$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/b1/4f211e-79d7-4504-9ead-871f9ed708e0/1/G6UaC8Dwr-u_bV2Sf-H5gW9SNS0.mft File: G6UaC8Dwr-u_bV2Sf-H5gW9SNS0.mft (raw, json) Hash identifier: 6BTIvfaqXzUYbydFguKMZT2cH5+L8hUBtVgy6kKJoKM= Subject key identifier: FA:97:79:BE:A8:4E:62:A4:D4:FE:72:2F:89:71:27:48:D3:09:1C:4C Authority key identifier: 1B:A5:1A:0B:C0:F0:AF:EB:BF:6D:5D:92:7F:E1:F9:81:6F:52:35:2D Certificate issuer: /CN=1ba51a0bc0f0afebbf6d5d927fe1f9816f52352d Certificate serial: 019844E3D03A6BE79F6FB37184CD6D2BB2D8 Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/G6UaC8Dwr-u_bV2Sf-H5gW9SNS0.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/b1/4f211e-79d7-4504-9ead-871f9ed708e0/1/G6UaC8Dwr-u_bV2Sf-H5gW9SNS0.mft Manifest number: 11D5 Signing time: Sat 26 Jul 2025 04:00:37 +0000 Manifest this update: Sat 26 Jul 2025 04:00:37 +0000 Manifest next update: Sun 27 Jul 2025 04:00:37 +0000 Files and hashes: 1: DBze0gTqh5SDOw7x6hoGuoE8yr4.roa (hash: ZLoARLtI2IGjjdgEEhL+2Ku7l0nsKThYXfmPapH0dJU=) 2: G6UaC8Dwr-u_bV2Sf-H5gW9SNS0.crl (hash: AKG3+CuKumjTJiMUefnFDYGUK1YMk7JMIZAMORSJ4pA=) 3: GRyGMSWpU5HpjCTFAMJk4pFWA6g.roa (hash: mdhlz2LJpLEwf5bmqCY1gcealxxDmZBuLv0u4IVvNRw=) 4: JEDgkveNrJ65vuQX11mg8UnyJUY.roa (hash: q6FNEl8CDSP0PRckpcDIVuz5w5t1HfMs8z/qUPyjC5I=) 5: KjkD8Cm8Nvn5kLoxMWRB37y0yGg.roa (hash: HwYwsaGRIKEpmjSBA+wSKugW77viLOfzOy52g+ZRvys=) 6: NcbkyJf0XrQlWSuaG_6rLIv8CEA.roa (hash: t1bpX5VtlqYKcE80al52Eab7HsC+sX2g/k7XldXhhvc=) 7: SAifF78qmhwobbNifv-ncSGKlCQ.roa (hash: /saAmnnB/hN9KICwUzdIN9J64c5nmcrdQQhBsyGdv1o=) 8: TpQ5Z-UdKferYkvwPdK8R7DUnj0.roa (hash: QghfP6CKI1HCADXXFPrgTYVwEH/4oteFqhbAKuXsWlY=) 9: il06Z06HBr4UubVDG3con6FSTJE.roa (hash: 6jxCobZPgi+fb0sp+gKSIVfeSMM4jnCmJ/PQ50Rwxgc=) 10: n3eGk4GZdLWL8rCKUegiOGKLLGE.roa (hash: T8Y25mtZcw8oW9dkDTGN7ilbRkb3BxSHEAwHzK4aavQ=) 11: xfa86z-_cd1JUN4qijUc-8zKEIc.roa (hash: V2BeXBWhsFE6+Rnj92uoYp038Gza7m9G0eWAbg/3QGo=) Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/b1/4f211e-79d7-4504-9ead-871f9ed708e0/1/G6UaC8Dwr-u_bV2Sf-H5gW9SNS0.crl rsync://rpki.ripe.net/repository/DEFAULT/b1/4f211e-79d7-4504-9ead-871f9ed708e0/1/G6UaC8Dwr-u_bV2Sf-H5gW9SNS0.mft rsync://rpki.ripe.net/repository/DEFAULT/G6UaC8Dwr-u_bV2Sf-H5gW9SNS0.