$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/5b/e744bd-f6d9-4f74-8c01-8c4bc45927a3/1/Xdczb6kVchzjv-4hf06ZFk25Uys.mft File: Xdczb6kVchzjv-4hf06ZFk25Uys.mft (raw, json) Hash identifier: cJC0X7TQfN5R1GmlztMP6PTwvzy4GWHOfLjUg0qXi4I= Subject key identifier: B0:7B:E4:34:EC:67:77:C6:37:40:80:82:B2:B0:D2:92:33:8A:07:B6 Authority key identifier: 5D:D7:33:6F:A9:15:72:1C:E3:BF:EE:21:7F:4E:99:16:4D:B9:53:2B Certificate issuer: /CN=5dd7336fa915721ce3bfee217f4e99164db9532b Certificate serial: 0198499C32761BA25DCA9BA285AECC51E64D Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/Xdczb6kVchzjv-4hf06ZFk25Uys.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/5b/e744bd-f6d9-4f74-8c01-8c4bc45927a3/1/Xdczb6kVchzjv-4hf06ZFk25Uys.mft Manifest number: 1607 Signing time: Sun 27 Jul 2025 02:00:29 +0000 Manifest this update: Sun 27 Jul 2025 02:00:29 +0000 Manifest next update: Mon 28 Jul 2025 02:00:29 +0000 Files and hashes: 1: DkHIx2qomTMRxi5txwcyeQJUMC4.roa (hash: aUooC/gZIs2knffE4CSZxz4fOwgHg5KB9hMX38VnhFA=) 2: TBZUFVuLjgaJ-XADpnEKR7pLEmo.roa (hash: DDp1P+ue/jG2hxWSfwXECX5hRH8hg4KzLSyGRRpINWI=) 3: Xdczb6kVchzjv-4hf06ZFk25Uys.crl (hash: AotJoGUQ/viaRcU6S4xbWeGMC1gw6yoptlL7UL64BgE=) 4: YPWPyR2PrV8C7bZPatIE86usWRg.roa (hash: oPtwylk/25k8zLps+NlaEoKI3y6QpsbDE1m1nmcztaE=) 5: bOO4UAkgvXb-rMii_89NfL-6bTI.roa (hash: NL1lyy08FzW+vpLdiv9to5VdvnEWSxR942DR56bOFW4=) 6: gVKSPISn7WOtLgcYX82T_CB0k8w.roa (hash: Ym9+8pOqwFm62YT9wllYnMmkH1dr3oLLznDhqgDjeLA=) 7: gincnI_gYVCe8a-UMsJw8uGTHk4.roa (hash: /B3bMOP6Q4JtPQrlZm8v7Y12jGfc6csMXusEpKv3HP0=) 8: pjijzSQUxqzDP8xeNUFbC_-9WRc.roa (hash: idDVoTbAeotEcfiyv3LfRPsc1HSc8qISJahqgpNH+A0=) 9: sbcX3dD-IzvBjjiuOceGuIya184.roa (hash: OgKPXFMnHlbOLdXfkb/OHlLV/72L9AOodiZ4Hgh7ss4=) 10: tmZ0o6fg7g2ZAFjY0aabWuJemGY.roa (hash: a2zNXAKUIiHFRxrlG+HegKhw0N5htHdLY3b/L14Vpl4=) Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/5b/e744bd-f6d9-4f74-8c01-8c4bc45927a3/1/Xdczb6kVchzjv-4hf06ZFk25Uys.crl rsync://rpki.ripe.net/repository/DEFAULT/5b/e744bd-f6d9-4f74-8c01-8c4bc45927a3/1/Xdczb6kVchzjv-4hf06ZFk25Uys.mft rsync://rpki.ripe.net/repository/DEFAULT/Xdczb6kVchzjv-4hf06ZFk25Uys.