$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/9e/aba502-d191-4fd7-a7cf-504f2766760f/1/snJh1xU0i_1zzp27ckiGVpk7ovE.mft File: snJh1xU0i_1zzp27ckiGVpk7ovE.mft (raw, json) Hash identifier: Eyz0bsJT/lkHHJZG57eq37dGk9ApC+uYQspFg+o9KlA= Subject key identifier: A5:C7:92:A5:FD:B8:DB:F3:BD:26:57:73:F1:A3:59:0C:05:24:3B:00 Authority key identifier: B2:72:61:D7:15:34:8B:FD:73:CE:9D:BB:72:48:86:56:99:3B:A2:F1 Certificate issuer: /CN=b27261d715348bfd73ce9dbb72488656993ba2f1 Certificate serial: 019841E297159612EABA543B6298BE362B4D Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/snJh1xU0i_1zzp27ckiGVpk7ovE.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/9e/aba502-d191-4fd7-a7cf-504f2766760f/1/snJh1xU0i_1zzp27ckiGVpk7ovE.mft Manifest number: 112A Signing time: Fri 25 Jul 2025 14:00:25 +0000 Manifest this update: Fri 25 Jul 2025 14:00:25 +0000 Manifest next update: Sat 26 Jul 2025 14:00:25 +0000 Files and hashes: 1: 54iLRsUEYQSLlV8kHVTer9P4keA.roa (hash: Oib7LJlXh4bUMGiTPxF+59IQOdwF+fvCUOmQ1Sv5YqM=) 2: 83ZfI9Fyoy0-0Ed7XViCJUVWAUk.roa (hash: x5Erfp0LUGN9evcbs1ECyXblatyvnAhrnm8OrbCDB8k=) 3: DtWqKYrRCyGx6dsd9f2L7CKfIRc.roa (hash: O7NemdIlDZpd4quz6YecLMnjW1CyD/u06cKhcBOTRro=) 4: GrZCo-Pl-pKds5zmwg7ubalVFTA.roa (hash: XSM4rBpjvcsUyAb/r/u55Oo3ZCJqxZNIGwjYsJQ68bw=) 5: M80ufUXhkNHfa9K4zU6X6k_ofZQ.roa (hash: 4dQl+qST57nUFs67WwcEmlUV01oY2iEO29630JMqbwE=) 6: OcXOGlX2Gc26JEdm5iWVWnBYg58.roa (hash: /vGDKbgE4iZUS4BzIvVP16inipE2apdXrS0M45rcngw=) 7: QpucqboD9L8Uv9-I8wC2eqyytjM.roa (hash: QJ36JcAEae+tPmwoLHxsrKQ/qHkNlapv2iTQudy3nXg=) 8: VLrSYlONO7JZUvaeI6OzgjRksA0.roa (hash: LTkUIoLhvOTPKcASxWAtrGL8orynFjazuB3yg7c0ZYo=) 9: W95VCieFrYA-UWvQbNSL7N3Y2Cg.roa (hash: YvWvtJ9d+roXNfi60DzUNUYY7G9jfkQp1ZTCPAwbx+g=) 10: Yw4yz2qvg4rQujrK-dIx_KPixQM.roa (hash: rPOdhOXTd0LJkvjvgXHjpfcSX15w4WKfBaBl0s4PykM=) 11: mMdAkncXd62KSLEMH5-GZ2xifmI.roa (hash: BsiKxHj0OcEVg20ZYqrvGiqQgj+ynivI6054d313+QE=) 12: snJh1xU0i_1zzp27ckiGVpk7ovE.crl (hash: wv/gK79TtlzI8vzBzYFuNuQLfqQTn/gNRUIz3Q0dnuo=) 13: tXmj_lk4J_cxjq5mg9Y-DnR4g68.roa (hash: FkJnyg1Nbp4kUP6A2c71ys6CgKIoTjWwYiDec6OD1BY=) 14: x93oIxwN7f9CnY5MK-gEMFA9RCs.roa (hash: iUrM+UkqfotbOBAOD6sNrVDAFzEQJnu2I0F39zCKGjM=) 15: x_9TAtatN7OaJxTBmrfHpUlXZDA.roa (hash: 2gG4s/omQ5P0Lbi33p1Th/x4L/bao6YkNKtuc6UmamA=) Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/9e/aba502-d191-4fd7-a7cf-504f2766760f/1/snJh1xU0i_1zzp27ckiGVpk7ovE.crl rsync://rpki.ripe.net/repository/DEFAULT/9e/aba502-d191-4fd7-a7cf-504f2766760f/1/snJh1xU0i_1zzp27ckiGVpk7ovE.mft rsync://rpki.ripe.net/repository/DEFAULT/snJh1xU0i_1zzp27ckiGVpk7ovE.