$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/24/b51a85-f99f-423f-9fae-dd294c378f6c/1/2MYKDS1wqTN9C9pW0a1ZasH2nNo.mft File: 2MYKDS1wqTN9C9pW0a1ZasH2nNo.mft (raw, json) Hash identifier: iyBG9FGqSUlaQfKzYJ0VYT3aV4i/faz4p3hAzrUNxLE= Subject key identifier: 01:0A:89:EA:4B:65:2E:DD:FF:62:2E:A8:B4:D9:39:0F:50:28:E6:DF Authority key identifier: D8:C6:0A:0D:2D:70:A9:33:7D:0B:DA:56:D1:AD:59:6A:C1:F6:9C:DA Certificate issuer: /CN=d8c60a0d2d70a9337d0bda56d1ad596ac1f69cda Certificate serial: 019827B53AFD11AA96CC6F3F8F6DE291F4B6 Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/2MYKDS1wqTN9C9pW0a1ZasH2nNo.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/24/b51a85-f99f-423f-9fae-dd294c378f6c/1/2MYKDS1wqTN9C9pW0a1ZasH2nNo.mft Manifest number: 0FF9 Signing time: Sun 20 Jul 2025 12:00:45 +0000 Manifest this update: Sun 20 Jul 2025 12:00:45 +0000 Manifest next update: Mon 21 Jul 2025 12:00:45 +0000 Files and hashes: 1: 2MYKDS1wqTN9C9pW0a1ZasH2nNo.crl (hash: dnH0q6qVcsjxWOBAWUzHjNIj7Liu90oAyYofLmWrctY=) 2: 7KfLp6tWihAhdW_ZCJGaxH-KxhA.roa (hash: TNNFwSmMyWVi4jN+jvMQ3wmmO3p3q2BXU7y9CZpeBFo=) 3: 8GeGNNzjzZvJIEAAhJi9tW2bbrA.roa (hash: Eto9TySCaxnkkdyIGeX6PMXh8s89OGTNecNbv02FHmY=) 4: BinZKeyg5gKkO8gwYJ0Ze8CeRxs.roa (hash: y9nENbUlBNsJYj+Cw11EQBzVD35m8OwMSWBUyRfdWao=) 5: CWwZKtjic8hgoUqW8Q2C2AbAOcg.roa (hash: kwrireSUCM8B5X7b/jFwe6owVISrGhqj47+KxFuhlXE=) 6: JS3mwrKoM_bu1YlMg44SqBJyzi4.roa (hash: FctYPf15GQv8egu27KZUZZfAkIishBp5/PDkotJF9Wg=) 7: ZEh3Y_7VDHkL8fnCRdlRBdMNjSs.roa (hash: 9tGGpEhNIUdMmTNT3BtQPbBWAhfLGDnPCij6bP6MIf4=) 8: ZH0QvaHOPvJPYEbUbSGF-chYfuI.roa (hash: GNpLUKAR49JusHGuTxHkn0FssgkY3qDBV+p8eW6v2dA=) 9: ZkdslEW73ziNwqF-q4Q9ZtOsaus.roa (hash: ZWo4Eyuzq+IOclSvnXp+HHT0W9PAbHQIMQb06/kMR+4=) 10: biowetcg3ehch8_ZT-Bjgdr3xVQ.roa (hash: +3UkGpMA2we3DWKym0QAg124Kd/FTF+tUn4YLgIyHpE=) 11: gmGmlBXuT4XMadwFIMM_Ru7A8rY.roa (hash: C02/amx+lTSpWSc0IFfRlXGRMUsC7V5LK9TrUNGhpXk=) 12: j0duG-Ijddau9Fj9XQZGhj9d5E0.roa (hash: jAtA5pws2q4wQ+M2hNZZyClsEg5rjHmu2VOiOpDAE88=) 13: mP8Qz54E01SquciLEGB10XN2R-M.roa (hash: TdXFl7ZveLTgT4OrOlqkJ84pFNT0T+LUDZ5933YP0mE=) 14: suXcRzS6-_4AE_w0ZJlYPW8wMRM.roa (hash: +PBYO+10etR0ZMMQ1FwMVF/GjPtirIZFSfWGb9cD2rU=) 15: yRlATHfw4VPtk07WpZ6YJCL0ujk.roa (hash: qFhl3+M+zqPL0w/p5+UX5EFi+fLod6eaZpO9ZGTbXcw=) 16: yVFu2BG-2jPO42o54RBasvcduFQ.roa (hash: 6xPh274P2CTFpVhbpm7wdZ5x4IvYPBNr1EUV4XIfsgM=) Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/24/b51a85-f99f-423f-9fae-dd294c378f6c/1/2MYKDS1wqTN9C9pW0a1ZasH2nNo.crl rsync://rpki.ripe.net/repository/DEFAULT/24/b51a85-f99f-423f-9fae-dd294c378f6c/1/2MYKDS1wqTN9C9pW0a1ZasH2nNo.mft rsync://rpki.ripe.net/repository/DEFAULT/2MYKDS1wqTN9C9pW0a1ZasH2nNo.