$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/c3/1b4105-3471-4592-bf07-73fd3bc19aa7/1/_zFJJHOnjG_p9Tn5-n0iUlYKK34.mft File: _zFJJHOnjG_p9Tn5-n0iUlYKK34.mft (raw, json) Hash identifier: UPBqNR9jnfJwIk9DPn2ziT/vby/r4Q8ZmP4kHHmZrEU= Subject key identifier: 9A:EA:4B:B2:AE:D6:30:4B:B5:9C:F2:B1:D7:83:48:B8:5B:20:7B:13 Authority key identifier: FF:31:49:24:73:A7:8C:6F:E9:F5:39:F9:FA:7D:22:52:56:0A:2B:7E Certificate issuer: /CN=ff31492473a78c6fe9f539f9fa7d2252560a2b7e Certificate serial: 0198D5F1765248041F272EEAB6A31974DFF4 Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/_zFJJHOnjG_p9Tn5-n0iUlYKK34.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/c3/1b4105-3471-4592-bf07-73fd3bc19aa7/1/_zFJJHOnjG_p9Tn5-n0iUlYKK34.mft Manifest number: 1611 Signing time: Sat 23 Aug 2025 08:00:28 +0000 Manifest this update: Sat 23 Aug 2025 08:00:28 +0000 Manifest next update: Sun 24 Aug 2025 08:00:28 +0000 Files and hashes: 1: F_cRK7_FuJ1SOPF-eStGPWamodQ.roa (hash: bwgPCaYQdCUVOLDgCvOHRKGxaq7IRtIbjKPrwDwOiGI=) 2: Itnfb5cOidqPHmrm9ItGmwZzqpE.roa (hash: iss4kvemyRAUGLNEu7CN/erlN+DUp3hzgmc3aCXZAfU=) 3: JaFKfYKslg0WUVhBG8hHu6LqTvw.roa (hash: 4GgDdTVxQxqewTP0EOz1RIPWIQ2EEWazgc1qxopxzyA=) 4: NiD2SDjoMC5kCqhJ0LqUs7rzMnw.roa (hash: 9+KHXzf6QQ6hX/XBCMhmaRntprEYELpBh7Oa+Qw01T4=) 5: ShXwELNENSFmGBdjnWGg5NqouYI.roa (hash: CvtdGpDGnIEThk2qtR3nRVqJ7XKDlnHvbjdMw3b5GEg=) 6: U6O4fPn6akIpWmgc4yJT0O6kLpo.roa (hash: yofA2VyhfSO3CESlgcLfFamVAKarRdUA7fzOcVSh6T0=) 7: _zFJJHOnjG_p9Tn5-n0iUlYKK34.crl (hash: cLYs1C4A4QSmPyas9kNTDFS3D8jRcdNo1toM3Se0KLY=) 8: ccs7nyLFaW5A18K4O1qhpOVnDF0.roa (hash: kVq8Rt+cDTCddUdzX9poi4CfmBkJSUYFh1PJxqkXE8A=) 9: u3VJR1_M7JzYx842qLGTM0en5V0.roa (hash: qbP/xDwKS1NUr1YSZhW1L+ZrVrT39XIk/W4+EAm8kOI=) 10: y4Nw6VYuIuUZOv6I685fKqZhbWQ.roa (hash: JM0RAslsFdrhEKUBmY+ywDM/Jo6q24Igd7pWLFOkC9Q=) 11: zIstcjB0l5dXMsxLJF-PmySyWoY.roa (hash: sZKTonBPo728p5sx2a7KurcsOwIi7QOOMBd8o6TZnS4=) Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/c3/1b4105-3471-4592-bf07-73fd3bc19aa7/1/_zFJJHOnjG_p9Tn5-n0iUlYKK34.crl rsync://rpki.ripe.net/repository/DEFAULT/c3/1b4105-3471-4592-bf07-73fd3bc19aa7/1/_zFJJHOnjG_p9Tn5-n0iUlYKK34.mft rsync://rpki.ripe.net/repository/DEFAULT/_zFJJHOnjG_p9Tn5-n0iUlYKK34.