$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/ac/f3549f-18f7-48b0-901d-25cc9d6cfbb9/1/I0Rtp6cLznc-wrwWVarjDDwYQSw.mft File: I0Rtp6cLznc-wrwWVarjDDwYQSw.mft (raw, json) Hash identifier: XoGdgIm5gUfrOdi2CvkrRsVs29hDkd53ESInS6XjVKc= Subject key identifier: 65:DD:98:CB:08:49:F4:BF:68:23:46:95:FD:89:A1:B2:9C:DA:68:2D Authority key identifier: 23:44:6D:A7:A7:0B:CE:77:3E:C2:BC:16:55:AA:E3:0C:3C:18:41:2C Certificate issuer: /CN=23446da7a70bce773ec2bc1655aae30c3c18412c Certificate serial: 0198271025023EC4967B8B5C82B00CCDE182 Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/I0Rtp6cLznc-wrwWVarjDDwYQSw.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/ac/f3549f-18f7-48b0-901d-25cc9d6cfbb9/1/I0Rtp6cLznc-wrwWVarjDDwYQSw.mft Manifest number: 13AF Signing time: Sun 20 Jul 2025 09:00:26 +0000 Manifest this update: Sun 20 Jul 2025 09:00:26 +0000 Manifest next update: Mon 21 Jul 2025 09:00:26 +0000 Files and hashes: 1: 1-DmgZ4SOp-NyMxLpBYaEtj39Pdc.roa (hash: moNVW0pEVWJfvkZEJ959J7HVzxYxrRxeZe7wePoILkM=) 2: 1-YvBQ0BXrsF-NI7ubQxbzvPVuzg.roa (hash: eYRmazTnlT6QkpTc8BcLL4cZu0o6zfLVuHBleuRca74=) 3: FwySP1jVKL7DmmlRNwZnvOJofjw.roa (hash: F8V8HLYupPXjwfMEbx0g1ieMP6WPPz1HmoVO8jTtRCg=) 4: I0Rtp6cLznc-wrwWVarjDDwYQSw.crl (hash: pKWU3pKib6umRRQ1/YXIhL9JkUkvVftS/Ur5JCoFpiY=) 5: Xu2K8fW-gQnYV7VE3ISwB8N68f8.roa (hash: NKQq6ePbr62hGHn3QtTkpNNxc85cdItsXJmI3/Mzf2w=) 6: bXcsNUMfdZBR3tv1r8dI-NGTxGI.roa (hash: nSyMcXVhj3Lt4TUfuUh042NUrc5IpwBc7m8EmxqlbJw=) 7: d_P2C7-8KzXEXKrYSD9DOI8LiWE.roa (hash: Yd4prnJa4gstJKWN3oZHIXfbfrVyLQkl2GQSNyCI7uQ=) 8: k5bIb9MZd-l_B-bxXKNoMlRDovA.roa (hash: bpuvw96upd8j55DJW2izTXwq0PIjcaMc/13PHw88j0I=) 9: leUb75eQIxyb-VxN49MBjH1YF7k.roa (hash: kyA2+f/9l+pKqkl9Or57N7CwCtWEqE5/Far2bCfSZ4I=) 10: pqM1u8SkS4zcFQvrBhQWpXPMYCA.roa (hash: ZvRrYdTYDz9FJEg1Ikh5qg9AfwzK1a1b92vZCCUcbys=) 11: qV9uaYW0EJ9RfJ2uJjNKqD5z7XA.roa (hash: 8zBVfYPjKnKjKryP+fVFU4l51KGHl1B5bpWFMv1A9Mk=) 12: sDrv6ds57QYfp4Z_4o5IpblURKI.roa (hash: Y8MxO27e+WV4vIqzW7fZxZuurHymmQUKVTNCec7B22g=) 13: wFX7xPpJ7yA033Ye7jyB7b5hfrY.roa (hash: cWLM1VzdX6e7FN9H2A5u+k5ZkEsPKCYG7CFbFvNUR/k=) 14: xxa6C-pa80quO5ROYbjP391EF1Y.roa (hash: kO5NzNIL7QO5wmPmlUrjQ/tzsh5UuDfcIRoRWEvLEF8=) Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/ac/f3549f-18f7-48b0-901d-25cc9d6cfbb9/1/I0Rtp6cLznc-wrwWVarjDDwYQSw.crl rsync://rpki.ripe.net/repository/DEFAULT/ac/f3549f-18f7-48b0-901d-25cc9d6cfbb9/1/I0Rtp6cLznc-wrwWVarjDDwYQSw.mft rsync://rpki.ripe.net/repository/DEFAULT/I0Rtp6cLznc-wrwWVarjDDwYQSw.