$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/6e/829fdf-ba63-4c23-91d1-d2bbf37dabb4/1/C1Vqy187lhtcwkoplfNO6R953BY.mft File: C1Vqy187lhtcwkoplfNO6R953BY.mft (raw, json) Hash identifier: dICCMLcMSIgdyE3X7h6mlArS5eDTiMDbvofMOTG5de0= Subject key identifier: B0:1E:FE:EE:94:CC:FB:5B:39:D1:B6:96:04:CC:66:A7:63:B8:DF:FA Authority key identifier: 0B:55:6A:CB:5F:3B:96:1B:5C:C2:4A:29:95:F3:4E:E9:1F:79:DC:16 Certificate issuer: /CN=0b556acb5f3b961b5cc24a2995f34ee91f79dc16 Certificate serial: 019855DF53EBE072C233C075EACC23498637 Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/C1Vqy187lhtcwkoplfNO6R953BY.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/6e/829fdf-ba63-4c23-91d1-d2bbf37dabb4/1/C1Vqy187lhtcwkoplfNO6R953BY.mft Manifest number: 1626 Signing time: Tue 29 Jul 2025 11:09:15 +0000 Manifest this update: Tue 29 Jul 2025 11:09:15 +0000 Manifest next update: Wed 30 Jul 2025 11:09:15 +0000 Files and hashes: 1: 1-Ss8y57Ehk6R15I50N_Ja4NuZFg.roa (hash: E3Xe56Uq6qf9xoMjHrb8Tp1z8LD2YFv8nmr/lvS0Ysc=) 2: 7AEnLXSB1YaAfgMGKA-kT_KobA0.roa (hash: 5AKbmZJGLK7UnAttUygeGitl8Ob/t23TtR2u6flJg/c=) 3: C1Vqy187lhtcwkoplfNO6R953BY.crl (hash: yH5zY44NVOTlPYOfNSzIYXt4WKQZ0dShKuSK4CTSnRs=) 4: QmJcakWH1CARNak1a46tlM2ytyE.roa (hash: v8cGIzbtBdgrBgCJGkJKF+awirm33gkAmHePtYlNHWc=) 5: Ufuhf0_wn9lleED4LQKhcdXKZLY.roa (hash: f4Ng8ktmuEshcdJiOHZjPJAwq7/nitwlptaYvO0/DHU=) 6: XFCPjaaIP04nEp4Rlitk1zUJ8nA.roa (hash: 9Hrw22EfwJiPVEvx9iOeq1/U32N9ujjXKgQDN7kPNnY=) 7: bzDr7kn2LfhqjYsoZQLZ-uHwvQI.roa (hash: ETCcL6Lmgpdi6iyG4gf+W9Umfg+Mzqif1q2dVBD62g4=) 8: e38Kg8iCKqOVcGx8ZyJTu1IrTwc.roa (hash: yWG15kNG/dsh9zB22D/eO5GMJKGaRyWMaUm0mhvs7uI=) 9: irmafOolxajIUAAu4T-WCDDYGuE.roa (hash: B2dN9t4bHqneaqFXcxWnKXREXDW4ZcJ7+Z7DVVfobpU=) 10: n7XNxY-sa2O-8oAFuyK34I07FxU.roa (hash: 7HgkBdxidw6ZJ5Ks5cBFOnu0xmnIR/zyHKV2JfMTPLM=) 11: nikI6XTmNMIUEKKUIOhaKpaRfTY.roa (hash: 3OTWr1t7MNgVLjxLDAQClENVYG0IMxrFr2dhuyh8iLU=) 12: pkcx_-V9HNVC8HzviAJSCvzoxJg.roa (hash: V4tEVQoUWw/5eT8C/Z8qztjVCTQ8kgfSRy2bETB0V2w=) 13: wq6Oybyru5PjGYeKDTrdRRIxOok.roa (hash: +NxS5vTeW/Lv7n0fJHcbikUT3d8Gb7EPQOKgAIeQnGs=) Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/6e/829fdf-ba63-4c23-91d1-d2bbf37dabb4/1/C1Vqy187lhtcwkoplfNO6R953BY.crl rsync://rpki.ripe.net/repository/DEFAULT/6e/829fdf-ba63-4c23-91d1-d2bbf37dabb4/1/C1Vqy187lhtcwkoplfNO6R953BY.mft rsync://rpki.ripe.net/repository/DEFAULT/C1Vqy187lhtcwkoplfNO6R953BY.