$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/7e/ce6ccb-25cf-4917-b3cd-3056af9a335e/1/q8jb5SCDrTNcnx_eYBbsi0kpMUA.mft File: q8jb5SCDrTNcnx_eYBbsi0kpMUA.mft (raw, json) Hash identifier: 1HpPhHrDTBIGZ+7lMwGhDQubcLQytbB4nnn3QIdxUhw= Subject key identifier: 59:1C:43:26:FC:67:C6:BA:6E:50:E7:18:03:D8:38:0E:09:17:2D:BD Authority key identifier: AB:C8:DB:E5:20:83:AD:33:5C:9F:1F:DE:60:16:EC:8B:49:29:31:40 Certificate issuer: /CN=abc8dbe52083ad335c9f1fde6016ec8b49293140 Certificate serial: 01984475F0A8E2E8060CCC24FAA5463E1536 Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/q8jb5SCDrTNcnx_eYBbsi0kpMUA.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/7e/ce6ccb-25cf-4917-b3cd-3056af9a335e/1/q8jb5SCDrTNcnx_eYBbsi0kpMUA.mft Manifest number: 1652 Signing time: Sat 26 Jul 2025 02:00:36 +0000 Manifest this update: Sat 26 Jul 2025 02:00:36 +0000 Manifest next update: Sun 27 Jul 2025 02:00:36 +0000 Files and hashes: 1: 3rSRd0RZU7FekSH23KpB4AjQvCA.roa (hash: dHJ5VK5jy4AG5zWMS9JzXCYfEPP9KtWlYIJ17BPZ8p4=) 2: 79SKiAPGItgSBiSdHsbiPNmxzdA.roa (hash: bp4Hzk1UysrE74qZJaWtC8IolTv/126MWUfJ4dgAP+w=) 3: 8CD_BDNohDu7BFPue0FAVtqeSKE.roa (hash: MBbBcYx0OZxz+xXv93fCUqPEHeogAGDOWRTI0SELjnU=) 4: DLGzg4PXXfMLLz9uU9Jb8GzjTYQ.roa (hash: UyDgyJqrwARZHVBt5A9PQUxwD+TJu3qnXyFQy1aEp9I=) 5: FmNEfzs-SRSfbomfiiNIeqQS1sk.roa (hash: DZqchwYxSvfrNSJm9BmQA3cTvM8eHMT7t5woC6TuhyE=) 6: Qdu0d9QLtNBsD5iH6QjOkHOjfR0.roa (hash: WIh4dCuUbUKwr5ezCX9dxWL5StxMpA6ugd95qMzqKA4=) 7: U3lA_e0y8319DjoZ7X8Ks2r2M7w.roa (hash: fqverKbNHsV3jVuR9y0WWha056JePZs0l3+H4zjSxfA=) 8: W4bkJ6IHGpMDnc-eERRMgLecaRY.roa (hash: f8DGWIOVKEtO1y7kX/yc0GrbmCyQ2M3bGkc6cPKnJfo=) 9: XWgY9IE5WPWEYKpZb_DdJSKgmNk.roa (hash: RjaBA1nT0ZNCp2uF/Bf1faWMk5+nUdGucIKvPd+4FJg=) 10: afCUdciEL8e1tl5gYWrtb0HNTsk.roa (hash: 5NoCDBuBZUGC39cg06n8OGy1uzMRcXZWmjT1H17s8qs=) 11: eeDfIlNHz-MS84Jn8ZaBvfv9TTY.roa (hash: Nuu5BDy0CuOnKoHwa87Nw4BNQ/P69UXEmPo5SaswqxY=) 12: ic4TzeBOLx46VAxZ0kBOyLnL-aA.roa (hash: o/eumNvuz+9CmmVOqXWqv98TZutXQn/8mhjgfl+DMUM=) 13: jEkIkDjyHf0Y5CHlkh_SAYrLMi8.roa (hash: nK+7va5r0DKn11vhjaj1KeeLmtO5MjFetghK5DI3nyo=) 14: k1o7H-5eEgCdvmr2Au7FXonmUIc.roa (hash: cPZnlWd1NF/fLPFMgOLyjHXmXf8GfrHrU0SBnmHDHvY=) 15: lSOxZN--Nv76VTwU3O8Fys07u2M.roa (hash: KF0YUVuZrHgrWuxvGjcknBz1cOoRQsrm28h1CM9VPOI=) 16: oRojqrF2upd4qpGF9qwuvKkB85M.roa (hash: rI1ZvEDD5nBz4EJV2sl7C1HlZDCYTwKf5IAxKcbibxk=) 17: q8jb5SCDrTNcnx_eYBbsi0kpMUA.crl (hash: BEBg8xS5DoDkNhpWNMNpH0nptgo3n3c2tri79YNGEE0=) 18: rbJzreDbHp60Zc3UJ6AODADth8g.roa (hash: BpjTDuP8RPY+luxryeSysWVMte9pS4i/E17bDx01jBk=) 19: rq4z53nTY235oXOYEJGf8J9hSBk.roa (hash: ALoDf8xPedv7a4y1Cobi6nNzEhORdIhw3weFRomPawE=) 20: wWbDK40S4dgNgIeoUbg-t_w6Qx0.roa (hash: SQUX4nOmlr/84KlBRvNtQfHH9k/9TOfWpMlz56zCIZQ=) Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/7e/ce6ccb-25cf-4917-b3cd-3056af9a335e/1/q8jb5SCDrTNcnx_eYBbsi0kpMUA.crl rsync://rpki.ripe.net/repository/DEFAULT/7e/ce6ccb-25cf-4917-b3cd-3056af9a335e/1/q8jb5SCDrTNcnx_eYBbsi0kpMUA.mft rsync://rpki.ripe.net/repository/DEFAULT/q8jb5SCDrTNcnx_eYBbsi0kpMUA.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Sun 27 Jul 2025 02:00:05 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:98:44:75:f0:a8:e2:e8:06:0c:cc:24:fa:a5:46:3e:15:36 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=abc8dbe52083ad335c9f1fde6016ec8b49293140 Validity Not Before: Jul 26 02:00:36 2025 GMT Not After : Jul 27 02:00:36 2025 GMT Subject: CN=591c4326fc67c6ba6e50e71803d8380e09172dbd Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:ef:70:93:20:f6:05:13:2f:dd:6a:d6:52:a0:c8: fb:4f:8e:5a:e3:57:ca:e5:30:24:bd:73:f6:50:6e: 62:81:8c:b2:89:25:e1:dc:af:15:ca:00:0a:cf:b3: e0:25:8a:e6:da:2f:02:64:17:a6:b8:08:6f:47:18: 53:c7:3f:03:52:9b:4e:d3:2d:64:be:f4:c0:66:70: 91:0e:f3:b9:1e:d5:bb:54:7d:94:c5:bb:28:ce:97: df:62:61:8a:ae:31:ad:38:9b:a9:23:98:44:ca:2a: 84:b3:d3:b3:b0:5c:b1:ab:e3:7b:24:6f:1a:d2:ef: e8:e0:59:f1:b5:87:4e:24:e3:ef:f4:7d:87:da:cf: a1:d4:21:2f:a3:4d:c1:b6:9e:93:08:6b:b3:0f:69: 6b:73:28:fb:0e:23:50:77:06:4c:fc:ce:e7:c6:35: 2e:11:9b:b6:2e:c2:67:87:56:8a:56:ad:ff:e1:42: cb:36:a7:10:37:7a:a2:4f:2d:d0:ae:14:5c:72:33: 69:7c:db:b1:6d:b6:e0:69:4f:4e:62:f0:22:eb:20: e2:c7:8d:a1:69:aa:81:0d:63:b6:33:09:c2:27:69: ab:69:b7:78:de:78:9d:69:a9:67:a2:50:79:6e:c5: fc:e0:99:5b:45:5a:92:12:81:04:f7:40:b7:2a:80: ea:0d Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 59:1C:43:26:FC:67:C6:BA:6E:50:E7:18:03:D8:38:0E:09:17:2D:BD X509v3 Authority Key Identifier: keyid:AB:C8:DB:E5:20:83:AD:33:5C:9F:1F:DE:60:16:EC:8B:49:29:31:40 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/q8jb5SCDrTNcnx_eYBbsi0kpMUA.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/7e/ce6ccb-25cf-4917-b3cd-3056af9a335e/1/q8jb5SCDrTNcnx_eYBbsi0kpMUA.mft X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/7e/ce6ccb-25cf-4917-b3cd-3056af9a335e/1/q8jb5SCDrTNcnx_eYBbsi0kpMUA.