$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/57/3b51b8-10c6-438b-a120-15f13e3f7d85/1/2Cy0PKPAxXgWzuNgR40M-IIgf9I.mft File: 2Cy0PKPAxXgWzuNgR40M-IIgf9I.mft (raw, json) Hash identifier: QYSAmMYMCth7FP41lBP4sEOGlx3ofjsrChVzrECRfGw= Subject key identifier: F3:68:A7:69:76:0E:11:12:2B:9E:69:1D:0E:77:41:57:D3:29:45:83 Authority key identifier: D8:2C:B4:3C:A3:C0:C5:78:16:CE:E3:60:47:8D:0C:F8:82:20:7F:D2 Certificate issuer: /CN=d82cb43ca3c0c57816cee360478d0cf882207fd2 Certificate serial: 019844AD0096006B207BF039E00F6979206E Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/2Cy0PKPAxXgWzuNgR40M-IIgf9I.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/57/3b51b8-10c6-438b-a120-15f13e3f7d85/1/2Cy0PKPAxXgWzuNgR40M-IIgf9I.mft Manifest number: 04B0 Signing time: Sat 26 Jul 2025 03:00:45 +0000 Manifest this update: Sat 26 Jul 2025 03:00:45 +0000 Manifest next update: Sun 27 Jul 2025 03:00:45 +0000 Files and hashes: 1: 2Cy0PKPAxXgWzuNgR40M-IIgf9I.crl (hash: cKROAV1hC+UAY/lyKzua9KabjzCvKI8MJyCSJfFw8h8=) 2: 3NKK36OzbyCVvAW6QnBXCk0vC-E.roa (hash: gHjjORGkqgV1v9V5gvG+Gu8C2uJp9VohURGk9hhqXCY=) 3: DWnysDNu_v7yNNJ1aIjDqps-5LM.roa (hash: JPD53SzaSyMUMEmsWnAbUrfvGclz72WlfPM6q3RIsCk=) 4: RaE5smqHwTpdBVtd89_5CUvQKsE.roa (hash: UtehD4VO0l8o+LKAy2Z/geys1UM7QHPafm/iIQaT0/U=) 5: SOWcqaYhZ7YX4OOHhJe96In9itw.roa (hash: UaSEArJ4Ty/99oB9k6ZnmXrGKJLGr0L+yE1xo+K6dEg=) 6: f7lR2qdNzNhMHZctwhySnx52rh8.roa (hash: uc/3dtcmzwA7XSJMfP+6pPiS8XT6tGwBC3iJr2Zlmhg=) 7: kcbMP36K9zR3OAqVvtstfD6Qc1E.roa (hash: kKzo7D93m1wQVJ52FPItkIqrFxN6fMh/dyqt/5KaXWw=) 8: ksCUkPPXGRQEiQCKOl3Wp67HpYk.roa (hash: Fa0gD5gnN233i5uopk4/0YW9tKdVwYrJaJzPk4e1vT4=) 9: p8WEIwXo7Clnw_lkUVuyGNIeOvM.roa (hash: Ur1mz6OTaNWSYai5Ah9bPYej/Ck8pv/XZW+9ZEpR3q8=) 10: qJyacpBlbWQwXSv5l4Lxk3gU7sA.roa (hash: A2lDMN5zFwbdpcFJxDl5a8uW8CFGyTpmaP19LpWfeHE=) 11: r9xTyNget5zcXlE9TLs7M3SNT04.roa (hash: AESrTW2Rp0Ova6EIN8mRWsiWri5RUSzYkj7e2h2UwnM=) 12: wBcaC1_PamN7lirmMN3fzCp6jH4.roa (hash: G/3j6WArnTAj7/DCB5dCgU40hqdUmgoP9O96RyuFd1M=) 13: wWRwvyrn-LAOgtkAhCo3MlchYWQ.roa (hash: Uba3h/vRuJ26W0MxcGsxkEurmXFyfeD+ONZVIUG7QEM=) 14: xQ1rwm6oO8jHA9kZhQvVDEfMToU.roa (hash: rR/azYUh2GUL8HTdYkb3GDWX8S5vRgxNHhornEovZ9o=) Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/57/3b51b8-10c6-438b-a120-15f13e3f7d85/1/2Cy0PKPAxXgWzuNgR40M-IIgf9I.crl rsync://rpki.ripe.net/repository/DEFAULT/57/3b51b8-10c6-438b-a120-15f13e3f7d85/1/2Cy0PKPAxXgWzuNgR40M-IIgf9I.mft rsync://rpki.ripe.net/repository/DEFAULT/2Cy0PKPAxXgWzuNgR40M-IIgf9I.