$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/3a/abe134-0093-4652-9057-4f4c9b343e90/1/0d4STg-K2059lXbOrjJfZo3SJLE.mft File: 0d4STg-K2059lXbOrjJfZo3SJLE.mft (raw, json) Hash identifier: xEKUceGnT/e18UM0H8j2JwO9mGl5zP+rbBUpIPZ4WWQ= Subject key identifier: F4:B1:0F:01:5A:30:23:B8:59:84:CA:E8:09:E2:84:64:CC:C2:EB:53 Authority key identifier: D1:DE:12:4E:0F:8A:DB:4E:7D:95:76:CE:AE:32:5F:66:8D:D2:24:B1 Certificate issuer: /CN=d1de124e0f8adb4e7d9576ceae325f668dd224b1 Certificate serial: 01982747BCCCA80F9C74C16A424CF8EB6233 Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/0d4STg-K2059lXbOrjJfZo3SJLE.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/3a/abe134-0093-4652-9057-4f4c9b343e90/1/0d4STg-K2059lXbOrjJfZo3SJLE.mft Manifest number: 110F Signing time: Sun 20 Jul 2025 10:01:09 +0000 Manifest this update: Sun 20 Jul 2025 10:01:09 +0000 Manifest next update: Mon 21 Jul 2025 10:01:09 +0000 Files and hashes: 1: 0d4STg-K2059lXbOrjJfZo3SJLE.crl (hash: 94NHe7FZWcObTAlHKPSJrOQw+fbTzkmKQfM/+KPtoEQ=) 2: 6caVUV-TGB9bU55p1ya71OWBwvg.roa (hash: c0tRExOUVeBF8+Pq6PhYarD4KHj6+N7f0p/w2jdUK80=) 3: DxqkdLeiFvwWuO9J5kptwfBu7ac.roa (hash: PIUAC3waOfT1jkyoKllhRcI8tnEFK/SHfI9K6WgwRfU=) 4: NAlGVYpV8OEmdD2nIMiqn334k0M.roa (hash: XrkbVPgrR7sOnmYGzDR8m+MZN8NJUZRQwjZqOHkM5b8=) 5: dNqRqY6tmtgccI8cx_uJ4tWqiZA.roa (hash: g+K2hBhsL/swaozLRy4ek/JzzpG8kCplNhlD1lsyOeY=) 6: g8zmfO2HPSEN8YUDrAkY2r7Nlqw.roa (hash: uAg57JMTD8oD+ghOOtfACvdQoLeAHc5YjQ/CuCFoViY=) 7: hacEV-MoLT8z9KwMPWss3cGE7Ak.roa (hash: /ljDI2bMRna9vPYEiWkrDiOeR+IfW8BnSxXE9Vp7xXE=) 8: qnoXcobTtJZawYccy6q_j_ktEjQ.roa (hash: YgqRq2TALdrM9up57j8hrsz1UPh0HBnD1px4pxGN8rs=) 9: xiZp6eivWb7x_d9W-WC8kwhVWsI.roa (hash: GvxU73beqXLMBxGmaGGngexgQ65uQMfsvmeuizGIl8o=) 10: yv08EH90nRPgnJ4aLVioWHP74iI.roa (hash: wfa+cbtIfXj/VcabZ84otkiskAuSmrS6+55fqOkIL+o=) Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/3a/abe134-0093-4652-9057-4f4c9b343e90/1/0d4STg-K2059lXbOrjJfZo3SJLE.crl rsync://rpki.ripe.net/repository/DEFAULT/3a/abe134-0093-4652-9057-4f4c9b343e90/1/0d4STg-K2059lXbOrjJfZo3SJLE.mft rsync://rpki.ripe.net/repository/DEFAULT/0d4STg-K2059lXbOrjJfZo3SJLE.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Mon 21 Jul 2025 10:01:09 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:98:27:47:bc:cc:a8:0f:9c:74:c1:6a:42:4c:f8:eb:62:33 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=d1de124e0f8adb4e7d9576ceae325f668dd224b1 Validity Not Before: Jul 20 10:01:09 2025 GMT Not After : Jul 21 10:01:09 2025 GMT Subject: CN=f4b10f015a3023b85984cae809e28464ccc2eb53 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:cf:84:ea:81:82:62:33:af:16:0a:8d:f7:80:32: a1:15:11:bb:22:aa:81:cb:cc:ba:8b:f3:56:9d:94: ea:db:10:54:09:be:f2:9e:fc:e8:42:cf:b0:bd:b1: 79:4b:f2:31:32:c2:d3:cd:de:67:8d:5c:35:a1:b2: 77:f8:fc:45:21:58:2a:0f:7c:48:e1:34:20:6d:a0: dd:4f:20:ee:fa:8b:f7:88:03:9f:aa:cd:21:f9:98: be:54:79:8d:49:74:c5:de:b2:b1:8a:69:5c:c4:fa: 20:06:69:01:ed:12:7e:61:0a:8a:2a:56:bc:72:57: 7c:b7:e3:2b:05:76:bd:50:2b:37:ef:6e:01:c2:44: de:6f:91:16:a3:a9:1c:3d:9e:48:a1:81:ec:f4:96: a2:46:74:44:02:66:a8:1d:56:49:78:83:71:ae:80: 47:0a:e9:c4:c9:57:c5:6d:9f:67:77:20:5e:29:30: 17:12:c1:d3:d4:65:46:d1:98:54:f8:48:2d:57:3b: 5d:44:f0:2d:49:d0:16:fb:c4:1a:84:42:67:25:07: 90:3b:58:e7:97:fe:06:71:6a:b0:24:10:63:61:0a: 98:a1:67:c3:09:bd:1a:0f:53:5f:47:d8:a9:b1:bb: 7b:6b:a4:4c:06:37:c8:0d:ab:98:ca:97:62:3a:c3: e2:57 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: F4:B1:0F:01:5A:30:23:B8:59:84:CA:E8:09:E2:84:64:CC:C2:EB:53 X509v3 Authority Key Identifier: keyid:D1:DE:12:4E:0F:8A:DB:4E:7D:95:76:CE:AE:32:5F:66:8D:D2:24:B1 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/0d4STg-K2059lXbOrjJfZo3SJLE.