$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/b1/4f211e-79d7-4504-9ead-871f9ed708e0/1/G6UaC8Dwr-u_bV2Sf-H5gW9SNS0.mft File: G6UaC8Dwr-u_bV2Sf-H5gW9SNS0.mft (raw, json) Hash identifier: HfZJp2S2YSgjKvTJLjG6DLNRERTqAsITMY+Tr3f0tYs= Subject key identifier: FF:92:F7:10:27:C5:A7:88:88:F7:F4:F6:71:E0:25:5E:55:B8:A3:B5 Authority key identifier: 1B:A5:1A:0B:C0:F0:AF:EB:BF:6D:5D:92:7F:E1:F9:81:6F:52:35:2D Certificate issuer: /CN=1ba51a0bc0f0afebbf6d5d927fe1f9816f52352d Certificate serial: 0198D5BC5BD617EB616CE46501A6601ADF7E Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/G6UaC8Dwr-u_bV2Sf-H5gW9SNS0.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/b1/4f211e-79d7-4504-9ead-871f9ed708e0/1/G6UaC8Dwr-u_bV2Sf-H5gW9SNS0.mft Manifest number: 1223 Signing time: Sat 23 Aug 2025 07:02:27 +0000 Manifest this update: Sat 23 Aug 2025 07:02:27 +0000 Manifest next update: Sun 24 Aug 2025 07:02:27 +0000 Files and hashes: 1: DBze0gTqh5SDOw7x6hoGuoE8yr4.roa (hash: ZLoARLtI2IGjjdgEEhL+2Ku7l0nsKThYXfmPapH0dJU=) 2: G6UaC8Dwr-u_bV2Sf-H5gW9SNS0.crl (hash: Gv3ki1x05fHScbqkQIHq4JoJw3PcXKdj2+6jUScDyjI=) 3: JEDgkveNrJ65vuQX11mg8UnyJUY.roa (hash: q6FNEl8CDSP0PRckpcDIVuz5w5t1HfMs8z/qUPyjC5I=) 4: KjkD8Cm8Nvn5kLoxMWRB37y0yGg.roa (hash: HwYwsaGRIKEpmjSBA+wSKugW77viLOfzOy52g+ZRvys=) 5: NcbkyJf0XrQlWSuaG_6rLIv8CEA.roa (hash: t1bpX5VtlqYKcE80al52Eab7HsC+sX2g/k7XldXhhvc=) 6: SAifF78qmhwobbNifv-ncSGKlCQ.roa (hash: /saAmnnB/hN9KICwUzdIN9J64c5nmcrdQQhBsyGdv1o=) 7: TpQ5Z-UdKferYkvwPdK8R7DUnj0.roa (hash: QghfP6CKI1HCADXXFPrgTYVwEH/4oteFqhbAKuXsWlY=) 8: cHNi-aQf8kRZ-IXLdR6NKJyGyd4.roa (hash: YdcOpjqVHXdNz8a6yYmUAFG6b4by/2D9QJ2g+af+cwY=) 9: il06Z06HBr4UubVDG3con6FSTJE.roa (hash: 6jxCobZPgi+fb0sp+gKSIVfeSMM4jnCmJ/PQ50Rwxgc=) 10: n3eGk4GZdLWL8rCKUegiOGKLLGE.roa (hash: T8Y25mtZcw8oW9dkDTGN7ilbRkb3BxSHEAwHzK4aavQ=) 11: wmru7gkbD0Q5jhTBil0o1n-XXZY.roa (hash: aLSYcM7LxiQjHNTeSZsVR17gcFojmK5wcKMA+W/GnL8=) Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/b1/4f211e-79d7-4504-9ead-871f9ed708e0/1/G6UaC8Dwr-u_bV2Sf-H5gW9SNS0.crl rsync://rpki.ripe.net/repository/DEFAULT/b1/4f211e-79d7-4504-9ead-871f9ed708e0/1/G6UaC8Dwr-u_bV2Sf-H5gW9SNS0.mft rsync://rpki.ripe.net/repository/DEFAULT/G6UaC8Dwr-u_bV2Sf-H5gW9SNS0.