$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/a7/9151c0-3326-4801-9363-c7d19930d66d/1/tOgroXFdaurlsBAnJf_gyDRzXX0.mft File: tOgroXFdaurlsBAnJf_gyDRzXX0.mft (raw, json) Hash identifier: kgbuiw9p26Qx0R0ZptFChFRN75c8TUWJk5gDgjEldNs= Subject key identifier: F2:58:28:28:C6:A0:CE:81:62:4A:1C:2C:23:03:07:A9:52:3C:24:A4 Authority key identifier: B4:E8:2B:A1:71:5D:6A:EA:E5:B0:10:27:25:FF:E0:C8:34:73:5D:7D Certificate issuer: /CN=b4e82ba1715d6aeae5b0102725ffe0c834735d7d Certificate serial: 0198D5156D692B94AA8141654ECCAB13F609 Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/tOgroXFdaurlsBAnJf_gyDRzXX0.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/a7/9151c0-3326-4801-9363-c7d19930d66d/1/tOgroXFdaurlsBAnJf_gyDRzXX0.mft Manifest number: 0E3E Signing time: Sat 23 Aug 2025 04:00:07 +0000 Manifest this update: Sat 23 Aug 2025 04:00:07 +0000 Manifest next update: Sun 24 Aug 2025 04:00:07 +0000 Files and hashes: 1: 69jsCPkwXK1lmTxeQTyCID9PpjA.roa (hash: h/Q47E5oO3l5JxeekNZr7l4rqZH5SyA0969VUEHNB8w=) 2: 9MVV1yAh59mTgEP_W258bMa49_o.roa (hash: iCN3glju44EdxjBrGRw+NZhFmqg56yUA7pS6/PNweyY=) 3: AjV2rlIwTElr058YXLjGHHrdXf0.roa (hash: LTFD7RWDdMyUwIhuINghYkedTIuVGScYQK467Diulf0=) 4: Dgr2wvOQnRz5hgawqSG0QB7Wpf8.roa (hash: qz1bNfdEE/9TcJfQDqdc+8FtR45UoCnUkyfUGSABkmQ=) 5: Nc7iCAoE-03LSc1GXjFAkPSA-x0.roa (hash: VtOFvrmMP9apoQYdMZ3KyjB/zTDsL+t3o+S71XhQxpY=) 6: ObtlGayrPGhbC0NJB3cANhdfN9g.roa (hash: IXODRFBoDBQAcQ/y7+mqgK85yVkykmHrcIsLk/+rl+k=) 7: RzTS_aVg4A3thhT1xHxtMXq_vOI.roa (hash: zu1mzofX6iUkewhCXeSVvIWnMGeLEK4TikiEna45T0w=) 8: VifVBKjqmDhUgid5BLElJTuQJo4.roa (hash: WI5+mxqhucetVt6cCUvKQ5QuoJnG/kLcpHeXlC1Yb5Y=) 9: hG1KSyXr5tG55jI9wBm-tSwn7ZM.roa (hash: ojUG1DHCfBEX5RoSvSto85jWrWuEE+T8wqBz5z+O87U=) 10: lKCL8VeF7spgo1KPqTl3MnMrJFU.roa (hash: G5kvKqbW+q0BKre+iGyFYRJgxgTgTCaLSiQqwrZLbuM=) 11: tOgroXFdaurlsBAnJf_gyDRzXX0.crl (hash: vup7BulV4P4T0ReCJPjRX97CvpUhKA6EiKgCoiBw+ho=) Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/a7/9151c0-3326-4801-9363-c7d19930d66d/1/tOgroXFdaurlsBAnJf_gyDRzXX0.crl rsync://rpki.ripe.net/repository/DEFAULT/a7/9151c0-3326-4801-9363-c7d19930d66d/1/tOgroXFdaurlsBAnJf_gyDRzXX0.mft rsync://rpki.ripe.net/repository/DEFAULT/tOgroXFdaurlsBAnJf_gyDRzXX0.