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Sat 26 Jul 2025 14:00:25 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:98:41:e2:97:15:96:12:ea:ba:54:3b:62:98:be:36:2b:4d Signature Algorithm: sha256WithRSAEncryption Issuer: CN=b27261d715348bfd73ce9dbb72488656993ba2f1 Validity Not Before: Jul 25 14:00:25 2025 GMT Not After : Jul 26 14:00:25 2025 GMT Subject: CN=a5c792a5fdb8dbf3bd265773f1a3590c05243b00 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:96:ae:ce:34:7d:3a:c2:10:04:b4:0b:50:e1:35: 67:72:c8:70:1f:1b:a2:5d:2c:6c:b7:ea:f4:bf:60: 0a:d0:81:e0:ea:70:52:45:72:a8:fb:66:be:d2:d5: f6:0d:3e:b7:95:bb:34:61:bc:8d:f7:32:ba:59:0e: 54:59:d5:9e:f8:0c:b6:e2:51:21:7f:da:c1:0d:b4: 75:57:2c:39:c6:64:f5:26:76:dd:a5:69:c4:e1:61: eb:61:d0:e4:96:45:e0:86:7f:ae:94:e7:ec:b9:21: b2:40:72:41:a7:55:9e:0a:f3:32:32:21:6c:5e:3b: b7:a4:ba:c8:c3:0c:b3:28:4d:64:19:5f:86:ed:28: e4:66:77:23:89:6c:2f:a3:b1:30:c1:fd:5e:7e:6a: 57:1c:8f:6a:cb:99:82:49:d3:fa:ad:4f:77:26:46: 6c:51:d6:7e:c7:57:e3:e7:aa:ac:da:cf:05:f6:59: ac:77:51:29:e5:d0:e0:69:65:91:eb:42:1c:03:46: 38:f4:57:40:7c:dc:2d:28:69:79:15:8b:a8:e8:88: ff:ae:b0:3b:c4:f6:77:1b:f5:35:f8:fe:7f:5c:e9: f3:78:e9:06:0f:bd:5a:e2:c2:38:66:43:9b:bf:00: 95:c6:50:37:c1:9a:9e:92:8f:42:9c:13:5d:b9:68: 26:47 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: A5:C7:92:A5:FD:B8:DB:F3:BD:26:57:73:F1:A3:59:0C:05:24:3B:00 X509v3 Authority Key Identifier: keyid:B2:72:61:D7:15:34:8B:FD:73:CE:9D:BB:72:48:86:56:99:3B:A2:F1 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/snJh1xU0i_1zzp27ckiGVpk7ovE.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/9e/aba502-d191-4fd7-a7cf-504f2766760f/1/snJh1xU0i_1zzp27ckiGVpk7ovE.mft X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/9e/aba502-d191-4fd7-a7cf-504f2766760f/1/snJh1xU0i_1zzp27ckiGVpk7ovE.