$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/cc/051fa2-c580-4a02-a186-e69f7a5d2d90/1/8P8sYimvdjqZ9TSaMlEN9KRSYUM.mft File: 8P8sYimvdjqZ9TSaMlEN9KRSYUM.mft (raw, json) Hash identifier: dMgMmVeA4t8UATByjg9ntx/M5aYlxoZ3KdpRG3qE3IY= Subject key identifier: 08:80:23:3D:6A:89:B7:3B:FA:E7:37:CB:89:10:4F:91:3A:A0:7D:30 Authority key identifier: F0:FF:2C:62:29:AF:76:3A:99:F5:34:9A:32:51:0D:F4:A4:52:61:43 Certificate issuer: /CN=f0ff2c6229af763a99f5349a32510df4a4526143 Certificate serial: 0198D404AE12C928870CA949CEFB42201F55 Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/8P8sYimvdjqZ9TSaMlEN9KRSYUM.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/cc/051fa2-c580-4a02-a186-e69f7a5d2d90/1/8P8sYimvdjqZ9TSaMlEN9KRSYUM.mft Manifest number: 164D Signing time: Fri 22 Aug 2025 23:02:13 +0000 Manifest this update: Fri 22 Aug 2025 23:02:13 +0000 Manifest next update: Sat 23 Aug 2025 23:02:13 +0000 Files and hashes: 1: 00x2a7vYcUP_RgzqZlJDShLq9Do.roa (hash: cq08qt5t6pt7+g4zB6xtHZuctjeJqy9pw/L/lk8TYFo=) 2: 8P8sYimvdjqZ9TSaMlEN9KRSYUM.crl (hash: XH3WkeBvZE2jAAj8k1LNFx7or6z3K7TJG4TiTU+t21g=) 3: KVMzJG-tiBiXKGfDbX7s-fqSUcs.roa (hash: izdiO/l04uY0Tl9GP7xbaa4HsWMYkrOgbs0SiG0a1K8=) 4: OBC2jp5FIHT7G9c2m1xsJUD2ivs.roa (hash: DrwuyysosoB70lBjSllnHo3rVU0U0NusilzO8tRi9Q0=) 5: OxF-ngX6YGUArZrbAYmh9hpGzkU.roa (hash: zhEaR7GNPbf+2lOaH8uFUPJFKzbpuLS5x4CvU7dkxPs=) 6: Q2Pg2GNHELVKyFoNgxOuT8YFvLY.roa (hash: DsyRU7FSw+3XDKbBM9HrtgkzYSVPnqWwqknbD6CWVSU=) 7: RO-InVXPYoHaB1ZpM-19yr94dQs.roa (hash: 8Y6VcUcgO4alufdIJ4djN2KAnB4AyYetp1VZzDDuyNk=) 8: TbcAJ-7kgZbLEMeBArn-aI2s0Oc.roa (hash: ebCgIhbDpPxtlRtDjitUarjC0W1nxe0ujpocy11Koxs=) 9: _gM5SG_4QQqKocZtcQPCR80SAmI.roa (hash: ee8TJS3VrEj5YXrt15hISXpN3dVXM3P5ROyjlVEMHSs=) 10: fG6If6WZh4pXAVRu1gEQ7wbPbEs.roa (hash: OIBSpF8oXZotrR8RVX6KacBPnJZCoNiFLIZ7aWyayQU=) 11: gfQeyx6Q7sjS4Xpny9IUQ8tQxLY.roa (hash: zrq/geD7ajZHxMLm7OvFbnGGXeIS14GfMNfAscurlR8=) Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/cc/051fa2-c580-4a02-a186-e69f7a5d2d90/1/8P8sYimvdjqZ9TSaMlEN9KRSYUM.crl rsync://rpki.ripe.net/repository/DEFAULT/cc/051fa2-c580-4a02-a186-e69f7a5d2d90/1/8P8sYimvdjqZ9TSaMlEN9KRSYUM.mft rsync://rpki.ripe.net/repository/DEFAULT/8P8sYimvdjqZ9TSaMlEN9KRSYUM.