$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/b8/6d5d75-4d1e-4697-b1d3-36e344abc9d3/1/437h7O0Z-KCjpjW_qiZCk-NDd5U.mft File: 437h7O0Z-KCjpjW_qiZCk-NDd5U.mft (raw, json) Hash identifier: 68LDvgnyv75T1XmrNXNC7xtj3WyEgS7SHoeOS8eNjOI= Subject key identifier: 58:FC:A9:F2:5A:F8:B6:78:36:CE:01:F3:A8:14:28:79:26:41:53:37 Authority key identifier: E3:7E:E1:EC:ED:19:F8:A0:A3:A6:35:BF:AA:26:42:93:E3:43:77:95 Certificate issuer: /CN=e37ee1eced19f8a0a3a635bfaa264293e3437795 Certificate serial: 0198D65FC7C30EE430F2E7EB6E5B217EEA31 Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/437h7O0Z-KCjpjW_qiZCk-NDd5U.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/b8/6d5d75-4d1e-4697-b1d3-36e344abc9d3/1/437h7O0Z-KCjpjW_qiZCk-NDd5U.mft Manifest number: 1673 Signing time: Sat 23 Aug 2025 10:00:57 +0000 Manifest this update: Sat 23 Aug 2025 10:00:57 +0000 Manifest next update: Sun 24 Aug 2025 10:00:57 +0000 Files and hashes: 1: 1-gMcB2tX1aJagc2aIqyie1JosUM.roa (hash: e/zYIsHTFYDxeTkK5hyPfn+knzLFEB1hZl3ZQmxyCc0=) 2: 437h7O0Z-KCjpjW_qiZCk-NDd5U.crl (hash: L0rAsRFtVg0CYlHW7UnTelYZJCiRLr6GeVvQtHF6D2o=) 3: 9eNXipbIkyVdZ3T8NqmEYXwSLqE.roa (hash: BrQPu/EjsIQipBfThN07mTNPYYMcHP60+6UvtDcOjIw=) 4: EFuxyCYga5KedfhIetzIM8Wqp3Y.roa (hash: O+IR1hZ8a8RGzU0SmSAJy1+brABxzqq2amGl3toGZFo=) 5: JS9UWtZttem3o1fXhyj6cDhffLI.roa (hash: 2i5hM4JyTJhdNStU0tEfjgguQh3ME+ydQZVTRw+h18A=) 6: RX5TjbcaEwYk1IhE69eAlXBXNyQ.roa (hash: c0wkjrnxIEHQj5HUBmajY9pyKvCItPr80kJiD5UVJ6c=) 7: TxnmQLTJ7RG9p8EWlmGMzoVFKYM.roa (hash: ya4Fhh2AAgBvWI3PefXXRZJhuG79XQoe+sEudA3lm48=) 8: Ug41i06gdv9Ukc46NZ5XcrOupdE.roa (hash: llRNNcmXFkFqLY4QgsxGuCXjBef7WAi2K7CKwj9Mkc8=) 9: ZYZn-5YwBHa46UGZ7YpzFXkXV2c.roa (hash: nysaKplSjq7+66zMvup13xDe5hG/XF/iaG+ccwRnc48=) 10: iTq1k1-n5HC3mDH6yOxsGqky0UI.roa (hash: AGbGIRgcWmrYfxQjlQUEIVcfb2QPCldn/oJ/TJ7MR/A=) 11: ijEqoAEZpU0XwucBGAsnbQDDdNw.roa (hash: JCAoDA+s8OPB6Om2MtNX+ndsLOblJSylnwNeZbS7ZEI=) 12: oUN6hm9XIH9hez7uSosGEeiTS64.roa (hash: O2lJOrBjeZAv4ECvJJ0xPhkbtSeFQ6Qb6tFoYeeLtF0=) 13: rHz8kaauSx9yjUtMHgkc7yNJ95o.roa (hash: PhKHXgs0bJsWkyri4OmHbJXKHUs8Dv3fw5JQFOIgfUI=) Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/b8/6d5d75-4d1e-4697-b1d3-36e344abc9d3/1/437h7O0Z-KCjpjW_qiZCk-NDd5U.crl rsync://rpki.ripe.net/repository/DEFAULT/b8/6d5d75-4d1e-4697-b1d3-36e344abc9d3/1/437h7O0Z-KCjpjW_qiZCk-NDd5U.mft rsync://rpki.ripe.net/repository/DEFAULT/437h7O0Z-KCjpjW_qiZCk-NDd5U.