$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/35/5ecfc2-da70-4333-8f96-5b87825c07ee/1/RFbBTNhyT5qQlie5TgBs9p0SMHs.mft File: RFbBTNhyT5qQlie5TgBs9p0SMHs.mft (raw, json) Hash identifier: 2xY08WX1YckgNhBMxqeexSAkM4PoQRpIXoMZA+LIhjM= Subject key identifier: 4D:46:ED:9E:11:A6:EE:44:32:E7:97:10:99:80:57:7D:2E:CC:9A:A7 Authority key identifier: 44:56:C1:4C:D8:72:4F:9A:90:96:27:B9:4E:00:6C:F6:9D:12:30:7B Certificate issuer: /CN=4456c14cd8724f9a909627b94e006cf69d12307b Certificate serial: 019827B538CA2D23D943214BF35AB02E6D8D Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/RFbBTNhyT5qQlie5TgBs9p0SMHs.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/35/5ecfc2-da70-4333-8f96-5b87825c07ee/1/RFbBTNhyT5qQlie5TgBs9p0SMHs.mft Manifest number: 0FEC Signing time: Sun 20 Jul 2025 12:00:44 +0000 Manifest this update: Sun 20 Jul 2025 12:00:44 +0000 Manifest next update: Mon 21 Jul 2025 12:00:44 +0000 Files and hashes: 1: 1-zO_X8m4H1rJu5YxrTfq1_LtFUw.roa (hash: 8XULk9NSCsk6wJTdGSnM5MpRbtNCX8jvKKx3+n/QI24=) 2: 3vuXYmLO804YeH7WzpNylqDzYzk.roa (hash: pZmQFxF+w/pjKco0VNoAljDoLP/ZSq7cNuWVMp1z4Eo=) 3: Ajg1evwXtbOwH8JbxtFbskFgAik.roa (hash: iHM/YIdefBXDCl4eoKU+a8Pl/9qUhEUpDTRYLpSYF+k=) 4: BzIUJhUJbKG8FJ3ZDsR0CAFvEys.roa (hash: Wo3BYY5cyZkRMqsE1puPM7lM2g8GnmQ0M7pog+XPkLo=) 5: RFbBTNhyT5qQlie5TgBs9p0SMHs.crl (hash: UaDxIxYxXtANx85s5GWFocGdylH8FwCIjq0ZpmxrC4k=) 6: hAIfnfjaKDnBZe_kC7FVwx1QMuA.roa (hash: 28LijweuR0v3kdcfazkSP36utyc5j9zhZ5VcP5Ag5ns=) 7: iVv9ozH_svAyWCz87404M3b3dOg.roa (hash: B5ikMCrUQ9bNfvmS1tqxZLEZ9Uh8pGPtdisM2zHNixE=) 8: oxFojUhDbgbvQWJLE662AtGMYd8.roa (hash: D4p1qN18Lpr9kDtEzYCALPnApaaR+jAbpSvJT1J28Nk=) 9: phMHUXGvPxn2DLT5p1ejhNrhbjU.roa (hash: I3f7lI5Gs9gMy8wigPhFWkKF/LTaX3B+WQTJbC+AJvo=) 10: rSBf7m4QN8B8IdOa1QZkuz2yGzo.roa (hash: HK04u30OvyiqU+SoQ1bUDIZ6GpYsXVoMPcjWlJuPm+o=) Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/35/5ecfc2-da70-4333-8f96-5b87825c07ee/1/RFbBTNhyT5qQlie5TgBs9p0SMHs.crl rsync://rpki.ripe.net/repository/DEFAULT/35/5ecfc2-da70-4333-8f96-5b87825c07ee/1/RFbBTNhyT5qQlie5TgBs9p0SMHs.mft rsync://rpki.ripe.net/repository/DEFAULT/RFbBTNhyT5qQlie5TgBs9p0SMHs.