$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/bb/b4b150-dbb8-465f-8155-e4419b64212e/1/8FIRKM9jSqavp-9S1THz_NVWKPk.mft File: 8FIRKM9jSqavp-9S1THz_NVWKPk.mft (raw, json) Hash identifier: EkFvW0RM7nlO9N9tiVa9D1dNL+sChymOjHDAu86u3oY= Subject key identifier: E2:38:E8:8C:85:C0:A2:77:D0:CE:36:E9:04:F9:D9:7D:3D:BC:19:29 Authority key identifier: F0:52:11:28:CF:63:4A:A6:AF:A7:EF:52:D5:31:F3:FC:D5:56:28:F9 Certificate issuer: /CN=f0521128cf634aa6afa7ef52d531f3fcd55628f9 Certificate serial: 0198D4738CB1A1D8DE61CC71F1C9D55224F4 Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/8FIRKM9jSqavp-9S1THz_NVWKPk.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/bb/b4b150-dbb8-465f-8155-e4419b64212e/1/8FIRKM9jSqavp-9S1THz_NVWKPk.mft Manifest number: 1652 Signing time: Sat 23 Aug 2025 01:03:19 +0000 Manifest this update: Sat 23 Aug 2025 01:03:19 +0000 Manifest next update: Sun 24 Aug 2025 01:03:19 +0000 Files and hashes: 1: 0vpioq7e7IBvU0f7txi-wExHAPw.roa (hash: lCvUWIuH8RdERCkztaN1NhfYOchJDmj9ywnhD1WG0qs=) 2: 1-t-clxlx4vHi76xBwGIh0Y5orug.roa (hash: WGphFqEzeHYQfivrVaHRtOvOzzhN/PDKxrZlm3FuIDA=) 3: 4CCEdgNV-fGWUC_aGHxQwbUsOKQ.roa (hash: zTRmkFZkHzwf+QYURy5/v5Sjyovq0HLSmOwtNQ48L/c=) 4: 8FIRKM9jSqavp-9S1THz_NVWKPk.crl (hash: D81D/9GchNHcUCUKGQdXEA2ZBvhX4mtNsTo/NwGuhFY=) 5: 9oOMh0CjqydkdSKEbK66nXXsu4E.roa (hash: qQJNJWud5A2R6q9LElC5WdsYynVdzga12kQWDH61mWo=) 6: AoQYABlbiRY1s0Gu3McHV58zrpk.roa (hash: 9zDAXKdytFg/3YwoUton7cniFW2Ja9ArE5tJ2skkn+c=) 7: OdGF_e17lYBOCmXmsk6hkXdf7b4.roa (hash: mFKHbPekFFY75D3Eu+1fU9mzEnOZ9+rJaeHup24zW3Q=) 8: PFyByii-LGzRSy90jiJ5mw1207A.roa (hash: gIS/3e5ejAqBGpUPti4f7RxoNdrem0KAE6vwjMubh3s=) 9: Qkq_75MjyviWe2NqgT_-Mwn9gnM.roa (hash: wJb9fi2vDIIR6voDYxFFRDUWuFkEQa98zP1PFmkzpXs=) 10: ScwFXX2rYjT7naQciVMaotJ-UfM.roa (hash: X8Vp96ZEvVObF+OkcOx9P04g9HBNU6my6Pc/b9LR72Y=) 11: rh7_88ku0NVEacOTg4kYRNyhUIs.roa (hash: Uz863y1lKUf+O+OGV8gNQDxIpi4RBI83I9R9FXt5Xp4=) 12: u37q8oxj6d2YnoBLY1VE3CqS2g0.roa (hash: QV9HVDjMgl4TBfOFPjFKF+CTfrUEm6XmvkI/fobJGaM=) Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/bb/b4b150-dbb8-465f-8155-e4419b64212e/1/8FIRKM9jSqavp-9S1THz_NVWKPk.crl rsync://rpki.ripe.net/repository/DEFAULT/bb/b4b150-dbb8-465f-8155-e4419b64212e/1/8FIRKM9jSqavp-9S1THz_NVWKPk.mft rsync://rpki.ripe.net/repository/DEFAULT/8FIRKM9jSqavp-9S1THz_NVWKPk.