$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/9e/aba502-d191-4fd7-a7cf-504f2766760f/1/snJh1xU0i_1zzp27ckiGVpk7ovE.mft File: snJh1xU0i_1zzp27ckiGVpk7ovE.mft (raw, json) Hash identifier: Q2cZ7Ne5BhfVrpg/LTKaQdX4nuTKzRA29cpUC3zwZec= Subject key identifier: 53:BE:36:01:10:55:2B:56:E4:5F:5D:66:ED:E3:13:89:C9:58:E4:0C Authority key identifier: B2:72:61:D7:15:34:8B:FD:73:CE:9D:BB:72:48:86:56:99:3B:A2:F1 Certificate issuer: /CN=b27261d715348bfd73ce9dbb72488656993ba2f1 Certificate serial: 0198D4A859DB2752ADDAA518711E1F007E85 Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/snJh1xU0i_1zzp27ckiGVpk7ovE.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/9e/aba502-d191-4fd7-a7cf-504f2766760f/1/snJh1xU0i_1zzp27ckiGVpk7ovE.mft Manifest number: 1176 Signing time: Sat 23 Aug 2025 02:00:59 +0000 Manifest this update: Sat 23 Aug 2025 02:00:59 +0000 Manifest next update: Sun 24 Aug 2025 02:00:59 +0000 Files and hashes: 1: 54iLRsUEYQSLlV8kHVTer9P4keA.roa (hash: Oib7LJlXh4bUMGiTPxF+59IQOdwF+fvCUOmQ1Sv5YqM=) 2: 83ZfI9Fyoy0-0Ed7XViCJUVWAUk.roa (hash: x5Erfp0LUGN9evcbs1ECyXblatyvnAhrnm8OrbCDB8k=) 3: DtWqKYrRCyGx6dsd9f2L7CKfIRc.roa (hash: O7NemdIlDZpd4quz6YecLMnjW1CyD/u06cKhcBOTRro=) 4: GrZCo-Pl-pKds5zmwg7ubalVFTA.roa (hash: XSM4rBpjvcsUyAb/r/u55Oo3ZCJqxZNIGwjYsJQ68bw=) 5: M80ufUXhkNHfa9K4zU6X6k_ofZQ.roa (hash: 4dQl+qST57nUFs67WwcEmlUV01oY2iEO29630JMqbwE=) 6: OcXOGlX2Gc26JEdm5iWVWnBYg58.roa (hash: /vGDKbgE4iZUS4BzIvVP16inipE2apdXrS0M45rcngw=) 7: QpucqboD9L8Uv9-I8wC2eqyytjM.roa (hash: QJ36JcAEae+tPmwoLHxsrKQ/qHkNlapv2iTQudy3nXg=) 8: VLrSYlONO7JZUvaeI6OzgjRksA0.roa (hash: LTkUIoLhvOTPKcASxWAtrGL8orynFjazuB3yg7c0ZYo=) 9: W95VCieFrYA-UWvQbNSL7N3Y2Cg.roa (hash: YvWvtJ9d+roXNfi60DzUNUYY7G9jfkQp1ZTCPAwbx+g=) 10: Yw4yz2qvg4rQujrK-dIx_KPixQM.roa (hash: rPOdhOXTd0LJkvjvgXHjpfcSX15w4WKfBaBl0s4PykM=) 11: mMdAkncXd62KSLEMH5-GZ2xifmI.roa (hash: BsiKxHj0OcEVg20ZYqrvGiqQgj+ynivI6054d313+QE=) 12: snJh1xU0i_1zzp27ckiGVpk7ovE.crl (hash: +lbnW8dg+X4S0cMNX6pwYG7aQ2Jy1skSeSiInfedhsA=) 13: tXmj_lk4J_cxjq5mg9Y-DnR4g68.roa (hash: FkJnyg1Nbp4kUP6A2c71ys6CgKIoTjWwYiDec6OD1BY=) 14: x93oIxwN7f9CnY5MK-gEMFA9RCs.roa (hash: iUrM+UkqfotbOBAOD6sNrVDAFzEQJnu2I0F39zCKGjM=) 15: x_9TAtatN7OaJxTBmrfHpUlXZDA.roa (hash: 2gG4s/omQ5P0Lbi33p1Th/x4L/bao6YkNKtuc6UmamA=) Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/9e/aba502-d191-4fd7-a7cf-504f2766760f/1/snJh1xU0i_1zzp27ckiGVpk7ovE.crl rsync://rpki.ripe.net/repository/DEFAULT/9e/aba502-d191-4fd7-a7cf-504f2766760f/1/snJh1xU0i_1zzp27ckiGVpk7ovE.mft rsync://rpki.ripe.net/repository/DEFAULT/snJh1xU0i_1zzp27ckiGVpk7ovE.