$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/ed/8e8e82-5274-4d2f-8ca0-ab19fcb0ce64/1/4VgI8_khvIw-6ofHWExYTBAAsFE.mft File: 4VgI8_khvIw-6ofHWExYTBAAsFE.mft (raw, json) Hash identifier: udw/HQkKforB3d1HygrzfV8XRNUBKtE3Q09O89dJIyY= Subject key identifier: C7:2B:38:70:CC:D3:A7:90:08:E3:C6:3A:E2:3D:1E:8E:92:66:DA:1F Authority key identifier: E1:58:08:F3:F9:21:BC:8C:3E:EA:87:C7:58:4C:58:4C:10:00:B0:51 Certificate issuer: /CN=e15808f3f921bc8c3eea87c7584c584c1000b051 Certificate serial: 0198D5F190E420B0C11DCAA30254C9D303F4 Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/4VgI8_khvIw-6ofHWExYTBAAsFE.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/ed/8e8e82-5274-4d2f-8ca0-ab19fcb0ce64/1/4VgI8_khvIw-6ofHWExYTBAAsFE.mft Manifest number: 166B Signing time: Sat 23 Aug 2025 08:00:34 +0000 Manifest this update: Sat 23 Aug 2025 08:00:34 +0000 Manifest next update: Sun 24 Aug 2025 08:00:34 +0000 Files and hashes: 1: 4VgI8_khvIw-6ofHWExYTBAAsFE.crl (hash: dyh1STb8JFZDBT1bf4n1H49cAXBf/qxPa0un85I00vY=) 2: 7hCd_HKEYkXLvNCBLfMsTezcRXs.roa (hash: U6tVugGWrDYmHCXTomFCnYlQyCN2W9AcT+utfrGkYmM=) 3: HK9YTPeAPa2mm7JsqVFDcEqWktE.roa (hash: pGFfaceKosL6QVYMO3oG4sR8CNlOKvbDd43IVlI91l4=) 4: SiUykNKTjaApyo1sqndO19rBYAs.roa (hash: jaR1D2Lqsnpc33UxJXomGKoF/S6s6EdMDhOpwvCqmiY=) 5: YxnLmhiEAoRIPwqx7D5pI2tVg0E.roa (hash: Z5VZl3NN5nIeNmBSmYIBYR811mPwFTzRI+uDPXf+8B0=) 6: dsVEniM-PjP3aF57gRKfJeGsuXA.roa (hash: rATVs9dRCK5irdzRkSY1vrtCfxCwPvZoSJA3EPbdN5Q=) 7: jNJogHc9h5lodSxhpjDRYEENUOM.roa (hash: O0aQYdB/pHChDSdymrPe8W/YPJRqMLBI8pg3+YHjgZ8=) 8: myrzpFPZKEFrMiKvWzGEDQDrl_I.roa (hash: J9rVlZg9Lutrp3UmbnqdopvJazmPd6IwXd6xHibeysc=) 9: pm4iWvL8z96fIGtjxaGjSXeRJT4.roa (hash: ZYVelcX+1GR4HDMDdE6U47zsAh6vEcuxWCIg/8E3uZE=) 10: qeW6k62Ova_Op7BhYtzucMuedHs.roa (hash: iPCOF2sKXY5KaN1yHnhdOMP4cE9n3NAPWSlvKOP6/hY=) 11: qispPpKIlPSWV1rI1EAZQtlT-p0.roa (hash: sBtkCqwyGciPSktKwAiba5P4WFIxvlZFVG+B/hvcwgI=) 12: z1XxJmXXx8uVxhk9CwQJXiPqHzU.roa (hash: EaljD/90P2BfuVNTpmwdBC+zdctwtxvncMDcXLvuk10=) Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/ed/8e8e82-5274-4d2f-8ca0-ab19fcb0ce64/1/4VgI8_khvIw-6ofHWExYTBAAsFE.crl rsync://rpki.ripe.net/repository/DEFAULT/ed/8e8e82-5274-4d2f-8ca0-ab19fcb0ce64/1/4VgI8_khvIw-6ofHWExYTBAAsFE.mft rsync://rpki.ripe.net/repository/DEFAULT/4VgI8_khvIw-6ofHWExYTBAAsFE.