$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/39/293a2f-3997-497f-9ef1-4852c8ff8af2/1/kdDHjDCaPpncmrdPLNwEhIWedTA.mft File: kdDHjDCaPpncmrdPLNwEhIWedTA.mft (raw, json) Hash identifier: KENd30fAKaNol1bzPVNyrmq8bybKnb+zCvykEer8ebc= Subject key identifier: A2:5F:59:D1:2C:16:E2:05:73:BB:01:B8:2F:BD:8F:07:16:99:5B:B4 Authority key identifier: 91:D0:C7:8C:30:9A:3E:99:DC:9A:B7:4F:2C:DC:04:84:85:9E:75:30 Certificate issuer: /CN=91d0c78c309a3e99dc9ab74f2cdc0484859e7530 Certificate serial: 0198466484B7FE3C3941A56B773D0DD6438C Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/kdDHjDCaPpncmrdPLNwEhIWedTA.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/39/293a2f-3997-497f-9ef1-4852c8ff8af2/1/kdDHjDCaPpncmrdPLNwEhIWedTA.mft Manifest number: 1117 Signing time: Sat 26 Jul 2025 11:00:49 +0000 Manifest this update: Sat 26 Jul 2025 11:00:49 +0000 Manifest next update: Sun 27 Jul 2025 11:00:49 +0000 Files and hashes: 1: 1-W_ixXGYX8sPaJagj-AVwFiwChc.roa (hash: L0D3lIfkN9efhBw5T+b3u9NkdIMxDqZ5UXxZUhgRWOs=) 2: 1wei3P__YsLq8D2DZQdx3r5Se8Q.roa (hash: mJ3sfO2t0ZrVqr8Lh/dS5cWV3uJ23FidlrzCBj85Xpg=) 3: D9OViOUA1-461O4zttxUuu7lHv0.roa (hash: 2itBNaHzhENVRyOefdMh6N1RENcyUMqY/eAvQKNqorQ=) 4: FL9fu1OvmoFGfhkDWCYg6qk3FZw.roa (hash: 4qo1m7CfLoe2e1/s3slGLhDBLmvad/IFz+DUbL4c5ro=) 5: QhTNtcmMP2d8JHj8beOVtwBfn-8.roa (hash: pGtJfsZnHgpcNHsy6MUt5rD0YLB/sQz5xjhWg8xCmoY=) 6: b_UNR9Xj_ycfuOSMA48F_QSRqts.roa (hash: V/FK04zH2Za3Nwu+0PjyuAuPUrWk9vHEnkwAOnyhoAs=) 7: kdDHjDCaPpncmrdPLNwEhIWedTA.crl (hash: 8hMdFW6pPczVPJfBDdS55V3Ekk9dOflf/fBG9b9vEIY=) 8: mI6CMDbVFOggenhN7vYK1kqjlUM.roa (hash: Ix338GJteDKUBZwQ6uAO2I9vp00YeBcogG5YXz8IPLE=) 9: vUVcdpzXr2JQGsu1xtXoOvW_LHU.roa (hash: 2iN03nQJUllsMqRJ1fP7+P4h4U6MeEk1ERszIuxQ8MY=) 10: wGY7w33wbp754v9ca7Ik2gL3Voc.roa (hash: cLU9Ywl9VMx+T+dYulHYxfzmlahVeyhReHN4Xp/Qd78=) Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/39/293a2f-3997-497f-9ef1-4852c8ff8af2/1/kdDHjDCaPpncmrdPLNwEhIWedTA.crl rsync://rpki.ripe.net/repository/DEFAULT/39/293a2f-3997-497f-9ef1-4852c8ff8af2/1/kdDHjDCaPpncmrdPLNwEhIWedTA.mft rsync://rpki.ripe.net/repository/DEFAULT/kdDHjDCaPpncmrdPLNwEhIWedTA.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Sun 27 Jul 2025 11:00:05 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:98:46:64:84:b7:fe:3c:39:41:a5:6b:77:3d:0d:d6:43:8c Signature Algorithm: sha256WithRSAEncryption Issuer: CN=91d0c78c309a3e99dc9ab74f2cdc0484859e7530 Validity Not Before: Jul 26 11:00:49 2025 GMT Not After : Jul 27 11:00:49 2025 GMT Subject: CN=a25f59d12c16e20573bb01b82fbd8f0716995bb4 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:a9:9a:cd:db:22:af:e6:dc:68:3a:b2:a3:8b:8b: ba:b7:a9:2f:2c:d3:62:52:fa:25:85:03:00:dc:7e: 81:19:57:4c:8b:93:15:7d:8a:e6:21:af:36:5e:97: 02:6e:00:d3:ff:8d:39:26:5c:dc:b6:4f:f1:37:1b: 56:68:12:e0:c9:a5:2a:04:85:d6:ec:c8:02:d9:01: 33:54:c8:91:87:db:d9:59:7a:21:2d:30:fd:0d:46: 12:01:2d:6e:06:38:1a:76:d1:04:65:42:cb:0e:d1: a8:13:c8:e9:28:62:b3:10:c1:c1:17:15:a7:fe:60: b7:e4:05:b5:64:96:5e:ca:c8:98:51:dd:0d:b9:cd: 43:a4:f3:77:68:6e:6f:29:60:6e:07:d6:04:d6:bf: 9f:db:89:34:7b:7d:70:4c:49:5d:b7:96:e7:29:83: ef:f1:f1:57:8b:e7:2d:65:d9:ad:3d:94:36:72:30: 05:eb:48:56:e7:dd:8b:7b:f6:52:ab:a8:54:0e:83: 23:5e:87:1d:f0:a6:23:03:8c:59:8c:a4:1a:65:23: ad:d0:41:fe:15:2c:f6:d8:51:96:11:2a:c4:b0:87: 27:df:70:a0:29:67:7a:e5:9f:e4:0c:ee:5e:7e:af: fb:5e:a6:bc:cb:b8:1b:28:5f:1b:d3:22:a3:72:6d: d7:ff Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: A2:5F:59:D1:2C:16:E2:05:73:BB:01:B8:2F:BD:8F:07:16:99:5B:B4 X509v3 Authority Key Identifier: keyid:91:D0:C7:8C:30:9A:3E:99:DC:9A:B7:4F:2C:DC:04:84:85:9E:75:30 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/kdDHjDCaPpncmrdPLNwEhIWedTA.