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Sun 24 Aug 2025 02:00:59 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:98:d4:a8:59:db:27:52:ad:da:a5:18:71:1e:1f:00:7e:85 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=b27261d715348bfd73ce9dbb72488656993ba2f1 Validity Not Before: Aug 23 02:00:59 2025 GMT Not After : Aug 24 02:00:59 2025 GMT Subject: CN=53be360110552b56e45f5d66ede31389c958e40c Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:b5:be:52:fc:98:e9:d1:05:dd:d4:6d:87:67:53: 04:ac:44:4b:ed:9d:bf:75:2c:e2:f5:c6:4b:42:f7: 8d:05:67:5f:dc:7d:da:d3:74:19:3c:8b:6d:b0:53: 90:22:16:6b:00:f3:bd:7d:fb:e0:8a:8d:41:a3:34: 75:e2:87:d7:62:b3:3f:b0:fa:f2:9b:a7:63:83:fb: 19:ff:61:23:69:14:84:84:5c:e4:c0:a5:5b:67:fe: e7:b3:2c:09:1b:fa:89:74:d8:25:4d:7a:87:7c:66: 31:f7:dc:63:99:af:b3:97:65:b4:54:f2:19:09:26: a4:48:37:60:9b:60:6a:fa:69:61:c6:5b:7c:05:b2: cd:c9:b5:0a:c7:08:62:2d:1a:dd:35:9f:c7:6c:35: b7:6e:46:93:bc:75:28:e1:b4:a6:3d:0c:bc:0e:cc: bb:ef:92:f1:02:f9:1e:83:11:1a:3e:dc:23:46:9f: fa:92:8a:44:f7:24:02:34:23:c1:4c:cc:2d:a1:ca: cf:90:88:69:7d:7e:45:81:08:63:21:65:69:d7:42: d8:e8:35:d6:04:03:b3:dc:09:09:9a:52:12:2e:a7: b6:f2:8e:5a:a7:5c:3f:9e:42:a3:32:67:19:04:f6: 1c:9b:34:b5:b6:09:ec:f8:3c:a3:2f:cb:95:cc:ef: dd:83 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 53:BE:36:01:10:55:2B:56:E4:5F:5D:66:ED:E3:13:89:C9:58:E4:0C X509v3 Authority Key Identifier: keyid:B2:72:61:D7:15:34:8B:FD:73:CE:9D:BB:72:48:86:56:99:3B:A2:F1 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/snJh1xU0i_1zzp27ckiGVpk7ovE.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/9e/aba502-d191-4fd7-a7cf-504f2766760f/1/snJh1xU0i_1zzp27ckiGVpk7ovE.mft X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/9e/aba502-d191-4fd7-a7cf-504f2766760f/1/snJh1xU0i_1zzp27ckiGVpk7ovE.