$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/7a/be4909-745f-4d0c-bfab-dee76860013d/1/KX75vv0afiTAzJcpmH_AZda3Ey8.mft File: KX75vv0afiTAzJcpmH_AZda3Ey8.mft (raw, json) Hash identifier: +6D8WxFYP1r7e3fgo9O6483NbhAeJHpZTXegdajrxKA= Subject key identifier: 8B:EB:75:6E:DD:83:61:5A:86:53:08:E4:92:19:2A:57:FF:59:3C:1A Authority key identifier: 29:7E:F9:BE:FD:1A:7E:24:C0:CC:97:29:98:7F:C0:65:D6:B7:13:2F Certificate issuer: /CN=297ef9befd1a7e24c0cc9729987fc065d6b7132f Certificate serial: 01982B2484C398C8B2B8B8BCC914B4BC714C Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/KX75vv0afiTAzJcpmH_AZda3Ey8.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/7a/be4909-745f-4d0c-bfab-dee76860013d/1/KX75vv0afiTAzJcpmH_AZda3Ey8.mft Manifest number: 059C Signing time: Mon 21 Jul 2025 04:01:10 +0000 Manifest this update: Mon 21 Jul 2025 04:01:10 +0000 Manifest next update: Tue 22 Jul 2025 04:01:10 +0000 Files and hashes: 1: 1-G8rweCnb_uS4SmYOIMfQmoFCqk.roa (hash: rn4NC2hKBojnoZsIWiPOwTWoFmiWY487RZQYYJO9cdA=) 2: 1-d_4NnGRWiLNxMtEHTI7liKr9UI.roa (hash: CvRaWUsgFRo0d4EaYRA4VrTo+xf/BVknD8qlBjzpT68=) 3: DC8CWnfWr0kQCJUXXP37JYlG3bs.roa (hash: hIJ82Bht26+DJ40TdTwMmY9/6cclogWpDkPQZ7x1T3M=) 4: EE_wtY_jOWFrr7fkMKsqtDjLk_M.roa (hash: bPRNvFCrauDbjeBVD0prKiUlLOERe0dc5QDfoGRuOTo=) 5: KX75vv0afiTAzJcpmH_AZda3Ey8.crl (hash: xs9lkMxmUYxTJ0fPpy6GLlupZ64e7YpPqBM/qnIlD6U=) 6: Ow6xOfingvBCtHoNkaHGobxC5yY.roa (hash: NhFSRa+v/S1zW+iyQy+gxANBr6Bnqty2hhUOwum97Kc=) 7: Pno1SFxbk0xVeOW-JPd8JX-O0mk.roa (hash: fmuEF5lkwyellcCtxWvoihI9gke5w70i2mKnnNxM4gQ=) 8: QChegxRLNPsgM4aZ3Xr6VhdLIWc.roa (hash: bRcFRsu1/yeWRw6CVou2c0H6TdcYO6U68qWIBkemHjQ=) 9: V0aRJCOG2a9twiI1SK4HfmRChII.roa (hash: xPnpahcVRHcbxfnhq7t0F7epLdK24cqdjPN51uTlfmE=) 10: cBKQe1No6Wf-B3FmLfpXGNcc_I8.roa (hash: Xi+GnpcIV9drKvTmQHNYIPB6evWNG3aHkh9CmwgJtg0=) 11: hKRvEPMVo2ukUILwmPta9_N3Dm4.roa (hash: qTgr935WkDSGh45Ek2R2g/eV9pnfadByRLqS2Wh5HdI=) 12: nendNgfVYn3Er_Jx5FR9_K0MhAI.roa (hash: Zo4nTYqJK3HMiwWvWWXaOyWIMzLwcZzzdn6p7ZMhRf0=) 13: w-kia0Dcl-D0S1cF7F9c-RlG748.roa (hash: TI6//HLATO/7mdIMcI1NIKH9FQsgJWUg8coUzNZcuE0=) 14: ws65NnH7cc5LX3ZtkutF5lwgOTo.roa (hash: 3tggzgIge6V0BsIfvy+BLekh4WUZ+47Y39glMLBsTTE=) Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/7a/be4909-745f-4d0c-bfab-dee76860013d/1/KX75vv0afiTAzJcpmH_AZda3Ey8.crl rsync://rpki.ripe.net/repository/DEFAULT/7a/be4909-745f-4d0c-bfab-dee76860013d/1/KX75vv0afiTAzJcpmH_AZda3Ey8.mft rsync://rpki.ripe.net/repository/DEFAULT/KX75vv0afiTAzJcpmH_AZda3Ey8.