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Mon 21 Jul 2025 04:00:25 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:98:27:10:25:02:3e:c4:96:7b:8b:5c:82:b0:0c:cd:e1:82 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=23446da7a70bce773ec2bc1655aae30c3c18412c Validity Not Before: Jul 20 09:00:26 2025 GMT Not After : Jul 21 09:00:26 2025 GMT Subject: CN=65dd98cb0849f4bf68234695fd89a1b29cda682d Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:c4:c2:a5:12:12:31:e9:30:37:98:54:67:ba:fa: 30:e4:0d:81:a4:57:bb:49:56:60:d7:74:de:ed:8b: 07:2f:34:3f:83:bc:fe:df:37:53:f7:29:1a:a7:fa: b2:aa:8d:8c:1f:0b:6b:44:15:dd:72:da:ce:11:3a: a7:62:cb:e8:35:cc:20:da:ca:31:e6:5b:9d:04:31: 52:84:3b:84:2f:60:b2:c7:13:30:4d:0d:d1:8b:9f: 8d:3e:34:21:1e:ad:f6:81:e5:22:4a:bb:86:17:95: 5c:2b:28:a6:dc:5c:e7:1f:86:2e:f5:82:41:dd:19: e6:24:d0:9b:67:a2:42:bd:8f:4e:d5:15:2f:9f:8c: ad:44:c3:0a:9d:44:fe:06:52:bd:a2:e4:f3:31:48: ef:a7:95:62:4c:cd:5a:0b:0f:df:ba:63:a5:d8:ed: c3:f5:3f:ae:b3:eb:86:f6:2a:60:50:1b:64:4e:c6: f2:00:da:2d:57:54:ca:1c:5a:b7:c6:e6:93:93:e5: 68:01:49:50:f5:88:03:bc:f4:e1:96:ee:13:2d:49: 3e:c4:30:7e:18:71:d2:a6:41:89:80:ae:d3:99:b0: 47:f8:1b:1f:ef:d8:d8:83:b7:79:fc:e4:78:ff:6f: dc:93:2c:0a:f9:a1:65:e7:64:70:5a:88:8f:bd:5e: 99:91 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 65:DD:98:CB:08:49:F4:BF:68:23:46:95:FD:89:A1:B2:9C:DA:68:2D X509v3 Authority Key Identifier: keyid:23:44:6D:A7:A7:0B:CE:77:3E:C2:BC:16:55:AA:E3:0C:3C:18:41:2C X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/I0Rtp6cLznc-wrwWVarjDDwYQSw.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/ac/f3549f-18f7-48b0-901d-25cc9d6cfbb9/1/I0Rtp6cLznc-wrwWVarjDDwYQSw.mft X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/ac/f3549f-18f7-48b0-901d-25cc9d6cfbb9/1/I0Rtp6cLznc-wrwWVarjDDwYQSw.