$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/ca/3c4b8a-bfc7-41e9-99e1-f3e506aeaa01/1/crePZoL8OcVbQdSPgLiDjV0tvwc.mft File: crePZoL8OcVbQdSPgLiDjV0tvwc.mft (raw, json) Hash identifier: Oc8knw+LmbwcRfoVEGoSV9gcUQtJkXMDGNB+2/vpOWo= Subject key identifier: F4:7E:5F:E3:16:5A:63:A2:4D:98:66:87:D2:19:F4:EF:1C:BD:1E:93 Authority key identifier: 72:B7:8F:66:82:FC:39:C5:5B:41:D4:8F:80:B8:83:8D:5D:2D:BF:07 Certificate issuer: /CN=72b78f6682fc39c55b41d48f80b8838d5d2dbf07 Certificate serial: 0198D583B8F8F1488DC410C1410B5EEECEE4 Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/crePZoL8OcVbQdSPgLiDjV0tvwc.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/ca/3c4b8a-bfc7-41e9-99e1-f3e506aeaa01/1/crePZoL8OcVbQdSPgLiDjV0tvwc.mft Manifest number: 1708 Signing time: Sat 23 Aug 2025 06:00:35 +0000 Manifest this update: Sat 23 Aug 2025 06:00:35 +0000 Manifest next update: Sun 24 Aug 2025 06:00:35 +0000 Files and hashes: 1: 58pgEzEV4itxzFdqyuzKp1koy9E.roa (hash: tH6QFOaJ/p4keTuKKE46gn/xyoU7W70E/+/4aSveeLE=) 2: 678Ssp4Z32Xzh5qaxFQ_L2xmBQQ.roa (hash: 4hZcrSL2hIrc1nZJbFZOEGuN6nZyCxrX2dpnXRqI8sw=) 3: AGmA39KwwTaMo71xV9rDHmreSZs.roa (hash: Ryun1mCIWyFFcbzTBG9eqylu4psXL7qEbax/r+ERVGA=) 4: BL8I68n0S5EatljR0k4XZsKHA24.roa (hash: iOoLcUwIbkzuVCDzFIpNedtLQogspd3V7HdfhJiPZWg=) 5: BxtsjwaylqDgyShxS785H67TnbY.roa (hash: tVOA9jGSji8cVYr6ivVtJAHBG6QSJ270Wt89fBmSzFA=) 6: DskJ3QKfzbRX76wY5Y62eU4erR4.roa (hash: Om0rFiAWDXCVX1P62G7M/6mKMjWs5VmA/8EV8q++G+4=) 7: InrDEGCfKU8jJed9KnH2vx-d78Y.roa (hash: NgTZkZMP5rtVotSPrvAaVc/98gXGQA3bDBX67D3E0+U=) 8: JkkRBzU6KqC4iLmQvNFLg1pZbqQ.roa (hash: qQIWTHDKXS9dJmmc6TGCroCf2SQogHaE6HLb5eCxiv8=) 9: Kp7QS5P4WvZzp6qAgCE-0Ndh8DE.roa (hash: RVta5cu/zmPSf403glh7WoQpDtLpGKMPuUokA8G+dNU=) 10: KrudkOICJ6o23J172JFVZgrTE8Q.roa (hash: LOElKXAo1zxfoDmHY1gKUaU9NBQHXV4qqyUFnydMwws=) 11: NcVlekWCiF1MqD0pMFbt8sBm4xk.roa (hash: zMGQInzAKzEgCcQ8IjKoVLyb75jlj1C6HwQ11XN+6E8=) 12: Q-cb4AjNFoWCznmTrkTd9_2MtQ8.roa (hash: 2USY3xNUmziDvmtALMRGKfhIKkZceNSRez2thcTQVsI=) 13: Q7A84Re88TEGuWZsIYTnNdLRtqQ.roa (hash: 62XanU5j/TVPu9hICaR497zqHzXQbEaOUBFnOheHiVs=) 