$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/5f/956db9-c8f7-4b9f-a56e-bc6db7248add/1/cPmxat8v0xmIhZkitEV0gd1-70A.mft File: cPmxat8v0xmIhZkitEV0gd1-70A.mft (raw, json) Hash identifier: mhploWxCm23DuvhqC2Umw8wv2YQS/t4LnxT+0UvlmqU= Subject key identifier: 66:0E:88:67:F8:C7:A7:1D:03:FD:80:F6:6D:4E:3B:30:3F:23:94:2A Authority key identifier: 70:F9:B1:6A:DF:2F:D3:19:88:85:99:22:B4:45:74:81:DD:7E:EF:40 Certificate issuer: /CN=70f9b16adf2fd31988859922b4457481dd7eef40 Certificate serial: 019831CB2E24BDE0606FEE0A9A57905ED882 Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/cPmxat8v0xmIhZkitEV0gd1-70A.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/5f/956db9-c8f7-4b9f-a56e-bc6db7248add/1/cPmxat8v0xmIhZkitEV0gd1-70A.mft Manifest number: 138D Signing time: Tue 22 Jul 2025 11:00:55 +0000 Manifest this update: Tue 22 Jul 2025 11:00:55 +0000 Manifest next update: Wed 23 Jul 2025 11:00:55 +0000 Files and hashes: 1: 5WpWrypca4XGx0ISHtuZYRT_cno.roa (hash: R8ZoU8UZw1Z3gy7t3IJTFumdlDzgJjWSubPKAJkbvV0=) 2: 6Tq_leUsVpFgI85zp_wIyChN4WA.roa (hash: //rXy+p6IdrQ6jHZrRlFQGf563PHiLpmYBPTnbSHBxk=) 3: 8wA7Z8R93JqOIr4nUCX1S5SLIf0.roa (hash: 8DXy5Yj333BXczsMQt5oYuiRo4BwLMddhajfUUPGovk=) 4: ElpdsCAHWnrspf_BQqwQgScgsBo.roa (hash: qGJ7OM5aBe7dvyjzLtp4kDohE2tNL4nfvnY6+uLyiBw=) 5: JOBERo-vgg6dldBoWViTCfV7X-A.roa (hash: ce+d5taUPY+G9x5sjcA70ndAe38v7dhbZx0JrAG/CD4=) 6: RYSW4-JdkoBKfIznV9vyOBl6v0k.roa (hash: tfbM0g7bQsYb1raiS9o3/ZoSCJhkN7ErYxyrCWx4xjs=) 7: T1V76bxlhezLMl4Tzlvgqgk0pcg.roa (hash: Hk9kWyBSS3VZQ3ORtc2F2qsaXDclUxsqlus/HDJzLds=) 8: Z5phhVwVfpK6dkc5C1-vYmhcYUU.roa (hash: iIyIPk2NBxkdVR06TYJeH+vh01QOalQb+F2tpumtM+w=) 9: cPmxat8v0xmIhZkitEV0gd1-70A.crl (hash: 6p+nOCwjN2k1cxcVHjKyrN5anCu6rDQDWesSHXKqYPY=) 10: ezMLdhISIqr2PAqGoulAf-qQ6FY.roa (hash: MoVmtNQ9G0A/NJidABkGuBmF42AfIIukbBtAhp8lY68=) 11: mA4IEAHXR0LDJS0AO7AgvdyymfA.roa (hash: B62czMPy2pKQJ5FL2R2C5ZUZdywtpL+Cj+O5hZ16Rv4=) 12: qQMnV_AHkaoypfzXBStNqOIC8i4.roa (hash: 8/gHPP6AgbL3NuW+OG2JLB+jSLFsV5WrdZq7Of0LMpg=) 13: t-GC4kGf7lvSnOYAiTpgmlkKEL4.roa (hash: 9rNbslHDQxGg0Ew50MQa2Fk3HC4+vs4VNNeusuZLYr8=) 14: x9Pa4FjGFuSawk-SEv2Ok6k19yY.roa (hash: KV0RsDBtETgbugEI2r4ib263Vs08/yFDjc5KML8G+A0=) Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/5f/956db9-c8f7-4b9f-a56e-bc6db7248add/1/cPmxat8v0xmIhZkitEV0gd1-70A.crl rsync://rpki.ripe.net/repository/DEFAULT/5f/956db9-c8f7-4b9f-a56e-bc6db7248add/1/cPmxat8v0xmIhZkitEV0gd1-70A.mft rsync://rpki.ripe.net/repository/DEFAULT/cPmxat8v0xmIhZkitEV0gd1-70A.