$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/9d/56167f-5327-4c88-b4ea-3beccaae336d/1/SeFL929C2k8qwAOmxp1hwjIOLNg.mft File: SeFL929C2k8qwAOmxp1hwjIOLNg.mft (raw, json) Hash identifier: Eudn+NLZ5ahYaMgiWevID+9h7QG+KW4AJlEbp+cYwnk= Subject key identifier: 21:99:4E:A4:7B:82:8B:8E:1D:26:23:57:E0:C2:BF:DB:FD:4A:ED:2E Authority key identifier: 49:E1:4B:F7:6F:42:DA:4F:2A:C0:03:A6:C6:9D:61:C2:32:0E:2C:D8 Certificate issuer: /CN=49e14bf76f42da4f2ac003a6c69d61c2320e2cd8 Certificate serial: 0198D54E7565180F8633CFA586BC9E5A9A46 Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/SeFL929C2k8qwAOmxp1hwjIOLNg.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/9d/56167f-5327-4c88-b4ea-3beccaae336d/1/SeFL929C2k8qwAOmxp1hwjIOLNg.mft Manifest number: 10B8 Signing time: Sat 23 Aug 2025 05:02:25 +0000 Manifest this update: Sat 23 Aug 2025 05:02:25 +0000 Manifest next update: Sun 24 Aug 2025 05:02:25 +0000 Files and hashes: 1: 1JBbxjT9LW1M45TfUBltflWXjYo.roa (hash: +kWM+UT9oOWnxVo332YivS+2g4/PD34pohQWp5gFo5E=) 2: Ns_2WTykJXWBKeAZy8ZQQTGIZ4g.roa (hash: zHFP35lrOV5ykmqGRdLeDFScFpQtr+Xab1k7m30xSdw=) 3: OANXXNT4d7OJ6o497Ctf48xykTY.roa (hash: aZ2NtskCeNGxotOVm0/S/doAkEWhZqM1q8mtGb9yHS0=) 4: RI77ZK3aqTLPg2W-XBkxR7T7p4Q.roa (hash: nk2g70SgrOg1E7ZHO+z50BOPQEJsdzJ7hk5jt1A6+b0=) 5: SeFL929C2k8qwAOmxp1hwjIOLNg.crl (hash: z5Igta7bK2hQt86dfgwQgWgXWzYW/zUT6X1JwYdGgeE=) 6: X6bDse8LmUftPmqQf4kw_btsOvE.roa (hash: j651kWeKBdPGwLMPF+EPghkkL3051eJwiT7QuhCps4o=) 7: _GcWVg1NloetvFlVnnsXCsqW9jA.roa (hash: 8fDT+HFMs22XfNV5rWe49DrDAkwxKtbv8tRmabSl16Q=) 8: h6nXxCojgmG6H44QUolSl46rG3Q.roa (hash: Jg0E3EWR0gqOThcjNWzxcD0juv44xUicy/wOavdwVH4=) 9: kLzXL1ZkV5i7SczjHie-nPdTakk.roa (hash: KSQB5UsbV0dtTyrjqQ8bJx4qGPsJFrVxBc1ZJaVStDg=) 10: zGWw5y3QtBedo3lJVh0hQTzv87w.roa (hash: LJqgZZZrONstDDkOQIUQr4bq2xXQX5fdOe5gdv77tuI=) Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/9d/56167f-5327-4c88-b4ea-3beccaae336d/1/SeFL929C2k8qwAOmxp1hwjIOLNg.crl rsync://rpki.ripe.net/repository/DEFAULT/9d/56167f-5327-4c88-b4ea-3beccaae336d/1/SeFL929C2k8qwAOmxp1hwjIOLNg.mft rsync://rpki.ripe.net/repository/DEFAULT/SeFL929C2k8qwAOmxp1hwjIOLNg.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Sun 24 Aug 2025 00:37:04 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:98:d5:4e:75:65:18:0f:86:33:cf:a5:86:bc:9e:5a:9a:46 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=49e14bf76f42da4f2ac003a6c69d61c2320e2cd8 Validity Not Before: Aug 23 05:02:25 2025 GMT Not After : Aug 24 05:02:25 2025 GMT Subject: CN=21994ea47b828b8e1d262357e0c2bfdbfd4aed2e Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:cd:f9:a2:97:bf:f9:0b:d3:24:d9:7c:e0:c3:af: 4d:e6:ee:72:3b:8a:3d:5d:6d:48:9b:29:e6:03:62: e1:9f:f0:ba:96:5e:af:39:cd:f3:02:51:ff:ec:b6: c7:29:34:fb:2b:25:41:ba:69:93:06:0f:b5:72:10: bf:a2:15:7d:6c:aa:42:90:08:6c:76:b5:f7:7a:17: 20:74:53:db:21:18:e9:49:16:33:1e:99:59:1b:d1: b6:09:0f:50:80:9e:b0:c2:60:43:46:65:64:d6:2e: 93:2a:7e:dd:64:c4:c0:00:ad:d9:07:e3:30:21:50: 47:63:78:10:93:75:41:70:98:d5:59:bf:ec:6d:53: af:7c:8e:c8:82:6e:fe:a7:0c:13:0f:20:c2:0f:6a: c2:12:dd:37:1a:31:b1:26:52:cb:b9:1a:6c:d5:ac: 28:b2:72:d0:cb:60:1b:62:30:62:cf:1c:b8:1b:a4: a1:0c:c0:75:56:fd:6a:ed:cf:9b:da:aa:40:96:23: 40:92:f1:cc:94:5a:97:cc:8b:71:d7:2a:be:5c:17: 20:c0:eb:aa:7a:f5:67:c9:31:16:1b:90:3e:54:dc: e2:bc:64:87:b3:06:48:c8:ea:bb:37:c6:c9:d3:a8: d5:e3:91:b8:17:0b:cf:2d:21:39:42:28:6c:5d:61: 13:af Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 21:99:4E:A4:7B:82:8B:8E:1D:26:23:57:E0:C2:BF:DB:FD:4A:ED:2E X509v3 Authority Key Identifier: keyid:49:E1:4B:F7:6F:42:DA:4F:2A:C0:03:A6:C6:9D:61:C2:32:0E:2C:D8 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/SeFL929C2k8qwAOmxp1hwjIOLNg.