$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/b8/4f6985-b94a-47cc-a300-6f2cf4f03ceb/1/2x1uukY7dWSr-uk4tG7UcYfeDsA.mft File: 2x1uukY7dWSr-uk4tG7UcYfeDsA.mft (raw, json) Hash identifier: tlXRo4GWGSG7ZyJ9DeYKerx6QknOer7P23pN3lZWE0s= Subject key identifier: D3:71:E7:6C:EE:02:6F:8F:E5:80:52:42:E7:F8:7B:AA:F3:4C:D3:A6 Authority key identifier: DB:1D:6E:BA:46:3B:75:64:AB:FA:E9:38:B4:6E:D4:71:87:DE:0E:C0 Certificate issuer: /CN=db1d6eba463b7564abfae938b46ed47187de0ec0 Certificate serial: 01982FDCD44A8A64287A3BFE0BF3B234E63D Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/2x1uukY7dWSr-uk4tG7UcYfeDsA.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/b8/4f6985-b94a-47cc-a300-6f2cf4f03ceb/1/2x1uukY7dWSr-uk4tG7UcYfeDsA.mft Manifest number: 0914 Signing time: Tue 22 Jul 2025 02:00:58 +0000 Manifest this update: Tue 22 Jul 2025 02:00:58 +0000 Manifest next update: Wed 23 Jul 2025 02:00:58 +0000 Files and hashes: 1: 2x1uukY7dWSr-uk4tG7UcYfeDsA.crl (hash: 4JPYepzXkFpx4uGZqOBtsZ1J7O9YbkbV72CStbDtMTY=) 2: 5Y3Jwmte8A-d_YlOn8cgBr_VO4M.roa (hash: vSY895Pgffq53GRNLVm1t6+gWyyWT9dNx713Rvp80xY=) 3: 87iBXWDpSIwRDGkwc7K8UhWgGyI.roa (hash: GnB7PMQFypZjuArzdsmg92AtM/uSLFw3faYH5HVQkIw=) 4: GCvMpFjTox7n5FmOa5IgrXeN2Mo.roa (hash: Y53wvi3S7ITug5cC6QdZKUB+NY5xkHHiQyyYmB7inpo=) 5: GE8S6QweGIt3c85t_rnGab-IpQg.roa (hash: 6PBV94W3VYcFPHikrfHt83RqRfHZjAYrztUDVd5Z6y8=) 6: MKXJ66CRttluCaD2As6acb3eAwI.roa (hash: A1bSrmMEPbiNQFfUVIkOSltYihJGIH6EUwYcLxbC5P4=) 7: bf7MiBVtuN_VY-lMeIniqJDCBns.roa (hash: m1U+Cy0bI+/dKIetpHKZZ9yo7LVmFreBiQ7nhZy+5Fo=) 8: cHT0qzGhhZWWUdosb7dz_r29LkI.roa (hash: LL8UCKvFFQoG00GXqpjxb1DBAQ64iWVLzPMwKvO00IA=) 9: djyQgKDBzjTtDqekGHCbyDvwrGE.roa (hash: cybcX12xZijqQUsvS6pf9buN4wQXxjv+dDk5QDV0/Ys=) 10: meKHpovGdB4bkHh1XXR1ExLPB-w.roa (hash: fUS6khGidxNfptHJmzXmdTQGgfqFk4mALBHny815Klg=) Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/b8/4f6985-b94a-47cc-a300-6f2cf4f03ceb/1/2x1uukY7dWSr-uk4tG7UcYfeDsA.crl rsync://rpki.ripe.net/repository/DEFAULT/b8/4f6985-b94a-47cc-a300-6f2cf4f03ceb/1/2x1uukY7dWSr-uk4tG7UcYfeDsA.mft rsync://rpki.ripe.net/repository/DEFAULT/2x1uukY7dWSr-uk4tG7UcYfeDsA.