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Sat 26 Jul 2025 21:50:05 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:98:44:ad:00:96:00:6b:20:7b:f0:39:e0:0f:69:79:20:6e Signature Algorithm: sha256WithRSAEncryption Issuer: CN=d82cb43ca3c0c57816cee360478d0cf882207fd2 Validity Not Before: Jul 26 03:00:45 2025 GMT Not After : Jul 27 03:00:45 2025 GMT Subject: CN=f368a769760e11122b9e691d0e774157d3294583 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:af:b6:a7:12:d5:65:c0:17:ce:ef:3e:07:99:6d: ad:19:55:62:99:d6:11:d4:7b:10:38:5f:91:45:62: 7b:ba:83:90:3a:53:5d:56:52:ed:e4:12:97:a0:da: 45:a7:43:95:a6:6d:b7:d7:77:47:8f:4f:58:c0:2c: 78:e0:c7:9a:8e:39:ba:c9:b0:ba:f7:9a:ef:f8:1c: 71:52:cb:20:3e:52:a9:bf:0f:f5:7b:57:12:e6:ec: 4e:13:69:70:5d:94:ca:e0:d3:ac:09:f9:57:59:13: 35:6b:23:c9:f1:37:9d:dc:7a:c6:bf:35:7f:24:6d: 42:b5:c0:13:f9:5b:c8:64:4e:08:c4:7c:6d:3a:46: 14:c7:fa:f8:6d:c1:7b:77:7b:7a:53:40:15:de:df: cc:31:7b:34:cb:bc:33:2b:8b:44:29:4f:ae:fd:8c: 9c:48:8c:0e:63:53:58:b3:fe:6b:6d:33:99:b6:ae: 83:82:a4:00:c0:43:86:7e:9d:22:21:d4:7d:5e:ec: 32:49:9d:3b:3f:97:3c:df:b8:48:8a:e3:43:df:45: 1d:74:2a:99:f8:89:af:25:a5:f7:fb:7b:7a:97:35: 49:f7:c9:53:8f:ea:3f:9e:15:f8:ff:f7:1e:2a:78: 63:91:14:6a:f1:d1:91:90:ba:f4:c0:c7:94:c8:d1: 61:db Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: F3:68:A7:69:76:0E:11:12:2B:9E:69:1D:0E:77:41:57:D3:29:45:83 X509v3 Authority Key Identifier: keyid:D8:2C:B4:3C:A3:C0:C5:78:16:CE:E3:60:47:8D:0C:F8:82:20:7F:D2 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/2Cy0PKPAxXgWzuNgR40M-IIgf9I.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/57/3b51b8-10c6-438b-a120-15f13e3f7d85/1/2Cy0PKPAxXgWzuNgR40M-IIgf9I.mft X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/57/3b51b8-10c6-438b-a120-15f13e3f7d85/1/2Cy0PKPAxXgWzuNgR40M-IIgf9I.