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Wed 30 Jul 2025 08:00:05 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:98:55:df:53:eb:e0:72:c2:33:c0:75:ea:cc:23:49:86:37 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=0b556acb5f3b961b5cc24a2995f34ee91f79dc16 Validity Not Before: Jul 29 11:09:15 2025 GMT Not After : Jul 30 11:09:15 2025 GMT Subject: CN=b01efeee94ccfb5b39d1b69604cc66a763b8dffa Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:95:ab:2f:9a:a6:16:b6:8a:07:37:7a:2d:89:24: 4b:e4:aa:49:f8:af:4f:c9:49:f4:8b:65:ac:13:d2: d7:23:ff:91:3f:52:52:f2:16:d2:5e:5a:75:e5:7d: 89:90:5e:9a:06:17:aa:c6:b1:d1:55:f8:7a:54:84: c2:18:78:dc:55:a4:5f:ed:d7:48:a2:38:6b:c9:76: ab:60:e2:58:48:36:2d:8b:de:d8:5d:b3:ad:42:70: 15:31:02:07:5c:a6:a7:7b:8c:97:80:40:13:b2:de: 60:1a:ca:ba:5e:75:51:16:97:98:ca:8e:1e:36:07: aa:c7:26:f3:0f:5e:6a:bc:5c:ae:17:20:81:c8:bb: 8f:90:70:16:f3:3f:97:d2:10:df:d9:d2:5d:6c:a0: 9c:8a:1f:18:84:03:e3:5b:7b:65:0b:84:d4:04:00: 76:dc:ce:1c:96:46:e6:0b:96:d4:cf:14:7e:d4:06: ba:39:04:c3:08:37:7f:eb:69:33:8d:1c:1e:9e:30: 5f:e7:ed:10:a8:6c:86:fd:38:6d:10:c1:ce:b0:a3: 92:a2:ae:9b:a0:49:7c:a2:c4:31:84:cd:2e:db:ac: a7:0c:28:74:b1:fd:62:70:9b:7a:d7:c5:e9:27:6a: 6d:ad:b0:9e:4c:d8:18:f3:20:17:e1:91:8b:ae:74: 14:3f Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: B0:1E:FE:EE:94:CC:FB:5B:39:D1:B6:96:04:CC:66:A7:63:B8:DF:FA X509v3 Authority Key Identifier: keyid:0B:55:6A:CB:5F:3B:96:1B:5C:C2:4A:29:95:F3:4E:E9:1F:79:DC:16 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/C1Vqy187lhtcwkoplfNO6R953BY.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/6e/829fdf-ba63-4c23-91d1-d2bbf37dabb4/1/C1Vqy187lhtcwkoplfNO6R953BY.mft X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/6e/829fdf-ba63-4c23-91d1-d2bbf37dabb4/1/C1Vqy187lhtcwkoplfNO6R953BY.