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Sun 24 Aug 2025 05:01:29 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:98:d5:f1:90:e4:20:b0:c1:1d:ca:a3:02:54:c9:d3:03:f4 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=e15808f3f921bc8c3eea87c7584c584c1000b051 Validity Not Before: Aug 23 08:00:34 2025 GMT Not After : Aug 24 08:00:34 2025 GMT Subject: CN=c72b3870ccd3a79008e3c63ae23d1e8e9266da1f Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:98:89:38:95:06:d4:42:01:8c:eb:98:6e:c8:68: f1:3a:85:78:66:68:e8:66:67:ff:98:22:06:46:ee: 62:3a:44:f9:7e:cd:19:7e:5f:cc:93:91:c5:ce:83: bb:32:3a:ed:4b:84:41:e9:b8:85:ce:fd:68:6d:25: 0b:f4:4d:64:80:7a:da:5b:33:ff:e4:56:c8:68:34: 14:9a:96:a4:cd:82:9f:a8:16:c2:10:02:0f:e3:75: d3:b6:ad:8b:ba:7f:d9:ad:fd:81:3b:98:60:67:d8: 91:cf:b2:b1:1d:1c:0c:c5:f4:ca:91:92:28:c0:be: c7:7d:10:12:61:eb:61:77:51:78:9e:cf:fa:7a:3b: 6d:3b:48:cb:99:fb:1d:c3:8d:c9:5b:1d:f9:76:0f: 2a:09:0d:8a:7e:ac:ed:04:5a:5f:a1:0c:0f:25:69: f2:53:59:22:cb:99:20:ea:b2:17:d8:16:41:15:e4: bd:ea:ea:fb:d4:0e:81:a0:8c:11:a2:ef:f5:29:da: 0e:47:b9:7e:b9:18:8a:08:f1:8e:b4:95:9d:d0:3c: f2:eb:e7:5d:70:ee:79:21:47:d6:98:04:79:fb:8a: be:34:0b:19:10:5b:fa:5e:06:6a:ba:5a:e2:4e:81: 2f:8a:50:10:95:1c:1c:23:8f:31:73:d8:2e:2f:ec: 45:f7 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: C7:2B:38:70:CC:D3:A7:90:08:E3:C6:3A:E2:3D:1E:8E:92:66:DA:1F X509v3 Authority Key Identifier: keyid:E1:58:08:F3:F9:21:BC:8C:3E:EA:87:C7:58:4C:58:4C:10:00:B0:51 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/4VgI8_khvIw-6ofHWExYTBAAsFE.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/ed/8e8e82-5274-4d2f-8ca0-ab19fcb0ce64/1/4VgI8_khvIw-6ofHWExYTBAAsFE.mft X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/ed/8e8e82-5274-4d2f-8ca0-ab19fcb0ce64/1/4VgI8_khvIw-6ofHWExYTBAAsFE.