$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/5b/5e5c30-8aa4-47e8-bd8f-fbe1a0d0aa98/1/VXsKwQuGQqJ909dO1ste4EXme5c.mft File: VXsKwQuGQqJ909dO1ste4EXme5c.mft (raw, json) Hash identifier: iYuj9NZmCvzV5XWbhR3+RR6DlWE8fOBWJqszZNgCbr8= Subject key identifier: 60:CD:8F:9F:63:17:E7:2E:0C:7E:E5:05:3C:7D:2F:A3:E7:55:FD:9A Authority key identifier: 55:7B:0A:C1:0B:86:42:A2:7D:D3:D7:4E:D6:CB:5E:E0:45:E6:7B:97 Certificate issuer: /CN=557b0ac10b8642a27dd3d74ed6cb5ee045e67b97 Certificate serial: 01984B8A62C21C9C50378D15D78C1CA8BDCC Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/VXsKwQuGQqJ909dO1ste4EXme5c.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/5b/5e5c30-8aa4-47e8-bd8f-fbe1a0d0aa98/1/VXsKwQuGQqJ909dO1ste4EXme5c.mft Manifest number: 0A59 Signing time: Sun 27 Jul 2025 11:00:17 +0000 Manifest this update: Sun 27 Jul 2025 11:00:17 +0000 Manifest next update: Mon 28 Jul 2025 11:00:17 +0000 Files and hashes: 1: 21k07trihuOq_p0d1xoi4bxuPZA.roa (hash: 7OFU6XWsgxZjBgc5/9Z26TjwR0mC8/oQG4kPqRbf13g=) 2: 4iaJi_OBKAE3o8h175iBu_IZyfI.roa (hash: lDCEAMXE0clsOMjNyholsrUDxhoIrjK4k3xcCfxPkUY=) 3: 5BopT6zWN2-PdGYdxH2aUB0jmhg.roa (hash: /mHqZKMlZJCdgH7Kawl3aGGRgWwqt/sVMAcpLcw5mXU=) 4: Geel9OdOaQ9FlrEzFHKlpiWE30U.roa (hash: mEBGWZVn+mmpTlkiNI5Af3AFG/t42zkx+akYj/Nw/0M=) 5: JWpMTh79Cpipv8z2TiqFetsx4Z0.roa (hash: EeuLpYtgLdl6hvIb6vNrTtAuFpAgpCnIwfpYkuwZmkQ=) 6: ORkWSvHyz7xVlACj3J643SMA1t4.roa (hash: 9HyAWLxiFAOsSF7hRfVc73gtPaqofO7sI7vq8SdYSfA=) 7: Tg1n5Fp1pJd7zBO6W_NcYtcUcjs.roa (hash: 2JSaIkit5yVDVUZV0/gM1VkpGy+fdm5Z9IWeQFjGnCA=) 8: VXsKwQuGQqJ909dO1ste4EXme5c.crl (hash: 9f0ialrjGlX06GTnCzgJqnIXk9sLDaYcIyaL1oRikc4=) 9: eEIU-7XZaVcC-f6y_l8FbyGXkYs.roa (hash: ccjF0pRALTvlsj4nghUXMFhD4eJgmm2vuAU1GU9bybw=) 10: gk0o9JIYrdgKiCEVnFxYDFCmm6g.roa (hash: U5lgDtUaYRY5Jq/t8D2zh/ImkX7ABdChH50k3iWkRSA=) 11: isVEUZfOAYWgwQz8Wasb0pXP9-c.roa (hash: KMpoK0MvGBO62nHjsAV0aozmo8+TgCC0xqPegTe+AGU=) 12: plBE2K-1jhmKq6eM8fW4KaXWZeQ.roa (hash: Fhmhnyiel4/Ua1E2ksX/40TvHfAVYkZD+dMm3wF8AAw=) 13: q5iwhkLWHaHzrsMDMRUmBmBn11k.roa (hash: 2neeMv5dtKfWXLBDuxY5lIZ8bbDinZSWs3Ol+x9qe8Y=) 14: qGHwRT5XaADoYIFvBSiB_qBc8VI.roa (hash: 1jerdKXo29tvZCLipnWCYRKXmzqu+SKDN+L+wjo2w8c=) 15: qSnacK2T8IuqCW3tI5c1Sj5K99M.roa (hash: WK1c1s6zKzUYTVUxjbT3jBDMbmv6j/g+GMi3AvdtgQY=) 16: rCp1o_nOqwsF2hOj4c5kBCN-sNQ.roa (hash: hkXBdU7Mx+s+1UvYnZlcv2/hPwhLGz/FrQNM7+jLYxI=) 17: uNvKhwe5KEaAzLU0ACWU9sZ7Bm4.roa (hash: jacfmgDqnbUtNbN3r/NGjMzBlVkGGEbKEgbjHG7ah6U=) Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/5b/5e5c30-8aa4-47e8-bd8f-fbe1a0d0aa98/1/VXsKwQuGQqJ909dO1ste4EXme5c.crl rsync://rpki.ripe.net/repository/DEFAULT/5b/5e5c30-8aa4-47e8-bd8f-fbe1a0d0aa98/1/VXsKwQuGQqJ909dO1ste4EXme5c.mft rsync://rpki.ripe.net/repository/DEFAULT/VXsKwQuGQqJ909dO1ste4EXme5c.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Mon 28 Jul 2025 05:00:04 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:98:4b:8a:62:c2:1c:9c:50:37:8d:15:d7:8c:1c:a8:bd:cc Signature Algorithm: sha256WithRSAEncryption Issuer: CN=557b0ac10b8642a27dd3d74ed6cb5ee045e67b97 Validity Not Before: Jul 27 11:00:17 2025 GMT Not After : Jul 28 11:00:17 2025 GMT Subject: CN=60cd8f9f6317e72e0c7ee5053c7d2fa3e755fd9a Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:c4:5c:42:2c:82:f2:56:52:a0:5b:4e:3c:dd:fd: 01:23:0c:6d:05:51:da:c3:ab:3f:c1:00:30:54:35: b0:97:b2:0e:dc:de:27:7e:64:6e:66:04:2b:06:11: ac:88:39:c2:35:0e:f3:e9:bb:aa:72:56:ac:cc:c6: 07:f4:e9:68:d3:be:a5:0b:3b:48:cf:86:bc:86:e1: 7a:9a:f0:85:6c:ea:b1:e8:18:09:4b:9a:bd:74:b8: b0:ff:b0:58:db:c0:76:4f:7d:0d:4c:95:0a:f6:86: f2:f6:60:a3:f2:77:e5:46:52:1f:e8:4d:cc:49:82: cd:35:74:38:5f:8e:05:2c:c9:7b:ab:8c:fe:5c:a7: ec:ad:38:bb:c9:1f:7c:c7:9b:9b:2c:88:a9:98:93: 7b:f6:9a:a8:23:21:60:e7:ce:14:14:d7:59:8a:e4: 29:48:61:9b:e7:e2:f5:b1:3a:9a:27:42:31:1b:28: f9:66:73:b4:e1:1a:bc:31:15:b6:66:2e:9b:71:c7: da:32:c0:64:54:63:ed:36:6e:01:cf:16:65:15:66: 48:59:73:29:df:58:bf:6f:1a:b9:01:e3:d0:a5:13: 32:cb:af:78:b0:fa:21:75:dc:e2:3e:77:e8:94:4a: 12:96:b4:f9:6e:21:72:4c:5c:9e:87:1e:00:46:2c: 35:4b Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 60:CD:8F:9F:63:17:E7:2E:0C:7E:E5:05:3C:7D:2F:A3:E7:55:FD:9A X509v3 Authority Key Identifier: keyid:55:7B:0A:C1:0B:86:42:A2:7D:D3:D7:4E:D6:CB:5E:E0:45:E6:7B:97 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/VXsKwQuGQqJ909dO1ste4EXme5c.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/5b/5e5c30-8aa4-47e8-bd8f-fbe1a0d0aa98/1/VXsKwQuGQqJ909dO1ste4EXme5c.mft X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/5b/5e5c30-8aa4-47e8-bd8f-fbe1a0d0aa98/1/VXsKwQuGQqJ909dO1ste4EXme5c.