$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/3a/7cecc7-f63d-43fc-b219-3955959eaf81/1/RY0S8JUFPDWHa4i0doXWQ1Qh_PI.mft File: RY0S8JUFPDWHa4i0doXWQ1Qh_PI.mft (raw, json) Hash identifier: YpzBfGtY6ZaYg5VuORTggKpyTSt02bxBv1WQExnDlyM= Subject key identifier: 08:3D:16:34:D6:22:AA:C0:08:14:DC:00:1A:B8:25:39:CA:A2:C4:2A Authority key identifier: 45:8D:12:F0:95:05:3C:35:87:6B:88:B4:76:85:D6:43:54:21:FC:F2 Certificate issuer: /CN=458d12f095053c35876b88b47685d6435421fcf2 Certificate serial: 019827EC08F679557306F02607395CB33015 Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/RY0S8JUFPDWHa4i0doXWQ1Qh_PI.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/3a/7cecc7-f63d-43fc-b219-3955959eaf81/1/RY0S8JUFPDWHa4i0doXWQ1Qh_PI.mft Manifest number: 15FD Signing time: Sun 20 Jul 2025 13:00:36 +0000 Manifest this update: Sun 20 Jul 2025 13:00:36 +0000 Manifest next update: Mon 21 Jul 2025 13:00:36 +0000 Files and hashes: 1: 0bSG1GbQSr3JP2M9BW2A6zWEmWQ.roa (hash: m8/KEzPrRo4PqG3DFfILeyvmSqlK6Zrphut5P8ccG8c=) 2: 9lwL98-HDVBrZzYLRCpSdOAFXpo.roa (hash: Za/9eX9VNb3FiSxJk6MAE/CpFGWxRO5mjghE1elRivc=) 3: B0iUIhkwv2ZZdyXRyu9yUh7Z61o.roa (hash: F6O6OkDRyyyGqFimHsLztSYsh0AUNFPNkRW3jSPwvEw=) 4: I1EoUAseUd3MHO-sI_txqICBiwc.roa (hash: khM+HdjIw9WozXCqEk/wtCOtMrpNfxWXErjSXn8BT5M=) 5: KQ7nGqqdl8DwDw35UdDbOJPZhfY.roa (hash: 8pIf1gsysAeCO62ayw5k2bU+b1g8t0mrR6+zNCtTibQ=) 6: LS_oKjOyENRZwn9y786G7x_fDEc.roa (hash: qwrjawF9Z67WE+ivjm8mPIl3xqaLReHxca9+SNnwKPE=) 7: Pvub5ztTS47f0XG6tBZE9ngX8Rw.roa (hash: euQ5dqT6xwCfoTsPu9P7kfQ9UGdbPzkkEJWSyFwCBTw=) 8: RY0S8JUFPDWHa4i0doXWQ1Qh_PI.crl (hash: wyCi4HGKWfGn9dSOVbUOlnrH6g8XLo7eBQVUK7qgdSs=) 9: lqxGizsVmZbvi7xpd3yzs2I4ILw.roa (hash: aTi4SECMvkjegR9/FyzL9HTmeGkM0AsiVgyipWCsYrY=) 10: sFnlwbiQ75y8_114DKwn3kP_iWc.roa (hash: dkHr9wKemXLLSQfaJK2+kCvWwELtA6u+nMBynz2rXgQ=) Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/3a/7cecc7-f63d-43fc-b219-3955959eaf81/1/RY0S8JUFPDWHa4i0doXWQ1Qh_PI.crl rsync://rpki.ripe.net/repository/DEFAULT/3a/7cecc7-f63d-43fc-b219-3955959eaf81/1/RY0S8JUFPDWHa4i0doXWQ1Qh_PI.mft rsync://rpki.ripe.net/repository/DEFAULT/RY0S8JUFPDWHa4i0doXWQ1Qh_PI.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Mon 21 Jul 2025 06:21:25 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:98:27:ec:08:f6:79:55:73:06:f0:26:07:39:5c:b3:30:15 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=458d12f095053c35876b88b47685d6435421fcf2 Validity Not Before: Jul 20 13:00:36 2025 GMT Not After : Jul 21 13:00:36 2025 GMT Subject: CN=083d1634d622aac00814dc001ab82539caa2c42a Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:d5:91:e8:3e:c0:8c:b0:76:a5:73:88:15:58:18: 19:a4:f0:60:45:e1:d5:74:d5:83:f8:59:f3:b2:ca: 9e:89:bb:47:38:8f:2c:0d:80:c8:14:e0:ad:e6:d2: 2f:95:fa:7c:bb:f7:c3:b7:3d:51:22:b8:83:7a:51: 9e:97:22:22:19:f5:0b:81:77:38:2a:3a:da:fb:84: 7b:63:3e:8e:20:14:d7:58:9c:3a:c0:e8:3f:5b:92: 3a:45:cf:d4:6e:d0:0f:30:4c:fd:82:7d:27:c5:db: 7c:28:a0:03:83:42:7c:5c:7c:88:a6:41:45:24:78: 4e:a2:9b:19:f0:dc:eb:3d:c2:ec:d8:ca:d9:93:d2: 9d:ab:bf:c0:2f:cd:87:40:26:61:a9:84:b2:94:b6: e8:59:fd:41:a8:ac:01:65:aa:64:5b:9c:64:d2:3a: f9:76:2c:96:94:29:e3:9f:6d:b1:a1:1d:97:2b:fc: 77:2f:2b:82:91:3c:96:91:e3:10:73:39:05:a4:e6: 48:9f:25:bc:de:ee:5d:01:75:8e:13:95:e0:1a:e6: 2f:ef:1d:86:cf:7c:7c:40:b9:f6:36:fb:fd:96:f8: a9:1f:bb:b9:71:59:16:a0:c5:89:24:8e:94:64:ac: 5d:a8:f7:39:08:fb:f1:41:67:f6:b7:de:dc:fc:d6: d0:2d Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 08:3D:16:34:D6:22:AA:C0:08:14:DC:00:1A:B8:25:39:CA:A2:C4:2A X509v3 Authority Key Identifier: keyid:45:8D:12:F0:95:05:3C:35:87:6B:88:B4:76:85:D6:43:54:21:FC:F2 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/RY0S8JUFPDWHa4i0doXWQ1Qh_PI.