14: U1dZiJQ-sCfZlcybNwHIMoVg7mU.roa (hash: V0t6ji4+oFj9qeofPxTRdRG8LndbBllIM0CiNf6vz94=) 15: Vb_RpJ-2VDeLhxtyu1EnKEq8cTI.roa (hash: H3HLjc2fYtCp8h81NRRKqe5UGP2PQxcS5tkL3rkueM8=) 16: XQSdpYywXniH-4RrFE8ADb_IkFg.roa (hash: p9OQSem/8VfhwT/7ja70OsbXAHFO0qdQ0IRvRySU44M=) 17: acgWZk7QsmW2aj_bCsaJjnM5BPc.roa (hash: HUCf1r1zAbFUe3WPNLagsH4LPR/2P6TikCHZR4iIaH0=) 18: crePZoL8OcVbQdSPgLiDjV0tvwc.crl (hash: IsMjiY2tDqOiDriNkgbp7FcgH/AVwv+M3huVs5oTra8=) 19: fFDNE0jBCsbuSwHbNND790VHIUs.roa (hash: b2he0HY8iZ5ebk1T/0G0aRJSFCMcs4PxhlyzHEE/x2Q=) 20: g1y2t6ScHgUV5n1ybihT2I7pzSE.roa (hash: LRDFWbnwBzQggL/6hZU/Et8Uxn7dc1LTIGqCHJ8arCA=) 21: hHcyNgOmxrhkn3DhNfaigHX94g8.roa (hash: B65e/+ApHFBG2pXE/i7USQDriRyCgT5A9AG/tPBTPh8=) 22: pVdfXUwosJ8KsorkaZco4tqDBa8.roa (hash: Lt1k5lM1qRumIXSyRVec7p+24rwON9jxZ+FAtlLGexw=) 23: qZ3eCm0q-dW22qf_cQ2jfAt5GsI.roa (hash: qrbrOjeddjSG3ZBSuGOYqbjNe2f328eWm35liiFnG90=) 24: qpXqPI2Lm4U2S7PWScdAxzqLkns.roa (hash: Bzilqha0faSvo6uHWLbDknjpYoOKZ5PiVLmh9/Jq3LE=) 25: tLeTX2mDyZywGxWENlzbh31YjEk.roa (hash: oJWFgj144bSQKh5Erjef6SB52VX9Hcmd1SlOzzWkJpU=) 26: tc7szezkYqgXsem-emQpM9XcR9c.roa (hash: O2yXB3yzO1tbqMoeSHRvGfT3YmTyzVXNjGllWoLMqq0=) 27: ur6JY6LTt9bSdFyx_2wS6ELsIzA.roa (hash: b219K+gQY2uaL3+siADKQhZv8ifl18rx5LHYKsxXYxA=) 28: uyXQtDlM4ZwnqdZAtXrlk36c7e4.roa (hash: YXJ2U0awsdiqeieBuuyLP082uokuubFdWDICnN4d+bI=) 29: wnY5Ebsttfchh5_cjKHfXygWQuY.roa (hash: pCJ1hwFTcCv21l06fDQUFO4YTCzZdCwHc6g2mOw0WNI=) 30: zAHjS8tPU8HEmTCCDINtaHrVJIM.roa (hash: 0QsNUBchy9W2sgLs15kxSXqG8C8jBUSbYSVE7+dh+t0=) 31: zDVyzwRVn1CT-RP9xlaFiJNPMHE.roa (hash: OeT1n7LBHt2BLA6NJKyqqdEda9ZFBBnrzNwADjp7exA=) Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/ca/3c4b8a-bfc7-41e9-99e1-f3e506aeaa01/1/crePZoL8OcVbQdSPgLiDjV0tvwc.crl rsync://rpki.ripe.net/repository/DEFAULT/ca/3c4b8a-bfc7-41e9-99e1-f3e506aeaa01/1/crePZoL8OcVbQdSPgLiDjV0tvwc.mft rsync://rpki.ripe.net/repository/DEFAULT/crePZoL8OcVbQdSPgLiDjV0tvwc.