$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/5a/6e79b8-2b8f-4ecc-9a6e-70e898bb38dd/1/4UrGEWFN0WXZRVcpbtftRsj8Al8.mft File: 4UrGEWFN0WXZRVcpbtftRsj8Al8.mft (raw, json) Hash identifier: z1bmeWR/EliZH/3utwC3aSUEe6CA1g2VhTVj5qL91ZM= Subject key identifier: E2:3A:B3:CE:2C:84:38:19:8E:F4:6A:63:32:ED:A9:74:F7:9D:A6:6C Authority key identifier: E1:4A:C6:11:61:4D:D1:65:D9:45:57:29:6E:D7:ED:46:C8:FC:02:5F Certificate issuer: /CN=e14ac611614dd165d94557296ed7ed46c8fc025f Certificate serial: 01982ECA27BC899E4D87BA7676AF5BF37F47 Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/4UrGEWFN0WXZRVcpbtftRsj8Al8.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/5a/6e79b8-2b8f-4ecc-9a6e-70e898bb38dd/1/4UrGEWFN0WXZRVcpbtftRsj8Al8.mft Manifest number: 1620 Signing time: Mon 21 Jul 2025 21:00:57 +0000 Manifest this update: Mon 21 Jul 2025 21:00:57 +0000 Manifest next update: Tue 22 Jul 2025 21:00:57 +0000 Files and hashes: 1: 1-fKXBjqiTeM90rh_YcnHRZImMf4.roa (hash: XviyK9gZCSyNGe87uM1BJ71gLbA2w08qEYd7JArw4Hs=) 2: 21b6ntDP_41WHw4JgmJy5QMFjgw.roa (hash: OyGhDdjF1Bm2rSEG2L631phdq3gbyPG0iQYpMEVeFPo=) 3: 4UrGEWFN0WXZRVcpbtftRsj8Al8.crl (hash: oKRHgmpz1ZUJMKA4QYf0mrC7maKspnu90XGbU3rqkBw=) 4: 6bKmElTtCrApAY9rRgCE9VG2_VI.roa (hash: jkL7mJyzNc2SlG01Dl3hctC0mLi0oOg8Cg2cItdFmp8=) 5: 7p384sXqxwddixUy_mYYBxF3awU.roa (hash: shaUQH6DkAjCcH24QCvbbVnJZikn1zAyihmMsgzPJcI=) 6: EswWK13u7UJf1Xm-aJ2Imfit29g.roa (hash: /9v79+ATF8QEQ4eYOKWEhH/1P4aQ0PCUgp7hFThavBs=) 7: Exr4OKSNhnm-FznHB8jgpNbJZxQ.roa (hash: 1XCrVW6+X9DVjbzilln6lF+f4s4n32v5jZAfIBU7Z40=) 8: G-l8_nIjGXR2g3ie6C0b-DsumJM.roa (hash: qSX4dXaWMvoaO0z2I0BRCaHWI2LO9UgLxYp55tHYyDI=) 9: NZS2Ipchg2nhjy9FYCa-tr7edgc.roa (hash: J91+10sEZiq3a/L3jz4R1QTQGfsCXE1VL5KiBPRPpK8=) 10: Q88Qv2c-OY8pD9XQlm6AYLzEC9k.roa (hash: F0xmcjBp6hsmjep+VgSkib2PdKQQGRbjWEcgD1QBtbM=) 11: Sc4ZzMyRDR0gvOJ_zNA2g4Vxr68.roa (hash: gYB3OVnzjXyPr9Qm/lycd3gdpJQ/+Cl0X5zNJIEQ9rQ=) 12: Uoyhjzu1CnHo8tl7nk_ZhKwl5hU.roa (hash: 48l45O6og6BZyLVhyyu0j9BEA4j1BgnxIO+JWZUTc30=) 13: WXqBRwyxEDgQK5OlFrSMIaFpyVU.roa (hash: IpP8TaM5Wwj7+VayyaCIeA2tv6VLqBIorB1uda3TPMs=) 14: XSbgubujJJ9FZpTPfifgq3AkiU8.roa (hash: QttXfkZolFdSxkPkwsYt6vSDl8DXa766XeZMDQS4Mtw=) 15: clZIrkLG6qMnhbwEIW_pAKHru3U.roa (hash: h9NEDzPBspMO8P2mwx1nUeUnaVh8FCZbKTMitP3Kq70=) 16: dgAUOvzxPFSZzQFCZsXq5wSmuQ4.roa (hash: onCp8InwxVqnOmHcxw1M4XVSgwg1eg4cDcncJgrt2EU=) 17: dp8pvQa4vbHOUBRQq7A88UhSl18.roa (hash: 3Lmekz/0Q0BYHatiLmy2hW/4qKq+J2XWsl9s9mwNmF0=) 18: kQOaGpW4jD-8xGlNbkC3aZmZ2oA.roa (hash: nAfr6WTUGifpmHx8/uBqTFl3/GkMakZU6HzPC4BRKRc=) 19: nqNpqxiiesheCCeqK53xQj3S098.roa (hash: 2DtLb2ES6JjRgW8bn+Qbl4U1xhy1QrUbg+jAVJ9BH7A=) 20: qg9H3rvWINznh7UPHplQbVY73BM.roa (hash: Nx2IWHCLZcluhgcIHU0CznQVLHn9XdJ3ef9jXTt3p68=) 21: uMSALwCFCjHgfXY8GtxojOClYFk.roa (hash: kBut8kDkT5GFXnvjVfuze1IARhQ7/X9J0rwdlLP0FyY=) Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/5a/6e79b8-2b8f-4ecc-9a6e-70e898bb38dd/1/4UrGEWFN0WXZRVcpbtftRsj8Al8.crl rsync://rpki.ripe.net/repository/DEFAULT/5a/6e79b8-2b8f-4ecc-9a6e-70e898bb38dd/1/4UrGEWFN0WXZRVcpbtftRsj8Al8.mft rsync://rpki.ripe.net/repository/DEFAULT/4UrGEWFN0WXZRVcpbtftRsj8Al8.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Tue 22 Jul 2025 14:17:25 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:98:2e:ca:27:bc:89:9e:4d:87:ba:76:76:af:5b:f3:7f:47 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=e14ac611614dd165d94557296ed7ed46c8fc025f Validity Not Before: Jul 21 21:00:57 2025 GMT Not After : Jul 22 21:00:57 2025 GMT Subject: CN=e23ab3ce2c8438198ef46a6332eda974f79da66c Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:a1:68:2a:1b:52:a0:a5:81:11:b7:d7:29:54:65: dd:90:95:94:31:1d:9c:9e:8c:4e:53:89:d6:61:35: 47:88:87:d6:4d:e0:cd:4d:3c:c1:ae:00:05:cc:7c: 59:bf:29:b9:98:f3:b5:ab:c1:48:3b:02:f4:74:47: f6:92:7f:75:f6:27:41:1c:e5:2b:f0:a0:18:8c:f1: a7:17:cf:c9:cc:66:62:43:09:4b:31:4d:ee:dc:94: 5b:ec:c5:c1:70:df:02:f1:94:89:b8:fe:52:7d:ae: 7d:5a:e8:b2:ff:cd:4b:5b:c5:03:55:f7:c4:b0:b5: 6e:08:ff:95:3d:63:82:e5:76:e9:4b:38:f6:82:64: f7:23:e0:01:bb:f5:a1:16:a8:fc:1a:46:cf:9a:ad: 21:8e:b4:bc:68:44:3e:83:5c:fe:23:a6:78:9f:95: 6d:ff:64:b4:d4:2f:97:b9:af:33:81:a3:5a:95:7e: 77:65:02:db:18:fb:59:7a:d1:d0:0f:52:99:f3:61: 03:d8:66:05:07:a9:da:55:87:98:41:72:f0:4e:45: 68:60:5d:81:21:14:7e:94:c3:6b:f5:fc:4c:d4:aa: 76:77:b0:d7:14:32:64:76:70:b3:25:36:35:aa:9a: 69:ec:c3:fc:76:03:86:96:59:cd:be:55:83:d9:89: c9:b9 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: E2:3A:B3:CE:2C:84:38:19:8E:F4:6A:63:32:ED:A9:74:F7:9D:A6:6C X509v3 Authority Key Identifier: keyid:E1:4A:C6:11:61:4D:D1:65:D9:45:57:29:6E:D7:ED:46:C8:FC:02:5F X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/4UrGEWFN0WXZRVcpbtftRsj8Al8.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/5a/6e79b8-2b8f-4ecc-9a6e-70e898bb38dd/1/4UrGEWFN0WXZRVcpbtftRsj8Al8.mft X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/5a/6e79b8-2b8f-4ecc-9a6e-70e898bb38dd/1/4UrGEWFN0WXZRVcpbtftRsj8Al8.