$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/bd/cbcf68-7cbf-47f0-82ee-5760efbcc654/1/sa8S9cp1ySKkql2stJwEqTI39O0.mft File: sa8S9cp1ySKkql2stJwEqTI39O0.mft (raw, json) Hash identifier: 0hqC5ZFDrv4e+gvXnQU40a5EbA9o3FX3Vg2aeKIC0Xw= Subject key identifier: FF:E4:72:5F:1E:8C:B8:68:A3:E3:91:81:AC:BE:54:5C:6A:0F:8D:17 Authority key identifier: B1:AF:12:F5:CA:75:C9:22:A4:AA:5D:AC:B4:9C:04:A9:32:37:F4:ED Certificate issuer: /CN=b1af12f5ca75c922a4aa5dacb49c04a93237f4ed Certificate serial: 0197CC15AA867AD6BA12600DB25666D65E4E Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/sa8S9cp1ySKkql2stJwEqTI39O0.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/bd/cbcf68-7cbf-47f0-82ee-5760efbcc654/1/sa8S9cp1ySKkql2stJwEqTI39O0.mft Manifest number: 11C2 Signing time: Wed 02 Jul 2025 17:01:01 +0000 Manifest this update: Wed 02 Jul 2025 17:01:01 +0000 Manifest next update: Thu 03 Jul 2025 17:01:01 +0000 Files and hashes: 1: 0Masll6bbXJowlWVdStYbs2tx6E.roa (hash: Rro7robf4OQi2SafD/+wvUIv6rGO8rIKSIcGQQxuDhQ=) 2: GbtphNgjK0vdnL4zh4ndNFpMq98.roa (hash: u7HLBqxJEFs0R6rzUwZQDioPq2mneZLMKiZ7WWFYBQg=) 3: HIdYT19grrvIrsLvbv9c-RyNoYM.roa (hash: gMWRLPsAhHALB5C0CyTnC2YpfuJ8OqfVcPAvIC+/69E=) 4: OUt5ZB5ErN_qim9RPT1gdy6_fsA.roa (hash: jUTt0o3pm+pyLvb6Ukj+eNNJ2nE69gsAdM4+2ox59R8=) 5: R_OlpiLM8AchN0LvgG-brNSPeok.roa (hash: Ha2jaeCRdAo3cD1S+TwOcwXV50R2/YikiY9fj+5QfSk=) 6: T-i1HnnAiZlugAgaa37LNPgeYyA.roa (hash: JZrI/oiF2iHcbj3PFgspIgoRlLncbc7mtmuIlUx+R6U=) 7: _SIVUqOCoAD9QAv9j_FoehRwqCQ.roa (hash: sSOjeJjB03HHhjQxuEaox3x4XiuehbGVKeOJQiC5f04=) 8: euxOi9Xp3n7AyiSfCEP-xOv9hDo.roa (hash: hqClLQ+yTS1bqIE58Fj5bi8zXosgwwjJT2D8au7VfQ0=) 9: oTdRqWCGB_YZL-zzysNmCsUI8OU.roa (hash: Z3CxIW13t+FC0u78Ynw/b8NpKjP4IiiiZzM5isLuBQ4=) 10: opjBwsfQwaZJKVugJJ6MF-vgLQw.roa (hash: MNlxdTCVbR2yhgEH9HVAaomJahjdfDcmr5j99PJZjnc=) 11: orAKfjl1fXW4_m23ZUuKco1b-BY.roa (hash: SPzJt2ubmkoDTY2BGadUCK43CwJNkqbV55KtpGnjnsE=) 12: piqnuODF7lhN690__V-7lYt7O9g.roa (hash: bJ0by5gF5+d/INxTw0HKrWzPPNlfAOi7lGQ6bR/NpSU=) 13: qjtTNxOEgSr0b6Weeb9JJHyFnhM.roa (hash: Eb0gxKs3qeMLVvYaIgIGm1oY4DsjaHktiucw1gfNHns=) 14: sa8S9cp1ySKkql2stJwEqTI39O0.crl (hash: eTfK521SItWjldbUoTvxJSt/Wt1PQsSHX7Pf95SC85k=) 15: saFbFhTUuPzFfFtMaOygiXjsdjQ.roa (hash: TDWnbYHUGSQ6GnqoY3kIyLDGpSZVRvMCUWL7dARQ87Q=) Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/bd/cbcf68-7cbf-47f0-82ee-5760efbcc654/1/sa8S9cp1ySKkql2stJwEqTI39O0.crl rsync://rpki.ripe.net/repository/DEFAULT/bd/cbcf68-7cbf-47f0-82ee-5760efbcc654/1/sa8S9cp1ySKkql2stJwEqTI39O0.mft rsync://rpki.ripe.net/repository/DEFAULT/sa8S9cp1ySKkql2stJwEqTI39O0.