$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/4f/53a947-fd03-4014-9827-c5d8950818ec/1/_0TbrKVtrDGUAfaKUNkX9UJGEa0.mft File: _0TbrKVtrDGUAfaKUNkX9UJGEa0.mft (raw, json) Hash identifier: Lu5p41igALCoEtjPhJmqzy696h0RCAYzzmIE50zskx0= Subject key identifier: 1A:1E:50:C6:43:94:1C:59:00:67:53:56:65:30:D6:55:4E:B1:B9:E1 Authority key identifier: FF:44:DB:AC:A5:6D:AC:31:94:01:F6:8A:50:D9:17:F5:42:46:11:AD Certificate issuer: /CN=ff44dbaca56dac319401f68a50d917f5424611ad Certificate serial: 0198315D284146C5211D4C31E237A805FEE2 Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/_0TbrKVtrDGUAfaKUNkX9UJGEa0.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/4f/53a947-fd03-4014-9827-c5d8950818ec/1/_0TbrKVtrDGUAfaKUNkX9UJGEa0.mft Manifest number: 0E06 Signing time: Tue 22 Jul 2025 09:00:45 +0000 Manifest this update: Tue 22 Jul 2025 09:00:45 +0000 Manifest next update: Wed 23 Jul 2025 09:00:45 +0000 Files and hashes: 1: 1-cpyjHU8WHBS-JnYyweRG_JlxsQ.roa (hash: Bc2YUgBN1eHG7yUrAAjgkxLZbgg1NrbTbKbM93kzdXo=) 2: 23cjywgox101LeW5GrrQWi4IHG0.roa (hash: uYyFedbey5ChPUlaasPp5Y63DNZ1EjHPXUKggcmyWcA=) 3: 2nquZxIjKuCQeOgojOXW1X_s_QM.roa (hash: jFRO0lP11v/Hnir4mOKoo6txSwXFruzZ7RBet4hmmmk=) 4: QQQnQcpvGBf2C-BzCpjUlxD_kV0.roa (hash: 3oCmUMut8zjGqT5v8Ibyl5GG5ZNBsCX2Q1FPnCYPFwc=) 5: _0TbrKVtrDGUAfaKUNkX9UJGEa0.crl (hash: vV65H527HKc5FdGL9d4+MYFsELT1jZKzzIjWjVhSYak=) 6: gIx-NvwmPwDjbwzrImEaevKFMi8.roa (hash: qVqkRd3AaQOFICZgsJ5zunJ8w7waJ2c1Sms4AJtjCl4=) 7: qWecP1fjBHk_xiZL6w3FMxqmMFs.roa (hash: H6nLoMO+CEX9wLJPNIjsGgGm6hrsOhinY+8mLTIndRM=) 8: rQGjF7CS3G8ySkkrwz5hQvGaUtk.roa (hash: UmfdL/yMHB7LypaEgd2ulm2mGfbyrt6kIxKgT/oReek=) 9: wvlIJaBXdAerQ4c5dRBxRunJgjQ.roa (hash: JyQWbotgOXPXDAJ2gTdNj+PiW7DZmyYe59ktU38Qs6o=) 10: zwQeVe6KjT7mK7CzDjhb-oUfUeY.roa (hash: RDrcDVJwzADiTPiX9sXWISoKDjj7Zx0CdydUNeF8j6Q=) Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/4f/53a947-fd03-4014-9827-c5d8950818ec/1/_0TbrKVtrDGUAfaKUNkX9UJGEa0.crl rsync://rpki.ripe.net/repository/DEFAULT/4f/53a947-fd03-4014-9827-c5d8950818ec/1/_0TbrKVtrDGUAfaKUNkX9UJGEa0.mft rsync://rpki.ripe.net/repository/DEFAULT/_0TbrKVtrDGUAfaKUNkX9UJGEa0.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Wed 23 Jul 2025 08:00:25 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:98:31:5d:28:41:46:c5:21:1d:4c:31:e2:37:a8:05:fe:e2 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=ff44dbaca56dac319401f68a50d917f5424611ad Validity Not Before: Jul 22 09:00:45 2025 GMT Not After : Jul 23 09:00:45 2025 GMT Subject: CN=1a1e50c643941c59006753566530d6554eb1b9e1 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:b0:84:27:24:8d:cb:e3:c1:65:3f:d2:0c:76:50: 72:2c:dd:8d:2a:67:75:ca:d0:4f:d8:a5:c8:5c:a1: ac:d9:b9:d3:43:30:7c:98:90:6e:19:53:17:78:93: 55:5a:f6:d0:a0:d2:ea:53:4a:fd:59:a1:95:88:80: 7f:e7:c7:73:28:6c:86:f6:56:6c:9c:89:81:a4:e6: 32:4a:0d:39:0a:65:b5:16:cf:ff:e0:90:a3:7e:11: 5d:59:ce:d1:7f:9c:f5:03:f2:16:c9:94:05:6c:c8: ff:ee:83:9f:8f:54:e1:79:d3:cb:51:d8:89:77:f4: 66:d9:1b:73:a2:50:1e:0e:4b:2f:bb:fb:17:b1:37: cc:3d:a6:7f:99:3d:fb:5d:c1:3f:d2:c6:9c:3e:4d: 56:95:6f:d0:31:64:36:9c:f3:5b:99:58:8a:31:df: 4b:79:1d:4b:6f:c7:01:00:aa:bb:a3:8e:a6:f8:7e: 5a:14:1a:9a:3c:5a:fa:d3:ff:e0:58:5f:15:67:b6: 3f:29:e1:93:e0:07:c5:71:fc:fc:e0:7f:26:bc:cf: 78:ba:21:70:59:08:b9:1d:bc:ef:e8:04:f7:ea:b3: 29:23:a3:5e:a9:3e:c9:bb:86:95:28:7a:d0:50:db: 41:a2:21:25:91:cf:e6:3c:4d:36:bc:68:e6:9f:6d: f7:45 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 1A:1E:50:C6:43:94:1C:59:00:67:53:56:65:30:D6:55:4E:B1:B9:E1 X509v3 Authority Key Identifier: keyid:FF:44:DB:AC:A5:6D:AC:31:94:01:F6:8A:50:D9:17:F5:42:46:11:AD X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/_0TbrKVtrDGUAfaKUNkX9UJGEa0.