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Sat 23 Aug 2025 23:02:13 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:98:d4:04:ae:12:c9:28:87:0c:a9:49:ce:fb:42:20:1f:55 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=f0ff2c6229af763a99f5349a32510df4a4526143 Validity Not Before: Aug 22 23:02:13 2025 GMT Not After : Aug 23 23:02:13 2025 GMT Subject: CN=0880233d6a89b73bfae737cb89104f913aa07d30 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:e6:fe:89:48:a6:df:20:69:b0:70:23:28:d5:94: a4:6a:97:ac:b5:57:db:f7:36:3e:35:dc:98:d3:01: ba:1c:43:07:63:f9:9a:41:89:e6:bc:59:b2:71:33: 31:00:11:d5:6e:85:0e:10:cd:40:32:09:28:65:23: 47:6b:97:ed:88:b0:ce:c8:80:a0:fe:ba:af:d1:e4: 64:c9:e4:a0:f9:13:c0:03:33:89:a4:4c:4e:8d:38: 16:26:0a:d7:57:b4:be:b6:88:d2:78:3f:d6:03:00: 7b:e1:f5:28:f6:9f:94:0c:b6:96:9b:42:5b:92:06: d3:34:27:50:8c:f4:09:f4:6d:ab:01:89:1c:69:8f: 81:53:a6:6d:ad:8c:eb:c0:7c:50:74:01:fc:c5:d2: 93:8f:56:66:70:a6:37:98:24:55:a5:b7:01:dc:06: 7b:70:00:04:d1:7b:f5:0d:0c:09:f4:fe:63:15:ad: 19:95:85:14:10:86:10:24:8d:43:e3:f8:05:c4:37: e3:4b:dd:13:fa:d9:1b:54:df:d3:53:f1:f5:a6:29: 15:0e:f6:e3:58:cc:f2:5d:72:08:65:8b:41:be:ff: c2:02:87:f0:ff:3d:7a:d5:44:76:b3:74:55:20:84: d0:39:3c:99:a3:de:02:da:6b:6c:d1:ce:7e:2a:36: 83:61 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 08:80:23:3D:6A:89:B7:3B:FA:E7:37:CB:89:10:4F:91:3A:A0:7D:30 X509v3 Authority Key Identifier: keyid:F0:FF:2C:62:29:AF:76:3A:99:F5:34:9A:32:51:0D:F4:A4:52:61:43 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/8P8sYimvdjqZ9TSaMlEN9KRSYUM.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/cc/051fa2-c580-4a02-a186-e69f7a5d2d90/1/8P8sYimvdjqZ9TSaMlEN9KRSYUM.mft X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/cc/051fa2-c580-4a02-a186-e69f7a5d2d90/1/8P8sYimvdjqZ9TSaMlEN9KRSYUM.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 92:d7:3a:10:29:07:98:74:d2:32:e7:3f:69:e0:4c:a1:0b:41: a7:9a:48:f4:7d:0a:a2:e2:47:ff:28:8f:9b:38:e6:d6:a7:1a: 9c:3b:59:08:29:a9:37:29:b2:74:c3:a9:09:b7:82:15:6f:cd: 08:c8:00:e3:23:c2:08:3b:c8:54:25:8d:29:01:ca:42:f0:82: a6:0e:98:61:95:25:65:2f:50:a9:f9:d7:d6:23:2d:53:10:f7: 