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Wed 23 Jul 2025 11:00:55 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:98:31:cb:2e:24:bd:e0:60:6f:ee:0a:9a:57:90:5e:d8:82 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=70f9b16adf2fd31988859922b4457481dd7eef40 Validity Not Before: Jul 22 11:00:55 2025 GMT Not After : Jul 23 11:00:55 2025 GMT Subject: CN=660e8867f8c7a71d03fd80f66d4e3b303f23942a Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:cd:55:36:44:0e:cd:88:40:76:3f:2c:08:d6:5b: 59:11:e6:76:21:2e:7c:0b:d5:09:70:f8:b9:9b:2e: 4b:2d:d3:53:aa:ac:58:e2:b2:ad:56:01:41:f6:db: f9:07:ff:0b:60:84:f1:76:22:9a:46:4d:09:84:b8: 0f:bd:c1:de:a9:84:ba:26:82:85:10:aa:0d:1f:d2: 91:58:81:9e:09:11:45:0b:1e:f5:8c:c8:20:89:0b: d5:e7:e4:10:3a:0c:ed:e3:fc:27:be:8a:e0:2f:f7: 19:81:77:ed:e0:0f:d6:47:65:be:82:e4:53:7f:70: 0d:e7:b5:91:13:9d:4c:26:b0:49:33:7e:1d:c9:79: c1:ba:fd:f8:b1:e0:c2:91:87:a5:d0:2f:4d:9b:7b: e8:a3:1d:b1:86:e7:b4:b5:49:27:bb:2e:3a:39:dd: df:60:4d:bf:b8:55:51:c2:2a:5f:eb:4f:01:cb:2c: 54:fc:e4:98:09:de:f8:66:a9:bd:d6:eb:14:5b:71: 12:43:4f:0b:e4:e5:f2:0e:5e:ca:1f:fd:63:91:98: f2:1b:c1:66:e8:70:29:f9:de:dc:a9:7c:6f:1b:da: 39:46:67:49:09:e6:ad:71:63:94:ac:9d:02:d0:b9: ea:39:30:ff:e8:20:7a:6b:ad:63:d7:27:cf:1f:2e: 1d:e5 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 66:0E:88:67:F8:C7:A7:1D:03:FD:80:F6:6D:4E:3B:30:3F:23:94:2A X509v3 Authority Key Identifier: keyid:70:F9:B1:6A:DF:2F:D3:19:88:85:99:22:B4:45:74:81:DD:7E:EF:40 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/cPmxat8v0xmIhZkitEV0gd1-70A.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/5f/956db9-c8f7-4b9f-a56e-bc6db7248add/1/cPmxat8v0xmIhZkitEV0gd1-70A.mft X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/5f/956db9-c8f7-4b9f-a56e-bc6db7248add/1/cPmxat8v0xmIhZkitEV0gd1-70A.