$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/3f/18c498-2171-4e1c-8d80-a6c49eb28287/1/dOPDNpcglLGowT1BgWhX0Zejquk.mft File: dOPDNpcglLGowT1BgWhX0Zejquk.mft (raw, json) Hash identifier: a21jQzEstEQB/2v4dJDfwd/sM5jAeJ8YqINr9s0vZzw= Subject key identifier: 5F:B5:98:A9:91:1C:AD:F6:0C:C3:3B:FA:0E:6E:48:D2:C8:5E:F6:76 Authority key identifier: 74:E3:C3:36:97:20:94:B1:A8:C1:3D:41:81:68:57:D1:97:A3:AA:E9 Certificate issuer: /CN=74e3c336972094b1a8c13d41816857d197a3aae9 Certificate serial: 01984C6667EB98C62B9A6D4A4E5281BC8CAA Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/dOPDNpcglLGowT1BgWhX0Zejquk.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/3f/18c498-2171-4e1c-8d80-a6c49eb28287/1/dOPDNpcglLGowT1BgWhX0Zejquk.mft Manifest number: 1322 Signing time: Sun 27 Jul 2025 15:00:36 +0000 Manifest this update: Sun 27 Jul 2025 15:00:36 +0000 Manifest next update: Mon 28 Jul 2025 15:00:36 +0000 Files and hashes: 1: 1jpCyAps9bajWpTTNjuuJqkvGNw.roa (hash: QdNF4dszmqN93C6OMT7lYcdmskEQt8kQtHTCFEeRLK4=) 2: B-IzhwSKXhHkz88nSETOGD9yRG4.roa (hash: YnLpp9fGmyMsduAjb3ebFR0Lsy/94n7A+dxRiyz9BXo=) 3: LfVA7yFSUE0qhq_HYTK38H6PAlY.roa (hash: Kppg3VjpkBzGqtZq9DRkl+9W1VehTNUgM7T4eg/Jh/E=) 4: UEcNqvrJ5SQl5H_s0LFUfwkR_hE.roa (hash: bIJXuRboJUOwUf77dVkGAbQtOlD1q8qNpaYp5FkD4+Y=) 5: UWwzSZwnxpR_r3Y4D6vttKdBBVs.roa (hash: 7svZa4xV7+uz3XJCftME26l72YGSUBkSe+OkDk5Vluk=) 6: VJ6MDr9v2VTJjopln-NK2ojxFwc.roa (hash: aCjSF+Bt+cDnTvcdibhV9s05hQuvY9LCYp3eMrgD2Ks=) 7: YOcpXFVJRTJW2caFAPTppkNQBuk.roa (hash: bsMm8G8+2Vegzn+c1SqEObi1wuYbeOXaQ994ZEYf674=) 8: a1U9llCdwrEqU4GkcwBsuwGny80.roa (hash: x9+7kA4QQzpZS4+gdNTWeXV2Ehq7i5FwV0w3Ws0zS7A=) 9: bilxvgHa_ortWdZiJoCPu9q2EO4.roa (hash: l/1X47j3OP5z+Rp05LuTXjyl7yZpgOm/aXT90ziTHDc=) 10: btX-zAe_zEJQ3ltM7sZKTKWNtzU.roa (hash: FXQNguGpvehosedHQRjCf06rJkvh5KY35ySN2Wig1dE=) 11: dOPDNpcglLGowT1BgWhX0Zejquk.crl (hash: DQBrh2Dyulu24uRxUEy/WTx4/CIkMYgCw0IKMihGDu4=) 12: leLN7dUwqNQXTkicjPodaPNaHrA.roa (hash: /TZBYmyqPdbIBcWc+Ubi8mL2e3Sg1zgKUo/8XZMZsK8=) 13: ltEUPJ59iMmxTdNEYLGbM1Yq6jY.roa (hash: 4OyHOUV/gpG2mHKMCDQGjjKuCFHSFtOInlqympBF1Os=) 14: pzyfVcqGqM8oIh9yspKnplAOyo4.roa (hash: hsiUYyCYakxAYsQctvaT1faoOH457ARGeeeeMVZVUZk=) Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/3f/18c498-2171-4e1c-8d80-a6c49eb28287/1/dOPDNpcglLGowT1BgWhX0Zejquk.crl rsync://rpki.ripe.net/repository/DEFAULT/3f/18c498-2171-4e1c-8d80-a6c49eb28287/1/dOPDNpcglLGowT1BgWhX0Zejquk.mft rsync://rpki.ripe.net/repository/DEFAULT/dOPDNpcglLGowT1BgWhX0Zejquk.