$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/0e/b05667-e850-4c45-aee3-aded1c469eaf/1/4e-WlKpI2BJ56O3kMHlfJ2jS3VI.mft File: 4e-WlKpI2BJ56O3kMHlfJ2jS3VI.mft (raw, json) Hash identifier: tQmUuu9CfamzBJEJNazHvTMXM2Mv6bA2Ely5ya2mD6g= Subject key identifier: 3F:46:04:1C:1C:86:B6:29:9D:4F:D3:05:9A:45:C2:E4:89:3A:36:2E Authority key identifier: E1:EF:96:94:AA:48:D8:12:79:E8:ED:E4:30:79:5F:27:68:D2:DD:52 Certificate issuer: /CN=e1ef9694aa48d81279e8ede430795f2768d2dd52 Certificate serial: 019839BAEA61A93040A652CDAC07C36C1863 Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/4e-WlKpI2BJ56O3kMHlfJ2jS3VI.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/0e/b05667-e850-4c45-aee3-aded1c469eaf/1/4e-WlKpI2BJ56O3kMHlfJ2jS3VI.mft Manifest number: 1610 Signing time: Thu 24 Jul 2025 00:00:07 +0000 Manifest this update: Thu 24 Jul 2025 00:00:07 +0000 Manifest next update: Fri 25 Jul 2025 00:00:07 +0000 Files and hashes: 1: 1-0URATiYn4nWMHZbWNa1y4LiAcE.roa (hash: qnoIsvmT1NGoh4R21XKrhNbrolncENGMdF/rtoG9oNM=) 2: 4e-WlKpI2BJ56O3kMHlfJ2jS3VI.crl (hash: BXduxXVxNMQq9B4Pn2YN/VuDpXpFJUezC08n0716mmg=) 3: 4u-FrWKWaho_ISyzc5VOsCnPB-Q.roa (hash: YfroGaZGo+3Y5Nuhq7M/QzCuhU+RFQDjKrM1lqbk5uM=) 4: 8d-QnWmEgzJ4Rpdyt7aQY0aM-Bw.roa (hash: 0s45oUU1o2ifddAJ6DTLViE5f0A+VumWP+t1SybvUik=) 5: CkNJTmPQJYQ_MfgWt_qPISpjHfg.roa (hash: qG9Z2rLkFr1Vmea2q1Wmoyhhg6jqa9C65AeyXksg/3U=) 6: FEB62enegK42pklHkojm9vjgl0s.roa (hash: pN0xSy0QFp+Q3GwqmGGo0b2YcH4wi98IeY7EBvCVPM4=) 7: LHEJ8P9xNDxGFTn9ZcZ57mD7xNY.roa (hash: EVWTprH8s6PFuD1lSOWR/aPK95uNZWXobgBHo0J2/Hk=) 8: _03YY1Sj2Mw8TbRIg27y8NVs5gc.roa (hash: 8hmyw8PyKYN4X/jeEdZ5Etu4V01gYWZ543O86aZNZY4=) 9: _yn-31rADEG7zTcXfVb92NptH0Q.roa (hash: Tyq49fvsXK4jK1l1SC866Zxd+HFpg8YBsLVC4Nlc/M8=) 10: iTss4dVuEO8u2zrybey6wjkQ5CM.roa (hash: iS+Pl9gnUh0T0PMsvXCrH+rna0Q4YPkZDZcMC+K1GTQ=) 11: osgJC1j873fUuICkEREfgiPJqL4.roa (hash: zVB8fV5Ug3WHZPkxIRefMnGWpQ+cjsymHV6dUGE8Z54=) 12: vjKyioN5ZLUQGqbv0hjh-k7ZHnI.roa (hash: rxK/AqCNmTQ7FTdlF/qR+joUKZx1vJKUfba0dd+y2Mw=) 13: whqum5btfebJ92EiHlAqEY1dMyI.roa (hash: sd3Z4KpjAwY2NA9vLDkpCk4Gn41kPN8SDpZ7IYPGDjE=) Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/0e/b05667-e850-4c45-aee3-aded1c469eaf/1/4e-WlKpI2BJ56O3kMHlfJ2jS3VI.crl rsync://rpki.ripe.net/repository/DEFAULT/0e/b05667-e850-4c45-aee3-aded1c469eaf/1/4e-WlKpI2BJ56O3kMHlfJ2jS3VI.mft rsync://rpki.ripe.net/repository/DEFAULT/4e-WlKpI2BJ56O3kMHlfJ2jS3VI.