$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/31/652da9-afc4-4e20-82fc-b07d8416ae4a/1/AOT2p3Not87P5nIgtDZXax4Aiuw.mft File: AOT2p3Not87P5nIgtDZXax4Aiuw.mft (raw, json) Hash identifier: 1yOqKW7Fd3LeTkDe1nJF/hBPRSiFpSqefa1t6GSl+Tw= Subject key identifier: 57:23:38:D8:73:32:4D:74:A9:59:F8:FB:FC:1E:5B:28:A9:80:EB:94 Authority key identifier: 00:E4:F6:A7:73:68:B7:CE:CF:E6:72:20:B4:36:57:6B:1E:00:8A:EC Certificate issuer: /CN=00e4f6a77368b7cecfe67220b436576b1e008aec Certificate serial: 01984B8AA532E2CB465D70D75C0596E09B74 Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/AOT2p3Not87P5nIgtDZXax4Aiuw.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/31/652da9-afc4-4e20-82fc-b07d8416ae4a/1/AOT2p3Not87P5nIgtDZXax4Aiuw.mft Manifest number: 16F8 Signing time: Sun 27 Jul 2025 11:00:33 +0000 Manifest this update: Sun 27 Jul 2025 11:00:33 +0000 Manifest next update: Mon 28 Jul 2025 11:00:33 +0000 Files and hashes: 1: 9T56n42qcdDdN0gF0u82-0VAGAQ.roa (hash: uBMriIGAK+N61tGdoiuf0CM9PKKxee+sm/hbz3LttmE=) 2: AOT2p3Not87P5nIgtDZXax4Aiuw.crl (hash: OSXZEdDLnAH9+4Hd530aXuvqtlFPffA1Z8c9NNFvzxY=) 3: BY6vuao8dzcdWvFAFv0TrK8gbcs.roa (hash: ZDN7wXgq4/TF65FlyVO+h6CqqGxfq850Jit0suO59Nc=) 4: Svvhgo8X1drpMq_QokkBFa4W80w.roa (hash: eEM6GVW64ZPHTJr6mZ27nOJM8iax+cOishqtH69OQFE=) 5: TQuAoSMTgD47o86Mfnh3jJOO5ek.roa (hash: OnrGrU7lhj5to79HwgQxpEZnXPQGMxbjMVbPvn1if3E=) 6: USyW0O_6fcBP2bF0PoHV0RL6-Y8.roa (hash: rYcvR45gztdgTjrFLAUTrj+3T6dDm1wWFyZUivL/lkQ=) 7: UqESFWwPTzjbApEAfUlqEqe0RQE.roa (hash: s8ahaYu2umakIkOHunLEsrzEdAIsc7vrgdaPFAJX/B0=) 8: UwuhHIRc9qSfEX6XGunAr85dyEA.roa (hash: v6KOr1rmHDt+GxwNeTG+w6jxSzGnr+bSVua9Q4OO8C0=) 9: VkkvGMtenz96Ubj3KDzXyym1LzY.roa (hash: E/GDo41oktFV73vvuiDk3fNXk8LkaX2ghEwTcizgkaw=) 10: kLCDMTUTRbJeJajr_KP2p663xqk.roa (hash: Cd9LBaXNUzFq1myVM5COYVtjKiIjTzwaQ7rIDyhpbzE=) 11: mS1g5aNaOIe32m5_FgfjTc6VbP4.roa (hash: DRqrjZnRKpeQWBmj82tLSsN99MhvkwnNbbxykbvBnVg=) Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/31/652da9-afc4-4e20-82fc-b07d8416ae4a/1/AOT2p3Not87P5nIgtDZXax4Aiuw.crl rsync://rpki.ripe.net/repository/DEFAULT/31/652da9-afc4-4e20-82fc-b07d8416ae4a/1/AOT2p3Not87P5nIgtDZXax4Aiuw.mft rsync://rpki.ripe.net/repository/DEFAULT/AOT2p3Not87P5nIgtDZXax4Aiuw.