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Mon 21 Jul 2025 22:00:25 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:98:2b:24:84:c3:98:c8:b2:b8:b8:bc:c9:14:b4:bc:71:4c Signature Algorithm: sha256WithRSAEncryption Issuer: CN=297ef9befd1a7e24c0cc9729987fc065d6b7132f Validity Not Before: Jul 21 04:01:10 2025 GMT Not After : Jul 22 04:01:10 2025 GMT Subject: CN=8beb756edd83615a865308e492192a57ff593c1a Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:b9:cb:8a:9c:4d:fd:fc:ed:69:1f:cf:14:a2:5b: 84:b2:92:01:58:a9:aa:43:68:8a:95:89:9b:fa:1a: 78:c1:80:0b:64:c4:09:e4:4f:51:27:a8:a8:ba:ab: f7:a6:a4:9d:ac:b5:17:34:8a:91:b8:de:be:e4:59: 33:29:88:7b:1d:db:1d:a9:2a:51:19:63:1c:94:b6: ad:ac:ba:36:96:0d:58:c3:ef:b0:00:27:27:b0:c3: 9f:d2:31:b6:eb:d1:14:a2:c7:de:a7:a2:90:8c:09: fc:82:b7:86:c5:dc:a2:7e:30:4a:bc:ec:03:6c:de: 0b:6f:0a:52:01:fd:40:3d:03:62:d9:da:14:cc:b3: 14:5a:e7:19:39:75:cb:b8:5b:48:bc:bf:db:94:e4: 81:bf:e5:fe:79:e9:2a:25:c7:31:d3:67:bb:0b:ad: 7e:98:75:35:d7:41:04:62:b2:a4:16:09:b1:ce:d0: ef:8e:aa:dc:ee:27:85:c2:e2:ff:10:cb:da:f1:84: a5:61:b7:06:3e:ee:9b:8e:59:53:7e:49:51:17:db: e8:03:ac:30:a0:df:3e:b9:77:04:33:17:14:56:ab: a4:9a:75:90:36:29:fb:95:ea:54:7a:74:d3:90:a6: 8e:25:98:d7:17:b4:6a:4b:ca:00:f1:41:45:3a:e4: 78:33 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 8B:EB:75:6E:DD:83:61:5A:86:53:08:E4:92:19:2A:57:FF:59:3C:1A X509v3 Authority Key Identifier: keyid:29:7E:F9:BE:FD:1A:7E:24:C0:CC:97:29:98:7F:C0:65:D6:B7:13:2F X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/KX75vv0afiTAzJcpmH_AZda3Ey8.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/7a/be4909-745f-4d0c-bfab-dee76860013d/1/KX75vv0afiTAzJcpmH_AZda3Ey8.mft X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/7a/be4909-745f-4d0c-bfab-dee76860013d/1/KX75vv0afiTAzJcpmH_AZda3Ey8.