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 65:a5:48:a1:69:b4:d0:af:ca:d8:c1:4d:32:31:13:00:95:1a: ab:ac:97:9c:c0:59:a8:9c:4b:12:18:f6:3e:a6:88:f2:74:94: 5e:1a:c9:04:40:c4:68:a2:c9:07:a8:66:09:fc:3b:50:54:5c: 58:e6:bc:29:8b:c1:bb:93:45:c1:53:0f:70:4d:b9:1b:5e:75: 53:6d:7c:ed:f9:29:70:af:53:28:b4:46:a6:05:42:4b:b7:e0: dc:78:65:42:99:36:28:9f:da:dd:d2:ff:79:c6:81:5f:c1:72: 42:7f:56:f7:b3:b3:87:48:a9:e7:9b:4a:cf:bd:fe:cd:c2:38: ef:60:22:e0:21:04:23:32:e6:4a:84:03:98:16:c8:cc:df:fd: 65:5a:50:0b:ed:94:c5:10:d7:f5:56:0c:1f:5b:b1:a4:8d:e7: ba:dc:9c:c0:8f:80:f7:c7:77:35:91:07:6a:82:40:9e:5d:50: 45:6a:9d:49:af:5b:da:66:43:eb:31:8e:bb:cd:71:1c:f4:22: 2a:22:18:16:0a:09:1e:d0:bb:be:b4:71:c8:29:8c:7b:2a:cc: 25:42:a2:4d:23:a3:02:be:76:60:c5:f2:36:26:e5:f1:20:57: 82:25:86:47:df:18:b2:9b:b5:c3:47:57:5d:0e:7a:b1:7f:af: 89:8f:d2:ff -----BEGIN CERTIFICATE----- MIIFFjCCA/6gAwIBAgISAZhErQCWAGsge/A54A9peSBuMA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKGQ4MmNiNDNjYTNjMGM1NzgxNmNlZTM2MDQ3OGQwY2Y4ODIy MDdmZDIwHhcNMjUwNzI2MDMwMDQ1WhcNMjUwNzI3MDMwMDQ1WjAzMTEwLwYDVQQD EyhmMzY4YTc2OTc2MGUxMTEyMmI5ZTY5MWQwZTc3NDE1N2QzMjk0NTgzMIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAr7anEtVlwBfO7z4HmW2tGVVimdYR 1HsQOF+RRWJ7uoOQOlNdVlLt5BKXoNpFp0OVpm2313dHj09YwCx44Meajjm6ybC6 95rv+BxxUssgPlKpvw/1e1cS5uxOE2lwXZTK4NOsCflXWRM1ayPJ8Ted3HrGvzV/ JG1CtcAT+VvIZE4IxHxtOkYUx/r4bcF7d3t6U0AV3t/MMXs0y7wzK4tEKU+u/Yyc SIwOY1NYs/5rbTOZtq6DgqQAwEOGfp0iIdR9XuwySZ07P5c837hIiuND30UddCqZ +ImvJaX3+3t6lzVJ98lTj+o/nhX4//ceKnhjkRRq8dGRkLr0wMeUyNFh2wIDAQAB o4ICIjCCAh4wHQYDVR0OBBYEFPNop2l2DhESK55pHQ53QVfTKUWDMB8GA1UdIwQY MBaAFNgstDyjwMV4Fs7jYEeNDPiCIH/SMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvMkN5MFBLUEF4WGdXenVOZ1I0ME0tSUlnZjlJLmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC81Ny8zYjUxYjgtMTBjNi00MzhiLWExMjAt MTVmMTNlM2Y3ZDg1LzEvMkN5MFBLUEF4WGdXenVOZ1I0ME0tSUlnZjlJLm1mdDCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC81Ny8zYjUxYjgtMTBjNi00MzhiLWExMjAtMTVmMTNlM2Y3ZDg1 LzEvMkN5MFBLUEF4WGdXenVOZ1I0ME0tSUlnZjlJLmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAZaVIoWm0 0K/K2MFNMjETAJUaq6yXnMBZqJxLEhj2PqaI8nSUXhrJBEDEaKLJB6hmCfw7UFRc WOa8KYvBu5NFwVMPcE25G151U2187fkpcK9TKLRGpgVCS7fg3HhlQpk2KJ/a3dL/ ecaBX8FyQn9W97Ozh0ip55tKz73+zcI472Ai4CEEIzLmSoQDmBbIzN/9ZVpQC+2U xRDX9VYMH1uxpI3nutycwI+A98d3NZEHaoJAnl1QRWqdSa9b2mZD6zGOu81xHPQi KiIYFgoJHtC7vrRxyCmMeyrMJUKiTSOjAr52YMXyNibl8SBXgiWGR98Yspu1w0dX XQ56sX+viY/S/w== -----END CERTIFICATE-----Generated at Sat Jul 26 06:35:24 2025 by rpki-client