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/4f/53a947-fd03-4014-9827-c5d8950818ec/1/_0TbrKVtrDGUAfaKUNkX9UJGEa0.mft X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/4f/53a947-fd03-4014-9827-c5d8950818ec/1/_0TbrKVtrDGUAfaKUNkX9UJGEa0.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 70:69:66:ee:54:69:09:8a:f9:5b:c8:62:ba:dd:59:44:3a:6e: c1:99:d8:58:72:da:eb:76:b3:59:db:f0:86:3d:ae:e7:c4:06: c3:17:fb:3e:f2:49:bd:75:c9:56:b4:d1:23:7f:28:83:45:67: bd:a2:d5:80:6d:8a:41:01:e9:86:e8:1b:c8:00:17:11:58:d6: c2:7c:c2:09:1b:80:4a:a6:31:f8:93:42:c5:12:8c:1c:0a:91: 41:f8:ba:31:ec:78:ee:16:1b:29:58:04:4c:65:dd:9e:d7:42: c6:92:f7:fb:9f:ed:aa:4d:eb:86:b7:34:71:a6:aa:ef:7d:7d: 6c:c4:64:4d:d8:33:f8:af:8f:82:b4:11:58:c2:07:a4:14:ed: c2:55:12:2a:c8:48:7e:7c:aa:d1:3b:3e:22:0e:e4:05:a2:64: 0e:01:ec:58:90:b4:68:42:43:c6:a9:d8:10:91:c5:d7:fa:10: cd:12:b6:b7:55:bf:ab:cf:dd:75:f5:72:2a:75:d3:8d:9c:fa: e0:c2:12:0e:82:c3:78:de:58:5d:ee:ed:e1:6a:f8:ba:d3:39: d5:23:47:cc:ac:6d:18:ef:14:c3:d8:f8:26:b9:61:d8:34:76: 5b:3d:7e:74:15:f2:d5:c9:0e:61:3b:1c:93:0d:a0:1f:f8:e4: 5a:bd:21:7b -----BEGIN CERTIFICATE----- MIIFFjCCA/6gAwIBAgISAZgxXShBRsUhHUwx4jeoBf7iMA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKGZmNDRkYmFjYTU2ZGFjMzE5NDAxZjY4YTUwZDkxN2Y1NDI0 NjExYWQwHhcNMjUwNzIyMDkwMDQ1WhcNMjUwNzIzMDkwMDQ1WjAzMTEwLwYDVQQD EygxYTFlNTBjNjQzOTQxYzU5MDA2NzUzNTY2NTMwZDY1NTRlYjFiOWUxMIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAsIQnJI3L48FlP9IMdlByLN2NKmd1 ytBP2KXIXKGs2bnTQzB8mJBuGVMXeJNVWvbQoNLqU0r9WaGViIB/58dzKGyG9lZs nImBpOYySg05CmW1Fs//4JCjfhFdWc7Rf5z1A/IWyZQFbMj/7oOfj1ThedPLUdiJ d/Rm2RtzolAeDksvu/sXsTfMPaZ/mT37XcE/0sacPk1WlW/QMWQ2nPNbmViKMd9L eR1Lb8cBAKq7o46m+H5aFBqaPFr60//gWF8VZ7Y/KeGT4AfFcfz84H8mvM94uiFw WQi5Hbzv6AT36rMpI6NeqT7Ju4aVKHrQUNtBoiElkc/mPE02vGjmn233RQIDAQAB o4ICIjCCAh4wHQYDVR0OBBYEFBoeUMZDlBxZAGdTVmUw1lVOsbnhMB8GA1UdIwQY MBaAFP9E26ylbawxlAH2ilDZF/VCRhGtMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvXzBUYnJLVnRyREdVQWZhS1VOa1g5VUpHRWEwLmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC80Zi81M2E5NDctZmQwMy00MDE0LTk4Mjct YzVkODk1MDgxOGVjLzEvXzBUYnJLVnRyREdVQWZhS1VOa1g5VUpHRWEwLm1mdDCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC80Zi81M2E5NDctZmQwMy00MDE0LTk4MjctYzVkODk1MDgxOGVj LzEvXzBUYnJLVnRyREdVQWZhS1VOa1g5VUpHRWEwLmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAcGlm7lRp CYr5W8hiut1ZRDpuwZnYWHLa63azWdvwhj2u58QGwxf7PvJJvXXJVrTRI38og0Vn vaLVgG2KQQHphugbyAAXEVjWwnzCCRuASqYx+JNCxRKMHAqRQfi6Mex47hYbKVgE TGXdntdCxpL3+5/tqk3rhrc0caaq7319bMRkTdgz+K+PgrQRWMIHpBTtwlUSKshI fnyq0Ts+Ig7kBaJkDgHsWJC0aEJDxqnYEJHF1/oQzRK2t1W/q8/ddfVyKnXTjZz6 4MISDoLDeN5YXe7t4Wr4utM51SNHzKxtGO8Uw9j4Jrlh2DR2Wz1+dBXy1ckOYTsc kw2gH/jkWr0hew== -----END CERTIFICATE-----Generated at Tue Jul 22 12:29:56 2025 by rpki-client