$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/bc/d140fb-03ae-45d9-8ddc-e1ed9dd2a02a/1/p5u6KAWpiJVOT-xCVwUw8W-ecJM.mft File: p5u6KAWpiJVOT-xCVwUw8W-ecJM.mft (raw, json) Hash identifier: nOWobJrjVcM4arQE7t8lzGbPODhIu+jtoaAVoBV1uAw= Subject key identifier: 1D:69:D2:69:30:8F:BB:FD:7B:E8:37:92:3B:30:26:51:0C:83:58:4B Authority key identifier: A7:9B:BA:28:05:A9:88:95:4E:4F:EC:42:57:05:30:F1:6F:9E:70:93 Certificate issuer: /CN=a79bba2805a988954e4fec42570530f16f9e7093 Certificate serial: 0198D5BB9D8AE40DCC15316D4C6998476A0A Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/p5u6KAWpiJVOT-xCVwUw8W-ecJM.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/bc/d140fb-03ae-45d9-8ddc-e1ed9dd2a02a/1/p5u6KAWpiJVOT-xCVwUw8W-ecJM.mft Manifest number: 1660 Signing time: Sat 23 Aug 2025 07:01:39 +0000 Manifest this update: Sat 23 Aug 2025 07:01:39 +0000 Manifest next update: Sun 24 Aug 2025 07:01:39 +0000 Files and hashes: 1: D-RIX_FD-SN5SshOisKYwCgAV_I.roa (hash: x033PUL0ZGG5mDhT/he8/ieNNlTHX9WAHAFDtaJQ278=) 2: DzfEbFPfYy4xpas3bsxIDlFZktA.roa (hash: THhbtWRVoUEwxJC8CZKbYrVSasGjOcgtKoQ/LVP3UKA=) 3: E9n95xnL19yX1B4Vk9ExkIt3f-c.roa (hash: ouMNy3kdRPfar+w1HNS2jM0LMO/r+ZZQenoBAODEfBY=) 4: EAoNPZ8TpgdLFjCSj501GJeuEXI.roa (hash: pO6PSYGesSNZg2BIOmFMIZ89ZMsZTFVJdrF49KPq8PA=) 5: FFaDrp2TE8Iso6bJlqnb0FqxMJo.roa (hash: Jw9G+J8hnCo8w1musIzxpySO6bTcvYrzNLckyhAd2sE=) 6: FXDFb34PBHFpzXqxsfO-MRRoL1w.roa (hash: oabg5c6EyRNzxsL44FI1GqhM5cn4+01B5g9m9wTra50=) 7: IUh9_C97qpOKm_8AV-AspCaoEAg.roa (hash: c2S3m+7nRWXLhOWwBs+WGI3pFEVCypK98I+qc9J+WoQ=) 8: Nbis52_bGmBIGC7k7OWz54ZVymo.roa (hash: aH/DSjSBHo+CUhmGlittWaZYo1UBwB3kdgrpakh3geQ=) 9: PPsYUSjJ6B10FlewER5Ai8nn-_A.roa (hash: 10T1YdRCwRDgbSqL2l2y0wL7RPOmP97+IJQfqf219GY=) 10: oJr4DCeqtN2tV6Ugf36L9eXTcTI.roa (hash: vOwTJ+3Vsj2ap8ElFcEgLM26b3Nku6y6ruqjJGc7XJs=) 11: p5u6KAWpiJVOT-xCVwUw8W-ecJM.crl (hash: 0/65AcmGlNSxTCR0SFCY18dZQUiP8DoK9t+gaxfn0D4=) 12: wx9ZLfHq6PPLS3pCuhQK4_vKdmU.roa (hash: DnxpnoHYAliciPu4AVi4OmZMasKtCCrMr0Wd+JxLlgQ=) Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/bc/d140fb-03ae-45d9-8ddc-e1ed9dd2a02a/1/p5u6KAWpiJVOT-xCVwUw8W-ecJM.crl rsync://rpki.ripe.net/repository/DEFAULT/bc/d140fb-03ae-45d9-8ddc-e1ed9dd2a02a/1/p5u6KAWpiJVOT-xCVwUw8W-ecJM.mft rsync://rpki.ripe.net/repository/DEFAULT/p5u6KAWpiJVOT-xCVwUw8W-ecJM.