$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/9e/f76e20-5859-415d-86b3-119efcbb2023/1/u4MGMPI7Bwore99Sn3OUjJfqzUA.mft File: u4MGMPI7Bwore99Sn3OUjJfqzUA.mft (raw, json) Hash identifier: H8EBpvwVwv0OxXohUf3AI2QOyBXOZYGWyb0comA9QQU= Subject key identifier: 71:78:73:A4:27:5E:50:51:A1:C2:6F:C8:46:2A:2B:75:14:D2:B4:41 Authority key identifier: BB:83:06:30:F2:3B:07:0A:2B:7B:DF:52:9F:73:94:8C:97:EA:CD:40 Certificate issuer: /CN=bb830630f23b070a2b7bdf529f73948c97eacd40 Certificate serial: 01983687195AF59907886CE29CBBB8BA94D8 Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/u4MGMPI7Bwore99Sn3OUjJfqzUA.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/9e/f76e20-5859-415d-86b3-119efcbb2023/1/u4MGMPI7Bwore99Sn3OUjJfqzUA.mft Manifest number: 164A Signing time: Wed 23 Jul 2025 09:04:40 +0000 Manifest this update: Wed 23 Jul 2025 09:04:40 +0000 Manifest next update: Thu 24 Jul 2025 09:04:40 +0000 Files and hashes: 1: 2zKVxa5ZKGpg1zDrETT8fTyAG8U.roa (hash: RUglVoeUy6tdJhM2FiBGFBEjFDwNfOCa0rtIGcZ1G9w=) 2: 3G7uhcLKWWOtfmFK3Aty6Ijq4PE.roa (hash: 8QA8TR1b1eaSEAsPrBsT2EeJQQNKv/ChzK9Nd3Kvl/4=) 3: MNOTkNIun7XatYpLjSqnXyIRspc.roa (hash: ISmcthP6icZlwW98GlbqoqiUdgFZdDy5PiQWFxxDxGE=) 4: MdYXP9JDqyEnQSSpfC3vQstDRu4.roa (hash: 9CrtuWJI6l7IbdwDLorSOiVfWXkvbfh9OjjPb0sDWaY=) 5: PbW71RIBvB328VTIPh1scqZr_24.roa (hash: ZhoUQFHnvxU9klhLxoI/zN467hf68pEuS9x78HwJXRs=) 6: SDOLmAhobKGDPwlOvXakvXkm9LU.roa (hash: zmS1T8bhM8/AfzZdTFVM6nmbZ8DYbKH7HiNAE7C3CHU=) 7: atGIRZZ0nQZLZRQ_NdPfCEkiqBo.roa (hash: gpo9r/dMWl8Qk55whCrpHBW8v7pDraeu8eY2i0pYnz4=) 8: bu-aY814oN0zZmuedO0-L6nA1Js.roa (hash: l9qaLt4gYL7GO6wlotPMWtCoUA115L85+uv76tlCG/s=) 9: fi7u_8aaxqQqH2QeccD8KGKx3hM.roa (hash: 0Mmbiog2iLNRJeesgr68dLzWfBwYCoI0LBsDE3h2PiQ=) 10: u4MGMPI7Bwore99Sn3OUjJfqzUA.crl (hash: fm7ge3wrUkClT+KCfQxea3K/0qSGDdU5+wGiZKs2+8U=) Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/9e/f76e20-5859-415d-86b3-119efcbb2023/1/u4MGMPI7Bwore99Sn3OUjJfqzUA.crl rsync://rpki.ripe.net/repository/DEFAULT/9e/f76e20-5859-415d-86b3-119efcbb2023/1/u4MGMPI7Bwore99Sn3OUjJfqzUA.mft rsync://rpki.ripe.net/repository/DEFAULT/u4MGMPI7Bwore99Sn3OUjJfqzUA.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Thu 24 Jul 2025 07:00:25 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:98:36:87:19:5a:f5:99:07:88:6c:e2:9c:bb:b8:ba:94:d8 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=bb830630f23b070a2b7bdf529f73948c97eacd40 Validity Not Before: Jul 23 09:04:40 2025 GMT Not After : Jul 24 09:04:40 2025 GMT Subject: CN=717873a4275e5051a1c26fc8462a2b7514d2b441 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:cb:d6:6f:72:77:18:f7:96:70:07:5c:6c:8c:8e: 52:f5:ec:de:6a:80:cd:49:d8:ce:db:c5:85:c0:92: 3e:95:7f:5b:b3:55:22:15:6f:87:c4:01:cc:aa:33: 12:3d:9f:34:e0:5a:91:ef:bc:4b:93:40:27:d6:4e: d7:ea:bc:58:c2:a1:3e:87:01:1d:43:71:20:ba:9b: 03:0b:04:71:ab:88:9d:e6:2c:85:60:a5:af:02:17: 38:91:5e:f5:f2:76:c1:9c:c5:64:89:c4:8f:ff:89: 19:c2:7c:07:0a:87:d2:c5:ed:cf:70:06:ef:2c:6f: 07:87:e0:5c:5c:68:b8:29:c7:a3:d6:25:f7:e3:3a: 28:fb:c7:56:ee:6b:5e:8f:4f:ab:2a:03:7f:2c:cf: 02:30:fa:8a:4a:59:e0:c6:7f:ca:db:9e:65:8d:cf: 70:38:9b:ec:ec:e2:6b:67:86:97:c1:6a:de:8b:80: 57:b5:1a:6f:be:a2:e7:46:cf:7f:56:47:3b:fb:70: 51:eb:ae:9c:da:b6:fd:96:83:38:89:23:c9:95:4d: ee:97:e0:70:15:78:39:15:b0:1e:3a:2d:11:e5:eb: 3c:54:31:ba:d0:86:d0:68:2a:00:98:52:8a:8c:98: ed:1b:31:a4:ac:ef:a2:14:fd:29:01:32:fc:ef:1d: c2:4f Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 71:78:73:A4:27:5E:50:51:A1:C2:6F:C8:46:2A:2B:75:14:D2:B4:41 X509v3 Authority Key Identifier: keyid:BB:83:06:30:F2:3B:07:0A:2B:7B:DF:52:9F:73:94:8C:97:EA:CD:40 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/u4MGMPI7Bwore99Sn3OUjJfqzUA.