76:5f:d7:0f:2f:72:ab:ee:7a:40:e4:8c:34:4a:72:5c:66:75: 6a:99:6f:f7:b2:98:5a:54:3a:bf:14:9f:91:c2:77:58:18:70: ce:c6:d9:23:cf:77:1b:89:e1:a7:de:c3:84:06:a2:eb:ca:0d: 43:8f:d5:7f:7d:e8:17:db:88:73:4a:92:43:fc:e8:1c:82:fb: 38:71:f3:76:e1:d8:cf:90:0e:b5:b8:09:99:65:07:11:f5:63: bd:5c:1e:ac:9b:5d:9d:f3:06:c7:9e:ca:e1:05:58:30:2f:9c: b3:55:bb:ec:d3:ee:41:52:97:5a:fe:f2:ef:12:8c:8c:c2:4c: b8:9c:5c:63:1d:0d:12:21:49:3c:98:29:e4:17:11:fd:c6:29: 95:df:77:92:4b:c7:ec:a7:47:6d:5f:06:82:68:74:0c:04:c3: 59:31:e6:01 -----BEGIN CERTIFICATE----- MIIFFjCCA/6gAwIBAgISAZjUBK4SySiHDKlJzvtCIB9VMA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKGYwZmYyYzYyMjlhZjc2M2E5OWY1MzQ5YTMyNTEwZGY0YTQ1 MjYxNDMwHhcNMjUwODIyMjMwMjEzWhcNMjUwODIzMjMwMjEzWjAzMTEwLwYDVQQD EygwODgwMjMzZDZhODliNzNiZmFlNzM3Y2I4OTEwNGY5MTNhYTA3ZDMwMIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEA5v6JSKbfIGmwcCMo1ZSkapestVfb 9zY+NdyY0wG6HEMHY/maQYnmvFmycTMxABHVboUOEM1AMgkoZSNHa5ftiLDOyICg /rqv0eRkyeSg+RPAAzOJpExOjTgWJgrXV7S+tojSeD/WAwB74fUo9p+UDLaWm0Jb kgbTNCdQjPQJ9G2rAYkcaY+BU6ZtrYzrwHxQdAH8xdKTj1ZmcKY3mCRVpbcB3AZ7 cAAE0Xv1DQwJ9P5jFa0ZlYUUEIYQJI1D4/gFxDfjS90T+tkbVN/TU/H1pikVDvbj WMzyXXIIZYtBvv/CAofw/z161UR2s3RVIITQOTyZo94C2mts0c5+KjaDYQIDAQAB o4ICIjCCAh4wHQYDVR0OBBYEFAiAIz1qibc7+uc3y4kQT5E6oH0wMB8GA1UdIwQY MBaAFPD/LGIpr3Y6mfU0mjJRDfSkUmFDMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvOFA4c1lpbXZkanFaOVRTYU1sRU45S1JTWVVNLmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC9jYy8wNTFmYTItYzU4MC00YTAyLWExODYt ZTY5ZjdhNWQyZDkwLzEvOFA4c1lpbXZkanFaOVRTYU1sRU45S1JTWVVNLm1mdDCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC9jYy8wNTFmYTItYzU4MC00YTAyLWExODYtZTY5ZjdhNWQyZDkw LzEvOFA4c1lpbXZkanFaOVRTYU1sRU45S1JTWVVNLmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAktc6ECkH mHTSMuc/aeBMoQtBp5pI9H0KouJH/yiPmzjm1qcanDtZCCmpNymydMOpCbeCFW/N CMgA4yPCCDvIVCWNKQHKQvCCpg6YYZUlZS9QqfnX1iMtUxD3dl/XDy9yq+56QOSM NEpyXGZ1aplv97KYWlQ6vxSfkcJ3WBhwzsbZI893G4nhp97DhAai68oNQ4/Vf33o F9uIc0qSQ/zoHIL7OHHzduHYz5AOtbgJmWUHEfVjvVwerJtdnfMGx57K4QVYMC+c s1W77NPuQVKXWv7y7xKMjMJMuJxcYx0NEiFJPJgp5BcR/cYpld93kkvH7KdHbV8G gmh0DATDWTHmAQ== -----END CERTIFICATE-----Generated at Sat Aug 23 10:09:42 2025 by rpki-client