$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/99/2ece62-1d8c-450c-91e8-8eeb757cf545/1/1nPYSbfVBHN21X5veW8AGLcLRQY.mft File: 1nPYSbfVBHN21X5veW8AGLcLRQY.mft (raw, json) Hash identifier: bk+Y/vGxtWrRvpL8l6z4zruurNqGVb16rQh3R9d4bo4= Subject key identifier: 76:5C:5B:34:FF:CB:B2:BA:D4:CF:FB:F2:79:0B:28:4A:14:91:63:DF Authority key identifier: D6:73:D8:49:B7:D5:04:73:76:D5:7E:6F:79:6F:00:18:B7:0B:45:06 Certificate issuer: /CN=d673d849b7d5047376d57e6f796f0018b70b4506 Certificate serial: 01984589C668779E631CD1A01F5113F4AA55 Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/1nPYSbfVBHN21X5veW8AGLcLRQY.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/99/2ece62-1d8c-450c-91e8-8eeb757cf545/1/1nPYSbfVBHN21X5veW8AGLcLRQY.mft Manifest number: 1608 Signing time: Sat 26 Jul 2025 07:01:53 +0000 Manifest this update: Sat 26 Jul 2025 07:01:53 +0000 Manifest next update: Sun 27 Jul 2025 07:01:53 +0000 Files and hashes: 1: 0MIjC24hYDTW286dNJh5qkIVoQM.roa (hash: MXU+N4PdoB06EZ/HjOQwFUwlQG2n1kwzXC/QtbLmJF0=) 2: 1-TrGp-z9XirqNAVi00kZmMtegAQ.roa (hash: cZ4yM8vQzUWF39oRoRKvKg08K8izx43nKLI06xAV69c=) 3: 1i8rkHyD_GEpEeT-VSPmrM7G9hg.roa (hash: T9uIPUHDBJqXpx6DpvHR6pRhllvR8xZm3kC3o7hqoD8=) 4: 1nPYSbfVBHN21X5veW8AGLcLRQY.crl (hash: pfhP8DuuODSxdkjlZnXtyM4oon+OeBUKt5Ape2XTSwo=) 5: ARk7nVFItdFVCXn3sJgvaZ_sS0g.roa (hash: 7EEJNomrXNWfyMmnkFvuBOXpyWJs7s8lvlhWBalFymc=) 6: AgHi8XOuA8AW6mQ9081yaHFi7LY.roa (hash: GntMqrIeYlMh8GQHa17dRcWuW6VcPzJOKzx7OubvqC4=) 7: B3ZVVduO-XEeJJT5EOMOysoNJrI.roa (hash: hGLOqNOpZ+B1pvsSFo3MX/h7GOvVIRzBnRvB+fSCcjA=) 8: FCxYBsvWXDM15GSlGFr8QNu4RYE.roa (hash: 0mvD6N4h6dDsOpud4GT2Wd7vYleLAl39nQHcItAcmYc=) 9: IP6dxUf_151oN-w_YJNTEK8gFBY.roa (hash: DuBNN+Dmeyf3QMZYAuCqpfhCledEl++glFpZz6IL1T4=) 10: P1PPxJKJvcVWj4wZUdazuOzBw4Q.roa (hash: HnwzMbfg3535mDnah1e/JlAfCR0Kk2ea4N+rWTnPdJY=) 11: PXVQtp8fbfqZ5jFNvah34s8vf1o.roa (hash: jLDp0a0yIOcsSTqlqaPMGk/PVKwXxyLWYql8ZP+aAO4=) 12: Q6ELIGGMyAWLP2-8AinpN7dCP-I.roa (hash: +d8Mriz+mLl19IhnPZ6nZe1Nzbfe1sFAT1awQgdm62g=) 13: cdoljHUC9Q9DPh0xJN6bOQNfYgI.roa (hash: asTmSigp9GpUrfz/TvjdPq/vlaO8kX04TRA2R2OR/KQ=) 14: dukzfVMcltyysZZBvIjQGrHZPLo.roa (hash: lgww+jOruUco3lHQUmYd3nD9/JIBuRROS48oFbH8RVc=) 15: ex-k0hBYMJp3Xt63sbFH4dmaPp0.roa (hash: S04+oB5rzQSuvoSFbDJ54Q32HsuNGomFta+C8/uA5R4=) 16: hansf5f-8ZlprgL3Get4FXhM3qg.roa (hash: tdLlts3wjizciN3JSF4Zj+MG2KHEHQp/kr7Y9fEY9Hk=) 17: ktcN_1CUp7LaLxP99XlfX2aR3JY.roa (hash: A4GSKwqS/3qXXX5KzVNih95wvOg7T1xafYwJVI0/Hp0=) 18: rw3wmNK1T9KyKFmnPInliFk653U.roa (hash: byyB+zxuPES8tnSL4mP/gAsHzJQoaaZNw85rrGkKtTM=) 19: s-kJqLbM0KEIQbJ-31AW4jYwkyY.roa (hash: lel2X5N/TCz7Pdk6leCd67OSoke7W8rTYmRW3JpbyRE=) 20: thGwDSmOCB2egMkJayh7HTNBOoA.roa (hash: vrdMbk1dhZJxT4RMXRheIxv51EMC51s58JC+BTY/Vpg=) 21: wAAXYuIkUKtvrw39DQ6SG8wkbtE.roa (hash: jytRpaU7guGLhPsBwh2sgZuD9rMlPbNl3UHkvQz/oCo=) 22: y51hiFPZW-gkNjlGWGRcL6QruIc.roa (hash: IeyRLiiRko+dn467AL+M0JoJJpnysqiT8H5/V2IcxR0=) Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/99/2ece62-1d8c-450c-91e8-8eeb757cf545/1/1nPYSbfVBHN21X5veW8AGLcLRQY.crl rsync://rpki.ripe.net/repository/DEFAULT/99/2ece62-1d8c-450c-91e8-8eeb757cf545/1/1nPYSbfVBHN21X5veW8AGLcLRQY.mft rsync://rpki.ripe.net/repository/DEFAULT/1nPYSbfVBHN21X5veW8AGLcLRQY.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Sun 27 Jul 2025 02:00:05 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:98:45:89:c6:68:77:9e:63:1c:d1:a0:1f:51:13:f4:aa:55 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=d673d849b7d5047376d57e6f796f0018b70b4506 Validity Not Before: Jul 26 07:01:53 2025 GMT Not After : Jul 27 07:01:53 2025 GMT Subject: CN=765c5b34ffcbb2bad4cffbf2790b284a149163df Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:a8:9d:bc:a5:70:1c:a9:a2:0e:e7:c9:b2:a1:bd: 97:c5:43:d9:de:1b:32:56:6f:22:96:2f:bd:7f:0a: 1d:42:a4:41:bf:60:15:e6:29:64:bd:21:b5:62:70: 1b:63:20:5f:5e:d9:cc:73:0c:85:d3:b2:38:ea:cd: 86:79:92:29:54:d8:76:da:d3:da:c6:28:3a:68:56: ef:d5:59:43:67:d0:41:4d:68:bd:e6:1e:18:dc:20: 85:a9:13:45:08:f5:0e:e0:63:52:0c:d6:bb:0c:ca: fe:de:52:8d:70:ec:45:0d:e4:3d:88:56:7b:e2:ef: a9:36:59:00:1e:f6:7a:7a:c4:fe:2f:e1:1c:87:8d: 49:8f:62:db:97:1a:73:e1:ee:c5:71:32:68:4b:f5: 99:9f:73:44:99:fd:df:87:ed:c5:33:03:1e:7d:57: 54:f8:dd:89:0d:bc:be:1f:23:72:75:83:25:79:63: 85:9e:66:29:97:1b:8a:be:f1:aa:97:d7:04:02:34: c9:01:cf:a1:5a:7a:48:1f:4d:f5:21:51:d4:ef:a8: 99:eb:02:5d:ca:d1:67:b5:22:fc:95:10:63:8c:e7: 58:dc:6a:94:5c:dc:5f:08:56:69:3b:93:d4:58:f5: f4:a2:88:8d:c9:73:86:7c:b1:15:43:51:fb:a6:d4: ff:41 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 76:5C:5B:34:FF:CB:B2:BA:D4:CF:FB:F2:79:0B:28:4A:14:91:63:DF X509v3 Authority Key Identifier: keyid:D6:73:D8:49:B7:D5:04:73:76:D5:7E:6F:79:6F:00:18:B7:0B:45:06 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/1nPYSbfVBHN21X5veW8AGLcLRQY.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/99/2ece62-1d8c-450c-91e8-8eeb757cf545/1/1nPYSbfVBHN21X5veW8AGLcLRQY.mft X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/99/2ece62-1d8c-450c-91e8-8eeb757cf545/1/1nPYSbfVBHN21X5veW8AGLcLRQY.