$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/0d/dd8096-14cc-488d-9257-c515f354cc5a/1/rQ2kO0pdPbeLo_d05bMbdwNyAtU.mft File: rQ2kO0pdPbeLo_d05bMbdwNyAtU.mft (raw, json) Hash identifier: Wai8XgfD/UC4Gv/n8vSS52OFeIO1QPRXtu4hvk9yXB4= Subject key identifier: 26:65:15:BB:ED:58:86:65:60:F9:68:F7:34:8D:CA:59:79:25:80:8A Authority key identifier: AD:0D:A4:3B:4A:5D:3D:B7:8B:A3:F7:74:E5:B3:1B:77:03:72:02:D5 Certificate issuer: /CN=ad0da43b4a5d3db78ba3f774e5b31b77037202d5 Certificate serial: 0198345E644E746FE5511333013D496B677B Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/rQ2kO0pdPbeLo_d05bMbdwNyAtU.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/0d/dd8096-14cc-488d-9257-c515f354cc5a/1/rQ2kO0pdPbeLo_d05bMbdwNyAtU.mft Manifest number: 163A Signing time: Tue 22 Jul 2025 23:00:57 +0000 Manifest this update: Tue 22 Jul 2025 23:00:57 +0000 Manifest next update: Wed 23 Jul 2025 23:00:57 +0000 Files and hashes: 1: 0SyYaQgLQzTmHyjwALNgjgW6Ips.roa (hash: 9FZRGxKEG0jtfYGiry8IM0OKO6/JFkO8TxODVgljdw8=) 2: 14T-yR595pYQLnI4P4fbXUmbkNI.roa (hash: ujAl/ku+dkQ5mGeO+VIy0fpmzvNm5EBe8cbs1OH3tig=) 3: 1oM3GP4XRi0mqDBcN0k0C4RTdHY.roa (hash: Eqko1gSCAK/Ec5hGsjBzpPB0Hmmto77uxcqKM6nkuos=) 4: 4rBl4Xgj-eyO-Qb6KkYRdP_q3yA.roa (hash: 9Fg4JBY24DsNxM7h9nmxlQnxm85kk0BWdXCDra924l8=) 5: ArcVcNNgrGVWzJ0VKCeDksHAc6Y.roa (hash: CQcfIUe0kSL5Ui9W6KhUk7OwPb15iBgnmWMwBibSiM8=) 6: D-_QiVeAYymMyrqyEwwxZVlJ77w.roa (hash: pLHDIfQfn00HxVAd67SY9GUFCYPJH9fT0t4z495xhcU=) 7: I49sO32imbdn9nfJ0l-il2Ef_jY.roa (hash: k2Ksa8ZIkYwAdo7qnIBXutPiCFJfdjd5EjsrD8efaro=) 8: PQ4JRK_v8Rb4S6Y1Hjjg1mh8-RM.roa (hash: 6S6SDi+NoevpWtxjp+Phs+mUreAi/RCvfLId1bbLsWc=) 9: SHESx2HqUfWZxboQ6jP2hImYKmU.roa (hash: OlCdziBdwRc0FY5ejIFVQ8Nt867ISEKKLNxKfPnLzFA=) 10: TevPA31zpqIvq6GeQSDxtNa30UQ.roa (hash: 2nDbpMbvjKPaiiXiHqb4sCzw1FXoCOAaM9XlGLGbhC8=) 11: U2a4Mi5anG6MoVx-kSkOlCHuZ9U.roa (hash: WzVg8UcZ00h0mbpXiGBDaneFB3IZyzn0LFRbQNJ9OXc=) 12: UU4qmywXJeD0s-bEtA06YqQJbXY.roa (hash: U8vbKeUDnyxjI4tldoiMN64co7xQZg9nWw+wDHbmz3c=) 13: bHfPn3msgwx5FPQ-Adt7HpQNCIk.roa (hash: mn8L9NM8fYmycQe3GG9bUyJmLWRnJsF0fPb8aD5LaTM=) 14: bicuo27VbekDKZ2baxGyIAeBOBw.roa (hash: SWEpCpnN+xzcUkxLs6Bt4xTFqOqzIoS1IpAm8o8Z7uw=) 15: cbX3FwOgi9rS1ENe_k5BLCxVdg4.roa (hash: 35j9cePlwM12en+EIoj2uwLnq2TReRAiO2SX/9vwgDk=) 16: icTWsoKn_xk3KExZZn417x-Qv84.roa (hash: o9OMiruJYKHV5Ad+C6iuA4/zkZ1aBjsbg8MEUFVbq0o=) 17: nwRRU278nZ-OoZkxunLEdDGvAcI.roa (hash: XtojZB9yoPUFiPBHYDNCJYd8iy1TyLCfmu2Ry8BmvwU=) 18: pTp6RUrUCMxAVwwEyObJoI9FgUo.roa (hash: 31GS9EncPmPzR2DkvO+/C4bnToRE3RwTxUOXXgxEo7c=) 19: rQ2kO0pdPbeLo_d05bMbdwNyAtU.crl (hash: zFk5nT7ZM/n7y76VD8cfk/4VJ76Ek5eDiiCYqmf4DE8=) 20: xZHK8sMXJRR9tFEPi8Dz0m2XwJE.roa (hash: P4VjA7AD0Rq8qJwX9hUh9U04YYNDoPlLqjbXRLiEoic=) Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/0d/dd8096-14cc-488d-9257-c515f354cc5a/1/rQ2kO0pdPbeLo_d05bMbdwNyAtU.crl rsync://rpki.ripe.net/repository/DEFAULT/0d/dd8096-14cc-488d-9257-c515f354cc5a/1/rQ2kO0pdPbeLo_d05bMbdwNyAtU.mft rsync://rpki.ripe.net/repository/DEFAULT/rQ2kO0pdPbeLo_d05bMbdwNyAtU.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Wed 23 Jul 2025 23:00:57 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:98:34:5e:64:4e:74:6f:e5:51:13:33:01:3d:49:6b:67:7b Signature Algorithm: sha256WithRSAEncryption Issuer: CN=ad0da43b4a5d3db78ba3f774e5b31b77037202d5 Validity Not Before: Jul 22 23:00:57 2025 GMT Not After : Jul 23 23:00:57 2025 GMT Subject: CN=266515bbed58866560f968f7348dca597925808a Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:dd:a3:2d:ec:ac:e6:b7:4e:2f:c2:2f:5c:b6:e1: 54:8e:1e:fd:c7:ac:26:9d:53:d2:9d:cf:f5:54:81: 42:e5:ba:11:68:26:8f:b2:23:1c:38:5e:84:e3:e5: fe:6e:8d:3e:06:c3:cb:7d:d8:86:bb:d5:05:a1:ee: b2:af:4b:8e:0f:75:75:90:06:1b:d6:c1:2f:bb:0d: 85:d0:78:bf:4a:d4:ec:0f:38:48:3f:f7:34:66:11: 49:27:5a:dc:fa:bf:3e:90:bb:9f:78:8e:40:34:77: c5:d4:f1:54:3b:00:70:fb:7a:fc:33:a5:c8:6e:cd: ef:0b:bd:75:22:29:b0:c9:82:18:2d:f7:bc:62:a8: 51:91:1d:17:a1:ca:95:a1:69:22:e0:c7:fd:ae:41: 8e:88:d9:fe:c8:46:d9:46:46:21:89:12:fc:6c:87: ca:b0:c4:6d:ec:e0:14:d9:30:ad:a8:31:de:e1:86: 4b:75:cd:4a:a4:c5:3e:fd:ab:40:b3:47:7c:3a:fc: 31:65:9a:86:22:9b:09:b9:48:91:27:3b:4c:6f:4b: c0:f9:79:cf:79:7d:1c:3a:b6:27:65:86:54:11:ed: cf:b1:0f:3e:62:30:2e:35:9f:85:a3:7e:d0:58:2a: 4e:c6:95:28:38:6a:31:81:9a:f0:df:bd:1c:d6:cb: ae:8d Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 26:65:15:BB:ED:58:86:65:60:F9:68:F7:34:8D:CA:59:79:25:80:8A X509v3 Authority Key Identifier: keyid:AD:0D:A4:3B:4A:5D:3D:B7:8B:A3:F7:74:E5:B3:1B:77:03:72:02:D5 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/rQ2kO0pdPbeLo_d05bMbdwNyAtU.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/0d/dd8096-14cc-488d-9257-c515f354cc5a/1/rQ2kO0pdPbeLo_d05bMbdwNyAtU.mft X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/0d/dd8096-14cc-488d-9257-c515f354cc5a/1/rQ2kO0pdPbeLo_d05bMbdwNyAtU.