$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/4f/9437a2-07e6-4e6a-aa3f-965d6d603bfa/1/1-CVUqFakIrBhrmTFd2MPkdQIzUo.mft File: 1-CVUqFakIrBhrmTFd2MPkdQIzUo.mft (raw, json) Hash identifier: MzG3PmYJW/Kp7edhPfatluktGFBCi9RVZN3o630oz1U= Subject key identifier: BF:CA:31:F1:C9:44:E1:39:D2:15:AC:BD:EF:8B:C3:42:09:E0:28:26 Authority key identifier: F8:25:54:A8:56:A4:22:B0:61:AE:64:C5:77:63:0F:91:D4:08:CD:4A Certificate issuer: /CN=f82554a856a422b061ae64c577630f91d408cd4a Certificate serial: 019846644ED9240F46FFA267BF3F69FB6AFE Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/1-CVUqFakIrBhrmTFd2MPkdQIzUo.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/4f/9437a2-07e6-4e6a-aa3f-965d6d603bfa/1/1-CVUqFakIrBhrmTFd2MPkdQIzUo.mft Manifest number: 1604 Signing time: Sat 26 Jul 2025 11:00:35 +0000 Manifest this update: Sat 26 Jul 2025 11:00:35 +0000 Manifest next update: Sun 27 Jul 2025 11:00:35 +0000 Files and hashes: 1: 1-CVUqFakIrBhrmTFd2MPkdQIzUo.crl (hash: gdEH86XoeI6lYHVr2+Ki+0s4faFo67YgZ4hHis5bEZg=) 2: 8yyknMa8Qa7eji2_-25NgjHMwAs.roa (hash: 6EA1L4yNjiFkAAM6t2iZAA7ze8SV3lMCUhKNPg3vBUQ=) 3: 9QjCjG8fGXKK3KT9GGHW6MAVJzE.roa (hash: fSpz8n2jWyy0I2DDmxohRpaljlrP9nL5ZtLGzLKYuXU=) 4: H7En3yY1mH2yRYS167HpwA6AL5Q.roa (hash: FPJfC/52NavOyoGt4vZ9gio4MoEgpYKiZrTtURDieXE=) 5: K4UoliAJDnPT2oq72AyXanTYwdo.roa (hash: +5dNWwnlyTnn33FOhd8BsjDiWGBw/K7XK9sbIa7ROKQ=) 6: WjTYhnjd8JZNKcEGGyvScBW7ujg.roa (hash: xm9/rrII6hlVm8eUope1QTZ7F33LVLrGkQUEXzf0iIk=) 7: aWWA3-Hs7ng_GCTHIDmwQ5Rjbdg.roa (hash: isC8RltnKP3pjrz7ZvAls/aB0WZTll6Skvt9xKP3UkI=) 8: fPjaiW_RQVaw1K0jco_QmLpGo5s.roa (hash: agQGyFSnSoUI1Vx0MTRN/i+hHcE0hyBre8ShGUX7keA=) 9: sERIvqHcZj2yU32m6o5QSyQReME.roa (hash: cfxbkVfwNX0hfImDTJjGC48Jbi/ZuYY11AKoePEqH8k=) 10: zTLxL4slk5kZQfWpH_PY-TD7nNM.roa (hash: tzDHOIgeKhCjAOTBNpSwMn6WduYNfsmvzrDJbeHe5/Y=) Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/4f/9437a2-07e6-4e6a-aa3f-965d6d603bfa/1/1-CVUqFakIrBhrmTFd2MPkdQIzUo.crl rsync://rpki.ripe.net/repository/DEFAULT/4f/9437a2-07e6-4e6a-aa3f-965d6d603bfa/1/1-CVUqFakIrBhrmTFd2MPkdQIzUo.mft rsync://rpki.ripe.net/repository/DEFAULT/1-CVUqFakIrBhrmTFd2MPkdQIzUo.