$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/eb/eee131-bb8c-4887-869b-6fe4d8fed160/1/h0v4BwzuQwXRo4npEPtRArvMGUE.mft File: h0v4BwzuQwXRo4npEPtRArvMGUE.mft (raw, json) Hash identifier: 4mF1NeirRno37SP0R/X1rWlC9vt6PapqYn8PJ8/y77g= Subject key identifier: AA:4C:6E:AB:36:63:84:10:15:A1:B5:C3:E0:C7:86:58:E6:D7:B7:94 Authority key identifier: 87:4B:F8:07:0C:EE:43:05:D1:A3:89:E9:10:FB:51:02:BB:CC:19:41 Certificate issuer: /CN=874bf8070cee4305d1a389e910fb5102bbcc1941 Certificate serial: 0198D4047180F6ABE0FE096F82D5D7A54394 Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/h0v4BwzuQwXRo4npEPtRArvMGUE.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/eb/eee131-bb8c-4887-869b-6fe4d8fed160/1/h0v4BwzuQwXRo4npEPtRArvMGUE.mft Manifest number: 0FD8 Signing time: Fri 22 Aug 2025 23:01:57 +0000 Manifest this update: Fri 22 Aug 2025 23:01:57 +0000 Manifest next update: Sat 23 Aug 2025 23:01:57 +0000 Files and hashes: 1: 0OKEEKGhx09vrOl7RYzWo3_wxgQ.roa (hash: bVmqeltj/mUgRyI/UDd3qXuGmM6ZNTUv7NHdJ5Ecm14=) 2: 0na0952KGc1H37d43sfmQKJLL00.roa (hash: corUkZBv/wXf0UWamqTqW2vCXAO7jctIMZRyOPGvfMc=) 3: 0nyuKNwkHdjNx58vqjYZWHgdk04.roa (hash: IJwrVyR1/3bxuDIXcjl0pqsWJYg81ab8+TgzpFzMgak=) 4: 50gtoTdhN9nO756-F4DP2ztZ9co.roa (hash: PoNPNVOdbr6ZQt1a8yzQyLs5SXzvoUcV/tLE/CbCBRA=) 5: 5WW9l5SbU7Xc5dzcJPOjnh-Ti1k.roa (hash: 2mR14FDC49JE9sKTdrARapGEl+mL/ykOGzFFu5F/fQM=) 6: GPQpLDssO6fTD1dGaJR05RFssa4.roa (hash: fp71tS0Tf+vhKpm3TY4BWXK7QdJ3Wg7DCBdUoQ7F5lg=) 7: J9C16lcx8PgyurfKUP9kuPkC8qk.roa (hash: FgZNOU0gXFenPcB6tHkqCpKLWPVhc0a8myZew2TEgCo=) 8: LumIDmC9KaTmO5EmvKNIDB_MJ6I.roa (hash: T1v6ldOgSnHm0ILMw4lezNqfO7yaUlFFJv2DMeUijuQ=) 9: VvF4Vi4FweHBoF6fwzvWsqkmd1g.roa (hash: 0iNsEJDKXYV/LCkoqqh7O11YVgjXO/OY9nxGaKpwAV8=) 10: h0v4BwzuQwXRo4npEPtRArvMGUE.crl (hash: ccX+EkTOLzY259Ik4TS+C+7sOb4b1uLNFoxN1ViqGhI=) 11: vevN_FQh1oLDczAFJHEKh5hEOxE.roa (hash: T6+n5imfk+pQSeT5Osi01ihP8snYGAynnv1xpTuEaoU=) 12: xER0K9I9xK8DBLC6KDcI75JR9LY.roa (hash: OqOr60qixfUKi1rv4+JZ/v9458y498eM0Dbfd2dxyz4=) Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/eb/eee131-bb8c-4887-869b-6fe4d8fed160/1/h0v4BwzuQwXRo4npEPtRArvMGUE.crl rsync://rpki.ripe.net/repository/DEFAULT/eb/eee131-bb8c-4887-869b-6fe4d8fed160/1/h0v4BwzuQwXRo4npEPtRArvMGUE.mft rsync://rpki.ripe.net/repository/DEFAULT/h0v4BwzuQwXRo4npEPtRArvMGUE.