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Sun 24 Aug 2025 00:37:04 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:98:d4:73:8c:b1:a1:d8:de:61:cc:71:f1:c9:d5:52:24:f4 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=f0521128cf634aa6afa7ef52d531f3fcd55628f9 Validity Not Before: Aug 23 01:03:19 2025 GMT Not After : Aug 24 01:03:19 2025 GMT Subject: CN=e238e88c85c0a277d0ce36e904f9d97d3dbc1929 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:9c:d3:ae:e3:cd:41:d5:5a:fa:8f:fc:2e:4b:27: 87:da:e0:64:4b:13:13:87:03:6a:d9:2e:0c:df:51: 84:06:62:c9:47:d3:b3:59:09:d3:ff:54:31:d2:37: 1a:34:c4:b6:61:2b:84:58:de:fd:17:a0:4c:fe:0b: 26:f4:2c:49:ec:9f:89:73:2e:d8:8f:4c:5b:17:87: a1:2a:d9:28:ae:3c:55:23:c7:2f:bd:6b:b9:91:f1: 83:c1:86:6a:56:a5:79:ce:f2:0c:bb:8c:90:a4:63: 03:e2:65:a9:d4:5b:69:8c:8e:32:05:77:86:fa:a4: a0:de:74:d2:6b:de:87:98:00:e1:59:26:9c:47:7c: 5a:13:ed:3b:7d:42:a0:cd:1e:42:49:c7:33:ad:b7: ad:90:28:57:84:00:d0:4b:2b:f0:b3:d8:1c:db:b2: be:cc:bb:a6:ab:f4:01:a9:36:35:3d:d6:54:b5:27: ae:c6:68:d4:18:ef:8b:5e:56:06:6a:46:d6:60:50: bd:3d:43:0a:cc:b9:b5:d0:5e:57:ce:ee:85:60:3e: ba:f7:28:c4:97:ca:42:95:0d:fb:8a:f5:e4:66:bb: b3:24:f4:7b:fd:2a:ba:dd:8f:c3:f6:05:bf:f4:35: bf:d5:fe:d1:5e:bd:7c:57:0d:de:a1:4c:77:aa:1b: c7:2b Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: E2:38:E8:8C:85:C0:A2:77:D0:CE:36:E9:04:F9:D9:7D:3D:BC:19:29 X509v3 Authority Key Identifier: keyid:F0:52:11:28:CF:63:4A:A6:AF:A7:EF:52:D5:31:F3:FC:D5:56:28:F9 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/8FIRKM9jSqavp-9S1THz_NVWKPk.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/bb/b4b150-dbb8-465f-8155-e4419b64212e/1/8FIRKM9jSqavp-9S1THz_NVWKPk.mft X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/bb/b4b150-dbb8-465f-8155-e4419b64212e/1/8FIRKM9jSqavp-9S1THz_NVWKPk.