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Thu 24 Jul 2025 23:00:04 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:98:39:ba:ea:61:a9:30:40:a6:52:cd:ac:07:c3:6c:18:63 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=e1ef9694aa48d81279e8ede430795f2768d2dd52 Validity Not Before: Jul 24 00:00:07 2025 GMT Not After : Jul 25 00:00:07 2025 GMT Subject: CN=3f46041c1c86b6299d4fd3059a45c2e4893a362e Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:ac:64:7b:08:ff:6e:a8:e1:9a:99:f8:b5:02:8a: 1a:85:32:c3:b4:39:46:b8:ce:97:69:66:37:25:b4: a6:46:f9:c4:d3:6e:a5:77:47:a5:c7:58:28:d7:60: 2d:ec:6b:09:18:d4:55:f9:8e:8e:a5:fa:c8:c7:3f: 2b:95:e4:0a:b7:28:28:6f:35:c8:0f:0e:46:24:c1: a8:d8:38:98:31:8b:b7:46:c9:63:96:a9:42:ab:c0: d4:bf:df:db:2d:c2:c7:9a:91:15:d8:39:15:00:30: a8:48:61:36:82:7b:2b:66:8c:af:de:74:59:61:1e: ac:15:27:dd:f6:e8:6f:34:5d:06:15:f0:08:18:3a: 9f:1d:ff:39:5a:68:f8:bc:73:fe:5b:3b:6e:e0:52: 3f:60:79:61:42:83:0b:ee:81:0b:51:f9:8e:c7:29: ca:1f:3d:aa:89:a3:27:12:e2:d3:db:84:ab:01:43: e3:fd:2f:3b:b5:41:b9:57:76:74:bd:5a:95:c5:14: f7:55:f4:c4:90:cd:01:d4:75:6a:fa:30:7c:60:0c: 1f:23:8b:05:d4:33:23:2d:3e:9f:a2:66:49:9f:ec: 95:1a:69:75:b6:15:cb:6a:ee:07:c8:d0:07:2b:a7: 05:e0:41:d1:0c:8a:ee:e5:e6:7c:30:7a:e9:ef:da: 02:51 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 3F:46:04:1C:1C:86:B6:29:9D:4F:D3:05:9A:45:C2:E4:89:3A:36:2E X509v3 Authority Key Identifier: keyid:E1:EF:96:94:AA:48:D8:12:79:E8:ED:E4:30:79:5F:27:68:D2:DD:52 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/4e-WlKpI2BJ56O3kMHlfJ2jS3VI.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/0e/b05667-e850-4c45-aee3-aded1c469eaf/1/4e-WlKpI2BJ56O3kMHlfJ2jS3VI.mft X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/0e/b05667-e850-4c45-aee3-aded1c469eaf/1/4e-WlKpI2BJ56O3kMHlfJ2jS3VI.