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Mon 21 Jul 2025 12:00:44 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:98:27:b5:38:ca:2d:23:d9:43:21:4b:f3:5a:b0:2e:6d:8d Signature Algorithm: sha256WithRSAEncryption Issuer: CN=4456c14cd8724f9a909627b94e006cf69d12307b Validity Not Before: Jul 20 12:00:44 2025 GMT Not After : Jul 21 12:00:44 2025 GMT Subject: CN=4d46ed9e11a6ee4432e797109980577d2ecc9aa7 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:b5:85:d6:ae:b4:6a:a1:40:7e:3a:cd:4c:73:1d: 43:b7:29:f4:c5:38:65:20:e7:29:e7:db:9a:61:cb: 38:b4:6e:2c:2b:3d:bc:51:01:bb:ee:34:c9:11:cf: e0:9a:45:46:c2:40:92:86:e0:6d:39:e7:36:4b:3d: 1c:74:70:d9:ce:73:95:e8:11:31:a5:11:b6:01:12: 5b:0b:fc:21:2a:d4:1e:96:5d:e8:08:b5:53:1c:b3: 2f:a7:42:a0:b0:ef:05:d1:c9:a3:6d:32:52:c8:af: 0d:90:29:6d:65:de:da:06:14:71:5d:c1:74:1b:c9: 71:f5:01:eb:29:44:8e:42:e0:0c:84:e0:0b:c9:9d: d6:5f:de:17:86:d4:46:de:b1:5e:91:ac:e8:2c:97: 35:bd:34:5d:d0:f1:84:55:b6:a8:1f:46:84:43:c3: f8:b4:87:4e:48:6e:54:f1:a2:10:63:5f:88:7e:a6: be:e8:d4:fd:05:93:68:b1:46:ec:51:68:e3:a4:0a: 70:e7:b1:f1:38:e0:21:82:f4:79:a7:2e:c2:db:6a: c6:0c:4d:62:76:65:d6:81:ea:fb:b9:0b:47:3f:c2: 55:67:d9:10:7c:fa:77:e6:98:2b:ec:4b:0e:9a:44: 11:0d:d5:87:6b:74:82:bf:a4:54:e7:a5:27:07:6a: 09:65 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 4D:46:ED:9E:11:A6:EE:44:32:E7:97:10:99:80:57:7D:2E:CC:9A:A7 X509v3 Authority Key Identifier: keyid:44:56:C1:4C:D8:72:4F:9A:90:96:27:B9:4E:00:6C:F6:9D:12:30:7B X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/RFbBTNhyT5qQlie5TgBs9p0SMHs.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/35/5ecfc2-da70-4333-8f96-5b87825c07ee/1/RFbBTNhyT5qQlie5TgBs9p0SMHs.mft X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/35/5ecfc2-da70-4333-8f96-5b87825c07ee/1/RFbBTNhyT5qQlie5TgBs9p0SMHs.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 7d:26:18:b3:a5:46:97:55:8a:a4:ad:7f:5c:c8:83:7f:6a:a4: a3:c5:56:35:f9:5e:c0:10:dc:eb:93:f5:93:b6:4d:1f:31:a7: 6a:7d:b1:71:e5:52:7f:72:57:72:c8:22:b5:c4:74:cc:b5:a3: 42:53:9e:0e:32:3d:2b:c5:64:93:b5:7c:9f:f9:f3:15:d6:77: c3:2e:c6:c3:2f:d9:a3:a2:47:8f:6d:97:cb:86:83:e3:15:93: f2:b8:6c:e3:d7:52:5b:ce:a1:a9:72:a5:5a:54:9b:64:56:6d: 