$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/fd/fda382-4257-41c3-8ec6-27fbc99ea3c6/1/T7K7e61Q8ZIYEKAo547dZfgfan0.mft File: T7K7e61Q8ZIYEKAo547dZfgfan0.mft (raw, json) Hash identifier: kVQ2TiHfV7UNc2SpFzyqDQS4y091GQLVVSxR7h/Xgho= Subject key identifier: C3:A5:A8:50:4A:BE:79:19:A6:9C:E0:6D:94:27:4C:7D:3F:8B:2E:83 Authority key identifier: 4F:B2:BB:7B:AD:50:F1:92:18:10:A0:28:E7:8E:DD:65:F8:1F:6A:7D Certificate issuer: /CN=4fb2bb7bad50f1921810a028e78edd65f81f6a7d Certificate serial: 0198D4736C82EC4E698A3F8313BCDE92A2B3 Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/T7K7e61Q8ZIYEKAo547dZfgfan0.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/fd/fda382-4257-41c3-8ec6-27fbc99ea3c6/1/T7K7e61Q8ZIYEKAo547dZfgfan0.mft Manifest number: 1652 Signing time: Sat 23 Aug 2025 01:03:10 +0000 Manifest this update: Sat 23 Aug 2025 01:03:10 +0000 Manifest next update: Sun 24 Aug 2025 01:03:10 +0000 Files and hashes: 1: 0t9k3VKpg5XpD7MVkMNQX_l1tfc.roa (hash: BzUj07EejYyyMT4Im9XK7eLGF3C5NwrA/MzbT6j9keY=) 2: 1-Z-EbEbGe8yxK4SqLWDT6Ei8Xlk.roa (hash: bPXgwf4I2BdmZ9+4bAlYkkYHbKJWbKtWdjpO/HrVdSE=) 3: 94-CfRKJcsd-Ydd4FDNQKX0Zp3E.roa (hash: T/WAoLxo0PnxVr7nnlx3pomYG3O8lrRy6KTbycXayvo=) 4: B45XvbozhNWjXkQPI-m-mjKZzQY.roa (hash: De0OPO+1rvRKuUyNflE2BB3lX6yIPfgqlTtFfQgcSF4=) 5: G1_7-l6SOhcMGwm4Q4QRU0G0dg4.roa (hash: QXiiZ3VfyX8LoKEFp1jr8ZJ1hSMXw8WJGVPoXN5t20w=) 6: L7IG9Ln6m_zfp5UQKVs9myh5Dc0.roa (hash: jvI7jkzEKQADjdVqEl4h9ucF4+e+Qcpdc9H60hR13Xg=) 7: OdvTtHevTUmaiwlyF527qNO0goI.roa (hash: gUCiyrPmcDrIhpr3CW3AI5xYss+1xZqhcT0JZQL6Dj0=) 8: OognzbRI52-tUVqPrupLJHIhUV4.roa (hash: yDdzqTQld2bKmh7pdXZ3qLlf4D/eksuK9uXSZZ/NG7o=) 9: OryNoX3UGMIcnoUd_MsLiDY7bng.roa (hash: o+SjC06El+Rv9wA0fL1qtJp9DJ4Kq5lIbfs8S2VVaKI=) 10: T7K7e61Q8ZIYEKAo547dZfgfan0.crl (hash: mHNNMA8AOlgbI2HUsOKl2H2ZPMhh3GNb625IpGqYmvY=) 11: TW9ksFbGISrm8bYlqs2ozzpmjos.roa (hash: 0ziWkPMeV4t+G/bAbhTQxZYd+oOXOylZPAVdkzMUOzI=) 12: f4d0pGSSiHub4rrjLgiCoVR8Lcs.roa (hash: B5KcDdQ8zEYWfUf5mVlUALm2ca+VbtrqnIaM9zvKgrI=) 13: oMpMmoQ50JBqv5gfULLlkVZ87kQ.roa (hash: ZaFy/IgwDL83LKh9KTxH1aabJGJHABexBAR3ZVnZnVk=) 14: qGk1e2SSj7a867DIFcXEQy9VRwk.roa (hash: FczogQCjHMZiK1Ux2uZ685nsTVBLAXheYXkPGrZoEcc=) 15: qKcCLtEG432D5WJB88yhMQT2crs.roa (hash: DjjEwdV67kxPopToL5gQtYQLfwXVH8iDrqBq6qd58Es=) Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/fd/fda382-4257-41c3-8ec6-27fbc99ea3c6/1/T7K7e61Q8ZIYEKAo547dZfgfan0.crl rsync://rpki.ripe.net/repository/DEFAULT/fd/fda382-4257-41c3-8ec6-27fbc99ea3c6/1/T7K7e61Q8ZIYEKAo547dZfgfan0.mft rsync://rpki.ripe.net/repository/DEFAULT/T7K7e61Q8ZIYEKAo547dZfgfan0.