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Sun 24 Aug 2025 05:01:29 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:98:d5:bc:5b:d6:17:eb:61:6c:e4:65:01:a6:60:1a:df:7e Signature Algorithm: sha256WithRSAEncryption Issuer: CN=1ba51a0bc0f0afebbf6d5d927fe1f9816f52352d Validity Not Before: Aug 23 07:02:27 2025 GMT Not After : Aug 24 07:02:27 2025 GMT Subject: CN=ff92f71027c5a78888f7f4f671e0255e55b8a3b5 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:bd:d8:3e:98:4f:59:96:af:10:af:e1:78:8a:53: 76:44:23:7b:f1:0a:c1:be:7e:3f:6c:24:c6:48:52: dc:bd:9a:72:bd:f8:db:78:81:6c:f7:53:7d:ee:fe: 44:63:c4:ec:68:77:69:19:5f:26:2e:82:d3:80:bd: 52:ee:be:4a:57:5b:f1:b0:3e:95:ec:db:a8:97:92: e3:d9:6e:8d:41:f1:ae:43:3a:bf:9d:e6:30:40:a6: 44:6e:9b:1f:90:f0:cb:54:a8:30:e7:c9:46:be:a4: 1c:22:06:ca:03:00:cd:2e:2e:4c:25:dc:9b:67:f5: 49:dc:cf:da:ab:6d:6c:bd:a7:e6:29:65:d6:10:c3: 52:49:ce:71:ec:43:c4:0e:0f:93:6c:b3:a2:80:51: 3a:e8:a6:47:4f:9e:1f:e6:74:7e:79:71:ac:cf:e2: 6f:3e:06:77:1f:1d:7f:70:57:28:2b:72:32:8a:03: c6:fb:7a:64:c1:be:f6:07:cf:28:53:31:b4:0d:1c: 3f:f6:55:f1:9b:57:54:b8:fe:2e:e0:9c:23:dc:ca: 83:24:a2:b5:c0:32:02:7f:a2:19:97:df:c1:37:00: 54:7f:e8:a6:7f:fe:1f:3e:9d:32:1a:5c:8a:0d:83: 3c:e4:67:3a:9e:b2:66:d8:d9:7e:84:67:96:c6:b2: ea:53 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: FF:92:F7:10:27:C5:A7:88:88:F7:F4:F6:71:E0:25:5E:55:B8:A3:B5 X509v3 Authority Key Identifier: keyid:1B:A5:1A:0B:C0:F0:AF:EB:BF:6D:5D:92:7F:E1:F9:81:6F:52:35:2D X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/G6UaC8Dwr-u_bV2Sf-H5gW9SNS0.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/b1/4f211e-79d7-4504-9ead-871f9ed708e0/1/G6UaC8Dwr-u_bV2Sf-H5gW9SNS0.mft X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/b1/4f211e-79d7-4504-9ead-871f9ed708e0/1/G6UaC8Dwr-u_bV2Sf-H5gW9SNS0.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 6b:29:2a:20:d4:27:ce:b7:d6:72:ae:4d:ca:b5:fa:72:3e:01: 18:45:b0:69:a5:9f:44:34:15:8b:77:10:1f:bf:91:5f:9f:45: a7:0e:1a:63:09:2d:ff:b6:77:b1:1d:a1:5e:cf:3e:a4:c8:cb: c2:e4:1e:c7:4a:09:d8:3c:8d:42:ea:33:1a:2e:0b:08:42:5a: e3:3f:82:b3:82:d2:e8:67:ae:98:2a:08:3b:99:e5:e1:09:1e: 