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Sun 27 Jul 2025 06:00:05 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:98:46:64:4e:d9:24:0f:46:ff:a2:67:bf:3f:69:fb:6a:fe Signature Algorithm: sha256WithRSAEncryption Issuer: CN=f82554a856a422b061ae64c577630f91d408cd4a Validity Not Before: Jul 26 11:00:35 2025 GMT Not After : Jul 27 11:00:35 2025 GMT Subject: CN=bfca31f1c944e139d215acbdef8bc34209e02826 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:ad:dd:5b:51:63:54:3c:18:d4:f1:2b:84:1d:c1: 51:a0:e0:e7:6c:fc:a2:1c:7a:4a:4d:be:bd:c9:9a: 81:04:1a:30:29:f2:42:7f:9e:e9:35:09:e3:15:89: 39:79:c1:fb:65:12:a0:95:8e:38:d5:01:f8:23:f7: 17:eb:84:1f:58:d1:84:8c:b0:16:53:ed:f7:15:78: ed:8b:e5:6b:3c:7b:43:8c:6b:68:6f:95:41:a9:b7: 27:bf:d4:da:ae:2e:0e:7b:1b:52:8b:ff:9a:77:d9: 3b:80:cd:1f:b0:8f:b9:7d:07:58:98:8a:71:99:7b: e3:70:85:a1:11:86:55:fb:87:4c:6e:a4:09:46:e5: 31:8b:30:5a:f2:50:e9:03:49:04:f1:73:bf:ec:98: 22:d4:2a:d9:a1:f3:12:13:60:4b:7d:91:77:8c:c7: 74:52:2f:50:97:bc:10:c0:20:5b:67:51:66:58:ca: fb:8c:49:de:bd:a3:ba:82:c3:b5:c7:e0:58:ca:16: 04:56:71:ea:db:19:90:e4:b4:6d:67:2a:03:2d:49: 4b:cc:44:92:ac:96:1b:d5:d4:a1:9f:2d:41:49:d6: 39:31:19:a6:67:0d:7d:75:38:fb:7e:cc:61:7a:ae: d3:20:fb:ec:18:ae:88:a2:9d:c7:95:a9:ca:b3:46: a2:bf Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: BF:CA:31:F1:C9:44:E1:39:D2:15:AC:BD:EF:8B:C3:42:09:E0:28:26 X509v3 Authority Key Identifier: keyid:F8:25:54:A8:56:A4:22:B0:61:AE:64:C5:77:63:0F:91:D4:08:CD:4A X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/1-CVUqFakIrBhrmTFd2MPkdQIzUo.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/4f/9437a2-07e6-4e6a-aa3f-965d6d603bfa/1/1-CVUqFakIrBhrmTFd2MPkdQIzUo.mft X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/4f/9437a2-07e6-4e6a-aa3f-965d6d603bfa/1/1-CVUqFakIrBhrmTFd2MPkdQIzUo.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 16:fc:56:d8:f1:57:96:59:ff:36:79:f2:e4:59:d0:10:14:63: 81:cb:e8:2a:d1:69:12:0c:51:c1:f9:b9:56:93:f1:bb:89:a0: 97:b1:b6:6f:f8:67:e3:e6:a4:1d:85:7d:29:23:91:91:34:d5: 6c:c7:72:ed:87:a6:e4:d1:b9:9c:05:ee:a8:2b:bf:6d:71:93: 89:bb:9d:f3:f1:1a:1e:5f:e1:8c:a0:14:c6:22:42:01:ba:43: 12:0a:91:fe:f2:6b:cb:3c:d6:c2:da:ba:83:ef:e7:51:23:fc: 56:02:b5:64:2e:51:ef:84:d8:fc:51:15:f0:0b:91:ae:db:d9: b3:50:bd:36:81:62:0b:3f:9c:7f:94:57:4c:f6:e5:34:2d:d6: 