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Sat 23 Aug 2025 23:01:57 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:98:d4:04:71:80:f6:ab:e0:fe:09:6f:82:d5:d7:a5:43:94 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=874bf8070cee4305d1a389e910fb5102bbcc1941 Validity Not Before: Aug 22 23:01:57 2025 GMT Not After : Aug 23 23:01:57 2025 GMT Subject: CN=aa4c6eab3663841015a1b5c3e0c78658e6d7b794 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:a2:cb:e0:b3:c6:3f:b0:8c:8e:d8:00:d6:e5:93: 1c:6b:ea:32:3d:5d:2e:47:c1:30:a9:74:35:70:6e: fb:42:28:95:a8:26:a3:7f:da:b3:db:3e:30:46:e5: 62:bc:4f:2c:2c:80:3f:c5:3c:e1:78:5c:f0:85:62: 7e:78:f5:ef:c8:2c:44:a6:75:f4:4e:df:7f:95:5f: 42:15:11:8d:50:fe:c5:ca:77:7a:e1:ae:49:ad:aa: b0:c2:09:a5:28:07:76:b4:1d:1e:90:fc:6e:02:f9: e9:21:89:c9:32:51:a5:c1:9b:6f:2e:50:f7:e0:61: 0e:a1:e7:e1:2a:d5:f1:42:da:f3:5a:c2:0b:33:56: 65:45:28:d0:c3:44:f2:08:1f:0a:b3:81:6f:75:be: 6b:eb:bb:89:8a:39:95:8b:70:28:9f:09:91:ac:68: 18:3c:36:9e:5d:9a:31:79:ee:7a:08:2e:1d:37:d4: 73:a3:d9:5c:72:81:a5:e0:e6:d8:c5:75:4a:ae:36: d2:05:00:5e:c4:11:fb:ca:54:fa:46:84:74:fd:b0: 96:5c:c7:77:38:26:77:49:a1:5e:1f:cd:f4:fb:44: d5:cc:f6:eb:04:07:6f:97:c0:bc:cb:c3:fa:9c:da: c7:54:de:47:aa:b3:67:40:eb:90:61:0e:c0:a4:f2: 4e:23 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: AA:4C:6E:AB:36:63:84:10:15:A1:B5:C3:E0:C7:86:58:E6:D7:B7:94 X509v3 Authority Key Identifier: keyid:87:4B:F8:07:0C:EE:43:05:D1:A3:89:E9:10:FB:51:02:BB:CC:19:41 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/h0v4BwzuQwXRo4npEPtRArvMGUE.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/eb/eee131-bb8c-4887-869b-6fe4d8fed160/1/h0v4BwzuQwXRo4npEPtRArvMGUE.mft X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/eb/eee131-bb8c-4887-869b-6fe4d8fed160/1/h0v4BwzuQwXRo4npEPtRArvMGUE.