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 93:47:88:27:ab:fd:f4:c0:02:e3:19:7c:3d:30:d0:f2:0e:7d: 04:e6:59:7e:5b:f5:56:58:24:36:91:59:25:74:f7:8f:16:c2: ca:a3:0f:8c:de:ad:ed:9a:46:cd:ca:6c:ea:47:aa:cb:42:cd: 7d:f6:de:67:bf:ff:9a:7d:b5:95:a9:dd:e2:4f:5a:92:09:92: ac:54:b6:b6:6b:5b:21:3c:99:e0:7c:e0:30:14:a3:c4:a1:08: 92:bf:52:f0:17:46:4a:eb:03:26:24:cf:86:4d:62:12:ca:ec: c2:71:6a:1e:f9:c8:cf:4e:d7:c9:d0:40:e6:cd:69:ec:85:c9: 74:0e:f5:e0:ed:30:fd:a7:44:1e:cf:91:f7:2e:37:ba:0f:83: b7:36:89:8f:b2:3e:7c:d4:2c:47:41:fd:bc:21:0e:f8:17:d9: f8:13:36:c2:6d:09:53:4a:4c:2d:05:20:c5:02:21:2e:df:71: ca:35:42:bf:f9:39:55:3a:20:9f:53:73:6e:93:2d:60:5f:83: ec:77:d3:45:36:d7:a7:38:d6:14:69:4b:11:60:59:dc:24:e5: 94:73:7c:01:cb:5f:92:b6:33:c7:85:4a:42:10:98:5c:a0:32: e0:61:53:aa:f4:01:d3:f3:28:71:d6:3c:82:8d:16:89:3c:fb: 39:26:6b:09 -----BEGIN CERTIFICATE----- MIIFFjCCA/6gAwIBAgISAZgnECUCPsSWe4tcgrAMzeGCMA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKDIzNDQ2ZGE3YTcwYmNlNzczZWMyYmMxNjU1YWFlMzBjM2Mx ODQxMmMwHhcNMjUwNzIwMDkwMDI2WhcNMjUwNzIxMDkwMDI2WjAzMTEwLwYDVQQD Eyg2NWRkOThjYjA4NDlmNGJmNjgyMzQ2OTVmZDg5YTFiMjljZGE2ODJkMIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAxMKlEhIx6TA3mFRnuvow5A2BpFe7 SVZg13Te7YsHLzQ/g7z+3zdT9ykap/qyqo2MHwtrRBXdctrOETqnYsvoNcwg2sox 5ludBDFShDuEL2CyxxMwTQ3Ri5+NPjQhHq32geUiSruGF5VcKyim3FznH4Yu9YJB 3RnmJNCbZ6JCvY9O1RUvn4ytRMMKnUT+BlK9ouTzMUjvp5ViTM1aCw/fumOl2O3D 9T+us+uG9ipgUBtkTsbyANotV1TKHFq3xuaTk+VoAUlQ9YgDvPThlu4TLUk+xDB+ GHHSpkGJgK7TmbBH+Bsf79jYg7d5/OR4/2/ckywK+aFl52RwWoiPvV6ZkQIDAQAB o4ICIjCCAh4wHQYDVR0OBBYEFGXdmMsISfS/aCNGlf2JobKc2mgtMB8GA1UdIwQY MBaAFCNEbaenC853PsK8FlWq4ww8GEEsMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvSTBSdHA2Y0x6bmMtd3J3V1ZhcmpERHdZUVN3LmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC9hYy9mMzU0OWYtMThmNy00OGIwLTkwMWQt MjVjYzlkNmNmYmI5LzEvSTBSdHA2Y0x6bmMtd3J3V1ZhcmpERHdZUVN3Lm1mdDCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC9hYy9mMzU0OWYtMThmNy00OGIwLTkwMWQtMjVjYzlkNmNmYmI5 LzEvSTBSdHA2Y0x6bmMtd3J3V1ZhcmpERHdZUVN3LmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAk0eIJ6v9 9MAC4xl8PTDQ8g59BOZZflv1VlgkNpFZJXT3jxbCyqMPjN6t7ZpGzcps6keqy0LN ffbeZ7//mn21land4k9akgmSrFS2tmtbITyZ4HzgMBSjxKEIkr9S8BdGSusDJiTP hk1iEsrswnFqHvnIz07XydBA5s1p7IXJdA714O0w/adEHs+R9y43ug+DtzaJj7I+ fNQsR0H9vCEO+BfZ+BM2wm0JU0pMLQUgxQIhLt9xyjVCv/k5VTogn1NzbpMtYF+D 7HfTRTbXpzjWFGlLEWBZ3CTllHN8ActfkrYzx4VKQhCYXKAy4GFTqvQB0/MocdY8 go0WiTz7OSZrCQ== -----END CERTIFICATE-----Generated at Sun Jul 20 14:08:55 2025 by rpki-client