$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/e7/b41ab6-b9f3-4b4a-9b7b-1ed10954bd96/1/V1PAYpCjcZlNdXcxhoX1vEpTjUc.mft File: V1PAYpCjcZlNdXcxhoX1vEpTjUc.mft (raw, json) Hash identifier: 3YWdGLuwgho/esrw/HDhNo1n78zobzdk0c3yds934pA= Subject key identifier: 1B:63:89:99:E7:D0:D5:08:20:76:3F:BF:05:BE:9B:ED:B5:5E:C4:9F Authority key identifier: 57:53:C0:62:90:A3:71:99:4D:75:77:31:86:85:F5:BC:4A:53:8D:47 Certificate issuer: /CN=5753c06290a371994d7577318685f5bc4a538d47 Certificate serial: 0198D4A7CF98CD1FD48B848DA75FA8AD3BED Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/V1PAYpCjcZlNdXcxhoX1vEpTjUc.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/e7/b41ab6-b9f3-4b4a-9b7b-1ed10954bd96/1/V1PAYpCjcZlNdXcxhoX1vEpTjUc.mft Manifest number: 123D Signing time: Sat 23 Aug 2025 02:00:24 +0000 Manifest this update: Sat 23 Aug 2025 02:00:24 +0000 Manifest next update: Sun 24 Aug 2025 02:00:24 +0000 Files and hashes: 1: 1-2ze8RFqsfXiBAT11ime5104BjY.roa (hash: 1G/91kNwXr6Euhuawe1vb8XkKyyCivckcaN+MUB7G0c=) 2: 5lDpUUbHXzya0fMquFYbFulqqVs.roa (hash: f1hht89a/wconxQu5KNK8QHufJfhYi0HFOvBnekJIq0=) 3: FHAcQ1hSwnBkPa_1eYwrasvDBAI.roa (hash: UEqpRdrSw3UNWb3wNwi2VW+eLR/IeGW0ScqzLsmeYpU=) 4: FeD_-2NSvz_oTh1LHrP44NqzWIo.roa (hash: M0rfgf8nLa/Z7WmSdsaO8N+Wk6yxPhPTCcsAwupLmJk=) 5: G0XtWDoXmf3g4WPOe4oJBWwD53c.roa (hash: ah5ed8JgyczAK0ktQp/XfJNbJde2PQoHxbYeBWCDQq0=) 6: HlClfikOJrfktj0svDKphR0_6Ic.roa (hash: g1qw7C3eBB8cA1eir2ZaMGGhWvD9jq2Y2uAjecDMYHM=) 7: LXaOacmSywqNlfh5CO5J1YXXGmI.roa (hash: jtQHK2Bwk3+TO9AZet3mFNI8IuZDJg2fZaIIhEkYoQM=) 8: OXCR5eZAjAKFe_5_WqZvsLDsIGw.roa (hash: +dX5GIlPaHoX8hOklKsClO3JcTsDNTNWJiq3yrlcruo=) 9: SVRVY-q0OPWhiL6mBd92R9L5Zm4.roa (hash: dI19F02QJ/eVSmcDcyQsUmklhiicL/qqyQKGyXmUBoc=) 10: V1PAYpCjcZlNdXcxhoX1vEpTjUc.crl (hash: TW9n4zaeTECdoSIK5rh6aQ1ijhnHyTuna63cGUybN3s=) 11: Xdc1GXsEPiQ6GE6eHjFDA0ZgS3w.roa (hash: OE+tVEQ0oQcFP5VxqAmEpxiSoF7RE792pp1YSKmB2O0=) 12: ctU4FIR-r7525NdQcQhV07S1InU.roa (hash: AU7Mc04mkVMs25EZU4CCsCrYPVp1VtWzfOi9wTwg8to=) 13: ftQ60SsjWVubYA-VxNEHamWbBek.roa (hash: jmvMdMMJCzUDXr3r5E5qmHQUJ9DFMdQTkl3lYF+bB84=) 14: s6UOiaPwRDDgS4GdUQJjrNxDCkA.roa (hash: MfReyFTsbPeeVwKX4SeLCT5vdQejZ0/27SaFtWWlLKo=) 15: valOsPAluNa3RG5X659q6dsU_FA.roa (hash: fkBC+Rvf3Gv+oy6BC36LsnU6WeruMquhW06fi/seA5s=) Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/e7/b41ab6-b9f3-4b4a-9b7b-1ed10954bd96/1/V1PAYpCjcZlNdXcxhoX1vEpTjUc.crl rsync://rpki.ripe.net/repository/DEFAULT/e7/b41ab6-b9f3-4b4a-9b7b-1ed10954bd96/1/V1PAYpCjcZlNdXcxhoX1vEpTjUc.mft rsync://rpki.ripe.net/repository/DEFAULT/V1PAYpCjcZlNdXcxhoX1vEpTjUc.