$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/92/f153dc-cbfb-4a4f-80d2-745e08fe58c6/1/sLWoCnEG4KS4VFyBULtyxpn8yaA.mft File: sLWoCnEG4KS4VFyBULtyxpn8yaA.mft (raw, json) Hash identifier: ZO4xguJ9P+QF0KcRcHWfQKK26noQ6u/e772o3AEVL8g= Subject key identifier: 94:9C:8A:8E:C6:1D:4F:7D:7D:2F:35:FC:65:FF:2D:31:98:FC:91:7B Authority key identifier: B0:B5:A8:0A:71:06:E0:A4:B8:54:5C:81:50:BB:72:C6:99:FC:C9:A0 Certificate issuer: /CN=b0b5a80a7106e0a4b8545c8150bb72c699fcc9a0 Certificate serial: 01983BE0BE8746887523DE7473D18E6E99AC Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/sLWoCnEG4KS4VFyBULtyxpn8yaA.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/92/f153dc-cbfb-4a4f-80d2-745e08fe58c6/1/sLWoCnEG4KS4VFyBULtyxpn8yaA.mft Manifest number: 1618 Signing time: Thu 24 Jul 2025 10:00:41 +0000 Manifest this update: Thu 24 Jul 2025 10:00:41 +0000 Manifest next update: Fri 25 Jul 2025 10:00:41 +0000 Files and hashes: 1: 60jG5Ay8pKNRLAaYiabGAbMAWcU.roa (hash: mGDjXdclRD6cM00fzezmu8njPZGu0i86EMmzQCWdsaI=) 2: 8NknCKB4mqEufbZ6UbHgAa8xKGk.roa (hash: +VuXhmjH2zdhVZOeQIf+1XfhIBEvtUJA5CNUFP6jbIc=) 3: Cwb1KDzjyZP06ERQCkOqE8eDn-Q.roa (hash: qEbiLSfggbr/wcV1CfVb4G8sOcwZPVPdEo2xFZT7GWw=) 4: ULGt5CdhlE1JEjeG7VsVStOraA8.roa (hash: RKuD3ZtjSv+b+szTB+emIP6q+hmA+ntSP7hJQn+VQLA=) 5: XXx0PZbW0VSnHcKqWvct0KGeX5o.roa (hash: fg2kYbNMaJFsDmSVzEYMa+3owPgOnqiysynI+fCXGgg=) 6: XqyfpygCBb8Q3tIPPqdoPK94M0A.roa (hash: 2VTgMTAP00AWrF9/qszpE/dPLTmJ6fjO0h7TyCaHdtE=) 7: _xekjSFtSAUujx70CN_lqAzDOTI.roa (hash: RCBKZCow8/qZDtOMSChrlpX+0rMSwhsyivwOBDzZ8y0=) 8: d5wYN4sqYmgKKKUN9X-8jp9PKTs.roa (hash: /7Xb7BgMP/VziPk4Q/U+uMUdmAyttT7O93i5sL6urDU=) 9: jU-enqBlwHSK5LFQUkQMv3mnQ3c.roa (hash: XGjlZdDrp7Q05Es+vT4dQhjxGrAgZ9KHZykl/3VpHuk=) 10: rgPd-lPBT_KjoGNurNCPr8-tYLM.roa (hash: 7UFfmlghHed6gv5YUhlj2bi7/Km6EbVr9jqYqXUYH8o=) 11: sLWoCnEG4KS4VFyBULtyxpn8yaA.crl (hash: 9je9UxP6cb43UlE6T2DTv2Tjg0yMtBBzjyKlMefI4WY=) 12: uYQNZGrXH6jilfHVW7M6-uKjZF8.roa (hash: K7dbhIw3GKL8CpYsfdoECZtVDjcGxNIlpZxMSzxg0fc=) 13: zad7TKoNmHhoc0CyHOzgSXKr6f4.roa (hash: LQ6zogTRTgGoz9vqyWdA5yZND4PDb2ytjo7mWtS7rF8=) Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/92/f153dc-cbfb-4a4f-80d2-745e08fe58c6/1/sLWoCnEG4KS4VFyBULtyxpn8yaA.crl rsync://rpki.ripe.net/repository/DEFAULT/92/f153dc-cbfb-4a4f-80d2-745e08fe58c6/1/sLWoCnEG4KS4VFyBULtyxpn8yaA.mft rsync://rpki.ripe.net/repository/DEFAULT/sLWoCnEG4KS4VFyBULtyxpn8yaA.