$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/80/4984df-6db2-4e0a-91f8-bf05acc82bd1/1/CoH-kFn2ggvBitWALy8fynfSVLc.mft File: CoH-kFn2ggvBitWALy8fynfSVLc.mft (raw, json) Hash identifier: 7R4WI1LhnItrWQ9wiid2fDSClgERi//LLvUBpxDAQ+E= Subject key identifier: 71:4B:46:41:5E:0E:27:3B:23:DE:9A:91:47:1F:AD:3A:9D:CD:5B:82 Authority key identifier: 0A:81:FE:90:59:F6:82:0B:C1:8A:D5:80:2F:2F:1F:CA:77:D2:54:B7 Certificate issuer: /CN=0a81fe9059f6820bc18ad5802f2f1fca77d254b7 Certificate serial: 0198308157B1D57D626447C419F9928E1A0E Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/CoH-kFn2ggvBitWALy8fynfSVLc.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/80/4984df-6db2-4e0a-91f8-bf05acc82bd1/1/CoH-kFn2ggvBitWALy8fynfSVLc.mft Manifest number: 0955 Signing time: Tue 22 Jul 2025 05:00:39 +0000 Manifest this update: Tue 22 Jul 2025 05:00:39 +0000 Manifest next update: Wed 23 Jul 2025 05:00:39 +0000 Files and hashes: 1: 31z7eSu8--35kebgOlCIABBeVf8.roa (hash: Bo6lIvIlV0RX6xhodzhO7tuvgscKOLMBcfTJSKlUYZw=) 2: 7pPLJaN3OTQBK8i-P4GOQNKJPho.roa (hash: HpLQLLrJKx/bS+zdiKUm5TCX+jRSuh5jVP1YSt/MOZY=) 3: CoH-kFn2ggvBitWALy8fynfSVLc.crl (hash: vE5pPGMFKYwiRSyIAEZ8tGiqI9NdOVcIiH5EHAjZURo=) 4: EacbpO8P-LkG-h50-C35fVYJXyI.roa (hash: btUaf5jDz02025fLzDlihBUOmr88cX2MxuDiHPb5dc4=) 5: FstRBv2kO53NDHW81Q9Mg07SWg4.roa (hash: +uStvYqgj5hn3d6BL0rwAnmTzIsGb1x7W+G4jAHTkdA=) 6: Gf8Y2t4y9XW51teYl9-IOJM-QkE.roa (hash: JzLxoz0gWXWBbhQLZinkEP2bb0OKmAdUFJyyBJ71KUI=) 7: N0ylFt5LVYNjTI-_TsSgO84trzU.roa (hash: FGN5RCpPLee+DVEx92LqF5VUyDDoLbxxrafkYHnOVZg=) 8: PEEbtcraLxJZAPZLAW5H_KDLDwQ.roa (hash: wU0HPJ884+fnbW1G1BaCynti9gWD3Sn+0YrIsJUp3ns=) 9: hLdZE5q1FOXSO44ZofCjRXN9z7I.roa (hash: CmOCZv7BugezIWG5ZPHeIaee5S3CP9UP9zRJfwRzazg=) 10: i1bI7bZVKfcJ9vCnWPYEzcCSqOc.roa (hash: I9SME80ARJLDqvqmW5BBXCvNlxHc4Su4PKuf6AZPdG4=) 11: n_d7GjbZ9YbYK045nkHL_lX76pM.roa (hash: L6McSAJwh8T7ZY3ArgurepjkJRDGFkS06sAchDylLyc=) 12: pW-Kl5UPWqu6KG3_J4t1h52HuR0.roa (hash: 0HOBimxzzdToQy38vYlAJbGZVaBtPNrg0qioOLxF/+Q=) 13: tlqKEYYvFMWYK-JPntFn1nyKI1U.roa (hash: /wIoPxgkbhHCyNQ8NB2J0bNqG5fb1wxitY8EONuXMt0=) 14: yFPiywRMEHaITt3TRPzJux8bzAU.roa (hash: WnTskmfJ1KLR7sA0SYoAyMqXx6u45IJAhh3f7ztydOk=) Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/80/4984df-6db2-4e0a-91f8-bf05acc82bd1/1/CoH-kFn2ggvBitWALy8fynfSVLc.crl rsync://rpki.ripe.net/repository/DEFAULT/80/4984df-6db2-4e0a-91f8-bf05acc82bd1/1/CoH-kFn2ggvBitWALy8fynfSVLc.mft rsync://rpki.ripe.net/repository/DEFAULT/CoH-kFn2ggvBitWALy8fynfSVLc.