$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/b8/6d5d75-4d1e-4697-b1d3-36e344abc9d3/1/437h7O0Z-KCjpjW_qiZCk-NDd5U.mft File: 437h7O0Z-KCjpjW_qiZCk-NDd5U.mft (raw, json) Hash identifier: Hd02l/nW72ZjjhaUuq/qzsTIvsPMsrkC66P3NehjwsA= Subject key identifier: F8:8B:30:5B:F7:61:D6:6B:CB:83:4B:01:EF:20:FD:6B:8A:FB:EF:C7 Authority key identifier: E3:7E:E1:EC:ED:19:F8:A0:A3:A6:35:BF:AA:26:42:93:E3:43:77:95 Certificate issuer: /CN=e37ee1eced19f8a0a3a635bfaa264293e3437795 Certificate serial: 019828912A34F5A268316F573DDFF6903E6B Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/437h7O0Z-KCjpjW_qiZCk-NDd5U.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/b8/6d5d75-4d1e-4697-b1d3-36e344abc9d3/1/437h7O0Z-KCjpjW_qiZCk-NDd5U.mft Manifest number: 1619 Signing time: Sun 20 Jul 2025 16:00:58 +0000 Manifest this update: Sun 20 Jul 2025 16:00:58 +0000 Manifest next update: Mon 21 Jul 2025 16:00:58 +0000 Files and hashes: 1: 1-gMcB2tX1aJagc2aIqyie1JosUM.roa (hash: e/zYIsHTFYDxeTkK5hyPfn+knzLFEB1hZl3ZQmxyCc0=) 2: 437h7O0Z-KCjpjW_qiZCk-NDd5U.crl (hash: MIgN434RmEmq0R+kOcbekxCJy4miF5CqefXPpJbBKaE=) 3: 9eNXipbIkyVdZ3T8NqmEYXwSLqE.roa (hash: BrQPu/EjsIQipBfThN07mTNPYYMcHP60+6UvtDcOjIw=) 4: EFuxyCYga5KedfhIetzIM8Wqp3Y.roa (hash: O+IR1hZ8a8RGzU0SmSAJy1+brABxzqq2amGl3toGZFo=) 5: JS9UWtZttem3o1fXhyj6cDhffLI.roa (hash: 2i5hM4JyTJhdNStU0tEfjgguQh3ME+ydQZVTRw+h18A=) 6: RX5TjbcaEwYk1IhE69eAlXBXNyQ.roa (hash: c0wkjrnxIEHQj5HUBmajY9pyKvCItPr80kJiD5UVJ6c=) 7: TxnmQLTJ7RG9p8EWlmGMzoVFKYM.roa (hash: ya4Fhh2AAgBvWI3PefXXRZJhuG79XQoe+sEudA3lm48=) 8: Ug41i06gdv9Ukc46NZ5XcrOupdE.roa (hash: llRNNcmXFkFqLY4QgsxGuCXjBef7WAi2K7CKwj9Mkc8=) 9: ZYZn-5YwBHa46UGZ7YpzFXkXV2c.roa (hash: nysaKplSjq7+66zMvup13xDe5hG/XF/iaG+ccwRnc48=) 10: iTq1k1-n5HC3mDH6yOxsGqky0UI.roa (hash: AGbGIRgcWmrYfxQjlQUEIVcfb2QPCldn/oJ/TJ7MR/A=) 11: ijEqoAEZpU0XwucBGAsnbQDDdNw.roa (hash: JCAoDA+s8OPB6Om2MtNX+ndsLOblJSylnwNeZbS7ZEI=) 12: oUN6hm9XIH9hez7uSosGEeiTS64.roa (hash: O2lJOrBjeZAv4ECvJJ0xPhkbtSeFQ6Qb6tFoYeeLtF0=) 13: rHz8kaauSx9yjUtMHgkc7yNJ95o.roa (hash: PhKHXgs0bJsWkyri4OmHbJXKHUs8Dv3fw5JQFOIgfUI=) Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/b8/6d5d75-4d1e-4697-b1d3-36e344abc9d3/1/437h7O0Z-KCjpjW_qiZCk-NDd5U.crl rsync://rpki.ripe.net/repository/DEFAULT/b8/6d5d75-4d1e-4697-b1d3-36e344abc9d3/1/437h7O0Z-KCjpjW_qiZCk-NDd5U.mft rsync://rpki.ripe.net/repository/DEFAULT/437h7O0Z-KCjpjW_qiZCk-NDd5U.