$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/af/2223ca-ce38-49bb-b125-cca37606bf18/1/Us2aZRLb8lpfGbgn16LH4iou6N0.mft File: Us2aZRLb8lpfGbgn16LH4iou6N0.mft (raw, json) Hash identifier: dSUs5SCCPDxDZjrdOEGgxOlyb00FzoyqXNAPyJrT2xw= Subject key identifier: 65:3C:FB:3A:EE:1C:06:95:64:8A:53:A9:30:A9:F5:E7:6F:B0:5C:A9 Authority key identifier: 52:CD:9A:65:12:DB:F2:5A:5F:19:B8:27:D7:A2:C7:E2:2A:2E:E8:DD Certificate issuer: /CN=52cd9a6512dbf25a5f19b827d7a2c7e22a2ee8dd Certificate serial: 01984A0A782E5B49AD310A22BCF0045CC0AC Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/Us2aZRLb8lpfGbgn16LH4iou6N0.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/af/2223ca-ce38-49bb-b125-cca37606bf18/1/Us2aZRLb8lpfGbgn16LH4iou6N0.mft Manifest number: 08C0 Signing time: Sun 27 Jul 2025 04:00:56 +0000 Manifest this update: Sun 27 Jul 2025 04:00:56 +0000 Manifest next update: Mon 28 Jul 2025 04:00:56 +0000 Files and hashes: 1: 1-fNwUFlO6fD6i3f_1SheL5UVW0g.roa (hash: 32fP/D02b4404J0+5cPNK59TuFMj1f7NhGygcv25yuI=) 2: 1FJeVgZId139knZgMTYZmAnwLDs.roa (hash: VPpFwlCkzXISful3TlM5ZgodfCcJYCCPoZqn50dkuRo=) 3: BaoLehfzYM1vkBF2LqjuxCVGppw.roa (hash: wk0ycjZln2vcCwTCcN83YoDpaabATIZRlFvsl/RZ67U=) 4: Mg8DfV8_DXrPv3KqkbNYUp0l0tM.roa (hash: bc63jnsWB8rXpmaLfBdrnPsJc2KKfycExaCBRhU5vnM=) 5: ONKzBcZlLaDvBXj0ChQkq0AcBAo.roa (hash: xt6U3+zGv+p5+qldoLqBIRpHRAbFRfEFMt0N2Y4HxPA=) 6: Us2aZRLb8lpfGbgn16LH4iou6N0.crl (hash: 4JoT63QocfDRTs7G2wZgmSdBKRq1v7zbg1jl2CZT5Ug=) 7: Wbt2iaP6Wu29ETEZevGjkYyyw8Y.roa (hash: mBaJPapqwbvtmJukkLZju5JRZWG5d49D3KPZxGiRkTk=) 8: cbgxDriMd1w8Ezk1j_uW9c-uk8k.roa (hash: RA/kZIx4fzU+RCbQ8O1BxIKCZRJDjC4JRLSNt3ovrQ8=) 9: cblkW3ZYAZ5VQl8X3gHLFnE7S8g.roa (hash: +MK4cG6/hNPklJaXz5PxE5zp6rLCIwlFMKcCPx37Jxo=) 10: dxXbgNQXIcZf-wRxxpxKbsjTAhQ.roa (hash: 7Q2urw+eTsZ+V/fuq0yE3c5anzy795+Z4CJRGjeU6Hk=) 11: e9y8dXFts4c8fUXqw6xiDwRGFs8.roa (hash: BkXdL8SYbCdtWvnDfEL5onMOz7lIKfBEzCveSNdxkpQ=) 12: fYtRnjgkdcOcs2OTSoOyF7XeMYQ.roa (hash: BGM9RaFK/cZe9M2jNupJdVSdkow5uJUKCy6zw6S9pgQ=) 13: irPx7LPWmaDBY-_AbmGw3WFEhaQ.roa (hash: jDb6rbhv8bZIGpVJLz4cPKbnagFjHpigNY2MzVPUyPM=) 14: obpj78Cj4h6AqPChG513fVXXoMs.roa (hash: xhWt95TQUSf4jmhliYXpfzfmunJAIuxitDmmO5ohsLY=) 15: puM6zDTCACkm8XM63GmrJCmb9w4.roa (hash: /wWLN32nFvo5E1f9qQj5og/sDQq7KYw38OVpA8GGi58=) 16: zAnPUHrCJSV18x-mMc7-hNiZjaY.roa (hash: LG3Y0utc8dwpuU3oGtbD8u6QKi2Bv7dHexHJeWNV5Hk=) Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/af/2223ca-ce38-49bb-b125-cca37606bf18/1/Us2aZRLb8lpfGbgn16LH4iou6N0.crl rsync://rpki.ripe.net/repository/DEFAULT/af/2223ca-ce38-49bb-b125-cca37606bf18/1/Us2aZRLb8lpfGbgn16LH4iou6N0.mft rsync://rpki.ripe.net/repository/DEFAULT/Us2aZRLb8lpfGbgn16LH4iou6N0.