7e:c6:fa:10:02:d9:85:dc:99:b5:93:f0:c4:d4:6b:45:ae:18: ac:aa:9d:b3:4f:f8:9b:a6:82:df:91:f7:1b:77:08:e0:0e:6d: 86:4c:7a:2d:07:6e:b6:6c:6b:af:0c:a1:65:df:65:16:00:99: 31:6d:9d:c5:3a:f9:dc:9d:d3:4e:e0:38:dd:db:9e:d9:dc:35: c9:0b:40:ab:a8:4e:fa:92:1f:e1:d4:38:ea:20:3b:11:88:de: cf:a1:9e:30:1d:a3:80:16:8f:71:5e:dc:f4:6a:df:fa:1a:eb: 80:aa:3b:9b:30:aa:59:ad:80:1c:11:41:c5:eb:fe:e0:c5:e4: f3:e8:0c:d9:db:33:05:70:1e:29:da:89:69:af:87:b0:7c:ca: 8e:09:d8:36:9b:fa:b9:bd:48:0d:1c:1e:96:18:63:89:5f:d6: ae:b8:e6:d5 -----BEGIN CERTIFICATE----- MIIFFjCCA/6gAwIBAgISAZjVvFvWF+thbORlAaZgGt9+MA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKDFiYTUxYTBiYzBmMGFmZWJiZjZkNWQ5MjdmZTFmOTgxNmY1 MjM1MmQwHhcNMjUwODIzMDcwMjI3WhcNMjUwODI0MDcwMjI3WjAzMTEwLwYDVQQD EyhmZjkyZjcxMDI3YzVhNzg4ODhmN2Y0ZjY3MWUwMjU1ZTU1YjhhM2I1MIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAvdg+mE9Zlq8Qr+F4ilN2RCN78QrB vn4/bCTGSFLcvZpyvfjbeIFs91N97v5EY8TsaHdpGV8mLoLTgL1S7r5KV1vxsD6V 7Nuol5Lj2W6NQfGuQzq/neYwQKZEbpsfkPDLVKgw58lGvqQcIgbKAwDNLi5MJdyb Z/VJ3M/aq21svafmKWXWEMNSSc5x7EPEDg+TbLOigFE66KZHT54f5nR+eXGsz+Jv PgZ3Hx1/cFcoK3IyigPG+3pkwb72B88oUzG0DRw/9lXxm1dUuP4u4Jwj3MqDJKK1 wDICf6IZl9/BNwBUf+imf/4fPp0yGlyKDYM85Gc6nrJm2Nl+hGeWxrLqUwIDAQAB o4ICIjCCAh4wHQYDVR0OBBYEFP+S9xAnxaeIiPf09nHgJV5VuKO1MB8GA1UdIwQY MBaAFBulGgvA8K/rv21dkn/h+YFvUjUtMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvRzZVYUM4RHdyLXVfYlYyU2YtSDVnVzlTTlMwLmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC9iMS80ZjIxMWUtNzlkNy00NTA0LTllYWQt ODcxZjllZDcwOGUwLzEvRzZVYUM4RHdyLXVfYlYyU2YtSDVnVzlTTlMwLm1mdDCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC9iMS80ZjIxMWUtNzlkNy00NTA0LTllYWQtODcxZjllZDcwOGUw LzEvRzZVYUM4RHdyLXVfYlYyU2YtSDVnVzlTTlMwLmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAaykqINQn zrfWcq5NyrX6cj4BGEWwaaWfRDQVi3cQH7+RX59Fpw4aYwkt/7Z3sR2hXs8+pMjL wuQex0oJ2DyNQuozGi4LCEJa4z+Cs4LS6GeumCoIO5nl4Qkefsb6EALZhdyZtZPw xNRrRa4YrKqds0/4m6aC35H3G3cI4A5thkx6LQdutmxrrwyhZd9lFgCZMW2dxTr5 3J3TTuA43due2dw1yQtAq6hO+pIf4dQ46iA7EYjez6GeMB2jgBaPcV7c9Grf+hrr gKo7mzCqWa2AHBFBxev+4MXk8+gM2dszBXAeKdqJaa+HsHzKjgnYNpv6ub1IDRwe lhhjiV/Wrrjm1Q== -----END CERTIFICATE-----Generated at Sat Aug 23 13:34:03 2025 by rpki-client