$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/92/f153dc-cbfb-4a4f-80d2-745e08fe58c6/1/sLWoCnEG4KS4VFyBULtyxpn8yaA.mft File: sLWoCnEG4KS4VFyBULtyxpn8yaA.mft (raw, json) Hash identifier: 9Qs+3pH0CIL34kDgKSaoOfRrvclToXKRm39CTmca9IU= Subject key identifier: 14:68:FF:EC:CC:A9:AD:20:CF:FA:21:96:65:12:8C:21:42:FC:D8:46 Authority key identifier: B0:B5:A8:0A:71:06:E0:A4:B8:54:5C:81:50:BB:72:C6:99:FC:C9:A0 Certificate issuer: /CN=b0b5a80a7106e0a4b8545c8150bb72c699fcc9a0 Certificate serial: 01983FBD8EF5C82C0C6B292EB871B0AB9A9E Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/sLWoCnEG4KS4VFyBULtyxpn8yaA.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/92/f153dc-cbfb-4a4f-80d2-745e08fe58c6/1/sLWoCnEG4KS4VFyBULtyxpn8yaA.mft Manifest number: 161A Signing time: Fri 25 Jul 2025 04:00:44 +0000 Manifest this update: Fri 25 Jul 2025 04:00:44 +0000 Manifest next update: Sat 26 Jul 2025 04:00:44 +0000 Files and hashes: 1: 60jG5Ay8pKNRLAaYiabGAbMAWcU.roa (hash: mGDjXdclRD6cM00fzezmu8njPZGu0i86EMmzQCWdsaI=) 2: 8NknCKB4mqEufbZ6UbHgAa8xKGk.roa (hash: +VuXhmjH2zdhVZOeQIf+1XfhIBEvtUJA5CNUFP6jbIc=) 3: Cwb1KDzjyZP06ERQCkOqE8eDn-Q.roa (hash: qEbiLSfggbr/wcV1CfVb4G8sOcwZPVPdEo2xFZT7GWw=) 4: ULGt5CdhlE1JEjeG7VsVStOraA8.roa (hash: RKuD3ZtjSv+b+szTB+emIP6q+hmA+ntSP7hJQn+VQLA=) 5: XXx0PZbW0VSnHcKqWvct0KGeX5o.roa (hash: fg2kYbNMaJFsDmSVzEYMa+3owPgOnqiysynI+fCXGgg=) 6: XqyfpygCBb8Q3tIPPqdoPK94M0A.roa (hash: 2VTgMTAP00AWrF9/qszpE/dPLTmJ6fjO0h7TyCaHdtE=) 7: _xekjSFtSAUujx70CN_lqAzDOTI.roa (hash: RCBKZCow8/qZDtOMSChrlpX+0rMSwhsyivwOBDzZ8y0=) 8: d5wYN4sqYmgKKKUN9X-8jp9PKTs.roa (hash: /7Xb7BgMP/VziPk4Q/U+uMUdmAyttT7O93i5sL6urDU=) 9: jU-enqBlwHSK5LFQUkQMv3mnQ3c.roa (hash: XGjlZdDrp7Q05Es+vT4dQhjxGrAgZ9KHZykl/3VpHuk=) 10: rgPd-lPBT_KjoGNurNCPr8-tYLM.roa (hash: 7UFfmlghHed6gv5YUhlj2bi7/Km6EbVr9jqYqXUYH8o=) 11: sLWoCnEG4KS4VFyBULtyxpn8yaA.crl (hash: EmRXPZ8n5ahA0ztH6Zm8AV4AHDB7oU8t4CChd6PHvkg=) 12: uYQNZGrXH6jilfHVW7M6-uKjZF8.roa (hash: K7dbhIw3GKL8CpYsfdoECZtVDjcGxNIlpZxMSzxg0fc=) 13: zad7TKoNmHhoc0CyHOzgSXKr6f4.roa (hash: LQ6zogTRTgGoz9vqyWdA5yZND4PDb2ytjo7mWtS7rF8=) Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/92/f153dc-cbfb-4a4f-80d2-745e08fe58c6/1/sLWoCnEG4KS4VFyBULtyxpn8yaA.crl rsync://rpki.ripe.net/repository/DEFAULT/92/f153dc-cbfb-4a4f-80d2-745e08fe58c6/1/sLWoCnEG4KS4VFyBULtyxpn8yaA.mft rsync://rpki.ripe.net/repository/DEFAULT/sLWoCnEG4KS4VFyBULtyxpn8yaA.