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 31:89:9b:cc:4f:11:16:40:5f:0c:fb:9e:c3:61:fd:4d:9e:f6: ce:ea:82:21:79:01:bf:20:56:a6:59:86:f2:53:0a:62:64:ce: 11:dc:87:b1:fb:2d:3b:f0:cf:7f:35:30:15:05:26:5f:63:d6: 5b:71:29:3e:a4:90:77:f6:c5:84:8f:10:f0:80:55:34:31:62: df:bf:bd:e8:ab:ff:70:78:ce:73:5b:7d:27:be:ce:df:19:46: 6c:29:86:9f:81:f6:c8:5c:28:bd:ad:32:cf:e2:41:9e:b0:8c: 15:a7:97:39:f2:53:bc:1d:78:96:37:ab:90:c2:cd:a0:d9:a8: ac:82:1e:e1:0f:72:59:d7:42:c0:f6:34:62:c5:e6:b6:96:f5: 89:ae:41:ea:61:ad:d8:31:73:5f:72:30:91:2d:34:16:3a:9e: 70:2c:05:f5:0e:49:ff:da:d4:34:70:5e:5b:fb:10:e3:df:e2: f7:b0:ac:ea:c8:7f:0a:42:85:2d:04:4e:47:12:1e:3b:91:15: 8e:9b:78:d6:17:08:b9:e1:3b:62:8b:5f:46:d5:ab:13:8b:7e: 1d:16:ab:b2:ce:99:9a:a6:ac:59:2f:3f:2a:3d:3f:35:3f:eb: b8:0e:ed:44:97:6b:3f:1e:a8:cf:6f:05:d8:88:73:26:24:d2: 1a:c0:d8:94 -----BEGIN CERTIFICATE----- MIIFFjCCA/6gAwIBAgISAZhB4pcVlhLqulQ7Ypi+NitNMA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKGIyNzI2MWQ3MTUzNDhiZmQ3M2NlOWRiYjcyNDg4NjU2OTkz YmEyZjEwHhcNMjUwNzI1MTQwMDI1WhcNMjUwNzI2MTQwMDI1WjAzMTEwLwYDVQQD EyhhNWM3OTJhNWZkYjhkYmYzYmQyNjU3NzNmMWEzNTkwYzA1MjQzYjAwMIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAlq7ONH06whAEtAtQ4TVncshwHxui XSxst+r0v2AK0IHg6nBSRXKo+2a+0tX2DT63lbs0YbyN9zK6WQ5UWdWe+Ay24lEh f9rBDbR1Vyw5xmT1JnbdpWnE4WHrYdDklkXghn+ulOfsuSGyQHJBp1WeCvMyMiFs Xju3pLrIwwyzKE1kGV+G7SjkZncjiWwvo7Ewwf1efmpXHI9qy5mCSdP6rU93JkZs UdZ+x1fj56qs2s8F9lmsd1Ep5dDgaWWR60IcA0Y49FdAfNwtKGl5FYuo6Ij/rrA7 xPZ3G/U1+P5/XOnzeOkGD71a4sI4ZkObvwCVxlA3wZqeko9CnBNduWgmRwIDAQAB o4ICIjCCAh4wHQYDVR0OBBYEFKXHkqX9uNvzvSZXc/GjWQwFJDsAMB8GA1UdIwQY MBaAFLJyYdcVNIv9c86du3JIhlaZO6LxMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvc25KaDF4VTBpXzF6enAyN2NraUdWcGs3b3ZFLmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC85ZS9hYmE1MDItZDE5MS00ZmQ3LWE3Y2Yt NTA0ZjI3NjY3NjBmLzEvc25KaDF4VTBpXzF6enAyN2NraUdWcGs3b3ZFLm1mdDCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC85ZS9hYmE1MDItZDE5MS00ZmQ3LWE3Y2YtNTA0ZjI3NjY3NjBm LzEvc25KaDF4VTBpXzF6enAyN2NraUdWcGs3b3ZFLmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAMYmbzE8R FkBfDPuew2H9TZ72zuqCIXkBvyBWplmG8lMKYmTOEdyHsfstO/DPfzUwFQUmX2PW W3EpPqSQd/bFhI8Q8IBVNDFi37+96Kv/cHjOc1t9J77O3xlGbCmGn4H2yFwova0y z+JBnrCMFaeXOfJTvB14ljerkMLNoNmorIIe4Q9yWddCwPY0YsXmtpb1ia5B6mGt 2DFzX3IwkS00FjqecCwF9Q5J/9rUNHBeW/sQ49/i97Cs6sh/CkKFLQRORxIeO5EV jpt41hcIueE7YotfRtWrE4t+HRarss6ZmqasWS8/Kj0/NT/ruA7tRJdrPx6oz28F 2IhzJiTSGsDYlA== -----END CERTIFICATE-----Generated at Fri Jul 25 22:53:54 2025 by rpki-client