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Mon 28 Jul 2025 14:00:04 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:98:4c:66:67:eb:98:c6:2b:9a:6d:4a:4e:52:81:bc:8c:aa Signature Algorithm: sha256WithRSAEncryption Issuer: CN=74e3c336972094b1a8c13d41816857d197a3aae9 Validity Not Before: Jul 27 15:00:36 2025 GMT Not After : Jul 28 15:00:36 2025 GMT Subject: CN=5fb598a9911cadf60cc33bfa0e6e48d2c85ef676 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:a9:1f:18:d5:99:01:35:07:b6:35:4d:4d:e9:42: 56:80:ea:30:11:f2:d9:5d:91:db:ff:8f:c7:1f:c3: a6:34:d4:88:3d:9d:26:3c:02:73:2c:b2:12:88:ae: 57:51:bc:7b:6a:2b:42:27:e9:65:95:54:3e:fd:12: 47:d8:d6:cb:44:7c:f0:14:e4:a7:ca:23:00:30:e9: 25:fa:34:99:87:40:56:70:31:20:73:68:94:08:01: 13:3a:b0:17:fa:3d:d1:b8:93:4b:14:de:75:e0:80: 46:70:2c:a9:fd:ab:7d:27:23:ec:e7:32:e5:c2:bf: 48:f3:9e:e0:9c:da:6c:3a:9e:b8:55:57:57:e7:76: 9d:53:d3:bb:40:ff:3f:66:14:d0:b6:4f:1f:5e:29: 73:22:10:2a:5a:15:53:4d:3e:a2:8e:aa:6b:79:6e: 2d:17:de:7f:9a:e2:2a:72:54:0c:1a:5b:ce:68:c3: 78:a2:51:02:49:a6:78:37:4a:16:f4:1f:16:86:5b: fa:33:b8:8c:7d:0f:f7:76:b6:ec:0c:33:96:10:d3: ac:e3:f9:7b:3e:6c:b1:10:c8:b6:46:50:42:4f:c9: 34:c3:9a:8a:e7:be:d9:3a:8e:85:9f:f8:0b:ec:20: 1f:d4:14:77:df:82:a2:14:5f:31:fb:32:31:9a:4b: 9c:b1 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 5F:B5:98:A9:91:1C:AD:F6:0C:C3:3B:FA:0E:6E:48:D2:C8:5E:F6:76 X509v3 Authority Key Identifier: keyid:74:E3:C3:36:97:20:94:B1:A8:C1:3D:41:81:68:57:D1:97:A3:AA:E9 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/dOPDNpcglLGowT1BgWhX0Zejquk.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/3f/18c498-2171-4e1c-8d80-a6c49eb28287/1/dOPDNpcglLGowT1BgWhX0Zejquk.mft X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/3f/18c498-2171-4e1c-8d80-a6c49eb28287/1/dOPDNpcglLGowT1BgWhX0Zejquk.