$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/61/f92e2a-e1e4-487d-9acc-ed1f30cc1c57/1/h3e1s29m4TxDiMmTTaUHhWUV0HM.mft File: h3e1s29m4TxDiMmTTaUHhWUV0HM.mft (raw, json) Hash identifier: C2+TDC8y0NdOJ92if29bKHjNDybU+Lk/rrj7nO6D8WU= Subject key identifier: A8:1F:0D:CF:BA:C7:A8:36:5F:DA:69:3A:2B:43:BA:FA:DD:C5:0A:FF Authority key identifier: 87:77:B5:B3:6F:66:E1:3C:43:88:C9:93:4D:A5:07:85:65:15:D0:73 Certificate issuer: /CN=8777b5b36f66e13c4388c9934da507856515d073 Certificate serial: 0198530F213EA7E04EBDD77CCF7C04F6E5FA Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/h3e1s29m4TxDiMmTTaUHhWUV0HM.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/61/f92e2a-e1e4-487d-9acc-ed1f30cc1c57/1/h3e1s29m4TxDiMmTTaUHhWUV0HM.mft Manifest number: 1613 Signing time: Mon 28 Jul 2025 22:02:37 +0000 Manifest this update: Mon 28 Jul 2025 22:02:37 +0000 Manifest next update: Tue 29 Jul 2025 22:02:37 +0000 Files and hashes: 1: A6JGXr1SyvHwPS6KzQQ8jkJldSU.roa (hash: VUYWyhNS6ep9E7uE71FApUlIqX9LiZIrh4n1ahAsDso=) 2: TWqw0MHPHKoktRTg5xIAtx78yEM.roa (hash: PUFyi4vEY3nAKmSSQP1jmjE/95RjFLcOq0y69mlpJOM=) 3: V8TNai625jKsZmcQ_WZGrCSKrE4.roa (hash: vysxGoIRN63RAVmh7o1GuXI9idOSf2H3bNvDZcwjEdY=) 4: e6_LhXTjf-f7BeHN6H1yNQzFGts.roa (hash: li+C+e/TyH8gT/zIILB28hzFIhULplGnnZiYiHV9ZRc=) 5: gSW8bbfsJ2jQqNlN9dZhEGJFXP8.roa (hash: vU4Z2mH5UQmCsli4v0J2JenJSa7jKRcKq2cUWRszffQ=) 6: h3e1s29m4TxDiMmTTaUHhWUV0HM.crl (hash: ZEC+3kkaYYMUVOpcL7ZEsuxrlPN6JFtE0sA2HOEws4w=) 7: i0jLZUHWlEbTjItngq0hMz6l6J0.roa (hash: +fs8xaq1rUOg67Y/1DC1FdTxOQepuB3UaDQqJ+epLzo=) 8: mYsvImsoUU3Ub9pNivjve1CZzdk.roa (hash: 6hty2hcbqDF/bBkU2gmepu7xCrLxFUdqyzgzAZcFQt8=) 9: mcMvNLDOLrmNQ78kKv9_JRA7DZE.roa (hash: VPPZszck1h4O1z0bSD4PbxyUsa9F/mGv1ZkFIvAMZag=) 10: rIHZb_5Mc64A87xwROb5WoKPTaQ.roa (hash: h28IpYVJGdPeChoNExuao8goV9hXIxbKmOle/GHbji8=) Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/61/f92e2a-e1e4-487d-9acc-ed1f30cc1c57/1/h3e1s29m4TxDiMmTTaUHhWUV0HM.crl rsync://rpki.ripe.net/repository/DEFAULT/61/f92e2a-e1e4-487d-9acc-ed1f30cc1c57/1/h3e1s29m4TxDiMmTTaUHhWUV0HM.mft rsync://rpki.ripe.net/repository/DEFAULT/h3e1s29m4TxDiMmTTaUHhWUV0HM.