$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/c8/a96024-6555-4e8d-af37-62bb6d63e59d/1/3_JHJt8-d_b0yOBDZhOzURDurzg.mft File: 3_JHJt8-d_b0yOBDZhOzURDurzg.mft (raw, json) Hash identifier: lXTwTWOK5B05J6bG0YDVXNa3tiP3A39n4V/MAK/zRiY= Subject key identifier: 64:B8:A2:B6:7F:D3:5B:BF:BB:6D:48:16:39:25:86:3C:87:F7:7F:4E Authority key identifier: DF:F2:47:26:DF:3E:77:F6:F4:C8:E0:43:66:13:B3:51:10:EE:AF:38 Certificate issuer: /CN=dff24726df3e77f6f4c8e0436613b35110eeaf38 Certificate serial: 0198D54E5829261CE8F3B91D5FCDABA73A6A Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/3_JHJt8-d_b0yOBDZhOzURDurzg.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/c8/a96024-6555-4e8d-af37-62bb6d63e59d/1/3_JHJt8-d_b0yOBDZhOzURDurzg.mft Manifest number: 123F Signing time: Sat 23 Aug 2025 05:02:18 +0000 Manifest this update: Sat 23 Aug 2025 05:02:18 +0000 Manifest next update: Sun 24 Aug 2025 05:02:18 +0000 Files and hashes: 1: 3_HM3LXI2dI7yCUkbwsS0LVmtPQ.roa (hash: dlvoBhBeGam9xbjGOiUpXKoso+XH3qNTVfnBCvdbd3Q=) 2: 3_JHJt8-d_b0yOBDZhOzURDurzg.crl (hash: CVqCRdC8sAZfITlI+WptAiVIeKlzjfl0ukdEuWqMiYM=) 3: E_7EA8UJkxlGETtzRt_qHmFJYsI.roa (hash: 407g7UlI6CqSY6AOA+kHrysQofaOwh0+lRwTxsDvEPM=) 4: EgzHUocwnSDaTR0mcH1N2AahbPA.roa (hash: qnns/hwFAonNH2cGnXK7MoaWY9Y+ZF5REF6qTFex00M=) 5: LBBRl1_5PTCAndMsefaH2qIgsWI.roa (hash: P4yu/hSYw0dip59FJgO1wKqB51hJxMddEa7BdAJON18=) 6: SFJQLYtyuvLa-Z-_p6GETmClzzQ.roa (hash: TpY/D4v+35T3Gg8FMD0C6YxKf8fx/yuDpF1EWp6QNws=) 7: SW2UHW6XXrCRSFkNV0CVmfSilT8.roa (hash: OU29d/hqTbWW7Cob/3TqpwPxH+8rWvDwLVXV+Khg58o=) 8: gLpL93_717seB53wtn-PIYRSJpQ.roa (hash: BEBryS8Pk5M96RkjmV9ApUKiEfxXTgBuMMQoR0rPtvE=) 9: mQ93FWl0JXAb-9Lp-jmTTauisbg.roa (hash: P0vbg934s11GmSHztDn7aebQEu/H59GnrnlIx7I1KFA=) 10: sl5VJ3i7CbF6mq-XTH5pxWMmK5o.roa (hash: 4bfJxuYHYnVskQrhNVV+ZwN1afVTdgzyH0yWLAaqMRM=) 11: ve4kS1FSpKOZDfPOmvEJot6T9gc.roa (hash: /8G7vYP5BGzfa/caGIr/zNwzv8N1oQfYQzWhKIYfL+g=) 12: yiW-kmeX6T3jx-yL7EZZYoVvwps.roa (hash: QstF1sZuORe/6EM2aW5TGBrHuj8rjUHPJQAAamVQG0Y=) Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/c8/a96024-6555-4e8d-af37-62bb6d63e59d/1/3_JHJt8-d_b0yOBDZhOzURDurzg.crl rsync://rpki.ripe.net/repository/DEFAULT/c8/a96024-6555-4e8d-af37-62bb6d63e59d/1/3_JHJt8-d_b0yOBDZhOzURDurzg.mft rsync://rpki.ripe.net/repository/DEFAULT/3_JHJt8-d_b0yOBDZhOzURDurzg.