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 1d:2a:e6:85:88:5b:b3:a5:26:6a:a2:e2:c8:c9:48:2f:fd:b4: 5a:f5:58:b9:e3:e7:59:85:34:7f:8a:3d:15:5a:f1:56:fd:62: bd:8b:11:e4:68:93:c0:bb:2f:d4:c9:f6:47:0c:06:70:0e:4b: 9b:4d:71:78:9b:a1:a4:2e:26:6e:e2:8a:e4:68:d2:21:47:54: 18:a9:97:d7:77:69:b3:bc:d8:ab:8d:71:79:8a:fa:cf:ec:77: 87:cc:98:b7:d8:93:63:82:67:93:b5:36:59:4f:d9:6b:c1:09: b6:e3:c5:89:3f:53:9c:f2:44:9d:09:9a:e7:95:9d:9c:bc:a7: aa:ee:e5:0c:f0:b8:54:e0:53:b6:21:1f:4e:f1:fc:e8:cb:ec: 33:68:48:4e:b0:0c:81:9b:e4:20:8c:8f:8f:5a:b8:9d:59:f7: 19:21:fc:fe:8b:6f:52:2d:fd:25:8d:54:6a:7d:1a:a0:13:a6: a2:5b:be:45:e1:36:d1:bb:9d:19:cf:ed:d0:cf:85:15:5e:f4: 4f:44:bd:7a:08:93:1c:87:bd:91:bd:de:13:69:05:31:61:10: d6:7f:03:b5:97:1d:aa:a3:8a:35:a5:94:3e:2d:ae:58:cb:de: 4f:6b:98:a6:1d:cb:a5:40:8c:04:cb:30:76:ca:ef:7d:24:04: 82:69:d2:7c -----BEGIN CERTIFICATE----- MIIFFjCCA/6gAwIBAgISAZjV8ZDkILDBHcqjAlTJ0wP0MA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKGUxNTgwOGYzZjkyMWJjOGMzZWVhODdjNzU4NGM1ODRjMTAw MGIwNTEwHhcNMjUwODIzMDgwMDM0WhcNMjUwODI0MDgwMDM0WjAzMTEwLwYDVQQD EyhjNzJiMzg3MGNjZDNhNzkwMDhlM2M2M2FlMjNkMWU4ZTkyNjZkYTFmMIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAmIk4lQbUQgGM65huyGjxOoV4Zmjo Zmf/mCIGRu5iOkT5fs0Zfl/Mk5HFzoO7MjrtS4RB6biFzv1obSUL9E1kgHraWzP/ 5FbIaDQUmpakzYKfqBbCEAIP43XTtq2Lun/Zrf2BO5hgZ9iRz7KxHRwMxfTKkZIo wL7HfRASYethd1F4ns/6ejttO0jLmfsdw43JWx35dg8qCQ2KfqztBFpfoQwPJWny U1kiy5kg6rIX2BZBFeS96ur71A6BoIwRou/1KdoOR7l+uRiKCPGOtJWd0Dzy6+dd cO55IUfWmAR5+4q+NAsZEFv6XgZqulriToEvilAQlRwcI48xc9guL+xF9wIDAQAB o4ICIjCCAh4wHQYDVR0OBBYEFMcrOHDM06eQCOPGOuI9Ho6SZtofMB8GA1UdIwQY MBaAFOFYCPP5IbyMPuqHx1hMWEwQALBRMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvNFZnSThfa2h2SXctNm9mSFdFeFlUQkFBc0ZFLmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC9lZC84ZThlODItNTI3NC00ZDJmLThjYTAt YWIxOWZjYjBjZTY0LzEvNFZnSThfa2h2SXctNm9mSFdFeFlUQkFBc0ZFLm1mdDCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC9lZC84ZThlODItNTI3NC00ZDJmLThjYTAtYWIxOWZjYjBjZTY0 LzEvNFZnSThfa2h2SXctNm9mSFdFeFlUQkFBc0ZFLmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAHSrmhYhb s6UmaqLiyMlIL/20WvVYuePnWYU0f4o9FVrxVv1ivYsR5GiTwLsv1Mn2RwwGcA5L m01xeJuhpC4mbuKK5GjSIUdUGKmX13dps7zYq41xeYr6z+x3h8yYt9iTY4Jnk7U2 WU/Za8EJtuPFiT9TnPJEnQma55WdnLynqu7lDPC4VOBTtiEfTvH86MvsM2hITrAM gZvkIIyPj1q4nVn3GSH8/otvUi39JY1Uan0aoBOmolu+ReE20budGc/t0M+FFV70 T0S9egiTHIe9kb3eE2kFMWEQ1n8DtZcdqqOKNaWUPi2uWMveT2uYph3LpUCMBMsw dsrvfSQEgmnSfA== -----END CERTIFICATE-----Generated at Sat Aug 23 12:08:35 2025 by rpki-client