$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/30/c22dc9-c7ba-4156-a79c-15e90bf87fab/1/4N7hsGuiSmdiE_l2pLUMEp3LK3M.mft File: 4N7hsGuiSmdiE_l2pLUMEp3LK3M.mft (raw, json) Hash identifier: dXDdUjnS1UL8vD27iIPaqB4o+ZYbiIqs8ze5MKGzNEw= Subject key identifier: 30:3A:0C:7E:CE:98:DD:F6:4C:49:92:6C:DF:96:E6:41:F7:87:D5:2D Authority key identifier: E0:DE:E1:B0:6B:A2:4A:67:62:13:F9:76:A4:B5:0C:12:9D:CB:2B:73 Certificate issuer: /CN=e0dee1b06ba24a676213f976a4b50c129dcb2b73 Certificate serial: 019849652BBD52910698EF0A84BC9CAD73FE Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/4N7hsGuiSmdiE_l2pLUMEp3LK3M.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/30/c22dc9-c7ba-4156-a79c-15e90bf87fab/1/4N7hsGuiSmdiE_l2pLUMEp3LK3M.mft Manifest number: 1623 Signing time: Sun 27 Jul 2025 01:00:23 +0000 Manifest this update: Sun 27 Jul 2025 01:00:23 +0000 Manifest next update: Mon 28 Jul 2025 01:00:23 +0000 Files and hashes: 1: 1-KQ3lCQc8t0kQtkE6-_iQqUbP9Q.roa (hash: gNrv97avvDkank7EdDvcD5kAcTLpL7MBGtGaNujTfjw=) 2: 1-ZowhWdJlnO1J6ckMiCzFpO4NqA.roa (hash: YFDJetm10wMx3y43nkOzbjWKZjU+niDmUY27/YG6EhM=) 3: 4N7hsGuiSmdiE_l2pLUMEp3LK3M.crl (hash: yp3CmD+w9DstJuOPs+P8Rq/UJk651hgscf/OJZHECDw=) 4: P54Qz9AI09JDOlqysqt799AeQRI.roa (hash: nIDEtW0TBUZxo5dIDtHdP7iLVF2Wse6E2BuTqfPasv8=) 5: _dP89dJHE-YZKAUIAMAKH5hCybo.roa (hash: RwLTyGyMw54nCLsLFUIuCCv0sJSfUYZ8s2qq98bQOs0=) 6: baI3T-QVvPK6b76nYUCZm85ZrSs.roa (hash: JldtWM10Ffd/1qvivADvuf6lNYl9UTodEd29bMMwfcg=) 7: eAV-d8BbWJ1sJQuFdRvhLNIzJUA.roa (hash: T3JT9dws49hGRBqX3Lqw/F5GMKuYnFZbEjUfdpuIhGs=) 8: h4oHF6R3uhLn9C5VN0t5w_HOGdk.roa (hash: l8RvUuXjd9Sh+5mA5Uw84faFr4xIw6LnpFGoAgtXpUY=) 9: r2_uEzNLhBHjD8nrsm_28O-I61I.roa (hash: MQGSyx9ipk0r/WYHwP9ZlzljWRWQN1rdWtX2fCTKqeI=) 10: tTbiV1p1IxN2njOeOlGPUdrcEO8.roa (hash: QCqFLLh9eDcI0sf1Fk/d5nbIK61Y2OX/OMR+8N2W95Y=) Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/30/c22dc9-c7ba-4156-a79c-15e90bf87fab/1/4N7hsGuiSmdiE_l2pLUMEp3LK3M.crl rsync://rpki.ripe.net/repository/DEFAULT/30/c22dc9-c7ba-4156-a79c-15e90bf87fab/1/4N7hsGuiSmdiE_l2pLUMEp3LK3M.mft rsync://rpki.ripe.net/repository/DEFAULT/4N7hsGuiSmdiE_l2pLUMEp3LK3M.