$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/f2/cc6e99-6e5f-401b-912d-1095544c6c50/1/mc5WmhTC2zdy8jGHzmjmVB7ABI4.mft File: mc5WmhTC2zdy8jGHzmjmVB7ABI4.mft (raw, json) Hash identifier: ++jamUN0js5MJ8Mx7sdW8fyy4YcpskhTRjk7mLACY5U= Subject key identifier: C7:4A:41:11:AF:88:93:C3:7B:4F:EF:6A:E9:4D:B6:5B:A8:79:29:3A Authority key identifier: 99:CE:56:9A:14:C2:DB:37:72:F2:31:87:CE:68:E6:54:1E:C0:04:8E Certificate issuer: /CN=99ce569a14c2db3772f23187ce68e6541ec0048e Certificate serial: 0198D705C3AB5619C8808C0573F9A4D0AC94 Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/mc5WmhTC2zdy8jGHzmjmVB7ABI4.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/f2/cc6e99-6e5f-401b-912d-1095544c6c50/1/mc5WmhTC2zdy8jGHzmjmVB7ABI4.mft Manifest number: 166B Signing time: Sat 23 Aug 2025 13:02:15 +0000 Manifest this update: Sat 23 Aug 2025 13:02:15 +0000 Manifest next update: Sun 24 Aug 2025 13:02:15 +0000 Files and hashes: 1: 7hlWKm8vTIF0LH1H2oS6Admh1TI.roa (hash: JGgMMA+OZIrWq67kkKcLVk/aNndkz3SnG1R5RYOVvj8=) 2: 8Okcs_WzeZSlRzql6-e5V5V7syA.roa (hash: Bgf74cz9Nwo/ctlxM9vVhY3z4DibfYQP6Uszu31EXc8=) 3: AJpw_2i3EoQNYD9kunMPYOdByi8.roa (hash: 2y+udfjFmNVer5C4pJzKndxIM53KHs0ELdljGNxXclM=) 4: BW-ZjApW-eGpyxFEOc0qqC_7S5k.roa (hash: RqpMiCDIPeUSPd1EPbgHwl0XZwlcr7/eFSWcSxO7pPY=) 5: FjCA5Ak9pc8iYQAo2kd8vxWMg2c.roa (hash: LWHCt8fi0ffLNOHRJ69hCW6DNWkN+nY4S8kMpRaQ7ss=) 6: Ik8Kqt-zKfrsdQjyrAjHXX-mlLc.roa (hash: Zg9C0+0W8n0QIjR6RRPkp/OJIpBk8iu2+syGMIoxQyg=) 7: P82-6fcmXy1vqdLrwWWqytTl0TM.roa (hash: z01aDruR3yMRSRzpiGY2CGLWYQwuEAMQJV+YU0LBGGA=) 8: RYdEtsOojE3SXyShhqAjMIQl9xQ.roa (hash: bxAZYk1bj8j4gGSsg9+CUkCHFq1GRl7baVopFxolE0s=) 9: WBeAt2UOvPgAdfpllYF8DBrXsx8.roa (hash: IGhLKO/rQTI4tOBHJDgWqI73xTyqxuZsgF0ztyC/dOc=) 10: bbmenZqkY_bNQyceoK-fLvwWxdc.roa (hash: 5/uuA7PsJ4CyNOajTBR0J1Bkylsmq9V39AJtX9hFgFU=) 11: dMlBq16YcIM7-JR7sVrQGjUo5Ts.roa (hash: i7NU7NT4PhY/w3tg6T+Z3qdRHBm2oFSaLm/74+Urx2g=) 12: f4e7IUwG3JkPasx3oPPOpKnw014.roa (hash: oT75cSQjF7ggxHOJOkz6Sxjs0hfilCF0H6NE1nJtUfo=) 13: mNguxrQSssFTgOvDx-TtVJcngJ0.roa (hash: p4yScE1NaP9LVRZLGH/RikX/bIEDOl76JK/45ns5C9Q=) 14: mc5WmhTC2zdy8jGHzmjmVB7ABI4.crl (hash: 58YFFIE1jdCK8phbL40RdYFOyq7gjv+8sL3M9AeXrIw=) 15: u_mqTybwgy-hqVDwwCNi1Bf-8tI.roa (hash: JZzfV1nFUUQsICoBUJ9//kJmxjSvH3d3D7ybB8QQr/Y=) Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/f2/cc6e99-6e5f-401b-912d-1095544c6c50/1/mc5WmhTC2zdy8jGHzmjmVB7ABI4.crl rsync://rpki.ripe.net/repository/DEFAULT/f2/cc6e99-6e5f-401b-912d-1095544c6c50/1/mc5WmhTC2zdy8jGHzmjmVB7ABI4.mft rsync://rpki.ripe.net/repository/DEFAULT/mc5WmhTC2zdy8jGHzmjmVB7ABI4.