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Wed 23 Jul 2025 02:00:58 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:98:2f:dc:d4:4a:8a:64:28:7a:3b:fe:0b:f3:b2:34:e6:3d Signature Algorithm: sha256WithRSAEncryption Issuer: CN=db1d6eba463b7564abfae938b46ed47187de0ec0 Validity Not Before: Jul 22 02:00:58 2025 GMT Not After : Jul 23 02:00:58 2025 GMT Subject: CN=d371e76cee026f8fe5805242e7f87baaf34cd3a6 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:c5:f3:e0:b6:58:16:63:ea:ce:7b:f2:bc:29:e5: 59:1b:84:7b:12:c0:78:53:2d:65:d9:2a:01:10:15: d8:5a:72:84:8b:b8:7c:58:4d:ff:53:96:75:31:94: 87:19:ac:6c:42:91:33:80:dd:60:77:d8:b9:58:63: 3b:6b:b2:b5:aa:c3:ad:5b:ac:58:7d:cc:cc:19:60: 21:03:97:f9:22:10:e1:21:d4:26:76:82:5b:e2:f9: 55:79:04:b8:19:c3:6f:c8:9d:0f:de:d1:c9:1d:1a: e8:45:b6:33:bf:18:fb:9a:09:0c:02:65:ee:d7:f9: 10:99:5a:3b:08:d5:29:e5:20:94:36:6b:32:c6:e9: 9d:3b:1e:31:40:d4:3b:b6:cc:ea:61:e2:3b:72:5e: 58:c2:56:5a:7c:d0:33:a9:a7:ba:be:12:0b:b1:fd: 00:c7:48:4d:21:00:3a:ad:08:f7:93:d1:a5:47:8d: 32:a2:86:6a:86:f2:db:f1:32:41:84:a9:24:4f:61: 92:8a:4e:04:02:e7:2e:95:a4:0b:c4:af:f9:ec:d3: ab:f3:ae:b3:f2:88:01:e4:49:bb:4a:72:ce:64:cb: 27:72:f5:50:2f:e1:e0:15:80:52:17:bb:94:2b:60: d7:08:e0:74:fb:bf:9c:d1:ad:59:4a:b1:13:89:3f: d7:f9 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: D3:71:E7:6C:EE:02:6F:8F:E5:80:52:42:E7:F8:7B:AA:F3:4C:D3:A6 X509v3 Authority Key Identifier: keyid:DB:1D:6E:BA:46:3B:75:64:AB:FA:E9:38:B4:6E:D4:71:87:DE:0E:C0 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/2x1uukY7dWSr-uk4tG7UcYfeDsA.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/b8/4f6985-b94a-47cc-a300-6f2cf4f03ceb/1/2x1uukY7dWSr-uk4tG7UcYfeDsA.mft X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/b8/4f6985-b94a-47cc-a300-6f2cf4f03ceb/1/2x1uukY7dWSr-uk4tG7UcYfeDsA.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 92:b9:c0:54:40:85:63:57:4c:7e:35:f4:2d:3f:90:22:02:e9: f3:ab:47:ca:84:97:cd:ba:66:be:77:7c:71:b6:b6:77:24:60: 4b:fa:74:e3:ad:53:87:26:62:4a:0e:99:df:36:0b:de:49:7e: f0:68:1a:ed:b3:de:3f:19:d1:16:a2:77:b2:f3:42:e3:01:5f: 5c:98:a1:82:ce:f7:ba:08:1c:cb:17:43:73:cd:63:cb:d8:29: c2:54:76:3c:d7:5c:e0:9f:f3:de:f8:a0:38:a2:9e:0c:f1:3a: d1:96:c4:02:e2:bc:cc:6e:9b:52:d2:98:fa:20:05:2b:b2:1c: be:14:13:74:54:9f:6a:f2:56:a0:41:07:96:94:91:8b:cc:c9: e9:e6:b9:80:bf:c7:0f:a8:cd:03:1d:3b:d8:46:3f:d8:c2:7d: 19:e9:6c:6a:59:ce:55:f5:ff:7f:11:52:42:97:88:50:1b:84: 18:99:f5:35:b1:7e:3c:87:37:51:52:9c:df:e1:da:aa:85:6b: f9:31:13:b9:d8:93:db:af:01:85:cd:f1:13:95:2c:41:24:8c: 1a:b9:07:c7:00:c8:e9:36:d3:4d:41:83:8e:f6:f3:33:49:86: 1e:f0:9a:4a:1d:b8:01:b3:0b:38:b7:84:c7:2f:e7:2c:34:c1: 82:a3:8e:45 -----BEGIN CERTIFICATE----- MIIFFjCCA/6gAwIBAgISAZgv3NRKimQoejv+C/OyNOY9MA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKGRiMWQ2ZWJhNDYzYjc1NjRhYmZhZTkzOGI0NmVkNDcxODdk ZTBlYzAwHhcNMjUwNzIyMDIwMDU4WhcNMjUwNzIzMDIwMDU4WjAzMTEwLwYDVQQD EyhkMzcxZTc2Y2VlMDI2ZjhmZTU4MDUyNDJlN2Y4N2JhYWYzNGNkM2E2MIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAxfPgtlgWY+rOe/K8KeVZG4R7EsB4 Uy1l2SoBEBXYWnKEi7h8WE3/U5Z1MZSHGaxsQpEzgN1gd9i5WGM7a7K1qsOtW6xY fczMGWAhA5f5IhDhIdQmdoJb4vlVeQS4GcNvyJ0P3tHJHRroRbYzvxj7mgkMAmXu 1/kQmVo7CNUp5SCUNmsyxumdOx4xQNQ7tszqYeI7cl5YwlZafNAzqae6vhILsf0A x0hNIQA6rQj3k9GlR40yooZqhvLb8TJBhKkkT2GSik4EAuculaQLxK/57NOr866z 8ogB5Em7SnLOZMsncvVQL+HgFYBSF7uUK2DXCOB0+7+c0a1ZSrETiT/X+QIDAQAB o4ICIjCCAh4wHQYDVR0OBBYEFNNx52zuAm+P5YBSQuf4e6rzTNOmMB8GA1UdIwQY MBaAFNsdbrpGO3Vkq/rpOLRu1HGH3g7AMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvMngxdXVrWTdkV1NyLXVrNHRHN1VjWWZlRHNBLmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC9iOC80ZjY5ODUtYjk0YS00N2NjLWEzMDAt NmYyY2Y0ZjAzY2ViLzEvMngxdXVrWTdkV1NyLXVrNHRHN1VjWWZlRHNBLm1mdDCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC9iOC80ZjY5ODUtYjk0YS00N2NjLWEzMDAtNmYyY2Y0ZjAzY2Vi LzEvMngxdXVrWTdkV1NyLXVrNHRHN1VjWWZlRHNBLmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAkrnAVECF Y1dMfjX0LT+QIgLp86tHyoSXzbpmvnd8cba2dyRgS/p0461ThyZiSg6Z3zYL3kl+ 8Gga7bPePxnRFqJ3svNC4wFfXJihgs73uggcyxdDc81jy9gpwlR2PNdc4J/z3vig OKKeDPE60ZbEAuK8zG6bUtKY+iAFK7IcvhQTdFSfavJWoEEHlpSRi8zJ6ea5gL/H D6jNAx072EY/2MJ9GelsalnOVfX/fxFSQpeIUBuEGJn1NbF+PIc3UVKc3+HaqoVr +TETudiT268Bhc3xE5UsQSSMGrkHxwDI6TbTTUGDjvbzM0mGHvCaSh24AbMLOLeE xy/nLDTBgqOORQ== -----END CERTIFICATE-----Generated at Tue Jul 22 11:52:12 2025 by rpki-client