$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/1c/b20d83-612c-4b62-97a3-1a5e5f191bfa/1/MH2IfALgfJ5HTR-OIQScqmzj-9M.mft File: MH2IfALgfJ5HTR-OIQScqmzj-9M.mft (raw, json) Hash identifier: q80YLA1t9xFwM16NhBFc+oyr83n3tNQvPGObfaUSoms= Subject key identifier: 8E:21:94:DF:60:81:47:8D:61:74:5D:BE:54:DD:08:03:1D:45:CD:31 Authority key identifier: 30:7D:88:7C:02:E0:7C:9E:47:4D:1F:8E:21:04:9C:AA:6C:E3:FB:D3 Certificate issuer: /CN=307d887c02e07c9e474d1f8e21049caa6ce3fbd3 Certificate serial: 01984A4180A2A8F746B6FCD7B2752A3B27BF Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/MH2IfALgfJ5HTR-OIQScqmzj-9M.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/1c/b20d83-612c-4b62-97a3-1a5e5f191bfa/1/MH2IfALgfJ5HTR-OIQScqmzj-9M.mft Manifest number: 1605 Signing time: Sun 27 Jul 2025 05:01:03 +0000 Manifest this update: Sun 27 Jul 2025 05:01:03 +0000 Manifest next update: Mon 28 Jul 2025 05:01:03 +0000 Files and hashes: 1: Go3D60IftVT7kBobBk8HTq_r6wY.roa (hash: /aH1VuqUtHMC947Kt5tr1ajHSrdHN60XTYZiPes2dOU=) 2: JKKr0NwqKrBRfO9-TNMA6fKjebU.roa (hash: +prVLn/SSNSb/SQ4BmX9heAxTyq0XNrqnNVcVb/zNYQ=) 3: MH2IfALgfJ5HTR-OIQScqmzj-9M.crl (hash: 8q6Tv/c6hi6sFQ8SG0PbseVL3Lj7eXbfGXyLHEvoKXE=) 4: OrdWNePRO-azuf-x7WJ0gNqkZc8.roa (hash: ehZsJBwER/Ak+kPEJiQOXw5pziTKWHwzzGUWq4oZM/c=) 5: Q3_mv-tF2Z1EHDZHaZk8mJMN1bk.roa (hash: oXSPeYLnMI9gMBulzyR8eDJwfmPdLhgYhc4vqS0U/tE=) 6: S2TXSI-3n25IfgGnM4uuJwml268.roa (hash: DAgFF4qJxC/k8JOz+sB1Q1cvXx4PDaouIru4SXZXgbU=) 7: UJuJe34B0guqTgOl--QOCgSYvZE.roa (hash: c2O3pbkk6z+NjOLR47vzvdpTF+ZJKIik+rzOAO3mk2Y=) 8: bR8kj_c2TPqFFFMT255K3OTqBTI.roa (hash: mIG3JTVdQTlKmcdrQlCtE5KtfNee8F1irJglkfAd6/0=) 9: e_JO57HIUgxnL2zZw_SZRKtvz2k.roa (hash: kYzJL9upOKUtQTqnQ+rXijBf3P483K+T+FEi6SAaLE0=) 10: qkn09gGw9_pYS22v_SrDemeIoJI.roa (hash: OSIoNd4NerHm/MUfEqmcXlQFZ/K6gwLw7wnqNHc3YTQ=) Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/1c/b20d83-612c-4b62-97a3-1a5e5f191bfa/1/MH2IfALgfJ5HTR-OIQScqmzj-9M.crl rsync://rpki.ripe.net/repository/DEFAULT/1c/b20d83-612c-4b62-97a3-1a5e5f191bfa/1/MH2IfALgfJ5HTR-OIQScqmzj-9M.mft rsync://rpki.ripe.net/repository/DEFAULT/MH2IfALgfJ5HTR-OIQScqmzj-9M.