$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/09/7ba1b1-5562-4a32-9f5d-14d238527835/1/C047O4QkIliGMULtOhl5LZfLvHQ.mft File: C047O4QkIliGMULtOhl5LZfLvHQ.mft (raw, json) Hash identifier: yWQd7AMLZnWJKdNGhvQaoGz4Lmug/wSTLuqBm4UTeys= Subject key identifier: A4:32:B3:13:82:14:73:7F:67:55:6E:6C:F7:2F:38:C0:6C:DF:D7:AD Authority key identifier: 0B:4E:3B:3B:84:24:22:58:86:31:42:ED:3A:19:79:2D:97:CB:BC:74 Certificate issuer: /CN=0b4e3b3b84242258863142ed3a19792d97cbbc74 Certificate serial: 01983C851553F3A2B8001F57011FDBC8EC99 Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/C047O4QkIliGMULtOhl5LZfLvHQ.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/09/7ba1b1-5562-4a32-9f5d-14d238527835/1/C047O4QkIliGMULtOhl5LZfLvHQ.mft Manifest number: 02CE Signing time: Thu 24 Jul 2025 13:00:11 +0000 Manifest this update: Thu 24 Jul 2025 13:00:11 +0000 Manifest next update: Fri 25 Jul 2025 13:00:11 +0000 Files and hashes: 1: 1-l_gre_pxhYS4_zZwDxZG1Nt_5c.roa (hash: 79+LUQppQGCR1ma6gkDs/MxaDYgg8iUK7GVvWKXvzJ8=) 2: 4EVIucA70gYtRBC_kvd8S_jO4G4.roa (hash: f24fNYbERcDJzGGGVxLcXRg46QfyX7NJWLWSxrMNmcw=) 3: 5jJR8ex_Cu2DpLymyUyPZOMyOkE.roa (hash: xzEHQ5rCOad65DlaTD/0zOgecwAYSd4+GjZ0k61Ou6I=) 4: 6vUhZWGddxVPIIeeH6-Dbc9jpk4.roa (hash: WfzTHJzN03ulxZw9x6atlyLctl8HtDch71VvQgIPbKM=) 5: 6xBMykXleXyosV01BLEJTU6ypG8.roa (hash: ZdidGgqZmV19VuoUDkEoHJw8nogOkry2PBFmQAw+osI=) 6: BPQCE551jGC7AfZxENf1vLcZuQw.roa (hash: b4X/8S2+3tpuUpa3epnbHaVzUEealAaoYFbctbKomoU=) 7: BjqTHtTtBtZx2Y5CozNWD3CEBt0.roa (hash: eW/XcbSH0tDYIAlNaQxhj837cfdUxkfKds65F/54mgM=) 8: C047O4QkIliGMULtOhl5LZfLvHQ.crl (hash: ppNuMVHNEYieFV7XSdJDnX+oHvZRuQ/w7yyiUf1p4Jk=) 9: EpevIGB0DDjGczsoRTQXsDte0Ro.roa (hash: r5oPEcXXSWhhpUr01BCVcDevz3GoCQQqjngEWJqS8MA=) 10: EvZmdpYLd03WERL_L0i0mrtj944.roa (hash: CV2qEuFjtfL/Sdsin89UXRGI8h47pjbkcQWbmiCWOHY=) 11: H49hyQPEQJXxJVi2iR8A2ADQ41U.roa (hash: eqi7i//uHcpOg1OfB0kupkpo9kTQKxZE6a6NNvU+Pyg=) 12: QqRdYAKP11yK_Y5Yoe1GlCLvPIM.roa (hash: B0QgrQfgkvXm7vAQLsl/pTmN0f26n576ETmzI38WdjE=) 13: Tv3eHkTibu1-NKazXj-AMkMj7Sw.roa (hash: lHAqhVPifaQjD9rLTD+uDdEniFd0R32cYJ3zWnuqKHM=) 14: b7g_AfGKRKl1uxe-BoiQM3sl0nw.roa (hash: Zf9ZuQPGxN3TX6S4uzmoIy9WChIwMZZm6ZNHezb6N+U=) 15: bCaBS4aQHjuaa_tTVMTRXq8OR_U.roa (hash: 7H4q9uVHSlMkwQO5xRA3Q4nmZoDkIn1SJmtZoSSXixQ=) 16: gTeW8KgwMI0CF5LdugHx9i_aL9A.roa (hash: OXWLHtmhLlBTeQ4ewU+HqOIA8XwCstLgb3pc2bSVDXk=) 17: i9pP0UdC60SIkPjAyVnRvnkLQpI.roa (hash: DCLA36TFrAK5MuagUyc5DT4JGQhrH1BUGZII4pznSfI=) 18: lzUrfdjvi4X0daNPvReXYlaxfUs.roa (hash: mmPPsLggwrEErlARtsPqmojwc7jNfBJKDlKr0vM/KnA=) 19: mrriTsp_r84VvXOZ9vwCDiafNfA.roa (hash: 237ftlrT6P/fqAsRok2Wq3N6bqs/PXVVGhXC7gyjJzY=) 20: qa2CW4uODzDkm2CmPACzVMfywlo.roa (hash: hm7X8GWW08mhXHAmgZF26ZoPtjwf8VScQbQBIGqBTN0=) 21: sbkxRvSrfQGNdpGANqUogURHroU.roa (hash: GVO8i7AC/aFii+I0dhy+QGbxHH4AqRNBV/o41DJJYK4=) 22: uuTcIhmMVylXKoo0d8I18SaHjWU.roa (hash: a8ZKg1ASt06tQrhILg7SaB6+2r8ufbJSPrndEQoQ7X4=) Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/09/7ba1b1-5562-4a32-9f5d-14d238527835/1/C047O4QkIliGMULtOhl5LZfLvHQ.crl rsync://rpki.ripe.net/repository/DEFAULT/09/7ba1b1-5562-4a32-9f5d-14d238527835/1/C047O4QkIliGMULtOhl5LZfLvHQ.mft rsync://rpki.ripe.net/repository/DEFAULT/C047O4QkIliGMULtOhl5LZfLvHQ.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Fri 25 Jul 2025 13:00:11 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:98:3c:85:15:53:f3:a2:b8:00:1f:57:01:1f:db:c8:ec:99 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=0b4e3b3b84242258863142ed3a19792d97cbbc74 Validity Not Before: Jul 24 13:00:11 2025 GMT Not After : Jul 25 13:00:11 2025 GMT Subject: CN=a432b3138214737f67556e6cf72f38c06cdfd7ad Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:c0:e1:c0:91:3b:30:fa:5f:6d:da:66:08:3c:01: b3:e7:7d:3b:ea:61:b1:60:a8:94:23:1f:54:2b:d5: 99:53:51:02:fc:bf:a7:3f:0f:ca:30:90:fd:d9:9d: 7c:41:82:32:a5:b1:e3:1a:2e:f8:1c:0d:93:e0:0f: c7:3d:e7:8c:41:9c:38:8d:21:d5:62:d7:a7:a4:e2: b8:31:25:0b:4b:5c:c2:0e:05:c0:79:18:06:69:65: 8c:45:d3:1c:96:93:b0:7f:eb:b0:c5:ea:17:dc:33: ab:5f:73:54:e9:f0:45:08:e3:93:bd:8f:c9:e0:7c: f8:21:05:37:70:91:56:b0:06:8f:e0:6e:7b:45:4e: 86:7e:c5:06:38:18:f5:27:51:1b:93:3e:64:aa:31: ed:d4:16:a3:c7:a0:d7:2a:07:52:b4:18:70:dc:4c: 9c:40:23:b1:32:e9:be:c8:c9:aa:73:59:66:7f:5f: a0:ac:f6:1c:2a:15:59:bb:71:a6:fb:3b:1e:9d:11: 4b:5c:74:e5:8d:ca:a9:a4:d9:e9:c9:9e:e6:65:bb: cb:fe:50:2d:45:fb:f4:e2:0e:5d:3b:7d:52:cb:3a: 26:82:13:bc:c6:2b:c2:bc:e7:58:6c:f0:fb:52:e6: 75:86:12:6f:1d:86:d9:2b:8f:01:26:d0:c3:61:d3: 7a:83 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: A4:32:B3:13:82:14:73:7F:67:55:6E:6C:F7:2F:38:C0:6C:DF:D7:AD X509v3 Authority Key Identifier: keyid:0B:4E:3B:3B:84:24:22:58:86:31:42:ED:3A:19:79:2D:97:CB:BC:74 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/C047O4QkIliGMULtOhl5LZfLvHQ.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/09/7ba1b1-5562-4a32-9f5d-14d238527835/1/C047O4QkIliGMULtOhl5LZfLvHQ.mft X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/09/7ba1b1-5562-4a32-9f5d-14d238527835/1/C047O4QkIliGMULtOhl5LZfLvHQ.