$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/47/bc7078-1ee4-42f1-bc34-1d21d1bce3fe/1/I0tUsRmns-_xUwhbcxVQfNhROg8.mft File: I0tUsRmns-_xUwhbcxVQfNhROg8.mft (raw, json) Hash identifier: GeLOjdzfdEifATt5ovNNPbeghovFLRNq+wdfLMxA1ew= Subject key identifier: 57:86:77:DA:F1:F5:49:5B:65:0B:4A:51:1B:37:8E:86:1D:0F:85:95 Authority key identifier: 23:4B:54:B1:19:A7:B3:EF:F1:53:08:5B:73:15:50:7C:D8:51:3A:0F Certificate issuer: /CN=234b54b119a7b3eff153085b7315507cd8513a0f Certificate serial: 0198342767A8C24E5CBCEC20CA0D22FCB822 Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/I0tUsRmns-_xUwhbcxVQfNhROg8.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/47/bc7078-1ee4-42f1-bc34-1d21d1bce3fe/1/I0tUsRmns-_xUwhbcxVQfNhROg8.mft Manifest number: 0C36 Signing time: Tue 22 Jul 2025 22:00:54 +0000 Manifest this update: Tue 22 Jul 2025 22:00:54 +0000 Manifest next update: Wed 23 Jul 2025 22:00:54 +0000 Files and hashes: 1: 2tV1T5SBsSkKar1qXX5FYlQ_B9Q.roa (hash: mGLI3Jd52qgMG50087Vl0ag+Rgi85Yfd8348tK3nJlQ=) 2: 9CjEL92KVQbBIKjAH6PWgI9d9kA.roa (hash: CxlINazLO+svbCxijVW6/kRGdkNG420xQ9K3jp5I7bo=) 3: 9Q-K0yA0D9jdkGXn7ifhVh2hLe4.roa (hash: BhOE66QanPWqjjysyWqBU6hcSToV2kkgkpmWedK9Plo=) 4: BKpPZ6YhMA786wWelQvZ2FdIeg0.roa (hash: CY94cVx1ALq/cp1lEiwu3JzO7Vk53LXHozpiwU2ifHA=) 5: Gg5xBTPmG5wIfgvjDfofedqUN2I.roa (hash: 44BexOUoVzM2f1vahHLSGVHdqnL6HKMPG3ed5PmM4sw=) 6: I0tUsRmns-_xUwhbcxVQfNhROg8.crl (hash: UTHcmnDdt9eRi3qqFh2MNe3bWUYd91Pud92DGPyJGJA=) 7: KfWHlYFQnzVI2dPuoiLZqsly00A.roa (hash: hXW7e+AyYxT2PE5t8wRUT3atz/+WaH8gt4XQgdBp/mU=) 8: LtctFlc4GRCf3PIlxO5Sz70Upcc.roa (hash: 9oaNZGvrfQP+yRIBwwcg5U7jui8/sOP7Dz6ZLTuPIgM=) 9: LxwAd59gPAFiSwQsp6U5bWHTUIA.roa (hash: sV/jv6UM3eB6Fepo8zmoDeIxV8A3Cp94EBt2zbiu7+M=) 10: M73NPvrSZwGhIOTA9SbUvHl1x90.roa (hash: ijksxiMRPCxOAqaVav7odzv/IiE5tQUZQM4rRqWGT00=) 11: P4Ngmm4fscIJdjrtcZXwEWC6af0.roa (hash: Dgr4uE36WEf5Xw9kH8tw5qMQ+ewLeqeUvdPupgorbKg=) 12: gspg21PC-Bi6SGHc2DwZhP3SxPE.roa (hash: za152yl/mt+IWnj6LxRFIHIPMleLO2z2bWoNpUAX6js=) 13: nppvTips8XGcmj9VgC_a0xkLzT8.roa (hash: +FXbEH/4T1tplmkgWcOzmoIVkqvQhGApNb34NJo2CWU=) 14: o99Nup4psTKMh8kJYocwkh14uKQ.roa (hash: lhz5Qy+hcNJDmky6RtlI26JguzX0YUJj3nMqDKA0YLM=) 15: y9rvtnyXZQSaHcISGufCbgd9oMg.roa (hash: YtKgQZ+a37E4WaxSPAYmpHW8Z8QKRoCD8fhZcaauCRA=) Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/47/bc7078-1ee4-42f1-bc34-1d21d1bce3fe/1/I0tUsRmns-_xUwhbcxVQfNhROg8.crl rsync://rpki.ripe.net/repository/DEFAULT/47/bc7078-1ee4-42f1-bc34-1d21d1bce3fe/1/I0tUsRmns-_xUwhbcxVQfNhROg8.mft rsync://rpki.ripe.net/repository/DEFAULT/I0tUsRmns-_xUwhbcxVQfNhROg8.