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 69:d7:e9:4f:2f:a9:68:ab:04:b5:c7:36:96:75:2d:12:f5:83: 92:f2:ff:ca:cf:52:6b:76:fa:96:70:5f:54:c5:ba:21:fd:38: 68:2f:50:a7:ef:b0:8d:dc:5f:24:f0:af:b1:bf:55:80:0c:0c: f9:93:c3:75:d5:51:c7:cc:28:23:0d:01:83:2f:b9:82:0d:b4: 2e:6d:72:25:c6:77:07:ec:ef:44:17:c1:90:84:62:c9:d8:83: 42:b0:a2:7e:ee:26:18:5d:ae:ac:4d:fd:3d:3e:72:82:57:b6: 35:30:09:b6:0b:cb:6a:aa:e9:94:6f:c4:ff:0a:e0:cd:b2:22: db:3f:9a:5e:f1:2f:9e:c7:e8:ce:f0:3a:15:35:18:59:f1:ee: ec:73:4a:f7:8f:a2:47:59:ad:a2:19:45:95:00:7d:3b:3c:6d: c2:d0:b3:e0:28:75:ec:a1:04:b5:da:e4:dc:4f:82:cf:2a:17: 5a:ea:d5:46:1e:37:a8:7e:7f:5f:ca:9f:08:66:ef:cf:b4:0a: 06:82:5f:75:bb:8a:cb:a6:10:06:87:d4:3c:37:7a:80:22:82: 42:7f:11:ff:37:46:82:9f:32:c8:16:77:b3:09:bf:c6:99:27: bb:a5:79:f6:06:80:a6:40:ff:43:86:9e:1f:5e:f1:0e:a8:a1: bb:f6:85:33 -----BEGIN CERTIFICATE----- MIIFFjCCA/6gAwIBAgISAZjUc4yxodjeYcxx8cnVUiT0MA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKGYwNTIxMTI4Y2Y2MzRhYTZhZmE3ZWY1MmQ1MzFmM2ZjZDU1 NjI4ZjkwHhcNMjUwODIzMDEwMzE5WhcNMjUwODI0MDEwMzE5WjAzMTEwLwYDVQQD EyhlMjM4ZTg4Yzg1YzBhMjc3ZDBjZTM2ZTkwNGY5ZDk3ZDNkYmMxOTI5MIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAnNOu481B1Vr6j/wuSyeH2uBkSxMT hwNq2S4M31GEBmLJR9OzWQnT/1Qx0jcaNMS2YSuEWN79F6BM/gsm9CxJ7J+Jcy7Y j0xbF4ehKtkorjxVI8cvvWu5kfGDwYZqVqV5zvIMu4yQpGMD4mWp1FtpjI4yBXeG +qSg3nTSa96HmADhWSacR3xaE+07fUKgzR5CScczrbetkChXhADQSyvws9gc27K+ zLumq/QBqTY1PdZUtSeuxmjUGO+LXlYGakbWYFC9PUMKzLm10F5Xzu6FYD669yjE l8pClQ37ivXkZruzJPR7/Sq63Y/D9gW/9DW/1f7RXr18Vw3eoUx3qhvHKwIDAQAB o4ICIjCCAh4wHQYDVR0OBBYEFOI46IyFwKJ30M426QT52X09vBkpMB8GA1UdIwQY MBaAFPBSESjPY0qmr6fvUtUx8/zVVij5MA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvOEZJUktNOWpTcWF2cC05UzFUSHpfTlZXS1BrLmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC9iYi9iNGIxNTAtZGJiOC00NjVmLTgxNTUt ZTQ0MTliNjQyMTJlLzEvOEZJUktNOWpTcWF2cC05UzFUSHpfTlZXS1BrLm1mdDCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC9iYi9iNGIxNTAtZGJiOC00NjVmLTgxNTUtZTQ0MTliNjQyMTJl LzEvOEZJUktNOWpTcWF2cC05UzFUSHpfTlZXS1BrLmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAadfpTy+p aKsEtcc2lnUtEvWDkvL/ys9Sa3b6lnBfVMW6If04aC9Qp++wjdxfJPCvsb9VgAwM +ZPDddVRx8woIw0Bgy+5gg20Lm1yJcZ3B+zvRBfBkIRiydiDQrCifu4mGF2urE39 PT5ygle2NTAJtgvLaqrplG/E/wrgzbIi2z+aXvEvnsfozvA6FTUYWfHu7HNK94+i R1mtohlFlQB9OzxtwtCz4Ch17KEEtdrk3E+CzyoXWurVRh43qH5/X8qfCGbvz7QK BoJfdbuKy6YQBofUPDd6gCKCQn8R/zdGgp8yyBZ3swm/xpknu6V59gaApkD/Q4ae H17xDqihu/aFMw== -----END CERTIFICATE-----Generated at Sat Aug 23 10:14:40 2025 by rpki-client