$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/0f/ba0bd3-b365-4461-8ffa-1f5431e2a5af/1/1M4r8AAc1DDpJ3-wDtGr5RwLXHw.mft File: 1M4r8AAc1DDpJ3-wDtGr5RwLXHw.mft (raw, json) Hash identifier: s78sejOft4+u6iLsvUWtpCjFGJxfaF9fT+OnhdkTHng= Subject key identifier: 84:6D:BE:0D:78:AA:9C:EF:12:76:B1:48:75:62:0F:4C:E9:C5:04:E2 Authority key identifier: D4:CE:2B:F0:00:1C:D4:30:E9:27:7F:B0:0E:D1:AB:E5:1C:0B:5C:7C Certificate issuer: /CN=d4ce2bf0001cd430e9277fb00ed1abe51c0b5c7c Certificate serial: 01983615A8F3FB2AD5E5194745412C0590A3 Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/1M4r8AAc1DDpJ3-wDtGr5RwLXHw.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/0f/ba0bd3-b365-4461-8ffa-1f5431e2a5af/1/1M4r8AAc1DDpJ3-wDtGr5RwLXHw.mft Manifest number: 028E Signing time: Wed 23 Jul 2025 07:00:45 +0000 Manifest this update: Wed 23 Jul 2025 07:00:45 +0000 Manifest next update: Thu 24 Jul 2025 07:00:45 +0000 Files and hashes: 1: 1M4r8AAc1DDpJ3-wDtGr5RwLXHw.crl (hash: CStelFb520xCMiRhS9TmtW0a4/9nii26lW94TBekUqk=) 2: B0NZnOPP2h8oD-RNqJ-Ta2yq_Fc.roa (hash: hPfH3C1Uf5sAxbquvsid9TZ9qowMzn90bG/96XgZCYg=) 3: SO2aAnB4S5yHRruYM18XroAhS7s.roa (hash: Pz0dkuO54GBo11/DomEvI/BTZKCMV4IWlZC7klvn2ps=) 4: S_UvXYrcwi02mD9XS72xM5GP0XM.roa (hash: tDWixxPYWWKm64Sflrs16Hs5q2OnmoXj3QlJNoGIgAE=) 5: UF3Vre6C-2uWPd901r4ODYt5AHA.roa (hash: eNmvyxetTd0QVI6G0VkpJaSR8G25jRhf1MP+bDcaMic=) 6: _ZvG0PlF42L37wxQnyxCZfeMoAM.roa (hash: Z8GPW7jOAC9/r+ylozkesuGuO/RAGB5R1mOtBovFWng=) 7: jXLpkBBRrrRHjLoA0K-cw--pBrA.roa (hash: RDhF74MSc3oQL4ctthS0IBCNFsLyipPZpShGGlt9FTc=) 8: oZWWF5zyx5ocTW76AkaqmRcZRbc.roa (hash: Md76ioroY7UyB9QPN3x3zrcMAb6sqenqdiEF83Lxjww=) 9: wG4o-qI2-SFDukKFY7nO5neU430.roa (hash: yujHQG+kbMes0VhHuaufvfh3r/oBAVTjRJJ1+dXsMPA=) 10: zNBrt8b_ORyqQSO4aCrRbgzOM0k.roa (hash: JPrR5Q/6R3hbokDk+J7WmGsUILsQwl4oN4sTvCmroWc=) Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/0f/ba0bd3-b365-4461-8ffa-1f5431e2a5af/1/1M4r8AAc1DDpJ3-wDtGr5RwLXHw.crl rsync://rpki.ripe.net/repository/DEFAULT/0f/ba0bd3-b365-4461-8ffa-1f5431e2a5af/1/1M4r8AAc1DDpJ3-wDtGr5RwLXHw.mft rsync://rpki.ripe.net/repository/DEFAULT/1M4r8AAc1DDpJ3-wDtGr5RwLXHw.