$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/44/319d7c-7e76-4308-bc00-be5832d5f7aa/1/1-5hyRGEbUjBTZ0S2qJ8ETzL0Yuo.mft File: 1-5hyRGEbUjBTZ0S2qJ8ETzL0Yuo.mft (raw, json) Hash identifier: ipEyjSlgf0SfBwshdQV0fPmQO5oHJEKOgBGiymofL8w= Subject key identifier: BB:DA:35:C1:60:DB:37:57:B0:01:31:EF:13:94:69:5B:4F:AE:5A:97 Authority key identifier: FB:98:72:44:61:1B:52:30:53:67:44:B6:A8:9F:04:4F:32:F4:62:EA Certificate issuer: /CN=fb987244611b5230536744b6a89f044f32f462ea Certificate serial: 019838DFCC3EA4AA4521621D1DD73EE203BF Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/1-5hyRGEbUjBTZ0S2qJ8ETzL0Yuo.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/44/319d7c-7e76-4308-bc00-be5832d5f7aa/1/1-5hyRGEbUjBTZ0S2qJ8ETzL0Yuo.mft Manifest number: 1605 Signing time: Wed 23 Jul 2025 20:00:47 +0000 Manifest this update: Wed 23 Jul 2025 20:00:47 +0000 Manifest next update: Thu 24 Jul 2025 20:00:47 +0000 Files and hashes: 1: 0GQGYjFgeoe90j-QzubD6mrcJkk.roa (hash: cASoDwOCqQQo3HckgWr9Fm6RrFpE5g5vgsJJsPTF9PI=) 2: 1-5hyRGEbUjBTZ0S2qJ8ETzL0Yuo.crl (hash: sU2TvJjz5rLZRhIy4IHpHCwnKOQWGkVYtBr4vev2MFQ=) 3: 5YsWNoJ_eVXnLQUmvRfRv35-ITo.roa (hash: +Wt4CaG2KBebUdy7DTYqNM4+qA+qSGjkIL8Uj7jYbKY=) 4: LkZMbp2aUa0yXxOxLWaqN5AS52o.roa (hash: o8vH7FtM5V/qTZoiT6aAxSseM4Yg902eHtLadTVcAzY=) 5: N5NvCVL9qwjYZWiGAgoiE3kpDsM.roa (hash: /XNE593x81Nv5d88KdthJ5cf11PusTGT9f+nPTiwsmQ=) 6: O2VeVpIY0NqqJs4saKQoTuFoA6I.roa (hash: eCU07QC/oP0X/AS+uAyqKGOShTlcgaS/MZcj5EXt1FQ=) 7: PmeI5MIhQ4wxSrPUPOIOQ9Ubvnk.roa (hash: W6jZRl9BSEjjkm486LLqed9ed+xxHLYMlqc3sRgCALQ=) 8: QJVbOLfuQimwnt2csTkB91gXkec.roa (hash: GkGvp1WsMKLXrnxKgO0ikQrOP7Rki9hxYkm+S7LbAS8=) 9: RTN7ctApkTYd2Og2JaBeJOrSDKw.roa (hash: PECp9vVhGIOoiVTK3bRnzPU+NWZIUXb57SnIExeKGko=) 10: ZFUmkI5Si20CHGaDBK-ZoNXIfEk.roa (hash: 4y56G8cf16t1jWavTqKOCy9B29Mw+jTHj1dGwOZOhA0=) 11: _28X1lMsvBxqScVY5HiVqqNdE4o.roa (hash: 1zLcZ1CwGAvvzQsYCPPfZSZE3xWE9xsMdQ0aDUZbc8g=) 12: cdmQ2_ODlCp8h7SlTaorYnidAuk.roa (hash: +IC730dtvUCM5X3ceJwMJA3N6qWFyePDz8c3aKLMcqE=) 13: gWN0YMhA97UPOTqYvOMM9zaPWRs.roa (hash: Hm5lPWw7bUXDdTOs1pfp1fHbk/bNa8PnxIySi1lfXPs=) 14: iY_9p9rfYCrq76s6mH8iLmqZ8G4.roa (hash: WZh8CFIJ4XBLsbT8NvOnixg7Xgopb12vdZ21KTVanqQ=) 15: jTMPeohgGOxcMFZVU8z0ehshce0.roa (hash: SyL8iMLhykQz8ANtvdKfK1EugykUZcu24olhfWQesXo=) 16: n7V7OXaDS-XvJc4UQc5MPqTFYmY.roa (hash: 0QBDYhcEfGTqjEJgSs+TOY3XMDZsBCVa117v4v2Y4iI=) 17: uEsfVd8NIzUxBoG774jECjWdTsY.roa (hash: lAehouSKcnB2amZVq4TUPtcrTxH5jfwC6dVK0vZrRgI=) 18: vlDfC43FHcefunPJngYR1WAZ7rA.roa (hash: az+OZ3tRKu13gj7aBFAWboRwowS41+dYdps7euT4uWg=) 19: w_D8ebnb3eRC6CWTSI4QXg7yIcA.roa (hash: cKSU2IKqf8A5+vV8g8UVVjc9ie4gyRlLREV+QT0zjV0=) Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/44/319d7c-7e76-4308-bc00-be5832d5f7aa/1/1-5hyRGEbUjBTZ0S2qJ8ETzL0Yuo.crl rsync://rpki.ripe.net/repository/DEFAULT/44/319d7c-7e76-4308-bc00-be5832d5f7aa/1/1-5hyRGEbUjBTZ0S2qJ8ETzL0Yuo.mft rsync://rpki.ripe.net/repository/DEFAULT/1-5hyRGEbUjBTZ0S2qJ8ETzL0Yuo.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Thu 24 Jul 2025 20:00:47 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:98:38:df:cc:3e:a4:aa:45:21:62:1d:1d:d7:3e:e2:03:bf Signature Algorithm: sha256WithRSAEncryption Issuer: CN=fb987244611b5230536744b6a89f044f32f462ea Validity Not Before: Jul 23 20:00:47 2025 GMT Not After : Jul 24 20:00:47 2025 GMT Subject: CN=bbda35c160db3757b00131ef1394695b4fae5a97 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:ac:b5:3e:38:16:8b:37:50:10:c6:3f:b5:30:15: 55:c6:41:42:ef:d1:fb:82:5a:75:a2:5a:13:9d:32: 1d:34:54:ad:53:2f:c9:c2:8e:67:e0:7b:c9:bf:78: c7:1b:5f:ec:3f:92:8d:0d:fe:22:bc:78:b3:d8:e4: ab:80:fb:7f:99:e0:b6:18:72:71:9f:22:fa:1b:02: ac:f0:86:a4:f3:24:37:a0:52:58:8c:91:a8:9b:18: 0b:84:3e:20:ef:c0:f1:b6:7f:31:ad:69:54:11:70: 3f:56:12:2d:f2:c1:bf:d8:37:58:ee:7f:d4:04:94: c9:32:02:bf:ab:e6:ba:26:f9:d4:95:67:07:1b:55: a3:1c:89:7b:80:45:92:9e:f0:e1:42:21:ca:8e:6f: c3:b9:8a:21:2d:5e:ad:27:75:88:fd:29:fe:20:79: a3:09:e6:13:bd:e8:18:3c:ad:e4:f8:95:86:c3:11: 3a:c4:27:c1:6f:a2:de:f9:dc:f2:d1:28:71:a5:5e: 9f:f1:69:38:47:1a:eb:fd:1c:41:5c:40:b3:83:9b: c4:d3:40:b9:ef:e9:39:08:cd:57:fc:17:a8:f6:ba: 4c:a9:d5:56:55:94:1f:90:73:bf:88:6d:95:0f:6b: 9b:d8:7b:78:5d:21:fe:d6:46:62:71:aa:8b:da:5b: 2b:27 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: BB:DA:35:C1:60:DB:37:57:B0:01:31:EF:13:94:69:5B:4F:AE:5A:97 X509v3 Authority Key Identifier: keyid:FB:98:72:44:61:1B:52:30:53:67:44:B6:A8:9F:04:4F:32:F4:62:EA X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/1-5hyRGEbUjBTZ0S2qJ8ETzL0Yuo.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/44/319d7c-7e76-4308-bc00-be5832d5f7aa/1/1-5hyRGEbUjBTZ0S2qJ8ETzL0Yuo.mft X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/44/319d7c-7e76-4308-bc00-be5832d5f7aa/1/1-5hyRGEbUjBTZ0S2qJ8ETzL0Yuo.