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Sun 24 Aug 2025 05:01:29 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:98:d6:5f:c7:c3:0e:e4:30:f2:e7:eb:6e:5b:21:7e:ea:31 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=e37ee1eced19f8a0a3a635bfaa264293e3437795 Validity Not Before: Aug 23 10:00:57 2025 GMT Not After : Aug 24 10:00:57 2025 GMT Subject: CN=58fca9f25af8b67836ce01f3a814287926415337 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:c6:26:67:8d:25:59:ef:67:04:38:28:ab:8c:22: 8a:1c:07:90:39:ae:03:96:8e:43:8a:6b:21:f5:ee: cc:a4:c4:32:aa:c5:51:ff:26:f3:4f:5c:04:f5:9a: 56:08:90:39:d1:a5:1c:ca:24:f7:9e:8e:0d:00:4c: 99:a4:95:7f:eb:e2:72:7e:d3:68:c3:61:71:fb:e6: 6c:b6:95:63:40:ea:24:0d:ce:90:de:ce:14:f7:27: 9f:98:4e:62:05:eb:a8:75:17:0b:00:08:84:a0:d7: 68:a6:32:30:80:64:6c:42:6b:12:41:80:65:1d:40: 3f:68:12:93:0a:36:92:85:01:26:e2:79:15:07:37: f7:f7:07:65:95:40:7c:eb:33:2f:55:e6:55:fa:54: 04:09:52:ad:fa:a6:68:fa:cb:6f:d6:55:c4:2d:ff: 46:8a:f3:e3:a6:20:29:e5:d3:7a:87:fe:8d:89:75: 3b:39:b9:5d:20:19:99:ad:32:7e:12:25:cb:04:8e: c9:69:d6:58:bb:80:af:9d:25:71:f1:b1:32:fa:ba: b7:1b:06:b4:99:d3:c5:fe:29:b1:7d:66:8b:fd:80: 7f:c5:b5:85:6a:0d:f0:9d:8d:93:5b:00:00:2f:45: 45:da:a1:c6:43:9c:ec:3e:fd:d9:45:75:42:a8:49: 84:69 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 58:FC:A9:F2:5A:F8:B6:78:36:CE:01:F3:A8:14:28:79:26:41:53:37 X509v3 Authority Key Identifier: keyid:E3:7E:E1:EC:ED:19:F8:A0:A3:A6:35:BF:AA:26:42:93:E3:43:77:95 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/437h7O0Z-KCjpjW_qiZCk-NDd5U.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/b8/6d5d75-4d1e-4697-b1d3-36e344abc9d3/1/437h7O0Z-KCjpjW_qiZCk-NDd5U.mft X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/b8/6d5d75-4d1e-4697-b1d3-36e344abc9d3/1/437h7O0Z-KCjpjW_qiZCk-NDd5U.