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 0b:bd:e2:8c:c9:5e:07:43:ea:94:fe:a7:04:a8:d4:0d:67:9a: c9:a3:54:f4:2b:96:e1:7e:47:2c:e0:b3:8e:13:a0:ad:67:45: 3f:f8:84:1e:a6:c2:40:ea:97:8d:6e:3c:d1:17:9a:0a:01:03: f5:16:b4:fc:74:e7:f8:e6:7a:08:ba:c7:83:2f:75:ee:a1:db: de:c5:05:c8:ed:20:92:d8:0d:2b:0f:82:77:af:7f:cb:25:0d: 61:0b:2e:c3:f0:cf:31:a5:df:6e:e6:2c:f8:d1:34:a1:2b:3a: c0:fe:cb:16:8d:04:d8:d4:0d:10:cd:58:d4:3a:b9:5b:1f:32: d1:f3:76:a6:4c:af:dd:d2:3b:2a:f6:9d:90:6c:d4:63:ca:ca: 95:c8:33:fd:c0:38:f5:bf:3f:d8:5f:09:73:c0:08:09:a6:3a: a6:40:e2:0c:08:00:f1:8d:72:3b:75:24:16:94:4a:13:b6:64: 8e:3d:2d:87:01:53:17:52:8d:a4:4b:ce:cf:30:ab:5c:05:ad: 7d:60:31:a2:3f:4a:c7:41:d1:53:99:67:9b:48:65:a2:8d:c9: d7:07:49:05:74:9a:00:62:be:70:29:01:82:5c:c2:4a:58:aa: fd:26:e0:bb:a2:e7:a5:1b:77:c4:fc:31:da:f6:1f:1c:25:b6: 26:b1:30:fc -----BEGIN CERTIFICATE----- MIIFFjCCA/6gAwIBAgISAZjUqFnbJ1Kt2qUYcR4fAH6FMA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKGIyNzI2MWQ3MTUzNDhiZmQ3M2NlOWRiYjcyNDg4NjU2OTkz YmEyZjEwHhcNMjUwODIzMDIwMDU5WhcNMjUwODI0MDIwMDU5WjAzMTEwLwYDVQQD Eyg1M2JlMzYwMTEwNTUyYjU2ZTQ1ZjVkNjZlZGUzMTM4OWM5NThlNDBjMIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAtb5S/Jjp0QXd1G2HZ1MErERL7Z2/ dSzi9cZLQveNBWdf3H3a03QZPIttsFOQIhZrAPO9ffvgio1BozR14ofXYrM/sPry m6djg/sZ/2EjaRSEhFzkwKVbZ/7nsywJG/qJdNglTXqHfGYx99xjma+zl2W0VPIZ CSakSDdgm2Bq+mlhxlt8BbLNybUKxwhiLRrdNZ/HbDW3bkaTvHUo4bSmPQy8Dsy7 75LxAvkegxEaPtwjRp/6kopE9yQCNCPBTMwtocrPkIhpfX5FgQhjIWVp10LY6DXW BAOz3AkJmlISLqe28o5ap1w/nkKjMmcZBPYcmzS1tgns+DyjL8uVzO/dgwIDAQAB o4ICIjCCAh4wHQYDVR0OBBYEFFO+NgEQVStW5F9dZu3jE4nJWOQMMB8GA1UdIwQY MBaAFLJyYdcVNIv9c86du3JIhlaZO6LxMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvc25KaDF4VTBpXzF6enAyN2NraUdWcGs3b3ZFLmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC85ZS9hYmE1MDItZDE5MS00ZmQ3LWE3Y2Yt NTA0ZjI3NjY3NjBmLzEvc25KaDF4VTBpXzF6enAyN2NraUdWcGs3b3ZFLm1mdDCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC85ZS9hYmE1MDItZDE5MS00ZmQ3LWE3Y2YtNTA0ZjI3NjY3NjBm LzEvc25KaDF4VTBpXzF6enAyN2NraUdWcGs3b3ZFLmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAC73ijMle B0PqlP6nBKjUDWeayaNU9CuW4X5HLOCzjhOgrWdFP/iEHqbCQOqXjW480ReaCgED 9Ra0/HTn+OZ6CLrHgy917qHb3sUFyO0gktgNKw+Cd69/yyUNYQsuw/DPMaXfbuYs +NE0oSs6wP7LFo0E2NQNEM1Y1Dq5Wx8y0fN2pkyv3dI7KvadkGzUY8rKlcgz/cA4 9b8/2F8Jc8AICaY6pkDiDAgA8Y1yO3UkFpRKE7Zkjj0thwFTF1KNpEvOzzCrXAWt fWAxoj9Kx0HRU5lnm0hloo3J1wdJBXSaAGK+cCkBglzCSliq/Sbgu6LnpRt3xPwx 2vYfHCW2JrEw/A== -----END CERTIFICATE-----Generated at Sat Aug 23 10:40:54 2025 by rpki-client