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 87:42:a8:e7:fb:b6:7e:5e:18:b2:2b:5c:15:88:fa:1b:77:76: 7d:19:74:bb:99:45:50:79:da:11:cb:34:7f:28:a6:5a:26:c6: 08:bb:c8:fb:d4:84:d0:64:03:a9:a9:f3:9a:f2:ba:f8:bc:b9: 44:23:30:e5:22:28:62:ba:3b:32:fb:98:7e:ad:ee:d8:ef:65: d5:45:91:bd:60:83:35:53:25:0f:a2:0b:15:95:85:7c:fc:45: f3:a0:06:f1:0e:dd:b6:d3:62:0c:3d:b2:18:50:d6:6d:11:d1: c3:bb:56:a3:8f:ed:6a:2c:6c:1a:9f:6f:a7:e0:a4:87:6c:e4: d6:05:b0:f4:f8:09:2a:e6:77:c6:63:b6:d6:fb:bf:21:4b:a2: 57:24:80:36:e8:b9:14:18:db:fb:e6:77:b3:03:07:59:ad:07: 86:84:b1:5d:62:3d:3e:99:e7:aa:b3:0f:91:31:c0:68:cb:76: 49:a9:f1:97:1c:ea:2b:37:16:cb:4d:a5:c3:e6:26:0c:4b:37: e8:bd:5f:42:ed:48:9e:fb:c9:d5:59:35:78:a3:62:8c:10:34: 20:b9:5f:19:07:38:ea:22:22:a9:f1:c1:28:3b:d2:d2:ac:89: 5d:4d:a8:71:46:44:5f:fe:26:9f:cd:59:b5:99:b3:fc:fb:17: 02:12:79:0b -----BEGIN CERTIFICATE----- MIIFFjCCA/6gAwIBAgISAZg5uuphqTBAplLNrAfDbBhjMA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKGUxZWY5Njk0YWE0OGQ4MTI3OWU4ZWRlNDMwNzk1ZjI3Njhk MmRkNTIwHhcNMjUwNzI0MDAwMDA3WhcNMjUwNzI1MDAwMDA3WjAzMTEwLwYDVQQD EygzZjQ2MDQxYzFjODZiNjI5OWQ0ZmQzMDU5YTQ1YzJlNDg5M2EzNjJlMIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEArGR7CP9uqOGamfi1AooahTLDtDlG uM6XaWY3JbSmRvnE026ld0elx1go12At7GsJGNRV+Y6OpfrIxz8rleQKtygobzXI Dw5GJMGo2DiYMYu3RsljlqlCq8DUv9/bLcLHmpEV2DkVADCoSGE2gnsrZoyv3nRZ YR6sFSfd9uhvNF0GFfAIGDqfHf85Wmj4vHP+Wztu4FI/YHlhQoML7oELUfmOxynK Hz2qiaMnEuLT24SrAUPj/S87tUG5V3Z0vVqVxRT3VfTEkM0B1HVq+jB8YAwfI4sF 1DMjLT6fomZJn+yVGml1thXLau4HyNAHK6cF4EHRDIru5eZ8MHrp79oCUQIDAQAB o4ICIjCCAh4wHQYDVR0OBBYEFD9GBBwchrYpnU/TBZpFwuSJOjYuMB8GA1UdIwQY MBaAFOHvlpSqSNgSeejt5DB5Xydo0t1SMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvNGUtV2xLcEkyQko1Nk8za01IbGZKMmpTM1ZJLmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC8wZS9iMDU2NjctZTg1MC00YzQ1LWFlZTMt YWRlZDFjNDY5ZWFmLzEvNGUtV2xLcEkyQko1Nk8za01IbGZKMmpTM1ZJLm1mdDCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC8wZS9iMDU2NjctZTg1MC00YzQ1LWFlZTMtYWRlZDFjNDY5ZWFm LzEvNGUtV2xLcEkyQko1Nk8za01IbGZKMmpTM1ZJLmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAh0Ko5/u2 fl4YsitcFYj6G3d2fRl0u5lFUHnaEcs0fyimWibGCLvI+9SE0GQDqanzmvK6+Ly5 RCMw5SIoYro7MvuYfq3u2O9l1UWRvWCDNVMlD6ILFZWFfPxF86AG8Q7dttNiDD2y GFDWbRHRw7tWo4/taixsGp9vp+Ckh2zk1gWw9PgJKuZ3xmO21vu/IUuiVySANui5 FBjb++Z3swMHWa0HhoSxXWI9PpnnqrMPkTHAaMt2SanxlxzqKzcWy02lw+YmDEs3 6L1fQu1InvvJ1Vk1eKNijBA0ILlfGQc46iIiqfHBKDvS0qyJXU2ocUZEX/4mn81Z tZmz/PsXAhJ5Cw== -----END CERTIFICATE-----Generated at Thu Jul 24 03:36:22 2025 by rpki-client