4f:17:a4:48:c7:2f:f6:5a:38:3c:29:4a:0e:45:60:37:68:75: f1:2d:d1:be:69:3e:d4:bd:aa:d6:d9:d0:3c:53:db:2d:af:31: 6b:50:0f:bb:fc:fa:76:f1:97:48:93:63:34:de:94:81:83:1b: 41:d9:e8:fb:fe:e3:dc:54:55:2d:1e:d9:a9:a6:51:d6:cc:64: e1:3b:b9:af:cf:ee:41:e9:35:a8:14:d1:7d:b9:58:a6:81:3b: 0f:af:5f:9c:ce:1f:9b:f7:a7:31:23:3a:31:a6:66:8a:64:6b: 81:79:d1:46:a4:2e:55:fd:e9:54:6d:56:d6:6b:90:1f:98:20: 43:52:bd:af:2b:8f:62:8a:ea:c7:72:9d:c0:5b:b1:2a:0d:9f: d8:f9:28:a1 -----BEGIN CERTIFICATE----- MIIFFjCCA/6gAwIBAgISAZgntTjKLSPZQyFL81qwLm2NMA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKDQ0NTZjMTRjZDg3MjRmOWE5MDk2MjdiOTRlMDA2Y2Y2OWQx MjMwN2IwHhcNMjUwNzIwMTIwMDQ0WhcNMjUwNzIxMTIwMDQ0WjAzMTEwLwYDVQQD Eyg0ZDQ2ZWQ5ZTExYTZlZTQ0MzJlNzk3MTA5OTgwNTc3ZDJlY2M5YWE3MIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAtYXWrrRqoUB+Os1Mcx1Dtyn0xThl IOcp59uaYcs4tG4sKz28UQG77jTJEc/gmkVGwkCShuBtOec2Sz0cdHDZznOV6BEx pRG2ARJbC/whKtQell3oCLVTHLMvp0KgsO8F0cmjbTJSyK8NkCltZd7aBhRxXcF0 G8lx9QHrKUSOQuAMhOALyZ3WX94XhtRG3rFekazoLJc1vTRd0PGEVbaoH0aEQ8P4 tIdOSG5U8aIQY1+Ifqa+6NT9BZNosUbsUWjjpApw57HxOOAhgvR5py7C22rGDE1i dmXWger7uQtHP8JVZ9kQfPp35pgr7EsOmkQRDdWHa3SCv6RU56UnB2oJZQIDAQAB o4ICIjCCAh4wHQYDVR0OBBYEFE1G7Z4Rpu5EMueXEJmAV30uzJqnMB8GA1UdIwQY MBaAFERWwUzYck+akJYnuU4AbPadEjB7MA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvUkZiQlROaHlUNXFRbGllNVRnQnM5cDBTTUhzLmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC8zNS81ZWNmYzItZGE3MC00MzMzLThmOTYt NWI4NzgyNWMwN2VlLzEvUkZiQlROaHlUNXFRbGllNVRnQnM5cDBTTUhzLm1mdDCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC8zNS81ZWNmYzItZGE3MC00MzMzLThmOTYtNWI4NzgyNWMwN2Vl LzEvUkZiQlROaHlUNXFRbGllNVRnQnM5cDBTTUhzLmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAfSYYs6VG l1WKpK1/XMiDf2qko8VWNflewBDc65P1k7ZNHzGnan2xceVSf3JXcsgitcR0zLWj QlOeDjI9K8Vkk7V8n/nzFdZ3wy7Gwy/Zo6JHj22Xy4aD4xWT8rhs49dSW86hqXKl WlSbZFZtTxekSMcv9lo4PClKDkVgN2h18S3Rvmk+1L2q1tnQPFPbLa8xa1APu/z6 dvGXSJNjNN6UgYMbQdno+/7j3FRVLR7ZqaZR1sxk4Tu5r8/uQek1qBTRfblYpoE7 D69fnM4fm/enMSM6MaZmimRrgXnRRqQuVf3pVG1W1muQH5ggQ1K9ryuPYorqx3Kd wFuxKg2f2PkooQ== -----END CERTIFICATE-----Generated at Sun Jul 20 16:49:50 2025 by rpki-client