$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/c4/4f701a-ed6f-47c8-bf73-f4c5fc3ca2c4/1/opAORlWrNJpGMrFAcZ3JcjBDFyU.mft File: opAORlWrNJpGMrFAcZ3JcjBDFyU.mft (raw, json) Hash identifier: h/yO7/eiyTzxbbnBWvNfdftEfNOGDiRCiEg6z5QOT9w= Subject key identifier: BE:C5:66:E7:26:95:E1:44:33:C6:D6:CC:E9:EF:CC:25:AF:FF:36:AB Authority key identifier: A2:90:0E:46:55:AB:34:9A:46:32:B1:40:71:9D:C9:72:30:43:17:25 Certificate issuer: /CN=a2900e4655ab349a4632b140719dc97230431725 Certificate serial: 0198D62987C7BD679549EA4D6FCB2C9C622B Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/opAORlWrNJpGMrFAcZ3JcjBDFyU.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/c4/4f701a-ed6f-47c8-bf73-f4c5fc3ca2c4/1/opAORlWrNJpGMrFAcZ3JcjBDFyU.mft Manifest number: 165A Signing time: Sat 23 Aug 2025 09:01:42 +0000 Manifest this update: Sat 23 Aug 2025 09:01:42 +0000 Manifest next update: Sun 24 Aug 2025 09:01:42 +0000 Files and hashes: 1: 0UXplScy_6bUua8Xwkci_CpGwkM.roa (hash: GRvkp2Rt8JLqAH5NPvZRPj7s1HlR19kYp/7XCNsxyNE=) 2: 14gXO5PLi0LoZ0DYGh9KK795laQ.roa (hash: EARGMMjNyaWuZ1stJfG6h12JcDBEupf11Ssao/d8baM=) 3: 8loW5HN3rlQsgDTApUmX4zxMYVo.roa (hash: LKWZ8SK1V+gZE1QR5SYwO3Jiw4zJ7265yXeEGQlZ8zw=) 4: Ah3KLJm-LKDPU2A-ukfbltAbHHE.roa (hash: swE4PQqkYwr3g++5aj4+DHREVDMSOVCdaIbmuqijBx8=) 5: DDAn0V8SSoUAqqE5fzd6yTf6vio.roa (hash: rVCSbprtHlhgRB9AzbTbTHTH0ZbS3aC9A5gq4r3O14U=) 6: Ptk1juvR6AU_vl6lr4RswBAQK74.roa (hash: 7usWDVylXyYylG7CWiaUKOpGSZfMt4/Ahvv6lHEknXQ=) 7: gH9l_Olu7Z11QNfATlwel8_lHng.roa (hash: Qy7a8ybAWRGH/C9L4lBi8o0qao1M7eUnSgkK9WeGPzo=) 8: kwOU6n2U0tlOOT5S3nqF-ntVFYQ.roa (hash: tJWykZcdes0s9amE0to1DThjyvp5rw7kHFWEXdqGdBw=) 9: opAORlWrNJpGMrFAcZ3JcjBDFyU.crl (hash: rmVHvhNFc0YoYbUd5c+eytMoxkQld/baVQCUZfNBMLg=) 10: u3fVEc-RK0U4DFHiTlygDyKj4rI.roa (hash: Us98OeKKFK/pD4hLHv0TSn5RO0cC7LOagG2XI+ndne0=) Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/c4/4f701a-ed6f-47c8-bf73-f4c5fc3ca2c4/1/opAORlWrNJpGMrFAcZ3JcjBDFyU.crl rsync://rpki.ripe.net/repository/DEFAULT/c4/4f701a-ed6f-47c8-bf73-f4c5fc3ca2c4/1/opAORlWrNJpGMrFAcZ3JcjBDFyU.mft rsync://rpki.ripe.net/repository/DEFAULT/opAORlWrNJpGMrFAcZ3JcjBDFyU.