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 36:e9:bb:72:3a:06:cc:cf:25:44:e4:a8:27:96:49:dd:c3:09: 49:ee:fa:5e:82:ef:89:c9:b8:d7:df:b0:2c:76:73:d9:ae:d1: cc:11:85:13:11:ef:01:ad:f5:c4:20:88:60:be:f3:23:01:3a: 56:14:9e:33:62:70:da:21:95:e0:67:9e:81:2c:da:77:cf:0c: 2c:b8:57:ed:ce:d0:15:6b:47:a4:11:33:ae:b8:fe:9c:9d:62: 2b:44:cf:b9:1c:3a:c1:39:f6:18:03:d9:c7:1c:12:33:2c:fa: c8:89:ed:1f:fb:f2:7a:89:65:c4:1d:71:96:78:9e:06:b8:07: 86:ed:58:ef:72:fe:9b:38:55:2f:af:5c:09:fc:68:1b:6a:55: a3:94:96:8a:f7:e1:f4:d5:54:25:5d:5a:18:67:54:07:9a:8e: 0c:e5:28:86:ba:03:62:21:e2:fa:20:e2:53:16:26:99:b1:52: 5b:24:bf:e6:a2:17:3c:96:a9:5f:0c:22:a3:ab:e8:7d:84:81: 71:c7:15:70:7d:12:77:1a:fb:f3:c1:d3:0e:eb:e3:11:73:0b: d4:ea:f3:7a:cc:7f:e2:94:e4:31:88:86:f6:56:37:da:59:70: fe:05:5c:4c:f2:1d:82:e8:11:1d:ce:fa:bf:7d:9f:98:1f:04: 2d:15:02:05 -----BEGIN CERTIFICATE----- MIIFFjCCA/6gAwIBAgISAZg0XmROdG/lURMzAT1Ja2d7MA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKGFkMGRhNDNiNGE1ZDNkYjc4YmEzZjc3NGU1YjMxYjc3MDM3 MjAyZDUwHhcNMjUwNzIyMjMwMDU3WhcNMjUwNzIzMjMwMDU3WjAzMTEwLwYDVQQD EygyNjY1MTViYmVkNTg4NjY1NjBmOTY4ZjczNDhkY2E1OTc5MjU4MDhhMIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEA3aMt7Kzmt04vwi9ctuFUjh79x6wm nVPSnc/1VIFC5boRaCaPsiMcOF6E4+X+bo0+BsPLfdiGu9UFoe6yr0uOD3V1kAYb 1sEvuw2F0Hi/StTsDzhIP/c0ZhFJJ1rc+r8+kLufeI5ANHfF1PFUOwBw+3r8M6XI bs3vC711IimwyYIYLfe8YqhRkR0XocqVoWki4Mf9rkGOiNn+yEbZRkYhiRL8bIfK sMRt7OAU2TCtqDHe4YZLdc1KpMU+/atAs0d8OvwxZZqGIpsJuUiRJztMb0vA+XnP eX0cOrYnZYZUEe3PsQ8+YjAuNZ+Fo37QWCpOxpUoOGoxgZrw370c1suujQIDAQAB o4ICIjCCAh4wHQYDVR0OBBYEFCZlFbvtWIZlYPlo9zSNyll5JYCKMB8GA1UdIwQY MBaAFK0NpDtKXT23i6P3dOWzG3cDcgLVMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvclEya08wcGRQYmVMb19kMDViTWJkd055QXRVLmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC8wZC9kZDgwOTYtMTRjYy00ODhkLTkyNTct YzUxNWYzNTRjYzVhLzEvclEya08wcGRQYmVMb19kMDViTWJkd055QXRVLm1mdDCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC8wZC9kZDgwOTYtMTRjYy00ODhkLTkyNTctYzUxNWYzNTRjYzVh LzEvclEya08wcGRQYmVMb19kMDViTWJkd055QXRVLmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEANum7cjoG zM8lROSoJ5ZJ3cMJSe76XoLvicm419+wLHZz2a7RzBGFExHvAa31xCCIYL7zIwE6 VhSeM2Jw2iGV4GeegSzad88MLLhX7c7QFWtHpBEzrrj+nJ1iK0TPuRw6wTn2GAPZ xxwSMyz6yIntH/vyeollxB1xlnieBrgHhu1Y73L+mzhVL69cCfxoG2pVo5SWivfh 9NVUJV1aGGdUB5qODOUohroDYiHi+iDiUxYmmbFSWyS/5qIXPJapXwwio6vofYSB cccVcH0Sdxr788HTDuvjEXML1Orzesx/4pTkMYiG9lY32llw/gVcTPIdgugRHc76 v32fmB8ELRUCBQ== -----END CERTIFICATE-----Generated at Wed Jul 23 08:07:34 2025 by rpki-client