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Sun 24 Aug 2025 05:01:29 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:98:d5:bb:9d:8a:e4:0d:cc:15:31:6d:4c:69:98:47:6a:0a Signature Algorithm: sha256WithRSAEncryption Issuer: CN=a79bba2805a988954e4fec42570530f16f9e7093 Validity Not Before: Aug 23 07:01:39 2025 GMT Not After : Aug 24 07:01:39 2025 GMT Subject: CN=1d69d269308fbbfd7be837923b3026510c83584b Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:d3:ef:b2:cc:3f:ce:d2:e0:97:85:54:14:3d:a4: 74:41:ae:f9:60:2c:f3:6c:8b:67:26:46:63:f6:f3: 7f:9a:22:b5:6e:8b:f0:da:2c:13:7a:83:32:6b:ec: 3d:7e:41:69:d9:18:c3:34:15:04:7a:da:a0:f4:86: 31:f3:3f:49:4b:62:6c:a8:03:80:94:33:06:d3:9e: 92:03:1a:b6:29:c2:48:b0:bd:a2:c1:c1:bd:9a:cf: fd:20:71:c7:79:5b:23:c8:10:ca:fb:eb:fd:62:82: 9e:a4:07:a5:c8:da:36:04:c8:cf:8b:a2:8c:9c:cc: 16:20:e5:6f:91:d9:30:e0:0b:95:e5:34:55:a0:6b: 29:b7:8c:9d:c7:86:e3:a0:16:96:01:73:a6:17:c7: 49:98:bf:e1:39:42:96:29:64:45:c9:cd:03:dd:c1: 60:72:f5:71:60:2c:c5:07:78:33:e2:b9:72:e3:f7: 9d:9d:03:c6:a1:58:ef:1f:b0:9e:89:43:a0:33:63: 35:79:cf:bd:23:89:60:29:b8:3c:d8:09:4d:50:85: 4e:78:03:8a:a3:39:4c:52:21:b1:a1:72:fb:35:de: 7a:a1:de:1a:5f:22:39:67:8b:76:61:27:95:78:c5: 99:6b:db:af:80:99:b7:cb:17:c7:34:b4:9f:33:7b: f3:f5 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 1D:69:D2:69:30:8F:BB:FD:7B:E8:37:92:3B:30:26:51:0C:83:58:4B X509v3 Authority Key Identifier: keyid:A7:9B:BA:28:05:A9:88:95:4E:4F:EC:42:57:05:30:F1:6F:9E:70:93 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/p5u6KAWpiJVOT-xCVwUw8W-ecJM.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/bc/d140fb-03ae-45d9-8ddc-e1ed9dd2a02a/1/p5u6KAWpiJVOT-xCVwUw8W-ecJM.mft X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/bc/d140fb-03ae-45d9-8ddc-e1ed9dd2a02a/1/p5u6KAWpiJVOT-xCVwUw8W-ecJM.