$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/90/c48271-dee5-4841-a7dd-b0d72e910efe/1/SIxl3DWbWMprpdPa64dPBYaE6MY.mft File: SIxl3DWbWMprpdPa64dPBYaE6MY.mft (raw, json) Hash identifier: yEpF5pR05cLwuF1f0WgqykDIugAR9h6U7DYL/oCrL7U= Subject key identifier: 9E:F1:F2:F8:07:8B:39:85:50:0B:C1:95:77:B6:2E:1C:30:D0:05:D6 Authority key identifier: 48:8C:65:DC:35:9B:58:CA:6B:A5:D3:DA:EB:87:4F:05:86:84:E8:C6 Certificate issuer: /CN=488c65dc359b58ca6ba5d3daeb874f058684e8c6 Certificate serial: 01983984274117596172AD5EF3B7DE5BAFC4 Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/SIxl3DWbWMprpdPa64dPBYaE6MY.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/90/c48271-dee5-4841-a7dd-b0d72e910efe/1/SIxl3DWbWMprpdPa64dPBYaE6MY.mft Manifest number: 0B56 Signing time: Wed 23 Jul 2025 23:00:18 +0000 Manifest this update: Wed 23 Jul 2025 23:00:18 +0000 Manifest next update: Thu 24 Jul 2025 23:00:18 +0000 Files and hashes: 1: 1-aj5T9Cp2VGdvqAo0BLyNQl0OP0.roa (hash: wS9UY1GzEmJu3DzghbibQIVXymTHZMRkgirREpKzVig=) 2: CUbuh0PM3yqW-CpytCXAWwYdQ7Q.roa (hash: j6MdXA11jocwq2zYd6v7F0+Oq8jAXnx5FNp5BWwzZDI=) 3: GlW6zMLj6EttAmWKHy7iwfBhWZE.roa (hash: ABJiNZOFb+afM+eJQ3jwpevUgACzN0c5eNSdwc405sQ=) 4: L80pK6ObZRSScU_AZIXdqKhbLPs.roa (hash: 18whVklVMP7ZtNSmFR8DrFdceRMOWEFp28FcU5z0yMo=) 5: OZiwI2QkuuLbAOllr-XJlZEbneE.roa (hash: mXAIyClIU1Z4vpuyMsGiBBynCYmQ4v0FodyB8WIXhxk=) 6: PIHm_2dfJM_TGdcbwqQtnYwPXVY.roa (hash: kVHy+yISe5vrX43T3bIZxXbjFq8ypYr+GWkGUxqbMqI=) 7: SIxl3DWbWMprpdPa64dPBYaE6MY.crl (hash: QT6MUjxowh11BMAmSnzYruLjRyu5gpdjznr7fghkVP8=) 8: cSVJv9Y-FnxxLG20frdAri_noBk.roa (hash: 34paWKddNtWaw0Vl7xzlk/3/M190Z6IXyvbGbAK4Tj8=) 9: ea6BO6jv5qXL6KOn3swl4W7fpN8.roa (hash: qb7RyOCex8dd5d/iXyz9TFdFXAm9eOIl5Q9VrGqRffk=) 10: f83w0UBpgcJD0dA64iAq7lmXARw.roa (hash: f9wovq1EqzUTh58ehH2r8oD0Nk4JJQcPOCa3DaAqpnI=) 11: h-PNQcjWOScse8WjyOhQeSbv950.roa (hash: /sFDGAAGqPfiAFmlm5KuC6NUsSeC3ZuPzrCQYYwFUic=) 12: mNSZJOUVeZicld4QAL_-bUUCGDI.roa (hash: nBD9zjll4ut7eXUVf0/WxLdu+1b2MWKBGI9qLKkr07w=) 13: qxsheS1XzS3dymYbKGRvC_3BiO4.roa (hash: VtweZ6shC74Bgwh1irW6gEbqeXbHeH8CL8orxJ3cqko=) 14: sejuuPdZzCrTGWMQL8q6fL6s1bI.roa (hash: Ijpq2YAMnAhyxDacqfun38Wp4QxYF9meZt2cnqXBEVs=) 15: z4bsjVbTnI81Y7pi92gQtwuMcMA.roa (hash: 6k5So3y2nhT6Ksfiwx9bk8ELUKmJlBzOynlhbHwQFMg=) Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/90/c48271-dee5-4841-a7dd-b0d72e910efe/1/SIxl3DWbWMprpdPa64dPBYaE6MY.crl rsync://rpki.ripe.net/repository/DEFAULT/90/c48271-dee5-4841-a7dd-b0d72e910efe/1/SIxl3DWbWMprpdPa64dPBYaE6MY.mft rsync://rpki.ripe.net/repository/DEFAULT/SIxl3DWbWMprpdPa64dPBYaE6MY.