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Wed 23 Jul 2025 05:00:39 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:98:30:81:57:b1:d5:7d:62:64:47:c4:19:f9:92:8e:1a:0e Signature Algorithm: sha256WithRSAEncryption Issuer: CN=0a81fe9059f6820bc18ad5802f2f1fca77d254b7 Validity Not Before: Jul 22 05:00:39 2025 GMT Not After : Jul 23 05:00:39 2025 GMT Subject: CN=714b46415e0e273b23de9a91471fad3a9dcd5b82 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:a0:40:85:3a:6d:9d:c1:1a:d9:8c:1d:cd:12:e1: 57:e4:e3:fb:47:d4:5e:78:6b:2b:79:ca:d3:27:df: a2:25:e6:5f:d9:3e:a4:96:dc:70:7e:30:fc:a0:7a: 8e:99:75:d6:00:8b:64:ff:41:d8:02:2c:62:52:c0: 5f:67:f1:ca:49:3e:c8:91:04:18:f6:45:74:67:ad: 92:34:3c:bb:44:11:90:ec:c8:f0:1d:d2:de:ea:84: bb:6b:cd:77:d0:4b:5b:ab:85:fc:d9:04:8c:c0:62: d8:ce:7c:2c:e1:d9:f3:23:19:64:09:28:a3:e1:68: e4:27:a4:8b:0f:e9:5c:0b:29:bd:ec:50:53:34:e9: 69:85:3a:dc:e5:f2:aa:3d:08:db:07:82:71:68:a2: a8:0d:9b:e4:99:69:76:9a:af:d5:cc:b0:aa:19:82: 32:2a:27:bb:c3:cb:1f:9b:83:44:ab:66:39:01:0f: f0:50:38:1d:8e:f3:b7:77:c0:b9:95:18:30:de:0d: a6:6c:56:7b:6c:dc:88:b7:13:05:2d:9d:35:a2:74: 6d:33:b8:10:dc:7d:c6:03:cc:a5:cc:9a:f2:20:e4: b3:9e:a2:78:e2:5a:a2:2e:a8:9f:38:99:92:ae:dc: 8a:b2:ab:be:52:82:c3:17:71:70:a0:c2:08:a2:da: 96:fd Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 71:4B:46:41:5E:0E:27:3B:23:DE:9A:91:47:1F:AD:3A:9D:CD:5B:82 X509v3 Authority Key Identifier: keyid:0A:81:FE:90:59:F6:82:0B:C1:8A:D5:80:2F:2F:1F:CA:77:D2:54:B7 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/CoH-kFn2ggvBitWALy8fynfSVLc.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/80/4984df-6db2-4e0a-91f8-bf05acc82bd1/1/CoH-kFn2ggvBitWALy8fynfSVLc.mft X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/80/4984df-6db2-4e0a-91f8-bf05acc82bd1/1/CoH-kFn2ggvBitWALy8fynfSVLc.