$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/4a/ea1cff-ae8f-4719-89b3-003a1568bf3f/1/Kb4C3qCghumID1ZMhocrvFl8xnI.mft File: Kb4C3qCghumID1ZMhocrvFl8xnI.mft (raw, json) Hash identifier: B1sPN/17X7WLRtDc8+rCEz1s2c1KlFTkIMo+1UUQrK8= Subject key identifier: 8D:E9:93:38:46:A5:66:44:85:77:F3:4A:9E:EA:42:4A:DB:64:3D:0A Authority key identifier: 29:BE:02:DE:A0:A0:86:E9:88:0F:56:4C:86:87:2B:BC:59:7C:C6:72 Certificate issuer: /CN=29be02dea0a086e9880f564c86872bbc597cc672 Certificate serial: 019848893BCC306101CCE8BD2D27BF141C22 Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/Kb4C3qCghumID1ZMhocrvFl8xnI.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/4a/ea1cff-ae8f-4719-89b3-003a1568bf3f/1/Kb4C3qCghumID1ZMhocrvFl8xnI.mft Manifest number: 13F1 Signing time: Sat 26 Jul 2025 21:00:09 +0000 Manifest this update: Sat 26 Jul 2025 21:00:09 +0000 Manifest next update: Sun 27 Jul 2025 21:00:09 +0000 Files and hashes: 1: 6KpBI63kEhQRzmhRvVQxSFsUBTI.roa (hash: Ckcyw44N8h4Yete0VsDquepnFPzly6G4UPrg1n68+p4=) 2: Bl50d2SW5pMGbeTLnaL144PRWUQ.roa (hash: bI5Yiq9+r3/RdML3fweIl1fiyaU2NaLiJvR9z1M6k50=) 3: Kb4C3qCghumID1ZMhocrvFl8xnI.crl (hash: pPoLBYfoZsJIn2R6Y0jk3G/z+jGYpNHENO7LQ38DzlY=) 4: MLMPGj8H9Pi_UwBtlTfByiigjfM.roa (hash: pC0aw2jiKroOvxcRGHKOge3OdR3RFQ8raECTuPmJMXM=) 5: OHP3S03u5tMHflzGMFoSd5vTyZk.roa (hash: nGDY1zJo3dHSTN2PJe0pXCx8heywXO+QdXtgHJbEB2A=) 6: RZnwVTO26PBx3a68dhxrN-N2_9U.roa (hash: 2uzv1j/fxffpUq8amOpURgwfPrkNCx7YPSsxO/BHSJk=) 7: XkZDM_8IFwDF5TaEYGBCOeA1rnY.roa (hash: wJ3Nd2iWllTHLJTwVq5JnkwdVdkkialVRVjZAGjLaUA=) 8: aB7sKw4yBEcglwqSevB86YJRj7Y.roa (hash: PH14Cm3gVr59rgH3FX69SJ0GUOOG1kpk0YkBDPc5P9M=) 9: j1JcZG88WoDJIAs0TuxaORvfLro.roa (hash: yIeCKxXutjytoAiiGxkiUBSn0Vk24wB2GDbKm+IJthI=) 10: nwUsD1fndRShZT-s5ssppnOFmiI.roa (hash: 5Gw61qVpay4Kz2GbqbYja1rnv6svDc1Ma6KW2KgO/Fk=) 11: zphCyxB7JvvZfrdVh3qU9-FSl5c.roa (hash: PYY+kdRiBf7TYzIHyOP800eu0rdgwqkk9pHLsntWJR8=) 12: zvPA1UGui-igyOCxkJMwtvZ5S28.roa (hash: /AfKz5TxnkzdqXaxQMADqDtWb4d/fIp2oXqMIKdkCNA=) Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/4a/ea1cff-ae8f-4719-89b3-003a1568bf3f/1/Kb4C3qCghumID1ZMhocrvFl8xnI.crl rsync://rpki.ripe.net/repository/DEFAULT/4a/ea1cff-ae8f-4719-89b3-003a1568bf3f/1/Kb4C3qCghumID1ZMhocrvFl8xnI.mft rsync://rpki.ripe.net/repository/DEFAULT/Kb4C3qCghumID1ZMhocrvFl8xnI.