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/3a/7cecc7-f63d-43fc-b219-3955959eaf81/1/RY0S8JUFPDWHa4i0doXWQ1Qh_PI.mft X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/3a/7cecc7-f63d-43fc-b219-3955959eaf81/1/RY0S8JUFPDWHa4i0doXWQ1Qh_PI.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 65:23:bf:e3:a4:69:aa:13:32:49:90:92:a8:ae:7f:2d:d2:30: c1:5c:e5:f9:07:a6:d6:ec:35:64:64:99:fb:b9:49:b7:3c:4a: 7a:46:3b:d5:d8:04:dc:89:ae:af:d2:5a:70:ff:40:a2:21:de: 38:6e:e1:26:a4:a2:15:2d:1d:5d:a2:90:9e:e8:d0:41:d7:0b: d5:b0:26:16:a4:7b:03:13:4a:68:58:4a:f8:fe:fc:9f:ea:b8: e5:72:43:84:c8:e7:37:48:d4:e6:dd:80:24:ec:c4:8c:ac:06: 3b:d9:2a:14:48:32:81:15:53:d1:2d:0e:b7:74:45:ed:a2:82: 3c:f2:33:46:21:db:d1:0e:08:95:bb:03:7c:dc:a2:0a:ae:ae: 83:4a:6b:65:60:48:7d:53:4d:0e:65:e8:62:d3:f3:c7:c4:f1: 9e:d4:dc:d6:aa:9e:ad:f3:09:4e:a6:81:cb:e7:b0:88:62:da: b6:b0:5a:fd:ae:90:e0:74:12:59:c5:1e:e4:d7:fe:49:34:fc: f0:40:89:30:90:f4:f1:00:8b:26:86:40:7c:1a:85:5f:57:8e: 24:f1:5c:d2:12:c7:6e:ce:3b:47:24:aa:09:d2:a6:cd:a3:35: 72:50:73:6b:4f:df:5c:0a:9a:b0:41:32:02:54:51:28:12:16: 00:4b:16:0b -----BEGIN CERTIFICATE----- MIIFFjCCA/6gAwIBAgISAZgn7Aj2eVVzBvAmBzlcszAVMA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKDQ1OGQxMmYwOTUwNTNjMzU4NzZiODhiNDc2ODVkNjQzNTQy MWZjZjIwHhcNMjUwNzIwMTMwMDM2WhcNMjUwNzIxMTMwMDM2WjAzMTEwLwYDVQQD EygwODNkMTYzNGQ2MjJhYWMwMDgxNGRjMDAxYWI4MjUzOWNhYTJjNDJhMIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEA1ZHoPsCMsHalc4gVWBgZpPBgReHV dNWD+FnzssqeibtHOI8sDYDIFOCt5tIvlfp8u/fDtz1RIriDelGelyIiGfULgXc4 Kjra+4R7Yz6OIBTXWJw6wOg/W5I6Rc/UbtAPMEz9gn0nxdt8KKADg0J8XHyIpkFF JHhOopsZ8NzrPcLs2MrZk9Kdq7/AL82HQCZhqYSylLboWf1BqKwBZapkW5xk0jr5 diyWlCnjn22xoR2XK/x3LyuCkTyWkeMQczkFpOZInyW83u5dAXWOE5XgGuYv7x2G z3x8QLn2Nvv9lvipH7u5cVkWoMWJJI6UZKxdqPc5CPvxQWf2t97c/NbQLQIDAQAB o4ICIjCCAh4wHQYDVR0OBBYEFAg9FjTWIqrACBTcABq4JTnKosQqMB8GA1UdIwQY MBaAFEWNEvCVBTw1h2uItHaF1kNUIfzyMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvUlkwUzhKVUZQRFdIYTRpMGRvWFdRMVFoX1BJLmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC8zYS83Y2VjYzctZjYzZC00M2ZjLWIyMTkt Mzk1NTk1OWVhZjgxLzEvUlkwUzhKVUZQRFdIYTRpMGRvWFdRMVFoX1BJLm1mdDCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC8zYS83Y2VjYzctZjYzZC00M2ZjLWIyMTktMzk1NTk1OWVhZjgx LzEvUlkwUzhKVUZQRFdIYTRpMGRvWFdRMVFoX1BJLmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAZSO/46Rp qhMySZCSqK5/LdIwwVzl+Qem1uw1ZGSZ+7lJtzxKekY71dgE3Imur9JacP9AoiHe OG7hJqSiFS0dXaKQnujQQdcL1bAmFqR7AxNKaFhK+P78n+q45XJDhMjnN0jU5t2A JOzEjKwGO9kqFEgygRVT0S0Ot3RF7aKCPPIzRiHb0Q4IlbsDfNyiCq6ug0prZWBI fVNNDmXoYtPzx8TxntTc1qqerfMJTqaBy+ewiGLatrBa/a6Q4HQSWcUe5Nf+STT8 8ECJMJD08QCLJoZAfBqFX1eOJPFc0hLHbs47RySqCdKmzaM1clBza0/fXAqasEEy AlRRKBIWAEsWCw== -----END CERTIFICATE-----Generated at Sun Jul 20 14:18:44 2025 by rpki-client