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Sun 24 Aug 2025 00:37:04 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:98:d4:a7:cf:98:cd:1f:d4:8b:84:8d:a7:5f:a8:ad:3b:ed Signature Algorithm: sha256WithRSAEncryption Issuer: CN=5753c06290a371994d7577318685f5bc4a538d47 Validity Not Before: Aug 23 02:00:24 2025 GMT Not After : Aug 24 02:00:24 2025 GMT Subject: CN=1b638999e7d0d50820763fbf05be9bedb55ec49f Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:9f:aa:2e:21:77:b2:61:04:64:0d:25:ce:07:58: e8:79:43:aa:f6:fe:63:5f:15:b3:5d:5a:d6:db:79: 5d:48:cc:53:51:6f:fd:03:9c:f6:40:ec:fe:9b:0a: e2:29:0d:9b:1f:85:3b:ed:fc:ff:18:49:73:7b:99: 91:60:01:0c:f0:a6:60:62:55:ad:5a:13:2e:8e:7a: 42:91:5d:cb:ea:30:01:7b:de:e5:4c:4c:d7:d8:9e: 3b:a2:3e:6b:42:a7:80:a8:90:3e:6c:dc:e0:ac:7f: 53:db:dd:a5:e0:a5:21:9b:a4:5d:d0:df:a8:22:69: 8c:da:8c:26:72:3b:24:4d:0d:54:d6:ae:31:1e:54: 5d:0d:90:5a:ab:9f:c3:60:25:58:5f:7b:fc:a7:ff: e0:8b:32:9c:4a:64:c9:d5:b0:d4:d1:61:8a:86:e9: 71:fd:02:f1:a3:eb:5c:02:36:10:2b:4b:a2:51:76: f7:63:df:b4:77:05:43:2c:44:96:06:7d:f8:db:e5: 18:4b:d0:9b:6c:d1:67:35:32:13:d6:57:af:4f:15: f1:2d:f2:fd:39:e9:bd:ae:27:93:7d:41:06:b6:46: 4c:e5:7e:60:c1:3a:ba:bb:d1:86:36:66:0f:3a:07: cb:30:c8:12:f5:7a:b5:dc:e8:aa:63:f6:c7:a0:a6: aa:5f Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 1B:63:89:99:E7:D0:D5:08:20:76:3F:BF:05:BE:9B:ED:B5:5E:C4:9F X509v3 Authority Key Identifier: keyid:57:53:C0:62:90:A3:71:99:4D:75:77:31:86:85:F5:BC:4A:53:8D:47 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/V1PAYpCjcZlNdXcxhoX1vEpTjUc.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/e7/b41ab6-b9f3-4b4a-9b7b-1ed10954bd96/1/V1PAYpCjcZlNdXcxhoX1vEpTjUc.mft X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/e7/b41ab6-b9f3-4b4a-9b7b-1ed10954bd96/1/V1PAYpCjcZlNdXcxhoX1vEpTjUc.