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Mon 28 Jul 2025 00:00:05 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:98:4a:0a:78:2e:5b:49:ad:31:0a:22:bc:f0:04:5c:c0:ac Signature Algorithm: sha256WithRSAEncryption Issuer: CN=52cd9a6512dbf25a5f19b827d7a2c7e22a2ee8dd Validity Not Before: Jul 27 04:00:56 2025 GMT Not After : Jul 28 04:00:56 2025 GMT Subject: CN=653cfb3aee1c0695648a53a930a9f5e76fb05ca9 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:b6:2d:c5:5e:44:6d:4c:0f:62:ca:dc:d9:f9:b4: b6:e4:0d:73:82:3d:4c:36:95:35:39:a7:0c:4e:6e: 99:09:6b:50:81:91:7c:8c:9f:18:e5:05:c8:80:d3: 87:94:7d:b5:f2:2d:e5:cc:53:87:ee:1b:7f:6b:3a: b5:f3:eb:fe:84:b1:ab:0a:bc:62:57:76:0b:87:64: 34:73:34:91:8d:91:22:0a:1a:45:96:34:be:65:a2: c0:23:28:8f:d1:9e:c2:89:ce:32:00:39:23:ef:eb: 20:02:8f:58:dc:19:36:52:11:30:1f:93:7d:2f:77: ac:44:25:30:b9:e6:99:c7:2f:c7:9d:28:9e:05:66: de:96:82:db:9e:6b:1f:ac:22:8d:5a:dc:1e:11:ec: d8:d1:3d:67:12:57:25:aa:e6:0d:2b:52:89:24:39: 62:03:ba:57:7e:c6:e1:0b:1a:a2:28:39:1a:2c:f4: ee:bf:09:4b:5e:fa:6d:6a:ab:e0:16:29:bc:96:fe: 65:dd:91:db:69:72:ae:b1:08:f6:20:ca:55:4b:16: 04:29:e1:e2:47:31:ee:e7:04:5a:6d:e0:4b:37:4c: d8:be:fb:72:35:97:61:18:56:e3:a7:e0:22:b1:7d: 22:8e:8d:91:b9:ac:1e:d7:db:cb:00:4f:e0:ea:18: 4c:75 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 65:3C:FB:3A:EE:1C:06:95:64:8A:53:A9:30:A9:F5:E7:6F:B0:5C:A9 X509v3 Authority Key Identifier: keyid:52:CD:9A:65:12:DB:F2:5A:5F:19:B8:27:D7:A2:C7:E2:2A:2E:E8:DD X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/Us2aZRLb8lpfGbgn16LH4iou6N0.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/af/2223ca-ce38-49bb-b125-cca37606bf18/1/Us2aZRLb8lpfGbgn16LH4iou6N0.mft X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/af/2223ca-ce38-49bb-b125-cca37606bf18/1/Us2aZRLb8lpfGbgn16LH4iou6N0.