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Thu 03 Jul 2025 17:01:01 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:97:cc:15:aa:86:7a:d6:ba:12:60:0d:b2:56:66:d6:5e:4e Signature Algorithm: sha256WithRSAEncryption Issuer: CN=b1af12f5ca75c922a4aa5dacb49c04a93237f4ed Validity Not Before: Jul 2 17:01:01 2025 GMT Not After : Jul 3 17:01:01 2025 GMT Subject: CN=ffe4725f1e8cb868a3e39181acbe545c6a0f8d17 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:d6:2b:de:a1:de:1f:9f:de:ed:61:3c:a7:b6:c6: 52:60:30:da:5a:ab:7e:15:30:6c:b5:de:09:a8:97: 05:28:8e:3d:33:03:8c:2e:3b:b0:2b:37:9d:1f:2e: 1e:4f:e3:b3:23:1a:ff:9e:e9:e2:6d:74:6b:fd:03: 92:82:a7:f4:4b:d4:4b:90:59:d8:a6:cc:2c:ab:00: 35:01:64:2d:f1:61:66:55:46:22:12:e7:d8:c1:1e: ed:b7:3f:a7:4c:16:0f:8c:26:79:79:4c:70:1f:9a: 06:39:1e:ee:75:15:fc:e8:03:e3:25:54:d2:90:f7: a9:77:8d:60:95:87:60:ee:81:70:01:f1:58:92:e5: 76:4d:b3:45:1a:6b:8f:19:94:e2:c7:f2:8e:b0:a6: 85:dd:98:3e:d7:a6:86:ac:23:60:e5:9d:df:57:f5: cb:de:65:b3:57:44:38:0c:93:9d:4a:89:9e:8f:f0: e8:88:a5:6f:18:fd:ab:98:a9:21:40:85:41:d1:4d: 07:b6:0f:3f:b8:19:b5:b5:62:a8:0d:c6:e8:7c:fd: 44:f5:5b:e3:81:13:f7:5e:c9:25:57:35:6d:6a:48: 8a:81:b5:0c:ad:91:93:90:db:4a:cc:97:57:d6:9a: d2:d1:09:98:ba:fe:20:f0:35:67:d5:37:3f:a3:8f: 31:6d Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: FF:E4:72:5F:1E:8C:B8:68:A3:E3:91:81:AC:BE:54:5C:6A:0F:8D:17 X509v3 Authority Key Identifier: keyid:B1:AF:12:F5:CA:75:C9:22:A4:AA:5D:AC:B4:9C:04:A9:32:37:F4:ED X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/sa8S9cp1ySKkql2stJwEqTI39O0.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/bd/cbcf68-7cbf-47f0-82ee-5760efbcc654/1/sa8S9cp1ySKkql2stJwEqTI39O0.mft X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/bd/cbcf68-7cbf-47f0-82ee-5760efbcc654/1/sa8S9cp1ySKkql2stJwEqTI39O0.