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Sun 24 Aug 2025 05:01:29 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:98:d7:05:c3:ab:56:19:c8:80:8c:05:73:f9:a4:d0:ac:94 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=99ce569a14c2db3772f23187ce68e6541ec0048e Validity Not Before: Aug 23 13:02:15 2025 GMT Not After : Aug 24 13:02:15 2025 GMT Subject: CN=c74a4111af8893c37b4fef6ae94db65ba879293a Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:c1:a6:2d:e9:db:89:6b:75:16:d2:9d:17:75:d9: f6:14:08:64:b1:07:7b:50:58:3a:bc:5f:f1:44:43: fe:5e:bb:85:4e:41:61:96:99:3d:94:83:6b:f8:c1: 06:a4:ca:30:89:0a:87:17:9a:e4:9a:e8:64:df:dc: b6:c3:99:90:37:59:f5:ae:68:dc:d7:9e:9b:5c:6d: 5b:09:63:28:c9:2f:d5:44:9f:ba:6c:3d:e9:47:2a: 25:28:44:42:d6:a8:83:88:e4:ed:62:da:9e:2c:17: 7e:0a:2c:2c:d6:89:85:6a:7d:3d:8a:8a:6f:33:b2: c4:76:ad:54:f9:68:56:dc:ff:96:b5:df:57:de:80: 7f:cd:dc:b2:ea:83:6c:d9:cc:33:eb:40:aa:f5:56: ec:a9:ba:99:bd:99:71:97:09:9b:f4:84:f8:28:71: 68:0e:9f:23:bb:05:2f:16:03:27:c5:ae:41:d4:0e: d9:7c:70:42:78:07:2a:37:ae:00:3c:20:bc:af:06: a0:91:a4:40:88:c3:23:d4:13:7b:50:93:de:47:7d: ab:2e:3a:44:f0:9e:86:94:ab:ff:90:d8:da:88:f6: a8:58:29:14:3d:19:b2:a7:fc:a8:fa:f1:69:d2:b0: 62:e8:9b:24:02:14:a3:30:03:34:18:b7:09:9b:ce: d4:e7 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: C7:4A:41:11:AF:88:93:C3:7B:4F:EF:6A:E9:4D:B6:5B:A8:79:29:3A X509v3 Authority Key Identifier: keyid:99:CE:56:9A:14:C2:DB:37:72:F2:31:87:CE:68:E6:54:1E:C0:04:8E X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/mc5WmhTC2zdy8jGHzmjmVB7ABI4.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/f2/cc6e99-6e5f-401b-912d-1095544c6c50/1/mc5WmhTC2zdy8jGHzmjmVB7ABI4.mft X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/f2/cc6e99-6e5f-401b-912d-1095544c6c50/1/mc5WmhTC2zdy8jGHzmjmVB7ABI4.