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/9e/f76e20-5859-415d-86b3-119efcbb2023/1/u4MGMPI7Bwore99Sn3OUjJfqzUA.mft X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/9e/f76e20-5859-415d-86b3-119efcbb2023/1/u4MGMPI7Bwore99Sn3OUjJfqzUA.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 41:cc:12:c3:aa:5c:71:20:ab:70:c3:ac:e0:17:9a:9a:ea:d0: 33:1f:9f:23:81:bb:66:6e:82:a0:2a:ab:b5:11:1d:e2:68:d2: 46:ba:aa:40:f1:95:aa:50:b5:cd:79:4f:cf:6d:c3:13:c2:e2: b4:5a:b7:7c:af:7d:68:9d:c5:e3:0b:2e:a0:bf:77:ac:e8:ba: ce:84:64:45:d8:4a:09:73:1b:6f:6c:a3:2b:e6:ef:f4:48:ac: 11:6e:d2:93:e9:6f:57:0b:0e:74:7a:fd:ca:d1:14:e6:38:6a: 43:6a:d2:cb:87:eb:03:29:7e:a8:ca:d5:26:b1:ee:a9:04:bc: fe:db:c2:df:ea:ba:47:49:73:35:7a:3d:76:44:81:00:93:98: b0:73:3d:c5:9f:86:4c:2b:ea:d1:05:4a:ad:db:0d:5f:a1:c0: ca:db:4e:d5:56:3a:cb:91:b1:99:64:4e:82:2e:1b:d4:53:50: dd:ca:b0:47:d5:96:0e:7d:6a:3e:cf:b4:4c:87:9c:11:5e:21: 7e:58:26:fa:13:f9:a9:4e:3c:23:2b:d7:a9:10:63:01:a9:0c: 38:4e:60:d3:24:7f:9b:f4:7d:1b:a4:46:58:11:54:8e:e3:e1: ae:01:9b:99:43:a2:66:7f:ac:1c:15:81:b4:15:21:ea:96:18: a4:51:bd:22 -----BEGIN CERTIFICATE----- MIIFFjCCA/6gAwIBAgISAZg2hxla9ZkHiGzinLu4upTYMA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKGJiODMwNjMwZjIzYjA3MGEyYjdiZGY1MjlmNzM5NDhjOTdl YWNkNDAwHhcNMjUwNzIzMDkwNDQwWhcNMjUwNzI0MDkwNDQwWjAzMTEwLwYDVQQD Eyg3MTc4NzNhNDI3NWU1MDUxYTFjMjZmYzg0NjJhMmI3NTE0ZDJiNDQxMIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAy9ZvcncY95ZwB1xsjI5S9ezeaoDN SdjO28WFwJI+lX9bs1UiFW+HxAHMqjMSPZ804FqR77xLk0An1k7X6rxYwqE+hwEd Q3EgupsDCwRxq4id5iyFYKWvAhc4kV718nbBnMVkicSP/4kZwnwHCofSxe3PcAbv LG8Hh+BcXGi4Kcej1iX34zoo+8dW7mtej0+rKgN/LM8CMPqKSlngxn/K255ljc9w OJvs7OJrZ4aXwWrei4BXtRpvvqLnRs9/Vkc7+3BR666c2rb9loM4iSPJlU3ul+Bw FXg5FbAeOi0R5es8VDG60IbQaCoAmFKKjJjtGzGkrO+iFP0pATL87x3CTwIDAQAB o4ICIjCCAh4wHQYDVR0OBBYEFHF4c6QnXlBRocJvyEYqK3UU0rRBMB8GA1UdIwQY MBaAFLuDBjDyOwcKK3vfUp9zlIyX6s1AMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvdTRNR01QSTdCd29yZTk5U24zT1VqSmZxelVBLmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC85ZS9mNzZlMjAtNTg1OS00MTVkLTg2YjMt MTE5ZWZjYmIyMDIzLzEvdTRNR01QSTdCd29yZTk5U24zT1VqSmZxelVBLm1mdDCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC85ZS9mNzZlMjAtNTg1OS00MTVkLTg2YjMtMTE5ZWZjYmIyMDIz LzEvdTRNR01QSTdCd29yZTk5U24zT1VqSmZxelVBLmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAQcwSw6pc cSCrcMOs4BeamurQMx+fI4G7Zm6CoCqrtREd4mjSRrqqQPGVqlC1zXlPz23DE8Li tFq3fK99aJ3F4wsuoL93rOi6zoRkRdhKCXMbb2yjK+bv9EisEW7Sk+lvVwsOdHr9 ytEU5jhqQ2rSy4frAyl+qMrVJrHuqQS8/tvC3+q6R0lzNXo9dkSBAJOYsHM9xZ+G TCvq0QVKrdsNX6HAyttO1VY6y5GxmWROgi4b1FNQ3cqwR9WWDn1qPs+0TIecEV4h flgm+hP5qU48IyvXqRBjAakMOE5g0yR/m/R9G6RGWBFUjuPhrgGbmUOiZn+sHBWB tBUh6pYYpFG9Ig== -----END CERTIFICATE-----Generated at Wed Jul 23 11:45:31 2025 by rpki-client