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 18:66:d2:e8:e1:d8:4f:92:fa:44:11:d9:5a:fa:c3:09:67:2f: 8a:29:10:55:03:7f:19:85:e7:7b:95:b8:13:ac:b8:12:ce:ff: 44:25:7b:50:0f:cb:b4:a3:33:f3:0e:2a:1b:8c:aa:b1:53:1d: 5c:42:2a:59:00:bb:94:ad:2f:cc:d1:62:a1:a0:01:59:9d:60: 83:53:f0:ea:59:a2:80:ca:fd:7f:ed:b7:9b:fb:fe:b9:0d:6f: 79:79:48:c8:17:96:cd:ab:ae:de:61:39:1c:a2:15:41:87:73: 16:5e:b6:bb:d3:f2:44:bd:3b:be:b6:71:75:91:3e:90:d8:fc: 05:92:13:32:9e:fe:1a:e1:a8:87:32:39:8e:c6:e9:ac:9e:71: 2b:b7:9b:af:4f:38:c8:d2:a2:68:a3:a5:c0:cb:25:00:e1:88: 6d:4a:88:d9:96:e3:4f:90:d3:cb:20:0d:59:d1:fd:69:87:88: ef:e8:28:10:64:cb:a2:1f:02:b7:10:77:4a:09:50:47:7c:49: 33:af:d9:44:92:04:44:ba:73:c8:92:52:21:90:c8:08:9a:18: c4:f1:51:f1:7e:a8:25:3a:bc:6e:7b:b9:76:36:77:fc:d7:6d: 32:61:25:f5:cf:33:bb:59:8d:0d:b8:f8:c1:4d:fe:b6:c9:06: 24:6d:55:99 -----BEGIN CERTIFICATE----- MIIFFjCCA/6gAwIBAgISAZhKCnguW0mtMQoivPAEXMCsMA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKDUyY2Q5YTY1MTJkYmYyNWE1ZjE5YjgyN2Q3YTJjN2UyMmEy ZWU4ZGQwHhcNMjUwNzI3MDQwMDU2WhcNMjUwNzI4MDQwMDU2WjAzMTEwLwYDVQQD Eyg2NTNjZmIzYWVlMWMwNjk1NjQ4YTUzYTkzMGE5ZjVlNzZmYjA1Y2E5MIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAti3FXkRtTA9iytzZ+bS25A1zgj1M NpU1OacMTm6ZCWtQgZF8jJ8Y5QXIgNOHlH218i3lzFOH7ht/azq18+v+hLGrCrxi V3YLh2Q0czSRjZEiChpFljS+ZaLAIyiP0Z7Cic4yADkj7+sgAo9Y3Bk2UhEwH5N9 L3esRCUwueaZxy/HnSieBWbeloLbnmsfrCKNWtweEezY0T1nElclquYNK1KJJDli A7pXfsbhCxqiKDkaLPTuvwlLXvptaqvgFim8lv5l3ZHbaXKusQj2IMpVSxYEKeHi RzHu5wRabeBLN0zYvvtyNZdhGFbjp+AisX0ijo2Ruawe19vLAE/g6hhMdQIDAQAB o4ICIjCCAh4wHQYDVR0OBBYEFGU8+zruHAaVZIpTqTCp9edvsFypMB8GA1UdIwQY MBaAFFLNmmUS2/JaXxm4J9eix+IqLujdMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvVXMyYVpSTGI4bHBmR2JnbjE2TEg0aW91Nk4wLmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC9hZi8yMjIzY2EtY2UzOC00OWJiLWIxMjUt Y2NhMzc2MDZiZjE4LzEvVXMyYVpSTGI4bHBmR2JnbjE2TEg0aW91Nk4wLm1mdDCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC9hZi8yMjIzY2EtY2UzOC00OWJiLWIxMjUtY2NhMzc2MDZiZjE4 LzEvVXMyYVpSTGI4bHBmR2JnbjE2TEg0aW91Nk4wLmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAGGbS6OHY T5L6RBHZWvrDCWcviikQVQN/GYXne5W4E6y4Es7/RCV7UA/LtKMz8w4qG4yqsVMd XEIqWQC7lK0vzNFioaABWZ1gg1Pw6lmigMr9f+23m/v+uQ1veXlIyBeWzauu3mE5 HKIVQYdzFl62u9PyRL07vrZxdZE+kNj8BZITMp7+GuGohzI5jsbprJ5xK7ebr084 yNKiaKOlwMslAOGIbUqI2ZbjT5DTyyANWdH9aYeI7+goEGTLoh8CtxB3SglQR3xJ M6/ZRJIERLpzyJJSIZDICJoYxPFR8X6oJTq8bnu5djZ3/NdtMmEl9c8zu1mNDbj4 wU3+tskGJG1VmQ== -----END CERTIFICATE-----Generated at Sun Jul 27 06:01:31 2025 by rpki-client