$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/48/6b22e6-352f-4e88-827b-d78d5631d7f6/1/mGihmSu4A33egdDIzcBpX87hfCc.mft File: mGihmSu4A33egdDIzcBpX87hfCc.mft (raw, json) Hash identifier: nRdXvLYBFwWygyzKiU107fOmaGlfGVTFUl8nUaX58cU= Subject key identifier: 02:86:94:CF:B3:22:98:B9:E6:87:CD:E9:46:74:43:8A:C0:2C:B4:82 Authority key identifier: 98:68:A1:99:2B:B8:03:7D:DE:81:D0:C8:CD:C0:69:5F:CE:E1:7C:27 Certificate issuer: /CN=9868a1992bb8037dde81d0c8cdc0695fcee17c27 Certificate serial: 019839F1E47C4EF6CFD748417B0476CA930D Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/mGihmSu4A33egdDIzcBpX87hfCc.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/48/6b22e6-352f-4e88-827b-d78d5631d7f6/1/mGihmSu4A33egdDIzcBpX87hfCc.mft Manifest number: 0FFD Signing time: Thu 24 Jul 2025 01:00:10 +0000 Manifest this update: Thu 24 Jul 2025 01:00:10 +0000 Manifest next update: Fri 25 Jul 2025 01:00:10 +0000 Files and hashes: 1: 9_JhIw-bjUbjcsXjaRSJlNBXD-s.roa (hash: Hm59eKak2mRBLnGzAb7+vw2g+CNCplTmTg9aukFT0JE=) 2: Cm5DqrbsctqFvXQRRyRwNPG00IY.roa (hash: O06PA3Ks3knW3J57m8lSN/Hv9kQ6nHGAf+goTnk1j04=) 3: FPzxN2ymmUH78y5haV0PaZXdLVY.roa (hash: DdUQ7lpUro6lEFuSiN9fKQg9b9UllNMKrwO6ynxkjos=) 4: JPO6PlbO7T2lxOXw7VKbRM2Ge5Q.roa (hash: kV6T9GvL2JmIx9RKefMlHDbvnYr8DiGL3xFPvQ3Jx8U=) 5: JfmWtf32dZhRVwJQ1ZtKQrQQAfg.roa (hash: ucBbFh4z7Smi+4uRRA6FLN/GqDjNQS+yFNEoMPGwvug=) 6: VQJlRnI_FsEKIbEWGLyhLwP0NtM.roa (hash: onaEyOz4ocmnu3HOOu4gakiggdji6MdLGBGGPS11inY=) 7: ZBv1VZ75Z-edNoZRcvYjkb7NpN8.roa (hash: WTUxj+sidK096ykp4PAhTaXWq6bYZtjXmE5iUhcAutU=) 8: a0GKpzKa2l-eFBlKQIWeWorMYWE.roa (hash: ToDMarZPFqTg+Vik2NKe1VnAgzMIR0HHOC5Xh17RUK0=) 9: aEXJ-GLDzjyP60FhTQdWJ8Fvt7E.roa (hash: 0YpF7CPYi6PyoAg9TvQlat07FWQyIu8cHA137q7nQSc=) 10: bmd97yvzsY5Yo2HfnEE_aGsiLVw.roa (hash: rBbiHBTIds8AVFd6SWdPqBeLyfTxB+l6zirCVR5u1u4=) 11: mGihmSu4A33egdDIzcBpX87hfCc.crl (hash: UC8B2MynflmR2uYi/zTwtXgMbATG4Y7jVeQYyX19W9U=) 12: pygxQHbvGZKVLzuvUJnRE055Ymk.roa (hash: jTpMpBKEIx8o2FyniDrKdnhuTZAZvNKL8hZwfmfGnMs=) 13: qYL6kaPJ2b0Ev5p7Oziqiiv4qTc.roa (hash: WBI5DwkHHee0G2mSopIcnWotDs7K8/Lvby/GArK324A=) 14: vY3Y3etrniGVDWVqa-wGwlb4wOM.roa (hash: 3iBpAllkx0+u9qLlhBtBBscqzISkhr+UuWv9+CbK7ew=) 15: yQafrAusZTwTPZBFL3M0qrFQZ04.roa (hash: Bj+Dm5K+2i3MwGi4viuLKNvUn9KDeSK+/ogiA8Pwh18=) 16: zsat_Kz6NAhfzEasx4a9lQm7pnc.roa (hash: iKI5HEcwbfP2kx1h4h3ET7Ssp+IpbRLbrY2f8G6eDr4=) Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/48/6b22e6-352f-4e88-827b-d78d5631d7f6/1/mGihmSu4A33egdDIzcBpX87hfCc.crl rsync://rpki.ripe.net/repository/DEFAULT/48/6b22e6-352f-4e88-827b-d78d5631d7f6/1/mGihmSu4A33egdDIzcBpX87hfCc.mft rsync://rpki.ripe.net/repository/DEFAULT/mGihmSu4A33egdDIzcBpX87hfCc.