$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/36/a67b78-58c8-4311-9e69-6baa3b548d23/1/3b5uCtrou0eDk6qxdbY4ZEx0zLc.mft File: 3b5uCtrou0eDk6qxdbY4ZEx0zLc.mft (raw, json) Hash identifier: P9XY0K8Y21VKvIQmgt3OK/l3wG07HMj9SQnei8oGduE= Subject key identifier: 75:73:33:FB:59:C6:11:43:29:6C:5C:5C:52:BF:D4:62:67:65:C4:1D Authority key identifier: DD:BE:6E:0A:DA:E8:BB:47:83:93:AA:B1:75:B6:38:64:4C:74:CC:B7 Certificate issuer: /CN=ddbe6e0adae8bb478393aab175b638644c74ccb7 Certificate serial: 019826A35577B505AF659F93F34CD2EA7476 Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/3b5uCtrou0eDk6qxdbY4ZEx0zLc.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/36/a67b78-58c8-4311-9e69-6baa3b548d23/1/3b5uCtrou0eDk6qxdbY4ZEx0zLc.mft Manifest number: 108E Signing time: Sun 20 Jul 2025 07:01:35 +0000 Manifest this update: Sun 20 Jul 2025 07:01:35 +0000 Manifest next update: Mon 21 Jul 2025 07:01:35 +0000 Files and hashes: 1: 3b5uCtrou0eDk6qxdbY4ZEx0zLc.crl (hash: cOFIaSD/wcA8Gz8uQWOVrh7tfi5O4nw2GMHswUqnySs=) 2: FmBFQOhNzhtYDdGU28d2mOWYxkg.roa (hash: AVAVJ+z2q5E9uU0vpHh6beNWBbBTBuDWNk3vwtJ8KHM=) 3: a8dfbuD_49og8AJXwHhNJcwaxsI.roa (hash: W1ipPbq868Ly393rgOf3eds1bM0F3aTAdVR1mM1YvM4=) 4: ebI6lo6FFyrxH7BnniqczSoCpEU.roa (hash: VWIQku3g+eu08iWePk/+zF+lAvowuzYaw8AhxuX9/iY=) 5: iEjwphsnsCkTvYcagBPKufnt2-g.roa (hash: exQmAtQ6POft9PaSsq76nVkrM+e0e7z6aqVk5GRVWO8=) 6: mYlPJBjSVo-nMdiARP-4qGUEks0.roa (hash: jq8esI3cAJrQeZlA/zKhC8wm74GcNEo/R1+l+csXuU4=) 7: n11ZJorlH1hZHcOrMkN5woOVejs.roa (hash: qO1znHdZkcnjjGqE4Hx9Dgh/NFBxbtAoTeajvo0zDfk=) 8: rhaUzcqQYW4tC3EdQCdaNLWOPbA.roa (hash: PvCUNKVTR3gGQiqq6yWqtNwJ314FXo4VLynnYKTFbJo=) 9: uEehilTaJNTK6wTZHHdxxqFauYo.roa (hash: tRIraXpN8mX3nJ3uL7fIgHQ/edV3rhiXldnw6ddpk0I=) 10: x6Fr-1VeTypvMg38CuYZL6Aoelo.roa (hash: ajAlNUJcOgM2msZH/aiPOA3cqagu5/2Oq4Xgzqwcm3g=) Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/36/a67b78-58c8-4311-9e69-6baa3b548d23/1/3b5uCtrou0eDk6qxdbY4ZEx0zLc.crl rsync://rpki.ripe.net/repository/DEFAULT/36/a67b78-58c8-4311-9e69-6baa3b548d23/1/3b5uCtrou0eDk6qxdbY4ZEx0zLc.mft rsync://rpki.ripe.net/repository/DEFAULT/3b5uCtrou0eDk6qxdbY4ZEx0zLc.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Mon 21 Jul 2025 07:01:35 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:98:26:a3:55:77:b5:05:af:65:9f:93:f3:4c:d2:ea:74:76 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=ddbe6e0adae8bb478393aab175b638644c74ccb7 Validity Not Before: Jul 20 07:01:35 2025 GMT Not After : Jul 21 07:01:35 2025 GMT Subject: CN=757333fb59c61143296c5c5c52bfd4626765c41d Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:c4:b8:42:33:0a:bd:b1:a5:34:21:bd:4e:ae:6c: 25:19:71:61:de:4d:b3:2a:65:88:b6:12:5d:9b:5b: c8:76:d2:35:d3:9d:d2:2d:97:d6:da:eb:39:72:66: 19:c1:e5:5a:b9:8c:81:2f:ab:17:b6:ab:03:c5:13: ee:71:4f:36:44:65:5b:08:4a:cc:0e:89:67:89:71: d3:1f:35:8e:38:ec:f0:bc:b3:0a:85:fa:a6:96:6f: 24:b2:e9:82:b4:f7:78:6e:44:9a:ff:0a:cb:27:78: 0e:5c:20:62:1d:1c:e7:54:74:39:2c:35:4d:72:69: fa:87:a8:04:37:62:be:0b:1a:ea:20:4c:27:cd:ff: 87:d1:57:f7:19:7e:7f:a1:fb:3e:85:54:a8:03:bc: d7:95:bd:46:49:51:eb:8f:8a:2a:e1:8a:14:c3:6e: dd:11:8e:aa:bf:10:85:a5:cc:94:b6:6d:7f:fe:ee: b0:3f:b7:97:34:9f:32:3a:8d:9a:61:ba:59:7d:cf: e3:1c:20:f3:9f:6c:a7:aa:94:60:3d:ee:02:fc:2e: e8:4e:bf:61:f2:22:f1:b2:19:af:7e:fd:5e:7b:aa: d1:e9:c4:1e:d3:84:43:f1:71:87:23:82:75:b6:12: cf:f4:41:68:92:93:c2:11:7b:cd:80:41:03:c7:bf: 03:27 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 75:73:33:FB:59:C6:11:43:29:6C:5C:5C:52:BF:D4:62:67:65:C4:1D X509v3 Authority Key Identifier: keyid:DD:BE:6E:0A:DA:E8:BB:47:83:93:AA:B1:75:B6:38:64:4C:74:CC:B7 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/3b5uCtrou0eDk6qxdbY4ZEx0zLc.