$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/4b/f8a5d1-260a-46a4-a8e4-283fe54a6f2f/1/pM6WQKPvL-oZN0rY-Z9CPXqnx2s.mft File: pM6WQKPvL-oZN0rY-Z9CPXqnx2s.mft (raw, json) Hash identifier: VdOorRghSAqT8O7UcEF7K8cX3lydlbhRMOttMPjbLVc= Subject key identifier: 7E:A1:F6:22:28:B8:8C:87:FF:6D:39:EA:B2:05:12:AF:0F:B4:0A:17 Authority key identifier: A4:CE:96:40:A3:EF:2F:EA:19:37:4A:D8:F9:9F:42:3D:7A:A7:C7:6B Certificate issuer: /CN=a4ce9640a3ef2fea19374ad8f99f423d7aa7c76b Certificate serial: 01982D497C46A463ED28E7E60564FE902974 Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/pM6WQKPvL-oZN0rY-Z9CPXqnx2s.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/4b/f8a5d1-260a-46a4-a8e4-283fe54a6f2f/1/pM6WQKPvL-oZN0rY-Z9CPXqnx2s.mft Manifest number: 12CC Signing time: Mon 21 Jul 2025 14:00:47 +0000 Manifest this update: Mon 21 Jul 2025 14:00:47 +0000 Manifest next update: Tue 22 Jul 2025 14:00:47 +0000 Files and hashes: 1: 3MQ1Zm2jB8qgOjCAc_a0v-3nM_o.roa (hash: T4pVm2mU2N5el1g2HcnlglhN57e23NLVS7ny7NzSBL0=) 2: 4SEUaFHVUAL3abRJwnhpLcw21dk.roa (hash: Nz767QGxnFH79p/BW/8MOsNM3RviNN1Kvy4GgZgMyGs=) 3: FCFfx3p7hHCFHlKPZobVJyLJ5MI.roa (hash: 6JV0xEEqdwivRbZdMI4zo4Wpa9PWQK4gKoasAD6odWU=) 4: IYmUJK1vApyWT119wps-ukf2n9E.roa (hash: w1dWdBHD/FLi3tR98pk3iJlbhc1nR22X1Pwn/kqhO/0=) 5: KcuMI0SBvL5BPuYJm6BH3vJKAQ0.roa (hash: s0e2eWUrZQW14pJCqfjgMZ+ViTFNuU9345bizVg0sKY=) 6: MSrSUIwYGP5OzMFaA9dwr3mO4jY.roa (hash: OHzV5kP6uhO1eFoIB7t+WKfJjHs90j+a/iXQqOXuv30=) 7: N7C2a3H5ML3ydyNI5IDIoJ6m-6U.roa (hash: FJm0Nzs6ME/1+LojcQZMLdUu/cBqlxKE16Bs75fFFLw=) 8: Nf1rHETWcCnhWhR_uM_9B2P3jb8.roa (hash: pBdKIUwSvvQqLJChVbTbSEDRXa+Ll262+ax9ivbZD0o=) 9: OFTgwkdKspRJ_TvSv6vgx_ckdLQ.roa (hash: b7UPAbBCKcuRworqLaxy25e9Gx9nfc4PaZocWvp2h84=) 10: RzvDJbgMFFQ3RXZZowAtkGpvaYQ.roa (hash: pXgfU5zLGpdaPENK8y9IOVL5xtiIt9Fk8RRzx12JQUw=) 11: WToItz8al9Sw1IRtEOUm1ku1TzY.roa (hash: cD3Nf3okXGtPiYuFOkPnzfMJHgIYmW52aVmaOwxOEN0=) 12: dcAEUZ_ghRVpaUYo3WWA9zUPe9U.roa (hash: AsvsdGamYH2cSArWOQT5cvLOD/2t8gp5MEnt/aWjLII=) 13: m-VIT0LjtD9EzoMprh8uOjUFAXU.roa (hash: uPdvifi2Mse38dnV2nTzHEKQ8cRZMoEcUuAqy+pbA4Y=) 14: mIeBpS2n4kCr0BZmoszWNjvAQck.roa (hash: sgSJy89RWLefTDlUw+TWGE3cezazErlzXNR2nAjs6uU=) 15: pM6WQKPvL-oZN0rY-Z9CPXqnx2s.crl (hash: PgmkA2mGGaXL03W0ogz3BcPm/B08OTcaEzmbjlhqumI=) 16: sVCQlL9zy4ci5k4im_qh1UgQSao.roa (hash: tXiv/i4AXQDYnVQqrjLO82vwz0zcYS5lORUFrc1ytqg=) Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/4b/f8a5d1-260a-46a4-a8e4-283fe54a6f2f/1/pM6WQKPvL-oZN0rY-Z9CPXqnx2s.crl rsync://rpki.ripe.net/repository/DEFAULT/4b/f8a5d1-260a-46a4-a8e4-283fe54a6f2f/1/pM6WQKPvL-oZN0rY-Z9CPXqnx2s.mft rsync://rpki.ripe.net/repository/DEFAULT/pM6WQKPvL-oZN0rY-Z9CPXqnx2s.