7a:c3:58:70:c8:26:59:cf:e1:36:e1:95:7e:d9:7f:a5:05:11: e0:27:09:64:fd:6d:cc:0e:1f:ac:d8:f7:9e:41:b6:0e:87:94: a9:c7:d9:e3:91:3a:31:07:41:4f:61:5c:8a:cd:b9:17:b4:b9: c3:f3:a4:47:c9:cc:2b:c1:2a:56:e2:c4:44:03:0d:cd:ce:77: 4d:ac:6f:f1:8c:51:b2:43:d8:f3:ea:ed:76:84:3e:44:41:a0: 9a:96:90:d1:fe:57:ba:7f:a9:6c:a2:5a:60:b1:af:78:9f:37: 2f:1d:9b:00 -----BEGIN CERTIFICATE----- MIIFGTCCBAGgAwIBAgISAZhGZE7ZJA9G/6Jnvz9p+2r+MA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKGY4MjU1NGE4NTZhNDIyYjA2MWFlNjRjNTc3NjMwZjkxZDQw OGNkNGEwHhcNMjUwNzI2MTEwMDM1WhcNMjUwNzI3MTEwMDM1WjAzMTEwLwYDVQQD EyhiZmNhMzFmMWM5NDRlMTM5ZDIxNWFjYmRlZjhiYzM0MjA5ZTAyODI2MIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEArd1bUWNUPBjU8SuEHcFRoODnbPyi HHpKTb69yZqBBBowKfJCf57pNQnjFYk5ecH7ZRKglY441QH4I/cX64QfWNGEjLAW U+33FXjti+VrPHtDjGtob5VBqbcnv9Tari4OextSi/+ad9k7gM0fsI+5fQdYmIpx mXvjcIWhEYZV+4dMbqQJRuUxizBa8lDpA0kE8XO/7Jgi1CrZofMSE2BLfZF3jMd0 Ui9Ql7wQwCBbZ1FmWMr7jEnevaO6gsO1x+BYyhYEVnHq2xmQ5LRtZyoDLUlLzESS rJYb1dShny1BSdY5MRmmZw19dTj7fsxheq7TIPvsGK6Iop3HlanKs0aivwIDAQAB o4ICJTCCAiEwHQYDVR0OBBYEFL/KMfHJROE50hWsve+Lw0IJ4CgmMB8GA1UdIwQY MBaAFPglVKhWpCKwYa5kxXdjD5HUCM1KMA4GA1UdDwEB/wQEAwIHgDBlBggrBgEF BQcBAQRZMFcwVQYIKwYBBQUHMAKGSXJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvMS1DVlVxRmFrSXJCaHJtVEZkMk1Qa2RRSXpVby5jZXIw gY4GCCsGAQUFBwELBIGBMH8wfQYIKwYBBQUHMAuGcXJzeW5jOi8vcnBraS5yaXBl Lm5ldC9yZXBvc2l0b3J5L0RFRkFVTFQvNGYvOTQzN2EyLTA3ZTYtNGU2YS1hYTNm LTk2NWQ2ZDYwM2JmYS8xLzEtQ1ZVcUZha0lyQmhybVRGZDJNUGtkUUl6VW8ubWZ0 MIGCBgNVHR8EezB5MHegdaBzhnFyc3luYzovL3Jwa2kucmlwZS5uZXQvcmVwb3Np dG9yeS9ERUZBVUxULzRmLzk0MzdhMi0wN2U2LTRlNmEtYWEzZi05NjVkNmQ2MDNi ZmEvMS8xLUNWVXFGYWtJckJocm1URmQyTVBrZFFJelVvLmNybDAYBgNVHSABAf8E DjAMMAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgAC BQAwFQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAFvxW 2PFXlln/Nnny5FnQEBRjgcvoKtFpEgxRwfm5VpPxu4mgl7G2b/hn4+akHYV9KSOR kTTVbMdy7Yem5NG5nAXuqCu/bXGTibud8/EaHl/hjKAUxiJCAbpDEgqR/vJryzzW wtq6g+/nUSP8VgK1ZC5R74TY/FEV8AuRrtvZs1C9NoFiCz+cf5RXTPblNC3WesNY cMgmWc/hNuGVftl/pQUR4CcJZP1tzA4frNj3nkG2DoeUqcfZ45E6MQdBT2Fcis25 F7S5w/OkR8nMK8EqVuLERAMNzc53Taxv8YxRskPY8+rtdoQ+REGgmpaQ0f5Xun+p bKJaYLGveJ83Lx2bAA== -----END CERTIFICATE-----Generated at Sat Jul 26 16:19:43 2025 by rpki-client