEncryption Issuer: CN=b0b5a80a7106e0a4b8545c8150bb72c699fcc9a0 Validity Not Before: Aug 23 10:01:06 2025 GMT Not After : Aug 24 10:01:06 2025 GMT Subject: CN=9ed4d56b42c6425ba919051465a54ef63f26d04e Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:97:bd:3b:7c:96:ae:99:f7:60:6b:cb:38:4a:a7: 9d:dd:a1:be:47:19:6d:53:0d:d4:f0:31:4b:62:15: b0:f8:c1:0a:d6:ec:2d:94:4e:3b:97:96:d5:d3:e3: 4f:a8:31:e1:b0:c4:28:d0:06:42:e3:23:51:07:0d: c7:53:1b:d7:3a:19:a3:0c:4c:9c:61:0f:f8:96:7b: 96:8f:16:61:97:c7:75:36:d7:de:b9:35:9d:c8:1b: 15:b9:43:4b:13:d1:ac:ec:b3:00:d0:b3:77:5e:d1: e8:16:e3:85:37:f9:ef:46:4a:fc:25:da:9a:59:97: fd:b7:94:72:f4:0f:7c:19:95:f6:e7:66:67:c4:ac: ef:fb:62:8c:f6:f5:47:04:91:f3:fc:4b:6c:0f:ed: 31:e4:82:99:1d:a2:74:dc:6c:5a:02:9c:0e:4c:91: fc:8c:65:be:3c:31:d0:f0:27:b8:9e:8a:1c:86:fd: e8:09:ff:57:7d:7e:ed:23:4e:df:fa:00:6e:aa:72: 8e:d4:6b:ae:91:1a:75:8c:7e:60:e4:76:3c:f7:2f: 73:ea:df:73:5c:9a:f4:06:b2:b3:c4:50:29:9a:50: 7e:b2:90:c1:43:82:25:c3:fa:5a:8e:f4:a9:6a:e5: f7:e7:4a:49:bb:97:45:f3:11:72:67:d3:3e:fe:c3: ba:a1 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 9E:D4:D5:6B:42:C6:42:5B:A9:19:05:14:65:A5:4E:F6:3F:26:D0:4E X509v3 Authority Key Identifier: keyid:B0:B5:A8:0A:71:06:E0:A4:B8:54:5C:81:50:BB:72:C6:99:FC:C9:A0 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/sLWoCnEG4KS4VFyBULtyxpn8yaA.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/92/f153dc-cbfb-4a4f-80d2-745e08fe58c6/1/sLWoCnEG4KS4VFyBULtyxpn8yaA.mft X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/92/f153dc-cbfb-4a4f-80d2-745e08fe58c6/1/sLWoCnEG4KS4VFyBULtyxpn8yaA.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 75:de:2e:d4:31:9d:31:4c:f3:8d:88:01:a7:34:ac:02:7c:33: 1c:c6:f7:62:77:4a:97:5b:14:40:01:ee:df:25:d2:92:20:9c: 3a:3d:d4:51:73:66:2a:23:8c:a2:03:02:c9:ea:aa:e8:c4:6c: a8:a0:c8:d9:8e:b2:3e:ef:a9:05:85:95:0e:10:2e:12:05:b4: e2:03:10:1c:63:72:90:d9:43:0b:c7:28:93:47:f6:fc:49:f9: a3:b1:b0:2a:13:a5:95:6f:cd:95:19:dc:85:cc:1c:f0:3d:af: 55:71:c4:78:31:b8:49:92:f8:56:68:a3:53:2f:a7:4a:54:31: 43:06:27:ab:02:b1:ff:0c:db:48:3f:6c:80:79:ff:e8:e3:5c: 35:1b:9b:ee:b3:a1:b1:33:a9:51:87:57:98:a3:82:59:dc:0a: 6a:fb:0a:44:3b:24:4a:ab:cc:28:6c:23:c2:d0:db:63:eb:d7: 8f:8b:c0:53:50:dc:58:f5:6b:34:02:92:c8:27:2d:c7:95:74: 2b:de:bb:c4:4e:64:bf:f8:38:dc:30:63:bf:75:48:8f:97:fe: df:b7:79:2e:d6:42:b2:85:74:3e:ca:be:8f:ac:7c:7f:98:30: 4e:72:ad:11:a7:00:13:4a:bf:a3:8f:14:3a:fa:18:27:1b:1d: da:54:2f:77 -----BEGIN CERTIFICATE----- MIIFFjCCA/6gAwIBAgISAZjWX+oCRnoGlMBVkqUAo/CcMA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKGIwYjVhODBhNzEwNmUwYTRiODU0NWM4MTUwYmI3MmM2OTlm Y2M5YTAwHhcNMjUwODIzMTAwMTA2WhcNMjUwODI0MTAwMTA2WjAzMTEwLwYDVQQD Eyg5ZWQ0ZDU2YjQyYzY0MjViYTkxOTA1MTQ2NWE1NGVmNjNmMjZkMDRlMIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAl707fJaumfdga8s4Sqed3aG+Rxlt Uw3U8DFLYhWw+MEK1uwtlE47l5bV0+NPqDHhsMQo0AZC4yNRBw3HUxvXOhmjDEyc YQ/4lnuWjxZhl8d1NtfeuTWdyBsVuUNLE9Gs7LMA0LN3XtHoFuOFN/nvRkr8Jdqa WZf9t5Ry9A98GZX252ZnxKzv+2KM9vVHBJHz/EtsD+0x5IKZHaJ03GxaApwOTJH8 jGW+PDHQ8Ce4noochv3oCf9XfX7tI07f+gBuqnKO1GuukRp1jH5g5HY89y9z6t9z XJr0BrKzxFApmlB+spDBQ4Ilw/pajvSpauX350pJu5dF8xFyZ9M+/sO6oQIDAQAB o4ICIjCCAh4wHQYDVR0OBBYEFJ7U1WtCxkJbqRkFFGWlTvY/JtBOMB8GA1UdIwQY MBaAFLC1qApxBuCkuFRcgVC7csaZ/MmgMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvc0xXb0NuRUc0S1M0VkZ5QlVMdHl4cG44eWFBLmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC85Mi9mMTUzZGMtY2JmYi00YTRmLTgwZDIt NzQ1ZTA4ZmU1OGM2LzEvc0xXb0NuRUc0S1M0VkZ5QlVMdHl4cG44eWFBLm1mdDCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC85Mi9mMTUzZGMtY2JmYi00YTRmLTgwZDItNzQ1ZTA4ZmU1OGM2 LzEvc0xXb0NuRUc0S1M0VkZ5QlVMdHl4cG44eWFBLmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAdd4u1DGd MUzzjYgBpzSsAnwzHMb3YndKl1sUQAHu3yXSkiCcOj3UUXNmKiOMogMCyeqq6MRs qKDI2Y6yPu+pBYWVDhAuEgW04gMQHGNykNlDC8cok0f2/En5o7GwKhOllW/NlRnc hcwc8D2vVXHEeDG4SZL4VmijUy+nSlQxQwYnqwKx/wzbSD9sgHn/6ONcNRub7rOh sTOpUYdXmKOCWdwKavsKRDskSqvMKGwjwtDbY+vXj4vAU1DcWPVrNAKSyCctx5V0 K967xE5kv/g43DBjv3VIj5f+37d5LtZCsoV0Psq+j6x8f5gwTnKtEacAE0q/o48U OvoYJxsd2lQvdw== -----END CERTIFICATE-----Generated at Sat Aug 23 12:32:16 2025 by rpki-client