$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/8b/f07f8d-9df0-49c6-b2f0-aa9d691811e7/1/h3itgWjgnPktTgSYJX-OnOq_BpI.mft File: h3itgWjgnPktTgSYJX-OnOq_BpI.mft (raw, json) Hash identifier: omohvlf3go/yA142xvGprWum/wLlKpANHXjylK0Kngc= Subject key identifier: 2F:CF:FC:FF:CB:3D:49:3B:BF:0C:08:A7:B3:95:68:0D:91:60:DD:0D Authority key identifier: 87:78:AD:81:68:E0:9C:F9:2D:4E:04:98:25:7F:8E:9C:EA:BF:06:92 Certificate issuer: /CN=8778ad8168e09cf92d4e0498257f8e9ceabf0692 Certificate serial: 019838040715764FDB486AC5C3A579FFFB0D Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/h3itgWjgnPktTgSYJX-OnOq_BpI.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/8b/f07f8d-9df0-49c6-b2f0-aa9d691811e7/1/h3itgWjgnPktTgSYJX-OnOq_BpI.mft Manifest number: 1615 Signing time: Wed 23 Jul 2025 16:00:44 +0000 Manifest this update: Wed 23 Jul 2025 16:00:44 +0000 Manifest next update: Thu 24 Jul 2025 16:00:44 +0000 Files and hashes: 1: 3VQFHIG_0NRiYGSMTzNDYelPmMs.roa (hash: T8N7lYcGBn0m7uBQBcevnqsWbvysQD6cxVHO1RDwUvg=) 2: 41kwTSa8H9b9pjrkUzwf85FQ470.roa (hash: 6DgsyUX2uyntOPFl8yDMIgTXXXs0mzyQ219673BzCzU=) 3: CdQNI5gcW0_1cf24cLvP-tL_omw.roa (hash: fyArCRfx7SbzhmzmpSevkzJflw0c7SkqK2TimwbjqzM=) 4: RXJMzhMtehSuCCi6uqljNw1_L-s.roa (hash: Xot9S/JUju+/cZl9baS7ZUR4Rh18U5S5qk4hiX6txpg=) 5: TpqMtUwJukfz53BZIUdbM-kP9dU.roa (hash: sJ+1FquCHUKBx1oFow8K9ca95AgoJ61IjnusPLlcDN8=) 6: WEKuOaRTTX2rTln9asflqP9Y2Os.roa (hash: EcqtEEKcbvmbmPvboEcXGauHM+e7HHmS4JSP0Le2t4o=) 7: XmOvv05xULfAWuDqrX7juNO-0qI.roa (hash: eJeMTOSpJLyqSZNQmSL2OZUvlINOSkmPnV9aTneLjHg=) 8: Xzib8AfEYqY2cHmuuM-ww_w5sW0.roa (hash: 6XHRFIs5VNl1aw2+x8Rz4IQniQIfYw9CyiplPPtk5bE=) 9: aMv6gEqWxpGKwwWm6t5nV_iaM3Q.roa (hash: +a48j1hsLG2vzEIY2MRVBswlr1+jm51V+Dk+4EhL/9Y=) 10: h3itgWjgnPktTgSYJX-OnOq_BpI.crl (hash: eRYZhB/HHn6YweHwG+zrX9v9xu8x329ykHOI0asgUC8=) 11: jF6aKXBNyHTawjaz9GVexS6_Vps.roa (hash: FiDTfOMoZak8gOhtJT/8yhL0tIdZjUn13AvzOxfMN0E=) 12: s6XbpS6zvG-OGcqP78qsGOOoOlQ.roa (hash: vai/46FuXyssCtnAk+MIcYY2mUqRBxwISqAf2lFmzsg=) 13: vsuobB7Q7M7H0d2b7icsBX46rF8.roa (hash: 7WzZ613I/LXa4Zefx9tEqY2ZhSRre3hj1QC98fA5RuY=) 14: xP11eIeQX9x-FJdxDPaYbALauGA.roa (hash: X/B/3lK+XxCa5BQgDlvPLTFtIiO9rYw/6L5OCGSXKQE=) 15: xT7aM3kUy4b46Qb4CAkkSam9t5g.roa (hash: Rfd0mKt9HyiAqh5+s2geHZ1SUFHa0fSNkwoTUgmAYpI=) Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/8b/f07f8d-9df0-49c6-b2f0-aa9d691811e7/1/h3itgWjgnPktTgSYJX-OnOq_BpI.crl rsync://rpki.ripe.net/repository/DEFAULT/8b/f07f8d-9df0-49c6-b2f0-aa9d691811e7/1/h3itgWjgnPktTgSYJX-OnOq_BpI.mft rsync://rpki.ripe.net/repository/DEFAULT/h3itgWjgnPktTgSYJX-OnOq_BpI.