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Sun 24 Aug 2025 05:01:29 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:98:d5:83:b8:f8:f1:48:8d:c4:10:c1:41:0b:5e:ee:ce:e4 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=72b78f6682fc39c55b41d48f80b8838d5d2dbf07 Validity Not Before: Aug 23 06:00:35 2025 GMT Not After : Aug 24 06:00:35 2025 GMT Subject: CN=f47e5fe3165a63a24d986687d219f4ef1cbd1e93 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:b6:ec:24:dd:78:89:9b:a9:6d:62:c3:3a:92:cc: 3c:03:cc:bb:60:a4:b9:cd:71:c6:8f:e2:67:57:1d: a0:e0:22:b2:02:be:0f:84:75:59:41:19:ea:21:22: c7:cd:0e:40:bb:91:3d:ea:1a:04:9a:7c:65:88:1f: 84:54:c9:14:24:49:29:2a:e7:5d:a7:68:c1:8e:b0: 60:c6:91:8e:02:15:37:85:c2:67:ea:d1:4a:c2:e3: 85:19:22:9f:97:14:0e:2d:f7:21:be:18:a0:ae:1f: fe:e3:9b:51:10:da:b8:65:d5:ff:94:7e:90:8b:55: fb:54:0b:64:20:86:6d:d5:a1:b0:67:f6:98:24:05: 7c:17:b1:d1:ba:76:6d:1f:01:c7:8f:56:df:4f:c2: 3c:f8:18:fe:3b:6a:d8:19:f3:14:15:af:e1:e9:8a: 49:95:05:b0:67:1e:c8:f1:2d:67:c7:72:1f:4f:1b: 4a:f7:83:f1:28:51:8a:3f:05:13:07:ec:a4:f3:53: 43:31:c6:87:bd:c5:39:03:b2:72:bc:0a:ac:81:3c: ad:71:73:a2:75:43:4e:1a:07:08:8f:01:3b:7c:17: 76:c4:90:c1:2c:e1:7e:23:0e:08:9d:89:87:e5:e6: 17:fa:26:6f:1d:48:e4:f5:de:8a:5b:e7:de:7e:87: 20:95 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: F4:7E:5F:E3:16:5A:63:A2:4D:98:66:87:D2:19:F4:EF:1C:BD:1E:93 X509v3 Authority Key Identifier: keyid:72:B7:8F:66:82:FC:39:C5:5B:41:D4:8F:80:B8:83:8D:5D:2D:BF:07 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/crePZoL8OcVbQdSPgLiDjV0tvwc.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/ca/3c4b8a-bfc7-41e9-99e1-f3e506aeaa01/1/crePZoL8OcVbQdSPgLiDjV0tvwc.mft X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/ca/3c4b8a-bfc7-41e9-99e1-f3e506aeaa01/1/crePZoL8OcVbQdSPgLiDjV0tvwc.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 1d:dd:39:96:81:66:2a:58:ef:af:f0:3b:dd:a9:13:80:4c:2a: fc:2c:2a:f8:c4:c5:a4:1d:ab:0e:97:2e:9b:b6:4d:7c:94:b5: a0:d2:70:4f:67:6e:06:9d:29:d4:5b:dc:47:81:52:45:ee:49: 40:93:0c:33:88:0f:c8:e7:bf:1d:d1:ae:e2:c0:55:d3:90:c8: 7e:23:47:03:14:3d:a6:ae:fd:d2:76:23:d7:6d:cd:dd:7c:a1: 67:3f:d1:5a:70:38:e3:39:d9:18:0a:98:c9:35:7c:1a:1a:e1: e9:69:a3:d9:74:8f:a1:ec:d4:e1:18:b1:b8:45:79:d7:28:47: bc:73:f1:52:d8:9b:9a:4f:f1:57:f0:c7:ce:4b:ab:16:f8:25: 52:69:83:67:d9:e1:a5:35:cd:9b:be:61:83:7b:e0:1b:fa:f2: 60:ad:85:a5:0f:03:a7:ef:9a:1a:6a:df:71:68:8b:ec:96:da: 35:50:8c:37:64:93:d3:44:a2:14:ee:59:49:1c:60:50:18:73: 56:e4:39:af:21:fb:de:44:61:91:a8:ef:fc:06:e1:8c:39:71: 79:7c:2e:b5:75:ce:65:f8:9c:de:bd:f3:91:90:19:df:f3:87: 32:e9:0a:2f:ad:68:50:7e:4d:f0:e3:5e:72:2f:23:95:a6:8e: 99:b8:96:0c -----BEGIN CERTIFICATE----- MIIFFjCCA/6gAwIBAgISAZjVg7j48UiNxBDBQQte7s7kMA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKDcyYjc4ZjY2ODJmYzM5YzU1YjQxZDQ4ZjgwYjg4MzhkNWQy ZGJmMDcwHhcNMjUwODIzMDYwMDM1WhcNMjUwODI0MDYwMDM1WjAzMTEwLwYDVQQD EyhmNDdlNWZlMzE2NWE2M2EyNGQ5ODY2ODdkMjE5ZjRlZjFjYmQxZTkzMIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAtuwk3XiJm6ltYsM6ksw8A8y7YKS5 zXHGj+JnVx2g4CKyAr4PhHVZQRnqISLHzQ5Au5E96hoEmnxliB+EVMkUJEkpKudd p2jBjrBgxpGOAhU3hcJn6tFKwuOFGSKflxQOLfchvhigrh/+45tRENq4ZdX/lH6Q i1X7VAtkIIZt1aGwZ/aYJAV8F7HRunZtHwHHj1bfT8I8+Bj+O2rYGfMUFa/h6YpJ lQWwZx7I8S1nx3IfTxtK94PxKFGKPwUTB+yk81NDMcaHvcU5A7JyvAqsgTytcXOi dUNOGgcIjwE7fBd2xJDBLOF+Iw4InYmH5eYX+iZvHUjk9d6KW+fefocglQIDAQAB o4ICIjCCAh4wHQYDVR0OBBYEFPR+X+MWWmOiTZhmh9IZ9O8cvR6TMB8GA1UdIwQY MBaAFHK3j2aC/DnFW0HUj4C4g41dLb8HMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvY3JlUFpvTDhPY1ZiUWRTUGdMaURqVjB0dndjLmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC9jYS8zYzRiOGEtYmZjNy00MWU5LTk5ZTEt ZjNlNTA2YWVhYTAxLzEvY3JlUFpvTDhPY1ZiUWRTUGdMaURqVjB0dndjLm1mdDCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC9jYS8zYzRiOGEtYmZjNy00MWU5LTk5ZTEtZjNlNTA2YWVhYTAx LzEvY3JlUFpvTDhPY1ZiUWRTUGdMaURqVjB0dndjLmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAHd05loFm Kljvr/A73akTgEwq/Cwq+MTFpB2rDpcum7ZNfJS1oNJwT2duBp0p1FvcR4FSRe5J QJMMM4gPyOe/HdGu4sBV05DIfiNHAxQ9pq790nYj123N3XyhZz/RWnA44znZGAqY yTV8Ghrh6Wmj2XSPoezU4RixuEV51yhHvHPxUtibmk/xV/DHzkurFvglUmmDZ9nh pTXNm75hg3vgG/ryYK2FpQ8Dp++aGmrfcWiL7JbaNVCMN2ST00SiFO5ZSRxgUBhz VuQ5ryH73kRhkajv/AbhjDlxeXwutXXOZfic3r3zkZAZ3/OHMukKL61oUH5N8ONe ci8jlaaOmbiWDA== -----END CERTIFICATE-----Generated at Sat Aug 23 13:30:05 2025 by rpki-client