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Wed 23 Jul 2025 22:00:25 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:98:34:27:67:a8:c2:4e:5c:bc:ec:20:ca:0d:22:fc:b8:22 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=234b54b119a7b3eff153085b7315507cd8513a0f Validity Not Before: Jul 22 22:00:54 2025 GMT Not After : Jul 23 22:00:54 2025 GMT Subject: CN=578677daf1f5495b650b4a511b378e861d0f8595 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:b3:ae:8a:72:8e:94:6b:6d:cf:9f:01:3a:af:ce: b3:62:d1:22:10:ff:95:b0:b0:73:a2:7a:00:db:39: 0d:c7:be:e7:61:39:26:65:01:27:1e:31:29:6f:8b: a3:15:d1:4f:fe:4b:a8:b1:4d:3d:d7:5d:d0:d0:af: 82:a4:d9:ba:4a:aa:1d:8c:ce:ac:74:4a:6d:d2:6a: 48:89:2d:ed:83:5c:0b:24:f0:91:3d:71:39:73:8f: ab:5b:a2:66:bd:ef:3b:ed:a2:5e:ec:06:13:0e:e0: 97:c6:1f:f2:6b:d3:8a:33:27:ef:1e:ec:08:44:84: 5f:00:23:16:15:3a:99:eb:8f:49:3b:77:04:59:a3: 35:c5:e9:e8:d5:ac:08:ab:a3:4b:9e:90:a2:9e:fd: f2:4d:96:95:5f:d8:58:92:b7:ef:27:a9:fe:7a:d6: f5:19:db:9f:f3:b4:f4:fa:ef:be:95:48:df:78:aa: aa:a5:15:b6:3c:bb:7f:ce:73:3c:e0:70:4e:49:dc: d9:92:67:26:d7:e1:3c:db:88:1a:62:c2:71:6e:1f: 51:86:2f:84:c1:42:01:fc:1f:40:e2:c5:bb:1f:3c: 4c:50:2a:8e:8d:a8:cd:0c:ee:d5:90:50:85:17:b9: c7:8d:6d:3a:0f:73:f8:ad:f5:e5:c1:1c:23:71:b3: 9c:c9 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 57:86:77:DA:F1:F5:49:5B:65:0B:4A:51:1B:37:8E:86:1D:0F:85:95 X509v3 Authority Key Identifier: keyid:23:4B:54:B1:19:A7:B3:EF:F1:53:08:5B:73:15:50:7C:D8:51:3A:0F X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/I0tUsRmns-_xUwhbcxVQfNhROg8.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/47/bc7078-1ee4-42f1-bc34-1d21d1bce3fe/1/I0tUsRmns-_xUwhbcxVQfNhROg8.mft X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/47/bc7078-1ee4-42f1-bc34-1d21d1bce3fe/1/I0tUsRmns-_xUwhbcxVQfNhROg8.