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Fri 25 Jul 2025 22:13:05 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:98:3f:bd:8e:f5:c8:2c:0c:6b:29:2e:b8:71:b0:ab:9a:9e Signature Algorithm: sha256WithRSAEncryption Issuer: CN=b0b5a80a7106e0a4b8545c8150bb72c699fcc9a0 Validity Not Before: Jul 25 04:00:44 2025 GMT Not After : Jul 26 04:00:44 2025 GMT Subject: CN=1468ffeccca9ad20cffa219665128c2142fcd846 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:97:2e:39:f0:3b:38:73:03:35:80:5a:1d:c9:11: e5:b9:f0:bf:e2:6d:ff:7d:81:ac:5c:b2:7f:a6:b1: 6e:b0:ac:7f:ca:76:6f:7e:0a:af:ff:db:9d:62:42: 65:0c:6d:7f:e1:ce:f2:a9:59:a8:11:44:2b:e2:50: fb:34:e8:94:ad:f6:90:c5:12:c6:29:82:a1:4c:79: 45:ac:20:54:1c:86:af:5d:12:63:42:4f:02:5f:fc: 3d:de:a4:b8:0b:a7:5e:b8:99:ea:ed:62:5a:01:04: 21:85:ee:1e:e0:c5:d1:25:4d:1e:20:32:1b:39:49: 7f:dc:0b:b2:f8:a0:8e:bd:98:02:dc:7a:d1:4e:29: 2e:7e:bf:83:42:7b:e2:a6:f9:76:48:4e:49:29:c0: 9a:db:47:ed:3d:c0:9e:69:c4:92:c8:7e:40:e3:7e: f2:35:fa:8b:ad:b7:2d:71:85:1c:36:2f:2e:e8:56: c9:7f:82:88:f5:ef:00:18:dd:09:db:53:2b:ff:2e: 9b:2a:81:16:dd:48:10:0e:d2:bc:27:33:74:e6:6e: dd:48:da:82:57:22:7f:f6:92:2b:e9:59:ad:9c:34: aa:bd:88:50:02:66:e0:86:01:0f:86:dd:f7:34:2e: 3f:c8:c1:32:88:b0:30:d7:1c:09:71:58:cb:17:df: 6b:9b Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 14:68:FF:EC:CC:A9:AD:20:CF:FA:21:96:65:12:8C:21:42:FC:D8:46 X509v3 Authority Key Identifier: keyid:B0:B5:A8:0A:71:06:E0:A4:B8:54:5C:81:50:BB:72:C6:99:FC:C9:A0 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/sLWoCnEG4KS4VFyBULtyxpn8yaA.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/92/f153dc-cbfb-4a4f-80d2-745e08fe58c6/1/sLWoCnEG4KS4VFyBULtyxpn8yaA.mft X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/92/f153dc-cbfb-4a4f-80d2-745e08fe58c6/1/sLWoCnEG4KS4VFyBULtyxpn8yaA.