$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/fd/5786ab-067e-440c-b276-1b06d1c704c1/1/09VvB74YTLpS9v3ASegRTSYWwyo.mft File: 09VvB74YTLpS9v3ASegRTSYWwyo.mft (raw, json) Hash identifier: LEqmpbP7as6GaXzre2ZVlwH0c7Y5AEDUaqHlpeQcdeI= Subject key identifier: D6:D0:C6:83:76:42:FD:54:56:25:FD:E9:0F:A5:93:FC:60:26:3A:84 Authority key identifier: D3:D5:6F:07:BE:18:4C:BA:52:F6:FD:C0:49:E8:11:4D:26:16:C3:2A Certificate issuer: /CN=d3d56f07be184cba52f6fdc049e8114d2616c32a Certificate serial: 0198D73BC0270F91A06D51976FDDEF6310E5 Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/09VvB74YTLpS9v3ASegRTSYWwyo.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/fd/5786ab-067e-440c-b276-1b06d1c704c1/1/09VvB74YTLpS9v3ASegRTSYWwyo.mft Manifest number: 1652 Signing time: Sat 23 Aug 2025 14:01:13 +0000 Manifest this update: Sat 23 Aug 2025 14:01:13 +0000 Manifest next update: Sun 24 Aug 2025 14:01:13 +0000 Files and hashes: 1: 09VvB74YTLpS9v3ASegRTSYWwyo.crl (hash: cltnSeIlKN9tF7ajPEIqGgJkWGvAiTYeHeRj93J8yNk=) 2: 4c68WXa89S9GaEZ3betWtfOynEI.roa (hash: fVAp1PUxEqPq1PXw46ujCE/Pw+4uzGlNeTIsndTtQ4g=) 3: 7kfcYNNoB5VB3-_80xlsWN3weyk.roa (hash: 1wJop1mQ6qBQDepGqT5ANO4tx0iRC5GqiIyWQqeZxiY=) 4: Bs0O01jXAqadcOrA_652_6vgquk.roa (hash: hEdFCfeLg1JToe8V2oyy+hkNpnht00+5NYTQRgNDOq8=) 5: KidN7PJCXFwqwby4fVpHaeAhpFY.roa (hash: rFMoYmqrD8lR5TajeeUqUicyuRT28K2jKIN4IFZHnsU=) 6: NYzishm2ogJfRyzy8nT6kXYmzuI.roa (hash: LaEEfSMmtUB1mBqYxGiYK3KhOkpxYURIQoeWj6Zjkz4=) 7: RIPl0ZcnNzCRnoJoRMQdo7FatJo.roa (hash: V51bdAbDUbCCdG4ap1IngeKOzNBFdbTp51TPAvBkqrE=) 8: eKmkaw2M8tueZ_tzxfDI9F6CNcc.roa (hash: fg34CUb41rhu+065E2VZ9qaIx2X2iqQ2jxGQO4GwQe4=) 9: pq2QS5SBDS3pAxrbz1jylBKYb1c.roa (hash: kdt9b8eHxviCcBXo3alD6ToqY7JvOLmYwFiRPu6twu8=) 10: tpxzfABwHA4uTKjODgtKlvT10t8.roa (hash: /uiIY+OMfjw8MyTKZlNYbS4i9kHVxO0uNCEe4Op3YPE=) 11: xz6DVtU3-Ra9kwVQS1hT5B1NgIk.roa (hash: L6obqobAUv8Kf3w8kISkegiNvXZC3M7YbdVJnQVDNRA=) Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/fd/5786ab-067e-440c-b276-1b06d1c704c1/1/09VvB74YTLpS9v3ASegRTSYWwyo.crl rsync://rpki.ripe.net/repository/DEFAULT/fd/5786ab-067e-440c-b276-1b06d1c704c1/1/09VvB74YTLpS9v3ASegRTSYWwyo.mft rsync://rpki.ripe.net/repository/DEFAULT/09VvB74YTLpS9v3ASegRTSYWwyo.