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Fri 25 Jul 2025 08:00:05 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:98:3b:e0:be:87:46:88:75:23:de:74:73:d1:8e:6e:99:ac Signature Algorithm: sha256WithRSAEncryption Issuer: CN=b0b5a80a7106e0a4b8545c8150bb72c699fcc9a0 Validity Not Before: Jul 24 10:00:41 2025 GMT Not After : Jul 25 10:00:41 2025 GMT Subject: CN=949c8a8ec61d4f7d7d2f35fc65ff2d3198fc917b Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:a4:9f:d9:e0:d5:f5:1b:f2:e3:2d:1c:5d:ef:89: 3d:8f:f5:d1:83:4b:db:f4:1c:5c:5a:52:86:cc:85: ce:0f:8a:07:d3:8e:04:a9:08:7e:97:5c:d0:6d:29: f4:e0:65:79:35:96:af:da:99:c4:24:f2:5f:c6:30: 69:ee:41:21:98:72:aa:f0:f8:a0:69:30:65:be:07: c3:3b:57:50:ab:54:6d:f9:59:bf:8b:c7:f6:c2:11: 0f:1c:a7:e0:c7:63:90:53:54:92:e8:bf:86:6f:57: 03:fb:8a:83:97:85:98:9f:fe:fc:79:b0:1c:ce:20: c8:7c:1c:db:b6:2d:81:f1:c0:f3:4f:70:db:2e:90: 4c:b7:ec:0b:59:55:3a:fe:21:5b:62:1d:d1:53:b5: b8:ec:59:bf:b7:ff:e0:e8:38:16:c7:e1:85:0d:73: 32:c2:fb:4f:b9:86:ad:74:8f:50:50:c2:09:59:c9: c1:47:0c:76:38:07:00:58:e1:6c:1f:ed:18:bf:72: 4d:5f:18:ae:85:c4:10:a8:50:2d:82:42:e2:b0:4f: 8e:97:f6:fe:76:92:05:4e:af:f8:00:91:c6:65:fc: ce:fa:05:31:a4:6d:88:5d:4e:b5:e9:70:e4:94:e3: 11:58:16:b8:a9:f2:2a:e2:9e:45:b2:fd:a0:d1:b5: b9:29 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 94:9C:8A:8E:C6:1D:4F:7D:7D:2F:35:FC:65:FF:2D:31:98:FC:91:7B X509v3 Authority Key Identifier: keyid:B0:B5:A8:0A:71:06:E0:A4:B8:54:5C:81:50:BB:72:C6:99:FC:C9:A0 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/sLWoCnEG4KS4VFyBULtyxpn8yaA.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/92/f153dc-cbfb-4a4f-80d2-745e08fe58c6/1/sLWoCnEG4KS4VFyBULtyxpn8yaA.mft X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/92/f153dc-cbfb-4a4f-80d2-745e08fe58c6/1/sLWoCnEG4KS4VFyBULtyxpn8yaA.