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 86:a9:96:f0:16:ac:28:44:52:94:22:35:d2:f6:84:2d:8c:e5: 04:44:53:24:19:17:81:f4:b7:ca:9f:55:dc:79:1e:52:04:a3: b1:be:2a:dd:fd:4d:55:6d:27:9c:69:4e:da:47:fe:71:50:c4: 51:3f:ae:63:46:5d:63:b7:81:e3:90:c4:f0:97:6a:7b:9d:f2: 2a:b4:ce:d2:49:a7:26:d1:99:8e:43:f6:1b:e2:1c:46:31:a5: b5:b8:3c:a1:0f:9b:df:b3:19:37:48:df:78:5c:f1:40:ff:db: 6d:cb:0d:50:b1:5c:d4:38:8a:09:53:46:6e:22:9f:bc:ab:5d: 1b:0f:17:10:5a:c2:2a:a7:86:9b:ee:26:83:7c:1e:3d:c2:de: 2b:d4:91:fb:a1:df:5c:c4:e7:21:28:98:4d:b6:cb:f4:3b:53: a3:be:4a:01:ae:1c:72:01:37:53:04:fb:18:b6:f1:6e:c8:a0: 9a:9a:7e:47:62:da:96:0b:0b:d4:ef:73:f0:3f:cc:4d:c9:da: 68:d8:13:a8:87:84:56:b0:c0:b3:34:e4:86:84:a9:0e:56:27: 3a:f1:76:7c:c0:4a:d7:41:36:7e:7e:2c:79:9f:47:ea:fa:b8: 22:bd:59:5a:25:73:5b:1f:05:ee:ca:35:b0:40:a3:2b:17:0e: 50:61:71:71 -----BEGIN CERTIFICATE----- MIIFGTCCBAGgAwIBAgISAZg438w+pKpFIWIdHdc+4gO/MA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKGZiOTg3MjQ0NjExYjUyMzA1MzY3NDRiNmE4OWYwNDRmMzJm NDYyZWEwHhcNMjUwNzIzMjAwMDQ3WhcNMjUwNzI0MjAwMDQ3WjAzMTEwLwYDVQQD EyhiYmRhMzVjMTYwZGIzNzU3YjAwMTMxZWYxMzk0Njk1YjRmYWU1YTk3MIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEArLU+OBaLN1AQxj+1MBVVxkFC79H7 glp1oloTnTIdNFStUy/Jwo5n4HvJv3jHG1/sP5KNDf4ivHiz2OSrgPt/meC2GHJx nyL6GwKs8Iak8yQ3oFJYjJGomxgLhD4g78Dxtn8xrWlUEXA/VhIt8sG/2DdY7n/U BJTJMgK/q+a6JvnUlWcHG1WjHIl7gEWSnvDhQiHKjm/DuYohLV6tJ3WI/Sn+IHmj CeYTvegYPK3k+JWGwxE6xCfBb6Le+dzy0ShxpV6f8Wk4Rxrr/RxBXECzg5vE00C5 7+k5CM1X/Beo9rpMqdVWVZQfkHO/iG2VD2ub2Ht4XSH+1kZicaqL2lsrJwIDAQAB o4ICJTCCAiEwHQYDVR0OBBYEFLvaNcFg2zdXsAEx7xOUaVtPrlqXMB8GA1UdIwQY MBaAFPuYckRhG1IwU2dEtqifBE8y9GLqMA4GA1UdDwEB/wQEAwIHgDBlBggrBgEF BQcBAQRZMFcwVQYIKwYBBQUHMAKGSXJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvMS01aHlSR0ViVWpCVFowUzJxSjhFVHpMMFl1by5jZXIw gY4GCCsGAQUFBwELBIGBMH8wfQYIKwYBBQUHMAuGcXJzeW5jOi8vcnBraS5yaXBl Lm5ldC9yZXBvc2l0b3J5L0RFRkFVTFQvNDQvMzE5ZDdjLTdlNzYtNDMwOC1iYzAw LWJlNTgzMmQ1ZjdhYS8xLzEtNWh5UkdFYlVqQlRaMFMycUo4RVR6TDBZdW8ubWZ0 MIGCBgNVHR8EezB5MHegdaBzhnFyc3luYzovL3Jwa2kucmlwZS5uZXQvcmVwb3Np dG9yeS9ERUZBVUxULzQ0LzMxOWQ3Yy03ZTc2LTQzMDgtYmMwMC1iZTU4MzJkNWY3 YWEvMS8xLTVoeVJHRWJVakJUWjBTMnFKOEVUekwwWXVvLmNybDAYBgNVHSABAf8E DjAMMAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgAC BQAwFQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAhqmW 8BasKERSlCI10vaELYzlBERTJBkXgfS3yp9V3HkeUgSjsb4q3f1NVW0nnGlO2kf+ cVDEUT+uY0ZdY7eB45DE8Jdqe53yKrTO0kmnJtGZjkP2G+IcRjGltbg8oQ+b37MZ N0jfeFzxQP/bbcsNULFc1DiKCVNGbiKfvKtdGw8XEFrCKqeGm+4mg3wePcLeK9SR +6HfXMTnISiYTbbL9DtTo75KAa4ccgE3UwT7GLbxbsigmpp+R2LalgsL1O9z8D/M TcnaaNgTqIeEVrDAszTkhoSpDlYnOvF2fMBK10E2fn4seZ9H6vq4Ir1ZWiVzWx8F 7so1sECjKxcOUGFxcQ== -----END CERTIFICATE-----Generated at Thu Jul 24 00:25:16 2025 by rpki-client