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 46:04:92:d5:65:74:6e:be:8c:47:00:bf:f6:74:64:2d:c8:f8: b2:9a:ee:9b:28:5b:52:fd:74:a7:e8:9c:62:9b:b9:6a:64:a0: 27:3e:bb:ca:47:05:8e:1d:b1:94:4b:bb:b2:bd:67:e3:1a:c0: 49:7e:47:22:b2:ac:0e:15:11:e5:8c:a6:d8:f1:7e:f3:1c:66: 35:1c:88:5e:00:be:43:d7:44:8f:93:f0:40:39:8e:51:a6:cb: f8:e6:8f:34:2c:66:d6:bc:0a:a0:86:44:ca:5f:e5:1d:7d:51: 5c:a5:22:2b:76:8d:94:76:3e:66:8c:f2:54:da:28:0b:03:ca: 59:18:83:13:84:eb:cc:94:fa:11:c2:fa:56:a8:0a:29:32:10: 10:87:6d:29:67:c1:b3:f7:81:5b:3e:b5:25:8e:67:3f:b1:04: db:e7:0d:95:f9:4f:59:7c:d1:3d:fb:33:13:97:17:4f:d5:0d: 62:83:89:74:2e:01:49:23:29:17:bf:6e:39:d7:e9:73:c3:99: 6f:5d:92:68:9c:ec:91:b0:52:84:27:c1:8a:5b:e7:cb:6e:ed: 02:dd:d7:e9:4a:54:af:2f:cd:f9:f0:a8:e7:36:a6:ba:12:82: 1c:7a:52:28:5c:15:12:5d:1e:cc:53:e8:d0:d5:df:4f:d2:22: 7c:6c:bd:21 -----BEGIN CERTIFICATE----- MIIFFjCCA/6gAwIBAgISAZhV31Pr4HLCM8B16swjSYY3MA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKDBiNTU2YWNiNWYzYjk2MWI1Y2MyNGEyOTk1ZjM0ZWU5MWY3 OWRjMTYwHhcNMjUwNzI5MTEwOTE1WhcNMjUwNzMwMTEwOTE1WjAzMTEwLwYDVQQD EyhiMDFlZmVlZTk0Y2NmYjViMzlkMWI2OTYwNGNjNjZhNzYzYjhkZmZhMIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAlasvmqYWtooHN3otiSRL5KpJ+K9P yUn0i2WsE9LXI/+RP1JS8hbSXlp15X2JkF6aBheqxrHRVfh6VITCGHjcVaRf7ddI ojhryXarYOJYSDYti97YXbOtQnAVMQIHXKane4yXgEATst5gGsq6XnVRFpeYyo4e NgeqxybzD15qvFyuFyCByLuPkHAW8z+X0hDf2dJdbKCcih8YhAPjW3tlC4TUBAB2 3M4clkbmC5bUzxR+1Aa6OQTDCDd/62kzjRwenjBf5+0QqGyG/ThtEMHOsKOSoq6b oEl8osQxhM0u26ynDCh0sf1icJt618XpJ2ptrbCeTNgY8yAX4ZGLrnQUPwIDAQAB o4ICIjCCAh4wHQYDVR0OBBYEFLAe/u6UzPtbOdG2lgTMZqdjuN/6MB8GA1UdIwQY MBaAFAtVastfO5YbXMJKKZXzTukfedwWMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvQzFWcXkxODdsaHRjd2tvcGxmTk82Ujk1M0JZLmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC82ZS84MjlmZGYtYmE2My00YzIzLTkxZDEt ZDJiYmYzN2RhYmI0LzEvQzFWcXkxODdsaHRjd2tvcGxmTk82Ujk1M0JZLm1mdDCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC82ZS84MjlmZGYtYmE2My00YzIzLTkxZDEtZDJiYmYzN2RhYmI0 LzEvQzFWcXkxODdsaHRjd2tvcGxmTk82Ujk1M0JZLmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEARgSS1WV0 br6MRwC/9nRkLcj4sprumyhbUv10p+icYpu5amSgJz67ykcFjh2xlEu7sr1n4xrA SX5HIrKsDhUR5Yym2PF+8xxmNRyIXgC+Q9dEj5PwQDmOUabL+OaPNCxm1rwKoIZE yl/lHX1RXKUiK3aNlHY+ZozyVNooCwPKWRiDE4TrzJT6EcL6VqgKKTIQEIdtKWfB s/eBWz61JY5nP7EE2+cNlflPWXzRPfszE5cXT9UNYoOJdC4BSSMpF79uOdfpc8OZ b12SaJzskbBShCfBilvny27tAt3X6UpUry/N+fCo5zamuhKCHHpSKFwVEl0ezFPo 0NXfT9IifGy9IQ== -----END CERTIFICATE-----Generated at Tue Jul 29 14:51:24 2025 by rpki-client