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Mon 28 Jul 2025 02:00:29 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:98:49:9c:32:76:1b:a2:5d:ca:9b:a2:85:ae:cc:51:e6:4d Signature Algorithm: sha256WithRSAEncryption Issuer: CN=5dd7336fa915721ce3bfee217f4e99164db9532b Validity Not Before: Jul 27 02:00:29 2025 GMT Not After : Jul 28 02:00:29 2025 GMT Subject: CN=b07be434ec6777c637408082b2b0d292338a07b6 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:aa:c5:9a:80:44:1b:f7:12:77:d1:c3:a5:2f:7a: 30:09:3c:ef:be:c8:3f:34:39:e1:7f:89:c5:9f:91: 8d:37:08:13:b1:1f:be:ba:88:6c:b5:46:d3:49:65: fa:ac:99:86:71:8a:cd:79:2a:49:c5:ae:01:cc:a0: dc:e0:3b:63:59:df:3b:7d:5f:a8:5e:36:cb:18:d0: 33:d3:26:b5:77:75:94:c5:71:45:de:5d:a4:7a:95: 86:a4:37:89:87:91:55:e7:c7:f5:88:9a:86:d2:bb: 5d:c3:5b:e8:fe:8b:65:c2:b1:a8:1b:dc:7b:a7:dc: 07:3f:0e:e6:45:11:87:86:0e:96:e9:b0:c4:23:e5: 5a:25:98:2f:f6:92:58:1a:72:8a:24:f2:05:96:b5: bb:65:cc:ed:1d:d5:29:71:66:46:3a:ee:11:af:55: 63:49:ea:0f:65:d2:cb:1d:ee:a2:1f:44:87:b0:f7: 0f:3c:6a:eb:fa:4c:07:f1:04:f8:6d:1a:6b:0e:a0: 08:1f:ec:7f:71:5d:23:55:30:e0:67:a6:5e:a2:a5: 0a:8b:c9:d9:8f:4c:23:aa:16:40:9d:cf:17:38:ee: 11:8d:43:32:06:e1:36:41:f0:55:8d:20:a0:83:47: 6b:e2:7d:c6:b3:86:10:06:8f:c9:88:a6:8a:87:2d: f8:a3 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: B0:7B:E4:34:EC:67:77:C6:37:40:80:82:B2:B0:D2:92:33:8A:07:B6 X509v3 Authority Key Identifier: keyid:5D:D7:33:6F:A9:15:72:1C:E3:BF:EE:21:7F:4E:99:16:4D:B9:53:2B X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/Xdczb6kVchzjv-4hf06ZFk25Uys.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/5b/e744bd-f6d9-4f74-8c01-8c4bc45927a3/1/Xdczb6kVchzjv-4hf06ZFk25Uys.mft X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/5b/e744bd-f6d9-4f74-8c01-8c4bc45927a3/1/Xdczb6kVchzjv-4hf06ZFk25Uys.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 57:85:ce:f3:36:3d:9c:94:53:ac:0a:10:d9:5b:d6:8e:26:4b: 8c:39:dc:63:a1:a3:12:60:35:8d:7e:f3:eb:b7:4e:34:14:38: 22:67:ab:fa:0d:81:59:77:d2:44:4c:3e:96:3c:f4:c5:75:93: 7e:f2:f6:ae:b6:62:81:df:5c:ef:ae:bb:a7:8b:81:92:9e:e0: d5:ec:93:2a:8f:0d:bd:24:86:a8:78:90:11:5b:cc:12:02:7c: 5c:a4:fa:4d:ea:27:5a:c9:35:1c:06:ac:fc:a6:ee:da:74:5e: 