$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/29/cc8f4a-4c02-404b-8d93-2cde65f3112a/1/h74JMJcJfERX_1qj5Yk8jBVDJhI.mft File: h74JMJcJfERX_1qj5Yk8jBVDJhI.mft (raw, json) Hash identifier: Awb2lj5tryG6fYW3Wbk3jgE/p/BMRaMMR3KVsbcNlDE= Subject key identifier: D9:68:34:F7:D3:AE:67:74:FE:5C:8F:7B:DA:42:7C:89:B5:91:86:67 Authority key identifier: 87:BE:09:30:97:09:7C:44:57:FF:5A:A3:E5:89:3C:8C:15:43:26:12 Certificate issuer: /CN=87be093097097c4457ff5aa3e5893c8c15432612 Certificate serial: 019845F6E583DC0C63C58E885F19E537391F Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/h74JMJcJfERX_1qj5Yk8jBVDJhI.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/29/cc8f4a-4c02-404b-8d93-2cde65f3112a/1/h74JMJcJfERX_1qj5Yk8jBVDJhI.mft Manifest number: 128F Signing time: Sat 26 Jul 2025 09:01:05 +0000 Manifest this update: Sat 26 Jul 2025 09:01:05 +0000 Manifest next update: Sun 27 Jul 2025 09:01:05 +0000 Files and hashes: 1: 58EBygRjdS7517jE8ijFSPfVOH4.roa (hash: 7YP7WUOPsrK23qXejFg0a6c2K8s3GbzwWCeuhRLXrr4=) 2: 6gQb_YrXJIkOy1ffV5AywwaDFKA.roa (hash: YBUcx/W2YYWfTW+ZfLh5vpIiC6jkcxCKGBt0nojo2Ok=) 3: CjTW9-CUmuY1lxZ8OqndS2FXSrY.roa (hash: 9DQ0LnRbHYpMYq+dl7Z0Jfv0Jx2DrmotGXluT5sxbiI=) 4: UYD_ol6L79u8glgaI6wKUZit3aI.roa (hash: Gf9BtC+mpY9FQr0OFj9WV8BSFzyS8ChMq/mXIibBTC4=) 5: YxuPih3fAlXVoEE31gDs9iD2i1w.roa (hash: x8butTOJLg1TuADmdhNJfjqeOtty4tQbuYOKyeZNAJI=) 6: cgfWhp9nnNlIFwxwBmM9ufcXLT8.roa (hash: d9o/0tEnmxkRdMrExtvCAvZnhgV08vpjue2h9xSnd5M=) 7: h74JMJcJfERX_1qj5Yk8jBVDJhI.crl (hash: A/xe4mvJPFPG/I/CH6uwME+yVEPZ0nMewdotFxR7TaM=) 8: jS9AN5oD9gr_onzGTzL8xf4_tCg.roa (hash: L5WRngdm8hXH1GtO9dblNyDW24uvtXBx7hO8Cv9i3R8=) 9: l73XbGk7c4j4MjyLCnCZ2AhSa5g.roa (hash: zN4KADzvP9RDaA1coLbTnlm7K8otMtISf3HRhyFdP4I=) 10: zDYhvUbelcRpqpslUbRSgUjh_fg.roa (hash: oMqhUHMRnzSTRY98vl61orkGgfrk9poSjKlRD++vvbQ=) Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/29/cc8f4a-4c02-404b-8d93-2cde65f3112a/1/h74JMJcJfERX_1qj5Yk8jBVDJhI.crl rsync://rpki.ripe.net/repository/DEFAULT/29/cc8f4a-4c02-404b-8d93-2cde65f3112a/1/h74JMJcJfERX_1qj5Yk8jBVDJhI.mft rsync://rpki.ripe.net/repository/DEFAULT/h74JMJcJfERX_1qj5Yk8jBVDJhI.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Sun 27 Jul 2025 02:00:05 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:98:45:f6:e5:83:dc:0c:63:c5:8e:88:5f:19:e5:37:39:1f Signature Algorithm: sha256WithRSAEncryption Issuer: CN=87be093097097c4457ff5aa3e5893c8c15432612 Validity Not Before: Jul 26 09:01:05 2025 GMT Not After : Jul 27 09:01:05 2025 GMT Subject: CN=d96834f7d3ae6774fe5c8f7bda427c89b5918667 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:a8:6b:76:66:18:10:31:79:7d:7f:55:30:82:72: a1:53:68:b9:2c:df:75:12:23:d2:ba:20:e0:91:f0: b6:88:fd:74:68:02:fb:4e:ba:1c:2f:1a:86:27:e5: 7a:d3:58:a1:5e:42:a2:a2:17:27:af:23:16:fa:8f: 34:70:7d:2c:33:15:2c:3b:7f:ec:47:20:b1:7f:71: 8a:f9:c0:83:ac:57:c0:e0:07:aa:b7:d6:49:30:5a: e7:f4:77:fa:8a:e9:f8:7e:77:e6:a8:cf:a9:db:d1: e7:d9:18:72:f8:9e:b0:e5:f0:2b:21:41:53:63:48: 56:93:9f:cb:2e:d0:e7:fe:e1:de:bc:f3:61:fa:82: 70:67:8e:39:f0:22:07:04:5a:05:c3:e3:7e:a1:69: d3:8b:e4:9c:1e:c8:2f:b3:50:15:6a:da:87:88:e1: 88:ea:48:6e:22:f8:58:35:01:65:4e:8a:d7:ae:4a: 35:c7:47:14:ff:d4:68:93:03:0d:21:be:50:1d:0a: ff:c4:20:53:4c:90:0a:04:88:68:ed:33:77:86:22: cb:03:f7:06:0d:f4:f0:78:51:be:26:e9:16:ba:52: ee:f1:2e:c1:de:0e:b5:b9:42:b8:dc:f4:dd:e8:59: 96:f7:10:16:d3:b0:ea:8a:1b:e1:71:e0:75:09:43: cd:a5 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: D9:68:34:F7:D3:AE:67:74:FE:5C:8F:7B:DA:42:7C:89:B5:91:86:67 X509v3 Authority Key Identifier: keyid:87:BE:09:30:97:09:7C:44:57:FF:5A:A3:E5:89:3C:8C:15:43:26:12 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/h74JMJcJfERX_1qj5Yk8jBVDJhI.