$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/ca/4a9cc4-2b9a-4ef2-a33a-872b3710c2a1/1/ge7UCROD2e1AVtn07_fSYi3c4gU.mft File: ge7UCROD2e1AVtn07_fSYi3c4gU.mft (raw, json) Hash identifier: xDCyERo8BH0h6YmOkIIChpZe/bO/kWs27TexW6CYoRo= Subject key identifier: 60:1C:4E:80:28:5B:71:73:0A:60:F7:F2:D7:8C:93:E6:3C:06:BD:7D Authority key identifier: 81:EE:D4:09:13:83:D9:ED:40:56:D9:F4:EF:F7:D2:62:2D:DC:E2:05 Certificate issuer: /CN=81eed4091383d9ed4056d9f4eff7d2622ddce205 Certificate serial: 0198D515A3A2F20E5F5AA348DB056733ED43 Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/ge7UCROD2e1AVtn07_fSYi3c4gU.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/ca/4a9cc4-2b9a-4ef2-a33a-872b3710c2a1/1/ge7UCROD2e1AVtn07_fSYi3c4gU.mft Manifest number: 1661 Signing time: Sat 23 Aug 2025 04:00:21 +0000 Manifest this update: Sat 23 Aug 2025 04:00:21 +0000 Manifest next update: Sun 24 Aug 2025 04:00:21 +0000 Files and hashes: 1: 1-FVNiQvWEXUQsyhSP2mXL7ZeFhI.roa (hash: h2VWp4VUz/KwikufobsIYuUTWP+PbubtA5kM1+IYNJ4=) 2: 1-cC_8sf2Sjlcbm7-DZh4XuYIArQ.roa (hash: 0N5yH6BWqUs7tPNNDSMGPx2mfE/ZRDiPQfeLQl52Wgo=) 3: GTiO-SupitdTmKiZ_HKcU4MJuTk.roa (hash: +PZAxnriWNXJlrxxhGkuM8aqghAi9SsDw/xLwTjAVR8=) 4: XF9ImwV6WWJIs0xQcjK4t7jAy60.roa (hash: cqd2xtXIiuriNNQV4wixCocQ/6vU5JsRpBkdhH+9z5k=) 5: f6ghH_7B3PzM3ktCIJpbMer11MQ.roa (hash: gQOe3jDJjm6Z8U0Sg1BUTciGU/YhoqXEIyyDOVhhKCY=) 6: ge7UCROD2e1AVtn07_fSYi3c4gU.crl (hash: qf36oMVMlWB9FyCpNJmFPZn/v5Z7he8dDLZnKNEKM8o=) 7: i30xTo-UR4_VbHo8fjprUc4AF6g.roa (hash: a1dsNKX1kvmUfXHRJMRlL3dZirJz9clcR1rF2jPzapU=) 8: qWZ64G_gV6r1a1VTWhYwuR9ilIk.roa (hash: SNBGanOggO8FdGYV/GuiVAQ6b34zKk2VTZJhKLFl+04=) 9: uhgMFZw8rs0tJvJzvMK6WeU68F0.roa (hash: qV6k2QQIZBdjD0SstNGQRZVonpUjQ86it1wpOl33iLI=) 10: xb_V8FoCziLwhsNf2nDbMavL4CE.roa (hash: FYXyUhIT7c2rjGPzDYmHZI9gN0Jm7MertTGE0IiU5ck=) Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/ca/4a9cc4-2b9a-4ef2-a33a-872b3710c2a1/1/ge7UCROD2e1AVtn07_fSYi3c4gU.crl rsync://rpki.ripe.net/repository/DEFAULT/ca/4a9cc4-2b9a-4ef2-a33a-872b3710c2a1/1/ge7UCROD2e1AVtn07_fSYi3c4gU.mft rsync://rpki.ripe.net/repository/DEFAULT/ge7UCROD2e1AVtn07_fSYi3c4gU.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Sun 24 Aug 2025 04:00:21 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:98:d5:15:a3:a2:f2:0e:5f:5a:a3:48:db:05:67:33:ed:43 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=81eed4091383d9ed4056d9f4eff7d2622ddce205 Validity Not Before: Aug 23 04:00:21 2025 GMT Not After : Aug 24 04:00:21 2025 GMT Subject: CN=601c4e80285b71730a60f7f2d78c93e63c06bd7d Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:99:f9:4b:94:f4:56:99:b4:46:c2:80:e0:f7:50: a8:41:ad:be:7b:f8:32:cb:6a:2b:1c:b1:06:1b:61: f0:da:ec:f6:10:3d:31:14:ce:2b:a1:33:83:80:fc: f0:14:90:c2:47:a1:63:c1:15:dd:f5:43:3a:3e:e2: 98:b1:3c:f0:f6:f2:97:c5:ff:8c:0e:0e:d5:7c:0b: 43:92:bd:14:98:53:f5:44:7e:21:a6:50:26:16:b7: ff:53:29:d8:95:86:5c:be:cc:19:84:b5:82:f8:d5: af:44:23:49:e3:0a:7e:7a:44:51:6a:46:78:0e:cf: 21:24:65:3f:d6:00:c6:9e:b6:5e:cb:4d:e7:1f:a2: 74:72:d8:f7:05:89:52:f5:0b:2d:fe:d9:68:d7:cf: 1b:b8:7b:ba:86:1b:d7:91:13:c2:6e:3b:9d:0d:f8: 09:c9:48:d0:47:fe:32:83:07:ad:93:79:ee:21:11: 7a:31:66:ab:a8:d6:14:96:51:e1:7e:c7:18:a1:e4: fc:71:8f:d1:5d:c8:de:f3:4e:6b:a3:43:e2:1f:64: 99:10:b6:2a:53:17:02:4a:64:07:c2:40:4a:96:17: 51:9a:54:cd:11:20:be:bd:69:7b:77:3a:ac:fc:09: 64:04:0e:73:0e:ee:8f:a6:2d:e8:d3:33:09:99:62: 80:97 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 60:1C:4E:80:28:5B:71:73:0A:60:F7:F2:D7:8C:93:E6:3C:06:BD:7D X509v3 Authority Key Identifier: keyid:81:EE:D4:09:13:83:D9:ED:40:56:D9:F4:EF:F7:D2:62:2D:DC:E2:05 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/ge7UCROD2e1AVtn07_fSYi3c4gU.