$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/b0/742370-e10f-4541-aa6c-61afb66d1e8c/1/Ge5fFvwUSsuYl3RJ-qCrd94b3Mk.mft File: Ge5fFvwUSsuYl3RJ-qCrd94b3Mk.mft (raw, json) Hash identifier: +usb47OsuNmamVQ8LilfRgD5W1eTlcAM46NOPdQaLKM= Subject key identifier: 20:CD:53:15:4F:77:55:96:C7:EA:2A:33:CD:B5:86:4B:74:AF:B3:D3 Authority key identifier: 19:EE:5F:16:FC:14:4A:CB:98:97:74:49:FA:A0:AB:77:DE:1B:DC:C9 Certificate issuer: /CN=19ee5f16fc144acb98977449faa0ab77de1bdcc9 Certificate serial: 0198D4734F5852AC47327BCAD7C278B8FDC1 Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/Ge5fFvwUSsuYl3RJ-qCrd94b3Mk.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/b0/742370-e10f-4541-aa6c-61afb66d1e8c/1/Ge5fFvwUSsuYl3RJ-qCrd94b3Mk.mft Manifest number: 0A43 Signing time: Sat 23 Aug 2025 01:03:03 +0000 Manifest this update: Sat 23 Aug 2025 01:03:03 +0000 Manifest next update: Sun 24 Aug 2025 01:03:03 +0000 Files and hashes: 1: 1zxqTZu6SRyYv_Ffy0lFoBPOEm4.roa (hash: ThozvqbE39I99NwlKLMA8FultirTXMcz2Kd4yrw2ZKw=) 2: 2JQiF-KuxisBuWKzCCYjlMYezbU.roa (hash: SXSN+jTHRj/1XPCNhGNyMfhXX6aenkr84XXZn44oBus=) 3: 2wuDk6nFqqGYiaSC6iucrRXcbQk.roa (hash: 79MFBQJOifCFih1gwOm9utzcHryDlN0MlgfAlM0KB/E=) 4: Dd0lNs2hky54dQAv3vPisZjCFp4.roa (hash: NVL0LmaHqGXfi7RWJ5Z26iREn6xhTna8KN7jsCj7oR4=) 5: G79Wrqy1Lf8BeR2TvbTFt1b4zUw.roa (hash: mkWsUDpUk6REoIb9yGYNYnYwXC9syYE03KiortiRCR0=) 6: Ge5fFvwUSsuYl3RJ-qCrd94b3Mk.crl (hash: mAqYsgAWb09EXZR0u4XQR3pXLpLyAR86Eztnz+ZPok4=) 7: MtXcqoleDqMSyVWGFxd3850uGF8.roa (hash: 5zTGwHssmIeS5Ukj/HGoA7Wxq1gUaItGj34ri17+IlA=) 8: Q6bkyyQLjY5spQCrn9goEf71pPU.roa (hash: 9lviglTOByJ8RQWmZ8UPa2cM7z/LltLd8urB8JmBNnE=) 9: U6LKInYX6jQwBV8KMEesVDrNWSk.roa (hash: g36WmG/r5q9WK7xtEoYV2z/lqj+2PVHpdEIB93a9SEM=) 10: U93bZjAVh1P1joBT40YtFgkj33U.roa (hash: zo9QHI0N0+rtiU9CTdPl68EA0JwhDa16Oocr2Zm0PWg=) 11: Uaif5mluHcrJUGbfFQOQv5aGmqo.roa (hash: 4GcANOdK85GtkfgKCJ6D/Bc//mwXx0P/TVTNMp8rznY=) 12: diYtHkbWhD5oCZMkqf9gfGkO_S0.roa (hash: mAM70Fu/V+UYJ6UW5MauFuojQwzYrrWiK8CdKSQ5gBA=) 13: jyDBS4SlMdZTmgBvwq4TdZHy1_k.roa (hash: LeAOH2iyHYZi5p/Iq7kAMVJlSvm2ZJXwY56cgcvgz+I=) 14: kWZqnAqGVCQZUMelFlFHrbydZtM.roa (hash: 9J/2cfRnnGFBEvwGJLQNSpjlPJ6nqFC3XpqXj5zCg1w=) Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/b0/742370-e10f-4541-aa6c-61afb66d1e8c/1/Ge5fFvwUSsuYl3RJ-qCrd94b3Mk.crl rsync://rpki.ripe.net/repository/DEFAULT/b0/742370-e10f-4541-aa6c-61afb66d1e8c/1/Ge5fFvwUSsuYl3RJ-qCrd94b3Mk.mft rsync://rpki.ripe.net/repository/DEFAULT/Ge5fFvwUSsuYl3RJ-qCrd94b3Mk.