$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/17/cffff8-3530-4e5b-a5e2-c77905fbba7b/1/RbvSGTZCUwoBf08cvlYuIXCz370.mft File: RbvSGTZCUwoBf08cvlYuIXCz370.mft (raw, json) Hash identifier: a2ISLC7yvssxOeOOJo2WtdVWidEuWLyHBdn5WUR/0/Y= Subject key identifier: 35:77:38:B9:3E:0F:06:70:69:9A:B1:6E:A3:1C:BB:86:A0:D4:39:F0 Authority key identifier: 45:BB:D2:19:36:42:53:0A:01:7F:4F:1C:BE:56:2E:21:70:B3:DF:BD Certificate issuer: /CN=45bbd2193642530a017f4f1cbe562e2170b3dfbd Certificate serial: 01983F187F83A4EFEB43708AC17863AD41E7 Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/RbvSGTZCUwoBf08cvlYuIXCz370.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/17/cffff8-3530-4e5b-a5e2-c77905fbba7b/1/RbvSGTZCUwoBf08cvlYuIXCz370.mft Manifest number: 0DF5 Signing time: Fri 25 Jul 2025 01:00:26 +0000 Manifest this update: Fri 25 Jul 2025 01:00:26 +0000 Manifest next update: Sat 26 Jul 2025 01:00:26 +0000 Files and hashes: 1: 6ZnfS565qYdUchLZCkFU7aS7slQ.roa (hash: 4t6UU9aRgFRSLJBVwUMaRIV03s5+6yeuigVjxM6Ktp4=) 2: 84g9kcbpLMOYWyAe0WNiCfk8rQ0.roa (hash: Op4AJknS0Y4sLCSDEIKA+ch9xkPiEHCr8XwgBypEB5o=) 3: RbvSGTZCUwoBf08cvlYuIXCz370.crl (hash: ltLiOcDs3drDAXl5z8WqtN1nHVzAiF5N1DSnjzPkj0I=) 4: TApodEY8028DyJXWycbZvpKO2JY.roa (hash: U9oKSIIosuWZsZ0CYqCvqcMf8wzWuI0iOJauh9nwcac=) 5: U99JCnG6IDDb3fPb5RJU5lmsye0.roa (hash: X/Q6Sj4Oee6V3+wleBrfWWmYoSOrW6XOkN6eZj48NGo=) 6: UHhBspaFN4Wz4SsUMP7fb9tfT4w.roa (hash: 50TOVRcOrToHPoin6f4jkSxKeLPlDyklnbx1BFOMka4=) 7: _VXztWjIE0ZPwEUQdhYZ-DOYwQo.roa (hash: 185UhIin1qWAIQbRLAq/SfnBaaaHig76ZL9WselXS2I=) 8: bVG91rh6vJ7orCrWLltzoEytWu0.roa (hash: 6UY0Ua8DXjS9JwbhBNdYqbLcTNFaiJVgT0ORPNoYM64=) 9: d4dd63YvMop2w-g3LON2FgQkXGs.roa (hash: wFE27Pfyu6wjdlPpwECWgbJf/SI7T3ch1qMqz+WQODE=) 10: r5ZgGaHKIkFsDW5OTwwhK4tgAsQ.roa (hash: jLmSUGri8N356kUEE/tygoNrVgGIX4EqiZgEZdk/J6k=) Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/17/cffff8-3530-4e5b-a5e2-c77905fbba7b/1/RbvSGTZCUwoBf08cvlYuIXCz370.crl rsync://rpki.ripe.net/repository/DEFAULT/17/cffff8-3530-4e5b-a5e2-c77905fbba7b/1/RbvSGTZCUwoBf08cvlYuIXCz370.mft rsync://rpki.ripe.net/repository/DEFAULT/RbvSGTZCUwoBf08cvlYuIXCz370.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Fri 25 Jul 2025 22:13:05 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:98:3f:18:7f:83:a4:ef:eb:43:70:8a:c1:78:63:ad:41:e7 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=45bbd2193642530a017f4f1cbe562e2170b3dfbd Validity Not Before: Jul 25 01:00:26 2025 GMT Not After : Jul 26 01:00:26 2025 GMT Subject: CN=357738b93e0f0670699ab16ea31cbb86a0d439f0 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:bd:2b:77:c2:ba:fc:ac:29:21:5c:8f:3c:e9:6f: ae:a9:9e:cc:38:3d:f1:eb:f1:de:40:3e:e9:29:46: 76:05:40:18:07:d8:bc:81:ac:41:0e:a5:f2:7a:69: 54:27:96:e9:70:6c:4d:6c:c0:b2:ad:df:f6:99:84: 4b:39:a5:fc:88:29:ad:36:ef:37:58:5d:41:eb:bd: ff:d6:f7:06:5c:ca:cc:13:e5:44:e9:69:15:4b:bc: c7:6a:60:58:ad:33:fe:6c:6d:d0:66:35:f2:00:41: e2:98:f2:ba:47:72:d8:49:09:73:28:58:b7:0e:3f: a7:6d:c3:69:6b:e7:8f:2f:60:2c:f8:3b:05:7e:fa: cc:3f:de:b1:4f:97:13:e8:9c:bf:f6:96:33:c8:3f: c9:aa:ad:23:3c:f9:25:6f:be:8e:ac:98:60:cb:f2: 19:7a:b6:ba:81:b6:68:3a:2f:4e:9f:a3:ab:9b:88: 50:07:13:01:af:f4:53:a6:e3:ad:87:9c:e9:5f:e2: 98:aa:6b:0e:62:d6:5e:e4:bf:4b:90:a5:54:3a:22: bb:d7:22:78:5c:98:2e:d8:e6:48:88:d3:d5:a2:f3: c7:51:06:7b:18:52:4f:ce:bb:e7:56:d2:30:cc:04: db:4f:f8:cb:5c:5b:fa:6b:5f:a5:d6:2c:a9:0f:05: 10:9f Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 35:77:38:B9:3E:0F:06:70:69:9A:B1:6E:A3:1C:BB:86:A0:D4:39:F0 X509v3 Authority Key Identifier: keyid:45:BB:D2:19:36:42:53:0A:01:7F:4F:1C:BE:56:2E:21:70:B3:DF:BD X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/RbvSGTZCUwoBf08cvlYuIXCz370.