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Tue 22 Jul 2025 14:00:47 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:98:2d:49:7c:46:a4:63:ed:28:e7:e6:05:64:fe:90:29:74 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=a4ce9640a3ef2fea19374ad8f99f423d7aa7c76b Validity Not Before: Jul 21 14:00:47 2025 GMT Not After : Jul 22 14:00:47 2025 GMT Subject: CN=7ea1f62228b88c87ff6d39eab20512af0fb40a17 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:a4:f6:99:6f:b7:04:10:64:12:a7:ee:80:20:94: ba:62:7f:14:f2:39:0d:ea:58:e2:30:c5:d5:60:99: cc:33:d6:52:81:c1:c5:d1:11:0f:36:6b:e2:70:15: d3:05:c6:17:2f:e7:87:e8:d3:80:49:7e:9f:07:e1: 7c:05:5d:c9:96:ae:d0:c7:54:42:05:ce:ff:92:e3: cc:f2:6c:20:b8:98:e9:01:04:34:47:f4:a6:a7:31: d2:59:67:dc:9f:6e:df:f5:97:3d:dc:7f:fb:a4:08: d9:6f:ea:cf:bc:63:d6:42:5d:2b:b1:42:34:75:f4: 56:c3:d0:63:fc:0c:3c:cd:b4:86:42:40:fc:2e:54: b8:65:d9:c5:6b:91:0b:31:b8:97:28:10:05:c4:b6: 29:2a:3e:58:a7:ab:5e:78:e9:5e:46:5c:ce:ba:66: d1:74:37:a6:da:03:36:75:5e:a8:d6:e3:01:45:3a: 2a:6c:6f:37:af:91:61:28:27:74:f2:42:c1:21:6c: 4e:8e:6e:c7:24:34:c1:ee:0e:66:ae:5b:5f:0e:02: dd:2e:6c:cd:1c:ed:f3:fa:9f:91:3c:98:6a:9d:34: 13:07:d9:f7:dc:00:29:28:a1:0b:40:a7:dd:55:5c: a7:db:65:60:8d:73:e6:e7:a0:ba:40:a1:99:68:5d: 9a:d3 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 7E:A1:F6:22:28:B8:8C:87:FF:6D:39:EA:B2:05:12:AF:0F:B4:0A:17 X509v3 Authority Key Identifier: keyid:A4:CE:96:40:A3:EF:2F:EA:19:37:4A:D8:F9:9F:42:3D:7A:A7:C7:6B X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/pM6WQKPvL-oZN0rY-Z9CPXqnx2s.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/4b/f8a5d1-260a-46a4-a8e4-283fe54a6f2f/1/pM6WQKPvL-oZN0rY-Z9CPXqnx2s.mft X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/4b/f8a5d1-260a-46a4-a8e4-283fe54a6f2f/1/pM6WQKPvL-oZN0rY-Z9CPXqnx2s.