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/ca/4a9cc4-2b9a-4ef2-a33a-872b3710c2a1/1/ge7UCROD2e1AVtn07_fSYi3c4gU.mft X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/ca/4a9cc4-2b9a-4ef2-a33a-872b3710c2a1/1/ge7UCROD2e1AVtn07_fSYi3c4gU.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 88:5a:ca:9d:7a:ee:7b:77:00:25:a1:de:5d:96:8b:36:51:61: f4:d6:71:7c:c6:8d:c3:9c:32:0d:d9:8f:58:9e:0a:03:8f:34: a6:cf:dc:d3:09:3b:77:90:31:4c:d6:81:5d:80:60:7d:e6:02: fa:6b:a6:e8:c8:cb:21:92:1d:75:fd:50:95:0e:bd:15:c4:5a: 6f:29:4a:19:33:8c:55:d3:d7:f0:38:8b:21:58:77:f0:a6:a6: 89:de:5f:ff:44:6e:2b:95:e5:5c:1e:3c:54:b8:9e:b8:93:92: a0:9f:76:81:25:cb:09:54:a7:49:b4:06:23:00:b1:df:60:60: 3a:7f:43:7b:73:c9:3e:99:75:92:a5:61:b7:96:aa:5c:4e:42: a7:25:9e:b4:91:f7:35:ab:14:a2:86:aa:63:5b:21:1b:60:e1: f6:c1:13:49:ef:cd:89:8a:85:0f:2d:f5:d2:b1:02:08:5a:64: e0:12:58:9d:b7:dd:5b:bc:61:d7:f8:0f:00:3f:82:7e:7a:11: b6:06:90:a7:e2:32:91:64:75:38:9f:3f:aa:59:10:23:b9:20: 94:74:bc:60:3b:36:b2:c4:b6:56:fe:01:9a:4e:0e:2d:66:99: 6b:6e:9a:de:88:60:7b:c2:78:8b:8a:ff:47:b1:f4:ed:92:02: 3e:15:8b:75 -----BEGIN CERTIFICATE----- MIIFFjCCA/6gAwIBAgISAZjVFaOi8g5fWqNI2wVnM+1DMA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKDgxZWVkNDA5MTM4M2Q5ZWQ0MDU2ZDlmNGVmZjdkMjYyMmRk Y2UyMDUwHhcNMjUwODIzMDQwMDIxWhcNMjUwODI0MDQwMDIxWjAzMTEwLwYDVQQD Eyg2MDFjNGU4MDI4NWI3MTczMGE2MGY3ZjJkNzhjOTNlNjNjMDZiZDdkMIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAmflLlPRWmbRGwoDg91CoQa2+e/gy y2orHLEGG2Hw2uz2ED0xFM4roTODgPzwFJDCR6FjwRXd9UM6PuKYsTzw9vKXxf+M Dg7VfAtDkr0UmFP1RH4hplAmFrf/UynYlYZcvswZhLWC+NWvRCNJ4wp+ekRRakZ4 Ds8hJGU/1gDGnrZey03nH6J0ctj3BYlS9Qst/tlo188buHu6hhvXkRPCbjudDfgJ yUjQR/4ygwetk3nuIRF6MWarqNYUllHhfscYoeT8cY/RXcje805ro0PiH2SZELYq UxcCSmQHwkBKlhdRmlTNESC+vWl7dzqs/AlkBA5zDu6Ppi3o0zMJmWKAlwIDAQAB o4ICIjCCAh4wHQYDVR0OBBYEFGAcToAoW3FzCmD38teMk+Y8Br19MB8GA1UdIwQY MBaAFIHu1AkTg9ntQFbZ9O/30mIt3OIFMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvZ2U3VUNST0QyZTFBVnRuMDdfZlNZaTNjNGdVLmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC9jYS80YTljYzQtMmI5YS00ZWYyLWEzM2Et ODcyYjM3MTBjMmExLzEvZ2U3VUNST0QyZTFBVnRuMDdfZlNZaTNjNGdVLm1mdDCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC9jYS80YTljYzQtMmI5YS00ZWYyLWEzM2EtODcyYjM3MTBjMmEx LzEvZ2U3VUNST0QyZTFBVnRuMDdfZlNZaTNjNGdVLmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAiFrKnXru e3cAJaHeXZaLNlFh9NZxfMaNw5wyDdmPWJ4KA480ps/c0wk7d5AxTNaBXYBgfeYC +mum6MjLIZIddf1QlQ69FcRabylKGTOMVdPX8DiLIVh38Kamid5f/0RuK5XlXB48 VLieuJOSoJ92gSXLCVSnSbQGIwCx32BgOn9De3PJPpl1kqVht5aqXE5CpyWetJH3 NasUooaqY1shG2Dh9sETSe/NiYqFDy310rECCFpk4BJYnbfdW7xh1/gPAD+CfnoR tgaQp+IykWR1OJ8/qlkQI7kglHS8YDs2ssS2Vv4Bmk4OLWaZa26a3ohge8J4i4r/ R7H07ZICPhWLdQ== -----END CERTIFICATE-----Generated at Sat Aug 23 12:51:57 2025 by rpki-client