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Sun 27 Jul 2025 02:00:05 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:98:44:e3:d0:3a:6b:e7:9f:6f:b3:71:84:cd:6d:2b:b2:d8 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=1ba51a0bc0f0afebbf6d5d927fe1f9816f52352d Validity Not Before: Jul 26 04:00:37 2025 GMT Not After : Jul 27 04:00:37 2025 GMT Subject: CN=fa9779bea84e62a4d4fe722f89712748d3091c4c Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:c1:cc:22:e7:0b:04:bb:04:09:30:68:0a:66:36: 2e:9b:f6:62:fb:09:7e:b6:99:26:fc:9e:78:9f:4e: 87:53:1f:52:16:04:50:1a:8d:19:70:f8:05:3c:0b: ac:1c:a0:02:97:71:e6:fd:ef:86:c1:f6:79:d5:96: df:85:08:f1:43:f4:7d:15:51:7d:ba:bc:0d:3f:c1: 99:c5:a9:13:85:7a:00:7f:63:bb:0d:b4:22:d6:9f: c6:8c:b0:a2:6e:53:9c:6c:16:53:e6:9b:b1:50:17: 5c:6a:48:d4:9e:45:51:6d:ca:90:fe:59:89:2b:6f: 34:7b:e0:18:14:c8:4c:d1:0c:34:36:d1:d6:a5:04: 8e:b5:b6:63:3f:0b:ec:97:7f:2b:52:c6:fc:c8:bf: 72:30:64:b8:49:76:7b:49:87:96:54:35:22:00:e1: 3a:21:71:da:72:9d:d4:5a:60:2e:b2:0c:21:6b:3f: d9:f9:8f:79:10:31:ba:19:a5:aa:d0:98:a8:26:d6: d2:ff:6b:2a:1f:30:e5:66:38:69:8b:25:e2:f5:60: f3:0f:41:39:d2:61:67:f8:51:29:c2:4d:20:9e:79: 45:f9:3c:93:8f:d2:0e:6f:01:be:53:6c:94:a7:75: 5d:99:cb:73:4c:b1:53:c0:d4:bb:9d:b6:88:8e:bf: 51:19 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: FA:97:79:BE:A8:4E:62:A4:D4:FE:72:2F:89:71:27:48:D3:09:1C:4C X509v3 Authority Key Identifier: keyid:1B:A5:1A:0B:C0:F0:AF:EB:BF:6D:5D:92:7F:E1:F9:81:6F:52:35:2D X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/G6UaC8Dwr-u_bV2Sf-H5gW9SNS0.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/b1/4f211e-79d7-4504-9ead-871f9ed708e0/1/G6UaC8Dwr-u_bV2Sf-H5gW9SNS0.mft X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/b1/4f211e-79d7-4504-9ead-871f9ed708e0/1/G6UaC8Dwr-u_bV2Sf-H5gW9SNS0.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 4c:95:12:37:dd:1e:74:03:c4:1d:8f:7b:a9:7e:33:a8:3d:8f: 36:46:8e:c5:ef:c6:95:ef:2b:c2:f6:72:11:83:6a:a7:73:e8: 4d:fa:a4:e3:f2:7b:85:d9:a1:4d:c5:f1:d6:58:77:5a:ce:10: 03:bb:8b:31:5e:b6:bf:a9:d1:10:ac:a4:31:43:82:e9:36:9a: 11:9a:c9:7f:44:ad:83:f9:71:53:e5:4a:e2:0a:42:8b:6c:9c: 