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Sun 24 Aug 2025 00:37:04 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:98:d4:73:6c:82:ec:4e:69:8a:3f:83:13:bc:de:92:a2:b3 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=4fb2bb7bad50f1921810a028e78edd65f81f6a7d Validity Not Before: Aug 23 01:03:10 2025 GMT Not After : Aug 24 01:03:10 2025 GMT Subject: CN=c3a5a8504abe7919a69ce06d94274c7d3f8b2e83 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:ad:96:ec:69:b9:ec:b7:81:12:d9:28:22:93:ad: 7a:80:68:b8:a5:0f:04:10:dd:80:f9:00:62:06:15: c4:4f:cf:c3:1a:01:50:e5:dd:49:d9:6d:c3:53:af: e3:5e:1c:51:45:41:ae:bb:f7:66:a2:f6:8e:eb:bf: 8a:b7:8c:bf:04:45:b9:ea:74:37:4c:25:6d:17:19: 5e:17:be:e9:39:57:16:dc:36:ff:5d:fd:0a:3f:09: 5e:a3:4e:89:5c:e4:28:79:eb:79:70:cb:22:47:cf: 37:54:9f:07:c6:14:50:cc:17:a3:eb:ed:0b:73:74: 00:7b:21:40:29:31:3f:74:40:25:ad:6f:d3:8f:78: cf:a9:c4:73:a7:e4:28:ce:1d:cf:a9:b5:2c:7d:55: 43:bf:a3:6e:21:08:ff:04:85:84:d0:85:ab:fe:5d: ae:d1:f6:94:43:28:b0:e3:a5:49:b8:74:d1:15:71: 77:3a:9c:15:b3:87:8d:93:9e:e4:99:e6:92:3e:3c: c4:58:54:ca:dd:ba:fa:e5:c9:87:de:ea:67:38:f0: 43:87:60:a4:ac:0e:6a:7c:a8:55:6f:4f:14:4e:4a: 4b:da:2d:61:89:b4:46:ac:a6:b3:2b:99:97:75:3d: b1:21:4f:25:c1:80:e2:b5:18:fd:a7:23:63:43:4d: e2:e3 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: C3:A5:A8:50:4A:BE:79:19:A6:9C:E0:6D:94:27:4C:7D:3F:8B:2E:83 X509v3 Authority Key Identifier: keyid:4F:B2:BB:7B:AD:50:F1:92:18:10:A0:28:E7:8E:DD:65:F8:1F:6A:7D X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/T7K7e61Q8ZIYEKAo547dZfgfan0.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/fd/fda382-4257-41c3-8ec6-27fbc99ea3c6/1/T7K7e61Q8ZIYEKAo547dZfgfan0.mft X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/fd/fda382-4257-41c3-8ec6-27fbc99ea3c6/1/T7K7e61Q8ZIYEKAo547dZfgfan0.