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 76:9e:57:12:45:35:4a:fc:c7:55:9c:10:e0:1a:4a:9b:6c:c8: 37:d9:c6:c8:56:4b:9b:26:38:f9:8c:59:8b:80:2a:02:be:08: 01:d4:35:c5:c7:82:65:ba:ed:12:7c:5a:c4:87:5d:c6:29:c6: 51:5f:c8:e0:2d:fa:8c:b1:23:a5:e1:4c:9e:9c:9b:e4:db:11: bb:4f:da:44:34:c9:89:35:06:fe:7a:d6:62:46:73:b4:3a:8a: 70:b0:b2:01:7a:4d:22:c4:6c:9e:71:92:d4:08:f6:d6:a4:d4: d7:f0:d9:20:73:e8:10:56:9f:26:b0:b3:06:b0:7e:3c:c4:ce: 62:f3:5c:b4:8a:e4:dd:99:73:b7:fc:45:d2:bf:b0:a2:3e:0e: 6b:1b:66:aa:7b:42:15:f6:fe:6d:31:a4:86:cf:e8:39:1e:08: 2f:eb:87:33:d2:5d:6d:49:e1:e9:ec:98:8a:32:1e:c1:e5:37: d4:43:42:d4:20:2e:8f:0a:49:76:57:1c:ab:63:dd:7f:0a:9d: d4:5d:5b:28:37:16:84:54:42:17:c5:30:6c:59:09:ab:1f:b2: 62:71:29:19:8b:7e:a2:89:66:3c:8b:4d:64:d7:db:03:ea:a5: 3b:15:04:cb:92:ae:af:a7:81:11:16:96:ac:db:d5:cd:5c:4d: 75:8b:92:03 -----BEGIN CERTIFICATE----- MIIFFjCCA/6gAwIBAgISAZhFicZod55jHNGgH1ET9KpVMA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKGQ2NzNkODQ5YjdkNTA0NzM3NmQ1N2U2Zjc5NmYwMDE4Yjcw YjQ1MDYwHhcNMjUwNzI2MDcwMTUzWhcNMjUwNzI3MDcwMTUzWjAzMTEwLwYDVQQD Eyg3NjVjNWIzNGZmY2JiMmJhZDRjZmZiZjI3OTBiMjg0YTE0OTE2M2RmMIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAqJ28pXAcqaIO58myob2XxUPZ3hsy Vm8ili+9fwodQqRBv2AV5ilkvSG1YnAbYyBfXtnMcwyF07I46s2GeZIpVNh22tPa xig6aFbv1VlDZ9BBTWi95h4Y3CCFqRNFCPUO4GNSDNa7DMr+3lKNcOxFDeQ9iFZ7 4u+pNlkAHvZ6esT+L+Ech41Jj2Lblxpz4e7FcTJoS/WZn3NEmf3fh+3FMwMefVdU +N2JDby+HyNydYMleWOFnmYplxuKvvGql9cEAjTJAc+hWnpIH031IVHU76iZ6wJd ytFntSL8lRBjjOdY3GqUXNxfCFZpO5PUWPX0ooiNyXOGfLEVQ1H7ptT/QQIDAQAB o4ICIjCCAh4wHQYDVR0OBBYEFHZcWzT/y7K61M/78nkLKEoUkWPfMB8GA1UdIwQY MBaAFNZz2Em31QRzdtV+b3lvABi3C0UGMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvMW5QWVNiZlZCSE4yMVg1dmVXOEFHTGNMUlFZLmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC85OS8yZWNlNjItMWQ4Yy00NTBjLTkxZTgt OGVlYjc1N2NmNTQ1LzEvMW5QWVNiZlZCSE4yMVg1dmVXOEFHTGNMUlFZLm1mdDCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC85OS8yZWNlNjItMWQ4Yy00NTBjLTkxZTgtOGVlYjc1N2NmNTQ1 LzEvMW5QWVNiZlZCSE4yMVg1dmVXOEFHTGNMUlFZLmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAdp5XEkU1 SvzHVZwQ4BpKm2zIN9nGyFZLmyY4+YxZi4AqAr4IAdQ1xceCZbrtEnxaxIddxinG UV/I4C36jLEjpeFMnpyb5NsRu0/aRDTJiTUG/nrWYkZztDqKcLCyAXpNIsRsnnGS 1Aj21qTU1/DZIHPoEFafJrCzBrB+PMTOYvNctIrk3Zlzt/xF0r+woj4OaxtmqntC Ffb+bTGkhs/oOR4IL+uHM9JdbUnh6eyYijIeweU31ENC1CAujwpJdlccq2Pdfwqd 1F1bKDcWhFRCF8UwbFkJqx+yYnEpGYt+oolmPItNZNfbA+qlOxUEy5Kur6eBERaW rNvVzVxNdYuSAw== -----END CERTIFICATE-----Generated at Sat Jul 26 11:33:34 2025 by rpki-client