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Thu 24 Jul 2025 07:00:25 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:98:36:15:a8:f3:fb:2a:d5:e5:19:47:45:41:2c:05:90:a3 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=d4ce2bf0001cd430e9277fb00ed1abe51c0b5c7c Validity Not Before: Jul 23 07:00:45 2025 GMT Not After : Jul 24 07:00:45 2025 GMT Subject: CN=846dbe0d78aa9cef1276b14875620f4ce9c504e2 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:a0:74:90:1c:61:db:6a:19:6f:96:a8:78:07:b1: cf:e1:ee:1f:87:4e:da:9f:df:f0:2c:ea:a0:46:6d: 48:de:61:11:bf:5b:f1:54:37:d5:57:c1:c5:d2:27: cb:cd:6a:81:2a:aa:f0:ef:95:1e:92:f2:87:9c:52: 80:0f:b0:e8:76:b8:63:ee:34:2c:2f:34:17:e7:28: 13:83:52:2a:e1:c1:5d:ad:b1:5e:58:74:c6:00:ab: fb:79:99:92:69:0f:f0:11:ec:ac:89:57:46:f3:77: d0:ed:77:c5:ca:49:4a:e5:0d:8e:23:56:74:68:29: a7:f7:f7:b2:72:da:17:22:6d:85:9d:ec:2c:62:a3: f3:07:67:2f:11:c2:30:9c:ca:fe:a2:36:6c:bf:ea: d7:0e:40:ab:cd:52:9b:b7:83:0b:d4:5a:5f:47:d2: 19:36:13:41:11:de:fb:62:72:7c:85:54:96:07:da: bc:89:ce:71:55:3c:2c:31:57:5c:18:45:4f:ba:df: 41:fa:19:0b:76:6c:e1:aa:f7:6b:ef:73:37:88:42: 8d:69:8c:85:55:01:da:28:a8:d2:4c:8b:fc:85:b1: bb:9b:e0:68:fc:f8:8c:1c:87:c7:84:4d:6b:d9:da: a2:80:9c:31:26:c4:84:41:8c:1f:c7:e6:ac:8f:85: 8c:ad Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 84:6D:BE:0D:78:AA:9C:EF:12:76:B1:48:75:62:0F:4C:E9:C5:04:E2 X509v3 Authority Key Identifier: keyid:D4:CE:2B:F0:00:1C:D4:30:E9:27:7F:B0:0E:D1:AB:E5:1C:0B:5C:7C X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/1M4r8AAc1DDpJ3-wDtGr5RwLXHw.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/0f/ba0bd3-b365-4461-8ffa-1f5431e2a5af/1/1M4r8AAc1DDpJ3-wDtGr5RwLXHw.mft X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/0f/ba0bd3-b365-4461-8ffa-1f5431e2a5af/1/1M4r8AAc1DDpJ3-wDtGr5RwLXHw.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 8b:d9:11:bd:8a:eb:be:e3:d8:8d:fc:97:66:1d:4e:be:91:a1: 1f:a3:89:84:03:6a:36:82:58:e0:d0:62:2f:6b:d4:ee:f1:f6: a1:e3:4d:d4:3c:c4:de:9a:52:c7:db:c2:9f:db:03:96:23:f5: ee:d5:fd:3f:59:d1:1d:b3:3a:ca:5c:6f:ab:55:57:ed:39:f2: 92:fc:75:34:69:64:d9:36:93:15:c8:88:a9:67:22:a1:1a:79: 7a:00:a2:67:e9:d9:56:4e:6a:52:18:f3:f4:66:b1:9e:bf:08: f2:32:19:36:9d:c6:f5:f8:18:b8:b4:0c:68:71:7f:4b:fe:45: 62:d5:a0:0d:40:3b:1b:5f:ba:8d:5d:5e:99:20:3d:a6:f4:f2: 9d:b1:2b:0b:93:a6:1d:72:72:be:18:1d:f9:1d:72:55:59:88: 60:5f:24:24:ac:bb:a6:5e:6b:92:8d:97:bf:5b:0a:ad:e6:b8: e7:67:b8:d8:8d:06:e4:ab:a7:e9:12:73:d2:32:a0:71:28:47: c0:38:b2:fe:e7:1f:fd:e5:99:fa:d6:4a:d1:b2:c4:02:18:5f: c6:6e:cd:1a:29:72:64:66:d8:7c:1a:7e:5f:0a:d6:08:12:1e: d6:15:28:ca:b6:4d:5f:6f:21:47:e1:96:86:43:07:01:a2:bb: 6a:16:93:f1 -----BEGIN CERTIFICATE----- MIIFFjCCA/6gAwIBAgISAZg2Fajz+yrV5RlHRUEsBZCjMA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKGQ0Y2UyYmYwMDAxY2Q0MzBlOTI3N2ZiMDBlZDFhYmU1MWMw YjVjN2MwHhcNMjUwNzIzMDcwMDQ1WhcNMjUwNzI0MDcwMDQ1WjAzMTEwLwYDVQQD Eyg4NDZkYmUwZDc4YWE5Y2VmMTI3NmIxNDg3NTYyMGY0Y2U5YzUwNGUyMIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAoHSQHGHbahlvlqh4B7HP4e4fh07a n9/wLOqgRm1I3mERv1vxVDfVV8HF0ifLzWqBKqrw75UekvKHnFKAD7Dodrhj7jQs LzQX5ygTg1Iq4cFdrbFeWHTGAKv7eZmSaQ/wEeysiVdG83fQ7XfFyklK5Q2OI1Z0 aCmn9/eyctoXIm2FnewsYqPzB2cvEcIwnMr+ojZsv+rXDkCrzVKbt4ML1FpfR9IZ NhNBEd77YnJ8hVSWB9q8ic5xVTwsMVdcGEVPut9B+hkLdmzhqvdr73M3iEKNaYyF VQHaKKjSTIv8hbG7m+Bo/PiMHIfHhE1r2dqigJwxJsSEQYwfx+asj4WMrQIDAQAB o4ICIjCCAh4wHQYDVR0OBBYEFIRtvg14qpzvEnaxSHViD0zpxQTiMB8GA1UdIwQY MBaAFNTOK/AAHNQw6Sd/sA7Rq+UcC1x8MA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvMU00cjhBQWMxRERwSjMtd0R0R3I1UndMWEh3LmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC8wZi9iYTBiZDMtYjM2NS00NDYxLThmZmEt MWY1NDMxZTJhNWFmLzEvMU00cjhBQWMxRERwSjMtd0R0R3I1UndMWEh3Lm1mdDCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC8wZi9iYTBiZDMtYjM2NS00NDYxLThmZmEtMWY1NDMxZTJhNWFm LzEvMU00cjhBQWMxRERwSjMtd0R0R3I1UndMWEh3LmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAi9kRvYrr vuPYjfyXZh1OvpGhH6OJhANqNoJY4NBiL2vU7vH2oeNN1DzE3ppSx9vCn9sDliP1 7tX9P1nRHbM6ylxvq1VX7Tnykvx1NGlk2TaTFciIqWcioRp5egCiZ+nZVk5qUhjz 9Gaxnr8I8jIZNp3G9fgYuLQMaHF/S/5FYtWgDUA7G1+6jV1emSA9pvTynbErC5Om HXJyvhgd+R1yVVmIYF8kJKy7pl5rko2Xv1sKrea452e42I0G5Kun6RJz0jKgcShH wDiy/ucf/eWZ+tZK0bLEAhhfxm7NGilyZGbYfBp+XwrWCBIe1hUoyrZNX28hR+GW hkMHAaK7ahaT8Q== -----END CERTIFICATE-----Generated at Wed Jul 23 12:13:25 2025 by rpki-client