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Mon 28 Jul 2025 00:00:05 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:98:4a:41:80:a2:a8:f7:46:b6:fc:d7:b2:75:2a:3b:27:bf Signature Algorithm: sha256WithRSAEncryption Issuer: CN=307d887c02e07c9e474d1f8e21049caa6ce3fbd3 Validity Not Before: Jul 27 05:01:03 2025 GMT Not After : Jul 28 05:01:03 2025 GMT Subject: CN=8e2194df6081478d61745dbe54dd08031d45cd31 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:c0:2d:e7:fd:47:c0:16:0d:70:31:63:eb:74:f0: d2:85:e1:ab:fd:87:f8:af:95:46:cc:00:30:62:b4: 5d:e1:ce:36:23:cf:1a:8a:e9:c5:f1:7d:21:9a:e4: b8:f1:35:8e:33:eb:94:c2:27:6a:d1:b6:df:d5:39: 36:f5:ea:95:9e:92:3e:85:0c:be:88:f0:11:2a:84: 23:60:d8:24:e2:d2:5b:7e:7b:9b:8b:f1:29:4a:66: 63:50:99:b7:a0:3f:00:09:fa:1e:bf:1f:d3:a7:32: 10:e4:48:ee:d8:c0:de:ba:16:ff:c8:0f:17:83:ab: 90:27:84:70:d2:e2:34:49:75:62:d6:43:02:7f:07: 63:a5:75:19:3b:ee:9b:b9:90:a0:21:80:71:36:ee: 1f:3d:fa:eb:24:d7:a2:4b:cb:ec:ea:47:56:87:ad: 37:b2:5c:60:87:da:4a:75:cd:99:8c:3a:dd:0f:1e: 2a:bc:62:b8:11:a8:37:73:d1:63:54:21:4d:59:ef: df:78:ff:2d:70:bc:46:52:c7:04:64:76:08:bb:84: f7:72:a6:d6:23:94:ef:68:21:82:c4:0d:95:fc:97: b5:63:78:09:c5:c8:52:a0:38:2c:54:33:ed:2c:be: 2c:96:5f:1e:6d:7f:bd:aa:14:ab:db:f5:d6:3e:81: 75:9d Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 8E:21:94:DF:60:81:47:8D:61:74:5D:BE:54:DD:08:03:1D:45:CD:31 X509v3 Authority Key Identifier: keyid:30:7D:88:7C:02:E0:7C:9E:47:4D:1F:8E:21:04:9C:AA:6C:E3:FB:D3 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/MH2IfALgfJ5HTR-OIQScqmzj-9M.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/1c/b20d83-612c-4b62-97a3-1a5e5f191bfa/1/MH2IfALgfJ5HTR-OIQScqmzj-9M.mft X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/1c/b20d83-612c-4b62-97a3-1a5e5f191bfa/1/MH2IfALgfJ5HTR-OIQScqmzj-9M.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption a2:f9:5a:86:fb:05:a5:ff:d1:53:b2:0a:29:47:bc:25:cb:28: 25:d0:f5:f5:aa:74:df:a3:46:72:b2:aa:e5:93:0a:53:8f:cf: c3:5c:9e:02:4b:d5:6a:cd:60:19:c4:59:ff:e0:51:fa:1f:b5: dd:fc:b1:54:d0:ee:3c:24:c6:d7:bb:bc:34:f5:d0:8e:cf:5c: d3:e3:89:b7:d4:d4:64:d3:bb:24:b2:cd:f8:91:b3:34:22:7a: fd:8d:32:1d:1f:40:95:a5:ca:4b:d8:a5:c2:69:df:a0:54:8e: 