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Sun 24 Aug 2025 00:37:04 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:98:d4:73:4f:58:52:ac:47:32:7b:ca:d7:c2:78:b8:fd:c1 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=19ee5f16fc144acb98977449faa0ab77de1bdcc9 Validity Not Before: Aug 23 01:03:03 2025 GMT Not After : Aug 24 01:03:03 2025 GMT Subject: CN=20cd53154f775596c7ea2a33cdb5864b74afb3d3 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:af:0b:d4:d2:6b:4c:78:74:51:b8:40:1f:8b:06: cf:ce:9a:5b:1a:fe:09:b4:83:78:4c:b5:52:37:2d: 9b:47:ea:52:5d:22:e7:9c:82:3f:d0:19:48:95:9d: 50:40:f4:f8:a5:a0:e8:1f:0d:09:7a:6a:c9:62:9e: d0:b3:ae:5a:29:ab:f7:9d:6a:4e:fc:b0:09:22:c1: 9c:69:7c:f4:e2:ff:4a:af:23:bc:be:33:04:ed:7d: e1:25:75:b5:c2:ea:7b:b1:76:d5:fc:1a:6e:19:cb: dd:7f:8d:57:86:c3:70:6e:22:20:6e:7b:18:f9:03: 16:b2:c2:e8:85:2a:3a:ba:3c:28:cf:ed:3f:95:6a: 78:13:41:3e:73:71:98:f9:b3:88:8f:c8:d1:1b:3a: 94:f1:d7:17:cd:94:cf:98:2c:53:d1:ad:82:bd:e6: 2f:b3:87:1c:59:d8:e5:a4:b3:3a:cc:18:de:b0:2a: e8:62:13:c4:63:93:f8:af:39:5c:e0:2d:ae:01:fe: d2:a6:47:a9:0a:1e:0e:ad:77:71:3a:b7:8a:6d:76: ee:54:28:91:a0:b5:70:0b:1c:11:d1:86:8d:93:70: a0:67:1a:7e:c7:b3:6b:13:13:ec:e7:36:7f:1b:2a: 82:23:83:1a:3c:2d:85:29:94:5b:7c:63:35:10:7b: c3:f7 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 20:CD:53:15:4F:77:55:96:C7:EA:2A:33:CD:B5:86:4B:74:AF:B3:D3 X509v3 Authority Key Identifier: keyid:19:EE:5F:16:FC:14:4A:CB:98:97:74:49:FA:A0:AB:77:DE:1B:DC:C9 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/Ge5fFvwUSsuYl3RJ-qCrd94b3Mk.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/b0/742370-e10f-4541-aa6c-61afb66d1e8c/1/Ge5fFvwUSsuYl3RJ-qCrd94b3Mk.mft X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/b0/742370-e10f-4541-aa6c-61afb66d1e8c/1/Ge5fFvwUSsuYl3RJ-qCrd94b3Mk.