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 06:19:32:f0:a8:5e:0b:9f:37:e6:f7:76:39:4c:06:1e:f7:07: d1:45:59:5c:36:d9:97:34:03:50:64:ca:e6:3e:ba:79:6b:92: 37:fa:51:f3:65:99:89:73:57:01:bd:57:88:4d:1d:f0:16:33: 99:29:a3:7d:f6:ab:a3:20:e4:96:47:31:ed:86:f6:ac:df:81: 6a:88:2a:24:c3:40:20:2a:8b:31:a4:0b:6e:2a:fb:07:6d:78: 6c:e2:76:61:a3:05:c3:9e:ca:6b:ca:80:79:01:75:80:3a:ae: fb:e0:24:2c:55:4a:a6:87:dc:e9:6f:e9:85:c7:31:9e:26:ac: d9:e5:9d:21:23:3b:35:a2:f5:72:05:da:d6:a7:da:44:03:4a: 89:21:fc:d6:08:41:87:72:fa:f5:88:21:d5:1f:6a:12:a8:c0: 38:99:15:f7:bc:7c:39:01:ec:6e:42:ec:dd:48:9c:d0:20:69: b7:78:1e:50:e6:23:c8:c2:af:68:73:82:0e:a6:52:82:56:a6: cc:f7:f8:ac:a6:07:e1:2a:7a:40:e9:5e:9a:b2:4b:d6:59:7d: 4b:6e:2f:64:d9:72:a1:85:4d:19:bb:6c:97:30:93:a7:b8:d9: 12:9a:19:4b:a4:d0:55:54:e7:4a:b2:9e:7e:6e:28:27:9b:00: aa:ba:cf:56 -----BEGIN CERTIFICATE----- MIIFFjCCA/6gAwIBAgISAZgxyy4kveBgb+4KmleQXtiCMA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKDcwZjliMTZhZGYyZmQzMTk4ODg1OTkyMmI0NDU3NDgxZGQ3 ZWVmNDAwHhcNMjUwNzIyMTEwMDU1WhcNMjUwNzIzMTEwMDU1WjAzMTEwLwYDVQQD Eyg2NjBlODg2N2Y4YzdhNzFkMDNmZDgwZjY2ZDRlM2IzMDNmMjM5NDJhMIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAzVU2RA7NiEB2PywI1ltZEeZ2IS58 C9UJcPi5my5LLdNTqqxY4rKtVgFB9tv5B/8LYITxdiKaRk0JhLgPvcHeqYS6JoKF EKoNH9KRWIGeCRFFCx71jMggiQvV5+QQOgzt4/wnvorgL/cZgXft4A/WR2W+guRT f3AN57WRE51MJrBJM34dyXnBuv34seDCkYel0C9Nm3voox2xhue0tUknuy46Od3f YE2/uFVRwipf608ByyxU/OSYCd74Zqm91usUW3ESQ08L5OXyDl7KH/1jkZjyG8Fm 6HAp+d7cqXxvG9o5RmdJCeatcWOUrJ0C0LnqOTD/6CB6a61j1yfPHy4d5QIDAQAB o4ICIjCCAh4wHQYDVR0OBBYEFGYOiGf4x6cdA/2A9m1OOzA/I5QqMB8GA1UdIwQY MBaAFHD5sWrfL9MZiIWZIrRFdIHdfu9AMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvY1BteGF0OHYweG1JaFpraXRFVjBnZDEtNzBBLmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC81Zi85NTZkYjktYzhmNy00YjlmLWE1NmUt YmM2ZGI3MjQ4YWRkLzEvY1BteGF0OHYweG1JaFpraXRFVjBnZDEtNzBBLm1mdDCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC81Zi85NTZkYjktYzhmNy00YjlmLWE1NmUtYmM2ZGI3MjQ4YWRk LzEvY1BteGF0OHYweG1JaFpraXRFVjBnZDEtNzBBLmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEABhky8Khe C5835vd2OUwGHvcH0UVZXDbZlzQDUGTK5j66eWuSN/pR82WZiXNXAb1XiE0d8BYz mSmjffaroyDklkcx7Yb2rN+BaogqJMNAICqLMaQLbir7B214bOJ2YaMFw57Ka8qA eQF1gDqu++AkLFVKpofc6W/phccxnias2eWdISM7NaL1cgXa1qfaRANKiSH81ghB h3L69Ygh1R9qEqjAOJkV97x8OQHsbkLs3Uic0CBpt3geUOYjyMKvaHOCDqZSglam zPf4rKYH4Sp6QOlemrJL1ll9S24vZNlyoYVNGbtslzCTp7jZEpoZS6TQVVTnSrKe fm4oJ5sAqrrPVg== -----END CERTIFICATE-----Generated at Tue Jul 22 19:30:46 2025 by rpki-client