$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/b1/7703ef-2422-437c-b93d-595e0bf5c613/1/MmN4f9D5SzeBPu8WvIE3Qj7j_vM.mft File: MmN4f9D5SzeBPu8WvIE3Qj7j_vM.mft (raw, json) Hash identifier: Jxu2wIO/qkiRTh+ngtaBo9zrNr4F8YJQ+PpiiqBzJUM= Subject key identifier: 0C:50:73:5B:53:F8:BE:C2:53:67:42:4A:E5:2E:0D:A4:28:45:E7:3F Authority key identifier: 32:63:78:7F:D0:F9:4B:37:81:3E:EF:16:BC:81:37:42:3E:E3:FE:F3 Certificate issuer: /CN=3263787fd0f94b37813eef16bc8137423ee3fef3 Certificate serial: 0198D4A7DC3E0AE87C8C871A52902997EA0A Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/MmN4f9D5SzeBPu8WvIE3Qj7j_vM.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/b1/7703ef-2422-437c-b93d-595e0bf5c613/1/MmN4f9D5SzeBPu8WvIE3Qj7j_vM.mft Manifest number: 1682 Signing time: Sat 23 Aug 2025 02:00:27 +0000 Manifest this update: Sat 23 Aug 2025 02:00:27 +0000 Manifest next update: Sun 24 Aug 2025 02:00:27 +0000 Files and hashes: 1: 6EzBdLMFhAHXtGoqOgo2hhkKxsE.roa (hash: 6BZyqWO3dBV2T/D/HQLLEXL8wtnsNJxMwYYKl/DQzgM=) 2: 6ef47TXoBdfjKnlsNsow8DBixKo.roa (hash: CJVWo8/zfulxwmsfO0I8Hpt8eJudz4hqVHD23gptH10=) 3: GiScTXLFDlSkFEEGri5P1vz6Sho.roa (hash: uMhctxLibeY+IpaWynfmNEbttAIjD24+B1IvRH31TQ8=) 4: KbQ--oBtSgvSfZVrBwQ6M553Hwk.roa (hash: NJgK04btjY64hOecbKh54mIt3v+Yqupp2O5zCZPtgv0=) 5: MmN4f9D5SzeBPu8WvIE3Qj7j_vM.crl (hash: nXPqI8T+CwZK3CIWk7NHXyxz49Z3XxWRCAo31RF6pi4=) 6: Oi1LQnm4lsa7_1hR1J20jJ6vxNI.roa (hash: SY2CzV8LXx9B2pkUZksUiYNXDfeS5dNBeKSh1IfycAI=) 7: nb4wfQ7FzEgUQNDsTQT1rI6C1P0.roa (hash: XbtW2pGYp04EBEIcviRAYkU8I+ewGGN4xhpRClBs10Q=) 8: pZHCAjsk0quEKKapLoBOB8SLyYU.roa (hash: PkFYd+Uy2SwEBC/xRtpP2pJp1/vhJ01S2mfX0UJzqmk=) 9: s_FtOH_04RI6fQSwCEGQRaxenqE.roa (hash: Up1ChTzvoa7S+h2ZhOA1fS6mN/rXtYcGjF6VjvPQ6yU=) 10: xncarj25crr8jheWMdTk_hHjDgA.roa (hash: faBPhFeokl7YpLGqkirAx40a8ze0nSMM/W/gUDbYpqs=) 11: zo7mxq2v2o0aNKJKvVs8XzMAoSo.roa (hash: hDK25txovgb427j58Xr748zftbcgjP77JZ1VaXHts3o=) Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/b1/7703ef-2422-437c-b93d-595e0bf5c613/1/MmN4f9D5SzeBPu8WvIE3Qj7j_vM.crl rsync://rpki.ripe.net/repository/DEFAULT/b1/7703ef-2422-437c-b93d-595e0bf5c613/1/MmN4f9D5SzeBPu8WvIE3Qj7j_vM.mft rsync://rpki.ripe.net/repository/DEFAULT/MmN4f9D5SzeBPu8WvIE3Qj7j_vM.