$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/e6/587792-bae9-4183-a4b1-ff5f1ad69266/1/s8UbDAY8_BaUP8mkfiyAWZD26q4.mft File: s8UbDAY8_BaUP8mkfiyAWZD26q4.mft (raw, json) Hash identifier: wj/x6r7x4H7qU76conSsVF0qg85s9i0KucijxYFJt4c= Subject key identifier: 40:47:85:33:87:6C:FA:40:21:30:7A:1D:E5:80:BA:3D:BF:21:E3:C0 Authority key identifier: B3:C5:1B:0C:06:3C:FC:16:94:3F:C9:A4:7E:2C:80:59:90:F6:EA:AE Certificate issuer: /CN=b3c51b0c063cfc16943fc9a47e2c805990f6eaae Certificate serial: 0198D47309DA0AB9899BC8E41769DB2D7112 Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/s8UbDAY8_BaUP8mkfiyAWZD26q4.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/e6/587792-bae9-4183-a4b1-ff5f1ad69266/1/s8UbDAY8_BaUP8mkfiyAWZD26q4.mft Manifest number: 1657 Signing time: Sat 23 Aug 2025 01:02:45 +0000 Manifest this update: Sat 23 Aug 2025 01:02:45 +0000 Manifest next update: Sun 24 Aug 2025 01:02:45 +0000 Files and hashes: 1: 2mMFFVEf9RI7laeK707TbUw9w1o.roa (hash: lJtAZDZI6kWuia4ewbwmh2H0Ib7YOsmGLnMGMcXt0g8=) 2: BqnvofScUisQsUQed2MQ6B18GAQ.roa (hash: aF/iFUXhalT+tHSvHf/i2jdL4yddWHGSdcJZMfIy3uE=) 3: DV3PY9YU5zk2EaQYZkZq4p-ZUYM.roa (hash: iyl4yZuKkTsrQs+Y4JJy2vYNDSKm0/gIBzJQSKVyBGM=) 4: FeALzwmlHVBsdnrHTXpUuCdKMKk.roa (hash: LOwvL3odoyBFINMdFWH/VCQRIEFy3WTnNyeQKYYbRfU=) 5: H1-xrUolZhz6fzzg_UIN6T3DPWQ.roa (hash: qIZY0TolKgREye8GEvOpwQsSjnvpT07vwo6n55/XGY4=) 6: TyV9-G3EmDmxesG6kytX3N3gsKY.roa (hash: 5ZTWb+G4Smvs/SR1cTUZYD6dnJkngJRJoyw2KmVLYwM=) 7: UDyJk4Oy_-L1Te8H_oQucf6YjW4.roa (hash: RtdvCTTWOI7dE+z50k0BiFUEbUEH2UCgRme1pMQy/3s=) 8: WjZqJ0NhE5N_q8Z5fvWq8P2vTKU.roa (hash: yqIxBJiLiShm8irHVY2/sGIwoQoJ1y3znhIp9whAo54=) 9: dKsN1qGwEKIQpUTURYKT2umZW2w.roa (hash: tA8mIaQttFCg4VHXuxLgiMZWDalN45RLcJgG64coFpw=) 10: hmD_gbHlASML2ltcjVZUWmwvSYc.roa (hash: 7BK9fS2pKl/VxlRPtn0r5sqSpL1lbttsGsNK/TVCOlc=) 11: kskh1ZO_la7WXFGA4d2IKKXIwWc.roa (hash: PSi/1bSx17DcwOcX0aGn17oACEy8dwOziOStHczOl68=) 12: n4LrIW3mgA8G3axl4csgyTpsp8Q.roa (hash: LNegLtDN4y1dMd1RyuVmBjmyfpzTDjWVARTw/3voBLo=) 13: qfvkeVV0y4MYey-tvY_ef7wx-wY.roa (hash: vszu6nR/oFbgkiJpXSyUxF5kf03wjhbHFgMzPvnqwuM=) 14: s8UbDAY8_BaUP8mkfiyAWZD26q4.crl (hash: vTBbE8C2THem+4msQ6OA1/cjED9jkOj2NaQ9fsLjXQU=) Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/e6/587792-bae9-4183-a4b1-ff5f1ad69266/1/s8UbDAY8_BaUP8mkfiyAWZD26q4.crl rsync://rpki.ripe.net/repository/DEFAULT/e6/587792-bae9-4183-a4b1-ff5f1ad69266/1/s8UbDAY8_BaUP8mkfiyAWZD26q4.mft rsync://rpki.ripe.net/repository/DEFAULT/s8UbDAY8_BaUP8mkfiyAWZD26q4.