16:d6:af:80:22:f1:a9:fa:04:7c:26:fb:4f:21:95:20:90:32: ad:0c:0c:e7:df:61:30:b1:6a:77:7a:f9:8d:86:d5:0e:64:bd: f9:24:e8:60:a9:24:c3:b6:91:04:7a:df:22:b2:e7:09:c7:43: b7:7b:51:85:1f:4e:ed:e8:1a:e9:be:bc:9c:03:73:da:c4:73: aa:2c:50:4b:58:ed:16:c3:7a:e4:e9:bc:e5:d8:ea:28:8e:42: 9b:23:81:0d:17:2f:fc:dd:2e:2a:3d:9a:be:a0:e1:e2:67:6f: ab:ca:a6:2a:ec:85:5e:89:05:d3:95:b0:d7:54:3d:b4:0f:16: e7:d5:3c:c7:d9:67:9b:f2:58:d8:af:3a:65:af:64:5d:a8:f5: 21:bf:85:24 -----BEGIN CERTIFICATE----- MIIFFjCCA/6gAwIBAgISAZhKQYCiqPdGtvzXsnUqOye/MA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKDMwN2Q4ODdjMDJlMDdjOWU0NzRkMWY4ZTIxMDQ5Y2FhNmNl M2ZiZDMwHhcNMjUwNzI3MDUwMTAzWhcNMjUwNzI4MDUwMTAzWjAzMTEwLwYDVQQD Eyg4ZTIxOTRkZjYwODE0NzhkNjE3NDVkYmU1NGRkMDgwMzFkNDVjZDMxMIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAwC3n/UfAFg1wMWPrdPDSheGr/Yf4 r5VGzAAwYrRd4c42I88aiunF8X0hmuS48TWOM+uUwidq0bbf1Tk29eqVnpI+hQy+ iPARKoQjYNgk4tJbfnubi/EpSmZjUJm3oD8ACfoevx/TpzIQ5Eju2MDeuhb/yA8X g6uQJ4Rw0uI0SXVi1kMCfwdjpXUZO+6buZCgIYBxNu4fPfrrJNeiS8vs6kdWh603 slxgh9pKdc2ZjDrdDx4qvGK4Eag3c9FjVCFNWe/feP8tcLxGUscEZHYIu4T3cqbW I5TvaCGCxA2V/Je1Y3gJxchSoDgsVDPtLL4sll8ebX+9qhSr2/XWPoF1nQIDAQAB o4ICIjCCAh4wHQYDVR0OBBYEFI4hlN9ggUeNYXRdvlTdCAMdRc0xMB8GA1UdIwQY MBaAFDB9iHwC4HyeR00fjiEEnKps4/vTMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvTUgySWZBTGdmSjVIVFItT0lRU2NxbXpqLTlNLmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC8xYy9iMjBkODMtNjEyYy00YjYyLTk3YTMt MWE1ZTVmMTkxYmZhLzEvTUgySWZBTGdmSjVIVFItT0lRU2NxbXpqLTlNLm1mdDCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC8xYy9iMjBkODMtNjEyYy00YjYyLTk3YTMtMWE1ZTVmMTkxYmZh LzEvTUgySWZBTGdmSjVIVFItT0lRU2NxbXpqLTlNLmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAovlahvsF pf/RU7IKKUe8JcsoJdD19ap036NGcrKq5ZMKU4/Pw1yeAkvVas1gGcRZ/+BR+h+1 3fyxVNDuPCTG17u8NPXQjs9c0+OJt9TUZNO7JLLN+JGzNCJ6/Y0yHR9AlaXKS9il wmnfoFSOFtavgCLxqfoEfCb7TyGVIJAyrQwM599hMLFqd3r5jYbVDmS9+SToYKkk w7aRBHrfIrLnCcdDt3tRhR9O7ega6b68nANz2sRzqixQS1jtFsN65Om85djqKI5C myOBDRcv/N0uKj2avqDh4mdvq8qmKuyFXokF05Ww11Q9tA8W59U8x9lnm/JY2K86 Za9kXaj1Ib+FJA== -----END CERTIFICATE-----Generated at Sun Jul 27 08:38:26 2025 by rpki-client