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Sun 24 Aug 2025 02:00:27 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:98:d4:a7:dc:3e:0a:e8:7c:8c:87:1a:52:90:29:97:ea:0a Signature Algorithm: sha256WithRSAEncryption Issuer: CN=3263787fd0f94b37813eef16bc8137423ee3fef3 Validity Not Before: Aug 23 02:00:27 2025 GMT Not After : Aug 24 02:00:27 2025 GMT Subject: CN=0c50735b53f8bec25367424ae52e0da42845e73f Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:cf:e4:7a:c0:5d:03:a5:e0:cf:26:f9:31:bc:19: a8:bf:b3:d6:66:47:d5:5a:af:b5:47:86:91:15:39: b6:11:32:1b:48:57:df:c6:91:58:d2:bc:a1:62:fd: d2:5d:c7:d1:a0:9e:94:1c:39:5d:f5:8c:0b:b8:9d: 15:de:5c:11:11:1a:76:b1:81:86:a5:f1:31:f2:76: 8c:cf:fd:33:35:6f:99:65:81:43:40:2f:fc:85:61: fe:10:4b:fd:01:b0:6c:6b:df:11:ec:53:35:e6:f8: 97:53:e5:f4:4a:b1:68:fa:b0:33:3a:45:60:a3:34: 1a:0e:0c:6f:91:6a:65:0d:4e:30:2f:9f:5f:d7:ba: f3:0f:9c:7c:80:01:0d:13:ec:1f:7c:a5:ba:29:64: 3c:c2:88:f7:5d:c9:5c:80:21:87:8e:11:35:c1:f2: 49:b2:dc:7e:eb:b1:7f:57:52:ba:cd:d8:80:f2:32: a1:32:1a:b0:c6:71:88:81:a4:cd:e8:4d:3a:d2:4c: f4:e1:5e:b9:2b:fc:87:b0:79:85:2b:09:41:df:9a: 77:08:cf:7f:5b:11:4c:ac:f0:e0:3d:0c:23:7d:17: 0d:34:f9:32:93:a0:c0:74:0f:5f:f3:1f:3b:b3:c0: 45:ac:4e:4b:63:e6:9c:76:01:01:55:30:9c:77:f8: 50:35 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 0C:50:73:5B:53:F8:BE:C2:53:67:42:4A:E5:2E:0D:A4:28:45:E7:3F X509v3 Authority Key Identifier: keyid:32:63:78:7F:D0:F9:4B:37:81:3E:EF:16:BC:81:37:42:3E:E3:FE:F3 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/MmN4f9D5SzeBPu8WvIE3Qj7j_vM.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/b1/7703ef-2422-437c-b93d-595e0bf5c613/1/MmN4f9D5SzeBPu8WvIE3Qj7j_vM.mft X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/b1/7703ef-2422-437c-b93d-595e0bf5c613/1/MmN4f9D5SzeBPu8WvIE3Qj7j_vM.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 66:dd:46:81:dc:cd:db:7d:ef:a3:ec:50:fe:ab:b2:e9:37:4a: d2:42:34:58:a5:d7:c7:2d:86:ef:e3:d7:41:37:5a:d1:b6:e0: 2a:5f:b0:8c:e6:99:2f:3e:e8:0b:81:98:04:97:4b:d2:5b:71: 04:48:6a:09:fa:85:b1:eb:99:41:82:da:8b:09:03:71:29:d5: 08:be:e4:27:4a:2b:68:89:5b:44:cf:d5:3c:cc:d4:af:fc:34: 