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Thu 24 Jul 2025 23:00:04 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:98:39:84:27:41:17:59:61:72:ad:5e:f3:b7:de:5b:af:c4 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=488c65dc359b58ca6ba5d3daeb874f058684e8c6 Validity Not Before: Jul 23 23:00:18 2025 GMT Not After : Jul 24 23:00:18 2025 GMT Subject: CN=9ef1f2f8078b3985500bc19577b62e1c30d005d6 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:dd:fb:02:34:7f:2d:e0:38:66:ff:29:7d:67:21: 50:40:68:ed:0b:c8:3c:22:70:dd:b8:62:e1:ac:db: 1d:06:af:f4:d9:71:a5:90:77:ee:2f:7c:af:d4:25: ce:38:fa:33:4d:84:8c:5f:0a:87:02:46:ba:ac:89: 85:1b:b7:9b:06:23:cb:8b:d9:77:e6:e2:6f:6d:56: 63:f6:ad:17:6a:06:d4:e5:68:08:f0:ae:c6:6b:47: 49:28:9a:e5:0b:f2:16:d0:a4:ee:df:78:50:74:da: ff:98:63:24:a3:f0:22:7e:e9:25:0c:83:0c:3f:89: 40:47:dc:a5:4b:09:8b:3b:47:8e:1c:3b:5e:18:63: e4:9c:da:4f:f9:b9:a3:50:ea:7f:a9:ab:a2:4d:c6: 6c:eb:c7:be:fb:2e:80:92:3b:50:82:79:ce:ec:91: 2c:d0:8f:91:59:4f:99:b1:34:46:e0:31:50:72:73: 9b:36:14:02:fd:d9:7b:48:0f:01:b6:7e:c8:10:9e: 45:e1:36:c6:44:ce:9e:86:21:ab:f7:86:57:f6:f8: 98:eb:1f:00:40:2d:10:83:4d:9c:7c:38:d5:6c:20: 00:38:10:79:27:03:03:a2:c1:45:30:64:ec:72:93: 37:98:1f:45:65:e2:c1:38:0f:02:5c:4e:39:59:33: 76:b7 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 9E:F1:F2:F8:07:8B:39:85:50:0B:C1:95:77:B6:2E:1C:30:D0:05:D6 X509v3 Authority Key Identifier: keyid:48:8C:65:DC:35:9B:58:CA:6B:A5:D3:DA:EB:87:4F:05:86:84:E8:C6 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/SIxl3DWbWMprpdPa64dPBYaE6MY.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/90/c48271-dee5-4841-a7dd-b0d72e910efe/1/SIxl3DWbWMprpdPa64dPBYaE6MY.mft X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/90/c48271-dee5-4841-a7dd-b0d72e910efe/1/SIxl3DWbWMprpdPa64dPBYaE6MY.