96:ce:69:15:74:f5:87:33:46:22:56:ca:d9:f2:33:19:b5:53: 75:c4:b6:62:26:0d:a1:13:db:62:3c:64:60:3c:21:eb:d8:f4: 38:a4:ad:22:60:3a:e6:46:91:8c:a1:b8:dd:77:3c:98:b0:53: 97:b7:b5:bc:39:a2:c9:80:3c:56:3f:5e:46:d6:67:60:62:5e: 08:21:d3:06:f8:a8:bc:ad:8a:2e:b4:3c:c6:00:2b:26:4c:af: 2b:5b:c4:2e:a6:bf:56:42:c2:d4:62:2b:ab:a4:68:89:64:7e: 0b:ec:c9:54:45:64:08:60:f6:79:54:e0:11:73:ab:de:b7:cb: c8:1d:f2:fe:11:ba:72:e2:3b:d8:2e:ab:76:97:77:3a:80:ea: 9c:a7:f5:a8:07:e5:ea:ed:46:67:f6:19:4d:c3:7f:a3:4e:31: 34:90:ec:4e -----BEGIN CERTIFICATE----- MIIFFjCCA/6gAwIBAgISAZhE49A6a+efb7NxhM1tK7LYMA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKDFiYTUxYTBiYzBmMGFmZWJiZjZkNWQ5MjdmZTFmOTgxNmY1 MjM1MmQwHhcNMjUwNzI2MDQwMDM3WhcNMjUwNzI3MDQwMDM3WjAzMTEwLwYDVQQD EyhmYTk3NzliZWE4NGU2MmE0ZDRmZTcyMmY4OTcxMjc0OGQzMDkxYzRjMIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAwcwi5wsEuwQJMGgKZjYum/Zi+wl+ tpkm/J54n06HUx9SFgRQGo0ZcPgFPAusHKACl3Hm/e+GwfZ51ZbfhQjxQ/R9FVF9 urwNP8GZxakThXoAf2O7DbQi1p/GjLCiblOcbBZT5puxUBdcakjUnkVRbcqQ/lmJ K280e+AYFMhM0Qw0NtHWpQSOtbZjPwvsl38rUsb8yL9yMGS4SXZ7SYeWVDUiAOE6 IXHacp3UWmAusgwhaz/Z+Y95EDG6GaWq0JioJtbS/2sqHzDlZjhpiyXi9WDzD0E5 0mFn+FEpwk0gnnlF+TyTj9IObwG+U2yUp3VdmctzTLFTwNS7nbaIjr9RGQIDAQAB o4ICIjCCAh4wHQYDVR0OBBYEFPqXeb6oTmKk1P5yL4lxJ0jTCRxMMB8GA1UdIwQY MBaAFBulGgvA8K/rv21dkn/h+YFvUjUtMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvRzZVYUM4RHdyLXVfYlYyU2YtSDVnVzlTTlMwLmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC9iMS80ZjIxMWUtNzlkNy00NTA0LTllYWQt ODcxZjllZDcwOGUwLzEvRzZVYUM4RHdyLXVfYlYyU2YtSDVnVzlTTlMwLm1mdDCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC9iMS80ZjIxMWUtNzlkNy00NTA0LTllYWQtODcxZjllZDcwOGUw LzEvRzZVYUM4RHdyLXVfYlYyU2YtSDVnVzlTTlMwLmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEATJUSN90e dAPEHY97qX4zqD2PNkaOxe/Gle8rwvZyEYNqp3PoTfqk4/J7hdmhTcXx1lh3Ws4Q A7uLMV62v6nREKykMUOC6TaaEZrJf0Stg/lxU+VK4gpCi2ycls5pFXT1hzNGIlbK 2fIzGbVTdcS2YiYNoRPbYjxkYDwh69j0OKStImA65kaRjKG43Xc8mLBTl7e1vDmi yYA8Vj9eRtZnYGJeCCHTBviovK2KLrQ8xgArJkyvK1vELqa/VkLC1GIrq6RoiWR+ C+zJVEVkCGD2eVTgEXOr3rfLyB3y/hG6cuI72C6rdpd3OoDqnKf1qAfl6u1GZ/YZ TcN/o04xNJDsTg== -----END CERTIFICATE-----Generated at Sat Jul 26 11:30:33 2025 by rpki-client