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 43:62:72:e0:d3:c1:d5:d2:a1:21:09:27:fb:07:9e:24:ec:81: 92:68:09:84:2c:f1:b4:7d:04:07:0f:c9:37:56:51:cd:a0:f6: cb:04:cb:1f:b6:91:d3:98:76:2d:f3:d5:39:9a:2f:89:f6:ec: 5b:65:ff:42:4e:2f:87:b4:5d:d6:c2:e9:f9:f0:3f:08:9d:8b: 77:e4:00:7d:37:83:30:b6:23:94:f2:e0:f8:fa:cf:f4:66:77: 2b:78:d7:88:73:46:c3:3b:73:32:03:77:d8:7b:d9:f1:83:35: 20:25:69:29:e1:d1:ca:d5:68:54:71:00:6b:dc:38:61:67:38: d8:21:d6:b4:82:1b:1b:1a:b5:0e:85:7f:74:d3:a1:e4:b5:90: a1:5c:47:84:fd:59:42:fa:2e:68:4e:2a:05:37:6c:e6:28:8f: 02:ec:7b:22:51:f7:a4:cf:27:94:51:f7:17:8b:ea:87:41:b4: 56:64:a1:c4:8c:e7:cc:b2:49:f9:92:4a:3d:f3:8b:4c:08:19: 87:41:7d:1c:f8:ed:f5:0b:31:d9:b4:a1:3f:3f:da:e3:83:40: 85:af:c5:d3:90:6f:3b:d0:90:59:9a:98:7b:2f:b0:18:b3:eb: 39:bb:f5:b7:5c:a2:69:22:ee:71:67:ee:6a:eb:a7:bd:3c:3e: 70:bc:5c:c1 -----BEGIN CERTIFICATE----- MIIFFjCCA/6gAwIBAgISAZgtSXxGpGPtKOfmBWT+kCl0MA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKGE0Y2U5NjQwYTNlZjJmZWExOTM3NGFkOGY5OWY0MjNkN2Fh N2M3NmIwHhcNMjUwNzIxMTQwMDQ3WhcNMjUwNzIyMTQwMDQ3WjAzMTEwLwYDVQQD Eyg3ZWExZjYyMjI4Yjg4Yzg3ZmY2ZDM5ZWFiMjA1MTJhZjBmYjQwYTE3MIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEApPaZb7cEEGQSp+6AIJS6Yn8U8jkN 6ljiMMXVYJnMM9ZSgcHF0REPNmvicBXTBcYXL+eH6NOASX6fB+F8BV3Jlq7Qx1RC Bc7/kuPM8mwguJjpAQQ0R/SmpzHSWWfcn27f9Zc93H/7pAjZb+rPvGPWQl0rsUI0 dfRWw9Bj/Aw8zbSGQkD8LlS4ZdnFa5ELMbiXKBAFxLYpKj5Yp6teeOleRlzOumbR dDem2gM2dV6o1uMBRToqbG83r5FhKCd08kLBIWxOjm7HJDTB7g5mrltfDgLdLmzN HO3z+p+RPJhqnTQTB9n33AApKKELQKfdVVyn22VgjXPm56C6QKGZaF2a0wIDAQAB o4ICIjCCAh4wHQYDVR0OBBYEFH6h9iIouIyH/2056rIFEq8PtAoXMB8GA1UdIwQY MBaAFKTOlkCj7y/qGTdK2PmfQj16p8drMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvcE02V1FLUHZMLW9aTjByWS1aOUNQWHFueDJzLmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC80Yi9mOGE1ZDEtMjYwYS00NmE0LWE4ZTQt MjgzZmU1NGE2ZjJmLzEvcE02V1FLUHZMLW9aTjByWS1aOUNQWHFueDJzLm1mdDCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC80Yi9mOGE1ZDEtMjYwYS00NmE0LWE4ZTQtMjgzZmU1NGE2ZjJm LzEvcE02V1FLUHZMLW9aTjByWS1aOUNQWHFueDJzLmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAQ2Jy4NPB 1dKhIQkn+weeJOyBkmgJhCzxtH0EBw/JN1ZRzaD2ywTLH7aR05h2LfPVOZovifbs W2X/Qk4vh7Rd1sLp+fA/CJ2Ld+QAfTeDMLYjlPLg+PrP9GZ3K3jXiHNGwztzMgN3 2HvZ8YM1ICVpKeHRytVoVHEAa9w4YWc42CHWtIIbGxq1DoV/dNOh5LWQoVxHhP1Z QvouaE4qBTds5iiPAux7IlH3pM8nlFH3F4vqh0G0VmShxIznzLJJ+ZJKPfOLTAgZ h0F9HPjt9Qsx2bShPz/a44NAha/F05BvO9CQWZqYey+wGLPrObv1t1yiaSLucWfu auunvTw+cLxcwQ== -----END CERTIFICATE-----Generated at Mon Jul 21 23:16:25 2025 by rpki-client