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Mon 21 Jul 2025 12:00:45 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:98:27:b5:3a:fd:11:aa:96:cc:6f:3f:8f:6d:e2:91:f4:b6 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=d8c60a0d2d70a9337d0bda56d1ad596ac1f69cda Validity Not Before: Jul 20 12:00:45 2025 GMT Not After : Jul 21 12:00:45 2025 GMT Subject: CN=010a89ea4b652eddff622ea8b4d9390f5028e6df Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:92:b5:19:92:63:71:83:fd:ff:98:78:2b:0a:7e: 86:5e:02:c8:b3:06:45:07:27:a5:ef:be:e4:d2:ce: c2:c0:dc:51:cd:79:7b:04:cc:c3:ce:ed:4e:3e:0b: 00:67:77:10:b1:9c:90:e5:ad:22:e5:39:de:c1:cf: d1:1a:d8:be:ed:6f:5c:cc:47:f7:04:73:55:d2:b4: 9e:7a:59:7c:2a:61:6d:65:08:a8:5a:40:23:29:08: 62:e8:fb:14:66:ae:49:84:7f:91:3f:1f:6b:6f:8f: 72:b9:3e:16:63:fc:49:5b:cf:d4:b0:97:b2:d9:36: d8:9c:fa:78:43:11:80:05:b9:f5:35:db:32:ee:95: 6b:e2:3d:99:f5:27:3d:e2:c2:92:09:c2:6b:0d:e2: 30:cc:f0:07:7b:0a:3b:cf:49:ba:88:1a:35:80:93: 35:18:a4:0d:07:ed:4e:bf:7c:b2:2c:7f:04:d8:dd: 23:0b:b2:bc:f3:3a:61:bc:5c:2a:89:90:bd:79:12: 86:07:a8:4c:7b:1e:c9:f5:39:23:97:9c:41:35:4d: 32:1e:e7:74:e4:48:1d:55:a7:79:3f:9a:60:ac:7c: b6:2e:b9:b6:2b:f5:d4:cf:14:f6:35:30:51:f7:07: 3b:e8:6b:c7:56:4e:70:67:34:38:b4:5e:84:59:ec: dd:a3 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 01:0A:89:EA:4B:65:2E:DD:FF:62:2E:A8:B4:D9:39:0F:50:28:E6:DF X509v3 Authority Key Identifier: keyid:D8:C6:0A:0D:2D:70:A9:33:7D:0B:DA:56:D1:AD:59:6A:C1:F6:9C:DA X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/2MYKDS1wqTN9C9pW0a1ZasH2nNo.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/24/b51a85-f99f-423f-9fae-dd294c378f6c/1/2MYKDS1wqTN9C9pW0a1ZasH2nNo.mft X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/24/b51a85-f99f-423f-9fae-dd294c378f6c/1/2MYKDS1wqTN9C9pW0a1ZasH2nNo.