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 82:26:35:55:2a:c0:19:1d:8c:48:b0:6f:7e:26:71:06:ad:18: 9a:5a:43:39:36:72:80:09:6b:5d:ea:93:1c:bc:aa:13:75:ce: 2d:28:63:a5:24:f7:ba:af:45:0e:d6:43:5f:fa:87:db:4c:f7: 98:44:bb:48:ae:b8:50:9e:04:60:6c:35:94:58:9e:67:d5:46: a3:07:b4:6f:fd:39:02:cf:a7:7b:d9:51:ad:e6:16:39:d1:f4: 35:79:a6:44:14:29:cf:8f:fd:36:15:e0:8e:af:b3:bb:62:08: 0c:37:13:2d:c9:61:f9:c4:f3:69:f5:c8:90:67:b2:04:c0:58: 0b:9a:92:14:62:5a:83:75:31:ea:f0:0e:9a:9a:b1:81:20:7d: e1:b3:08:de:4a:be:8e:d9:3d:22:00:c0:6a:ea:28:0d:8e:fe: 36:78:7c:dc:ac:01:45:de:64:05:ec:5a:3a:5b:95:3a:32:0f: 7a:75:bd:57:b6:4a:c8:7d:d1:7c:12:81:01:da:9a:86:15:87: 10:07:49:4e:e4:3f:98:58:fe:a3:be:7b:15:f8:8f:4d:a4:54: 12:a4:2f:3f:ce:86:4f:cd:f3:49:a9:ff:a4:6d:ba:9f:b6:01: d9:18:34:28:22:8a:78:98:ec:0c:00:31:76:1c:97:d7:68:39: e2:81:c2:8b -----BEGIN CERTIFICATE----- MIIFFjCCA/6gAwIBAgISAZg0J2eowk5cvOwgyg0i/LgiMA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKDIzNGI1NGIxMTlhN2IzZWZmMTUzMDg1YjczMTU1MDdjZDg1 MTNhMGYwHhcNMjUwNzIyMjIwMDU0WhcNMjUwNzIzMjIwMDU0WjAzMTEwLwYDVQQD Eyg1Nzg2NzdkYWYxZjU0OTViNjUwYjRhNTExYjM3OGU4NjFkMGY4NTk1MIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAs66Kco6Ua23PnwE6r86zYtEiEP+V sLBzonoA2zkNx77nYTkmZQEnHjEpb4ujFdFP/kuosU09113Q0K+CpNm6SqodjM6s dEpt0mpIiS3tg1wLJPCRPXE5c4+rW6Jmve877aJe7AYTDuCXxh/ya9OKMyfvHuwI RIRfACMWFTqZ649JO3cEWaM1xeno1awIq6NLnpCinv3yTZaVX9hYkrfvJ6n+etb1 Gduf87T0+u++lUjfeKqqpRW2PLt/znM84HBOSdzZkmcm1+E824gaYsJxbh9Rhi+E wUIB/B9A4sW7HzxMUCqOjajNDO7VkFCFF7nHjW06D3P4rfXlwRwjcbOcyQIDAQAB o4ICIjCCAh4wHQYDVR0OBBYEFFeGd9rx9UlbZQtKURs3joYdD4WVMB8GA1UdIwQY MBaAFCNLVLEZp7Pv8VMIW3MVUHzYUToPMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvSTB0VXNSbW5zLV94VXdoYmN4VlFmTmhST2c4LmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC80Ny9iYzcwNzgtMWVlNC00MmYxLWJjMzQt MWQyMWQxYmNlM2ZlLzEvSTB0VXNSbW5zLV94VXdoYmN4VlFmTmhST2c4Lm1mdDCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC80Ny9iYzcwNzgtMWVlNC00MmYxLWJjMzQtMWQyMWQxYmNlM2Zl LzEvSTB0VXNSbW5zLV94VXdoYmN4VlFmTmhST2c4LmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAgiY1VSrA GR2MSLBvfiZxBq0YmlpDOTZygAlrXeqTHLyqE3XOLShjpST3uq9FDtZDX/qH20z3 mES7SK64UJ4EYGw1lFieZ9VGowe0b/05As+ne9lRreYWOdH0NXmmRBQpz4/9NhXg jq+zu2IIDDcTLclh+cTzafXIkGeyBMBYC5qSFGJag3Ux6vAOmpqxgSB94bMI3kq+ jtk9IgDAauooDY7+Nnh83KwBRd5kBexaOluVOjIPenW9V7ZKyH3RfBKBAdqahhWH EAdJTuQ/mFj+o757FfiPTaRUEqQvP86GT83zSan/pG26n7YB2Rg0KCKKeJjsDAAx dhyX12g54oHCiw== -----END CERTIFICATE-----Generated at Wed Jul 23 06:14:36 2025 by rpki-client