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 0f:35:97:da:22:f2:e0:73:d5:6f:81:96:f8:cc:d8:2b:b5:c4: ff:8e:bd:61:94:7c:2d:00:31:ae:cb:4c:10:49:89:51:b2:81: db:66:59:2a:64:c8:ee:32:85:ec:69:55:7f:e9:18:f3:17:8b: 9d:75:bf:34:e4:a6:10:47:dd:cc:2f:11:b4:1b:b7:5d:4f:f3: dd:6e:5d:96:f5:e8:6e:70:92:fa:15:88:bb:4f:62:a2:4c:4e: da:59:b3:93:62:a8:64:5f:a5:3d:da:b6:40:5d:47:1b:54:6f: ad:a4:22:99:21:c2:c4:7f:b4:f6:d5:9f:7d:c9:ba:b1:4c:71: ba:2c:4c:f9:0d:6b:a8:d8:3b:c3:c5:ba:2a:93:f0:1d:e5:0e: 2f:63:7c:83:99:60:51:99:a7:63:7b:e8:66:3c:5e:46:4c:14: 38:a9:cf:35:69:56:14:87:20:c0:30:96:ca:4f:15:f9:99:6b: b5:61:47:56:dc:1c:c0:22:0c:4a:49:41:70:fd:f4:58:ad:61: 91:5b:64:eb:93:d5:e7:cb:d6:b2:53:40:48:d0:c7:6e:28:64: 73:fa:91:db:e1:7d:7a:89:91:b9:c6:fe:83:1d:86:dc:dd:b2: 62:98:d6:83:1b:b6:8c:6e:6e:f0:92:e4:ec:97:b4:12:ed:77: f0:4c:61:1c -----BEGIN CERTIFICATE----- MIIFFjCCA/6gAwIBAgISAZfMFaqGeta6EmANslZm1l5OMA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKGIxYWYxMmY1Y2E3NWM5MjJhNGFhNWRhY2I0OWMwNGE5MzIz N2Y0ZWQwHhcNMjUwNzAyMTcwMTAxWhcNMjUwNzAzMTcwMTAxWjAzMTEwLwYDVQQD EyhmZmU0NzI1ZjFlOGNiODY4YTNlMzkxODFhY2JlNTQ1YzZhMGY4ZDE3MIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEA1iveod4fn97tYTyntsZSYDDaWqt+ FTBstd4JqJcFKI49MwOMLjuwKzedHy4eT+OzIxr/nunibXRr/QOSgqf0S9RLkFnY pswsqwA1AWQt8WFmVUYiEufYwR7ttz+nTBYPjCZ5eUxwH5oGOR7udRX86APjJVTS kPepd41glYdg7oFwAfFYkuV2TbNFGmuPGZTix/KOsKaF3Zg+16aGrCNg5Z3fV/XL 3mWzV0Q4DJOdSomej/DoiKVvGP2rmKkhQIVB0U0Htg8/uBm1tWKoDcbofP1E9Vvj gRP3XsklVzVtakiKgbUMrZGTkNtKzJdX1prS0QmYuv4g8DVn1Tc/o48xbQIDAQAB o4ICIjCCAh4wHQYDVR0OBBYEFP/kcl8ejLhoo+ORgay+VFxqD40XMB8GA1UdIwQY MBaAFLGvEvXKdckipKpdrLScBKkyN/TtMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvc2E4UzljcDF5U0trcWwyc3RKd0VxVEkzOU8wLmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC9iZC9jYmNmNjgtN2NiZi00N2YwLTgyZWUt NTc2MGVmYmNjNjU0LzEvc2E4UzljcDF5U0trcWwyc3RKd0VxVEkzOU8wLm1mdDCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC9iZC9jYmNmNjgtN2NiZi00N2YwLTgyZWUtNTc2MGVmYmNjNjU0 LzEvc2E4UzljcDF5U0trcWwyc3RKd0VxVEkzOU8wLmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEADzWX2iLy 4HPVb4GW+MzYK7XE/469YZR8LQAxrstMEEmJUbKB22ZZKmTI7jKF7GlVf+kY8xeL nXW/NOSmEEfdzC8RtBu3XU/z3W5dlvXobnCS+hWIu09iokxO2lmzk2KoZF+lPdq2 QF1HG1RvraQimSHCxH+09tWffcm6sUxxuixM+Q1rqNg7w8W6KpPwHeUOL2N8g5lg UZmnY3voZjxeRkwUOKnPNWlWFIcgwDCWyk8V+ZlrtWFHVtwcwCIMSklBcP30WK1h kVtk65PV58vWslNASNDHbihkc/qR2+F9eomRucb+gx2G3N2yYpjWgxu2jG5u8JLk 7Je0Eu138ExhHA== -----END CERTIFICATE-----Generated at Wed Jul 2 22:45:09 2025 by rpki-client