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 01:74:c7:74:25:44:98:60:e6:d9:01:0a:ba:cc:83:0f:75:dc: 2e:84:a3:f5:7e:17:24:ec:ce:c2:9b:d9:f0:6e:bb:4f:37:bc: 5a:34:90:05:83:75:89:6a:fa:95:c3:e4:55:93:81:81:44:82: 00:c3:77:ba:93:84:a9:a9:91:de:5d:99:7d:40:c8:11:c3:ba: 9f:8e:38:49:3d:59:f6:01:c4:42:78:af:75:16:58:70:b9:83: 2b:d1:e1:71:00:e3:8e:0f:a4:c7:7a:c0:cc:4a:d6:0a:a9:c9: a9:c5:50:b9:2e:46:fb:04:06:65:37:2c:ba:37:89:08:5a:18: 99:b1:13:da:d3:b2:1b:f0:7d:58:5d:60:78:cd:f5:ef:47:96: cb:ee:ac:83:cf:67:01:09:9a:6e:a7:67:22:38:43:1e:af:0e: 12:d2:81:ec:78:15:62:a0:04:60:c6:cf:4c:92:0e:08:43:17: a5:11:1c:b1:78:c3:5a:a7:39:e3:1f:ef:e6:6a:49:f8:d5:ef: e2:1f:58:21:d5:32:2e:4d:3c:0e:e9:e6:57:6e:88:78:ea:0e: ff:d1:91:4f:13:f4:c6:c6:48:59:e7:0d:53:c9:32:9b:f3:fc: ec:f6:cf:57:8f:36:d5:f0:af:b0:55:c5:5a:94:98:28:99:8a: 9d:17:14:03 -----BEGIN CERTIFICATE----- MIIFFjCCA/6gAwIBAgISAZhLimLCHJxQN40V14wcqL3MMA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKDU1N2IwYWMxMGI4NjQyYTI3ZGQzZDc0ZWQ2Y2I1ZWUwNDVl NjdiOTcwHhcNMjUwNzI3MTEwMDE3WhcNMjUwNzI4MTEwMDE3WjAzMTEwLwYDVQQD Eyg2MGNkOGY5ZjYzMTdlNzJlMGM3ZWU1MDUzYzdkMmZhM2U3NTVmZDlhMIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAxFxCLILyVlKgW0483f0BIwxtBVHa w6s/wQAwVDWwl7IO3N4nfmRuZgQrBhGsiDnCNQ7z6buqclaszMYH9Olo076lCztI z4a8huF6mvCFbOqx6BgJS5q9dLiw/7BY28B2T30NTJUK9oby9mCj8nflRlIf6E3M SYLNNXQ4X44FLMl7q4z+XKfsrTi7yR98x5ubLIipmJN79pqoIyFg584UFNdZiuQp SGGb5+L1sTqaJ0IxGyj5ZnO04Rq8MRW2Zi6bccfaMsBkVGPtNm4BzxZlFWZIWXMp 31i/bxq5AePQpRMyy694sPohddziPnfolEoSlrT5biFyTFyehx4ARiw1SwIDAQAB o4ICIjCCAh4wHQYDVR0OBBYEFGDNj59jF+cuDH7lBTx9L6PnVf2aMB8GA1UdIwQY MBaAFFV7CsELhkKifdPXTtbLXuBF5nuXMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvVlhzS3dRdUdRcUo5MDlkTzFzdGU0RVhtZTVjLmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC81Yi81ZTVjMzAtOGFhNC00N2U4LWJkOGYt ZmJlMWEwZDBhYTk4LzEvVlhzS3dRdUdRcUo5MDlkTzFzdGU0RVhtZTVjLm1mdDCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC81Yi81ZTVjMzAtOGFhNC00N2U4LWJkOGYtZmJlMWEwZDBhYTk4 LzEvVlhzS3dRdUdRcUo5MDlkTzFzdGU0RVhtZTVjLmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAAXTHdCVE mGDm2QEKusyDD3XcLoSj9X4XJOzOwpvZ8G67Tze8WjSQBYN1iWr6lcPkVZOBgUSC AMN3upOEqamR3l2ZfUDIEcO6n444ST1Z9gHEQnivdRZYcLmDK9HhcQDjjg+kx3rA zErWCqnJqcVQuS5G+wQGZTcsujeJCFoYmbET2tOyG/B9WF1geM3170eWy+6sg89n AQmabqdnIjhDHq8OEtKB7HgVYqAEYMbPTJIOCEMXpREcsXjDWqc54x/v5mpJ+NXv 4h9YIdUyLk08DunmV26IeOoO/9GRTxP0xsZIWecNU8kym/P87PbPV4821fCvsFXF WpSYKJmKnRcUAw== -----END CERTIFICATE-----Generated at Sun Jul 27 12:29:25 2025 by rpki-client