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Sun 27 Jul 2025 15:00:05 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:98:48:89:3b:cc:30:61:01:cc:e8:bd:2d:27:bf:14:1c:22 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=29be02dea0a086e9880f564c86872bbc597cc672 Validity Not Before: Jul 26 21:00:09 2025 GMT Not After : Jul 27 21:00:09 2025 GMT Subject: CN=8de9933846a566448577f34a9eea424adb643d0a Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:b4:4b:e4:42:06:ab:03:05:e4:64:75:ee:68:a4: d4:e4:b9:8d:48:29:d5:ff:d7:48:93:81:89:b7:6b: ad:10:e9:a0:1b:35:a2:fe:54:2a:dc:b4:f2:fe:49: b5:4c:ad:3b:23:64:31:65:df:70:02:56:a7:0d:cc: c2:19:47:e2:76:6b:b2:ad:b9:bb:34:5e:2a:f9:d1: 64:84:b6:95:fe:25:47:1e:b5:62:4c:2f:40:55:4d: 29:ff:fd:ac:09:3b:93:68:b9:fa:4a:bd:49:56:09: e8:5d:0c:4d:d2:32:14:8d:af:30:15:f4:aa:28:d1: f9:f0:24:a4:f2:1c:63:d7:af:34:d0:e3:d7:61:2e: 81:db:e3:64:6d:4c:5d:45:27:56:71:80:cc:78:1d: d6:d9:6a:1a:1b:4b:15:6d:20:6c:6d:b5:9c:eb:4c: 8e:85:98:2e:07:f6:13:9a:70:b6:72:12:27:f2:56: d7:36:a1:4d:1a:1e:2a:04:4e:ab:58:db:56:6b:13: 23:9d:dd:83:95:4f:f9:68:6f:03:49:25:61:b1:ee: b7:2d:4f:44:12:57:e2:b7:b9:67:9c:65:26:2c:fd: 15:d5:e0:ae:8d:46:0a:87:f0:3f:25:b8:1c:fb:ef: cd:9a:d4:a2:bc:4a:55:86:e3:ee:dd:12:35:9c:8c: 93:55 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 8D:E9:93:38:46:A5:66:44:85:77:F3:4A:9E:EA:42:4A:DB:64:3D:0A X509v3 Authority Key Identifier: keyid:29:BE:02:DE:A0:A0:86:E9:88:0F:56:4C:86:87:2B:BC:59:7C:C6:72 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/Kb4C3qCghumID1ZMhocrvFl8xnI.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/4a/ea1cff-ae8f-4719-89b3-003a1568bf3f/1/Kb4C3qCghumID1ZMhocrvFl8xnI.mft X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/4a/ea1cff-ae8f-4719-89b3-003a1568bf3f/1/Kb4C3qCghumID1ZMhocrvFl8xnI.