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Sun 24 Aug 2025 00:37:04 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:98:d5:4e:58:29:26:1c:e8:f3:b9:1d:5f:cd:ab:a7:3a:6a Signature Algorithm: sha256WithRSAEncryption Issuer: CN=dff24726df3e77f6f4c8e0436613b35110eeaf38 Validity Not Before: Aug 23 05:02:18 2025 GMT Not After : Aug 24 05:02:18 2025 GMT Subject: CN=64b8a2b67fd35bbfbb6d48163925863c87f77f4e Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:e2:21:0a:7c:00:cb:74:28:b2:36:dc:36:72:54: 9b:5c:2e:61:89:90:54:38:de:f5:20:78:3c:57:9a: 62:96:11:dd:a9:a8:09:53:6f:8f:68:c4:37:5a:2e: b2:ed:ec:95:4d:e3:cd:86:4e:47:21:38:d9:9e:25: 15:03:98:7a:88:7f:c7:15:aa:75:c9:66:7b:3a:a1: 92:4d:72:00:d3:44:56:73:4a:ac:e1:40:45:e3:2e: a8:e0:6f:78:76:6b:0a:41:68:ec:61:be:44:3e:40: 31:b6:eb:a6:42:6a:6b:8d:d4:81:ad:f5:06:83:d8: 9e:32:16:6f:c1:c3:bd:65:46:23:cd:f3:bf:38:d8: 2b:a9:80:4e:53:a9:ec:df:31:3d:7f:31:92:96:7c: 2a:46:29:55:08:76:ae:0c:73:ca:50:04:4f:de:3a: f8:0d:d4:c2:f2:d9:55:6b:04:a7:2f:e3:65:25:1d: b1:47:6a:91:1f:ff:08:84:6d:ef:f5:93:0d:a3:b2: fd:ee:d9:02:45:da:c5:a8:7f:23:03:33:50:e7:dd: 76:c3:73:39:fc:89:5b:d3:d2:2b:8b:14:c4:3e:99: 21:10:ef:71:53:1c:7b:ae:ef:cf:85:1c:d2:72:e6: 89:92:d3:1f:4f:68:21:75:40:31:3c:b1:a8:5a:1e: d8:1b Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 64:B8:A2:B6:7F:D3:5B:BF:BB:6D:48:16:39:25:86:3C:87:F7:7F:4E X509v3 Authority Key Identifier: keyid:DF:F2:47:26:DF:3E:77:F6:F4:C8:E0:43:66:13:B3:51:10:EE:AF:38 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/3_JHJt8-d_b0yOBDZhOzURDurzg.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/c8/a96024-6555-4e8d-af37-62bb6d63e59d/1/3_JHJt8-d_b0yOBDZhOzURDurzg.mft X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/c8/a96024-6555-4e8d-af37-62bb6d63e59d/1/3_JHJt8-d_b0yOBDZhOzURDurzg.