$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/30/0894f7-e24d-4728-8cad-bd249b625797/1/5dbG6LztQL0DLRdxjBseOa6EGug.mft File: 5dbG6LztQL0DLRdxjBseOa6EGug.mft (raw, json) Hash identifier: l19qYQ1aFGjjgbIx2On1PgpQmjkE1QlOOIur9y3t3JA= Subject key identifier: C4:B2:15:09:70:C3:39:41:6A:1A:47:1C:89:13:C2:56:FC:8D:C9:13 Authority key identifier: E5:D6:C6:E8:BC:ED:40:BD:03:2D:17:71:8C:1B:1E:39:AE:84:1A:E8 Certificate issuer: /CN=e5d6c6e8bced40bd032d17718c1b1e39ae841ae8 Certificate serial: 019849D380048D8FAAB4F95374E1A8E213E3 Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/5dbG6LztQL0DLRdxjBseOa6EGug.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/30/0894f7-e24d-4728-8cad-bd249b625797/1/5dbG6LztQL0DLRdxjBseOa6EGug.mft Manifest number: 1616 Signing time: Sun 27 Jul 2025 03:00:54 +0000 Manifest this update: Sun 27 Jul 2025 03:00:54 +0000 Manifest next update: Mon 28 Jul 2025 03:00:54 +0000 Files and hashes: 1: 1-4thfGCfV_85lt2WZkN-l71fwv0.roa (hash: 7cUPpyEsjpN2LkemwyOwpAzp6M6Mod4nt5VJCSxBi3s=) 2: 1-U546Wnv3X2dlqBwiPgmgD5rG0Q.roa (hash: UYLMoDLmtnbaqveYEw4e1FYtKG5Xz2eS50cYOB7habA=) 3: 1BsLjyLGR7fVTKId14K_LDmFaOE.roa (hash: psSOJBHeT4i88iWFESSWMgqzZaf6jPzMO0pv5q33yJ4=) 4: 4wlDChlgzrgFapvpBy46MAFlefc.roa (hash: EYqlVV6MH4EbjLdFRd/br9sG35MzdZTRrWmN3sTJ6/Y=) 5: 5dbG6LztQL0DLRdxjBseOa6EGug.crl (hash: d4MtRHSI2wgXGpRx48gPLtZ94E9Jbkpe4kQ+zVXcZz4=) 6: A-Fkuj2Ry_3wy9lszQO5iFmpTsM.roa (hash: MqXfL/IjblbyaoanvxCZ0s6/syF5tUBaoXoKEYvO5Ck=) 7: CqQsoC1jFsSbLss7hEFtLKrKDMY.roa (hash: 7YVK/zmpOd/tEBFOBPOhNo6QF1d67oChKSOQOYEoacg=) 8: GEAO-RpDOblA62IXyDgWLKyaZE4.roa (hash: B/mmE5K4Y0+TtLR8pgvUmngTm+hQZlJcszavfMaBB+I=) 9: NFK0Hjvsp_Sq78uC-zn-OtIs2io.roa (hash: RkRZ6SorlL5rZdfTuNFGZoclIhB5xyBOn5s6WMdE+L4=) 10: NuPadKGZBaMAGBPtIQ6gKqOUOVE.roa (hash: 7vP9wfcX5uAIPbCHr3n/pH4psPIKCak3rPJRSdTHVEg=) 11: QmD1NuxNLYfmzuhbCU_99CJ-o-k.roa (hash: ugpwTRCdEyAoIefE/m+oUbM/pJjpH0ikF/U5tO+O/jM=) 12: TtR0csYqYQUGmaJtYJ6I1Sb4jtA.roa (hash: /RrNIRwEKfIWdjBmKgKNDu3bdN5NswYfyOudqPj07dM=) 13: W5W8H6uR-lCCEmn3v-XsPLRNVss.roa (hash: MqFZSzbOqhNyXJIgrbDDE4K1XPvGby9AbWHLANkDs8A=) 14: cKTcZs-U_VD8X5oF6KYi9vL_XPY.roa (hash: Ojplqzn5+rFkagKqgJjGg7MR261z7vGOzqJ6p2GYag4=) 15: dUjWdWqHZ3bB28SlJrHRKXOFumI.roa (hash: L5pkt5HZhPKaDfcEd3yHsIdGb5cnUbqIUW0exwEPLyc=) 16: lM1B4eqvI9WRB2F5MltXjXFSUNw.roa (hash: AbZgfqJhiLBwdICwkR/kGfMSad6ug4enx96U2XP1Fgk=) 17: mza84PKMv0aUDroEfzQZip-9Um8.roa (hash: xfLnRg1sIPVix0oNDyz6FdqLtVqmjxCCvOykxKOTB0s=) 18: u0oJmkSedaonOs5uLkSqqL59uJ4.roa (hash: C6uJzJ3uiAjMgAmGSpBjfqhHJVcbN5byOHdLx08rPTM=) 19: ujwUfZi-j2E7tiXxuxPwDEMg9Do.roa (hash: ZVTJzzTXgsjt6o/MwKVQt8mq4QnG+HkM2MYUgIyYqIM=) Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/30/0894f7-e24d-4728-8cad-bd249b625797/1/5dbG6LztQL0DLRdxjBseOa6EGug.crl rsync://rpki.ripe.net/repository/DEFAULT/30/0894f7-e24d-4728-8cad-bd249b625797/1/5dbG6LztQL0DLRdxjBseOa6EGug.mft rsync://rpki.ripe.net/repository/DEFAULT/5dbG6LztQL0DLRdxjBseOa6EGug.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Mon 28 Jul 2025 03:00:54 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:98:49:d3:80:04:8d:8f:aa:b4:f9:53:74:e1:a8:e2:13:e3 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=e5d6c6e8bced40bd032d17718c1b1e39ae841ae8 Validity Not Before: Jul 27 03:00:54 2025 GMT Not After : Jul 28 03:00:54 2025 GMT Subject: CN=c4b2150970c339416a1a471c8913c256fc8dc913 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:a2:59:a5:18:e5:51:4b:58:4d:59:a7:f5:34:6c: a1:cd:c2:82:17:f5:63:be:ee:5c:b6:83:0d:24:07: 55:16:1d:71:5f:24:a2:a4:1e:87:2f:ef:48:11:b2: cd:7f:f9:6f:28:a4:c8:85:83:6a:c8:d9:93:d6:4b: 3a:4a:31:db:19:01:3c:fd:1e:09:a8:b8:a3:5f:d7: 34:79:88:31:89:70:88:ff:5c:6d:ef:20:dd:6d:33: 5f:d1:00:e6:aa:71:b4:ba:ae:1a:1c:52:8a:86:3a: 47:23:29:b3:fe:ab:38:4c:54:1d:24:e9:4f:93:41: 48:3d:1d:9a:f6:4d:b0:c7:df:23:ab:01:9d:31:de: f5:4c:48:de:5b:72:14:77:76:69:46:65:48:52:51: f9:e8:af:8f:7d:75:53:64:63:d7:94:79:07:73:c7: 06:5e:64:93:d8:4a:2b:fb:c0:f0:63:f2:f7:64:52: e7:27:4f:82:07:f3:5b:be:cf:d8:28:e1:23:6f:e5: a6:72:39:87:90:bb:9a:b0:3c:6c:0b:54:a9:5f:58: 36:44:77:df:ba:e4:a1:7f:f7:7a:af:b3:0c:4b:e7: 71:13:3a:ea:d1:79:a8:23:b4:29:44:2b:e5:62:a7: 9b:47:f4:37:7a:a0:9f:ad:a0:3f:7c:7a:61:f2:01: 72:b5 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: C4:B2:15:09:70:C3:39:41:6A:1A:47:1C:89:13:C2:56:FC:8D:C9:13 X509v3 Authority Key Identifier: keyid:E5:D6:C6:E8:BC:ED:40:BD:03:2D:17:71:8C:1B:1E:39:AE:84:1A:E8 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/5dbG6LztQL0DLRdxjBseOa6EGug.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/30/0894f7-e24d-4728-8cad-bd249b625797/1/5dbG6LztQL0DLRdxjBseOa6EGug.mft X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/30/0894f7-e24d-4728-8cad-bd249b625797/1/5dbG6LztQL0DLRdxjBseOa6EGug.