$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/a7/9151c0-3326-4801-9363-c7d19930d66d/1/tOgroXFdaurlsBAnJf_gyDRzXX0.mft File: tOgroXFdaurlsBAnJf_gyDRzXX0.mft (raw, json) Hash identifier: 2V4ttnKtMekBvdTxv6QA30/+pwC4NmAqw/lbH808f+o= Subject key identifier: 41:CA:B1:A5:0C:6C:B5:AF:A2:1A:3B:D3:6B:C4:9B:87:56:F2:51:D7 Authority key identifier: B4:E8:2B:A1:71:5D:6A:EA:E5:B0:10:27:25:FF:E0:C8:34:73:5D:7D Certificate issuer: /CN=b4e82ba1715d6aeae5b0102725ffe0c834735d7d Certificate serial: 019834CBFF8C2ECF5996DE01B69ED86214C2 Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/tOgroXFdaurlsBAnJf_gyDRzXX0.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/a7/9151c0-3326-4801-9363-c7d19930d66d/1/tOgroXFdaurlsBAnJf_gyDRzXX0.mft Manifest number: 0DEB Signing time: Wed 23 Jul 2025 01:00:41 +0000 Manifest this update: Wed 23 Jul 2025 01:00:41 +0000 Manifest next update: Thu 24 Jul 2025 01:00:41 +0000 Files and hashes: 1: 69jsCPkwXK1lmTxeQTyCID9PpjA.roa (hash: h/Q47E5oO3l5JxeekNZr7l4rqZH5SyA0969VUEHNB8w=) 2: 9MVV1yAh59mTgEP_W258bMa49_o.roa (hash: iCN3glju44EdxjBrGRw+NZhFmqg56yUA7pS6/PNweyY=) 3: AjV2rlIwTElr058YXLjGHHrdXf0.roa (hash: LTFD7RWDdMyUwIhuINghYkedTIuVGScYQK467Diulf0=) 4: Dgr2wvOQnRz5hgawqSG0QB7Wpf8.roa (hash: qz1bNfdEE/9TcJfQDqdc+8FtR45UoCnUkyfUGSABkmQ=) 5: Nc7iCAoE-03LSc1GXjFAkPSA-x0.roa (hash: VtOFvrmMP9apoQYdMZ3KyjB/zTDsL+t3o+S71XhQxpY=) 6: ObtlGayrPGhbC0NJB3cANhdfN9g.roa (hash: IXODRFBoDBQAcQ/y7+mqgK85yVkykmHrcIsLk/+rl+k=) 7: RzTS_aVg4A3thhT1xHxtMXq_vOI.roa (hash: zu1mzofX6iUkewhCXeSVvIWnMGeLEK4TikiEna45T0w=) 8: VifVBKjqmDhUgid5BLElJTuQJo4.roa (hash: WI5+mxqhucetVt6cCUvKQ5QuoJnG/kLcpHeXlC1Yb5Y=) 9: hG1KSyXr5tG55jI9wBm-tSwn7ZM.roa (hash: ojUG1DHCfBEX5RoSvSto85jWrWuEE+T8wqBz5z+O87U=) 10: lKCL8VeF7spgo1KPqTl3MnMrJFU.roa (hash: G5kvKqbW+q0BKre+iGyFYRJgxgTgTCaLSiQqwrZLbuM=) 11: tOgroXFdaurlsBAnJf_gyDRzXX0.crl (hash: TZAL1/rLewIh8eYLSCAgThUfrvm93ND0gBjaNCIwG9g=) Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/a7/9151c0-3326-4801-9363-c7d19930d66d/1/tOgroXFdaurlsBAnJf_gyDRzXX0.crl rsync://rpki.ripe.net/repository/DEFAULT/a7/9151c0-3326-4801-9363-c7d19930d66d/1/tOgroXFdaurlsBAnJf_gyDRzXX0.mft rsync://rpki.ripe.net/repository/DEFAULT/tOgroXFdaurlsBAnJf_gyDRzXX0.