$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/d8/38c5ac-b7e7-40dd-98d3-e2166ad74e3f/1/CY97o0vGVnvTYW1XT3KF3XVW2_0.mft File: CY97o0vGVnvTYW1XT3KF3XVW2_0.mft (raw, json) Hash identifier: 5buO8pwgy+ealr4xVkZ3oUO+zZm3Z6KRE/9wDBWNMr4= Subject key identifier: 46:B0:8F:C4:8F:CC:F0:5D:AA:C9:60:83:92:17:88:92:2D:72:2A:F6 Authority key identifier: 09:8F:7B:A3:4B:C6:56:7B:D3:61:6D:57:4F:72:85:DD:75:56:DB:FD Certificate issuer: /CN=098f7ba34bc6567bd3616d574f7285dd7556dbfd Certificate serial: 0198D5BBEE4E2C0BC1DDD64C836A6A1C8F45 Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/CY97o0vGVnvTYW1XT3KF3XVW2_0.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/d8/38c5ac-b7e7-40dd-98d3-e2166ad74e3f/1/CY97o0vGVnvTYW1XT3KF3XVW2_0.mft Manifest number: 0A61 Signing time: Sat 23 Aug 2025 07:01:59 +0000 Manifest this update: Sat 23 Aug 2025 07:01:59 +0000 Manifest next update: Sun 24 Aug 2025 07:01:59 +0000 Files and hashes: 1: BVbo9uh3-UvDvwSZi6BfXSBGPHU.roa (hash: Z8qyhH6viB+EEzaDtRv3WrjvxrAR7rKFv4csNYovB+g=) 2: CY97o0vGVnvTYW1XT3KF3XVW2_0.crl (hash: AbSNSaIe6f/RWcKWoenE8KJMlNhR/pvfLNmkHgKRwnA=) 3: DN7cb2WxNWOTpycH6YaG66edbbs.roa (hash: xHRCbbCrWIHuruRPkilEuXWa24rKkDGqIeFboryKMwQ=) 4: Fiaoyzt87itbMDPQcRW3KUFZRqE.roa (hash: msw75zbRd9jVXLoPptdxNvS4cyBll5nFN6qdq2TWWOE=) 5: HHx5PgT40c8odAvxk1P-fxWePlA.roa (hash: zPsSrq/ptkyDcwkMCUxFQsAp1K70phIRO2z3d5q6bK8=) 6: Mo-GiiM2sNe-eBz_JyMl4sLvpMo.roa (hash: S6ZzEosIiFeiJ1KKDxx2F81o6c+HfdnMbY4tAkCKBFE=) 7: OEhLMwhGsj88kZ4FqVMVTfpqz-8.roa (hash: /KQ43a3fdsH0+xJZbYiIUJZNQ9G0ar1u4ierKXmEsMM=) 8: jMIl0-AsPbFxzuSdnTOvL0GZyZY.roa (hash: vp7N55mHbj1atM+G1AaTEaDl/C1DAcMrBbixu2jF2UI=) 9: m87-CXNBm5VwmmEvQBAI-p_8l98.roa (hash: vGGq9E7IPOkRddkapcYuXImJsPgw9f+HEWKjnAHtMCI=) 10: nMhyX7boXa--DjLfLdE1CijBszU.roa (hash: s95e1FJb6EuRsUkazwo7HJhOqZW3W1mabgyeLhjUIIo=) Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/d8/38c5ac-b7e7-40dd-98d3-e2166ad74e3f/1/CY97o0vGVnvTYW1XT3KF3XVW2_0.crl rsync://rpki.ripe.net/repository/DEFAULT/d8/38c5ac-b7e7-40dd-98d3-e2166ad74e3f/1/CY97o0vGVnvTYW1XT3KF3XVW2_0.mft rsync://rpki.ripe.net/repository/DEFAULT/CY97o0vGVnvTYW1XT3KF3XVW2_0.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Sun 24 Aug 2025 05:01:29 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:98:d5:bb:ee:4e:2c:0b:c1:dd:d6:4c:83:6a:6a:1c:8f:45 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=098f7ba34bc6567bd3616d574f7285dd7556dbfd Validity Not Before: Aug 23 07:01:59 2025 GMT Not After : Aug 24 07:01:59 2025 GMT Subject: CN=46b08fc48fccf05daac96083921788922d722af6 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:c2:0f:b0:c0:04:5c:33:c6:20:55:4e:27:5a:f1: de:df:54:4f:d3:96:99:fe:a1:5c:40:4d:79:c3:72: 36:6b:3c:66:7c:37:67:6f:47:bc:94:4a:6b:66:c6: 6e:c2:37:21:24:aa:37:e7:e2:8a:80:ac:b7:4d:f9: c0:db:52:17:d8:42:94:44:50:51:49:8f:74:c7:2a: ba:22:f3:2d:18:e2:84:59:a0:6c:ed:59:fc:5d:12: e2:60:2f:2b:00:d4:38:ba:a4:e8:fb:f2:3f:92:7b: da:e7:99:f3:03:bf:46:b8:ee:04:cc:bc:88:22:6a: a4:b2:b2:ec:6f:7f:9f:5c:7c:6a:ca:99:a4:72:ae: a8:a7:c6:19:94:49:5c:9e:e8:24:c8:17:d7:dc:bb: 5e:45:2d:29:cc:d0:e3:13:95:6d:1d:c9:2f:a1:e8: 32:01:11:43:75:b6:1f:a6:f0:17:6d:4a:fe:3d:51: 69:18:4a:b8:a0:3e:60:ad:20:5d:23:06:14:c6:6a: a6:b2:57:57:18:c3:0f:e1:f6:41:06:56:1b:2d:15: 9e:9f:b3:f8:2f:ee:ef:48:e1:e2:36:11:b3:b7:7a: 69:9f:8b:68:cf:ca:6d:02:ca:91:86:6a:36:51:42: a7:76:aa:fb:51:c7:8e:66:87:e7:20:64:e0:bc:d2: 95:03 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 46:B0:8F:C4:8F:CC:F0:5D:AA:C9:60:83:92:17:88:92:2D:72:2A:F6 X509v3 Authority Key Identifier: keyid:09:8F:7B:A3:4B:C6:56:7B:D3:61:6D:57:4F:72:85:DD:75:56:DB:FD X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/CY97o0vGVnvTYW1XT3KF3XVW2_0.