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Sun 24 Aug 2025 05:01:29 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:98:d5:f1:76:52:48:04:1f:27:2e:ea:b6:a3:19:74:df:f4 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=ff31492473a78c6fe9f539f9fa7d2252560a2b7e Validity Not Before: Aug 23 08:00:28 2025 GMT Not After : Aug 24 08:00:28 2025 GMT Subject: CN=9aea4bb2aed6304bb59cf2b1d78348b85b207b13 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:ad:9b:f8:24:97:9c:10:b5:c8:b5:e0:16:95:89: 1d:01:8c:2d:0e:c6:b4:39:af:64:8a:9c:d5:0b:4c: 3e:8c:18:49:2d:48:df:0a:75:cc:76:6d:f1:e7:fd: bc:b9:e9:1b:9e:54:68:0d:3b:19:eb:73:65:95:d3: 0d:b6:48:c2:33:85:27:9d:50:22:76:46:55:ec:03: 28:a0:59:51:27:72:eb:8d:b5:f3:e2:16:2d:9c:7b: f3:19:a9:88:ee:f9:c1:29:66:97:e7:df:58:c0:b4: 0c:9c:b9:e8:06:2e:d5:48:da:6c:fe:44:85:d1:9b: 51:2b:70:50:11:a9:c7:9d:4a:77:71:e0:4c:2b:af: 7f:6a:bd:47:6c:45:de:a4:f3:9d:5e:c2:5f:92:a3: 19:2f:6a:c0:f0:08:c4:c0:e0:86:70:d8:16:63:ef: c2:ce:58:21:15:57:36:71:bd:6f:c0:67:45:07:c5: 50:ce:00:e1:41:dc:f8:cf:18:c8:99:6e:31:85:37: 22:ea:24:6c:7e:4b:9c:41:cb:54:af:1b:8b:37:d5: 3f:de:1c:72:25:7f:14:77:68:bd:ad:c2:71:0d:18: cd:e3:59:19:16:4f:b8:2b:0e:6a:58:a3:98:16:bf: 95:d2:a5:72:8e:dc:fa:a9:bf:23:41:ce:47:2a:ad: 98:f7 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 9A:EA:4B:B2:AE:D6:30:4B:B5:9C:F2:B1:D7:83:48:B8:5B:20:7B:13 X509v3 Authority Key Identifier: keyid:FF:31:49:24:73:A7:8C:6F:E9:F5:39:F9:FA:7D:22:52:56:0A:2B:7E X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/_zFJJHOnjG_p9Tn5-n0iUlYKK34.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/c3/1b4105-3471-4592-bf07-73fd3bc19aa7/1/_zFJJHOnjG_p9Tn5-n0iUlYKK34.mft X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/c3/1b4105-3471-4592-bf07-73fd3bc19aa7/1/_zFJJHOnjG_p9Tn5-n0iUlYKK34.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 2a:42:c4:f9:f6:75:18:42:d8:b1:5f:c9:ff:c4:79:7d:b2:98: 17:1a:e9:18:2c:95:dd:14:dd:9e:5b:f4:5b:5c:cd:ae:61:d9: 3a:cd:0c:40:c4:f5:a0:55:13:8b:37:c4:05:0a:58:dd:f8:5c: ce:d8:01:5d:50:78:fd:83:0c:41:49:81:b3:55:15:1c:7b:77: d1:8c:aa:13:72:c4:5d:54:8f:98:66:66:52:bd:6b:d7:8a:54: 