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/29/cc8f4a-4c02-404b-8d93-2cde65f3112a/1/h74JMJcJfERX_1qj5Yk8jBVDJhI.mft X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/29/cc8f4a-4c02-404b-8d93-2cde65f3112a/1/h74JMJcJfERX_1qj5Yk8jBVDJhI.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 98:51:73:0f:12:0f:7c:c1:30:75:bd:74:bb:21:87:f7:8f:6d: 5e:0d:b4:30:bd:73:e5:26:cc:53:b0:2a:77:d4:10:b4:6d:2a: 9b:f3:8f:24:31:f5:14:e8:9b:fa:c7:eb:e5:00:a0:38:b4:97: 61:52:3c:32:0c:5e:be:a6:3a:83:18:d8:ca:e3:64:2a:ef:1a: b8:ff:03:69:a4:ba:3c:0c:bb:a4:cb:21:e1:78:9d:a1:bf:72: a3:a9:74:3e:20:79:4a:be:80:66:2e:ce:dc:82:89:8a:83:18: 2e:93:ba:de:bd:67:fb:4a:bb:c0:5f:06:6f:d4:2a:1b:d7:b5: 92:14:30:55:b7:7c:08:95:70:68:b3:d7:4f:51:c2:56:82:11: 83:50:e8:fa:41:b8:30:ca:0b:e5:3b:7e:37:51:c1:61:15:3f: 38:d4:81:79:1a:22:ff:a2:4c:af:c1:a9:1a:c5:7f:de:cf:95: ec:e4:36:6d:68:da:d9:82:dc:63:d0:f1:aa:ba:ea:36:81:7c: e5:14:b5:b8:0b:4d:f6:f8:49:be:0d:91:0c:bd:5a:57:e3:6f: 07:f5:38:bb:28:c7:d8:85:46:2b:cc:8d:dc:c4:17:a5:10:24: 8b:eb:b4:e3:bb:7d:28:02:60:e2:d8:f7:df:70:73:c5:01:5d: 3c:0f:21:a4 -----BEGIN CERTIFICATE----- MIIFFjCCA/6gAwIBAgISAZhF9uWD3AxjxY6IXxnlNzkfMA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKDg3YmUwOTMwOTcwOTdjNDQ1N2ZmNWFhM2U1ODkzYzhjMTU0 MzI2MTIwHhcNMjUwNzI2MDkwMTA1WhcNMjUwNzI3MDkwMTA1WjAzMTEwLwYDVQQD EyhkOTY4MzRmN2QzYWU2Nzc0ZmU1YzhmN2JkYTQyN2M4OWI1OTE4NjY3MIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAqGt2ZhgQMXl9f1UwgnKhU2i5LN91 EiPSuiDgkfC2iP10aAL7TrocLxqGJ+V601ihXkKiohcnryMW+o80cH0sMxUsO3/s RyCxf3GK+cCDrFfA4Aeqt9ZJMFrn9Hf6iun4fnfmqM+p29Hn2Rhy+J6w5fArIUFT Y0hWk5/LLtDn/uHevPNh+oJwZ4458CIHBFoFw+N+oWnTi+ScHsgvs1AVatqHiOGI 6khuIvhYNQFlTorXrko1x0cU/9RokwMNIb5QHQr/xCBTTJAKBIho7TN3hiLLA/cG DfTweFG+JukWulLu8S7B3g61uUK43PTd6FmW9xAW07DqihvhceB1CUPNpQIDAQAB o4ICIjCCAh4wHQYDVR0OBBYEFNloNPfTrmd0/lyPe9pCfIm1kYZnMB8GA1UdIwQY MBaAFIe+CTCXCXxEV/9ao+WJPIwVQyYSMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvaDc0Sk1KY0pmRVJYXzFxajVZazhqQlZESmhJLmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC8yOS9jYzhmNGEtNGMwMi00MDRiLThkOTMt MmNkZTY1ZjMxMTJhLzEvaDc0Sk1KY0pmRVJYXzFxajVZazhqQlZESmhJLm1mdDCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC8yOS9jYzhmNGEtNGMwMi00MDRiLThkOTMtMmNkZTY1ZjMxMTJh LzEvaDc0Sk1KY0pmRVJYXzFxajVZazhqQlZESmhJLmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAmFFzDxIP fMEwdb10uyGH949tXg20ML1z5SbMU7Aqd9QQtG0qm/OPJDH1FOib+sfr5QCgOLSX YVI8MgxevqY6gxjYyuNkKu8auP8DaaS6PAy7pMsh4Xidob9yo6l0PiB5Sr6AZi7O 3IKJioMYLpO63r1n+0q7wF8Gb9QqG9e1khQwVbd8CJVwaLPXT1HCVoIRg1Do+kG4 MMoL5Tt+N1HBYRU/ONSBeRoi/6JMr8GpGsV/3s+V7OQ2bWja2YLcY9DxqrrqNoF8 5RS1uAtN9vhJvg2RDL1aV+NvB/U4uyjH2IVGK8yN3MQXpRAki+u047t9KAJg4tj3 33BzxQFdPA8hpA== -----END CERTIFICATE-----Generated at Sat Jul 26 11:16:37 2025 by rpki-client