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Thu 24 Jul 2025 23:00:04 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:98:39:f1:e4:7c:4e:f6:cf:d7:48:41:7b:04:76:ca:93:0d Signature Algorithm: sha256WithRSAEncryption Issuer: CN=9868a1992bb8037dde81d0c8cdc0695fcee17c27 Validity Not Before: Jul 24 01:00:10 2025 GMT Not After : Jul 25 01:00:10 2025 GMT Subject: CN=028694cfb32298b9e687cde94674438ac02cb482 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:9a:46:70:8b:f5:3e:52:48:4e:3c:38:db:8d:c2: f0:75:88:ca:ce:69:b8:90:7c:94:8e:59:af:41:ce: 72:c4:da:27:50:3c:8d:cb:ed:cf:21:7a:28:5e:42: df:65:a2:ce:bb:3b:8b:9c:13:fd:4a:f5:0b:16:56: 7f:cd:f9:1e:75:5e:b0:8f:71:9c:86:14:f4:c8:26: b8:4c:d3:79:08:c0:06:07:4a:6e:e4:50:44:19:b8: c6:76:68:93:9f:6a:ea:e2:13:f9:7f:3f:d7:82:23: f4:a2:cd:83:a7:b2:18:9a:57:94:bf:e0:4f:48:5c: 42:16:7c:51:a5:87:52:a6:a5:01:82:05:74:27:21: e7:69:de:96:6e:27:d9:5f:5e:95:85:fd:b2:e1:c6: 02:80:ea:73:99:46:da:54:1c:82:36:e6:26:4a:03: 32:e6:b6:79:84:6f:93:53:1b:e4:a1:c8:24:49:23: 60:c8:a3:d9:d6:b7:ab:9f:9f:8e:24:64:cd:2e:67: ce:d6:f9:5c:fd:d7:ac:00:fb:fa:89:f2:e8:86:ff: f6:0f:5f:57:63:12:c2:ec:ef:83:d6:51:41:b0:c2: da:f6:18:41:5f:3e:78:bb:b3:7d:61:fb:d3:a2:25: 6f:93:fc:3a:61:37:0d:ea:d7:ae:3a:3f:6b:07:af: 0f:13 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 02:86:94:CF:B3:22:98:B9:E6:87:CD:E9:46:74:43:8A:C0:2C:B4:82 X509v3 Authority Key Identifier: keyid:98:68:A1:99:2B:B8:03:7D:DE:81:D0:C8:CD:C0:69:5F:CE:E1:7C:27 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/mGihmSu4A33egdDIzcBpX87hfCc.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/48/6b22e6-352f-4e88-827b-d78d5631d7f6/1/mGihmSu4A33egdDIzcBpX87hfCc.mft X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/48/6b22e6-352f-4e88-827b-d78d5631d7f6/1/mGihmSu4A33egdDIzcBpX87hfCc.