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 4e:5b:59:a6:92:86:bc:4d:ea:6b:cf:fc:1d:e7:49:54:3b:34: 8e:ed:37:a1:d7:eb:66:a9:0a:e5:c2:f6:8e:04:3a:70:2c:86: a7:9d:1d:26:d7:eb:94:ef:48:2c:2b:d9:74:dc:9e:00:75:3c: f8:13:5c:3b:bc:88:e0:26:ce:22:4c:72:48:84:c5:d0:05:94: 70:e5:f4:1f:6d:88:00:47:76:4b:15:65:88:8f:e1:74:01:b8: 19:6e:a3:a3:df:c5:71:8a:5f:c1:cf:7d:bc:84:29:0b:27:ba: d7:b0:33:eb:d4:d1:fd:dd:10:81:02:4c:8c:d3:03:49:cd:d7: 28:39:ee:38:67:85:62:1f:38:3b:3d:37:2c:b7:dc:c6:9d:05: db:25:e0:56:4d:f4:bb:8d:65:01:98:a4:70:e3:db:2b:d7:0e: b3:e5:c3:89:25:91:84:07:12:e6:87:c0:8d:59:bb:45:0f:e5: e4:15:03:d8:68:07:1f:d7:f1:39:49:70:4a:1d:6c:58:35:31: a2:76:4b:f5:0f:dc:36:83:be:cd:fc:73:68:6e:37:ef:19:34: 14:74:ca:83:5f:d0:11:2b:2e:5c:c6:6e:f7:b4:90:1b:5a:54: d6:78:87:d1:31:79:bb:f1:31:91:cb:ea:ac:ac:55:25:87:3c: 24:7d:8e:9b -----BEGIN CERTIFICATE----- MIIFFjCCA/6gAwIBAgISAZjXBcOrVhnIgIwFc/mk0KyUMA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKDk5Y2U1NjlhMTRjMmRiMzc3MmYyMzE4N2NlNjhlNjU0MWVj MDA0OGUwHhcNMjUwODIzMTMwMjE1WhcNMjUwODI0MTMwMjE1WjAzMTEwLwYDVQQD EyhjNzRhNDExMWFmODg5M2MzN2I0ZmVmNmFlOTRkYjY1YmE4NzkyOTNhMIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAwaYt6duJa3UW0p0Xddn2FAhksQd7 UFg6vF/xREP+XruFTkFhlpk9lINr+MEGpMowiQqHF5rkmuhk39y2w5mQN1n1rmjc 156bXG1bCWMoyS/VRJ+6bD3pRyolKERC1qiDiOTtYtqeLBd+Ciws1omFan09iopv M7LEdq1U+WhW3P+Wtd9X3oB/zdyy6oNs2cwz60Cq9VbsqbqZvZlxlwmb9IT4KHFo Dp8juwUvFgMnxa5B1A7ZfHBCeAcqN64APCC8rwagkaRAiMMj1BN7UJPeR32rLjpE 8J6GlKv/kNjaiPaoWCkUPRmyp/yo+vFp0rBi6JskAhSjMAM0GLcJm87U5wIDAQAB o4ICIjCCAh4wHQYDVR0OBBYEFMdKQRGviJPDe0/vaulNtluoeSk6MB8GA1UdIwQY MBaAFJnOVpoUwts3cvIxh85o5lQewASOMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvbWM1V21oVEMyemR5OGpHSHptam1WQjdBQkk0LmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC9mMi9jYzZlOTktNmU1Zi00MDFiLTkxMmQt MTA5NTU0NGM2YzUwLzEvbWM1V21oVEMyemR5OGpHSHptam1WQjdBQkk0Lm1mdDCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC9mMi9jYzZlOTktNmU1Zi00MDFiLTkxMmQtMTA5NTU0NGM2YzUw LzEvbWM1V21oVEMyemR5OGpHSHptam1WQjdBQkk0LmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEATltZppKG vE3qa8/8HedJVDs0ju03odfrZqkK5cL2jgQ6cCyGp50dJtfrlO9ILCvZdNyeAHU8 +BNcO7yI4CbOIkxySITF0AWUcOX0H22IAEd2SxVliI/hdAG4GW6jo9/FcYpfwc99 vIQpCye617Az69TR/d0QgQJMjNMDSc3XKDnuOGeFYh84Oz03LLfcxp0F2yXgVk30 u41lAZikcOPbK9cOs+XDiSWRhAcS5ofAjVm7RQ/l5BUD2GgHH9fxOUlwSh1sWDUx onZL9Q/cNoO+zfxzaG437xk0FHTKg1/QESsuXMZu97SQG1pU1niH0TF5u/Exkcvq rKxVJYc8JH2Omw== -----END CERTIFICATE-----Generated at Sat Aug 23 15:26:55 2025 by rpki-client