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 07:62:97:09:2f:be:6f:35:5c:00:92:64:17:7a:0a:50:cd:98: 5b:81:b9:f2:34:a0:2c:fc:f4:e9:bb:aa:fa:27:85:71:31:f0: 12:19:23:9a:1c:01:5b:c5:ec:50:42:08:9f:d4:f3:4a:b8:47: 22:25:2e:bc:81:06:e0:2e:de:7d:5a:36:70:f3:d1:25:b1:9b: 5d:ec:35:06:8d:93:61:e6:bc:e1:2f:20:59:55:b6:1a:ed:19: 51:31:32:77:8d:4d:c1:89:7b:cb:cd:d8:ae:21:9d:6c:06:68: 02:fa:74:91:dc:67:cb:4a:a5:9e:98:ac:b6:e0:e7:ad:97:66: fc:a6:d3:83:61:b7:e8:03:17:5b:99:0f:15:12:27:f1:ad:09: 6b:ed:0c:69:9f:81:37:03:99:9f:65:e1:16:6e:f8:96:34:24: 2f:09:89:ca:17:aa:d3:97:8e:43:57:59:47:52:81:65:f6:a7: 8a:6d:a4:1f:74:f2:b6:d9:ef:0c:a1:55:cc:0d:ca:62:41:e8: dc:ca:ed:34:d6:ff:1c:9d:bc:3b:f2:f4:68:82:b2:31:25:fd: 10:60:b8:ad:0b:e3:f4:11:e6:7d:f4:a8:d1:05:17:1a:ec:c6: be:f1:66:40:da:7c:be:ec:e8:44:b4:62:23:f7:56:eb:32:44: 19:f9:54:74 -----BEGIN CERTIFICATE----- MIIFFjCCA/6gAwIBAgISAZjUp8+YzR/Ui4SNp1+orTvtMA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKDU3NTNjMDYyOTBhMzcxOTk0ZDc1NzczMTg2ODVmNWJjNGE1 MzhkNDcwHhcNMjUwODIzMDIwMDI0WhcNMjUwODI0MDIwMDI0WjAzMTEwLwYDVQQD EygxYjYzODk5OWU3ZDBkNTA4MjA3NjNmYmYwNWJlOWJlZGI1NWVjNDlmMIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAn6ouIXeyYQRkDSXOB1joeUOq9v5j XxWzXVrW23ldSMxTUW/9A5z2QOz+mwriKQ2bH4U77fz/GElze5mRYAEM8KZgYlWt WhMujnpCkV3L6jABe97lTEzX2J47oj5rQqeAqJA+bNzgrH9T292l4KUhm6Rd0N+o ImmM2owmcjskTQ1U1q4xHlRdDZBaq5/DYCVYX3v8p//gizKcSmTJ1bDU0WGKhulx /QLxo+tcAjYQK0uiUXb3Y9+0dwVDLESWBn342+UYS9CbbNFnNTIT1levTxXxLfL9 Oem9rieTfUEGtkZM5X5gwTq6u9GGNmYPOgfLMMgS9Xq13OiqY/bHoKaqXwIDAQAB o4ICIjCCAh4wHQYDVR0OBBYEFBtjiZnn0NUIIHY/vwW+m+21XsSfMB8GA1UdIwQY MBaAFFdTwGKQo3GZTXV3MYaF9bxKU41HMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvVjFQQVlwQ2pjWmxOZFhjeGhvWDF2RXBUalVjLmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC9lNy9iNDFhYjYtYjlmMy00YjRhLTliN2It MWVkMTA5NTRiZDk2LzEvVjFQQVlwQ2pjWmxOZFhjeGhvWDF2RXBUalVjLm1mdDCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC9lNy9iNDFhYjYtYjlmMy00YjRhLTliN2ItMWVkMTA5NTRiZDk2 LzEvVjFQQVlwQ2pjWmxOZFhjeGhvWDF2RXBUalVjLmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAB2KXCS++ bzVcAJJkF3oKUM2YW4G58jSgLPz06buq+ieFcTHwEhkjmhwBW8XsUEIIn9TzSrhH IiUuvIEG4C7efVo2cPPRJbGbXew1Bo2TYea84S8gWVW2Gu0ZUTEyd41NwYl7y83Y riGdbAZoAvp0kdxny0qlnpistuDnrZdm/KbTg2G36AMXW5kPFRIn8a0Ja+0MaZ+B NwOZn2XhFm74ljQkLwmJyheq05eOQ1dZR1KBZfanim2kH3TyttnvDKFVzA3KYkHo 3MrtNNb/HJ28O/L0aIKyMSX9EGC4rQvj9BHmffSo0QUXGuzGvvFmQNp8vuzoRLRi I/dW6zJEGflUdA== -----END CERTIFICATE-----Generated at Sat Aug 23 10:16:01 2025 by rpki-client