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Sun 24 Aug 2025 05:01:29 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:98:d6:29:87:c7:bd:67:95:49:ea:4d:6f:cb:2c:9c:62:2b Signature Algorithm: sha256WithRSAEncryption Issuer: CN=a2900e4655ab349a4632b140719dc97230431725 Validity Not Before: Aug 23 09:01:42 2025 GMT Not After : Aug 24 09:01:42 2025 GMT Subject: CN=bec566e72695e14433c6d6cce9efcc25afff36ab Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:ec:11:26:64:5b:9b:d8:98:df:96:84:a8:30:50: b9:1c:51:11:92:7b:14:fb:20:47:fa:63:7c:54:8f: b9:71:8b:ad:1b:8e:7c:0a:67:3b:24:b8:0e:f6:38: 6e:eb:8e:76:12:60:86:a8:4c:4d:87:ca:2f:32:58: 7d:5d:b7:e8:19:12:2b:b7:5a:bf:1b:35:70:0d:5e: bb:ea:26:f0:56:9c:1f:d7:da:a7:e0:5a:e3:63:58: 3b:1b:0e:41:d6:bd:32:9e:fc:78:36:63:96:59:77: 2d:fe:17:4b:80:38:1c:63:ce:76:ea:52:92:cd:0f: a2:7a:56:22:d8:d7:ec:92:4b:3b:ae:2b:18:d3:46: 36:74:5f:02:76:aa:da:1c:dc:31:48:fe:a3:92:7b: ee:e8:25:67:8a:70:19:e9:e9:59:49:33:b5:a4:f8: 0d:b4:be:61:0c:01:1f:a3:13:2d:71:0a:5d:49:1c: c6:c7:01:8c:cf:1b:3c:c7:68:52:b6:c8:8a:57:f5: d8:a7:ea:4c:be:9c:82:b9:11:7e:6f:3f:d7:97:92: 6d:75:1c:92:ee:7b:a8:85:a6:32:63:a1:38:ce:34: 23:8e:fc:d4:7f:c8:0e:a5:4b:75:88:7e:e0:fc:2c: a0:39:d8:cb:52:19:9d:12:f7:89:9e:ee:6b:61:44: b0:f3 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: BE:C5:66:E7:26:95:E1:44:33:C6:D6:CC:E9:EF:CC:25:AF:FF:36:AB X509v3 Authority Key Identifier: keyid:A2:90:0E:46:55:AB:34:9A:46:32:B1:40:71:9D:C9:72:30:43:17:25 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/opAORlWrNJpGMrFAcZ3JcjBDFyU.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/c4/4f701a-ed6f-47c8-bf73-f4c5fc3ca2c4/1/opAORlWrNJpGMrFAcZ3JcjBDFyU.mft X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/c4/4f701a-ed6f-47c8-bf73-f4c5fc3ca2c4/1/opAORlWrNJpGMrFAcZ3JcjBDFyU.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 49:c9:81:37:0e:61:cb:86:2d:c7:a1:02:0e:43:52:48:17:6b: 4c:a5:80:e6:01:e3:69:47:26:03:b2:c5:52:e3:6d:c5:4d:c4: 36:f4:a0:ed:15:11:03:82:b6:a3:50:94:32:2c:6a:dd:56:85: 0f:6d:48:46:db:7f:1e:05:15:3a:03:0e:b5:da:e4:f0:c3:ee: 51:5e:22:37:97:c2:dd:0c:14:82:ff:1d:1c:c0:d2:43:3d:1c: 48:0d:36:ee:5f:17:a4:81:d4:0c:25:ae:89:69:cc:fd:07:83: 