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Thu 24 Jul 2025 01:00:41 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:98:34:cb:ff:8c:2e:cf:59:96:de:01:b6:9e:d8:62:14:c2 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=b4e82ba1715d6aeae5b0102725ffe0c834735d7d Validity Not Before: Jul 23 01:00:41 2025 GMT Not After : Jul 24 01:00:41 2025 GMT Subject: CN=41cab1a50c6cb5afa21a3bd36bc49b8756f251d7 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:e6:16:ac:a9:8e:c3:2a:6f:4c:75:c9:57:11:2e: 9d:f8:c5:e3:8a:5e:84:e4:c9:50:5b:79:55:25:30: 5e:24:d6:9b:71:28:60:83:cd:16:6c:d0:90:a9:49: 17:fc:08:bf:6f:28:e9:a7:bc:98:88:af:3d:6f:6e: 73:a2:b4:47:17:c8:cb:11:7a:e7:0b:39:c9:97:ed: 4d:34:62:69:f4:b2:b6:85:2d:78:b4:31:ec:6a:11: d9:af:7a:16:80:59:09:4f:ad:53:f1:1e:b6:cc:99: 6f:68:bc:9e:92:cd:c2:78:1f:ff:19:88:9a:84:66: ac:fb:33:01:b4:39:9d:95:79:7b:7d:aa:c2:29:81: d6:6d:be:d1:c0:47:91:2e:54:6f:56:fd:e5:de:72: d5:61:43:c4:f0:3b:8f:7f:1c:75:8e:4e:cb:a1:3c: fc:5f:51:ef:31:e9:38:1a:32:eb:62:b1:f7:5f:a9: ac:32:c7:c0:dd:1c:20:07:65:70:b7:6b:60:b3:ac: 29:40:81:fa:eb:00:a3:c2:e8:08:4e:c5:c7:30:7e: 2c:fa:76:25:25:2b:7b:6c:0f:6c:3b:5b:b2:b7:1f: 99:cb:62:44:c9:e1:79:5f:97:36:f1:8d:ee:b2:3b: a1:0a:6c:57:48:8d:ba:80:1f:58:ca:5b:3b:09:d1: 89:73 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 41:CA:B1:A5:0C:6C:B5:AF:A2:1A:3B:D3:6B:C4:9B:87:56:F2:51:D7 X509v3 Authority Key Identifier: keyid:B4:E8:2B:A1:71:5D:6A:EA:E5:B0:10:27:25:FF:E0:C8:34:73:5D:7D X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/tOgroXFdaurlsBAnJf_gyDRzXX0.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/a7/9151c0-3326-4801-9363-c7d19930d66d/1/tOgroXFdaurlsBAnJf_gyDRzXX0.mft X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/a7/9151c0-3326-4801-9363-c7d19930d66d/1/tOgroXFdaurlsBAnJf_gyDRzXX0.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 3a:3d:e9:d2:cd:cd:65:d3:88:f2:46:ce:59:81:9c:1d:99:07: cc:59:15:37:a8:93:9a:b9:e2:b1:1d:5e:d2:82:82:c8:ec:c5: e7:99:45:60:29:83:e8:92:ef:49:29:08:10:aa:d8:6c:c6:b4: 4f:21:50:8e:9c:7a:df:84:63:a2:ca:bd:09:42:cb:73:44:e3: 1e:27:00:cc:4e:26:2a:0e:c0:49:b6:36:35:b7:7f:53:7f:e6: bd:e4:6d:cb:e4:db:81:e3:ef:aa:8c:0a:d3:b0:2d:77:8a:40: 21:81:d1:25:8a:8e:7b:9c:b3:e7:74:7b:9c:34:ff:f5:c1:98: 28:b4:b5:00:59:42:58:20:29:18:45:5d:4c:c0:93:3b:fd:57: e4:9e:dc:98:97:b7:67:80:e7:c8:ce:05:ec:83:9b:ae:23:82: c8:7a:36:2a:93:12:a8:87:c1:3a:ca:00:34:9b:66:b5:c9:89: f5:4f:82:b5:fa:6a:48:1e:c8:9a:af:46:34:0e:10:91:aa:99: 3e:bf:9a:85:ee:be:bd:45:29:9f:ab:06:b6:d5:5b:d0:fb:83: 70:f9:22:de:d0:81:42:38:c2:3d:c4:40:ef:05:ec:d0:0a:5f: 49:3b:1f:39:b9:d2:4f:1d:06:07:e8:52:be:d3:ff:88:31:a3: ee:e8:3f:9d -----BEGIN CERTIFICATE----- MIIFFjCCA/6gAwIBAgISAZg0y/+MLs9Zlt4Btp7YYhTCMA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKGI0ZTgyYmExNzE1ZDZhZWFlNWIwMTAyNzI1ZmZlMGM4MzQ3 MzVkN2QwHhcNMjUwNzIzMDEwMDQxWhcNMjUwNzI0MDEwMDQxWjAzMTEwLwYDVQQD Eyg0MWNhYjFhNTBjNmNiNWFmYTIxYTNiZDM2YmM0OWI4NzU2ZjI1MWQ3MIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEA5hasqY7DKm9MdclXES6d+MXjil6E 5MlQW3lVJTBeJNabcShgg80WbNCQqUkX/Ai/byjpp7yYiK89b25zorRHF8jLEXrn CznJl+1NNGJp9LK2hS14tDHsahHZr3oWgFkJT61T8R62zJlvaLyeks3CeB//GYia hGas+zMBtDmdlXl7farCKYHWbb7RwEeRLlRvVv3l3nLVYUPE8DuPfxx1jk7LoTz8 X1HvMek4GjLrYrH3X6msMsfA3RwgB2Vwt2tgs6wpQIH66wCjwugITsXHMH4s+nYl JSt7bA9sO1uytx+Zy2JEyeF5X5c28Y3usjuhCmxXSI26gB9Yyls7CdGJcwIDAQAB o4ICIjCCAh4wHQYDVR0OBBYEFEHKsaUMbLWvoho702vEm4dW8lHXMB8GA1UdIwQY MBaAFLToK6FxXWrq5bAQJyX/4Mg0c119MA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvdE9ncm9YRmRhdXJsc0JBbkpmX2d5RFJ6WFgwLmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC9hNy85MTUxYzAtMzMyNi00ODAxLTkzNjMt YzdkMTk5MzBkNjZkLzEvdE9ncm9YRmRhdXJsc0JBbkpmX2d5RFJ6WFgwLm1mdDCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC9hNy85MTUxYzAtMzMyNi00ODAxLTkzNjMtYzdkMTk5MzBkNjZk LzEvdE9ncm9YRmRhdXJsc0JBbkpmX2d5RFJ6WFgwLmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAOj3p0s3N ZdOI8kbOWYGcHZkHzFkVN6iTmrnisR1e0oKCyOzF55lFYCmD6JLvSSkIEKrYbMa0 TyFQjpx634Rjosq9CULLc0TjHicAzE4mKg7ASbY2Nbd/U3/mveRty+TbgePvqowK 07Atd4pAIYHRJYqOe5yz53R7nDT/9cGYKLS1AFlCWCApGEVdTMCTO/1X5J7cmJe3 Z4DnyM4F7IObriOCyHo2KpMSqIfBOsoANJtmtcmJ9U+CtfpqSB7Imq9GNA4QkaqZ Pr+ahe6+vUUpn6sGttVb0PuDcPki3tCBQjjCPcRA7wXs0ApfSTsfObnSTx0GB+hS vtP/iDGj7ug/nQ== -----END CERTIFICATE-----Generated at Wed Jul 23 07:57:36 2025 by rpki-client