$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/a9/e17714-467b-4433-9b7d-a6b991f4faf8/1/Skcc1s5gq-3XR2KxAapeb0IH784.mft File: Skcc1s5gq-3XR2KxAapeb0IH784.mft (raw, json) Hash identifier: 3VIlE9iAwUDu3R2squp4zuAglWxk3nRz3KbWie4t+7k= Subject key identifier: 93:42:35:3F:F0:66:A7:AC:06:95:AF:50:DA:5E:67:9C:FB:8C:77:02 Authority key identifier: 4A:47:1C:D6:CE:60:AB:ED:D7:47:62:B1:01:AA:5E:6F:42:07:EF:CE Certificate issuer: /CN=4a471cd6ce60abedd74762b101aa5e6f4207efce Certificate serial: 019826A32A3567CE5451326D97CC4A48867F Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/Skcc1s5gq-3XR2KxAapeb0IH784.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/a9/e17714-467b-4433-9b7d-a6b991f4faf8/1/Skcc1s5gq-3XR2KxAapeb0IH784.mft Manifest number: 0C4B Signing time: Sun 20 Jul 2025 07:01:23 +0000 Manifest this update: Sun 20 Jul 2025 07:01:23 +0000 Manifest next update: Mon 21 Jul 2025 07:01:23 +0000 Files and hashes: 1: 9rmctfL499xq_XdP3NUoaQL9dt8.roa (hash: qmWMMe4np6q+yuy7dqi4TF4eBy7zv3FZoKf6q8wuZjY=) 2: A9GxPF4ifZ6rbABmHPjtyPKjmzE.roa (hash: W77hd6FGDraLnDkaoT1pKx2we4vpUTM+eeqG9pbSJEo=) 3: Ec-3R5lSbUg4nkiWhBSyhOomcnQ.roa (hash: 62Xy6RK/IfEoVB5QCyI3LUCOJ3jLbPB31KKuSd8Y3RM=) 4: FvcaLEo9ePCgEvBVIK2eI87VCIQ.roa (hash: tEu/ql9ub4L5vy+BTuIysc1oUr/aYIo+MTuSlbcYBuk=) 5: GAnOR60hpofm0szlGWoPLIE5k9U.roa (hash: lr43p+6HKeY7jXAlLyQZ1kcGKOOPGZSL2OJ25R36SAo=) 6: HIg12NFUg7Eb_z2q4_r85AxcQMM.roa (hash: +6laq1iJCnub2N6uqVJ0BPm3G2zkWo723oA1FoMeiQM=) 7: Rtf-eqgW1jg7kzfL0pg8e63I-5M.roa (hash: IMz1jRwRZYT/rMcvQ4nY+BdL0NQuZlG7iPglwgBzyqQ=) 8: Skcc1s5gq-3XR2KxAapeb0IH784.crl (hash: 65ttK0UrBhdbdy9s8rJ9CnDSXvcFaBlVTtPzVjo0UF4=) 9: aqxiXCKg8wILOiiXb3CbjFknkz0.roa (hash: yaEb+yV9BvpFXZongqAOcwN1zzlRTWmLt/Rv8aKMq6E=) 10: cYGTSChE9gFQuUNQB0z3uVeo_M4.roa (hash: oMlb77CshXZ5OhhRrgeA3KmMtc/wbw1QuqBFiLFBoVI=) 11: fXIkEQH3meKCBAEQ5mXacq0TJ20.roa (hash: rnj1CDmi4d3j1os+cxi9WBUMoxTK5VvPgUCy380Y0oI=) 12: o979ZrblSrorE9B9zxDq41HUGYA.roa (hash: kigJPd/hpDjSHjs7rzVTH64QUtXJbGCT3yl7CjOiV2A=) 13: pa8fQ4jOrZ59vAyb7Lg7bj_QEgQ.roa (hash: Ep011ixCtG+lu/klHXgc5PQt2d4i1uDvMubTIvs6Oro=) 14: qGL-UUbfc2n5gMthqcDrY6oqiRI.roa (hash: fb04IIPduA2+NhPfcjizdhoAsQqWUl17Qoy+hMnSrwg=) 15: sYn86kZKw4G3fFE4L_epfK7wXCA.roa (hash: fdCIDuHioT3v4CHhE018xXjPJRG+/QyggQzYrvRftpc=) 16: toUQ0_iu6duuq_aTFgLEWgwtLpw.roa (hash: kGnBtrL9aHFWQFQVLy+h7pb0Fwh4bSr9itiOACSqYyk=) 17: twRuprVXnPVVcyrSMrNa_0_uqhM.roa (hash: nog8tSBlkAVSJF5Qw+uLxzczszHatj2ld99hU2zis/0=) Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/a9/e17714-467b-4433-9b7d-a6b991f4faf8/1/Skcc1s5gq-3XR2KxAapeb0IH784.crl rsync://rpki.ripe.net/repository/DEFAULT/a9/e17714-467b-4433-9b7d-a6b991f4faf8/1/Skcc1s5gq-3XR2KxAapeb0IH784.mft rsync://rpki.ripe.net/repository/DEFAULT/Skcc1s5gq-3XR2KxAapeb0IH784.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Mon 21 Jul 2025 06:21:25 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:98:26:a3:2a:35:67:ce:54:51:32:6d:97:cc:4a:48:86:7f Signature Algorithm: sha256WithRSAEncryption Issuer: CN=4a471cd6ce60abedd74762b101aa5e6f4207efce Validity Not Before: Jul 20 07:01:23 2025 GMT Not After : Jul 21 07:01:23 2025 GMT Subject: CN=9342353ff066a7ac0695af50da5e679cfb8c7702 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:a5:8a:55:c1:90:e8:e8:52:3c:68:5b:e4:7c:e1: da:87:fc:0f:dc:bb:2f:f5:1d:a8:bd:32:f9:9a:6e: 61:b2:5f:09:a2:22:d4:5b:e1:85:59:0f:33:19:7b: 44:4a:bd:ab:6d:f9:8b:56:c7:f9:29:1d:25:a2:05: 6a:9b:e7:74:f5:9d:fc:ad:72:6b:71:60:3e:e9:1a: ad:a6:56:f7:9e:fa:0f:02:2c:0b:a9:1f:ed:01:5a: d6:9f:d4:f6:e4:ff:c5:3a:c5:13:aa:57:d1:ec:be: 9e:45:cd:ae:0a:c2:29:58:bb:9d:f3:45:e6:41:5b: ab:fd:6a:9f:8a:9a:f3:b6:a0:08:15:62:7a:cc:07: 5d:fa:bd:45:86:2e:5a:8a:56:bf:46:2c:35:8f:95: b1:ef:df:41:83:28:3a:0e:51:13:3d:8a:64:27:55: 66:94:9e:14:27:78:51:58:72:61:94:4c:0d:6d:28: 15:63:3b:30:70:7d:36:ce:15:35:6f:f7:2c:8f:7e: 8f:63:a1:88:c0:25:54:36:b2:55:47:27:5e:b8:ea: cc:b5:7a:1d:72:f0:83:ca:70:3f:5b:e6:da:57:fc: ff:60:b1:1b:bb:f9:4f:e3:4f:f5:a8:c3:1e:8f:7f: 13:3d:a5:cc:ff:67:4c:f4:90:6b:89:23:39:0a:a1: cc:55 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 93:42:35:3F:F0:66:A7:AC:06:95:AF:50:DA:5E:67:9C:FB:8C:77:02 X509v3 Authority Key Identifier: keyid:4A:47:1C:D6:CE:60:AB:ED:D7:47:62:B1:01:AA:5E:6F:42:07:EF:CE X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/Skcc1s5gq-3XR2KxAapeb0IH784.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/a9/e17714-467b-4433-9b7d-a6b991f4faf8/1/Skcc1s5gq-3XR2KxAapeb0IH784.mft X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/a9/e17714-467b-4433-9b7d-a6b991f4faf8/1/Skcc1s5gq-3XR2KxAapeb0IH784.