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 51:3e:5f:0d:49:d9:a7:96:be:6c:5c:3e:d2:18:01:e4:08:7d: a9:db:2d:40:9f:24:af:be:d9:74:0a:e3:91:11:f8:0c:73:ff: 94:ee:b1:e7:ac:2e:e5:1f:bd:9e:cb:62:9e:5a:8e:24:3f:93: b0:aa:00:61:ac:67:2a:bc:e9:21:46:4e:8d:4d:d3:e3:19:10: fa:64:a9:b3:bf:3a:06:8d:12:cb:39:85:ea:15:be:1c:50:b9: ef:fd:c0:5f:9f:e7:06:d8:59:f8:15:d4:0c:a5:f2:cd:2c:54: 2b:80:43:03:59:d6:21:d3:f8:f9:b7:ee:14:6e:01:e3:af:43: 37:f5:86:b5:be:9d:3d:5a:f6:10:f9:bd:5e:4e:ec:78:6b:61: ab:89:69:93:40:c4:84:01:4d:86:62:c9:3b:9f:4a:db:f9:0d: b9:be:e6:b4:6f:fe:90:3b:65:a6:aa:8e:85:a6:2f:ae:15:bd: 8a:62:ce:54:14:6e:0e:c0:40:4a:c7:cd:16:5f:f2:a2:02:0b: 3d:07:6e:c1:c7:02:1f:cd:8a:ba:98:b5:ab:b7:9f:e7:8b:60: eb:5b:55:42:2e:57:d4:5d:66:dc:3d:01:93:7b:70:27:01:55: 61:e7:37:ea:b7:10:d4:f6:c3:74:a6:e0:c9:fe:15:b7:97:d8: 4c:fa:b3:8f -----BEGIN CERTIFICATE----- MIIFFjCCA/6gAwIBAgISAZgrJITDmMiyuLi8yRS0vHFMMA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKDI5N2VmOWJlZmQxYTdlMjRjMGNjOTcyOTk4N2ZjMDY1ZDZi NzEzMmYwHhcNMjUwNzIxMDQwMTEwWhcNMjUwNzIyMDQwMTEwWjAzMTEwLwYDVQQD Eyg4YmViNzU2ZWRkODM2MTVhODY1MzA4ZTQ5MjE5MmE1N2ZmNTkzYzFhMIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAucuKnE39/O1pH88UoluEspIBWKmq Q2iKlYmb+hp4wYALZMQJ5E9RJ6iouqv3pqSdrLUXNIqRuN6+5FkzKYh7HdsdqSpR GWMclLatrLo2lg1Yw++wACcnsMOf0jG269EUosfep6KQjAn8greGxdyifjBKvOwD bN4LbwpSAf1APQNi2doUzLMUWucZOXXLuFtIvL/blOSBv+X+eekqJccx02e7C61+ mHU110EEYrKkFgmxztDvjqrc7ieFwuL/EMva8YSlYbcGPu6bjllTfklRF9voA6ww oN8+uXcEMxcUVqukmnWQNin7lepUenTTkKaOJZjXF7RqS8oA8UFFOuR4MwIDAQAB o4ICIjCCAh4wHQYDVR0OBBYEFIvrdW7dg2FahlMI5JIZKlf/WTwaMB8GA1UdIwQY MBaAFCl++b79Gn4kwMyXKZh/wGXWtxMvMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvS1g3NXZ2MGFmaVRBekpjcG1IX0FaZGEzRXk4LmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC83YS9iZTQ5MDktNzQ1Zi00ZDBjLWJmYWIt ZGVlNzY4NjAwMTNkLzEvS1g3NXZ2MGFmaVRBekpjcG1IX0FaZGEzRXk4Lm1mdDCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC83YS9iZTQ5MDktNzQ1Zi00ZDBjLWJmYWItZGVlNzY4NjAwMTNk LzEvS1g3NXZ2MGFmaVRBekpjcG1IX0FaZGEzRXk4LmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAUT5fDUnZ p5a+bFw+0hgB5Ah9qdstQJ8kr77ZdArjkRH4DHP/lO6x56wu5R+9nstinlqOJD+T sKoAYaxnKrzpIUZOjU3T4xkQ+mSps786Bo0SyzmF6hW+HFC57/3AX5/nBthZ+BXU DKXyzSxUK4BDA1nWIdP4+bfuFG4B469DN/WGtb6dPVr2EPm9Xk7seGthq4lpk0DE hAFNhmLJO59K2/kNub7mtG/+kDtlpqqOhaYvrhW9imLOVBRuDsBASsfNFl/yogIL PQduwccCH82Kupi1q7ef54tg61tVQi5X1F1m3D0Bk3twJwFVYec36rcQ1PbDdKbg yf4Vt5fYTPqzjw== -----END CERTIFICATE-----Generated at Mon Jul 21 07:24:43 2025 by rpki-client