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 71:60:68:9a:b9:9e:b6:47:c5:ba:96:70:13:ba:9f:9c:1b:4b: 28:99:98:6a:be:13:5f:da:c8:b3:05:82:28:51:99:16:82:18: 41:3e:bd:ca:92:90:56:6f:25:d2:27:21:5d:92:8b:d8:fe:52: 9e:66:43:a4:6a:36:e2:17:71:55:8d:d7:98:7d:26:49:1b:55: c5:5a:a1:d8:20:eb:87:71:28:fd:aa:4c:e5:e2:ce:38:df:37: 30:e4:77:b7:c9:3a:3a:af:12:9f:99:fb:9a:17:d7:98:b6:9c: a7:a5:ec:77:30:c2:8b:67:7a:a7:ac:25:8f:09:ca:90:7e:4c: 9c:65:45:3c:5b:12:94:51:ef:0a:10:ef:36:28:01:0c:1e:90: c9:64:dd:c6:8e:ad:97:de:3d:1d:e0:55:aa:be:3c:ad:88:35: 5d:da:d0:03:fd:2d:cb:78:27:d0:fc:93:18:cc:dc:52:07:93: 63:f5:14:6b:16:7b:bc:e8:b8:5d:fb:b5:7b:0a:f7:00:32:aa: f6:12:42:48:ee:59:00:1c:43:ad:c8:8e:df:ac:08:2d:17:10: 80:8f:a9:aa:e6:2f:58:a2:ad:83:da:87:c5:9d:13:80:3d:fe: 08:50:1a:a2:a0:ff:a8:1f:f3:33:c7:b6:ed:9a:75:2b:28:ba: ba:8d:15:5b -----BEGIN CERTIFICATE----- MIIFFjCCA/6gAwIBAgISAZg58eR8TvbP10hBewR2ypMNMA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKDk4NjhhMTk5MmJiODAzN2RkZTgxZDBjOGNkYzA2OTVmY2Vl MTdjMjcwHhcNMjUwNzI0MDEwMDEwWhcNMjUwNzI1MDEwMDEwWjAzMTEwLwYDVQQD EygwMjg2OTRjZmIzMjI5OGI5ZTY4N2NkZTk0Njc0NDM4YWMwMmNiNDgyMIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAmkZwi/U+UkhOPDjbjcLwdYjKzmm4 kHyUjlmvQc5yxNonUDyNy+3PIXooXkLfZaLOuzuLnBP9SvULFlZ/zfkedV6wj3Gc hhT0yCa4TNN5CMAGB0pu5FBEGbjGdmiTn2rq4hP5fz/XgiP0os2Dp7IYmleUv+BP SFxCFnxRpYdSpqUBggV0JyHnad6WbifZX16Vhf2y4cYCgOpzmUbaVByCNuYmSgMy 5rZ5hG+TUxvkocgkSSNgyKPZ1rern5+OJGTNLmfO1vlc/desAPv6ifLohv/2D19X YxLC7O+D1lFBsMLa9hhBXz54u7N9YfvToiVvk/w6YTcN6teuOj9rB68PEwIDAQAB o4ICIjCCAh4wHQYDVR0OBBYEFAKGlM+zIpi55ofN6UZ0Q4rALLSCMB8GA1UdIwQY MBaAFJhooZkruAN93oHQyM3AaV/O4XwnMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvbUdpaG1TdTRBMzNlZ2RESXpjQnBYODdoZkNjLmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC80OC82YjIyZTYtMzUyZi00ZTg4LTgyN2It ZDc4ZDU2MzFkN2Y2LzEvbUdpaG1TdTRBMzNlZ2RESXpjQnBYODdoZkNjLm1mdDCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC80OC82YjIyZTYtMzUyZi00ZTg4LTgyN2ItZDc4ZDU2MzFkN2Y2 LzEvbUdpaG1TdTRBMzNlZ2RESXpjQnBYODdoZkNjLmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAcWBomrme tkfFupZwE7qfnBtLKJmYar4TX9rIswWCKFGZFoIYQT69ypKQVm8l0ichXZKL2P5S nmZDpGo24hdxVY3XmH0mSRtVxVqh2CDrh3Eo/apM5eLOON83MOR3t8k6Oq8Sn5n7 mhfXmLacp6XsdzDCi2d6p6wljwnKkH5MnGVFPFsSlFHvChDvNigBDB6QyWTdxo6t l949HeBVqr48rYg1XdrQA/0ty3gn0PyTGMzcUgeTY/UUaxZ7vOi4Xfu1ewr3ADKq 9hJCSO5ZABxDrciO36wILRcQgI+pquYvWKKtg9qHxZ0TgD3+CFAaoqD/qB/zM8e2 7Zp1Kyi6uo0VWw== -----END CERTIFICATE-----Generated at Thu Jul 24 04:52:02 2025 by rpki-client