$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/34/41c321-347e-4c3e-affd-e2b527728e96/1/P-3YXB7Mtf9LqTARenMpCZwP8us.mft File: P-3YXB7Mtf9LqTARenMpCZwP8us.mft (raw, json) Hash identifier: HUreQQwJqAPp/2CocjwFq6vAQv6pL2SvPEzJP1HAto8= Subject key identifier: 74:2A:6D:CA:58:79:3C:09:80:EF:F5:2B:47:86:04:EC:FD:34:E7:58 Authority key identifier: 3F:ED:D8:5C:1E:CC:B5:FF:4B:A9:30:11:7A:73:29:09:9C:0F:F2:EB Certificate issuer: /CN=3fedd85c1eccb5ff4ba930117a7329099c0ff2eb Certificate serial: 019835712D01FAFA6109FA8160C642E3F0D9 Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/P-3YXB7Mtf9LqTARenMpCZwP8us.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/34/41c321-347e-4c3e-affd-e2b527728e96/1/P-3YXB7Mtf9LqTARenMpCZwP8us.mft Manifest number: 161C Signing time: Wed 23 Jul 2025 04:01:06 +0000 Manifest this update: Wed 23 Jul 2025 04:01:06 +0000 Manifest next update: Thu 24 Jul 2025 04:01:06 +0000 Files and hashes: 1: 4SyAKG9FRt1gAFJy5VgH5PwxTRA.roa (hash: jTSIiH7dSb5EybAsEY+n22bAiKvGllq/AuPJ12+ncpM=) 2: BPvvMmPw0v2RXdpWWHfCuRUXY28.roa (hash: xZBsJjBvf0lTF+79AIT0zRbookilcef0qHIZ5VPCKjo=) 3: BZv8sGCcNALUX5pRivC_EjiidAY.roa (hash: h2vpw3fwMWMbbCOrxK6C72hr7+aeGxdeLm1OT0QOTJY=) 4: DGiTictajwWlIqV1Y3gB4SABHrM.roa (hash: Id5c1uksWgHuNXSqMulTJtxTXfw1/TAJk3AEd7b9YRQ=) 5: Mk65rzu_RkrceH34hYZR24Obsg0.roa (hash: rTzdbjg2prHl5GqIGFCWtd1Ib91ETCuwTrOfSPbAKbI=) 6: P-3YXB7Mtf9LqTARenMpCZwP8us.crl (hash: mpjbCmvVAKAAdRQBdSHJRZblBxkhiUKAZudWgnAkKww=) 7: Q7Kremg5Fgj0SfkKKXdi8FJc68I.roa (hash: wwhqLnVWip/tEomt2waPsqqsK0Xf41SfYznp1QkJ0BM=) 8: VB2zjyzRbVcAI7qwybUzZhlXV-U.roa (hash: cbrJc/4RT0HiKhNiv2HtCVB5MjAEHV6aPZtCJF7/HaM=) 9: fScTC-RTAL4AeGIUFDXeFWgxNOU.roa (hash: LpQDvJVc9hMoS+6x9uoQSz8d+i8pdM/6GrU1p5QPkoU=) 10: gjV1b6nl-2sIdV0OViEWc13VOgw.roa (hash: YJxg+E5odCH0e5CDjaGL8I+42oC/IlpXfOKgoo/xCo4=) 11: i_vdOGwxPt-bikrKCsCq4vU6o1Y.roa (hash: Oi88txSdII7ssSiwm/zvR3/xE/bpdarLSDiFGBrNlqs=) 12: jLM5t3eg01fijHX5BZDxTUjpEGU.roa (hash: zlqEOh5qlKElj+/BR3gY6unzfRt8ygL6XM3lywwcPBU=) 13: jt3cdzogC_GhOHVIdQu1LfkbDrM.roa (hash: 4TbqHgl6LIIhOvKU0Ma8NpMAoh5pYOvW9g1cZnc89eY=) 14: mv1h37MzImfXhXtotGH2l6nUD-c.roa (hash: jma1UU++sReZAO/OYU5m4FrNNXuoRuTByWXR/ZHh5qk=) 15: pPSUgW-kch1wzV-mL74GjoJRYas.roa (hash: 14IsY2Pcu5B3SjJ5ycOJDXddH4w35As15arfEbi1nXc=) 16: sVq7ykDogd7cCsDF--hBK9DnjT4.roa (hash: yntzoQcvzBrX+tVilVNDQYJnh1oAW90RlNAXUQi35Kc=) 17: yUsdU2ULQpT4CaBLrnJG--v6B4k.roa (hash: nFPDGUe2wiSsXpmHy1xpSDCHB5E3thvkbalz4PA2+qg=) Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/34/41c321-347e-4c3e-affd-e2b527728e96/1/P-3YXB7Mtf9LqTARenMpCZwP8us.crl rsync://rpki.ripe.net/repository/DEFAULT/34/41c321-347e-4c3e-affd-e2b527728e96/1/P-3YXB7Mtf9LqTARenMpCZwP8us.mft rsync://rpki.ripe.net/repository/DEFAULT/P-3YXB7Mtf9LqTARenMpCZwP8us.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Wed 23 Jul 2025 22:00:25 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:98:35:71:2d:01:fa:fa:61:09:fa:81:60:c6:42:e3:f0:d9 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=3fedd85c1eccb5ff4ba930117a7329099c0ff2eb Validity Not Before: Jul 23 04:01:06 2025 GMT Not After : Jul 24 04:01:06 2025 GMT Subject: CN=742a6dca58793c0980eff52b478604ecfd34e758 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:b2:60:04:b1:0e:1a:a9:07:73:3e:0c:06:e0:d4: aa:67:b8:e5:f5:91:77:5f:82:e1:c6:34:24:8c:ab: 12:f4:36:5b:2c:74:36:ad:3d:2a:9c:36:ce:b3:22: b4:ae:f0:1b:8f:6e:d8:dc:76:8e:12:6e:51:91:23: ff:54:2a:f4:f4:38:6e:a9:97:5a:db:cc:23:2e:e1: 8d:6c:39:d9:ef:48:17:92:79:46:d2:72:b5:ea:8f: c7:6a:ab:d9:6d:65:fe:08:0d:c5:0c:7d:44:4e:a7: 0f:c6:ff:78:7e:c6:44:bb:db:39:07:df:c0:96:0e: d0:b2:60:95:48:2c:f0:74:85:59:cb:a3:75:32:f7: 71:1d:19:da:d6:69:21:2f:d2:a7:28:0d:cc:99:1f: 6e:61:16:84:ca:e4:2a:10:2f:50:87:9b:81:85:4d: 8e:d7:68:7b:81:96:39:a4:5b:7e:8a:5c:17:23:8b: 91:08:6c:9b:0f:17:f0:54:e9:ad:7b:5d:64:75:db: 74:16:d0:ec:55:62:c8:7d:9e:cd:98:21:c1:b0:ca: d1:65:0f:76:13:bd:f0:ee:0b:ff:90:15:fe:7e:f7: fe:2c:2e:78:75:33:5a:66:3b:03:e4:62:e1:28:01: 52:14:32:7b:c0:e3:6b:12:a7:f6:97:88:4c:53:a8: b3:83 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 74:2A:6D:CA:58:79:3C:09:80:EF:F5:2B:47:86:04:EC:FD:34:E7:58 X509v3 Authority Key Identifier: keyid:3F:ED:D8:5C:1E:CC:B5:FF:4B:A9:30:11:7A:73:29:09:9C:0F:F2:EB X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/P-3YXB7Mtf9LqTARenMpCZwP8us.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/34/41c321-347e-4c3e-affd-e2b527728e96/1/P-3YXB7Mtf9LqTARenMpCZwP8us.mft X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/34/41c321-347e-4c3e-affd-e2b527728e96/1/P-3YXB7Mtf9LqTARenMpCZwP8us.