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Thu 24 Jul 2025 14:37:04 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:98:38:04:07:15:76:4f:db:48:6a:c5:c3:a5:79:ff:fb:0d Signature Algorithm: sha256WithRSAEncryption Issuer: CN=8778ad8168e09cf92d4e0498257f8e9ceabf0692 Validity Not Before: Jul 23 16:00:44 2025 GMT Not After : Jul 24 16:00:44 2025 GMT Subject: CN=2fcffcffcb3d493bbf0c08a7b395680d9160dd0d Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:d9:ea:3a:cd:6a:8d:82:88:e4:4e:18:88:4d:4f: 18:be:cd:d7:55:30:93:46:f9:1c:e5:95:4d:5f:06: 76:ff:80:eb:24:82:20:4c:f6:02:41:c7:b2:73:aa: 84:19:4d:be:ae:d1:55:33:52:08:63:37:73:23:5f: 91:45:28:18:e2:de:cf:45:f8:76:40:38:f3:25:c2: 08:fc:ff:60:8a:38:8a:94:b9:0f:76:4a:02:df:a3: 4b:2c:0e:fb:2d:05:90:13:b7:3e:83:fc:69:bd:97: 12:19:ef:78:bb:df:e7:96:dd:ea:97:7a:20:09:30: b5:f2:d4:77:6e:cc:97:22:64:b7:e9:1d:24:43:3e: f4:d1:74:f6:ef:fa:9e:2f:85:f0:b7:05:5c:db:0a: 5e:31:0e:f7:e4:85:a6:93:2c:82:4f:46:d6:ba:a1: d3:a6:cc:1b:ee:05:44:5b:8b:8c:3a:ae:ce:76:68: 13:e4:0b:c9:5b:eb:fb:99:62:84:b5:60:46:17:d2: c6:d2:56:88:9e:af:e8:d1:29:34:29:c3:6d:19:ab: ce:61:3a:d2:ae:47:f0:05:2e:e6:71:8d:06:59:c8: 93:da:db:89:76:fe:ac:0e:16:2e:7b:43:ae:17:9a: 62:aa:3d:19:96:e1:52:e2:8d:89:e2:a5:07:35:10: 78:9b Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 2F:CF:FC:FF:CB:3D:49:3B:BF:0C:08:A7:B3:95:68:0D:91:60:DD:0D X509v3 Authority Key Identifier: keyid:87:78:AD:81:68:E0:9C:F9:2D:4E:04:98:25:7F:8E:9C:EA:BF:06:92 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/h3itgWjgnPktTgSYJX-OnOq_BpI.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/8b/f07f8d-9df0-49c6-b2f0-aa9d691811e7/1/h3itgWjgnPktTgSYJX-OnOq_BpI.mft X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/8b/f07f8d-9df0-49c6-b2f0-aa9d691811e7/1/h3itgWjgnPktTgSYJX-OnOq_BpI.