$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/b2/6c203d-6221-460a-af49-c12218765154/1/MlCPt4HKbb2CIfLC-VSjp0RrK0I.mft File: MlCPt4HKbb2CIfLC-VSjp0RrK0I.mft (raw, json) Hash identifier: GgJRkbWyIueKG75tgQ6UtOfzNgHOI0PXRyRQPj3+VVA= Subject key identifier: 11:30:A6:72:40:BB:DD:5F:5D:2F:3E:6F:71:DF:91:3D:E0:2F:86:A9 Authority key identifier: 32:50:8F:B7:81:CA:6D:BD:82:21:F2:C2:F9:54:A3:A7:44:6B:2B:42 Certificate issuer: /CN=32508fb781ca6dbd8221f2c2f954a3a7446b2b42 Certificate serial: 0198D5BBAF7C1070F6B4FC1E338D1D57C009 Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/MlCPt4HKbb2CIfLC-VSjp0RrK0I.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/b2/6c203d-6221-460a-af49-c12218765154/1/MlCPt4HKbb2CIfLC-VSjp0RrK0I.mft Manifest number: 1656 Signing time: Sat 23 Aug 2025 07:01:43 +0000 Manifest this update: Sat 23 Aug 2025 07:01:43 +0000 Manifest next update: Sun 24 Aug 2025 07:01:43 +0000 Files and hashes: 1: 7sUlQFo2i2sGz_Vst269K_D-c-U.roa (hash: awgZwYT2+l2C5RaRZHXtrmJNbZfubWqB+2+301bBQBU=) 2: MlCPt4HKbb2CIfLC-VSjp0RrK0I.crl (hash: h1VF4ptCcHCTQYSZXwULN2GoIc0aSBW2x/SZtJwiriU=) 3: N6977Tm3BxtAWxQMZFqlxhSXVqI.roa (hash: avNpgfUO6xrr8rilL4FRK/J7Wxu+LI2r4IfOPlXIeJI=) 4: OqobHIZLFLbZk0OR9E-PF1zk1Lw.roa (hash: Op02L+M19/z5j79qbmcRNqPT6icOYzM0VJzQXj5mmv8=) 5: TEsKuOI8Wr3xLM61BToTHvaxLG0.roa (hash: rGoXl2FfQwurIyUgTu1Dn9mUe7pNqUYv/AJnXAkg28U=) 6: i7jWP6E6hcB7Kvbk4mThF2buTs8.roa (hash: OqH0B+K5eYlDv/BpS97jLxNiwQggexBzkbjaho23mP4=) 7: nqc-9YDKd79YsE90D6bPl2BpKgE.roa (hash: VLqSIZaMWc7sFSdSIdfn5EqqZNs2ezp2l6diOyM4sNY=) 8: rgeIy49dLmNJww9sp8JRWKXD-n8.roa (hash: L8MUX4zAy84NplfwfzJB7WI9HcrmosjCL1UuxDQCssQ=) 9: xZ2vcM-Bgt-peFWCq0zItN8_N0c.roa (hash: IJSnWW805B1m7rlymmTJG2w628sB6dalr9ieL5l/bMk=) 10: zZigjvCd6NcudatYLyfpsyOboFA.roa (hash: vGtEfaZy/GpSD6Vra1IvWRrERF5jpy55majvnW9xdMY=) Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/b2/6c203d-6221-460a-af49-c12218765154/1/MlCPt4HKbb2CIfLC-VSjp0RrK0I.crl rsync://rpki.ripe.net/repository/DEFAULT/b2/6c203d-6221-460a-af49-c12218765154/1/MlCPt4HKbb2CIfLC-VSjp0RrK0I.mft rsync://rpki.ripe.net/repository/DEFAULT/MlCPt4HKbb2CIfLC-VSjp0RrK0I.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Sun 24 Aug 2025 05:01:29 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:98:d5:bb:af:7c:10:70:f6:b4:fc:1e:33:8d:1d:57:c0:09 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=32508fb781ca6dbd8221f2c2f954a3a7446b2b42 Validity Not Before: Aug 23 07:01:43 2025 GMT Not After : Aug 24 07:01:43 2025 GMT Subject: CN=1130a67240bbdd5f5d2f3e6f71df913de02f86a9 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:dd:40:2e:ef:45:9c:c0:e7:2f:b8:43:f1:10:ea: c2:fd:9e:18:bc:61:15:13:6e:7b:0a:e5:80:d4:b7: 3d:fe:1b:7c:3a:65:bf:69:65:f4:7c:60:ce:ed:e8: 6c:de:94:4c:a8:d8:54:a7:8e:f8:15:c0:5e:6a:ab: 64:a6:43:31:ce:09:09:9f:17:c5:0d:fe:3a:58:49: 1b:9a:f4:a5:b9:8c:c4:fa:16:24:2c:77:2e:76:79: bf:73:6e:09:3e:a5:e6:9f:69:88:cb:9e:51:67:5e: a5:e1:05:0b:6e:95:31:63:ca:da:dc:f8:93:29:72: f2:94:ef:89:89:aa:70:93:b9:11:26:80:55:af:32: af:de:8d:ae:f3:81:b7:e1:ae:1e:0c:3a:d2:0b:3c: da:3f:31:92:ea:a8:b0:24:f1:54:d4:96:20:c5:cc: ed:eb:92:27:02:7d:ef:35:64:04:85:95:62:62:b6: eb:54:af:de:d8:6a:9a:d6:d2:7a:e7:a2:e0:4b:03: ca:5c:6e:ef:01:b2:4b:27:d2:de:64:60:5f:d2:a4: 21:91:7d:9e:16:9c:75:d8:16:2b:44:c8:b2:c1:20: 80:cc:9a:1c:88:04:38:e8:40:64:02:8e:ae:b1:2f: f5:73:b5:9f:0f:8f:1a:9d:b4:d7:b9:33:ea:a8:1e: 9a:af Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 11:30:A6:72:40:BB:DD:5F:5D:2F:3E:6F:71:DF:91:3D:E0:2F:86:A9 X509v3 Authority Key Identifier: keyid:32:50:8F:B7:81:CA:6D:BD:82:21:F2:C2:F9:54:A3:A7:44:6B:2B:42 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/MlCPt4HKbb2CIfLC-VSjp0RrK0I.