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Mon 28 Jul 2025 09:00:05 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:98:4b:8a:a5:32:e2:cb:46:5d:70:d7:5c:05:96:e0:9b:74 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=00e4f6a77368b7cecfe67220b436576b1e008aec Validity Not Before: Jul 27 11:00:33 2025 GMT Not After : Jul 28 11:00:33 2025 GMT Subject: CN=572338d873324d74a959f8fbfc1e5b28a980eb94 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:a8:29:ca:62:ea:b6:2e:4a:c3:b7:cd:93:23:53: 46:12:5d:d4:8e:28:aa:f8:7b:14:bd:0f:c4:10:06: 7e:9c:82:d4:ce:1e:fe:78:42:d2:88:ba:68:e0:66: 41:6d:86:d3:e9:41:03:cf:87:d0:a2:a7:e5:64:5f: f4:0e:18:95:1a:fe:74:46:89:2c:1a:36:b3:7d:24: c9:4f:29:e6:a0:4a:b6:b5:b0:0b:08:ef:9e:17:f7: 1d:08:78:9a:57:2a:e6:9b:fe:cd:85:fa:bf:3e:69: e7:5c:c8:80:2f:5f:4d:ab:fe:81:03:aa:04:b1:b5: 8f:9e:50:46:59:a3:a0:1d:11:e3:ef:2f:6f:35:e9: d9:88:da:4f:5e:30:c4:40:a3:f4:48:aa:1f:66:27: 63:4a:e5:72:1c:e8:e8:bc:a0:7e:73:ed:c7:e7:d2: 7a:42:d6:d5:bf:93:ef:ba:89:16:f1:d1:88:5e:47: d8:44:e9:c2:b6:9b:0c:2e:59:3d:9c:d1:1e:70:19: fe:01:c4:ad:fe:a5:40:93:75:38:55:72:a7:e5:8c: 84:62:5d:a5:3c:97:33:3b:f3:ab:2d:68:9e:e6:06: 95:5c:71:81:d1:91:5a:0e:ba:6a:f8:f0:02:b7:41: d5:8b:e6:d0:da:7f:b1:05:06:d9:f8:1d:38:4b:95: 72:6b Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 57:23:38:D8:73:32:4D:74:A9:59:F8:FB:FC:1E:5B:28:A9:80:EB:94 X509v3 Authority Key Identifier: keyid:00:E4:F6:A7:73:68:B7:CE:CF:E6:72:20:B4:36:57:6B:1E:00:8A:EC X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/AOT2p3Not87P5nIgtDZXax4Aiuw.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/31/652da9-afc4-4e20-82fc-b07d8416ae4a/1/AOT2p3Not87P5nIgtDZXax4Aiuw.mft X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/31/652da9-afc4-4e20-82fc-b07d8416ae4a/1/AOT2p3Not87P5nIgtDZXax4Aiuw.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 07:99:f4:13:03:bf:44:5c:52:b9:c3:78:1a:79:86:ca:0e:d9: 28:7e:e5:9b:d6:5e:fb:e5:86:a7:3a:33:f2:9d:d8:b9:f5:d5: 88:60:a8:3d:90:d3:75:16:c4:52:b1:bf:3b:80:8e:a8:7d:a9: 73:96:4a:07:75:88:c0:de:b2:92:4d:35:e5:bd:16:b2:58:f8: f8:20:f9:50:b2:15:57:b3:09:e3:f1:24:e2:c6:fa:13:e8:06: f0:64:75:8f:1a:27:ca:e4:fc:e2:5e:3b:84:f2:bf:38:b4:92: 74:a9:21:90:18:81:75:33:94:52:6d:bb:bf:da:36:2d:be:e3: e1:b9:53:31:0a:6c:6a:d0:70:ae:69:f4:03:18:bb:ee:52:5a: a0:71:43:2c:4c:9a:d3:5a:bc:58:de:c8:67:7c:72:91:4e:cb: c5:33:1d:33:f2:36:75:15:6a:76:01:df:67:27:f8:52:c9:00: 2b:e4:3f:f5:44:64:25:3e:7b:4f:9c:ea:cd:51:25:65:bf:44: 32:3e:b8:09:b0:80:fc:10:ec:f0:7a:37:81:2a:67:a5:54:aa: 6e:bf:6f:b6:71:48:d1:d8:7c:ce:5f:27:27:2d:9a:43:48:c5: 00:7f:5a:29:a1:12:21:f7:11:96:9e:30:31:f7:03:16:ba:4e: 23:c6:e9:f8 -----BEGIN CERTIFICATE----- MIIFFjCCA/6gAwIBAgISAZhLiqUy4stGXXDXXAWW4Jt0MA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKDAwZTRmNmE3NzM2OGI3Y2VjZmU2NzIyMGI0MzY1NzZiMWUw MDhhZWMwHhcNMjUwNzI3MTEwMDMzWhcNMjUwNzI4MTEwMDMzWjAzMTEwLwYDVQQD Eyg1NzIzMzhkODczMzI0ZDc0YTk1OWY4ZmJmYzFlNWIyOGE5ODBlYjk0MIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAqCnKYuq2LkrDt82TI1NGEl3Ujiiq +HsUvQ/EEAZ+nILUzh7+eELSiLpo4GZBbYbT6UEDz4fQoqflZF/0DhiVGv50Roks GjazfSTJTynmoEq2tbALCO+eF/cdCHiaVyrmm/7Nhfq/PmnnXMiAL19Nq/6BA6oE sbWPnlBGWaOgHRHj7y9vNenZiNpPXjDEQKP0SKofZidjSuVyHOjovKB+c+3H59J6 QtbVv5PvuokW8dGIXkfYROnCtpsMLlk9nNEecBn+AcSt/qVAk3U4VXKn5YyEYl2l PJczO/OrLWie5gaVXHGB0ZFaDrpq+PACt0HVi+bQ2n+xBQbZ+B04S5VyawIDAQAB o4ICIjCCAh4wHQYDVR0OBBYEFFcjONhzMk10qVn4+/weWyipgOuUMB8GA1UdIwQY MBaAFADk9qdzaLfOz+ZyILQ2V2seAIrsMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvQU9UMnAzTm90ODdQNW5JZ3REWlhheDRBaXV3LmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC8zMS82NTJkYTktYWZjNC00ZTIwLTgyZmMt YjA3ZDg0MTZhZTRhLzEvQU9UMnAzTm90ODdQNW5JZ3REWlhheDRBaXV3Lm1mdDCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC8zMS82NTJkYTktYWZjNC00ZTIwLTgyZmMtYjA3ZDg0MTZhZTRh LzEvQU9UMnAzTm90ODdQNW5JZ3REWlhheDRBaXV3LmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAB5n0EwO/ RFxSucN4GnmGyg7ZKH7lm9Ze++WGpzoz8p3YufXViGCoPZDTdRbEUrG/O4COqH2p c5ZKB3WIwN6ykk015b0Wslj4+CD5ULIVV7MJ4/Ek4sb6E+gG8GR1jxonyuT84l47 hPK/OLSSdKkhkBiBdTOUUm27v9o2Lb7j4blTMQpsatBwrmn0Axi77lJaoHFDLEya 01q8WN7IZ3xykU7LxTMdM/I2dRVqdgHfZyf4UskAK+Q/9URkJT57T5zqzVElZb9E Mj64CbCA/BDs8Ho3gSpnpVSqbr9vtnFI0dh8zl8nJy2aQ0jFAH9aKaESIfcRlp4w MfcDFrpOI8bp+A== -----END CERTIFICATE-----Generated at Sun Jul 27 16:52:52 2025 by rpki-client