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 02:96:44:cb:7a:03:4e:50:a0:88:71:fa:4f:68:a6:39:0f:1e: b1:48:e6:64:6e:0d:1b:2d:b8:64:6b:a8:7d:f4:8f:f4:e4:1f: 5b:c2:c3:69:d6:32:0d:10:d5:b3:67:36:dd:36:c7:4c:94:57: b6:20:b7:30:bb:bd:86:28:50:12:7a:0c:d5:0c:09:3b:d5:f8: f8:46:d3:f1:6e:74:84:d8:47:bf:79:23:bf:4d:7a:54:3d:26: 0a:3b:95:98:33:ab:38:ae:40:cd:40:54:ac:05:8c:b7:7e:67: a5:09:de:d7:ad:23:99:25:44:ea:de:02:cb:cc:4f:df:56:ae: 5f:bd:48:c0:29:de:42:b9:ee:a6:db:f9:26:32:2c:ab:ea:fa: 61:ae:aa:85:ef:73:c6:0a:4b:40:2b:54:d6:b7:42:11:67:c7: d0:a0:57:ac:9f:9b:7d:51:e4:a7:ab:fc:b6:a0:37:c2:1f:b8: d0:fd:7c:cd:d1:2f:22:e4:0b:10:2d:4b:d3:97:37:15:82:ce: 85:78:a4:99:c1:3d:0a:60:94:f3:30:2c:05:7c:30:a6:35:43: 0b:a2:a6:45:31:b5:fd:7d:85:71:dd:42:5e:5f:f8:52:7c:83: 77:79:6c:5d:8b:12:bd:31:60:df:2e:ed:48:99:eb:8e:e3:e9: e1:60:19:9e -----BEGIN CERTIFICATE----- MIIFFjCCA/6gAwIBAgISAZhJ04AEjY+qtPlTdOGo4hPjMA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKGU1ZDZjNmU4YmNlZDQwYmQwMzJkMTc3MThjMWIxZTM5YWU4 NDFhZTgwHhcNMjUwNzI3MDMwMDU0WhcNMjUwNzI4MDMwMDU0WjAzMTEwLwYDVQQD EyhjNGIyMTUwOTcwYzMzOTQxNmExYTQ3MWM4OTEzYzI1NmZjOGRjOTEzMIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAolmlGOVRS1hNWaf1NGyhzcKCF/Vj vu5ctoMNJAdVFh1xXySipB6HL+9IEbLNf/lvKKTIhYNqyNmT1ks6SjHbGQE8/R4J qLijX9c0eYgxiXCI/1xt7yDdbTNf0QDmqnG0uq4aHFKKhjpHIymz/qs4TFQdJOlP k0FIPR2a9k2wx98jqwGdMd71TEjeW3IUd3ZpRmVIUlH56K+PfXVTZGPXlHkHc8cG XmST2Eor+8DwY/L3ZFLnJ0+CB/Nbvs/YKOEjb+WmcjmHkLuasDxsC1SpX1g2RHff uuShf/d6r7MMS+dxEzrq0XmoI7QpRCvlYqebR/Q3eqCfraA/fHph8gFytQIDAQAB o4ICIjCCAh4wHQYDVR0OBBYEFMSyFQlwwzlBahpHHIkTwlb8jckTMB8GA1UdIwQY MBaAFOXWxui87UC9Ay0XcYwbHjmuhBroMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvNWRiRzZMenRRTDBETFJkeGpCc2VPYTZFR3VnLmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC8zMC8wODk0ZjctZTI0ZC00NzI4LThjYWQt YmQyNDliNjI1Nzk3LzEvNWRiRzZMenRRTDBETFJkeGpCc2VPYTZFR3VnLm1mdDCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC8zMC8wODk0ZjctZTI0ZC00NzI4LThjYWQtYmQyNDliNjI1Nzk3 LzEvNWRiRzZMenRRTDBETFJkeGpCc2VPYTZFR3VnLmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAApZEy3oD TlCgiHH6T2imOQ8esUjmZG4NGy24ZGuoffSP9OQfW8LDadYyDRDVs2c23TbHTJRX tiC3MLu9hihQEnoM1QwJO9X4+EbT8W50hNhHv3kjv016VD0mCjuVmDOrOK5AzUBU rAWMt35npQne160jmSVE6t4Cy8xP31auX71IwCneQrnuptv5JjIsq+r6Ya6qhe9z xgpLQCtU1rdCEWfH0KBXrJ+bfVHkp6v8tqA3wh+40P18zdEvIuQLEC1L05c3FYLO hXikmcE9CmCU8zAsBXwwpjVDC6KmRTG1/X2Fcd1CXl/4UnyDd3lsXYsSvTFg3y7t SJnrjuPp4WAZng== -----END CERTIFICATE-----Generated at Sun Jul 27 11:59:58 2025 by rpki-client