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 74:b3:9f:31:d0:bc:22:35:16:d9:c6:0e:ea:c7:ec:73:a9:46: ac:3f:34:09:63:81:7e:ee:df:bf:3c:3e:47:30:2f:84:5f:a9: 31:55:24:f5:46:b7:64:eb:7d:35:58:64:46:2f:a3:eb:7c:1e: a0:ba:d9:25:7c:26:e1:6e:97:8d:6c:4f:95:03:4f:02:ab:8f: f5:0e:f0:0c:d2:8d:fc:34:67:15:c6:6f:a4:7f:cb:5b:3b:b3: 36:3e:e5:a8:c1:dd:d6:08:f1:82:a7:52:1c:35:20:f3:e3:cc: 42:78:fe:8b:a1:20:2b:38:94:d2:ae:41:5b:ff:16:d9:7f:11: 70:9e:6c:32:7b:f1:48:62:be:1c:0a:a6:39:30:e1:50:73:f8: fe:39:24:86:60:f9:18:6c:25:01:f3:0a:18:29:1e:5a:de:05: 9d:13:f3:2d:b7:26:5c:54:e5:c4:be:18:f6:8e:a4:79:3d:73: 2d:61:f7:e3:6e:2d:bf:b5:01:37:47:93:fa:6a:30:02:7f:46: 21:81:79:32:39:77:10:36:c9:d2:de:7a:02:10:ee:44:2a:a4: d5:1e:7f:e2:f0:53:f9:d3:de:1c:fb:54:0a:53:f6:46:ec:ae: 7a:ec:ee:b7:11:26:5e:43:73:df:6e:7d:bb:69:1c:7b:4f:f5: 47:43:8a:8d -----BEGIN CERTIFICATE----- MIIFFjCCA/6gAwIBAgISAZhMZmfrmMYrmm1KTlKBvIyqMA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKDc0ZTNjMzM2OTcyMDk0YjFhOGMxM2Q0MTgxNjg1N2QxOTdh M2FhZTkwHhcNMjUwNzI3MTUwMDM2WhcNMjUwNzI4MTUwMDM2WjAzMTEwLwYDVQQD Eyg1ZmI1OThhOTkxMWNhZGY2MGNjMzNiZmEwZTZlNDhkMmM4NWVmNjc2MIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAqR8Y1ZkBNQe2NU1N6UJWgOowEfLZ XZHb/4/HH8OmNNSIPZ0mPAJzLLISiK5XUbx7aitCJ+lllVQ+/RJH2NbLRHzwFOSn yiMAMOkl+jSZh0BWcDEgc2iUCAETOrAX+j3RuJNLFN514IBGcCyp/at9JyPs5zLl wr9I857gnNpsOp64VVdX53adU9O7QP8/ZhTQtk8fXilzIhAqWhVTTT6ijqpreW4t F95/muIqclQMGlvOaMN4olECSaZ4N0oW9B8Whlv6M7iMfQ/3drbsDDOWENOs4/l7 PmyxEMi2RlBCT8k0w5qK577ZOo6Fn/gL7CAf1BR334KiFF8x+zIxmkucsQIDAQAB o4ICIjCCAh4wHQYDVR0OBBYEFF+1mKmRHK32DMM7+g5uSNLIXvZ2MB8GA1UdIwQY MBaAFHTjwzaXIJSxqME9QYFoV9GXo6rpMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvZE9QRE5wY2dsTEdvd1QxQmdXaFgwWmVqcXVrLmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC8zZi8xOGM0OTgtMjE3MS00ZTFjLThkODAt YTZjNDllYjI4Mjg3LzEvZE9QRE5wY2dsTEdvd1QxQmdXaFgwWmVqcXVrLm1mdDCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC8zZi8xOGM0OTgtMjE3MS00ZTFjLThkODAtYTZjNDllYjI4Mjg3 LzEvZE9QRE5wY2dsTEdvd1QxQmdXaFgwWmVqcXVrLmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAdLOfMdC8 IjUW2cYO6sfsc6lGrD80CWOBfu7fvzw+RzAvhF+pMVUk9Ua3ZOt9NVhkRi+j63we oLrZJXwm4W6XjWxPlQNPAquP9Q7wDNKN/DRnFcZvpH/LWzuzNj7lqMHd1gjxgqdS HDUg8+PMQnj+i6EgKziU0q5BW/8W2X8RcJ5sMnvxSGK+HAqmOTDhUHP4/jkkhmD5 GGwlAfMKGCkeWt4FnRPzLbcmXFTlxL4Y9o6keT1zLWH3424tv7UBN0eT+mowAn9G IYF5Mjl3EDbJ0t56AhDuRCqk1R5/4vBT+dPeHPtUClP2RuyueuzutxEmXkNz3259 u2kce0/1R0OKjQ== -----END CERTIFICATE-----Generated at Sun Jul 27 22:00:18 2025 by rpki-client