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption e2:b2:31:c1:2f:33:4e:bf:b8:94:07:cb:14:96:36:df:da:25: 3a:5a:41:50:36:f0:8d:e2:ae:f8:0e:52:3d:3b:10:1a:7d:33: 47:4a:c1:f4:a7:9e:66:41:8f:e1:03:4f:ef:76:26:3a:af:27: 9c:63:e8:56:12:40:3b:02:eb:9a:ad:7a:53:e9:00:3a:39:d1: ce:15:3b:12:4a:19:1f:83:3e:2e:e8:7e:fd:fa:db:19:6d:fa: 58:d6:8b:e9:71:4b:79:0c:5c:a0:72:18:c5:e9:3a:2b:2b:c3: dd:ff:18:3b:1e:a7:8f:d9:e2:b0:b7:f4:00:67:77:5b:5a:7f: 8c:66:e1:f4:e0:8e:34:93:15:26:2f:83:af:94:b0:1c:35:7f: c1:37:c1:3c:7e:78:a6:af:03:88:e6:86:03:d4:74:5e:4d:59: ea:b7:8c:b4:42:bb:ab:99:f4:50:1e:c3:e3:9c:93:04:7e:58: bb:46:66:fc:7a:9e:79:d9:d7:93:06:a6:6d:8b:13:d7:c8:7b: ac:ea:a4:cd:bc:09:31:53:34:fd:02:25:fe:2e:16:e2:7c:5a: 97:63:2d:b8:3d:8c:87:b3:b2:34:22:a8:fa:03:af:d9:02:95: 38:96:44:15:2c:dd:b0:55:ee:ac:22:b0:52:86:ac:4a:22:4d: c6:7f:df:c7 -----BEGIN CERTIFICATE----- MIIFFjCCA/6gAwIBAgISAZjVu52K5A3MFTFtTGmYR2oKMA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKGE3OWJiYTI4MDVhOTg4OTU0ZTRmZWM0MjU3MDUzMGYxNmY5 ZTcwOTMwHhcNMjUwODIzMDcwMTM5WhcNMjUwODI0MDcwMTM5WjAzMTEwLwYDVQQD EygxZDY5ZDI2OTMwOGZiYmZkN2JlODM3OTIzYjMwMjY1MTBjODM1ODRiMIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEA0++yzD/O0uCXhVQUPaR0Qa75YCzz bItnJkZj9vN/miK1bovw2iwTeoMya+w9fkFp2RjDNBUEetqg9IYx8z9JS2JsqAOA lDMG056SAxq2KcJIsL2iwcG9ms/9IHHHeVsjyBDK++v9YoKepAelyNo2BMjPi6KM nMwWIOVvkdkw4AuV5TRVoGspt4ydx4bjoBaWAXOmF8dJmL/hOUKWKWRFyc0D3cFg cvVxYCzFB3gz4rly4/ednQPGoVjvH7CeiUOgM2M1ec+9I4lgKbg82AlNUIVOeAOK ozlMUiGxoXL7Nd56od4aXyI5Z4t2YSeVeMWZa9uvgJm3yxfHNLSfM3vz9QIDAQAB o4ICIjCCAh4wHQYDVR0OBBYEFB1p0mkwj7v9e+g3kjswJlEMg1hLMB8GA1UdIwQY MBaAFKebuigFqYiVTk/sQlcFMPFvnnCTMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvcDV1NktBV3BpSlZPVC14Q1Z3VXc4Vy1lY0pNLmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC9iYy9kMTQwZmItMDNhZS00NWQ5LThkZGMt ZTFlZDlkZDJhMDJhLzEvcDV1NktBV3BpSlZPVC14Q1Z3VXc4Vy1lY0pNLm1mdDCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC9iYy9kMTQwZmItMDNhZS00NWQ5LThkZGMtZTFlZDlkZDJhMDJh LzEvcDV1NktBV3BpSlZPVC14Q1Z3VXc4Vy1lY0pNLmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEA4rIxwS8z Tr+4lAfLFJY239olOlpBUDbwjeKu+A5SPTsQGn0zR0rB9KeeZkGP4QNP73YmOq8n nGPoVhJAOwLrmq16U+kAOjnRzhU7EkoZH4M+Luh+/frbGW36WNaL6XFLeQxcoHIY xek6KyvD3f8YOx6nj9nisLf0AGd3W1p/jGbh9OCONJMVJi+Dr5SwHDV/wTfBPH54 pq8DiOaGA9R0Xk1Z6reMtEK7q5n0UB7D45yTBH5Yu0Zm/HqeednXkwambYsT18h7 rOqkzbwJMVM0/QIl/i4W4nxal2MtuD2Mh7OyNCKo+gOv2QKVOJZEFSzdsFXurCKw UoasSiJNxn/fxw== -----END CERTIFICATE-----Generated at Sat Aug 23 11:27:08 2025 by rpki-client