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 39:fd:5c:0f:c6:02:74:24:b2:03:dd:b2:83:b3:bb:f1:33:e1: 66:34:b5:56:79:d1:12:58:09:d4:e2:a2:15:a2:4f:56:e9:ee: 30:5e:61:1d:87:6b:c5:66:24:a7:6b:d8:e0:b7:83:19:42:95: 67:59:3c:31:75:72:3f:38:c3:b8:bf:49:81:25:b0:61:51:22: 7d:b2:c6:46:71:2f:6e:b7:4d:a5:2d:bd:5c:50:da:48:ed:a2: 1e:54:63:4e:44:c9:59:76:0e:a0:2a:8b:fe:e2:65:db:92:9f: a6:1e:f5:47:d7:e5:d1:a8:db:bd:e5:d2:92:0f:34:62:1a:61: 05:e6:72:3e:c2:ea:d8:1e:2b:e0:f3:08:5a:c8:ca:c5:90:ce: d5:eb:b0:8a:89:49:55:85:16:68:92:c3:6b:7b:f2:03:ce:fa: ba:98:39:41:63:51:68:13:af:be:2a:ff:e5:64:39:c6:23:48: 1b:6a:39:e3:37:f7:cc:1a:cc:41:83:43:35:1e:59:7a:ad:c9: ab:73:ac:3e:d6:ce:da:b8:40:da:4d:8f:b5:0b:e2:88:b5:bd: 5c:4d:9c:2a:5b:98:e2:09:f4:ca:fa:a8:d1:21:a5:c6:ed:0f: 67:98:34:b1:70:70:d3:5b:d9:c6:12:40:96:81:c5:14:05:0b: b4:26:28:a4 -----BEGIN CERTIFICATE----- MIIFFjCCA/6gAwIBAgISAZjUc09YUqxHMnvK18J4uP3BMA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKDE5ZWU1ZjE2ZmMxNDRhY2I5ODk3NzQ0OWZhYTBhYjc3ZGUx YmRjYzkwHhcNMjUwODIzMDEwMzAzWhcNMjUwODI0MDEwMzAzWjAzMTEwLwYDVQQD EygyMGNkNTMxNTRmNzc1NTk2YzdlYTJhMzNjZGI1ODY0Yjc0YWZiM2QzMIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEArwvU0mtMeHRRuEAfiwbPzppbGv4J tIN4TLVSNy2bR+pSXSLnnII/0BlIlZ1QQPT4paDoHw0JemrJYp7Qs65aKav3nWpO /LAJIsGcaXz04v9KryO8vjME7X3hJXW1wup7sXbV/BpuGcvdf41XhsNwbiIgbnsY +QMWssLohSo6ujwoz+0/lWp4E0E+c3GY+bOIj8jRGzqU8dcXzZTPmCxT0a2CveYv s4ccWdjlpLM6zBjesCroYhPEY5P4rzlc4C2uAf7SpkepCh4OrXdxOreKbXbuVCiR oLVwCxwR0YaNk3CgZxp+x7NrExPs5zZ/GyqCI4MaPC2FKZRbfGM1EHvD9wIDAQAB o4ICIjCCAh4wHQYDVR0OBBYEFCDNUxVPd1WWx+oqM821hkt0r7PTMB8GA1UdIwQY MBaAFBnuXxb8FErLmJd0Sfqgq3feG9zJMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvR2U1ZkZ2d1VTc3VZbDNSSi1xQ3JkOTRiM01rLmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC9iMC83NDIzNzAtZTEwZi00NTQxLWFhNmMt NjFhZmI2NmQxZThjLzEvR2U1ZkZ2d1VTc3VZbDNSSi1xQ3JkOTRiM01rLm1mdDCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC9iMC83NDIzNzAtZTEwZi00NTQxLWFhNmMtNjFhZmI2NmQxZThj LzEvR2U1ZkZ2d1VTc3VZbDNSSi1xQ3JkOTRiM01rLmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAOf1cD8YC dCSyA92yg7O78TPhZjS1VnnRElgJ1OKiFaJPVunuMF5hHYdrxWYkp2vY4LeDGUKV Z1k8MXVyPzjDuL9JgSWwYVEifbLGRnEvbrdNpS29XFDaSO2iHlRjTkTJWXYOoCqL /uJl25Kfph71R9fl0ajbveXSkg80YhphBeZyPsLq2B4r4PMIWsjKxZDO1euwiolJ VYUWaJLDa3vyA876upg5QWNRaBOvvir/5WQ5xiNIG2o54zf3zBrMQYNDNR5Zeq3J q3OsPtbO2rhA2k2PtQviiLW9XE2cKluY4gn0yvqo0SGlxu0PZ5g0sXBw01vZxhJA loHFFAULtCYopA== -----END CERTIFICATE-----Generated at Sat Aug 23 09:49:14 2025 by rpki-client