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/d8/38c5ac-b7e7-40dd-98d3-e2166ad74e3f/1/CY97o0vGVnvTYW1XT3KF3XVW2_0.mft X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/d8/38c5ac-b7e7-40dd-98d3-e2166ad74e3f/1/CY97o0vGVnvTYW1XT3KF3XVW2_0.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 73:4c:42:e8:d3:b8:f2:cf:c8:a3:95:07:ef:8b:2a:6d:77:80: a1:8b:b4:1e:cc:83:c2:41:47:73:f9:4c:04:bf:11:ba:3b:1e: c9:47:e5:05:00:86:92:65:05:55:6a:73:ba:46:db:f8:3b:9c: bd:dd:36:b0:24:8b:3d:f5:29:8a:c7:ae:4a:e6:1b:23:1c:cd: 13:72:d6:1c:d4:86:9f:a9:bd:8a:e6:ec:57:11:c3:c5:b2:f8: 12:b3:3a:d2:0a:df:6b:dd:4f:e5:c5:6d:0c:8c:b7:8b:be:4d: e8:8b:37:16:26:7f:13:f5:61:94:c0:d3:dc:c9:92:6d:ea:bf: 84:11:cc:9a:33:e4:0d:66:48:44:a6:53:4a:4f:e2:c5:bd:25: c8:8b:8f:cc:19:c1:fc:52:8b:40:71:48:a1:91:d0:49:57:4d: 5d:d5:d9:34:68:7f:84:75:36:6f:87:a3:a9:d6:21:5f:c7:33: 03:01:fb:cc:f0:1f:32:07:df:62:9d:b7:fd:30:3c:f9:9d:25: 61:38:95:77:8a:e2:19:52:db:d4:c2:31:e6:8c:46:ef:a3:4a: bc:b9:28:60:26:b7:83:23:29:b3:98:8d:fe:39:67:78:c9:12: 19:5f:00:46:0c:a7:21:df:61:eb:0a:5d:1b:f0:3d:60:b0:37: 70:2e:05:40 -----BEGIN CERTIFICATE----- MIIFFjCCA/6gAwIBAgISAZjVu+5OLAvB3dZMg2pqHI9FMA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKDA5OGY3YmEzNGJjNjU2N2JkMzYxNmQ1NzRmNzI4NWRkNzU1 NmRiZmQwHhcNMjUwODIzMDcwMTU5WhcNMjUwODI0MDcwMTU5WjAzMTEwLwYDVQQD Eyg0NmIwOGZjNDhmY2NmMDVkYWFjOTYwODM5MjE3ODg5MjJkNzIyYWY2MIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAwg+wwARcM8YgVU4nWvHe31RP05aZ /qFcQE15w3I2azxmfDdnb0e8lEprZsZuwjchJKo35+KKgKy3TfnA21IX2EKURFBR SY90xyq6IvMtGOKEWaBs7Vn8XRLiYC8rANQ4uqTo+/I/knva55nzA79GuO4EzLyI ImqksrLsb3+fXHxqypmkcq6op8YZlElcnugkyBfX3LteRS0pzNDjE5VtHckvoegy ARFDdbYfpvAXbUr+PVFpGEq4oD5grSBdIwYUxmqmsldXGMMP4fZBBlYbLRWen7P4 L+7vSOHiNhGzt3ppn4toz8ptAsqRhmo2UUKndqr7UceOZofnIGTgvNKVAwIDAQAB o4ICIjCCAh4wHQYDVR0OBBYEFEawj8SPzPBdqslgg5IXiJItcir2MB8GA1UdIwQY MBaAFAmPe6NLxlZ702FtV09yhd11Vtv9MA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvQ1k5N28wdkdWbnZUWVcxWFQzS0YzWFZXMl8wLmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC9kOC8zOGM1YWMtYjdlNy00MGRkLTk4ZDMt ZTIxNjZhZDc0ZTNmLzEvQ1k5N28wdkdWbnZUWVcxWFQzS0YzWFZXMl8wLm1mdDCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC9kOC8zOGM1YWMtYjdlNy00MGRkLTk4ZDMtZTIxNjZhZDc0ZTNm LzEvQ1k5N28wdkdWbnZUWVcxWFQzS0YzWFZXMl8wLmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAc0xC6NO4 8s/Io5UH74sqbXeAoYu0HsyDwkFHc/lMBL8RujseyUflBQCGkmUFVWpzukbb+Duc vd02sCSLPfUpiseuSuYbIxzNE3LWHNSGn6m9iubsVxHDxbL4ErM60grfa91P5cVt DIy3i75N6Is3FiZ/E/VhlMDT3MmSbeq/hBHMmjPkDWZIRKZTSk/ixb0lyIuPzBnB /FKLQHFIoZHQSVdNXdXZNGh/hHU2b4ejqdYhX8czAwH7zPAfMgffYp23/TA8+Z0l YTiVd4riGVLb1MIx5oxG76NKvLkoYCa3gyMps5iN/jlneMkSGV8ARgynId9h6wpd G/A9YLA3cC4FQA== -----END CERTIFICATE-----Generated at Sat Aug 23 14:07:22 2025 by rpki-client