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 50:3c:01:42:ba:82:21:68:12:49:86:48:01:62:64:9f:e8:58: b1:c4:1d:ce:a6:22:d1:a2:5d:7c:fa:69:bd:d9:a7:fe:ba:59: 01:f9:84:c8:14:fe:bb:98:43:fc:d3:2a:e3:1f:63:9d:96:92: 2e:a5:89:b2:02:56:14:76:93:10:ac:49:4f:68:78:03:e8:e6: 53:1b:03:49:c2:74:2d:b9:e7:fa:d0:98:72:21:a2:e5:e9:b5: ae:58:cc:09:81:a8:ba:f5:9d:f4:0d:cf:62:df:30:6b:8a:ee: dd:21:82:36:63:cb:a0:65:42:68:af:7d:ab:8d:06:55:85:4a: 8c:33:02:ca:fc:0a:da:72:1d:1b:3b:61:47:48:f1:66:93:f1: 1d:b2:fe:1e:c6:1e:fa:e2:38:d9:f6:b6:6f:70:80:23:87:65: 7a:8b:33:13:9e:80:e4:d1:67:e0:29:81:d1:bd:b3:b9:a0:0a: cf:d3:72:ba:bb:51:e5:8d:11:c6:38:f2:4a:0c:c9:28:d6:22: 04:4a:96:b4:2c:04:7a:ac:bb:bc:4d:ae:b9:95:66:a9:9e:38: b4:0c:fe:d6:f6:46:cc:f4:d1:71:b5:4c:77:42:58:43:21:e2: 3c:8a:b7:c9:d5:71:c2:4d:7f:db:cc:73:3d:6b:93:55:ad:26: e1:27:50:59 -----BEGIN CERTIFICATE----- MIIFFjCCA/6gAwIBAgISAZg1cS0B+vphCfqBYMZC4/DZMA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKDNmZWRkODVjMWVjY2I1ZmY0YmE5MzAxMTdhNzMyOTA5OWMw ZmYyZWIwHhcNMjUwNzIzMDQwMTA2WhcNMjUwNzI0MDQwMTA2WjAzMTEwLwYDVQQD Eyg3NDJhNmRjYTU4NzkzYzA5ODBlZmY1MmI0Nzg2MDRlY2ZkMzRlNzU4MIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAsmAEsQ4aqQdzPgwG4NSqZ7jl9ZF3 X4LhxjQkjKsS9DZbLHQ2rT0qnDbOsyK0rvAbj27Y3HaOEm5RkSP/VCr09DhuqZda 28wjLuGNbDnZ70gXknlG0nK16o/HaqvZbWX+CA3FDH1ETqcPxv94fsZEu9s5B9/A lg7QsmCVSCzwdIVZy6N1MvdxHRna1mkhL9KnKA3MmR9uYRaEyuQqEC9Qh5uBhU2O 12h7gZY5pFt+ilwXI4uRCGybDxfwVOmte11kddt0FtDsVWLIfZ7NmCHBsMrRZQ92 E73w7gv/kBX+fvf+LC54dTNaZjsD5GLhKAFSFDJ7wONrEqf2l4hMU6izgwIDAQAB o4ICIjCCAh4wHQYDVR0OBBYEFHQqbcpYeTwJgO/1K0eGBOz9NOdYMB8GA1UdIwQY MBaAFD/t2FwezLX/S6kwEXpzKQmcD/LrMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvUC0zWVhCN010ZjlMcVRBUmVuTXBDWndQOHVzLmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC8zNC80MWMzMjEtMzQ3ZS00YzNlLWFmZmQt ZTJiNTI3NzI4ZTk2LzEvUC0zWVhCN010ZjlMcVRBUmVuTXBDWndQOHVzLm1mdDCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC8zNC80MWMzMjEtMzQ3ZS00YzNlLWFmZmQtZTJiNTI3NzI4ZTk2 LzEvUC0zWVhCN010ZjlMcVRBUmVuTXBDWndQOHVzLmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAUDwBQrqC IWgSSYZIAWJkn+hYscQdzqYi0aJdfPppvdmn/rpZAfmEyBT+u5hD/NMq4x9jnZaS LqWJsgJWFHaTEKxJT2h4A+jmUxsDScJ0Lbnn+tCYciGi5em1rljMCYGouvWd9A3P Yt8wa4ru3SGCNmPLoGVCaK99q40GVYVKjDMCyvwK2nIdGzthR0jxZpPxHbL+HsYe +uI42fa2b3CAI4dleoszE56A5NFn4CmB0b2zuaAKz9NyurtR5Y0RxjjySgzJKNYi BEqWtCwEeqy7vE2uuZVmqZ44tAz+1vZGzPTRcbVMd0JYQyHiPIq3ydVxwk1/28xz PWuTVa0m4SdQWQ== -----END CERTIFICATE-----Generated at Wed Jul 23 05:30:04 2025 by rpki-client