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Sun 24 Aug 2025 01:02:45 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:98:d4:73:09:da:0a:b9:89:9b:c8:e4:17:69:db:2d:71:12 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=b3c51b0c063cfc16943fc9a47e2c805990f6eaae Validity Not Before: Aug 23 01:02:45 2025 GMT Not After : Aug 24 01:02:45 2025 GMT Subject: CN=40478533876cfa4021307a1de580ba3dbf21e3c0 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:de:df:24:c1:41:cf:ca:51:09:a8:04:c7:8c:35: e6:4d:72:ec:db:18:4d:32:6d:19:1c:af:3c:27:0b: c2:7f:ba:03:f3:53:9a:67:a5:ec:b9:4a:a0:aa:a7: cf:85:6e:ec:7d:da:d1:2c:4e:e1:d0:73:1a:a9:7e: a3:9c:4e:51:85:f0:50:14:79:b1:28:e1:c1:cf:79: cc:fa:0b:8b:97:16:5b:fd:89:37:43:bc:51:2a:1c: 10:88:07:45:6c:e0:e8:b0:af:5e:ec:8d:18:f9:44: e3:4e:10:28:58:06:dd:62:1d:4e:ca:28:3a:7d:57: 24:e2:09:4b:6d:46:89:e7:d4:fc:f0:d4:6a:d5:66: 53:27:d1:8f:d5:89:25:db:83:5c:fc:21:e5:f5:c5: 08:4e:6e:92:f3:c5:c2:4c:4e:ac:16:b3:26:df:cd: a9:1b:4c:08:e4:db:de:e1:00:38:05:9e:c6:d6:90: 57:3a:c7:dc:be:33:5a:2b:8c:36:95:94:c5:af:9a: 12:fd:65:0a:2c:a9:1f:03:24:bd:e4:5a:9b:60:4e: d3:82:42:10:cc:b8:4d:a6:e8:d5:86:de:8a:ab:66: 67:3c:55:37:32:28:9c:ee:50:87:c0:1b:61:81:80: 3f:20:3d:86:94:cb:bc:44:0d:b4:38:33:f0:97:8b: 74:93 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 40:47:85:33:87:6C:FA:40:21:30:7A:1D:E5:80:BA:3D:BF:21:E3:C0 X509v3 Authority Key Identifier: keyid:B3:C5:1B:0C:06:3C:FC:16:94:3F:C9:A4:7E:2C:80:59:90:F6:EA:AE X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/s8UbDAY8_BaUP8mkfiyAWZD26q4.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/e6/587792-bae9-4183-a4b1-ff5f1ad69266/1/s8UbDAY8_BaUP8mkfiyAWZD26q4.mft X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/e6/587792-bae9-4183-a4b1-ff5f1ad69266/1/s8UbDAY8_BaUP8mkfiyAWZD26q4.