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/3a/abe134-0093-4652-9057-4f4c9b343e90/1/0d4STg-K2059lXbOrjJfZo3SJLE.mft X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/3a/abe134-0093-4652-9057-4f4c9b343e90/1/0d4STg-K2059lXbOrjJfZo3SJLE.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 0f:0c:a4:55:c8:03:b4:79:73:17:8d:65:46:52:5b:9f:32:0e: 7c:b8:31:bf:2a:9a:15:56:71:16:5b:fa:82:83:60:ad:c4:11: f5:b6:fa:32:b8:14:63:b6:14:0e:74:12:1b:bf:56:7b:1a:b2: 14:dc:11:4f:95:d7:ea:e8:bf:57:1c:0a:73:35:20:26:c7:7f: 07:11:95:93:da:0f:cb:fd:fe:9c:58:b2:47:e7:20:50:28:d4: 8e:92:93:d0:21:8b:14:94:6d:40:e7:80:47:f3:19:4a:a3:91: bf:3c:26:6b:7c:06:81:b2:73:b9:ed:2f:c4:e9:2a:67:8a:c3: 05:db:fe:7d:01:ea:2a:08:ef:76:dc:5f:56:76:96:4e:82:ad: d5:1f:e6:4f:5e:da:7d:74:4a:ee:13:a8:15:28:55:01:6d:45: 4a:88:dc:e0:85:11:09:89:41:43:5d:4d:be:37:af:3c:bf:fc: 17:22:a2:d4:b0:ce:22:22:62:4e:36:6d:6e:8b:d9:15:0c:83: 54:ac:64:16:e9:1b:b3:e5:f8:a3:f8:04:9d:ff:5e:c0:2a:b5: 30:29:f2:b3:d9:a6:ad:d2:dd:4a:ca:f4:3c:14:f1:40:f3:16: 85:ea:14:75:ef:69:35:4c:2a:b2:f9:37:48:a4:36:64:a1:6c: 22:86:0c:9d -----BEGIN CERTIFICATE----- MIIFFjCCA/6gAwIBAgISAZgnR7zMqA+cdMFqQkz462IzMA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKGQxZGUxMjRlMGY4YWRiNGU3ZDk1NzZjZWFlMzI1ZjY2OGRk MjI0YjEwHhcNMjUwNzIwMTAwMTA5WhcNMjUwNzIxMTAwMTA5WjAzMTEwLwYDVQQD EyhmNGIxMGYwMTVhMzAyM2I4NTk4NGNhZTgwOWUyODQ2NGNjYzJlYjUzMIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAz4TqgYJiM68WCo33gDKhFRG7IqqB y8y6i/NWnZTq2xBUCb7ynvzoQs+wvbF5S/IxMsLTzd5njVw1obJ3+PxFIVgqD3xI 4TQgbaDdTyDu+ov3iAOfqs0h+Zi+VHmNSXTF3rKximlcxPogBmkB7RJ+YQqKKla8 cld8t+MrBXa9UCs3724BwkTeb5EWo6kcPZ5IoYHs9JaiRnREAmaoHVZJeINxroBH CunEyVfFbZ9ndyBeKTAXEsHT1GVG0ZhU+EgtVztdRPAtSdAW+8QahEJnJQeQO1jn l/4GcWqwJBBjYQqYoWfDCb0aD1NfR9ipsbt7a6RMBjfIDauYypdiOsPiVwIDAQAB o4ICIjCCAh4wHQYDVR0OBBYEFPSxDwFaMCO4WYTK6AnihGTMwutTMB8GA1UdIwQY MBaAFNHeEk4PittOfZV2zq4yX2aN0iSxMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvMGQ0U1RnLUsyMDU5bFhiT3JqSmZabzNTSkxFLmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC8zYS9hYmUxMzQtMDA5My00NjUyLTkwNTct NGY0YzliMzQzZTkwLzEvMGQ0U1RnLUsyMDU5bFhiT3JqSmZabzNTSkxFLm1mdDCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC8zYS9hYmUxMzQtMDA5My00NjUyLTkwNTctNGY0YzliMzQzZTkw LzEvMGQ0U1RnLUsyMDU5bFhiT3JqSmZabzNTSkxFLmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEADwykVcgD tHlzF41lRlJbnzIOfLgxvyqaFVZxFlv6goNgrcQR9bb6MrgUY7YUDnQSG79Wexqy FNwRT5XX6ui/VxwKczUgJsd/BxGVk9oPy/3+nFiyR+cgUCjUjpKT0CGLFJRtQOeA R/MZSqORvzwma3wGgbJzue0vxOkqZ4rDBdv+fQHqKgjvdtxfVnaWToKt1R/mT17a fXRK7hOoFShVAW1FSojc4IURCYlBQ11NvjevPL/8FyKi1LDOIiJiTjZtbovZFQyD VKxkFukbs+X4o/gEnf9ewCq1MCnys9mmrdLdSsr0PBTxQPMWheoUde9pNUwqsvk3 SKQ2ZKFsIoYMnQ== -----END CERTIFICATE-----Generated at Sun Jul 20 16:29:20 2025 by rpki-client