53:bf:b9:aa:6c:ad:56:60:c3:f4:4a:0c:f3:cf:b4:f8:4b:90: 5a:13:29:cb:16:12:f4:45:e5:72:95:d4:2e:c7:93:78:50:b4: 71:87:87:80:7d:48:de:6c:dd:3a:40:35:b5:86:8c:97:b5:dd: 77:11:55:e7:51:cd:36:c9:55:0e:b3:83:e0:30:eb:d6:3e:5f: 8e:2c:56:c8:a0:f2:65:05:c8:1c:97:80:a6:75:8c:96:eb:e4: 8f:94:bb:c6:b0:0b:58:64:be:f9:61:69:f7:11:bd:7e:7e:43: 1c:5a:f7:3a:c6:f0:0d:55:54:f0:bb:ac:51:41:08:a2:80:7a: a9:9b:1e:04:c5:c1:f7:6e:df:10:a1:5c:9c:46:d4:60:34:62: 5e:30:d1:ae:e9:75:a9:79:c4:68:e0:78:c6:f9:2e:ad:d7:50: ff:e4:bf:5c -----BEGIN CERTIFICATE----- MIIFFjCCA/6gAwIBAgISAZjV8XZSSAQfJy7qtqMZdN/0MA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKGZmMzE0OTI0NzNhNzhjNmZlOWY1MzlmOWZhN2QyMjUyNTYw YTJiN2UwHhcNMjUwODIzMDgwMDI4WhcNMjUwODI0MDgwMDI4WjAzMTEwLwYDVQQD Eyg5YWVhNGJiMmFlZDYzMDRiYjU5Y2YyYjFkNzgzNDhiODViMjA3YjEzMIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEArZv4JJecELXIteAWlYkdAYwtDsa0 Oa9kipzVC0w+jBhJLUjfCnXMdm3x5/28uekbnlRoDTsZ63NlldMNtkjCM4UnnVAi dkZV7AMooFlRJ3LrjbXz4hYtnHvzGamI7vnBKWaX599YwLQMnLnoBi7VSNps/kSF 0ZtRK3BQEanHnUp3ceBMK69/ar1HbEXepPOdXsJfkqMZL2rA8AjEwOCGcNgWY+/C zlghFVc2cb1vwGdFB8VQzgDhQdz4zxjImW4xhTci6iRsfkucQctUrxuLN9U/3hxy JX8Ud2i9rcJxDRjN41kZFk+4Kw5qWKOYFr+V0qVyjtz6qb8jQc5HKq2Y9wIDAQAB o4ICIjCCAh4wHQYDVR0OBBYEFJrqS7Ku1jBLtZzysdeDSLhbIHsTMB8GA1UdIwQY MBaAFP8xSSRzp4xv6fU5+fp9IlJWCit+MA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvX3pGSkpIT25qR19wOVRuNS1uMGlVbFlLSzM0LmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC9jMy8xYjQxMDUtMzQ3MS00NTkyLWJmMDct NzNmZDNiYzE5YWE3LzEvX3pGSkpIT25qR19wOVRuNS1uMGlVbFlLSzM0Lm1mdDCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC9jMy8xYjQxMDUtMzQ3MS00NTkyLWJmMDctNzNmZDNiYzE5YWE3 LzEvX3pGSkpIT25qR19wOVRuNS1uMGlVbFlLSzM0LmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAKkLE+fZ1 GELYsV/J/8R5fbKYFxrpGCyV3RTdnlv0W1zNrmHZOs0MQMT1oFUTizfEBQpY3fhc ztgBXVB4/YMMQUmBs1UVHHt30YyqE3LEXVSPmGZmUr1r14pUU7+5qmytVmDD9EoM 88+0+EuQWhMpyxYS9EXlcpXULseTeFC0cYeHgH1I3mzdOkA1tYaMl7XddxFV51HN NslVDrOD4DDr1j5fjixWyKDyZQXIHJeApnWMluvkj5S7xrALWGS++WFp9xG9fn5D HFr3OsbwDVVU8LusUUEIooB6qZseBMXB927fEKFcnEbUYDRiXjDRrul1qXnEaOB4 xvkurddQ/+S/XA== -----END CERTIFICATE-----Generated at Sat Aug 23 13:49:40 2025 by rpki-client