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 87:1a:e5:01:aa:1c:cb:fe:84:3e:11:6f:86:40:2c:67:d3:a9: 39:c7:d0:fd:d1:61:1a:de:9d:32:b0:77:5b:88:e4:1e:1b:59: fd:d3:79:15:c1:22:27:e0:17:ee:53:75:90:fa:da:99:f4:92: 0a:ce:44:bc:49:f3:0e:1a:30:a8:00:5d:dd:ff:a7:5f:9a:39: 32:89:97:03:75:a9:b1:77:71:f1:a0:b0:26:f9:56:3d:0b:33: 1c:f7:89:4d:97:e0:21:15:ca:47:96:0f:c8:d8:95:e3:6b:07: a1:bf:6a:5e:b5:95:9b:0e:4f:4b:dd:a5:64:30:4f:50:89:92: be:dd:29:12:55:38:50:69:32:e7:b2:17:1f:02:55:6a:af:2c: 85:1f:3c:11:4c:68:8c:31:08:c7:cc:0f:13:d4:ef:4c:2b:62: 01:10:22:d2:e1:39:49:f6:91:33:86:52:a2:13:c2:5e:25:8b: 53:30:55:02:55:84:82:e1:b8:3f:08:fb:dc:64:53:4e:17:2f: b8:2f:3a:1d:34:8e:27:42:8f:c4:cb:4a:ac:99:08:6d:e3:23: e4:7f:a0:30:37:28:ae:e9:8a:19:9a:58:e0:15:15:a4:b4:28: 5e:95:de:cd:ba:a4:32:22:55:c2:54:7a:82:65:ec:60:c7:34: 05:53:e6:31 -----BEGIN CERTIFICATE----- MIIFFjCCA/6gAwIBAgISAZg5hCdBF1lhcq1e87feW6/EMA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKDQ4OGM2NWRjMzU5YjU4Y2E2YmE1ZDNkYWViODc0ZjA1ODY4 NGU4YzYwHhcNMjUwNzIzMjMwMDE4WhcNMjUwNzI0MjMwMDE4WjAzMTEwLwYDVQQD Eyg5ZWYxZjJmODA3OGIzOTg1NTAwYmMxOTU3N2I2MmUxYzMwZDAwNWQ2MIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEA3fsCNH8t4Dhm/yl9ZyFQQGjtC8g8 InDduGLhrNsdBq/02XGlkHfuL3yv1CXOOPozTYSMXwqHAka6rImFG7ebBiPLi9l3 5uJvbVZj9q0XagbU5WgI8K7Ga0dJKJrlC/IW0KTu33hQdNr/mGMko/AifuklDIMM P4lAR9ylSwmLO0eOHDteGGPknNpP+bmjUOp/qauiTcZs68e++y6AkjtQgnnO7JEs 0I+RWU+ZsTRG4DFQcnObNhQC/dl7SA8Btn7IEJ5F4TbGRM6ehiGr94ZX9viY6x8A QC0Qg02cfDjVbCAAOBB5JwMDosFFMGTscpM3mB9FZeLBOA8CXE45WTN2twIDAQAB o4ICIjCCAh4wHQYDVR0OBBYEFJ7x8vgHizmFUAvBlXe2Lhww0AXWMB8GA1UdIwQY MBaAFEiMZdw1m1jKa6XT2uuHTwWGhOjGMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvU0l4bDNEV2JXTXBycGRQYTY0ZFBCWWFFNk1ZLmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC85MC9jNDgyNzEtZGVlNS00ODQxLWE3ZGQt YjBkNzJlOTEwZWZlLzEvU0l4bDNEV2JXTXBycGRQYTY0ZFBCWWFFNk1ZLm1mdDCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC85MC9jNDgyNzEtZGVlNS00ODQxLWE3ZGQtYjBkNzJlOTEwZWZl LzEvU0l4bDNEV2JXTXBycGRQYTY0ZFBCWWFFNk1ZLmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAhxrlAaoc y/6EPhFvhkAsZ9OpOcfQ/dFhGt6dMrB3W4jkHhtZ/dN5FcEiJ+AX7lN1kPramfSS Cs5EvEnzDhowqABd3f+nX5o5MomXA3WpsXdx8aCwJvlWPQszHPeJTZfgIRXKR5YP yNiV42sHob9qXrWVmw5PS92lZDBPUImSvt0pElU4UGky57IXHwJVaq8shR88EUxo jDEIx8wPE9TvTCtiARAi0uE5SfaRM4ZSohPCXiWLUzBVAlWEguG4Pwj73GRTThcv uC86HTSOJ0KPxMtKrJkIbeMj5H+gMDcorumKGZpY4BUVpLQoXpXezbqkMiJVwlR6 gmXsYMc0BVPmMQ== -----END CERTIFICATE-----Generated at Thu Jul 24 03:50:17 2025 by rpki-client