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption b2:a0:ef:2c:94:ea:90:e8:ee:d9:76:9d:c2:a4:91:35:80:ea: 2e:8e:e6:05:aa:0e:29:28:da:07:2b:18:b2:16:43:51:9d:07: 22:eb:7e:53:0f:b5:31:03:1c:6f:c3:31:98:97:74:a5:a9:af: 8a:04:a4:8a:cc:47:9c:25:aa:c3:93:c5:ab:0e:1c:fc:91:5b: 30:49:50:9c:ed:b4:87:38:f3:2b:ee:0b:ca:34:d4:e0:48:a8: 88:a9:73:a1:14:4b:8e:26:9f:0e:89:5d:44:da:83:7b:e4:2a: 10:dc:b3:69:09:47:0e:9f:ba:0d:64:c3:d5:18:2d:18:89:c5: e0:9d:f8:75:36:ec:06:46:ae:0b:64:4d:14:63:99:34:d3:48: d1:98:bc:c5:4f:83:8a:a3:31:6a:a8:8e:5f:5e:6b:8f:05:8a: 4b:71:7a:52:ea:e1:03:6a:77:b0:78:81:b2:f6:97:66:cc:e9: 82:a4:cf:a9:25:94:3b:52:97:70:3a:06:04:fd:a2:c2:8f:14: 4a:29:c9:81:b6:d3:30:b3:7d:06:cb:aa:ec:f9:4c:47:85:45: 2e:4c:24:52:44:2d:dc:eb:5c:63:82:70:4d:49:aa:9f:09:a4: 87:5e:f9:fb:ae:72:00:40:a9:5e:34:67:3b:c2:bb:0b:86:53: 4b:c1:45:2c -----BEGIN CERTIFICATE----- MIIFFjCCA/6gAwIBAgISAZjUc2yC7E5pij+DE7zekqKzMA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKDRmYjJiYjdiYWQ1MGYxOTIxODEwYTAyOGU3OGVkZDY1Zjgx ZjZhN2QwHhcNMjUwODIzMDEwMzEwWhcNMjUwODI0MDEwMzEwWjAzMTEwLwYDVQQD EyhjM2E1YTg1MDRhYmU3OTE5YTY5Y2UwNmQ5NDI3NGM3ZDNmOGIyZTgzMIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEArZbsabnst4ES2Sgik616gGi4pQ8E EN2A+QBiBhXET8/DGgFQ5d1J2W3DU6/jXhxRRUGuu/dmovaO67+Kt4y/BEW56nQ3 TCVtFxleF77pOVcW3Db/Xf0KPwleo06JXOQoeet5cMsiR883VJ8HxhRQzBej6+0L c3QAeyFAKTE/dEAlrW/Tj3jPqcRzp+Qozh3PqbUsfVVDv6NuIQj/BIWE0IWr/l2u 0faUQyiw46VJuHTRFXF3OpwVs4eNk57kmeaSPjzEWFTK3br65cmH3upnOPBDh2Ck rA5qfKhVb08UTkpL2i1hibRGrKazK5mXdT2xIU8lwYDitRj9pyNjQ03i4wIDAQAB o4ICIjCCAh4wHQYDVR0OBBYEFMOlqFBKvnkZppzgbZQnTH0/iy6DMB8GA1UdIwQY MBaAFE+yu3utUPGSGBCgKOeO3WX4H2p9MA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvVDdLN2U2MVE4WklZRUtBbzU0N2RaZmdmYW4wLmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC9mZC9mZGEzODItNDI1Ny00MWMzLThlYzYt MjdmYmM5OWVhM2M2LzEvVDdLN2U2MVE4WklZRUtBbzU0N2RaZmdmYW4wLm1mdDCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC9mZC9mZGEzODItNDI1Ny00MWMzLThlYzYtMjdmYmM5OWVhM2M2 LzEvVDdLN2U2MVE4WklZRUtBbzU0N2RaZmdmYW4wLmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAsqDvLJTq kOju2XadwqSRNYDqLo7mBaoOKSjaBysYshZDUZ0HIut+Uw+1MQMcb8MxmJd0pamv igSkisxHnCWqw5PFqw4c/JFbMElQnO20hzjzK+4LyjTU4EioiKlzoRRLjiafDold RNqDe+QqENyzaQlHDp+6DWTD1RgtGInF4J34dTbsBkauC2RNFGOZNNNI0Zi8xU+D iqMxaqiOX15rjwWKS3F6UurhA2p3sHiBsvaXZszpgqTPqSWUO1KXcDoGBP2iwo8U SinJgbbTMLN9Bsuq7PlMR4VFLkwkUkQt3OtcY4JwTUmqnwmkh175+65yAECpXjRn O8K7C4ZTS8FFLA== -----END CERTIFICATE-----Generated at Sat Aug 23 10:19:32 2025 by rpki-client