29:5c:f6:0f:37:04:8f:0d:d7:58:fa:9b:6f:73:27:be:d1:71: b8:6c:53:da:98:2d:1f:d4:79:58:69:89:c9:11:3d:2f:e9:90: 69:e6:94:cd:57:d8:c7:a2:66:f4:82:fe:14:d7:f7:ab:83:e7: fd:38:59:3e:7d:3f:86:c9:95:0e:75:7d:8e:ca:81:86:59:da: 0b:50:4d:ce:90:e7:4f:78:86:3b:72:c6:45:d7:75:e4:1c:9b: e3:9c:f9:3c:8f:32:94:4c:5c:ef:a8:43:dd:62:5f:bb:6c:32: 51:74:13:80:df:2f:11:5d:ac:34:a7:cb:a0:0a:7e:be:5f:8c: b8:45:2a:08:00:9e:80:25:a7:89:e1:ad:33:4a:58:0a:5b:4a: 46:03:be:03 -----BEGIN CERTIFICATE----- MIIFFjCCA/6gAwIBAgISAZjWKYfHvWeVSepNb8ssnGIrMA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKGEyOTAwZTQ2NTVhYjM0OWE0NjMyYjE0MDcxOWRjOTcyMzA0 MzE3MjUwHhcNMjUwODIzMDkwMTQyWhcNMjUwODI0MDkwMTQyWjAzMTEwLwYDVQQD EyhiZWM1NjZlNzI2OTVlMTQ0MzNjNmQ2Y2NlOWVmY2MyNWFmZmYzNmFiMIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEA7BEmZFub2JjfloSoMFC5HFERknsU +yBH+mN8VI+5cYutG458Cmc7JLgO9jhu6452EmCGqExNh8ovMlh9XbfoGRIrt1q/ GzVwDV676ibwVpwf19qn4FrjY1g7Gw5B1r0ynvx4NmOWWXct/hdLgDgcY8526lKS zQ+ielYi2Nfskks7risY00Y2dF8CdqraHNwxSP6jknvu6CVninAZ6elZSTO1pPgN tL5hDAEfoxMtcQpdSRzGxwGMzxs8x2hStsiKV/XYp+pMvpyCuRF+bz/Xl5JtdRyS 7nuohaYyY6E4zjQjjvzUf8gOpUt1iH7g/CygOdjLUhmdEveJnu5rYUSw8wIDAQAB o4ICIjCCAh4wHQYDVR0OBBYEFL7FZucmleFEM8bWzOnvzCWv/zarMB8GA1UdIwQY MBaAFKKQDkZVqzSaRjKxQHGdyXIwQxclMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvb3BBT1JsV3JOSnBHTXJGQWNaM0pjakJERnlVLmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC9jNC80ZjcwMWEtZWQ2Zi00N2M4LWJmNzMt ZjRjNWZjM2NhMmM0LzEvb3BBT1JsV3JOSnBHTXJGQWNaM0pjakJERnlVLm1mdDCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC9jNC80ZjcwMWEtZWQ2Zi00N2M4LWJmNzMtZjRjNWZjM2NhMmM0 LzEvb3BBT1JsV3JOSnBHTXJGQWNaM0pjakJERnlVLmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAScmBNw5h y4Ytx6ECDkNSSBdrTKWA5gHjaUcmA7LFUuNtxU3ENvSg7RURA4K2o1CUMixq3VaF D21IRtt/HgUVOgMOtdrk8MPuUV4iN5fC3QwUgv8dHMDSQz0cSA027l8XpIHUDCWu iWnM/QeDKVz2DzcEjw3XWPqbb3MnvtFxuGxT2pgtH9R5WGmJyRE9L+mQaeaUzVfY x6Jm9IL+FNf3q4Pn/ThZPn0/hsmVDnV9jsqBhlnaC1BNzpDnT3iGO3LGRdd15Byb 45z5PI8ylExc76hD3WJfu2wyUXQTgN8vEV2sNKfLoAp+vl+MuEUqCACegCWnieGt M0pYCltKRgO+Aw== -----END CERTIFICATE-----Generated at Sat Aug 23 11:30:56 2025 by rpki-client