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 0a:9a:63:c0:d0:0f:a5:8a:90:69:cc:70:b8:68:26:d1:d7:dc: 8e:e5:a4:1d:3d:4f:64:ba:89:40:7b:6b:60:9b:82:d1:0a:29: bf:cb:ad:a6:a4:45:14:c2:67:75:55:20:cc:f2:70:3f:d4:22: 88:17:07:36:96:74:6f:36:2f:f7:5c:00:7a:1a:7a:56:35:33: 94:24:8a:d9:27:e4:d7:b8:cc:b8:7f:77:78:9b:bd:c9:6c:17: 68:45:51:1d:0d:3c:10:ec:0e:90:e0:78:bd:7a:42:d1:04:81: 59:80:db:9a:7c:b9:cb:f1:94:8a:a7:94:52:2f:6b:88:be:ee: 46:55:b2:34:af:a6:64:67:cc:36:54:47:9e:34:91:20:cb:7c: 25:50:19:cb:8c:b5:94:16:6c:54:5b:2c:32:79:53:49:a1:8f: e6:d6:98:73:6b:3e:df:43:d1:ee:96:5f:b9:8e:ba:ff:6a:ef: ec:db:b6:e5:e1:49:9d:25:69:f5:89:19:f4:8e:36:31:ae:05: 50:c2:b8:96:ca:9c:f6:bb:5b:7c:09:bd:45:2d:a6:f6:8a:21: 59:4c:71:64:9e:1e:9c:e1:05:d8:0b:8b:30:cd:48:59:ae:1c: 19:5e:64:3e:4a:f9:2c:be:e0:70:72:40:d5:5e:9e:a3:c3:e5: 85:82:a3:6b -----BEGIN CERTIFICATE----- MIIFFjCCA/6gAwIBAgISAZgmoyo1Z85UUTJtl8xKSIZ/MA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKDRhNDcxY2Q2Y2U2MGFiZWRkNzQ3NjJiMTAxYWE1ZTZmNDIw N2VmY2UwHhcNMjUwNzIwMDcwMTIzWhcNMjUwNzIxMDcwMTIzWjAzMTEwLwYDVQQD Eyg5MzQyMzUzZmYwNjZhN2FjMDY5NWFmNTBkYTVlNjc5Y2ZiOGM3NzAyMIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEApYpVwZDo6FI8aFvkfOHah/wP3Lsv 9R2ovTL5mm5hsl8JoiLUW+GFWQ8zGXtESr2rbfmLVsf5KR0logVqm+d09Z38rXJr cWA+6Rqtplb3nvoPAiwLqR/tAVrWn9T25P/FOsUTqlfR7L6eRc2uCsIpWLud80Xm QVur/WqfiprztqAIFWJ6zAdd+r1Fhi5aila/Riw1j5Wx799Bgyg6DlETPYpkJ1Vm lJ4UJ3hRWHJhlEwNbSgVYzswcH02zhU1b/csj36PY6GIwCVUNrJVRydeuOrMtXod cvCDynA/W+baV/z/YLEbu/lP40/1qMMej38TPaXM/2dM9JBriSM5CqHMVQIDAQAB o4ICIjCCAh4wHQYDVR0OBBYEFJNCNT/wZqesBpWvUNpeZ5z7jHcCMB8GA1UdIwQY MBaAFEpHHNbOYKvt10disQGqXm9CB+/OMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvU2tjYzFzNWdxLTNYUjJLeEFhcGViMElINzg0LmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC9hOS9lMTc3MTQtNDY3Yi00NDMzLTliN2Qt YTZiOTkxZjRmYWY4LzEvU2tjYzFzNWdxLTNYUjJLeEFhcGViMElINzg0Lm1mdDCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC9hOS9lMTc3MTQtNDY3Yi00NDMzLTliN2QtYTZiOTkxZjRmYWY4 LzEvU2tjYzFzNWdxLTNYUjJLeEFhcGViMElINzg0LmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEACppjwNAP pYqQacxwuGgm0dfcjuWkHT1PZLqJQHtrYJuC0Qopv8utpqRFFMJndVUgzPJwP9Qi iBcHNpZ0bzYv91wAehp6VjUzlCSK2Sfk17jMuH93eJu9yWwXaEVRHQ08EOwOkOB4 vXpC0QSBWYDbmny5y/GUiqeUUi9riL7uRlWyNK+mZGfMNlRHnjSRIMt8JVAZy4y1 lBZsVFssMnlTSaGP5taYc2s+30PR7pZfuY66/2rv7Nu25eFJnSVp9YkZ9I42Ma4F UMK4lsqc9rtbfAm9RS2m9oohWUxxZJ4enOEF2AuLMM1IWa4cGV5kPkr5LL7gcHJA 1V6eo8PlhYKjaw== -----END CERTIFICATE-----Generated at Sun Jul 20 14:17:31 2025 by rpki-client