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 9d:6c:ff:3d:23:0e:96:e1:1b:2c:00:66:de:0a:8b:2b:5d:0a: 23:ed:7d:fe:3e:2f:4b:4a:28:18:55:3c:e9:fb:ae:57:02:60: 8a:77:61:20:a7:e7:ef:50:71:0b:14:4d:92:01:a6:0c:50:d8: 7f:59:06:8c:67:ec:fd:10:41:de:af:25:7e:22:ca:dc:d7:be: 50:0e:2a:cb:46:62:a5:1c:37:e6:41:10:11:fa:1c:e5:5a:66: 73:f2:46:05:70:1f:58:a6:db:a8:86:25:6e:85:23:e2:b5:d1: c6:d9:fe:60:f3:10:30:a6:76:1a:ac:5e:ce:32:fa:a9:03:58: f9:78:38:68:b7:65:78:b1:5f:51:e6:bb:cc:18:ff:00:08:4f: 0c:a0:43:aa:7f:23:b7:77:ab:78:11:fe:4f:f6:06:be:96:30: 86:3f:df:8d:94:0f:9b:88:77:25:51:6c:e2:59:a3:0e:98:ef: ed:08:b0:2b:4f:0b:be:8a:7b:fb:e9:b2:4d:9e:d8:56:79:61: 72:e7:8e:83:32:90:1c:9c:17:06:0d:5a:9e:65:f8:2d:88:1d: 6b:60:a5:4f:ca:21:3e:d8:0a:19:68:b4:18:be:0a:ff:4d:d8: b8:d1:cf:10:5d:c8:5e:a1:d4:5b:32:58:d0:06:4a:80:61:e1: f2:0d:f4:4a -----BEGIN CERTIFICATE----- MIIFFjCCA/6gAwIBAgISAZjVTlgpJhzo87kdX82rpzpqMA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKGRmZjI0NzI2ZGYzZTc3ZjZmNGM4ZTA0MzY2MTNiMzUxMTBl ZWFmMzgwHhcNMjUwODIzMDUwMjE4WhcNMjUwODI0MDUwMjE4WjAzMTEwLwYDVQQD Eyg2NGI4YTJiNjdmZDM1YmJmYmI2ZDQ4MTYzOTI1ODYzYzg3Zjc3ZjRlMIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEA4iEKfADLdCiyNtw2clSbXC5hiZBU ON71IHg8V5pilhHdqagJU2+PaMQ3Wi6y7eyVTePNhk5HITjZniUVA5h6iH/HFap1 yWZ7OqGSTXIA00RWc0qs4UBF4y6o4G94dmsKQWjsYb5EPkAxtuumQmprjdSBrfUG g9ieMhZvwcO9ZUYjzfO/ONgrqYBOU6ns3zE9fzGSlnwqRilVCHauDHPKUARP3jr4 DdTC8tlVawSnL+NlJR2xR2qRH/8IhG3v9ZMNo7L97tkCRdrFqH8jAzNQ5912w3M5 /Ilb09IrixTEPpkhEO9xUxx7ru/PhRzScuaJktMfT2ghdUAxPLGoWh7YGwIDAQAB o4ICIjCCAh4wHQYDVR0OBBYEFGS4orZ/01u/u21IFjklhjyH939OMB8GA1UdIwQY MBaAFN/yRybfPnf29MjgQ2YTs1EQ7q84MA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvM19KSEp0OC1kX2IweU9CRFpoT3pVUkR1cnpnLmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC9jOC9hOTYwMjQtNjU1NS00ZThkLWFmMzct NjJiYjZkNjNlNTlkLzEvM19KSEp0OC1kX2IweU9CRFpoT3pVUkR1cnpnLm1mdDCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC9jOC9hOTYwMjQtNjU1NS00ZThkLWFmMzctNjJiYjZkNjNlNTlk LzEvM19KSEp0OC1kX2IweU9CRFpoT3pVUkR1cnpnLmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAnWz/PSMO luEbLABm3gqLK10KI+19/j4vS0ooGFU86fuuVwJgindhIKfn71BxCxRNkgGmDFDY f1kGjGfs/RBB3q8lfiLK3Ne+UA4qy0ZipRw35kEQEfoc5Vpmc/JGBXAfWKbbqIYl boUj4rXRxtn+YPMQMKZ2GqxezjL6qQNY+Xg4aLdleLFfUea7zBj/AAhPDKBDqn8j t3ereBH+T/YGvpYwhj/fjZQPm4h3JVFs4lmjDpjv7QiwK08Lvop7++myTZ7YVnlh cueOgzKQHJwXBg1anmX4LYgda2ClT8ohPtgKGWi0GL4K/03YuNHPEF3IXqHUWzJY 0AZKgGHh8g30Sg== -----END CERTIFICATE-----Generated at Sat Aug 23 09:42:24 2025 by rpki-client