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 01:7d:ca:c2:9e:1c:00:76:55:e2:3d:56:a4:3b:8b:7d:44:c7: 9c:b8:5b:da:e6:c3:c3:8c:68:2b:c5:90:37:a8:39:67:8b:94: 7f:9a:15:5a:d7:68:22:87:13:6b:c0:24:8c:69:ef:f7:e4:12: ef:cf:1c:f2:8e:d3:90:82:25:f1:ff:3c:56:b0:d2:38:35:7d: 6a:ac:32:9f:cf:e5:ed:1c:4e:97:d3:e4:bd:41:f8:d8:5c:99: 7b:be:5d:85:b8:54:7b:b6:f0:5a:ea:dd:ee:56:dc:d0:50:70: ef:96:d9:0c:41:8e:ce:29:ab:c5:05:63:ce:a1:7f:c6:c8:76: a0:2c:e9:6f:97:1a:39:2b:6a:33:5a:6b:fc:2e:0a:97:7a:cb: 89:61:1e:81:8e:b3:68:a6:3e:26:f6:e8:db:f6:63:ad:0c:63: c7:b9:62:26:09:72:d5:68:0a:7e:06:2d:e5:4f:58:4a:9b:9f: 25:63:66:b9:ec:ed:25:b0:fc:22:41:1d:eb:2c:82:db:6c:39: 5f:8e:93:58:f7:20:ae:02:87:f1:57:c3:7b:ea:85:98:30:8e: af:8c:40:f4:47:0f:b4:07:6e:eb:ea:9e:6f:fc:00:92:d6:ea: 91:32:7a:a1:c2:a5:60:09:5c:b0:62:49:45:63:75:f7:1f:95: 55:8e:15:05 -----BEGIN CERTIFICATE----- MIIFFjCCA/6gAwIBAgISAZg8hRVT86K4AB9XAR/byOyZMA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKDBiNGUzYjNiODQyNDIyNTg4NjMxNDJlZDNhMTk3OTJkOTdj YmJjNzQwHhcNMjUwNzI0MTMwMDExWhcNMjUwNzI1MTMwMDExWjAzMTEwLwYDVQQD EyhhNDMyYjMxMzgyMTQ3MzdmNjc1NTZlNmNmNzJmMzhjMDZjZGZkN2FkMIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAwOHAkTsw+l9t2mYIPAGz53076mGx YKiUIx9UK9WZU1EC/L+nPw/KMJD92Z18QYIypbHjGi74HA2T4A/HPeeMQZw4jSHV YtenpOK4MSULS1zCDgXAeRgGaWWMRdMclpOwf+uwxeoX3DOrX3NU6fBFCOOTvY/J 4Hz4IQU3cJFWsAaP4G57RU6GfsUGOBj1J1Ebkz5kqjHt1Bajx6DXKgdStBhw3Eyc QCOxMum+yMmqc1lmf1+grPYcKhVZu3Gm+zsenRFLXHTljcqppNnpyZ7mZbvL/lAt Rfv04g5dO31SyzomghO8xivCvOdYbPD7UuZ1hhJvHYbZK48BJtDDYdN6gwIDAQAB o4ICIjCCAh4wHQYDVR0OBBYEFKQysxOCFHN/Z1VubPcvOMBs39etMB8GA1UdIwQY MBaAFAtOOzuEJCJYhjFC7ToZeS2Xy7x0MA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvQzA0N080UWtJbGlHTVVMdE9obDVMWmZMdkhRLmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC8wOS83YmExYjEtNTU2Mi00YTMyLTlmNWQt MTRkMjM4NTI3ODM1LzEvQzA0N080UWtJbGlHTVVMdE9obDVMWmZMdkhRLm1mdDCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC8wOS83YmExYjEtNTU2Mi00YTMyLTlmNWQtMTRkMjM4NTI3ODM1 LzEvQzA0N080UWtJbGlHTVVMdE9obDVMWmZMdkhRLmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAAX3Kwp4c AHZV4j1WpDuLfUTHnLhb2ubDw4xoK8WQN6g5Z4uUf5oVWtdoIocTa8AkjGnv9+QS 788c8o7TkIIl8f88VrDSODV9aqwyn8/l7RxOl9PkvUH42FyZe75dhbhUe7bwWurd 7lbc0FBw75bZDEGOzimrxQVjzqF/xsh2oCzpb5caOStqM1pr/C4Kl3rLiWEegY6z aKY+Jvbo2/ZjrQxjx7liJgly1WgKfgYt5U9YSpufJWNmueztJbD8IkEd6yyC22w5 X46TWPcgrgKH8VfDe+qFmDCOr4xA9EcPtAdu6+qeb/wAktbqkTJ6ocKlYAlcsGJJ RWN19x+VVY4VBQ== -----END CERTIFICATE-----Generated at Thu Jul 24 17:26:23 2025 by rpki-client