$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/bb/32109e-24c9-4c88-a8e8-fdf6638d2c04/1/a8XefXJVt9WCYMZaEgsWTvEO-QM.mft File: a8XefXJVt9WCYMZaEgsWTvEO-QM.mft (raw, json) Hash identifier: zKqaf6oZPsniC5Hwf/vYlOX+8JeXlMn+lxgSu7nKiGM= Subject key identifier: EF:5D:A4:F1:35:1F:36:9C:E6:96:A3:BD:76:42:1B:F1:C1:64:C0:BE Authority key identifier: 6B:C5:DE:7D:72:55:B7:D5:82:60:C6:5A:12:0B:16:4E:F1:0E:F9:03 Certificate issuer: /CN=6bc5de7d7255b7d58260c65a120b164ef10ef903 Certificate serial: 0198D4E03819D11450BD228BDDD21F10E737 Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/a8XefXJVt9WCYMZaEgsWTvEO-QM.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/bb/32109e-24c9-4c88-a8e8-fdf6638d2c04/1/a8XefXJVt9WCYMZaEgsWTvEO-QM.mft Manifest number: 1620 Signing time: Sat 23 Aug 2025 03:02:00 +0000 Manifest this update: Sat 23 Aug 2025 03:02:00 +0000 Manifest next update: Sun 24 Aug 2025 03:02:00 +0000 Files and hashes: 1: 12ToQcSPt7mcdwlwu8cks0_4omc.roa (hash: Iyr2cE2tf2K+xaBK2dhfD2MWZhPJHAOvhdyF3JqR+/g=) 2: 5ZYhCNxqOm04hmY0BhngKxN9rig.roa (hash: 83J35QD4/t+gUfggZnoS3qCNRY62Cfjrx/Jm442KIdY=) 3: BEDotW58dYr2IkiSMhZSaCy78tU.roa (hash: XyNzheZYLo9o54ao6bWUNrKJS5W5TlIfmYW8SbTPE9U=) 4: DNFKKqPzY2tTxyq4ZF-e6ESwWBk.roa (hash: ONyXaG/qy9WX6Bit7PbMeuasymNM8i3asJe1STaYw+o=) 5: HQby7lGCxVhcsYrFBxtLvu1Nq1s.roa (hash: OEoyOXMuUI9gzJHQlRaFw5QR3hyZ9zizJ0Zhg109soQ=) 6: KEB7URRNcLIkdHFl8_NaQFzoCUc.roa (hash: 8o0J9qbfKon/Y8q8sQm0uMymQ1kVnwb8u5ia9INGr/U=) 7: RVuh9Ovnia6HGIxuY5C4mqQkVzw.roa (hash: 7MdQXOdkGadK2Vo4n1LYddNyvg9R887clmJN5QnKDO0=) 8: _4iJCnTkrZTLi3Znw6No51nUp0U.roa (hash: q5ypixYuURsWaauidvKopOxQLyMvMh9Ff8agaEGE8Z8=) 9: a8XefXJVt9WCYMZaEgsWTvEO-QM.crl (hash: 4oXfNr/OqnfZ6GJXyll/CCnoekZ3RQp4NNcbHtkqdRM=) 10: egyYxAR3bwmsGgeknwOtvs63Vmw.roa (hash: XurIkmwZSfSrHBi1j2SOabRmxdimDBrxAVpSXYwSmK8=) 11: gCwZCj5y4eEHhiE3OdNG143EtPw.roa (hash: bJxdVgp0WUK1yUG+3MFHdMNTBJUCc3SJjDGJmr3bN5s=) 12: kWxL8-0FaQ5asnDLfivzWKH4-z8.roa (hash: aTbkIB4IPS1IGAIXN2uxEpuYorOcI3bZmMM6X6TsyjM=) 13: wM1Yw5nFuvuJTOAzQjCj5rN5Pm0.roa (hash: ent4AXHk/p6bQe6GuoAZTq2KLI9u7gMCUsO1EmVjq8w=) Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/bb/32109e-24c9-4c88-a8e8-fdf6638d2c04/1/a8XefXJVt9WCYMZaEgsWTvEO-QM.crl rsync://rpki.ripe.net/repository/DEFAULT/bb/32109e-24c9-4c88-a8e8-fdf6638d2c04/1/a8XefXJVt9WCYMZaEgsWTvEO-QM.mft rsync://rpki.ripe.net/repository/DEFAULT/a8XefXJVt9WCYMZaEgsWTvEO-QM.