$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/89/b4e503-574b-4565-9217-c511a3e912b6/1/5Mhto_SDJGUY02gDS8hhE5BqVaM.mft File: 5Mhto_SDJGUY02gDS8hhE5BqVaM.mft (raw, json) Hash identifier: 5zH3wuS93e3Q2K9zs/FnMXqPvZtWOJmSSufy8bTQcFg= Subject key identifier: A5:26:D0:DF:00:5C:65:DD:22:04:A3:94:98:1C:3B:49:0E:2B:09:F5 Authority key identifier: E4:C8:6D:A3:F4:83:24:65:18:D3:68:03:4B:C8:61:13:90:6A:55:A3 Certificate issuer: /CN=e4c86da3f483246518d368034bc86113906a55a3 Certificate serial: 0198342875F5CDBA7CDD87BC6EBC55A08FF6 Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/5Mhto_SDJGUY02gDS8hhE5BqVaM.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/89/b4e503-574b-4565-9217-c511a3e912b6/1/5Mhto_SDJGUY02gDS8hhE5BqVaM.mft Manifest number: 1611 Signing time: Tue 22 Jul 2025 22:02:03 +0000 Manifest this update: Tue 22 Jul 2025 22:02:03 +0000 Manifest next update: Wed 23 Jul 2025 22:02:03 +0000 Files and hashes: 1: 1-jFYDqV5WrpeNsOHp1PKwlz6vK4.roa (hash: EQ/MDCmgP9HHmI8iGVKEHtzDiwjBn6MBBAbffCHgFus=) 2: 17zq4O9ZOaslRNUTl0uAqqE-5Tc.roa (hash: RTTwh+9/JIL63yGwIwupKoi9TOp9B7nI78MQqZ3Mkrw=) 3: 5Mhto_SDJGUY02gDS8hhE5BqVaM.crl (hash: w8KkSXkPBkSpldT02aqpGESP2c7Ffi5ag0PZTOe0oZU=) 4: F3QlTHWWE9WSlkZMiQKc9st1Ou0.roa (hash: jTF2cakx1EB5lTOXhh5DpRR8jEQ1THUMX2LOgGpYREA=) 5: GSndTXoc8xWBynRYSOSImTWizWI.roa (hash: m9YHTlxhLFxSnEdQXQV56My1RhJzuPVGWH107hhpQxQ=) 6: HIkRjfiBhPQsBq4nmHslEaUbXqU.roa (hash: +cuBUldhMURKr2hQ6hWWWuuFWPU1bf85bijBHZak/qc=) 7: HyczfulBdiGXqNt52BO2o4LV9yU.roa (hash: x9uCEMOnws5vMXyPMhg97WPs5qUhjuF314Fl6KzRZMY=) 8: X1X7ZkF1pBeBlChTftAa-gl-dqU.roa (hash: Gtx9uFZigYKIeTJhv0iE8fOk8wT5aB+bybyaVuFnzWU=) 9: qG5K341kb3h2E7rZoTDgHUpgRn0.roa (hash: sSAY774ANoBJ8I/YSkHzgUMD3dk/efHXAZH71Rv6miI=) 10: vTdkc2WjRZI77wKyTBFTapZQVng.roa (hash: eGfs9oYTpFW6sbSe0FWlo+6uWtvtpVaDkVPiueIt1K8=) Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/89/b4e503-574b-4565-9217-c511a3e912b6/1/5Mhto_SDJGUY02gDS8hhE5BqVaM.crl rsync://rpki.ripe.net/repository/DEFAULT/89/b4e503-574b-4565-9217-c511a3e912b6/1/5Mhto_SDJGUY02gDS8hhE5BqVaM.mft rsync://rpki.ripe.net/repository/DEFAULT/5Mhto_SDJGUY02gDS8hhE5BqVaM.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Wed 23 Jul 2025 22:00:25 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:98:34:28:75:f5:cd:ba:7c:dd:87:bc:6e:bc:55:a0:8f:f6 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=e4c86da3f483246518d368034bc86113906a55a3 Validity Not Before: Jul 22 22:02:03 2025 GMT Not After : Jul 23 22:02:03 2025 GMT Subject: CN=a526d0df005c65dd2204a394981c3b490e2b09f5 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:b0:27:bb:92:46:6a:22:79:8f:54:4b:0c:9a:90: 15:9e:92:6b:e4:59:bb:33:b9:e0:5c:71:1c:c3:c1: fc:3e:b1:61:bc:dc:72:63:e8:f1:b2:c0:8e:3b:aa: a0:38:d5:06:3a:e0:e4:36:53:c5:2b:5a:3f:0a:83: 5a:4e:d1:28:f6:54:a2:4f:20:72:49:1c:4b:39:95: fa:1a:fb:e0:1b:bc:99:24:1d:4e:51:34:d7:9f:c0: 45:9f:12:8c:e9:77:99:81:01:b0:c5:d6:b4:60:07: 08:77:3d:9e:c0:95:b0:e9:d0:aa:75:c2:c8:fb:b8: 21:0e:aa:b8:4e:74:6c:49:4e:6c:f3:62:d2:f9:46: fe:89:6f:3b:71:81:86:cf:66:83:99:4a:18:0e:cd: a1:9c:c9:56:24:e4:76:4a:7c:01:2f:be:f6:e4:ae: cb:57:b1:c2:9f:2c:c4:33:0c:38:07:8a:2e:1d:bb: 26:40:41:bc:c4:43:09:24:7e:f4:9c:c9:21:1d:e9: d6:43:63:fb:d0:6b:36:a7:e8:27:91:00:fc:6c:6a: fa:94:99:1e:90:f1:04:34:05:a8:94:98:77:73:ac: fd:59:88:57:30:d0:b3:7b:81:e2:ae:24:a6:02:28: c8:13:5b:73:88:26:b7:f8:97:e4:0d:77:75:8b:a7: ae:ed Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: A5:26:D0:DF:00:5C:65:DD:22:04:A3:94:98:1C:3B:49:0E:2B:09:F5 X509v3 Authority Key Identifier: keyid:E4:C8:6D:A3:F4:83:24:65:18:D3:68:03:4B:C8:61:13:90:6A:55:A3 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/5Mhto_SDJGUY02gDS8hhE5BqVaM.