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 22:46:95:5b:c6:1b:e1:a3:09:3f:0d:8f:e6:d2:14:c0:4e:75: bc:06:13:f6:b0:0a:36:5b:9a:20:24:ab:f1:82:0c:38:c4:a7: 3e:b0:b5:a1:00:0b:58:85:f9:66:15:a1:b7:6c:66:8a:72:92: 41:96:31:f6:42:08:f7:2c:ad:ef:c5:3c:80:df:f3:19:86:5b: f0:c6:0d:12:7e:8a:a6:9c:a9:ac:4b:81:4f:7c:1c:c9:87:6c: 47:5f:e9:7e:61:27:19:37:48:9b:58:aa:5d:f3:43:f4:ad:7e: d0:40:9c:83:ea:93:5d:7a:93:f9:63:8d:32:ac:3a:13:bf:f3: 5d:75:0b:26:98:bb:b8:2a:e0:d8:e3:0a:93:53:c5:3a:ec:f5: db:55:6f:91:dc:67:2b:2e:98:d5:5e:c9:8c:14:05:06:af:95: a4:08:a0:31:d7:e5:e3:2a:0c:3f:09:b3:0d:20:eb:55:73:22: 33:d1:ab:0b:89:45:1d:63:45:2a:10:fd:b2:c2:ef:88:94:88: 0f:74:b8:78:6f:f9:bf:34:c1:b6:23:1c:aa:16:f2:37:73:4a: 6e:ce:01:8d:ce:f7:0d:01:19:36:4d:88:ce:43:c0:8f:b8:25: 22:97:9a:c1:e5:8d:42:10:68:8c:d6:b7:98:db:c9:1e:84:ad: bf:66:ad:c3 -----BEGIN CERTIFICATE----- MIIFFjCCA/6gAwIBAgISAZg74L6HRoh1I950c9GObpmsMA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKGIwYjVhODBhNzEwNmUwYTRiODU0NWM4MTUwYmI3MmM2OTlm Y2M5YTAwHhcNMjUwNzI0MTAwMDQxWhcNMjUwNzI1MTAwMDQxWjAzMTEwLwYDVQQD Eyg5NDljOGE4ZWM2MWQ0ZjdkN2QyZjM1ZmM2NWZmMmQzMTk4ZmM5MTdiMIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEApJ/Z4NX1G/LjLRxd74k9j/XRg0vb 9BxcWlKGzIXOD4oH044EqQh+l1zQbSn04GV5NZav2pnEJPJfxjBp7kEhmHKq8Pig aTBlvgfDO1dQq1Rt+Vm/i8f2whEPHKfgx2OQU1SS6L+Gb1cD+4qDl4WYn/78ebAc ziDIfBzbti2B8cDzT3DbLpBMt+wLWVU6/iFbYh3RU7W47Fm/t//g6DgWx+GFDXMy wvtPuYatdI9QUMIJWcnBRwx2OAcAWOFsH+0Yv3JNXxiuhcQQqFAtgkLisE+Ol/b+ dpIFTq/4AJHGZfzO+gUxpG2IXU616XDklOMRWBa4qfIq4p5Fsv2g0bW5KQIDAQAB o4ICIjCCAh4wHQYDVR0OBBYEFJScio7GHU99fS81/GX/LTGY/JF7MB8GA1UdIwQY MBaAFLC1qApxBuCkuFRcgVC7csaZ/MmgMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvc0xXb0NuRUc0S1M0VkZ5QlVMdHl4cG44eWFBLmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC85Mi9mMTUzZGMtY2JmYi00YTRmLTgwZDIt NzQ1ZTA4ZmU1OGM2LzEvc0xXb0NuRUc0S1M0VkZ5QlVMdHl4cG44eWFBLm1mdDCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC85Mi9mMTUzZGMtY2JmYi00YTRmLTgwZDItNzQ1ZTA4ZmU1OGM2 LzEvc0xXb0NuRUc0S1M0VkZ5QlVMdHl4cG44eWFBLmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAIkaVW8Yb 4aMJPw2P5tIUwE51vAYT9rAKNluaICSr8YIMOMSnPrC1oQALWIX5ZhWht2xminKS QZYx9kII9yyt78U8gN/zGYZb8MYNEn6KppyprEuBT3wcyYdsR1/pfmEnGTdIm1iq XfND9K1+0ECcg+qTXXqT+WONMqw6E7/zXXULJpi7uCrg2OMKk1PFOuz121Vvkdxn Ky6Y1V7JjBQFBq+VpAigMdfl4yoMPwmzDSDrVXMiM9GrC4lFHWNFKhD9ssLviJSI D3S4eG/5vzTBtiMcqhbyN3NKbs4Bjc73DQEZNk2IzkPAj7glIpeaweWNQhBojNa3 mNvJHoStv2atww== -----END CERTIFICATE-----Generated at Thu Jul 24 12:08:36 2025 by rpki-client