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/b2/6c203d-6221-460a-af49-c12218765154/1/MlCPt4HKbb2CIfLC-VSjp0RrK0I.mft X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/b2/6c203d-6221-460a-af49-c12218765154/1/MlCPt4HKbb2CIfLC-VSjp0RrK0I.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 79:ae:b1:3f:38:d5:54:46:34:b8:87:9d:c7:c2:aa:b4:b3:a1: 22:39:6a:da:6e:44:b4:9b:9e:c2:1b:a8:25:f5:2b:2f:1e:e2: 75:29:7e:9b:ba:cb:c9:7e:9b:9d:3c:52:21:df:f3:a3:80:7e: ad:d8:3d:05:37:53:cf:dc:c5:90:34:c0:3a:70:7b:3e:ca:5f: b5:67:68:61:39:58:a1:84:6c:46:09:92:a0:e4:c7:c9:e2:50: 27:46:27:ae:61:52:07:e2:3a:2b:57:f5:58:05:24:8f:bb:88: e7:76:f8:f5:97:cf:06:5e:04:51:ef:0b:53:6d:d3:04:a9:48: 85:d6:58:a0:b5:1a:3f:68:c2:8d:4c:82:bb:17:6a:27:f5:50: e4:9a:d6:76:3f:e8:f7:07:96:7f:5c:c7:b5:a1:50:12:6d:36: fe:06:96:c0:ba:7d:f9:65:d0:e4:2f:4d:d4:4e:f6:1d:57:5d: 88:00:02:97:e2:2c:d6:7b:00:62:11:33:a0:54:57:b4:af:32: a4:d3:ed:15:ee:2c:2e:a1:98:d1:01:f7:bf:90:75:a8:00:63: 3b:5d:ec:c4:34:93:cc:fb:18:84:39:ff:79:85:3d:95:d5:d7: de:fc:ef:32:3b:a2:d1:7f:41:d3:74:1d:9e:52:7b:bf:83:de: 51:b0:06:80 -----BEGIN CERTIFICATE----- MIIFFjCCA/6gAwIBAgISAZjVu698EHD2tPweM40dV8AJMA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKDMyNTA4ZmI3ODFjYTZkYmQ4MjIxZjJjMmY5NTRhM2E3NDQ2 YjJiNDIwHhcNMjUwODIzMDcwMTQzWhcNMjUwODI0MDcwMTQzWjAzMTEwLwYDVQQD EygxMTMwYTY3MjQwYmJkZDVmNWQyZjNlNmY3MWRmOTEzZGUwMmY4NmE5MIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEA3UAu70WcwOcvuEPxEOrC/Z4YvGEV E257CuWA1Lc9/ht8OmW/aWX0fGDO7ehs3pRMqNhUp474FcBeaqtkpkMxzgkJnxfF Df46WEkbmvSluYzE+hYkLHcudnm/c24JPqXmn2mIy55RZ16l4QULbpUxY8ra3PiT KXLylO+Jiapwk7kRJoBVrzKv3o2u84G34a4eDDrSCzzaPzGS6qiwJPFU1JYgxczt 65InAn3vNWQEhZViYrbrVK/e2Gqa1tJ656LgSwPKXG7vAbJLJ9LeZGBf0qQhkX2e Fpx12BYrRMiywSCAzJociAQ46EBkAo6usS/1c7WfD48anbTXuTPqqB6arwIDAQAB o4ICIjCCAh4wHQYDVR0OBBYEFBEwpnJAu91fXS8+b3HfkT3gL4apMB8GA1UdIwQY MBaAFDJQj7eBym29giHywvlUo6dEaytCMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvTWxDUHQ0SEtiYjJDSWZMQy1WU2pwMFJySzBJLmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC9iMi82YzIwM2QtNjIyMS00NjBhLWFmNDkt YzEyMjE4NzY1MTU0LzEvTWxDUHQ0SEtiYjJDSWZMQy1WU2pwMFJySzBJLm1mdDCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC9iMi82YzIwM2QtNjIyMS00NjBhLWFmNDktYzEyMjE4NzY1MTU0 LzEvTWxDUHQ0SEtiYjJDSWZMQy1WU2pwMFJySzBJLmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAea6xPzjV VEY0uIedx8KqtLOhIjlq2m5EtJuewhuoJfUrLx7idSl+m7rLyX6bnTxSId/zo4B+ rdg9BTdTz9zFkDTAOnB7PspftWdoYTlYoYRsRgmSoOTHyeJQJ0YnrmFSB+I6K1f1 WAUkj7uI53b49ZfPBl4EUe8LU23TBKlIhdZYoLUaP2jCjUyCuxdqJ/VQ5JrWdj/o 9weWf1zHtaFQEm02/gaWwLp9+WXQ5C9N1E72HVddiAACl+Is1nsAYhEzoFRXtK8y pNPtFe4sLqGY0QH3v5B1qABjO13sxDSTzPsYhDn/eYU9ldXX3vzvMjui0X9B03Qd nlJ7v4PeUbAGgA== -----END CERTIFICATE-----Generated at Sat Aug 23 10:56:45 2025 by rpki-client