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Sun 24 Aug 2025 04:00:07 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:98:d5:15:6d:69:2b:94:aa:81:41:65:4e:cc:ab:13:f6:09 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=b4e82ba1715d6aeae5b0102725ffe0c834735d7d Validity Not Before: Aug 23 04:00:07 2025 GMT Not After : Aug 24 04:00:07 2025 GMT Subject: CN=f2582828c6a0ce81624a1c2c230307a9523c24a4 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:cf:8b:0b:37:7d:a4:de:c0:bd:f0:eb:18:22:1e: 6e:6f:39:60:ea:82:24:89:2c:82:b9:32:d9:9b:1a: 9d:d4:75:b3:fe:a2:16:8a:fc:f7:25:af:09:4d:84: 5f:51:0c:29:08:6e:5f:88:2d:ae:fa:41:8f:a5:85: c1:7b:96:e7:e0:a2:59:7b:b6:be:5f:5a:0f:0e:78: 3b:9d:b1:a7:85:e9:e0:30:00:55:65:98:b3:ea:22: 43:0f:60:6b:92:c7:41:18:a7:43:0f:49:74:12:0a: 6d:44:ce:11:07:c7:be:22:83:ed:0e:b5:30:8d:ad: f1:81:04:63:cf:1b:24:d0:e5:ab:6b:d8:3d:46:23: 1d:82:ac:14:e9:9c:29:b2:56:97:7d:79:b0:2e:b3: 7a:b8:d1:dc:ce:d8:3b:49:7c:db:6a:53:b6:5c:2a: 65:83:0c:fc:b6:99:dc:6b:6c:a7:12:ae:03:94:65: d0:12:71:ec:b7:02:a2:78:72:d7:94:89:bc:ad:86: 5e:fa:e9:80:e4:9b:d8:88:70:93:96:ae:13:b5:c9: a2:cc:d4:ae:10:ec:08:dd:65:c5:c5:72:98:28:7b: b4:7d:11:e9:aa:ed:19:a6:af:8b:9a:93:44:3e:5d: 6f:68:da:87:e5:12:5e:9c:b1:2a:32:59:e6:ed:e2: 6f:71 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: F2:58:28:28:C6:A0:CE:81:62:4A:1C:2C:23:03:07:A9:52:3C:24:A4 X509v3 Authority Key Identifier: keyid:B4:E8:2B:A1:71:5D:6A:EA:E5:B0:10:27:25:FF:E0:C8:34:73:5D:7D X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/tOgroXFdaurlsBAnJf_gyDRzXX0.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/a7/9151c0-3326-4801-9363-c7d19930d66d/1/tOgroXFdaurlsBAnJf_gyDRzXX0.mft X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/a7/9151c0-3326-4801-9363-c7d19930d66d/1/tOgroXFdaurlsBAnJf_gyDRzXX0.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 7c:0d:39:68:c3:6a:2c:b7:a7:1b:49:23:80:82:ce:8b:23:ff: 68:4d:4f:e5:20:4b:7b:61:fe:f8:e5:ec:15:e1:6f:d3:83:26: 08:2b:ca:aa:ab:b4:af:c8:e6:6b:65:d2:c8:1b:bd:bb:bd:4a: db:83:80:f6:5a:d4:b5:8e:78:c3:8a:38:41:62:1f:aa:28:72: 62:8f:26:d2:08:9a:05:1f:3f:93:10:e8:5e:24:61:52:50:2b: 