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 7a:71:d1:cf:a2:73:fc:be:7f:35:07:d9:d6:8b:1d:ed:65:19: 55:84:48:08:df:8a:2b:66:39:05:7f:9b:c2:2f:f1:1c:5c:2c: a6:75:2f:4b:0e:2d:07:ca:2e:49:3a:ee:fd:de:12:c8:a7:28: bb:4b:c9:80:79:25:7a:f4:29:3e:aa:8f:c0:01:06:5d:81:db: 1f:46:fc:54:89:e9:bf:e4:ab:2d:02:c1:94:49:ca:74:fd:8a: 23:93:f0:b8:e3:e2:d5:0c:32:3f:9c:61:91:e9:89:40:90:1f: 3b:aa:dd:01:ce:21:66:1a:10:45:51:17:89:23:0c:b9:48:f0: 3b:1d:2e:c7:e0:32:c0:06:b9:bd:90:c2:92:23:92:20:e7:13: 2f:1e:1d:18:29:99:76:a5:0d:0f:c7:99:55:c8:d9:94:14:69: 2f:27:21:63:4f:eb:6d:c9:80:77:f8:4f:9f:49:1f:7e:ae:89: b8:20:77:b5:78:07:06:24:26:a6:42:1d:1a:23:d5:0c:52:b4: ed:a2:6d:4d:2b:35:a4:08:a6:5e:95:0b:6d:af:35:e8:b2:ce: ac:65:d3:12:53:f3:42:eb:0b:67:0f:d5:d4:fb:4b:63:dc:c9: 39:8e:69:ed:b9:02:30:78:79:63:43:00:47:d2:f8:6c:27:0a: f4:6c:f4:89 -----BEGIN CERTIFICATE----- MIIFFjCCA/6gAwIBAgISAZhIiTvMMGEBzOi9LSe/FBwiMA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKDI5YmUwMmRlYTBhMDg2ZTk4ODBmNTY0Yzg2ODcyYmJjNTk3 Y2M2NzIwHhcNMjUwNzI2MjEwMDA5WhcNMjUwNzI3MjEwMDA5WjAzMTEwLwYDVQQD Eyg4ZGU5OTMzODQ2YTU2NjQ0ODU3N2YzNGE5ZWVhNDI0YWRiNjQzZDBhMIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAtEvkQgarAwXkZHXuaKTU5LmNSCnV /9dIk4GJt2utEOmgGzWi/lQq3LTy/km1TK07I2QxZd9wAlanDczCGUfidmuyrbm7 NF4q+dFkhLaV/iVHHrViTC9AVU0p//2sCTuTaLn6Sr1JVgnoXQxN0jIUja8wFfSq KNH58CSk8hxj16800OPXYS6B2+NkbUxdRSdWcYDMeB3W2WoaG0sVbSBsbbWc60yO hZguB/YTmnC2chIn8lbXNqFNGh4qBE6rWNtWaxMjnd2DlU/5aG8DSSVhse63LU9E Elfit7lnnGUmLP0V1eCujUYKh/A/Jbgc++/NmtSivEpVhuPu3RI1nIyTVQIDAQAB o4ICIjCCAh4wHQYDVR0OBBYEFI3pkzhGpWZEhXfzSp7qQkrbZD0KMB8GA1UdIwQY MBaAFCm+At6goIbpiA9WTIaHK7xZfMZyMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvS2I0QzNxQ2dodW1JRDFaTWhvY3J2Rmw4eG5JLmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC80YS9lYTFjZmYtYWU4Zi00NzE5LTg5YjMt MDAzYTE1NjhiZjNmLzEvS2I0QzNxQ2dodW1JRDFaTWhvY3J2Rmw4eG5JLm1mdDCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC80YS9lYTFjZmYtYWU4Zi00NzE5LTg5YjMtMDAzYTE1NjhiZjNm LzEvS2I0QzNxQ2dodW1JRDFaTWhvY3J2Rmw4eG5JLmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAenHRz6Jz /L5/NQfZ1osd7WUZVYRICN+KK2Y5BX+bwi/xHFwspnUvSw4tB8ouSTru/d4SyKco u0vJgHklevQpPqqPwAEGXYHbH0b8VInpv+SrLQLBlEnKdP2KI5PwuOPi1QwyP5xh kemJQJAfO6rdAc4hZhoQRVEXiSMMuUjwOx0ux+AywAa5vZDCkiOSIOcTLx4dGCmZ dqUND8eZVcjZlBRpLychY0/rbcmAd/hPn0kffq6JuCB3tXgHBiQmpkIdGiPVDFK0 7aJtTSs1pAimXpULba816LLOrGXTElPzQusLZw/V1PtLY9zJOY5p7bkCMHh5Y0MA R9L4bCcK9Gz0iQ== -----END CERTIFICATE-----Generated at Sat Jul 26 23:01:18 2025 by rpki-client