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 1d:09:b6:5f:3f:86:41:8d:c0:86:58:a9:f0:d8:5d:33:ec:8b: 0c:cc:38:da:56:d7:b0:77:bc:a5:52:ae:ec:94:bf:10:c6:ea: e9:25:31:7f:a8:58:d1:ed:4e:e0:bc:40:20:9d:fa:9e:70:63: 52:e5:35:de:19:9e:f0:e4:40:b7:7f:92:0c:38:53:c3:0a:98: 26:29:99:90:6f:56:70:f4:0f:04:56:90:a2:3b:fa:d9:e6:48: 0e:12:1f:fb:6a:8b:79:7f:ff:47:ca:be:02:87:7e:57:97:28: 2e:46:fb:a4:19:fb:e2:05:85:48:55:8b:bb:9a:1c:33:d3:e1: 42:32:c5:dd:f9:95:f1:1c:94:aa:da:a5:44:c4:08:8f:6b:bf: db:18:3b:c7:9f:5b:f6:7b:1e:9e:21:74:73:a1:d7:9e:5f:ef: 5b:f1:be:33:2b:e6:3a:13:ff:e7:e6:1e:64:37:a7:5d:eb:ec: 23:68:10:65:b7:09:8b:ea:4c:39:7b:a0:30:f8:41:e1:1d:d3: a3:2a:45:d4:00:33:73:b1:2d:a5:51:9d:1c:0e:8b:82:fd:e2: 92:b4:22:2c:21:30:1d:0a:d1:b4:28:17:51:d2:59:bd:70:28: 67:73:51:01:70:6a:db:92:14:f1:6d:51:48:75:4d:ad:02:3d: 9c:ed:b6:5a -----BEGIN CERTIFICATE----- MIIFFjCCA/6gAwIBAgISAZhEdfCo4ugGDMwk+qVGPhU2MA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKGFiYzhkYmU1MjA4M2FkMzM1YzlmMWZkZTYwMTZlYzhiNDky OTMxNDAwHhcNMjUwNzI2MDIwMDM2WhcNMjUwNzI3MDIwMDM2WjAzMTEwLwYDVQQD Eyg1OTFjNDMyNmZjNjdjNmJhNmU1MGU3MTgwM2Q4MzgwZTA5MTcyZGJkMIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEA73CTIPYFEy/datZSoMj7T45a41fK 5TAkvXP2UG5igYyyiSXh3K8VygAKz7PgJYrm2i8CZBemuAhvRxhTxz8DUptO0y1k vvTAZnCRDvO5HtW7VH2UxbsozpffYmGKrjGtOJupI5hEyiqEs9OzsFyxq+N7JG8a 0u/o4FnxtYdOJOPv9H2H2s+h1CEvo03Btp6TCGuzD2lrcyj7DiNQdwZM/M7nxjUu EZu2LsJnh1aKVq3/4ULLNqcQN3qiTy3QrhRccjNpfNuxbbbgaU9OYvAi6yDix42h aaqBDWO2MwnCJ2mrabd43nidaalnolB5bsX84JlbRVqSEoEE90C3KoDqDQIDAQAB o4ICIjCCAh4wHQYDVR0OBBYEFFkcQyb8Z8a6blDnGAPYOA4JFy29MB8GA1UdIwQY MBaAFKvI2+Ugg60zXJ8f3mAW7ItJKTFAMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvcThqYjVTQ0RyVE5jbnhfZVlCYnNpMGtwTVVBLmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC83ZS9jZTZjY2ItMjVjZi00OTE3LWIzY2Qt MzA1NmFmOWEzMzVlLzEvcThqYjVTQ0RyVE5jbnhfZVlCYnNpMGtwTVVBLm1mdDCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC83ZS9jZTZjY2ItMjVjZi00OTE3LWIzY2QtMzA1NmFmOWEzMzVl LzEvcThqYjVTQ0RyVE5jbnhfZVlCYnNpMGtwTVVBLmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAHQm2Xz+G QY3Ahlip8NhdM+yLDMw42lbXsHe8pVKu7JS/EMbq6SUxf6hY0e1O4LxAIJ36nnBj UuU13hme8ORAt3+SDDhTwwqYJimZkG9WcPQPBFaQojv62eZIDhIf+2qLeX//R8q+ Aod+V5coLkb7pBn74gWFSFWLu5ocM9PhQjLF3fmV8RyUqtqlRMQIj2u/2xg7x59b 9nseniF0c6HXnl/vW/G+MyvmOhP/5+YeZDenXevsI2gQZbcJi+pMOXugMPhB4R3T oypF1AAzc7EtpVGdHA6Lgv3ikrQiLCEwHQrRtCgXUdJZvXAoZ3NRAXBq25IU8W1R SHVNrQI9nO22Wg== -----END CERTIFICATE-----Generated at Sat Jul 26 12:04:53 2025 by rpki-client