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/39/293a2f-3997-497f-9ef1-4852c8ff8af2/1/kdDHjDCaPpncmrdPLNwEhIWedTA.mft X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/39/293a2f-3997-497f-9ef1-4852c8ff8af2/1/kdDHjDCaPpncmrdPLNwEhIWedTA.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 05:46:bd:b1:9f:b9:ad:59:71:ec:e9:88:fa:7e:78:bf:e6:53: dc:4a:ec:86:be:31:88:0f:0d:d1:f2:38:83:55:88:1c:44:d8: de:5c:63:d4:2d:e4:c6:e1:64:36:ff:80:55:7d:55:11:ff:26: b4:0c:3e:06:c5:22:3c:ed:23:b3:b5:6e:49:f1:f9:96:0b:20: 58:d2:fc:db:5b:95:14:c1:6e:44:56:21:44:53:92:c0:7d:70: 58:41:f3:1a:8d:0e:fb:d4:ba:f9:ea:79:f0:e5:f8:3d:3e:72: 43:fb:44:4e:c6:44:48:45:92:65:38:a5:c8:83:04:99:0b:a1: 3d:e1:29:45:3f:3a:75:13:61:fe:fa:f1:1b:99:83:2f:06:bb: 77:4f:21:67:18:81:3c:69:ce:05:af:c6:88:55:15:ea:e0:08: 48:26:b4:53:30:74:93:1e:86:fe:27:94:0d:a3:b3:1a:45:48: 0d:d2:f3:ff:f7:41:f8:ba:8f:be:72:35:23:33:c7:95:40:33: b7:82:aa:9f:6e:8d:22:a0:b9:be:b8:06:8d:da:31:af:dd:b8: 88:16:5c:fc:00:ac:3b:07:c0:e3:07:e4:bc:3b:77:46:dc:cf: 9f:1f:59:6d:2a:6d:c3:59:24:0b:54:f1:4b:d4:25:9c:57:37: a6:f4:53:9e -----BEGIN CERTIFICATE----- MIIFFjCCA/6gAwIBAgISAZhGZIS3/jw5QaVrdz0N1kOMMA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKDkxZDBjNzhjMzA5YTNlOTlkYzlhYjc0ZjJjZGMwNDg0ODU5 ZTc1MzAwHhcNMjUwNzI2MTEwMDQ5WhcNMjUwNzI3MTEwMDQ5WjAzMTEwLwYDVQQD EyhhMjVmNTlkMTJjMTZlMjA1NzNiYjAxYjgyZmJkOGYwNzE2OTk1YmI0MIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAqZrN2yKv5txoOrKji4u6t6kvLNNi UvolhQMA3H6BGVdMi5MVfYrmIa82XpcCbgDT/405Jlzctk/xNxtWaBLgyaUqBIXW 7MgC2QEzVMiRh9vZWXohLTD9DUYSAS1uBjgadtEEZULLDtGoE8jpKGKzEMHBFxWn /mC35AW1ZJZeysiYUd0Nuc1DpPN3aG5vKWBuB9YE1r+f24k0e31wTEldt5bnKYPv 8fFXi+ctZdmtPZQ2cjAF60hW592Le/ZSq6hUDoMjXocd8KYjA4xZjKQaZSOt0EH+ FSz22FGWESrEsIcn33CgKWd65Z/kDO5efq/7Xqa8y7gbKF8b0yKjcm3X/wIDAQAB o4ICIjCCAh4wHQYDVR0OBBYEFKJfWdEsFuIFc7sBuC+9jwcWmVu0MB8GA1UdIwQY MBaAFJHQx4wwmj6Z3Jq3TyzcBISFnnUwMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQva2RESGpEQ2FQcG5jbXJkUExOd0VoSVdlZFRBLmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC8zOS8yOTNhMmYtMzk5Ny00OTdmLTllZjEt NDg1MmM4ZmY4YWYyLzEva2RESGpEQ2FQcG5jbXJkUExOd0VoSVdlZFRBLm1mdDCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC8zOS8yOTNhMmYtMzk5Ny00OTdmLTllZjEtNDg1MmM4ZmY4YWYy LzEva2RESGpEQ2FQcG5jbXJkUExOd0VoSVdlZFRBLmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEABUa9sZ+5 rVlx7OmI+n54v+ZT3Ershr4xiA8N0fI4g1WIHETY3lxj1C3kxuFkNv+AVX1VEf8m tAw+BsUiPO0js7VuSfH5lgsgWNL821uVFMFuRFYhRFOSwH1wWEHzGo0O+9S6+ep5 8OX4PT5yQ/tETsZESEWSZTilyIMEmQuhPeEpRT86dRNh/vrxG5mDLwa7d08hZxiB PGnOBa/GiFUV6uAISCa0UzB0kx6G/ieUDaOzGkVIDdLz//dB+LqPvnI1IzPHlUAz t4Kqn26NIqC5vrgGjdoxr924iBZc/ACsOwfA4wfkvDt3RtzPnx9ZbSptw1kkC1Tx S9QlnFc3pvRTng== -----END CERTIFICATE-----Generated at Sat Jul 26 20:45:53 2025 by rpki-client