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Tue 29 Jul 2025 22:02:37 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:98:53:0f:21:3e:a7:e0:4e:bd:d7:7c:cf:7c:04:f6:e5:fa Signature Algorithm: sha256WithRSAEncryption Issuer: CN=8777b5b36f66e13c4388c9934da507856515d073 Validity Not Before: Jul 28 22:02:37 2025 GMT Not After : Jul 29 22:02:37 2025 GMT Subject: CN=a81f0dcfbac7a8365fda693a2b43bafaddc50aff Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:e9:2d:53:90:a5:84:71:0a:1c:ac:26:64:99:93: ef:3e:a7:43:0e:9c:29:bc:02:fc:bc:3b:fe:81:c4: 18:ec:42:00:d7:3f:fa:a8:a0:06:b1:b8:94:44:d6: 9b:cb:d0:3c:67:88:2f:a2:44:62:b8:16:1e:f5:8a: e9:90:68:db:52:fe:8f:fc:cf:69:fb:cc:37:19:d5: 23:23:bc:24:72:c0:a7:2d:66:e5:23:02:42:56:bf: 14:ba:52:8b:26:ab:af:90:62:c9:29:6e:39:a8:aa: e2:99:11:f4:89:56:c5:28:73:21:a2:55:39:68:9c: eb:64:c1:61:c0:24:6f:6c:6c:6c:e8:50:4f:a2:8b: 11:9b:f0:47:43:a3:d1:b8:c5:7d:59:66:ca:1b:b1: df:a6:c5:2e:58:a9:5d:f0:a4:75:9f:79:53:40:0e: 25:1f:bb:1b:7e:7d:f2:cc:0a:1f:57:ac:6a:49:48: 0b:f0:0f:f1:ef:20:56:b9:9d:4b:de:72:1c:3c:23: cb:c9:8c:eb:53:21:5e:10:e5:0e:3b:c1:75:33:b0: 09:d9:b1:2a:e8:1d:02:65:e7:33:24:47:2a:2b:51: 84:98:bc:2e:55:32:ad:83:49:8e:cf:39:3d:10:b5: b9:fe:3e:e7:01:50:1f:3a:d3:ef:c8:7c:ba:0c:75: fd:39 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: A8:1F:0D:CF:BA:C7:A8:36:5F:DA:69:3A:2B:43:BA:FA:DD:C5:0A:FF X509v3 Authority Key Identifier: keyid:87:77:B5:B3:6F:66:E1:3C:43:88:C9:93:4D:A5:07:85:65:15:D0:73 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/h3e1s29m4TxDiMmTTaUHhWUV0HM.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/61/f92e2a-e1e4-487d-9acc-ed1f30cc1c57/1/h3e1s29m4TxDiMmTTaUHhWUV0HM.mft X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/61/f92e2a-e1e4-487d-9acc-ed1f30cc1c57/1/h3e1s29m4TxDiMmTTaUHhWUV0HM.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 9d:63:b9:e9:b1:1d:e9:16:d4:97:cf:bd:84:5b:a5:d3:12:df: 24:47:bd:9f:ec:f8:97:5f:ad:a8:4d:3e:9a:7e:db:02:64:91: 7e:a5:05:41:8c:f2:4e:df:71:dd:0c:38:84:f6:2c:f5:5a:64: b1:37:2f:c5:37:b8:91:19:60:20:f3:a5:16:10:0e:b7:92:b2: 25:14:6f:5f:e0:00:d0:f0:67:a0:11:31:27:b8:c7:e1:48:ec: 49:63:4a:30:33:5c:27:62:e3:e0:ef:e2:31:a6:ca:bb:62:b8: f2:38:6d:2b:55:b4:75:8a:cc:68:16:a1:7c:a2:4e:e5:2b:3f: 58:c1:31:0b:36:54:7f:eb:00:64:b2:d9:e9:64:6d:68:97:ae: d6:d1:fc:94:cd:72:e1:ad:06:59:17:0b:00:1b:2e:2e:c8:f4: a7:e6:35:52:09:1b:66:22:64:f2:fa:61:65:2d:36:4b:1f:b2: 3a:41:6f:b2:32:99:df:1f:3c:50:39:49:4a:f4:e0:82:ef:49: eb:a6:da:f5:e4:55:ae:c1:da:ab:48:e1:89:94:57:1c:d0:1d: d7:23:98:8d:ce:d8:01:1c:0a:c5:21:28:41:8a:88:00:57:8a: 0f:36:d7:39:65:4f:92:e9:b6:24:bd:dd:90:a4:2f:38:f5:6e: ec:0b:76:4c -----BEGIN CERTIFICATE----- MIIFFjCCA/6gAwIBAgISAZhTDyE+p+BOvdd8z3wE9uX6MA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKDg3NzdiNWIzNmY2NmUxM2M0Mzg4Yzk5MzRkYTUwNzg1NjUx NWQwNzMwHhcNMjUwNzI4MjIwMjM3WhcNMjUwNzI5MjIwMjM3WjAzMTEwLwYDVQQD EyhhODFmMGRjZmJhYzdhODM2NWZkYTY5M2EyYjQzYmFmYWRkYzUwYWZmMIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEA6S1TkKWEcQocrCZkmZPvPqdDDpwp vAL8vDv+gcQY7EIA1z/6qKAGsbiURNaby9A8Z4gvokRiuBYe9YrpkGjbUv6P/M9p +8w3GdUjI7wkcsCnLWblIwJCVr8UulKLJquvkGLJKW45qKrimRH0iVbFKHMholU5 aJzrZMFhwCRvbGxs6FBPoosRm/BHQ6PRuMV9WWbKG7HfpsUuWKld8KR1n3lTQA4l H7sbfn3yzAofV6xqSUgL8A/x7yBWuZ1L3nIcPCPLyYzrUyFeEOUOO8F1M7AJ2bEq 6B0CZeczJEcqK1GEmLwuVTKtg0mOzzk9ELW5/j7nAVAfOtPvyHy6DHX9OQIDAQAB o4ICIjCCAh4wHQYDVR0OBBYEFKgfDc+6x6g2X9ppOitDuvrdxQr/MB8GA1UdIwQY MBaAFId3tbNvZuE8Q4jJk02lB4VlFdBzMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvaDNlMXMyOW00VHhEaU1tVFRhVUhoV1VWMEhNLmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC82MS9mOTJlMmEtZTFlNC00ODdkLTlhY2Mt ZWQxZjMwY2MxYzU3LzEvaDNlMXMyOW00VHhEaU1tVFRhVUhoV1VWMEhNLm1mdDCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC82MS9mOTJlMmEtZTFlNC00ODdkLTlhY2MtZWQxZjMwY2MxYzU3 LzEvaDNlMXMyOW00VHhEaU1tVFRhVUhoV1VWMEhNLmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAnWO56bEd 6RbUl8+9hFul0xLfJEe9n+z4l1+tqE0+mn7bAmSRfqUFQYzyTt9x3Qw4hPYs9Vpk sTcvxTe4kRlgIPOlFhAOt5KyJRRvX+AA0PBnoBExJ7jH4UjsSWNKMDNcJ2Lj4O/i MabKu2K48jhtK1W0dYrMaBahfKJO5Ss/WMExCzZUf+sAZLLZ6WRtaJeu1tH8lM1y 4a0GWRcLABsuLsj0p+Y1UgkbZiJk8vphZS02Sx+yOkFvsjKZ3x88UDlJSvTggu9J 66ba9eRVrsHaq0jhiZRXHNAd1yOYjc7YARwKxSEoQYqIAFeKDzbXOWVPkum2JL3d kKQvOPVu7At2TA== -----END CERTIFICATE-----Generated at Tue Jul 29 04:38:05 2025 by rpki-client