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 9b:12:f6:98:7c:78:36:e0:3e:5e:f8:6f:f3:62:6e:b6:e8:d8: de:77:75:26:79:6c:69:48:1c:53:c0:db:7c:6e:ff:be:d0:55: 22:3b:a1:4b:cd:5e:43:2c:26:cc:8a:42:d9:4e:98:3c:48:38: b3:c2:a8:3e:2b:d9:05:6b:a6:61:19:96:be:d7:22:8e:18:48: 82:4e:09:f3:15:0b:39:15:66:08:70:f3:c1:0a:f2:d6:fa:20: 19:38:b8:2b:9e:ac:ad:7f:8c:ed:20:97:dd:57:e8:5e:99:12: 94:38:5d:c7:ae:08:f8:e7:ea:f5:4e:c4:4c:ed:b5:d2:68:54: a8:b9:46:dd:0e:0f:26:f9:27:e0:a8:ef:3a:c6:6e:61:54:49: b8:f0:65:fa:77:39:0d:4b:5b:65:4c:b3:66:45:3c:db:96:55: fc:b3:d9:29:79:f7:24:43:bd:cf:f5:d6:2f:48:84:d0:64:27: a2:f3:44:b1:54:6f:ee:56:79:39:e6:45:5e:f7:f6:a0:53:c4: a0:7b:2b:6b:79:51:c8:c9:a1:5b:32:a2:94:f2:12:8b:cc:cf: d4:c3:af:7f:3c:92:30:bb:07:49:2d:89:c0:2e:59:ce:d8:95: ba:e7:65:ff:06:c0:5d:26:dc:f5:57:7c:ba:a6:3d:df:2a:44: f6:bc:a4:ac -----BEGIN CERTIFICATE----- MIIFFjCCA/6gAwIBAgISAZjUBHGA9qvg/glvgtXXpUOUMA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKDg3NGJmODA3MGNlZTQzMDVkMWEzODllOTEwZmI1MTAyYmJj YzE5NDEwHhcNMjUwODIyMjMwMTU3WhcNMjUwODIzMjMwMTU3WjAzMTEwLwYDVQQD EyhhYTRjNmVhYjM2NjM4NDEwMTVhMWI1YzNlMGM3ODY1OGU2ZDdiNzk0MIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAosvgs8Y/sIyO2ADW5ZMca+oyPV0u R8EwqXQ1cG77QiiVqCajf9qz2z4wRuVivE8sLIA/xTzheFzwhWJ+ePXvyCxEpnX0 Tt9/lV9CFRGNUP7Fynd64a5JraqwwgmlKAd2tB0ekPxuAvnpIYnJMlGlwZtvLlD3 4GEOoefhKtXxQtrzWsILM1ZlRSjQw0TyCB8Ks4Fvdb5r67uJijmVi3AonwmRrGgY PDaeXZoxee56CC4dN9Rzo9lccoGl4ObYxXVKrjbSBQBexBH7ylT6RoR0/bCWXMd3 OCZ3SaFeH830+0TVzPbrBAdvl8C8y8P6nNrHVN5HqrNnQOuQYQ7ApPJOIwIDAQAB o4ICIjCCAh4wHQYDVR0OBBYEFKpMbqs2Y4QQFaG1w+DHhljm17eUMB8GA1UdIwQY MBaAFIdL+AcM7kMF0aOJ6RD7UQK7zBlBMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvaDB2NEJ3enVRd1hSbzRucEVQdFJBcnZNR1VFLmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC9lYi9lZWUxMzEtYmI4Yy00ODg3LTg2OWIt NmZlNGQ4ZmVkMTYwLzEvaDB2NEJ3enVRd1hSbzRucEVQdFJBcnZNR1VFLm1mdDCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC9lYi9lZWUxMzEtYmI4Yy00ODg3LTg2OWItNmZlNGQ4ZmVkMTYw LzEvaDB2NEJ3enVRd1hSbzRucEVQdFJBcnZNR1VFLmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAmxL2mHx4 NuA+Xvhv82JutujY3nd1JnlsaUgcU8DbfG7/vtBVIjuhS81eQywmzIpC2U6YPEg4 s8KoPivZBWumYRmWvtcijhhIgk4J8xULORVmCHDzwQry1vogGTi4K56srX+M7SCX 3VfoXpkSlDhdx64I+Ofq9U7ETO210mhUqLlG3Q4PJvkn4KjvOsZuYVRJuPBl+nc5 DUtbZUyzZkU825ZV/LPZKXn3JEO9z/XWL0iE0GQnovNEsVRv7lZ5OeZFXvf2oFPE oHsra3lRyMmhWzKilPISi8zP1MOvfzySMLsHSS2JwC5ZztiVuudl/wbAXSbc9Vd8 uqY93ypE9rykrA== -----END CERTIFICATE-----Generated at Sat Aug 23 10:28:10 2025 by rpki-client