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Sun 24 Aug 2025 14:00:04 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:98:d7:3b:c0:27:0f:91:a0:6d:51:97:6f:dd:ef:63:10:e5 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=d3d56f07be184cba52f6fdc049e8114d2616c32a Validity Not Before: Aug 23 14:01:13 2025 GMT Not After : Aug 24 14:01:13 2025 GMT Subject: CN=d6d0c6837642fd545625fde90fa593fc60263a84 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:b0:80:e6:3e:a1:fe:3e:c7:c0:1b:8a:9c:c1:17: a3:0b:d9:c7:01:86:64:8a:44:0d:51:19:70:d6:47: 9b:f4:2d:36:6c:7a:d5:56:ba:bb:59:fa:88:17:77: f1:21:58:d8:98:69:90:f8:46:a3:42:73:59:13:b0: d3:df:1e:2c:ed:98:19:6d:b6:28:bc:2c:4c:a1:3f: 69:4a:2b:d7:32:1f:38:49:fa:cd:83:8f:b1:7c:63: 76:f7:03:5c:46:e1:41:1e:55:9c:bb:f2:30:6c:fa: 39:88:de:ef:46:6b:d5:e7:9c:60:19:6f:19:f3:fe: b2:c1:a7:a0:24:60:93:af:d4:a3:17:db:73:52:fb: 26:40:94:7d:76:96:29:a3:f9:82:4b:06:19:1c:19: 73:f2:68:fe:ca:29:72:17:bb:a7:5c:77:16:08:b1: 35:6e:ea:80:fe:08:57:45:08:e4:38:19:6e:5e:37: 03:4e:d3:83:91:c8:cc:21:ae:6a:eb:cf:73:43:95: 22:1b:2e:1e:20:9b:40:fa:99:9f:74:75:1b:16:95: 7d:c9:aa:70:7a:96:b8:14:98:41:9f:71:b7:83:28: bb:61:e8:84:1b:7a:4a:29:d5:30:1e:28:47:9e:cd: ae:1f:51:18:65:bf:0d:09:cc:74:a0:e3:83:6c:d3: 6c:ef Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: D6:D0:C6:83:76:42:FD:54:56:25:FD:E9:0F:A5:93:FC:60:26:3A:84 X509v3 Authority Key Identifier: keyid:D3:D5:6F:07:BE:18:4C:BA:52:F6:FD:C0:49:E8:11:4D:26:16:C3:2A X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/09VvB74YTLpS9v3ASegRTSYWwyo.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/fd/5786ab-067e-440c-b276-1b06d1c704c1/1/09VvB74YTLpS9v3ASegRTSYWwyo.mft X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/fd/5786ab-067e-440c-b276-1b06d1c704c1/1/09VvB74YTLpS9v3ASegRTSYWwyo.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 01:62:55:3f:92:87:e9:4e:69:f7:ad:65:da:3e:b0:50:dd:9e: ed:e0:60:68:09:d6:b0:79:31:9c:a7:c9:b4:b8:3d:c8:34:06: 49:c4:de:00:41:92:68:10:e7:fa:d5:75:bc:8a:19:e0:bb:58: 0e:bd:a4:dd:5d:6c:f3:da:20:77:d7:f9:2d:fe:df:74:76:bb: eb:ce:18:0b:93:c0:e0:bc:56:2c:76:7c:9a:1b:e0:7e:be:7f: b3:2f:fe:2c:96:22:bb:f8:bb:41:68:2a:57:f5:83:e1:83:5a: f7:05:b2:ef:08:cd:4b:76:d4:ab:cb:16:c3:a0:97:f8:6e:a1: e4:9b:26:90:4c:a0:89:63:66:c8:a2:ca:a7:78:37:aa:c7:a2: b1:c4:e7:7d:f9:22:62:8f:9b:b9:c3:86:41:a0:6d:5f:38:7a: bb:f3:f0:67:d6:53:c6:ab:45:4a:89:84:2e:3b:07:df:fd:6c: d6:c9:a4:a4:7e:7f:5d:d8:81:80:df:cc:e0:15:ec:5e:37:95: 16:c4:7f:a7:6a:11:59:16:66:9d:54:97:ec:12:95:ed:51:2c: d9:ee:31:88:d9:c4:27:6e:10:08:5f:ae:28:9b:8b:f5:a2:8f: 22:c0:00:93:78:72:9a:f2:f1:15:3e:8e:bf:0b:29:06:f3:64: a3:52:7c:f5 -----BEGIN CERTIFICATE----- MIIFFjCCA/6gAwIBAgISAZjXO8AnD5GgbVGXb93vYxDlMA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKGQzZDU2ZjA3YmUxODRjYmE1MmY2ZmRjMDQ5ZTgxMTRkMjYx NmMzMmEwHhcNMjUwODIzMTQwMTEzWhcNMjUwODI0MTQwMTEzWjAzMTEwLwYDVQQD EyhkNmQwYzY4Mzc2NDJmZDU0NTYyNWZkZTkwZmE1OTNmYzYwMjYzYTg0MIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAsIDmPqH+PsfAG4qcwRejC9nHAYZk ikQNURlw1keb9C02bHrVVrq7WfqIF3fxIVjYmGmQ+EajQnNZE7DT3x4s7ZgZbbYo vCxMoT9pSivXMh84SfrNg4+xfGN29wNcRuFBHlWcu/IwbPo5iN7vRmvV55xgGW8Z 8/6ywaegJGCTr9SjF9tzUvsmQJR9dpYpo/mCSwYZHBlz8mj+yilyF7unXHcWCLE1 buqA/ghXRQjkOBluXjcDTtODkcjMIa5q689zQ5UiGy4eIJtA+pmfdHUbFpV9yapw epa4FJhBn3G3gyi7YeiEG3pKKdUwHihHns2uH1EYZb8NCcx0oOODbNNs7wIDAQAB o4ICIjCCAh4wHQYDVR0OBBYEFNbQxoN2Qv1UViX96Q+lk/xgJjqEMB8GA1UdIwQY MBaAFNPVbwe+GEy6Uvb9wEnoEU0mFsMqMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvMDlWdkI3NFlUTHBTOXYzQVNlZ1JUU1lXd3lvLmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC9mZC81Nzg2YWItMDY3ZS00NDBjLWIyNzYt MWIwNmQxYzcwNGMxLzEvMDlWdkI3NFlUTHBTOXYzQVNlZ1JUU1lXd3lvLm1mdDCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC9mZC81Nzg2YWItMDY3ZS00NDBjLWIyNzYtMWIwNmQxYzcwNGMx LzEvMDlWdkI3NFlUTHBTOXYzQVNlZ1JUU1lXd3lvLmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAAWJVP5KH 6U5p961l2j6wUN2e7eBgaAnWsHkxnKfJtLg9yDQGScTeAEGSaBDn+tV1vIoZ4LtY Dr2k3V1s89ogd9f5Lf7fdHa7684YC5PA4LxWLHZ8mhvgfr5/sy/+LJYiu/i7QWgq V/WD4YNa9wWy7wjNS3bUq8sWw6CX+G6h5JsmkEygiWNmyKLKp3g3qseiscTnffki Yo+bucOGQaBtXzh6u/PwZ9ZTxqtFSomELjsH3/1s1smkpH5/XdiBgN/M4BXsXjeV FsR/p2oRWRZmnVSX7BKV7VEs2e4xiNnEJ24QCF+uKJuL9aKPIsAAk3hymvLxFT6O vwspBvNko1J89Q== -----END CERTIFICATE-----Generated at Sat Aug 23 20:20:47 2025 by rpki-client