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/17/cffff8-3530-4e5b-a5e2-c77905fbba7b/1/RbvSGTZCUwoBf08cvlYuIXCz370.mft X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/17/cffff8-3530-4e5b-a5e2-c77905fbba7b/1/RbvSGTZCUwoBf08cvlYuIXCz370.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 4b:2d:63:dd:90:bd:26:c0:07:28:a6:05:3d:6e:28:24:71:d2: 88:ac:41:a4:36:40:30:a2:6a:f6:67:d1:49:4d:7c:90:bb:62: 7b:db:65:58:58:91:04:5c:eb:24:26:c3:7d:a3:ec:66:38:51: 66:7d:f9:aa:99:49:c6:f5:ad:3f:45:8f:b9:0b:55:ba:64:3d: 1e:30:8c:e9:dd:ea:32:b0:6d:6c:4e:a4:0a:c7:33:a3:08:17: df:48:d2:a5:61:17:01:aa:0b:b7:b5:82:1b:f7:34:7b:1d:33: 09:4a:23:c8:6c:69:61:f0:15:46:ed:00:c4:20:da:d5:1d:7d: 55:df:ff:d2:29:88:81:9d:01:e9:11:f5:d6:dc:8e:d6:d7:95: 3c:a6:6d:b0:d6:35:46:6f:5d:e7:49:b9:4a:eb:1d:c0:d0:b2: c7:d1:b5:18:e0:f2:fc:8f:c5:68:84:95:7d:85:19:54:03:4c: 51:87:e4:e2:2c:d7:c6:b6:47:c4:d3:49:71:f0:8b:a5:08:50: 50:48:91:74:12:36:39:d1:d2:38:04:42:6f:2a:5c:4d:dd:ce: db:f7:ed:8d:5c:f8:90:b5:7b:1b:88:e8:c8:1b:a7:20:75:72: 4a:af:12:34:64:45:2b:d1:fe:59:ad:5c:5f:0f:3e:1a:8c:ac: 12:da:f3:f8 -----BEGIN CERTIFICATE----- MIIFFjCCA/6gAwIBAgISAZg/GH+DpO/rQ3CKwXhjrUHnMA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKDQ1YmJkMjE5MzY0MjUzMGEwMTdmNGYxY2JlNTYyZTIxNzBi M2RmYmQwHhcNMjUwNzI1MDEwMDI2WhcNMjUwNzI2MDEwMDI2WjAzMTEwLwYDVQQD EygzNTc3MzhiOTNlMGYwNjcwNjk5YWIxNmVhMzFjYmI4NmEwZDQzOWYwMIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAvSt3wrr8rCkhXI886W+uqZ7MOD3x 6/HeQD7pKUZ2BUAYB9i8gaxBDqXyemlUJ5bpcGxNbMCyrd/2mYRLOaX8iCmtNu83 WF1B673/1vcGXMrME+VE6WkVS7zHamBYrTP+bG3QZjXyAEHimPK6R3LYSQlzKFi3 Dj+nbcNpa+ePL2As+DsFfvrMP96xT5cT6Jy/9pYzyD/Jqq0jPPklb76OrJhgy/IZ era6gbZoOi9On6Orm4hQBxMBr/RTpuOth5zpX+KYqmsOYtZe5L9LkKVUOiK71yJ4 XJgu2OZIiNPVovPHUQZ7GFJPzrvnVtIwzATbT/jLXFv6a1+l1iypDwUQnwIDAQAB o4ICIjCCAh4wHQYDVR0OBBYEFDV3OLk+DwZwaZqxbqMcu4ag1DnwMB8GA1UdIwQY MBaAFEW70hk2QlMKAX9PHL5WLiFws9+9MA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvUmJ2U0dUWkNVd29CZjA4Y3ZsWXVJWEN6MzcwLmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC8xNy9jZmZmZjgtMzUzMC00ZTViLWE1ZTIt Yzc3OTA1ZmJiYTdiLzEvUmJ2U0dUWkNVd29CZjA4Y3ZsWXVJWEN6MzcwLm1mdDCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC8xNy9jZmZmZjgtMzUzMC00ZTViLWE1ZTItYzc3OTA1ZmJiYTdi LzEvUmJ2U0dUWkNVd29CZjA4Y3ZsWXVJWEN6MzcwLmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEASy1j3ZC9 JsAHKKYFPW4oJHHSiKxBpDZAMKJq9mfRSU18kLtie9tlWFiRBFzrJCbDfaPsZjhR Zn35qplJxvWtP0WPuQtVumQ9HjCM6d3qMrBtbE6kCsczowgX30jSpWEXAaoLt7WC G/c0ex0zCUojyGxpYfAVRu0AxCDa1R19Vd//0imIgZ0B6RH11tyO1teVPKZtsNY1 Rm9d50m5SusdwNCyx9G1GODy/I/FaISVfYUZVANMUYfk4izXxrZHxNNJcfCLpQhQ UEiRdBI2OdHSOARCbypcTd3O2/ftjVz4kLV7G4joyBunIHVySq8SNGRFK9H+Wa1c Xw8+GoysEtrz+A== -----END CERTIFICATE-----Generated at Fri Jul 25 06:56:58 2025 by rpki-client