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 22:70:4f:fa:26:63:96:e6:3a:ed:fb:b6:36:e0:91:a4:fb:ea: 0e:93:f1:66:d3:09:cf:93:8f:7d:b5:77:44:49:20:c2:0e:ad: a7:12:57:4a:d0:9d:39:bb:1f:35:05:39:5d:3c:1d:6f:cb:f4: 5d:44:2d:f2:23:dd:81:65:06:c7:0b:8b:83:2d:48:c9:12:0f: 15:4b:28:f5:5e:2e:5e:32:cc:66:16:b1:c8:82:57:18:5e:01: 68:ca:9c:e0:a1:a0:dc:e0:cd:d7:8c:24:03:2f:66:b8:fa:c3: 7c:b2:9e:48:26:f9:3f:4f:d3:e2:e2:f0:d9:a4:a3:bc:4e:9e: 36:e6:3f:b1:fd:c3:ed:ff:d9:28:b9:fd:ff:37:e6:db:9f:d2: ee:18:fe:d4:5f:21:76:7f:e0:75:f7:e9:c5:04:2b:3f:02:e7: 24:38:9a:eb:87:25:a8:c5:7a:8d:de:06:9a:28:62:a5:c6:17: 93:db:1f:67:76:1e:7c:4a:05:08:00:bd:77:75:15:f6:fd:e0: ad:a3:9c:7f:94:aa:09:18:11:4f:83:d6:6d:fe:fc:f8:ce:69: f0:9f:5b:81:55:7f:bd:c5:e0:c7:e7:5b:e7:6e:67:8d:66:70: 1a:9c:2e:0e:25:dc:da:ab:95:0b:55:e2:9b:39:78:be:60:45: 0d:ea:e6:37 -----BEGIN CERTIFICATE----- MIIFFjCCA/6gAwIBAgISAZguyie8iZ5Nh7p2dq9b839HMA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKGUxNGFjNjExNjE0ZGQxNjVkOTQ1NTcyOTZlZDdlZDQ2Yzhm YzAyNWYwHhcNMjUwNzIxMjEwMDU3WhcNMjUwNzIyMjEwMDU3WjAzMTEwLwYDVQQD EyhlMjNhYjNjZTJjODQzODE5OGVmNDZhNjMzMmVkYTk3NGY3OWRhNjZjMIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAoWgqG1KgpYERt9cpVGXdkJWUMR2c noxOU4nWYTVHiIfWTeDNTTzBrgAFzHxZvym5mPO1q8FIOwL0dEf2kn919idBHOUr 8KAYjPGnF8/JzGZiQwlLMU3u3JRb7MXBcN8C8ZSJuP5Sfa59Wuiy/81LW8UDVffE sLVuCP+VPWOC5XbpSzj2gmT3I+ABu/WhFqj8GkbPmq0hjrS8aEQ+g1z+I6Z4n5Vt /2S01C+Xua8zgaNalX53ZQLbGPtZetHQD1KZ82ED2GYFB6naVYeYQXLwTkVoYF2B IRR+lMNr9fxM1Kp2d7DXFDJkdnCzJTY1qppp7MP8dgOGllnNvlWD2YnJuQIDAQAB o4ICIjCCAh4wHQYDVR0OBBYEFOI6s84shDgZjvRqYzLtqXT3naZsMB8GA1UdIwQY MBaAFOFKxhFhTdFl2UVXKW7X7UbI/AJfMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvNFVyR0VXRk4wV1haUlZjcGJ0ZnRSc2o4QWw4LmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC81YS82ZTc5YjgtMmI4Zi00ZWNjLTlhNmUt NzBlODk4YmIzOGRkLzEvNFVyR0VXRk4wV1haUlZjcGJ0ZnRSc2o4QWw4Lm1mdDCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC81YS82ZTc5YjgtMmI4Zi00ZWNjLTlhNmUtNzBlODk4YmIzOGRk LzEvNFVyR0VXRk4wV1haUlZjcGJ0ZnRSc2o4QWw4LmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAInBP+iZj luY67fu2NuCRpPvqDpPxZtMJz5OPfbV3REkgwg6tpxJXStCdObsfNQU5XTwdb8v0 XUQt8iPdgWUGxwuLgy1IyRIPFUso9V4uXjLMZhaxyIJXGF4BaMqc4KGg3ODN14wk Ay9muPrDfLKeSCb5P0/T4uLw2aSjvE6eNuY/sf3D7f/ZKLn9/zfm25/S7hj+1F8h dn/gdffpxQQrPwLnJDia64clqMV6jd4GmihipcYXk9sfZ3YefEoFCAC9d3UV9v3g raOcf5SqCRgRT4PWbf78+M5p8J9bgVV/vcXgx+db525njWZwGpwuDiXc2quVC1Xi mzl4vmBFDermNw== -----END CERTIFICATE-----Generated at Mon Jul 21 23:20:32 2025 by rpki-client