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Sun 24 Aug 2025 00:37:04 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:98:d4:e0:38:19:d1:14:50:bd:22:8b:dd:d2:1f:10:e7:37 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=6bc5de7d7255b7d58260c65a120b164ef10ef903 Validity Not Before: Aug 23 03:02:00 2025 GMT Not After : Aug 24 03:02:00 2025 GMT Subject: CN=ef5da4f1351f369ce696a3bd76421bf1c164c0be Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:b1:f7:b1:34:00:86:90:1b:e7:5c:ba:a7:28:ee: 62:af:af:be:6f:67:ad:e6:fe:8b:df:0a:b6:d2:fc: 75:b5:68:e6:55:e6:f6:d1:7a:68:6e:66:2a:21:c3: f2:c9:df:a1:18:29:eb:c8:c8:4f:1c:85:18:0d:11: 63:6f:d4:3a:ee:60:69:8f:19:91:91:e1:6a:67:75: 96:0b:6c:ae:d9:b1:8b:6a:38:d7:42:80:24:9f:e8: 22:56:b2:23:3e:59:d6:c4:df:87:7f:3f:46:13:5a: 20:91:e1:dc:d2:1b:95:20:8e:19:ce:93:75:3f:ef: b8:69:5e:f6:9c:2a:91:d0:64:14:03:1e:2c:43:ec: 3e:b9:30:39:a4:c9:6b:dd:19:fd:c8:2c:ed:bd:e3: 7d:52:a2:4d:9d:9b:b2:13:ab:f2:7b:94:e5:aa:4e: bb:1e:15:23:c0:ca:ec:a5:75:30:5f:9a:0b:df:a9: b7:5d:26:57:89:ed:3c:a2:6f:d6:35:70:89:5a:e5: 40:f1:37:50:ec:b9:da:35:6a:cf:2c:11:85:b7:80: b7:f4:1d:c6:53:f4:c1:d4:ff:21:50:cc:bc:9a:b5: b8:0d:db:4e:46:97:8c:52:01:9a:1e:81:b6:b2:59: c5:a4:c5:c7:94:ab:1f:db:6a:b4:68:79:1c:1a:f7: 30:ab Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: EF:5D:A4:F1:35:1F:36:9C:E6:96:A3:BD:76:42:1B:F1:C1:64:C0:BE X509v3 Authority Key Identifier: keyid:6B:C5:DE:7D:72:55:B7:D5:82:60:C6:5A:12:0B:16:4E:F1:0E:F9:03 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/a8XefXJVt9WCYMZaEgsWTvEO-QM.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/bb/32109e-24c9-4c88-a8e8-fdf6638d2c04/1/a8XefXJVt9WCYMZaEgsWTvEO-QM.mft X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/bb/32109e-24c9-4c88-a8e8-fdf6638d2c04/1/a8XefXJVt9WCYMZaEgsWTvEO-QM.