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/9d/56167f-5327-4c88-b4ea-3beccaae336d/1/SeFL929C2k8qwAOmxp1hwjIOLNg.mft X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/9d/56167f-5327-4c88-b4ea-3beccaae336d/1/SeFL929C2k8qwAOmxp1hwjIOLNg.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 3a:0a:68:52:c4:04:15:e9:4e:7f:37:18:59:ac:fb:0b:0f:bf: 91:74:7b:2b:36:aa:3c:89:3d:bf:d4:ff:33:79:62:c7:f3:ba: a3:02:54:ec:6c:83:9b:ea:37:94:50:8c:d3:91:47:a5:eb:87: d4:0d:76:e3:fc:35:04:52:bf:34:15:30:f9:a4:c6:bc:da:d1: 20:3c:cc:95:4d:ce:bd:9f:de:19:13:6c:f6:7b:c8:29:37:9d: 23:07:f6:39:24:76:7e:a3:ce:94:dc:67:3a:c7:3b:2f:0e:70: 53:be:32:2b:75:28:88:94:89:4b:4d:fd:51:b3:09:e2:ae:45: a0:ff:8c:ac:1e:d0:62:87:50:ae:9f:4c:6b:70:ee:20:ce:2a: 86:cc:32:43:6f:aa:6c:e3:ba:b4:85:6f:27:ab:46:66:b1:a9: b1:5a:7b:a3:b1:85:b6:d2:31:60:87:f4:19:7a:a6:ed:75:d6: 6b:d9:3e:a1:db:af:09:0c:c4:04:09:93:26:d9:c0:f2:d9:55: c1:c5:21:39:70:f3:bb:61:1b:02:26:23:b0:d1:21:30:90:3e: 15:75:c9:ab:c9:2b:0c:a6:91:e1:a7:0d:87:70:6c:ce:f4:b7: 29:0d:00:45:b4:44:df:93:99:df:cf:76:f4:55:b7:0f:8a:e6: 9b:9a:9f:2b -----BEGIN CERTIFICATE----- MIIFFjCCA/6gAwIBAgISAZjVTnVlGA+GM8+lhryeWppGMA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKDQ5ZTE0YmY3NmY0MmRhNGYyYWMwMDNhNmM2OWQ2MWMyMzIw ZTJjZDgwHhcNMjUwODIzMDUwMjI1WhcNMjUwODI0MDUwMjI1WjAzMTEwLwYDVQQD EygyMTk5NGVhNDdiODI4YjhlMWQyNjIzNTdlMGMyYmZkYmZkNGFlZDJlMIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAzfmil7/5C9Mk2Xzgw69N5u5yO4o9 XW1ImynmA2Lhn/C6ll6vOc3zAlH/7LbHKTT7KyVBummTBg+1chC/ohV9bKpCkAhs drX3ehcgdFPbIRjpSRYzHplZG9G2CQ9QgJ6wwmBDRmVk1i6TKn7dZMTAAK3ZB+Mw IVBHY3gQk3VBcJjVWb/sbVOvfI7Igm7+pwwTDyDCD2rCEt03GjGxJlLLuRps1awo snLQy2AbYjBizxy4G6ShDMB1Vv1q7c+b2qpAliNAkvHMlFqXzItx1yq+XBcgwOuq evVnyTEWG5A+VNzivGSHswZIyOq7N8bJ06jV45G4FwvPLSE5QihsXWETrwIDAQAB o4ICIjCCAh4wHQYDVR0OBBYEFCGZTqR7gouOHSYjV+DCv9v9Su0uMB8GA1UdIwQY MBaAFEnhS/dvQtpPKsADpsadYcIyDizYMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvU2VGTDkyOUMyazhxd0FPbXhwMWh3aklPTE5nLmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC85ZC81NjE2N2YtNTMyNy00Yzg4LWI0ZWEt M2JlY2NhYWUzMzZkLzEvU2VGTDkyOUMyazhxd0FPbXhwMWh3aklPTE5nLm1mdDCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC85ZC81NjE2N2YtNTMyNy00Yzg4LWI0ZWEtM2JlY2NhYWUzMzZk LzEvU2VGTDkyOUMyazhxd0FPbXhwMWh3aklPTE5nLmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAOgpoUsQE FelOfzcYWaz7Cw+/kXR7KzaqPIk9v9T/M3lix/O6owJU7GyDm+o3lFCM05FHpeuH 1A124/w1BFK/NBUw+aTGvNrRIDzMlU3OvZ/eGRNs9nvIKTedIwf2OSR2fqPOlNxn Osc7Lw5wU74yK3UoiJSJS039UbMJ4q5FoP+MrB7QYodQrp9Ma3DuIM4qhswyQ2+q bOO6tIVvJ6tGZrGpsVp7o7GFttIxYIf0GXqm7XXWa9k+oduvCQzEBAmTJtnA8tlV wcUhOXDzu2EbAiYjsNEhMJA+FXXJq8krDKaR4acNh3BszvS3KQ0ARbRE35OZ3892 9FW3D4rmm5qfKw== -----END CERTIFICATE-----Generated at Sat Aug 23 09:42:04 2025 by rpki-client