14:1f:a3:8b:a0:9b:51:ef:6d:4c:f8:f1:66:79:94:d4:7d:97: 5e:65:39:c0:de:cd:8d:0b:5b:07:9e:a6:a6:39:5b:d4:04:8a: 94:9b:f8:f5:11:04:c3:fd:ac:64:31:a1:79:1a:24:15:cb:a3: 71:04:63:52:c1:c4:c1:6c:fd:dc:4c:0f:fa:19:39:e1:6d:66: bc:5b:4b:a8:72:4c:5b:7d:11:c9:8a:5e:50:8d:80:a1:d6:c2: d2:55:66:93:1c:f9:c9:0f:b9:21:2d:3b:7d:18:92:ae:92:f5: 25:1d:2b:af:cf:9d:51:73:82:a3:66:31:bf:f8:c9:50:d3:54: 14:8c:d7:f2:df:40:10:4e:64:76:03:b7:6a:86:d9:5d:56:e6: 77:f7:31:a8:66:07:77:43:89:34:3f:dd:b1:ad:35:c5:73:5e: c4:7e:d4:41 -----BEGIN CERTIFICATE----- MIIFFjCCA/6gAwIBAgISAZjVFW1pK5SqgUFlTsyrE/YJMA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKGI0ZTgyYmExNzE1ZDZhZWFlNWIwMTAyNzI1ZmZlMGM4MzQ3 MzVkN2QwHhcNMjUwODIzMDQwMDA3WhcNMjUwODI0MDQwMDA3WjAzMTEwLwYDVQQD EyhmMjU4MjgyOGM2YTBjZTgxNjI0YTFjMmMyMzAzMDdhOTUyM2MyNGE0MIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAz4sLN32k3sC98OsYIh5ubzlg6oIk iSyCuTLZmxqd1HWz/qIWivz3Ja8JTYRfUQwpCG5fiC2u+kGPpYXBe5bn4KJZe7a+ X1oPDng7nbGnhengMABVZZiz6iJDD2BrksdBGKdDD0l0EgptRM4RB8e+IoPtDrUw ja3xgQRjzxsk0OWra9g9RiMdgqwU6ZwpslaXfXmwLrN6uNHcztg7SXzbalO2XCpl gwz8tpnca2ynEq4DlGXQEnHstwKieHLXlIm8rYZe+umA5JvYiHCTlq4TtcmizNSu EOwI3WXFxXKYKHu0fRHpqu0Zpq+LmpNEPl1vaNqH5RJenLEqMlnm7eJvcQIDAQAB o4ICIjCCAh4wHQYDVR0OBBYEFPJYKCjGoM6BYkocLCMDB6lSPCSkMB8GA1UdIwQY MBaAFLToK6FxXWrq5bAQJyX/4Mg0c119MA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvdE9ncm9YRmRhdXJsc0JBbkpmX2d5RFJ6WFgwLmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC9hNy85MTUxYzAtMzMyNi00ODAxLTkzNjMt YzdkMTk5MzBkNjZkLzEvdE9ncm9YRmRhdXJsc0JBbkpmX2d5RFJ6WFgwLm1mdDCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC9hNy85MTUxYzAtMzMyNi00ODAxLTkzNjMtYzdkMTk5MzBkNjZk LzEvdE9ncm9YRmRhdXJsc0JBbkpmX2d5RFJ6WFgwLmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAfA05aMNq LLenG0kjgILOiyP/aE1P5SBLe2H++OXsFeFv04MmCCvKqqu0r8jma2XSyBu9u71K 24OA9lrUtY54w4o4QWIfqihyYo8m0giaBR8/kxDoXiRhUlArFB+ji6CbUe9tTPjx ZnmU1H2XXmU5wN7NjQtbB56mpjlb1ASKlJv49REEw/2sZDGheRokFcujcQRjUsHE wWz93EwP+hk54W1mvFtLqHJMW30RyYpeUI2AodbC0lVmkxz5yQ+5IS07fRiSrpL1 JR0rr8+dUXOCo2Yxv/jJUNNUFIzX8t9AEE5kdgO3aobZXVbmd/cxqGYHd0OJND/d sa01xXNexH7UQQ== -----END CERTIFICATE-----Generated at Sat Aug 23 10:51:23 2025 by rpki-client