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 46:f8:6d:4e:1b:2a:75:3c:98:09:12:3b:e4:ed:95:20:6c:80: 53:13:fd:02:70:0c:24:08:77:9c:ee:06:3b:0e:5f:c0:be:a0: 0b:4e:a9:fc:2b:4a:d2:b5:37:5d:fa:e6:a3:d1:8d:01:99:25: 18:8f:ab:6e:40:f4:2b:a2:9b:27:6f:cf:5a:a2:10:50:97:1a: 53:c5:5e:d5:a9:7f:68:53:c1:b4:75:35:fb:0c:78:7d:71:ec: 11:29:8c:cc:03:63:6c:32:d3:8c:7f:0d:c9:cb:97:23:b4:fd: 71:db:45:24:cb:2e:af:8d:23:61:8c:6c:a8:0f:1e:b9:4e:fa: 58:4e:20:b4:c6:f9:19:f0:72:1a:68:fb:44:e4:7b:6c:8f:a6: 0f:a2:c3:35:b4:71:42:fb:be:5e:8a:96:c4:83:f6:aa:43:af: af:e4:0a:50:97:2b:33:88:31:82:ea:c1:12:7f:06:cd:50:39: 60:11:16:f1:7f:68:8e:7c:51:7d:c9:91:f1:e0:22:90:aa:ac: 8c:3b:cd:77:d0:64:a8:27:e1:31:48:56:cc:0e:f1:41:a8:c8: 4e:12:77:de:6a:0f:fc:5b:99:12:5e:67:43:c5:16:69:3f:53: f1:e7:88:c9:5a:b0:57:db:fc:0a:0e:6f:eb:cb:8f:70:c2:7e: d9:2c:8e:7d -----BEGIN CERTIFICATE----- MIIFFjCCA/6gAwIBAgISAZjU4DgZ0RRQvSKL3dIfEOc3MA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKDZiYzVkZTdkNzI1NWI3ZDU4MjYwYzY1YTEyMGIxNjRlZjEw ZWY5MDMwHhcNMjUwODIzMDMwMjAwWhcNMjUwODI0MDMwMjAwWjAzMTEwLwYDVQQD EyhlZjVkYTRmMTM1MWYzNjljZTY5NmEzYmQ3NjQyMWJmMWMxNjRjMGJlMIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAsfexNACGkBvnXLqnKO5ir6++b2et 5v6L3wq20vx1tWjmVeb20XpobmYqIcPyyd+hGCnryMhPHIUYDRFjb9Q67mBpjxmR keFqZ3WWC2yu2bGLajjXQoAkn+giVrIjPlnWxN+Hfz9GE1ogkeHc0huVII4ZzpN1 P++4aV72nCqR0GQUAx4sQ+w+uTA5pMlr3Rn9yCztveN9UqJNnZuyE6vye5Tlqk67 HhUjwMrspXUwX5oL36m3XSZXie08om/WNXCJWuVA8TdQ7LnaNWrPLBGFt4C39B3G U/TB1P8hUMy8mrW4DdtORpeMUgGaHoG2slnFpMXHlKsf22q0aHkcGvcwqwIDAQAB o4ICIjCCAh4wHQYDVR0OBBYEFO9dpPE1Hzac5pajvXZCG/HBZMC+MB8GA1UdIwQY MBaAFGvF3n1yVbfVgmDGWhILFk7xDvkDMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvYThYZWZYSlZ0OVdDWU1aYUVnc1dUdkVPLVFNLmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC9iYi8zMjEwOWUtMjRjOS00Yzg4LWE4ZTgt ZmRmNjYzOGQyYzA0LzEvYThYZWZYSlZ0OVdDWU1aYUVnc1dUdkVPLVFNLm1mdDCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC9iYi8zMjEwOWUtMjRjOS00Yzg4LWE4ZTgtZmRmNjYzOGQyYzA0 LzEvYThYZWZYSlZ0OVdDWU1aYUVnc1dUdkVPLVFNLmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEARvhtThsq dTyYCRI75O2VIGyAUxP9AnAMJAh3nO4GOw5fwL6gC06p/CtK0rU3Xfrmo9GNAZkl GI+rbkD0K6KbJ2/PWqIQUJcaU8Ve1al/aFPBtHU1+wx4fXHsESmMzANjbDLTjH8N ycuXI7T9cdtFJMsur40jYYxsqA8euU76WE4gtMb5GfByGmj7ROR7bI+mD6LDNbRx Qvu+XoqWxIP2qkOvr+QKUJcrM4gxgurBEn8GzVA5YBEW8X9ojnxRfcmR8eAikKqs jDvNd9BkqCfhMUhWzA7xQajIThJ33moP/FuZEl5nQ8UWaT9T8eeIyVqwV9v8Cg5v 68uPcMJ+2SyOfQ== -----END CERTIFICATE-----Generated at Sat Aug 23 10:19:16 2025 by rpki-client