17:93:a3:40:48:80:c5:0a:80:f2:23:13:e9:f2:36:2e:80:d5: 32:21:8d:83:55:20:b1:66:6c:29:a0:ff:ac:3c:f8:7b:a0:ae: 14:8b:1e:1c:9b:ea:63:d4:e2:45:79:81:98:10:78:b9:6e:80: 55:6b:27:19:f8:37:3b:3c:a1:2b:79:61:3b:d8:f9:1e:98:31: 34:a0:d5:eb:b8:3a:81:cd:b7:ea:8c:2f:80:22:f8:4e:95:6d: 93:f2:bf:1a:ff:7f:eb:a0:85:ae:ef:ef:b4:04:48:12:00:e6: e0:0a:fa:86:91:82:97:65:e5:ba:cc:7b:ba:cb:e8:3d:ee:e8: 08:8a:99:a5:ee:62:88:98:d2:c4:b3:ab:1b:bb:1b:bd:de:1f: 50:73:63:a4 -----BEGIN CERTIFICATE----- MIIFFjCCA/6gAwIBAgISAZhJnDJ2G6Jdypuiha7MUeZNMA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKDVkZDczMzZmYTkxNTcyMWNlM2JmZWUyMTdmNGU5OTE2NGRi OTUzMmIwHhcNMjUwNzI3MDIwMDI5WhcNMjUwNzI4MDIwMDI5WjAzMTEwLwYDVQQD EyhiMDdiZTQzNGVjNjc3N2M2Mzc0MDgwODJiMmIwZDI5MjMzOGEwN2I2MIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAqsWagEQb9xJ30cOlL3owCTzvvsg/ NDnhf4nFn5GNNwgTsR++uohstUbTSWX6rJmGcYrNeSpJxa4BzKDc4DtjWd87fV+o XjbLGNAz0ya1d3WUxXFF3l2kepWGpDeJh5FV58f1iJqG0rtdw1vo/otlwrGoG9x7 p9wHPw7mRRGHhg6W6bDEI+VaJZgv9pJYGnKKJPIFlrW7ZcztHdUpcWZGOu4Rr1Vj SeoPZdLLHe6iH0SHsPcPPGrr+kwH8QT4bRprDqAIH+x/cV0jVTDgZ6ZeoqUKi8nZ j0wjqhZAnc8XOO4RjUMyBuE2QfBVjSCgg0dr4n3Gs4YQBo/JiKaKhy34owIDAQAB o4ICIjCCAh4wHQYDVR0OBBYEFLB75DTsZ3fGN0CAgrKw0pIzige2MB8GA1UdIwQY MBaAFF3XM2+pFXIc47/uIX9OmRZNuVMrMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvWGRjemI2a1ZjaHpqdi00aGYwNlpGazI1VXlzLmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC81Yi9lNzQ0YmQtZjZkOS00Zjc0LThjMDEt OGM0YmM0NTkyN2EzLzEvWGRjemI2a1ZjaHpqdi00aGYwNlpGazI1VXlzLm1mdDCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC81Yi9lNzQ0YmQtZjZkOS00Zjc0LThjMDEtOGM0YmM0NTkyN2Ez LzEvWGRjemI2a1ZjaHpqdi00aGYwNlpGazI1VXlzLmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAV4XO8zY9 nJRTrAoQ2VvWjiZLjDncY6GjEmA1jX7z67dONBQ4Imer+g2BWXfSREw+ljz0xXWT fvL2rrZigd9c7667p4uBkp7g1eyTKo8NvSSGqHiQEVvMEgJ8XKT6TeonWsk1HAas /Kbu2nReF5OjQEiAxQqA8iMT6fI2LoDVMiGNg1UgsWZsKaD/rDz4e6CuFIseHJvq Y9TiRXmBmBB4uW6AVWsnGfg3OzyhK3lhO9j5HpgxNKDV67g6gc236owvgCL4TpVt k/K/Gv9/66CFru/vtARIEgDm4Ar6hpGCl2Xlusx7usvoPe7oCIqZpe5iiJjSxLOr G7sbvd4fUHNjpA== -----END CERTIFICATE-----Generated at Sun Jul 27 11:33:20 2025 by rpki-client