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/89/b4e503-574b-4565-9217-c511a3e912b6/1/5Mhto_SDJGUY02gDS8hhE5BqVaM.mft X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/89/b4e503-574b-4565-9217-c511a3e912b6/1/5Mhto_SDJGUY02gDS8hhE5BqVaM.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 98:f3:80:b1:15:bc:7c:01:c2:0e:8e:fc:65:b4:a1:0a:f3:fc: 21:76:18:44:e7:d1:4d:49:f4:36:85:97:b8:55:f4:30:cd:99: 5f:01:81:b2:c5:2b:b1:d3:b3:f7:28:da:75:13:8f:02:b1:15: 86:60:f1:6a:b4:e1:f2:33:03:c1:5d:87:b8:d2:25:3a:1b:8f: ad:1a:27:fd:cf:6e:5a:ff:67:e7:84:24:58:1d:e9:61:63:00: f4:08:d4:f5:a5:49:ad:e9:07:27:90:66:b1:7e:86:65:64:b2: fa:81:67:a0:2a:ca:de:6e:27:54:98:51:46:4d:20:cc:92:fb: 5f:90:f3:40:48:3f:7b:8e:8d:3e:c5:f5:9f:e7:8b:30:30:2e: ff:ca:2a:b6:bb:8e:e0:4a:58:5f:67:db:57:3e:9b:7b:e5:e0: 44:14:de:4a:d8:14:e6:9f:82:cb:b0:a5:5b:f6:15:c8:95:ed: 91:04:bb:f4:f8:94:19:b7:ea:ee:84:19:9d:9e:1d:89:7c:7e: 9e:50:ca:8c:b9:5b:b4:a0:ce:d0:aa:76:fa:e5:1a:9f:54:07: 6c:dd:48:70:a1:a7:cd:72:81:8c:e7:27:3c:e0:57:bf:eb:82: 62:7e:b4:29:aa:56:e9:71:52:39:86:43:f1:33:1d:fc:93:00: 7b:73:be:79 -----BEGIN CERTIFICATE----- MIIFFjCCA/6gAwIBAgISAZg0KHX1zbp83Ye8brxVoI/2MA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKGU0Yzg2ZGEzZjQ4MzI0NjUxOGQzNjgwMzRiYzg2MTEzOTA2 YTU1YTMwHhcNMjUwNzIyMjIwMjAzWhcNMjUwNzIzMjIwMjAzWjAzMTEwLwYDVQQD EyhhNTI2ZDBkZjAwNWM2NWRkMjIwNGEzOTQ5ODFjM2I0OTBlMmIwOWY1MIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAsCe7kkZqInmPVEsMmpAVnpJr5Fm7 M7ngXHEcw8H8PrFhvNxyY+jxssCOO6qgONUGOuDkNlPFK1o/CoNaTtEo9lSiTyBy SRxLOZX6GvvgG7yZJB1OUTTXn8BFnxKM6XeZgQGwxda0YAcIdz2ewJWw6dCqdcLI +7ghDqq4TnRsSU5s82LS+Ub+iW87cYGGz2aDmUoYDs2hnMlWJOR2SnwBL7725K7L V7HCnyzEMww4B4ouHbsmQEG8xEMJJH70nMkhHenWQ2P70Gs2p+gnkQD8bGr6lJke kPEENAWolJh3c6z9WYhXMNCze4HiriSmAijIE1tziCa3+JfkDXd1i6eu7QIDAQAB o4ICIjCCAh4wHQYDVR0OBBYEFKUm0N8AXGXdIgSjlJgcO0kOKwn1MB8GA1UdIwQY MBaAFOTIbaP0gyRlGNNoA0vIYROQalWjMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvNU1odG9fU0RKR1VZMDJnRFM4aGhFNUJxVmFNLmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC84OS9iNGU1MDMtNTc0Yi00NTY1LTkyMTct YzUxMWEzZTkxMmI2LzEvNU1odG9fU0RKR1VZMDJnRFM4aGhFNUJxVmFNLm1mdDCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC84OS9iNGU1MDMtNTc0Yi00NTY1LTkyMTctYzUxMWEzZTkxMmI2 LzEvNU1odG9fU0RKR1VZMDJnRFM4aGhFNUJxVmFNLmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAmPOAsRW8 fAHCDo78ZbShCvP8IXYYROfRTUn0NoWXuFX0MM2ZXwGBssUrsdOz9yjadROPArEV hmDxarTh8jMDwV2HuNIlOhuPrRon/c9uWv9n54QkWB3pYWMA9AjU9aVJrekHJ5Bm sX6GZWSy+oFnoCrK3m4nVJhRRk0gzJL7X5DzQEg/e46NPsX1n+eLMDAu/8oqtruO 4EpYX2fbVz6be+XgRBTeStgU5p+Cy7ClW/YVyJXtkQS79PiUGbfq7oQZnZ4diXx+ nlDKjLlbtKDO0Kp2+uUan1QHbN1IcKGnzXKBjOcnPOBXv+uCYn60KapW6XFSOYZD 8TMd/JMAe3O+eQ== -----END CERTIFICATE-----Generated at Wed Jul 23 06:10:22 2025 by rpki-client