$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/4a/8b1fac-5a21-4848-a66a-10bb4579d528/1/CnMngF3yD7XB1vTokHR0PK6ySvc.mft File: CnMngF3yD7XB1vTokHR0PK6ySvc.mft (raw, json) Hash identifier: 0eIOkjXHTxNSyWb4/vVChy4wInKQcIUnuyLd/C/ktM8= Subject key identifier: D7:0C:5B:B8:C5:D3:47:26:EA:4E:1E:7A:93:BB:76:E1:34:55:0D:15 Authority key identifier: 0A:73:27:80:5D:F2:0F:B5:C1:D6:F4:E8:90:74:74:3C:AE:B2:4A:F7 Certificate issuer: /CN=0a7327805df20fb5c1d6f4e89074743caeb24af7 Certificate serial: 01984AE5CBEDB5953565BE382709A97F02CE Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/CnMngF3yD7XB1vTokHR0PK6ySvc.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/4a/8b1fac-5a21-4848-a66a-10bb4579d528/1/CnMngF3yD7XB1vTokHR0PK6ySvc.mft Manifest number: 1615 Signing time: Sun 27 Jul 2025 08:00:30 +0000 Manifest this update: Sun 27 Jul 2025 08:00:30 +0000 Manifest next update: Mon 28 Jul 2025 08:00:30 +0000 Files and hashes: 1: 3cfolha5-Y-keIgl3j-ukMRu5nQ.roa (hash: BQrU5Phy/xAtort4zjZjH8gAv4mg2agVu08FECKFlvU=) 2: CQxWaB1OicMMrqXCoQ0fopCoxdU.roa (hash: WjfHWnkqbfHKaqxUShNyRq++rhQwjg3tNVjy17YQNc4=) 3: CnMngF3yD7XB1vTokHR0PK6ySvc.crl (hash: Q6z3q30HCZZ6kPi+VLaLaoyu9rm/hbhhocd5vG2hRNU=) 4: D79_joXGPOWpWr93YY0Y2guGopg.roa (hash: 0cVbgcQor7L9mYV+oSvm/P1YAy/Mh97VSOZWkl7idYY=) 5: GopMrpyToOz7hTEn02tSlWTChNc.roa (hash: PWyNZm9NNDQb4vDrYexwTILfoeBvuqO0/ZesnD+rBMg=) 6: JRgyiOk_LfA7u6guZj8T-mLV5ek.roa (hash: n3a74BFPnSGvy48Z2olIpeDYQbz6pUrH/b/fuU5b5O4=) 7: QY3FsKWsHL7VlMduaclRNJ3pt_U.roa (hash: H5vPCo3lKDFJhLJsXdyGxkbSr+CZKxnZxfEUf2naVGc=) 8: Zla6xxqlwjD5HGAN16Pzo29Tijg.roa (hash: XT7/Z4sfo6kElFtdLFq3BhRYhs4vxj89ZfDzgHu8Ge4=) 9: hnMtsx259zWb5DPTAskFt19vieA.roa (hash: IS/K0LmABWhq/hUi5ijfbnkS8QGQcUBWRW0f7gTisD4=) 10: ydOhopDpEgxJrzwZy5o2ywKpW8w.roa (hash: cGNA9jtDwM6OD4vlqV4K4uD26uy/JQnhTPG3oY/YMmA=) Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/4a/8b1fac-5a21-4848-a66a-10bb4579d528/1/CnMngF3yD7XB1vTokHR0PK6ySvc.crl rsync://rpki.ripe.net/repository/DEFAULT/4a/8b1fac-5a21-4848-a66a-10bb4579d528/1/CnMngF3yD7XB1vTokHR0PK6ySvc.mft rsync://rpki.ripe.net/repository/DEFAULT/CnMngF3yD7XB1vTokHR0PK6ySvc.