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 17:5e:3b:42:a1:7e:4f:3e:47:4d:44:44:a9:35:82:6e:9f:64: a1:a7:89:00:14:5b:95:7f:b7:8f:21:8e:17:fc:ac:5a:9c:e0: 56:35:25:56:92:ff:c0:8c:1d:d9:3e:f5:a0:a1:d1:71:51:0b: 42:d2:88:9a:de:d4:15:bd:01:bb:94:3f:67:5a:fd:41:b6:2f: 3c:9a:5d:a5:62:a1:43:ae:be:c9:d6:8a:35:fd:ef:39:d9:70: e6:da:bc:eb:a0:a1:f2:2a:5b:1b:9d:49:54:08:dc:09:13:aa: 0e:3f:87:c8:78:90:87:2b:f6:b5:51:4e:3e:2b:b6:72:c7:17: 61:20:09:1f:6a:7b:60:d2:10:7c:77:e5:66:00:98:aa:29:20: 92:18:a2:19:52:8d:58:6e:29:65:50:eb:72:de:68:96:80:9b: 58:7a:3d:5a:ef:c5:fc:44:50:1d:65:b3:0c:56:41:fc:e6:4a: c4:4e:a6:53:a8:98:b8:25:f3:ab:d8:93:7f:af:a2:95:73:bd: 59:c9:8f:4d:e7:15:a0:37:dd:61:5b:c7:07:c8:dc:37:fa:eb: 52:8d:5c:be:82:33:78:5e:9e:92:17:09:b5:8b:30:73:c7:8a: 51:12:21:08:61:48:79:a9:61:64:2b:27:bd:db:86:84:85:5a: c0:be:5d:1e -----BEGIN CERTIFICATE----- MIIFFjCCA/6gAwIBAgISAZg/vY71yCwMaykuuHGwq5qeMA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKGIwYjVhODBhNzEwNmUwYTRiODU0NWM4MTUwYmI3MmM2OTlm Y2M5YTAwHhcNMjUwNzI1MDQwMDQ0WhcNMjUwNzI2MDQwMDQ0WjAzMTEwLwYDVQQD EygxNDY4ZmZlY2NjYTlhZDIwY2ZmYTIxOTY2NTEyOGMyMTQyZmNkODQ2MIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAly458Ds4cwM1gFodyRHlufC/4m3/ fYGsXLJ/prFusKx/ynZvfgqv/9udYkJlDG1/4c7yqVmoEUQr4lD7NOiUrfaQxRLG KYKhTHlFrCBUHIavXRJjQk8CX/w93qS4C6deuJnq7WJaAQQhhe4e4MXRJU0eIDIb OUl/3Auy+KCOvZgC3HrRTikufr+DQnvipvl2SE5JKcCa20ftPcCeacSSyH5A437y NfqLrbctcYUcNi8u6FbJf4KI9e8AGN0J21Mr/y6bKoEW3UgQDtK8JzN05m7dSNqC VyJ/9pIr6VmtnDSqvYhQAmbghgEPht33NC4/yMEyiLAw1xwJcVjLF99rmwIDAQAB o4ICIjCCAh4wHQYDVR0OBBYEFBRo/+zMqa0gz/ohlmUSjCFC/NhGMB8GA1UdIwQY MBaAFLC1qApxBuCkuFRcgVC7csaZ/MmgMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvc0xXb0NuRUc0S1M0VkZ5QlVMdHl4cG44eWFBLmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC85Mi9mMTUzZGMtY2JmYi00YTRmLTgwZDIt NzQ1ZTA4ZmU1OGM2LzEvc0xXb0NuRUc0S1M0VkZ5QlVMdHl4cG44eWFBLm1mdDCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC85Mi9mMTUzZGMtY2JmYi00YTRmLTgwZDItNzQ1ZTA4ZmU1OGM2 LzEvc0xXb0NuRUc0S1M0VkZ5QlVMdHl4cG44eWFBLmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAF147QqF+ Tz5HTUREqTWCbp9koaeJABRblX+3jyGOF/ysWpzgVjUlVpL/wIwd2T71oKHRcVEL QtKImt7UFb0Bu5Q/Z1r9QbYvPJpdpWKhQ66+ydaKNf3vOdlw5tq866Ch8ipbG51J VAjcCROqDj+HyHiQhyv2tVFOPiu2cscXYSAJH2p7YNIQfHflZgCYqikgkhiiGVKN WG4pZVDrct5oloCbWHo9Wu/F/ERQHWWzDFZB/OZKxE6mU6iYuCXzq9iTf6+ilXO9 WcmPTecVoDfdYVvHB8jcN/rrUo1cvoIzeF6ekhcJtYswc8eKURIhCGFIealhZCsn vduGhIVawL5dHg== -----END CERTIFICATE-----Generated at Fri Jul 25 06:32:07 2025 by rpki-client