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption a1:e3:fa:d8:da:fa:68:de:2a:09:77:2a:8f:9c:14:e0:10:d4: 82:0e:20:0b:70:8f:00:5a:3c:af:e9:95:a0:89:13:6f:1a:01: 61:bd:fd:5d:64:7c:09:a9:a5:e7:42:68:24:6e:bd:ff:86:ba: 0d:bf:6a:b0:ed:b0:7e:4b:cd:f1:30:50:6b:51:97:a9:50:44: e1:6b:b3:61:36:16:f0:87:35:48:4a:39:b6:06:06:4a:25:b1: 72:6b:2a:d9:6b:e7:81:3c:30:5b:2e:37:b4:de:2e:f4:62:34: 2a:ee:61:1c:ff:45:b0:e8:1b:2c:b4:9b:43:8e:b9:e6:97:78: 49:b6:f6:c3:9e:bb:d8:0f:1d:a1:af:15:ee:33:87:f1:a5:bc: 7f:18:a7:60:9c:9c:23:59:39:17:90:a5:7c:d6:c2:23:75:6f: 3a:14:83:4c:10:6c:ec:aa:bb:9f:5e:2d:98:95:2e:ee:a0:c0: 04:c8:41:08:aa:82:1e:46:34:95:28:14:9f:a0:82:26:c2:2e: b3:91:6b:f4:13:f7:52:84:0d:df:f4:7a:13:a1:14:6e:46:fe: 95:ec:65:f3:99:9f:d3:6f:df:13:b3:e1:2e:ce:55:8d:aa:c9: 54:7d:27:fa:c9:6f:f1:33:f4:c9:57:2f:4d:cb:ab:53:ef:0c: 90:d9:a3:1d -----BEGIN CERTIFICATE----- MIIFFjCCA/6gAwIBAgISAZgntTr9EaqWzG8/j23ikfS2MA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKGQ4YzYwYTBkMmQ3MGE5MzM3ZDBiZGE1NmQxYWQ1OTZhYzFm NjljZGEwHhcNMjUwNzIwMTIwMDQ1WhcNMjUwNzIxMTIwMDQ1WjAzMTEwLwYDVQQD EygwMTBhODllYTRiNjUyZWRkZmY2MjJlYThiNGQ5MzkwZjUwMjhlNmRmMIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAkrUZkmNxg/3/mHgrCn6GXgLIswZF Byel777k0s7CwNxRzXl7BMzDzu1OPgsAZ3cQsZyQ5a0i5Tnewc/RGti+7W9czEf3 BHNV0rSeell8KmFtZQioWkAjKQhi6PsUZq5JhH+RPx9rb49yuT4WY/xJW8/UsJey 2TbYnPp4QxGABbn1Ndsy7pVr4j2Z9Sc94sKSCcJrDeIwzPAHewo7z0m6iBo1gJM1 GKQNB+1Ov3yyLH8E2N0jC7K88zphvFwqiZC9eRKGB6hMex7J9Tkjl5xBNU0yHud0 5EgdVad5P5pgrHy2Lrm2K/XUzxT2NTBR9wc76GvHVk5wZzQ4tF6EWezdowIDAQAB o4ICIjCCAh4wHQYDVR0OBBYEFAEKiepLZS7d/2IuqLTZOQ9QKObfMB8GA1UdIwQY MBaAFNjGCg0tcKkzfQvaVtGtWWrB9pzaMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvMk1ZS0RTMXdxVE45QzlwVzBhMVphc0gybk5vLmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC8yNC9iNTFhODUtZjk5Zi00MjNmLTlmYWUt ZGQyOTRjMzc4ZjZjLzEvMk1ZS0RTMXdxVE45QzlwVzBhMVphc0gybk5vLm1mdDCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC8yNC9iNTFhODUtZjk5Zi00MjNmLTlmYWUtZGQyOTRjMzc4ZjZj LzEvMk1ZS0RTMXdxVE45QzlwVzBhMVphc0gybk5vLmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAoeP62Nr6 aN4qCXcqj5wU4BDUgg4gC3CPAFo8r+mVoIkTbxoBYb39XWR8Caml50JoJG69/4a6 Db9qsO2wfkvN8TBQa1GXqVBE4WuzYTYW8Ic1SEo5tgYGSiWxcmsq2WvngTwwWy43 tN4u9GI0Ku5hHP9FsOgbLLSbQ4655pd4Sbb2w5672A8doa8V7jOH8aW8fxinYJyc I1k5F5ClfNbCI3VvOhSDTBBs7Kq7n14tmJUu7qDABMhBCKqCHkY0lSgUn6CCJsIu s5Fr9BP3UoQN3/R6E6EUbkb+lexl85mf02/fE7PhLs5VjarJVH0n+slv8TP0yVcv TcurU+8MkNmjHQ== -----END CERTIFICATE-----Generated at Sun Jul 20 16:20:40 2025 by rpki-client