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Mon 28 Jul 2025 00:00:05 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:98:49:65:2b:bd:52:91:06:98:ef:0a:84:bc:9c:ad:73:fe Signature Algorithm: sha256WithRSAEncryption Issuer: CN=e0dee1b06ba24a676213f976a4b50c129dcb2b73 Validity Not Before: Jul 27 01:00:23 2025 GMT Not After : Jul 28 01:00:23 2025 GMT Subject: CN=303a0c7ece98ddf64c49926cdf96e641f787d52d Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:8d:91:86:25:30:1a:8b:89:85:75:89:31:29:54: 44:7e:ff:48:23:ab:06:33:1e:90:ae:13:da:a2:77: c7:ec:24:71:08:67:b6:ca:f5:3f:bc:d7:99:50:67: ea:3c:94:40:12:2c:d9:03:9c:ac:53:2c:e0:51:15: b5:39:b8:85:bb:f7:49:dd:08:40:1c:84:62:2e:c8: 69:5a:1c:63:01:b9:56:15:96:e3:ec:44:a6:40:0b: 9c:e1:5e:03:7f:26:62:d5:2b:5c:99:7d:26:66:f5: f3:ec:28:a2:40:fb:7e:00:46:fd:fe:f4:14:c0:ec: 95:9b:5e:71:f4:54:a2:3a:bd:d7:4f:e2:17:de:4b: 66:0e:a1:2f:6c:17:e1:36:3d:ac:54:12:28:c5:57: 96:15:2b:7b:23:55:47:35:67:40:ce:71:e8:81:45: c9:95:b5:51:a3:ba:6a:1d:2f:ce:7f:0b:1c:76:52: 7c:1b:65:d2:2a:ec:c3:7c:1a:7d:a1:32:9f:e2:1c: 12:63:68:cf:66:4a:58:ce:90:20:04:51:e9:0c:8e: 64:e5:4b:91:33:82:bf:69:a7:cf:20:92:a2:03:f8: 6f:b7:82:85:82:d9:1b:ed:33:c0:47:30:f8:b8:e6: b9:17:15:ea:0e:c9:a3:54:a2:74:3c:3d:c5:d5:5d: 1d:d5 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 30:3A:0C:7E:CE:98:DD:F6:4C:49:92:6C:DF:96:E6:41:F7:87:D5:2D X509v3 Authority Key Identifier: keyid:E0:DE:E1:B0:6B:A2:4A:67:62:13:F9:76:A4:B5:0C:12:9D:CB:2B:73 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/4N7hsGuiSmdiE_l2pLUMEp3LK3M.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/30/c22dc9-c7ba-4156-a79c-15e90bf87fab/1/4N7hsGuiSmdiE_l2pLUMEp3LK3M.mft X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/30/c22dc9-c7ba-4156-a79c-15e90bf87fab/1/4N7hsGuiSmdiE_l2pLUMEp3LK3M.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 87:5b:f5:05:88:f5:5c:c1:78:04:f7:9c:08:f5:04:a2:26:e3: f3:73:e3:ab:b2:d2:1b:8b:c2:4b:95:ee:ec:01:42:8a:ee:54: 15:75:c2:3b:c7:07:15:92:61:a1:15:f0:7d:ff:6e:9c:83:18: 49:f5:28:c5:cb:c4:38:47:17:0e:b0:b9:82:bf:e5:2c:a1:4f: 3d:80:d0:66:c6:52:40:44:01:85:63:01:42:ac:db:8d:ad:ee: 73:a0:fd:a1:a9:be:f3:db:aa:2b:9e:f7:07:1c:7b:97:71:f7: fa:d7:63:9f:a1:08:0c:eb:bd:01:16:00:0b:0c:c2:78:b5:eb: 2c:06:92:fb:80:e6:d1:94:0c:c2:a0:82:e4:4f:c1:33:9e:0d: 81:b3:77:1d:7c:e9:f0:1a:1d:8e:be:a2:04:e7:8a:3c:b6:61: 4a:76:ed:0e:02:3e:2e:40:65:f9:c2:15:8c:07:41:92:fa:d2: e6:91:bc:de:19:ef:12:31:e2:37:c8:8b:f6:66:ec:f6:e1:08: 1b:88:ac:e5:f5:d0:d3:5d:95:d3:4f:69:24:db:63:d4:e9:4b: 7f:58:d2:16:88:b5:ae:e0:c9:15:d8:e3:20:6b:1d:f9:18:cc: 16:0f:04:15:d5:e7:18:29:b7:79:b4:1d:76:95:7b:8d:62:1e: 30:69:80:c5 -----BEGIN CERTIFICATE----- MIIFFjCCA/6gAwIBAgISAZhJZSu9UpEGmO8KhLycrXP+MA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKGUwZGVlMWIwNmJhMjRhNjc2MjEzZjk3NmE0YjUwYzEyOWRj YjJiNzMwHhcNMjUwNzI3MDEwMDIzWhcNMjUwNzI4MDEwMDIzWjAzMTEwLwYDVQQD EygzMDNhMGM3ZWNlOThkZGY2NGM0OTkyNmNkZjk2ZTY0MWY3ODdkNTJkMIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAjZGGJTAai4mFdYkxKVREfv9II6sG Mx6QrhPaonfH7CRxCGe2yvU/vNeZUGfqPJRAEizZA5ysUyzgURW1ObiFu/dJ3QhA HIRiLshpWhxjAblWFZbj7ESmQAuc4V4DfyZi1StcmX0mZvXz7CiiQPt+AEb9/vQU wOyVm15x9FSiOr3XT+IX3ktmDqEvbBfhNj2sVBIoxVeWFSt7I1VHNWdAznHogUXJ lbVRo7pqHS/OfwscdlJ8G2XSKuzDfBp9oTKf4hwSY2jPZkpYzpAgBFHpDI5k5UuR M4K/aafPIJKiA/hvt4KFgtkb7TPARzD4uOa5FxXqDsmjVKJ0PD3F1V0d1QIDAQAB o4ICIjCCAh4wHQYDVR0OBBYEFDA6DH7OmN32TEmSbN+W5kH3h9UtMB8GA1UdIwQY MBaAFODe4bBrokpnYhP5dqS1DBKdyytzMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvNE43aHNHdWlTbWRpRV9sMnBMVU1FcDNMSzNNLmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC8zMC9jMjJkYzktYzdiYS00MTU2LWE3OWMt MTVlOTBiZjg3ZmFiLzEvNE43aHNHdWlTbWRpRV9sMnBMVU1FcDNMSzNNLm1mdDCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC8zMC9jMjJkYzktYzdiYS00MTU2LWE3OWMtMTVlOTBiZjg3ZmFi LzEvNE43aHNHdWlTbWRpRV9sMnBMVU1FcDNMSzNNLmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAh1v1BYj1 XMF4BPecCPUEoibj83Pjq7LSG4vCS5Xu7AFCiu5UFXXCO8cHFZJhoRXwff9unIMY SfUoxcvEOEcXDrC5gr/lLKFPPYDQZsZSQEQBhWMBQqzbja3uc6D9oam+89uqK573 Bxx7l3H3+tdjn6EIDOu9ARYACwzCeLXrLAaS+4Dm0ZQMwqCC5E/BM54NgbN3HXzp 8Bodjr6iBOeKPLZhSnbtDgI+LkBl+cIVjAdBkvrS5pG83hnvEjHiN8iL9mbs9uEI G4is5fXQ012V009pJNtj1OlLf1jSFoi1ruDJFdjjIGsd+RjMFg8EFdXnGCm3ebQd dpV7jWIeMGmAxQ== -----END CERTIFICATE-----Generated at Sun Jul 27 07:10:49 2025 by rpki-client