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 88:e0:dd:49:fe:a6:68:c5:a4:5a:43:c3:fc:a4:14:cf:14:a0: 12:69:4f:fd:ab:9e:24:ae:0b:71:52:64:c2:c1:6d:f1:be:c5: b0:cb:96:15:dd:2f:27:31:69:2b:82:18:cc:21:46:53:65:5c: c4:ef:f7:c3:90:f7:19:47:83:c1:4a:7b:19:34:37:48:ea:a0: 67:57:d5:04:06:68:35:8e:b0:39:d9:aa:03:fd:eb:7e:8e:18: 25:ec:9a:5d:98:fe:38:37:0e:f9:49:c9:97:e8:d8:82:c4:b0: 98:46:77:eb:9b:21:08:c2:65:19:22:87:53:a2:7f:04:16:d2: 33:17:3a:22:40:6f:ec:8b:57:f8:0e:35:a7:ee:f9:f4:37:19: 41:1f:34:ac:9d:10:e0:f2:92:6d:43:a0:4b:ff:f5:f0:f6:16: 02:81:39:b3:ef:f7:d1:20:c0:23:9f:ca:a9:3f:5f:0c:d1:41: bc:c0:c8:00:e1:ed:ef:56:ea:fd:0b:10:d6:47:57:a7:cc:23: 05:0a:5b:a1:eb:73:14:da:25:06:6e:4e:70:8c:ab:30:44:06: c5:e7:a9:c4:0b:9b:f2:c0:73:b3:ca:3e:95:aa:63:74:5b:aa: 52:91:ff:d2:79:be:bc:a2:21:dc:45:a6:80:40:66:21:7e:99: 38:f2:f5:00 -----BEGIN CERTIFICATE----- MIIFFjCCA/6gAwIBAgISAZjUcwnaCrmJm8jkF2nbLXESMA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKGIzYzUxYjBjMDYzY2ZjMTY5NDNmYzlhNDdlMmM4MDU5OTBm NmVhYWUwHhcNMjUwODIzMDEwMjQ1WhcNMjUwODI0MDEwMjQ1WjAzMTEwLwYDVQQD Eyg0MDQ3ODUzMzg3NmNmYTQwMjEzMDdhMWRlNTgwYmEzZGJmMjFlM2MwMIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEA3t8kwUHPylEJqATHjDXmTXLs2xhN Mm0ZHK88JwvCf7oD81OaZ6XsuUqgqqfPhW7sfdrRLE7h0HMaqX6jnE5RhfBQFHmx KOHBz3nM+guLlxZb/Yk3Q7xRKhwQiAdFbODosK9e7I0Y+UTjThAoWAbdYh1Oyig6 fVck4glLbUaJ59T88NRq1WZTJ9GP1Ykl24Nc/CHl9cUITm6S88XCTE6sFrMm382p G0wI5Nve4QA4BZ7G1pBXOsfcvjNaK4w2lZTFr5oS/WUKLKkfAyS95FqbYE7TgkIQ zLhNpujVht6Kq2ZnPFU3Miic7lCHwBthgYA/ID2GlMu8RA20ODPwl4t0kwIDAQAB o4ICIjCCAh4wHQYDVR0OBBYEFEBHhTOHbPpAITB6HeWAuj2/IePAMB8GA1UdIwQY MBaAFLPFGwwGPPwWlD/JpH4sgFmQ9uquMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvczhVYkRBWThfQmFVUDhta2ZpeUFXWkQyNnE0LmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC9lNi81ODc3OTItYmFlOS00MTgzLWE0YjEt ZmY1ZjFhZDY5MjY2LzEvczhVYkRBWThfQmFVUDhta2ZpeUFXWkQyNnE0Lm1mdDCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC9lNi81ODc3OTItYmFlOS00MTgzLWE0YjEtZmY1ZjFhZDY5MjY2 LzEvczhVYkRBWThfQmFVUDhta2ZpeUFXWkQyNnE0LmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAiODdSf6m aMWkWkPD/KQUzxSgEmlP/aueJK4LcVJkwsFt8b7FsMuWFd0vJzFpK4IYzCFGU2Vc xO/3w5D3GUeDwUp7GTQ3SOqgZ1fVBAZoNY6wOdmqA/3rfo4YJeyaXZj+ODcO+UnJ l+jYgsSwmEZ365shCMJlGSKHU6J/BBbSMxc6IkBv7ItX+A41p+759DcZQR80rJ0Q 4PKSbUOgS//18PYWAoE5s+/30SDAI5/KqT9fDNFBvMDIAOHt71bq/QsQ1kdXp8wj BQpboetzFNolBm5OcIyrMEQGxeepxAub8sBzs8o+lapjdFuqUpH/0nm+vKIh3EWm gEBmIX6ZOPL1AA== -----END CERTIFICATE-----Generated at Sat Aug 23 10:51:35 2025 by rpki-client