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Mon 28 Jul 2025 00:00:05 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:98:4a:e5:cb:ed:b5:95:35:65:be:38:27:09:a9:7f:02:ce Signature Algorithm: sha256WithRSAEncryption Issuer: CN=0a7327805df20fb5c1d6f4e89074743caeb24af7 Validity Not Before: Jul 27 08:00:30 2025 GMT Not After : Jul 28 08:00:30 2025 GMT Subject: CN=d70c5bb8c5d34726ea4e1e7a93bb76e134550d15 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:9c:a5:c6:97:a0:bb:fa:b6:6c:e7:33:ae:f2:f1: 2f:b8:f7:83:cf:1d:92:2f:47:0e:36:24:d5:67:ff: 31:81:9b:1b:1c:14:58:40:d4:79:e1:49:bf:b2:b9: 06:ca:24:20:37:82:a5:94:06:b9:6d:bb:cd:2f:b7: 2f:bf:80:5a:87:69:26:38:28:a9:03:82:7f:74:e3: 89:a9:cb:37:55:af:cb:b8:dd:2a:5c:31:da:30:0d: 68:a0:79:2f:ff:56:03:d3:ed:d4:5f:5c:7a:07:b4: 38:8d:e1:06:9d:08:61:91:25:30:5d:8e:27:7c:96: 43:61:11:d0:1c:a0:60:6c:3f:25:6f:49:56:f2:22: 7c:0a:90:9a:87:5a:80:e8:10:7e:ac:35:5d:6e:5a: 7f:a5:ea:3b:50:f3:ed:4b:14:df:67:10:91:75:ae: 3a:41:bc:f9:45:9d:32:6c:be:67:7c:82:55:ff:13: 16:0c:d6:b7:85:af:ef:04:f8:d7:9f:65:bd:ef:8d: af:85:d4:22:e9:5d:fe:ed:39:3b:ba:88:b4:ce:b4: 74:cb:dd:ce:72:58:fd:3f:a2:bd:aa:f5:9d:df:45: 6c:03:b2:2c:35:03:17:84:3f:1c:97:0e:1a:b7:d1: bd:88:94:0a:88:6b:dc:7f:cd:fc:2b:6a:77:f3:92: 28:15 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: D7:0C:5B:B8:C5:D3:47:26:EA:4E:1E:7A:93:BB:76:E1:34:55:0D:15 X509v3 Authority Key Identifier: keyid:0A:73:27:80:5D:F2:0F:B5:C1:D6:F4:E8:90:74:74:3C:AE:B2:4A:F7 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/CnMngF3yD7XB1vTokHR0PK6ySvc.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/4a/8b1fac-5a21-4848-a66a-10bb4579d528/1/CnMngF3yD7XB1vTokHR0PK6ySvc.mft X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/4a/8b1fac-5a21-4848-a66a-10bb4579d528/1/CnMngF3yD7XB1vTokHR0PK6ySvc.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 09:0e:80:ad:52:60:61:62:0b:42:50:52:13:d5:2b:ca:74:a4: 21:6a:a6:7d:22:44:ce:70:86:ac:61:73:19:d1:55:2c:79:d7: aa:1e:ba:dd:f7:ba:23:e0:ea:3e:78:62:ef:74:28:1a:7f:53: a5:0e:f2:d5:4e:48:8b:d4:07:fd:c2:ac:02:32:6f:a8:b8:c8: 8d:f9:b4:4f:2d:03:59:ef:e4:e1:c7:c4:88:a0:0a:65:d0:90: c8:51:78:49:23:d4:c9:64:69:64:59:e8:28:2b:0e:3b:fd:1a: c6:ab:c7:f7:6c:b9:4d:47:a8:2f:56:2b:2f:0e:f6:5f:d0:16: bc:18:6b:86:d3:a6:bc:6f:5e:1a:1c:b2:1b:4c:ab:39:bd:c8: 3f:d4:5a:7a:93:cb:ff:cb:7f:4b:01:1c:24:c7:2c:a3:d4:f3: 71:7c:66:b1:58:bc:57:93:fa:36:4a:97:9a:42:0f:a5:6d:a4: 94:e5:9d:11:01:3d:71:c8:e4:97:15:60:c3:bc:6c:d9:6e:01: a8:03:75:90:a7:37:16:62:a8:97:f1:fd:26:09:a7:ef:de:60: d6:97:7a:4e:07:61:67:fd:f9:e1:c5:ba:28:98:8f:1e:f4:01: d6:e8:5c:b1:bb:ea:59:02:71:6d:61:fc:6e:0d:8f:88:19:1d: 83:f4:4d:3c -----BEGIN CERTIFICATE----- MIIFFjCCA/6gAwIBAgISAZhK5cvttZU1Zb44JwmpfwLOMA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKDBhNzMyNzgwNWRmMjBmYjVjMWQ2ZjRlODkwNzQ3NDNjYWVi MjRhZjcwHhcNMjUwNzI3MDgwMDMwWhcNMjUwNzI4MDgwMDMwWjAzMTEwLwYDVQQD EyhkNzBjNWJiOGM1ZDM0NzI2ZWE0ZTFlN2E5M2JiNzZlMTM0NTUwZDE1MIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAnKXGl6C7+rZs5zOu8vEvuPeDzx2S L0cONiTVZ/8xgZsbHBRYQNR54Um/srkGyiQgN4KllAa5bbvNL7cvv4Bah2kmOCip A4J/dOOJqcs3Va/LuN0qXDHaMA1ooHkv/1YD0+3UX1x6B7Q4jeEGnQhhkSUwXY4n fJZDYRHQHKBgbD8lb0lW8iJ8CpCah1qA6BB+rDVdblp/peo7UPPtSxTfZxCRda46 Qbz5RZ0ybL5nfIJV/xMWDNa3ha/vBPjXn2W9742vhdQi6V3+7Tk7uoi0zrR0y93O clj9P6K9qvWd30VsA7IsNQMXhD8clw4at9G9iJQKiGvcf838K2p385IoFQIDAQAB o4ICIjCCAh4wHQYDVR0OBBYEFNcMW7jF00cm6k4eepO7duE0VQ0VMB8GA1UdIwQY MBaAFApzJ4Bd8g+1wdb06JB0dDyuskr3MA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvQ25NbmdGM3lEN1hCMXZUb2tIUjBQSzZ5U3ZjLmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC80YS84YjFmYWMtNWEyMS00ODQ4LWE2NmEt MTBiYjQ1NzlkNTI4LzEvQ25NbmdGM3lEN1hCMXZUb2tIUjBQSzZ5U3ZjLm1mdDCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC80YS84YjFmYWMtNWEyMS00ODQ4LWE2NmEtMTBiYjQ1NzlkNTI4 LzEvQ25NbmdGM3lEN1hCMXZUb2tIUjBQSzZ5U3ZjLmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEACQ6ArVJg YWILQlBSE9UrynSkIWqmfSJEznCGrGFzGdFVLHnXqh663fe6I+DqPnhi73QoGn9T pQ7y1U5Ii9QH/cKsAjJvqLjIjfm0Ty0DWe/k4cfEiKAKZdCQyFF4SSPUyWRpZFno KCsOO/0axqvH92y5TUeoL1YrLw72X9AWvBhrhtOmvG9eGhyyG0yrOb3IP9RaepPL /8t/SwEcJMcso9TzcXxmsVi8V5P6NkqXmkIPpW2klOWdEQE9ccjklxVgw7xs2W4B qAN1kKc3FmKol/H9Jgmn795g1pd6TgdhZ/354cW6KJiPHvQB1uhcsbvqWQJxbWH8 bg2PiBkdg/RNPA== -----END CERTIFICATE-----Generated at Sun Jul 27 09:57:10 2025 by rpki-client