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 1e:69:73:d8:69:06:a4:44:cd:3f:8d:f8:c0:fb:72:a3:ff:d8: 8c:fb:a6:e7:84:fc:f3:23:91:7e:e0:0f:5c:6e:26:a8:92:9d: 4a:4e:6b:99:79:ee:56:d1:15:5d:c3:b9:59:df:fa:41:fa:10: 2c:aa:6e:d3:3e:6c:f2:6e:e9:c4:97:61:0c:63:2a:6a:f5:26: 6a:95:c9:2d:d7:4b:77:2b:b3:7b:91:60:c2:62:f7:e4:88:0d: 34:cf:23:af:de:e4:6f:42:08:fc:1f:3f:89:bb:d1:a8:90:86: 0c:80:48:25:4a:b7:46:b3:8b:d9:14:05:a6:b9:e8:a8:4f:21: 05:03:7a:be:1c:6f:cf:4f:3d:24:99:d3:f2:5e:8f:80:23:76: 13:30:b9:aa:62:7e:b5:62:23:61:54:9e:80:6e:83:98:07:df: 9b:11:57:e8:1b:33:83:a1:e2:78:e4:a2:9b:b8:3d:e4:27:27: f1:60:10:9e:c9:e3:a8:01:74:7e:5f:91:54:56:a7:a0:2c:ee: fd:a8:c0:a6:1b:19:1e:78:9a:28:6d:aa:be:68:aa:f8:99:17: 0c:10:7b:90:71:25:6f:f6:30:05:21:bd:25:4b:58:93:12:28: 8f:85:2e:1c:b6:ca:59:37:ee:e7:9a:70:81:c4:fd:29:97:95: bc:19:5d:2c -----BEGIN CERTIFICATE----- MIIFFjCCA/6gAwIBAgISAZgwgVex1X1iZEfEGfmSjhoOMA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKDBhODFmZTkwNTlmNjgyMGJjMThhZDU4MDJmMmYxZmNhNzdk MjU0YjcwHhcNMjUwNzIyMDUwMDM5WhcNMjUwNzIzMDUwMDM5WjAzMTEwLwYDVQQD Eyg3MTRiNDY0MTVlMGUyNzNiMjNkZTlhOTE0NzFmYWQzYTlkY2Q1YjgyMIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAoECFOm2dwRrZjB3NEuFX5OP7R9Re eGsrecrTJ9+iJeZf2T6kltxwfjD8oHqOmXXWAItk/0HYAixiUsBfZ/HKST7IkQQY 9kV0Z62SNDy7RBGQ7MjwHdLe6oS7a8130Etbq4X82QSMwGLYznws4dnzIxlkCSij 4WjkJ6SLD+lcCym97FBTNOlphTrc5fKqPQjbB4JxaKKoDZvkmWl2mq/VzLCqGYIy Kie7w8sfm4NEq2Y5AQ/wUDgdjvO3d8C5lRgw3g2mbFZ7bNyItxMFLZ01onRtM7gQ 3H3GA8ylzJryIOSznqJ44lqiLqifOJmSrtyKsqu+UoLDF3FwoMIIotqW/QIDAQAB o4ICIjCCAh4wHQYDVR0OBBYEFHFLRkFeDic7I96akUcfrTqdzVuCMB8GA1UdIwQY MBaAFAqB/pBZ9oILwYrVgC8vH8p30lS3MA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvQ29ILWtGbjJnZ3ZCaXRXQUx5OGZ5bmZTVkxjLmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC84MC80OTg0ZGYtNmRiMi00ZTBhLTkxZjgt YmYwNWFjYzgyYmQxLzEvQ29ILWtGbjJnZ3ZCaXRXQUx5OGZ5bmZTVkxjLm1mdDCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC84MC80OTg0ZGYtNmRiMi00ZTBhLTkxZjgtYmYwNWFjYzgyYmQx LzEvQ29ILWtGbjJnZ3ZCaXRXQUx5OGZ5bmZTVkxjLmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAHmlz2GkG pETNP434wPtyo//YjPum54T88yORfuAPXG4mqJKdSk5rmXnuVtEVXcO5Wd/6QfoQ LKpu0z5s8m7pxJdhDGMqavUmapXJLddLdyuze5FgwmL35IgNNM8jr97kb0II/B8/ ibvRqJCGDIBIJUq3RrOL2RQFprnoqE8hBQN6vhxvz089JJnT8l6PgCN2EzC5qmJ+ tWIjYVSegG6DmAffmxFX6Bszg6HieOSim7g95Ccn8WAQnsnjqAF0fl+RVFanoCzu /ajAphsZHniaKG2qvmiq+JkXDBB7kHElb/YwBSG9JUtYkxIoj4UuHLbKWTfu55pw gcT9KZeVvBldLA== -----END CERTIFICATE-----Generated at Tue Jul 22 11:14:51 2025 by rpki-client