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 86:c2:c3:33:88:48:89:8d:1c:6e:f6:f7:96:b9:15:64:02:ec: ce:84:9c:cc:36:52:72:f7:a2:92:10:f3:87:29:a5:16:e9:37: b0:e5:b7:90:89:97:af:4c:c3:98:63:5a:6f:54:f5:1c:4d:00: 4c:aa:aa:2a:c4:96:4d:fc:5c:5a:17:c1:da:99:1f:6f:34:77: 47:5a:92:4c:97:4c:23:0a:6a:b4:8a:06:3d:76:fe:46:4c:8e: 84:48:1a:ae:60:aa:21:72:fe:ac:e5:3b:29:6b:56:0a:3b:ab: 42:23:96:df:88:2f:13:8d:c5:39:1a:6e:d8:96:0b:de:04:84: e0:c9:74:06:d7:91:67:ee:ad:1e:47:7a:75:e6:45:5b:14:ac: c5:4d:2f:0b:8f:78:4f:5b:d3:ea:56:ce:4b:9d:de:74:59:3b: ba:49:2e:08:f6:d8:16:f8:bf:08:9a:a9:62:9f:9c:7b:dd:52: 75:67:61:f4:53:55:5f:b0:20:60:0d:1e:12:4e:e3:a9:c2:88: 2a:fa:f8:57:1a:a7:1a:cd:4a:ca:da:ca:0f:49:2d:b7:15:5b: c4:0c:61:d1:9b:91:e0:52:4d:59:16:80:42:f7:0b:ab:ce:d9: 95:4f:a1:50:df:4f:17:22:42:65:98:2d:8f:76:19:d2:d5:7f: 8c:93:b2:cc -----BEGIN CERTIFICATE----- MIIFFjCCA/6gAwIBAgISAZjWX8fDDuQw8ufrblshfuoxMA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKGUzN2VlMWVjZWQxOWY4YTBhM2E2MzViZmFhMjY0MjkzZTM0 Mzc3OTUwHhcNMjUwODIzMTAwMDU3WhcNMjUwODI0MTAwMDU3WjAzMTEwLwYDVQQD Eyg1OGZjYTlmMjVhZjhiNjc4MzZjZTAxZjNhODE0Mjg3OTI2NDE1MzM3MIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAxiZnjSVZ72cEOCirjCKKHAeQOa4D lo5Dimsh9e7MpMQyqsVR/ybzT1wE9ZpWCJA50aUcyiT3no4NAEyZpJV/6+JyftNo w2Fx++ZstpVjQOokDc6Q3s4U9yefmE5iBeuodRcLAAiEoNdopjIwgGRsQmsSQYBl HUA/aBKTCjaShQEm4nkVBzf39wdllUB86zMvVeZV+lQECVKt+qZo+stv1lXELf9G ivPjpiAp5dN6h/6NiXU7ObldIBmZrTJ+EiXLBI7JadZYu4CvnSVx8bEy+rq3Gwa0 mdPF/imxfWaL/YB/xbWFag3wnY2TWwAAL0VF2qHGQ5zsPv3ZRXVCqEmEaQIDAQAB o4ICIjCCAh4wHQYDVR0OBBYEFFj8qfJa+LZ4Ns4B86gUKHkmQVM3MB8GA1UdIwQY MBaAFON+4eztGfigo6Y1v6omQpPjQ3eVMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvNDM3aDdPMFotS0NqcGpXX3FpWkNrLU5EZDVVLmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC9iOC82ZDVkNzUtNGQxZS00Njk3LWIxZDMt MzZlMzQ0YWJjOWQzLzEvNDM3aDdPMFotS0NqcGpXX3FpWkNrLU5EZDVVLm1mdDCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC9iOC82ZDVkNzUtNGQxZS00Njk3LWIxZDMtMzZlMzQ0YWJjOWQz LzEvNDM3aDdPMFotS0NqcGpXX3FpWkNrLU5EZDVVLmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAhsLDM4hI iY0cbvb3lrkVZALszoSczDZScveikhDzhymlFuk3sOW3kImXr0zDmGNab1T1HE0A TKqqKsSWTfxcWhfB2pkfbzR3R1qSTJdMIwpqtIoGPXb+RkyOhEgarmCqIXL+rOU7 KWtWCjurQiOW34gvE43FORpu2JYL3gSE4Ml0BteRZ+6tHkd6deZFWxSsxU0vC494 T1vT6lbOS53edFk7ukkuCPbYFvi/CJqpYp+ce91SdWdh9FNVX7AgYA0eEk7jqcKI Kvr4VxqnGs1KytrKD0kttxVbxAxh0ZuR4FJNWRaAQvcLq87ZlU+hUN9PFyJCZZgt j3YZ0tV/jJOyzA== -----END CERTIFICATE-----Generated at Sat Aug 23 14:07:28 2025 by rpki-client