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/36/a67b78-58c8-4311-9e69-6baa3b548d23/1/3b5uCtrou0eDk6qxdbY4ZEx0zLc.mft X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/36/a67b78-58c8-4311-9e69-6baa3b548d23/1/3b5uCtrou0eDk6qxdbY4ZEx0zLc.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 35:ac:df:68:c8:e7:fb:71:46:29:e4:6c:88:2a:24:98:ad:1e: 1c:16:da:df:ca:2c:6a:56:71:38:00:e7:e9:e2:a4:7d:5a:92: c8:0b:0d:5e:50:38:cd:68:27:2a:12:2d:9c:1e:ff:db:dd:93: e8:cd:8a:5d:0e:b0:8a:9c:5f:5e:b4:5a:34:13:1a:bf:4f:06: 04:df:5c:40:8b:1e:31:c9:40:b4:f2:63:d2:48:2a:55:13:49: 59:e3:69:5f:4d:70:92:5a:d7:f5:80:87:eb:39:43:d9:b0:e4: d1:3f:21:58:d7:60:24:10:eb:f8:b2:7c:9d:63:aa:a7:36:8b: 70:80:05:c3:ed:6a:21:0c:ce:57:b8:a5:bc:2c:06:69:d4:16: 4d:9e:05:05:53:d9:b5:1b:15:f7:4c:ac:85:b7:c3:43:dc:c8: d1:fc:75:c2:5a:cf:4d:77:1d:74:a0:e6:0d:4d:c4:2d:a0:c9: e6:24:0a:bb:5a:88:bf:f1:59:7b:04:2d:72:47:29:14:73:26: ff:5b:d5:9d:95:50:8d:dc:85:5d:9a:ff:12:e6:c3:3c:45:7c: d4:97:07:a8:69:d2:43:0e:94:f5:6d:be:7e:01:08:f6:e6:61: c6:48:a1:0a:6a:37:9f:3a:15:e9:67:2a:15:58:87:c9:2a:72: db:77:43:04 -----BEGIN CERTIFICATE----- MIIFFjCCA/6gAwIBAgISAZgmo1V3tQWvZZ+T80zS6nR2MA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKGRkYmU2ZTBhZGFlOGJiNDc4MzkzYWFiMTc1YjYzODY0NGM3 NGNjYjcwHhcNMjUwNzIwMDcwMTM1WhcNMjUwNzIxMDcwMTM1WjAzMTEwLwYDVQQD Eyg3NTczMzNmYjU5YzYxMTQzMjk2YzVjNWM1MmJmZDQ2MjY3NjVjNDFkMIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAxLhCMwq9saU0Ib1OrmwlGXFh3k2z KmWIthJdm1vIdtI1053SLZfW2us5cmYZweVauYyBL6sXtqsDxRPucU82RGVbCErM DolniXHTHzWOOOzwvLMKhfqmlm8ksumCtPd4bkSa/wrLJ3gOXCBiHRznVHQ5LDVN cmn6h6gEN2K+CxrqIEwnzf+H0Vf3GX5/ofs+hVSoA7zXlb1GSVHrj4oq4YoUw27d EY6qvxCFpcyUtm1//u6wP7eXNJ8yOo2aYbpZfc/jHCDzn2ynqpRgPe4C/C7oTr9h 8iLxshmvfv1ee6rR6cQe04RD8XGHI4J1thLP9EFokpPCEXvNgEEDx78DJwIDAQAB o4ICIjCCAh4wHQYDVR0OBBYEFHVzM/tZxhFDKWxcXFK/1GJnZcQdMB8GA1UdIwQY MBaAFN2+bgra6LtHg5OqsXW2OGRMdMy3MA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvM2I1dUN0cm91MGVEazZxeGRiWTRaRXgwekxjLmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC8zNi9hNjdiNzgtNThjOC00MzExLTllNjkt NmJhYTNiNTQ4ZDIzLzEvM2I1dUN0cm91MGVEazZxeGRiWTRaRXgwekxjLm1mdDCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC8zNi9hNjdiNzgtNThjOC00MzExLTllNjktNmJhYTNiNTQ4ZDIz LzEvM2I1dUN0cm91MGVEazZxeGRiWTRaRXgwekxjLmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEANazfaMjn +3FGKeRsiCokmK0eHBba38osalZxOADn6eKkfVqSyAsNXlA4zWgnKhItnB7/292T 6M2KXQ6wipxfXrRaNBMav08GBN9cQIseMclAtPJj0kgqVRNJWeNpX01wklrX9YCH 6zlD2bDk0T8hWNdgJBDr+LJ8nWOqpzaLcIAFw+1qIQzOV7ilvCwGadQWTZ4FBVPZ tRsV90yshbfDQ9zI0fx1wlrPTXcddKDmDU3ELaDJ5iQKu1qIv/FZewQtckcpFHMm /1vVnZVQjdyFXZr/EubDPEV81JcHqGnSQw6U9W2+fgEI9uZhxkihCmo3nzoV6Wcq FViHySpy23dDBA== -----END CERTIFICATE-----Generated at Sun Jul 20 16:20:23 2025 by rpki-client