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 28:36:3a:28:58:96:ab:35:95:33:f1:dc:87:d8:f2:05:05:4a: 04:e6:07:82:fb:3e:d5:1c:d2:fc:82:bd:d1:9e:3b:ec:03:41: 69:5b:06:89:83:54:a3:12:03:b5:83:d9:9c:3b:ef:07:6a:18: 3c:87:9c:26:a6:8c:53:b1:95:96:8c:f6:9e:c9:61:c4:21:ea: b3:41:58:fb:6d:d0:d1:88:dc:10:db:67:0e:ad:a8:a7:01:4c: 2d:24:7f:c9:39:9b:e3:49:34:8d:23:a3:8d:a0:e0:41:d3:c4: 98:d2:b8:a1:78:31:91:81:b4:51:08:d7:03:00:b7:b9:f4:18: 96:0f:8b:2a:79:62:e6:06:18:62:fc:68:e1:25:30:1b:8c:38: fa:ee:ec:12:23:83:32:37:e5:60:93:b2:89:6c:cd:8d:b2:8e: ac:12:40:84:c4:a0:c3:14:e6:11:a6:84:8e:21:f9:f0:4a:82: 90:78:ad:b7:4d:12:ef:11:6e:2d:b0:77:d5:38:2d:4d:de:a9: c6:1f:66:76:d0:9f:fd:77:b2:6b:a8:c2:a7:0b:07:d4:d7:3e: 7f:ba:9c:04:23:0c:ed:9b:59:f4:2f:a9:fc:d6:bb:a0:f0:72: b3:5f:a2:b0:4a:18:2e:f0:b4:76:66:1e:8b:23:79:dc:f2:cb: 27:c3:d1:07 -----BEGIN CERTIFICATE----- MIIFFjCCA/6gAwIBAgISAZg4BAcVdk/bSGrFw6V5//sNMA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKDg3NzhhZDgxNjhlMDljZjkyZDRlMDQ5ODI1N2Y4ZTljZWFi ZjA2OTIwHhcNMjUwNzIzMTYwMDQ0WhcNMjUwNzI0MTYwMDQ0WjAzMTEwLwYDVQQD EygyZmNmZmNmZmNiM2Q0OTNiYmYwYzA4YTdiMzk1NjgwZDkxNjBkZDBkMIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEA2eo6zWqNgojkThiITU8Yvs3XVTCT Rvkc5ZVNXwZ2/4DrJIIgTPYCQceyc6qEGU2+rtFVM1IIYzdzI1+RRSgY4t7PRfh2 QDjzJcII/P9gijiKlLkPdkoC36NLLA77LQWQE7c+g/xpvZcSGe94u9/nlt3ql3og CTC18tR3bsyXImS36R0kQz700XT27/qeL4XwtwVc2wpeMQ735IWmkyyCT0bWuqHT pswb7gVEW4uMOq7OdmgT5AvJW+v7mWKEtWBGF9LG0laInq/o0Sk0KcNtGavOYTrS rkfwBS7mcY0GWciT2tuJdv6sDhYue0OuF5piqj0ZluFS4o2J4qUHNRB4mwIDAQAB o4ICIjCCAh4wHQYDVR0OBBYEFC/P/P/LPUk7vwwIp7OVaA2RYN0NMB8GA1UdIwQY MBaAFId4rYFo4Jz5LU4EmCV/jpzqvwaSMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvaDNpdGdXamduUGt0VGdTWUpYLU9uT3FfQnBJLmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC84Yi9mMDdmOGQtOWRmMC00OWM2LWIyZjAt YWE5ZDY5MTgxMWU3LzEvaDNpdGdXamduUGt0VGdTWUpYLU9uT3FfQnBJLm1mdDCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC84Yi9mMDdmOGQtOWRmMC00OWM2LWIyZjAtYWE5ZDY5MTgxMWU3 LzEvaDNpdGdXamduUGt0VGdTWUpYLU9uT3FfQnBJLmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAKDY6KFiW qzWVM/Hch9jyBQVKBOYHgvs+1RzS/IK90Z477ANBaVsGiYNUoxIDtYPZnDvvB2oY PIecJqaMU7GVloz2nslhxCHqs0FY+23Q0YjcENtnDq2opwFMLSR/yTmb40k0jSOj jaDgQdPEmNK4oXgxkYG0UQjXAwC3ufQYlg+LKnli5gYYYvxo4SUwG4w4+u7sEiOD MjflYJOyiWzNjbKOrBJAhMSgwxTmEaaEjiH58EqCkHitt00S7xFuLbB31TgtTd6p xh9mdtCf/Xeya6jCpwsH1Nc+f7qcBCMM7ZtZ9C+p/Na7oPBys1+isEoYLvC0dmYe iyN53PLLJ8PRBw== -----END CERTIFICATE-----Generated at Wed Jul 23 18:01:42 2025 by rpki-client