01:04:73:2a:fd:48:15:76:d9:57:9a:f7:14:6f:c8:52:6d:15: 7a:c5:d0:14:35:a2:9f:83:5d:6c:b1:ab:bf:11:86:09:f3:08: 2b:76:9e:3a:66:07:6f:9c:ab:a6:d3:ac:c4:a8:d2:82:fd:31: 61:0d:c6:92:00:ce:9e:92:32:34:4b:24:fc:af:fe:29:0f:f2: ec:83:3e:1d:97:1f:ce:44:61:1c:80:8a:9f:41:db:df:06:1c: a1:51:6f:78:bc:27:6a:e9:c8:9f:83:8f:6e:61:76:af:82:72: d3:55:da:43:bf:c3:f0:a1:f8:56:ba:74:90:7c:de:e9:81:25: ff:30:05:eb:97:e6:1a:5a:f3:f6:b2:fb:32:f6:bf:51:be:12: f0:97:f9:fc:9a:85:a4:c7:4f:3a:ba:cf:47:00:c1:bb:82:93: 81:02:77:f1 -----BEGIN CERTIFICATE----- MIIFFjCCA/6gAwIBAgISAZjUp9w+Cuh8jIcaUpApl+oKMA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKDMyNjM3ODdmZDBmOTRiMzc4MTNlZWYxNmJjODEzNzQyM2Vl M2ZlZjMwHhcNMjUwODIzMDIwMDI3WhcNMjUwODI0MDIwMDI3WjAzMTEwLwYDVQQD EygwYzUwNzM1YjUzZjhiZWMyNTM2NzQyNGFlNTJlMGRhNDI4NDVlNzNmMIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAz+R6wF0DpeDPJvkxvBmov7PWZkfV Wq+1R4aRFTm2ETIbSFffxpFY0ryhYv3SXcfRoJ6UHDld9YwLuJ0V3lwRERp2sYGG pfEx8naMz/0zNW+ZZYFDQC/8hWH+EEv9AbBsa98R7FM15viXU+X0SrFo+rAzOkVg ozQaDgxvkWplDU4wL59f17rzD5x8gAENE+wffKW6KWQ8woj3XclcgCGHjhE1wfJJ stx+67F/V1K6zdiA8jKhMhqwxnGIgaTN6E060kz04V65K/yHsHmFKwlB35p3CM9/ WxFMrPDgPQwjfRcNNPkyk6DAdA9f8x87s8BFrE5LY+acdgEBVTCcd/hQNQIDAQAB o4ICIjCCAh4wHQYDVR0OBBYEFAxQc1tT+L7CU2dCSuUuDaQoRec/MB8GA1UdIwQY MBaAFDJjeH/Q+Us3gT7vFryBN0I+4/7zMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvTW1ONGY5RDVTemVCUHU4V3ZJRTNRajdqX3ZNLmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC9iMS83NzAzZWYtMjQyMi00MzdjLWI5M2Qt NTk1ZTBiZjVjNjEzLzEvTW1ONGY5RDVTemVCUHU4V3ZJRTNRajdqX3ZNLm1mdDCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC9iMS83NzAzZWYtMjQyMi00MzdjLWI5M2QtNTk1ZTBiZjVjNjEz LzEvTW1ONGY5RDVTemVCUHU4V3ZJRTNRajdqX3ZNLmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAZt1GgdzN 233vo+xQ/quy6TdK0kI0WKXXxy2G7+PXQTda0bbgKl+wjOaZLz7oC4GYBJdL0ltx BEhqCfqFseuZQYLaiwkDcSnVCL7kJ0oraIlbRM/VPMzUr/w0AQRzKv1IFXbZV5r3 FG/IUm0VesXQFDWin4NdbLGrvxGGCfMIK3aeOmYHb5yrptOsxKjSgv0xYQ3GkgDO npIyNEsk/K/+KQ/y7IM+HZcfzkRhHICKn0Hb3wYcoVFveLwnaunIn4OPbmF2r4Jy 01XaQ7/D8KH4Vrp0kHze6YEl/zAF65fmGlrz9rL7Mva/Ub4S8Jf5/JqFpMdPOrrP RwDBu4KTgQJ38Q== -----END CERTIFICATE-----Generated at Sat Aug 23 11:41:23 2025 by rpki-client