$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/a9/e17714-467b-4433-9b7d-a6b991f4faf8/1/Skcc1s5gq-3XR2KxAapeb0IH784.mft File: Skcc1s5gq-3XR2KxAapeb0IH784.mft (raw, json) Hash identifier: pMOqfDjWmH+e8LRbnoHrlB/FdLKQrcwYMKJhI6AkdF8= Subject key identifier: 4B:64:B8:40:B1:48:18:D0:25:A3:19:21:87:78:6B:28:60:A1:E2:52 Authority key identifier: 4A:47:1C:D6:CE:60:AB:ED:D7:47:62:B1:01:AA:5E:6F:42:07:EF:CE Certificate issuer: /CN=4a471cd6ce60abedd74762b101aa5e6f4207efce Certificate serial: 0198D62986F1266149805BB8E77DBFEB7CFE Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/Skcc1s5gq-3XR2KxAapeb0IH784.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/a9/e17714-467b-4433-9b7d-a6b991f4faf8/1/Skcc1s5gq-3XR2KxAapeb0IH784.mft Manifest number: 0CAC Signing time: Sat 23 Aug 2025 09:01:42 +0000 Manifest this update: Sat 23 Aug 2025 09:01:42 +0000 Manifest next update: Sun 24 Aug 2025 09:01:42 +0000 Files and hashes: 1: 9rmctfL499xq_XdP3NUoaQL9dt8.roa (hash: qmWMMe4np6q+yuy7dqi4TF4eBy7zv3FZoKf6q8wuZjY=) 2: A9GxPF4ifZ6rbABmHPjtyPKjmzE.roa (hash: W77hd6FGDraLnDkaoT1pKx2we4vpUTM+eeqG9pbSJEo=) 3: FvcaLEo9ePCgEvBVIK2eI87VCIQ.roa (hash: tEu/ql9ub4L5vy+BTuIysc1oUr/aYIo+MTuSlbcYBuk=) 4: GAnOR60hpofm0szlGWoPLIE5k9U.roa (hash: lr43p+6HKeY7jXAlLyQZ1kcGKOOPGZSL2OJ25R36SAo=) 5: HIg12NFUg7Eb_z2q4_r85AxcQMM.roa (hash: +6laq1iJCnub2N6uqVJ0BPm3G2zkWo723oA1FoMeiQM=) 6: Rtf-eqgW1jg7kzfL0pg8e63I-5M.roa (hash: IMz1jRwRZYT/rMcvQ4nY+BdL0NQuZlG7iPglwgBzyqQ=) 7: Skcc1s5gq-3XR2KxAapeb0IH784.crl (hash: 8u1R2zk3HrSjrPlxPVMqo1JBBJPcDZVLCpP1Q7O5Mhs=) 8: TdMhRHczxWCfuj6WCF3aHSZcWoE.roa (hash: OExPlz/NvHlKGK16isLHnODAZh99vhb3NAPmGcjd+nw=) 9: aqxiXCKg8wILOiiXb3CbjFknkz0.roa (hash: yaEb+yV9BvpFXZongqAOcwN1zzlRTWmLt/Rv8aKMq6E=) 10: cYGTSChE9gFQuUNQB0z3uVeo_M4.roa (hash: oMlb77CshXZ5OhhRrgeA3KmMtc/wbw1QuqBFiLFBoVI=) 11: fXIkEQH3meKCBAEQ5mXacq0TJ20.roa (hash: rnj1CDmi4d3j1os+cxi9WBUMoxTK5VvPgUCy380Y0oI=) 12: o979ZrblSrorE9B9zxDq41HUGYA.roa (hash: kigJPd/hpDjSHjs7rzVTH64QUtXJbGCT3yl7CjOiV2A=) 13: pa8fQ4jOrZ59vAyb7Lg7bj_QEgQ.roa (hash: Ep011ixCtG+lu/klHXgc5PQt2d4i1uDvMubTIvs6Oro=) 14: qGL-UUbfc2n5gMthqcDrY6oqiRI.roa (hash: fb04IIPduA2+NhPfcjizdhoAsQqWUl17Qoy+hMnSrwg=) 15: sYn86kZKw4G3fFE4L_epfK7wXCA.roa (hash: fdCIDuHioT3v4CHhE018xXjPJRG+/QyggQzYrvRftpc=) 16: swDIDdXhan6JmrMaA4zT6XUnyms.roa (hash: Id1mrQWr6geAN1whlBo6yIqYER8GWPwkHZgiXf0j1EQ=) 17: toUQ0_iu6duuq_aTFgLEWgwtLpw.roa (hash: kGnBtrL9aHFWQFQVLy+h7pb0Fwh4bSr9itiOACSqYyk=) 18: twRuprVXnPVVcyrSMrNa_0_uqhM.roa (hash: nog8tSBlkAVSJF5Qw+uLxzczszHatj2ld99hU2zis/0=) Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/a9/e17714-467b-4433-9b7d-a6b991f4faf8/1/Skcc1s5gq-3XR2KxAapeb0IH784.crl rsync://rpki.ripe.net/repository/DEFAULT/a9/e17714-467b-4433-9b7d-a6b991f4faf8/1/Skcc1s5gq-3XR2KxAapeb0IH784.mft rsync://rpki.ripe.net/repository/DEFAULT/Skcc1s5gq-3XR2KxAapeb0IH784.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Sun 24 Aug 2025 05:01:29 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:98:d6:29:86:f1:26:61:49:80:5b:b8:e7:7d:bf:eb:7c:fe Signature Algorithm: sha256WithRSAEncryption Issuer: CN=4a471cd6ce60abedd74762b101aa5e6f4207efce Validity Not Before: Aug 23 09:01:42 2025 GMT Not After : Aug 24 09:01:42 2025 GMT Subject: CN=4b64b840b14818d025a3192187786b2860a1e252 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:a4:76:bc:30:9e:fe:c7:52:30:0e:7c:14:e6:79: 22:ef:5f:bb:ae:50:37:c6:13:49:bd:4f:f8:5a:23: 73:ab:45:9e:7d:7c:2a:65:9d:7d:da:c6:a9:15:fa: 74:42:1c:68:09:36:75:5d:14:30:aa:45:5d:cc:31: 53:db:01:75:12:00:f9:13:6b:a6:b5:bd:b5:c0:02: f6:03:37:d2:0d:b6:db:a7:4f:f8:f8:81:dc:c8:c4: 32:76:72:5f:92:50:ea:4e:a3:f9:64:bd:82:b1:8c: 6e:40:92:dc:b7:5a:42:6c:42:97:3e:17:c3:47:40: a5:bc:93:a9:d3:6a:74:b7:64:ed:f0:b5:b4:e0:f3: 6a:4c:56:18:35:3d:9c:b3:92:2b:68:57:06:71:2d: 69:69:ee:1f:36:d6:81:11:14:c4:67:3b:fd:58:10: 45:5e:fa:c0:8b:f3:83:63:ec:6d:f2:7a:a8:33:6a: b0:df:7b:12:2c:f4:71:80:c4:6e:a7:9b:b3:4e:ea: d9:3a:58:0b:26:77:19:2c:9c:25:13:9b:35:cd:e2: 16:40:1f:01:f4:48:67:86:55:aa:96:3d:15:a6:4f: 43:9c:7e:6f:2a:89:08:4d:da:74:ae:70:b8:55:66: da:2d:94:c4:27:77:e4:c3:b1:5e:4d:74:22:17:64: 6a:3b Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 4B:64:B8:40:B1:48:18:D0:25:A3:19:21:87:78:6B:28:60:A1:E2:52 X509v3 Authority Key Identifier: keyid:4A:47:1C:D6:CE:60:AB:ED:D7:47:62:B1:01:AA:5E:6F:42:07:EF:CE X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/Skcc1s5gq-3XR2KxAapeb0IH784.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/a9/e17714-467b-4433-9b7d-a6b991f4faf8/1/Skcc1s5gq-3XR2KxAapeb0IH784.mft X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/a9/e17714-467b-4433-9b7d-a6b991f4faf8/1/Skcc1s5gq-3XR2KxAapeb0IH784.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 77:2e:57:20:1c:41:2e:39:cb:2c:21:3f:11:d3:3e:52:45:af: 2b:af:99:81:b4:77:6f:0c:57:a7:1f:74:38:b5:9a:c1:aa:49: f7:c6:50:b3:3e:49:ad:14:ea:cb:bf:c4:a8:d7:0c:3b:94:b9: 01:de:05:a6:53:38:ea:f9:45:9a:98:57:62:8b:09:48:20:2f: c5:9a:d1:e7:a5:7a:9e:63:91:56:8a:5f:83:88:1f:b5:1d:d1: 10:66:c2:85:db:81:fb:1d:73:1d:4e:46:51:88:a9:c6:aa:b8: 4b:a5:fc:09:e2:3e:08:b6:ed:c6:11:c7:72:91:8d:fd:a0:09: dd:ba:a7:d9:c9:e1:e4:43:e9:d4:a2:f4:5f:28:12:06:52:22: e8:d9:2b:e6:75:29:81:0e:a1:8c:0e:61:24:87:14:b0:00:36: f8:b6:0d:3a:8c:ed:c4:f2:a4:b2:37:88:1f:58:d5:cf:09:51: db:b0:22:81:b5:88:ea:91:28:a3:5a:ad:c6:88:11:d5:82:d7: dd:d3:0b:63:31:99:15:b6:d9:9c:6e:17:cd:06:7e:66:b8:c5: 02:8a:aa:c6:b0:d0:c9:7e:ca:7f:06:a8:d4:27:e1:7e:8e:ce: 09:88:51:31:cd:6e:d6:56:88:ff:bc:62:84:96:62:ff:4c:17: 2e:65:0e:20 -----BEGIN CERTIFICATE----- MIIFFjCCA/6gAwIBAgISAZjWKYbxJmFJgFu4532/63z+MA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKDRhNDcxY2Q2Y2U2MGFiZWRkNzQ3NjJiMTAxYWE1ZTZmNDIw N2VmY2UwHhcNMjUwODIzMDkwMTQyWhcNMjUwODI0MDkwMTQyWjAzMTEwLwYDVQQD Eyg0YjY0Yjg0MGIxNDgxOGQwMjVhMzE5MjE4Nzc4NmIyODYwYTFlMjUyMIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEApHa8MJ7+x1IwDnwU5nki71+7rlA3 xhNJvU/4WiNzq0WefXwqZZ192sapFfp0QhxoCTZ1XRQwqkVdzDFT2wF1EgD5E2um tb21wAL2AzfSDbbbp0/4+IHcyMQydnJfklDqTqP5ZL2CsYxuQJLct1pCbEKXPhfD R0ClvJOp02p0t2Tt8LW04PNqTFYYNT2cs5IraFcGcS1pae4fNtaBERTEZzv9WBBF XvrAi/ODY+xt8nqoM2qw33sSLPRxgMRup5uzTurZOlgLJncZLJwlE5s1zeIWQB8B 9EhnhlWqlj0Vpk9DnH5vKokITdp0rnC4VWbaLZTEJ3fkw7FeTXQiF2RqOwIDAQAB o4ICIjCCAh4wHQYDVR0OBBYEFEtkuECxSBjQJaMZIYd4ayhgoeJSMB8GA1UdIwQY MBaAFEpHHNbOYKvt10disQGqXm9CB+/OMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvU2tjYzFzNWdxLTNYUjJLeEFhcGViMElINzg0LmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC9hOS9lMTc3MTQtNDY3Yi00NDMzLTliN2Qt YTZiOTkxZjRmYWY4LzEvU2tjYzFzNWdxLTNYUjJLeEFhcGViMElINzg0Lm1mdDCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC9hOS9lMTc3MTQtNDY3Yi00NDMzLTliN2QtYTZiOTkxZjRmYWY4 LzEvU2tjYzFzNWdxLTNYUjJLeEFhcGViMElINzg0LmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAdy5XIBxB LjnLLCE/EdM+UkWvK6+ZgbR3bwxXpx90OLWawapJ98ZQsz5JrRTqy7/EqNcMO5S5 Ad4FplM46vlFmphXYosJSCAvxZrR56V6nmORVopfg4gftR3REGbChduB+x1zHU5G UYipxqq4S6X8CeI+CLbtxhHHcpGN/aAJ3bqn2cnh5EPp1KL0XygSBlIi6Nkr5nUp gQ6hjA5hJIcUsAA2+LYNOoztxPKksjeIH1jVzwlR27AigbWI6pEoo1qtxogR1YLX 3dMLYzGZFbbZnG4XzQZ+ZrjFAoqqxrDQyX7Kfwao1Cfhfo7OCYhRMc1u1laI/7xi hJZi/0wXLmUOIA== -----END CERTIFICATE-----Generated at Sat Aug 23 11:35:59 2025 by rpki-client