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Mon 21 Jul 2025 13:00:25 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:98:28:91:2a:34:f5:a2:68:31:6f:57:3d:df:f6:90:3e:6b Signature Algorithm: sha256WithRSAEncryption Issuer: CN=e37ee1eced19f8a0a3a635bfaa264293e3437795 Validity Not Before: Jul 20 16:00:58 2025 GMT Not After : Jul 21 16:00:58 2025 GMT Subject: CN=f88b305bf761d66bcb834b01ef20fd6b8afbefc7 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:d4:1f:53:db:80:11:e8:4e:54:eb:2d:f0:94:30: 9c:ee:bd:b9:38:96:58:c9:6d:a3:28:4e:80:bb:4a: aa:54:7e:c7:2c:f3:71:96:96:66:32:83:23:9c:c9: 43:09:cd:68:95:69:15:de:64:03:86:af:9e:8d:42: 18:d7:e4:d5:a5:ca:de:c2:a3:1b:b9:88:19:6f:a2: 51:b6:a3:37:96:1d:50:b4:b3:f7:96:eb:76:d2:d2: 46:a3:a2:8a:86:b0:a7:51:a2:5d:11:8e:0d:e8:4f: e1:f7:4b:17:f4:1b:df:9d:e4:5f:50:a9:97:70:16: 7d:1b:af:70:fc:f6:6c:50:ed:20:84:7f:dd:24:d2: 4c:e4:6f:aa:5d:83:27:71:50:c5:13:78:d3:51:8c: 99:c0:d3:f8:70:37:6e:eb:5d:eb:58:a8:19:33:f8: 51:78:0e:50:f5:be:b3:5f:37:f9:dd:62:83:66:8c: 37:91:10:90:09:22:bb:10:0d:a6:c9:16:d0:2e:14: db:85:db:34:1c:5a:0a:7f:87:86:8e:5b:c9:eb:a9: 55:29:a5:6c:44:f0:68:98:79:dd:1b:f5:04:42:61: 29:cd:91:bc:d5:e6:d7:5c:1a:df:4a:ab:a3:8e:2f: a8:de:2f:48:26:5c:c1:09:f5:d3:0f:b0:f2:fb:d3: f6:b3 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: F8:8B:30:5B:F7:61:D6:6B:CB:83:4B:01:EF:20:FD:6B:8A:FB:EF:C7 X509v3 Authority Key Identifier: keyid:E3:7E:E1:EC:ED:19:F8:A0:A3:A6:35:BF:AA:26:42:93:E3:43:77:95 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/437h7O0Z-KCjpjW_qiZCk-NDd5U.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/b8/6d5d75-4d1e-4697-b1d3-36e344abc9d3/1/437h7O0Z-KCjpjW_qiZCk-NDd5U.mft X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/b8/6d5d75-4d1e-4697-b1d3-36e344abc9d3/1/437h7O0Z-KCjpjW_qiZCk-NDd5U.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 1f:db:2e:41:3b:58:fc:ea:34:a6:8b:59:e6:c4:a7:f5:48:76: 0b:6d:3d:68:6a:3b:59:8d:44:dd:e8:b3:5a:4b:36:55:2e:cc: c4:e7:d0:fd:95:99:67:88:0c:3f:da:db:6b:07:08:5c:6a:c4: f2:30:00:83:57:51:4c:02:5c:e9:ae:22:ce:0b:15:3b:b2:07: 7c:64:40:5c:e2:e8:d3:37:cb:14:49:fe:bf:93:8d:d9:bc:e2: 0c:3e:b2:84:3e:38:65:3a:8e:83:60:25:33:a0:59:eb:f3:1f: ba:88:5f:9a:6b:78:7e:6c:ea:34:7c:b2:03:6c:e4:54:ef:e0: 86:1e:14:87:3e:b9:66:41:30:2b:85:83:03:5e:5d:c3:72:0f: d3:e2:e0:f2:96:ea:f9:f3:29:44:69:a4:8c:cd:dd:9c:de:71: b7:fa:53:9e:cc:1b:b6:41:40:5b:fd:0d:24:d6:b5:6d:16:d0: 0c:c2:f9:75:a4:fd:c2:98:18:a9:8d:e5:c0:cb:f8:45:0d:26: 61:d1:0f:69:ea:47:1c:01:16:6a:65:28:32:52:42:b2:52:92: 37:9a:ee:6c:58:93:0f:74:58:f4:d9:40:bc:e8:2b:f3:6c:7e: 1b:73:9c:31:b8:b5:82:8e:95:34:00:49:ac:7c:71:3b:70:81: 6b:dc:f5:b1 -----BEGIN CERTIFICATE----- MIIFFjCCA/6gAwIBAgISAZgokSo09aJoMW9XPd/2kD5rMA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKGUzN2VlMWVjZWQxOWY4YTBhM2E2MzViZmFhMjY0MjkzZTM0 Mzc3OTUwHhcNMjUwNzIwMTYwMDU4WhcNMjUwNzIxMTYwMDU4WjAzMTEwLwYDVQQD EyhmODhiMzA1YmY3NjFkNjZiY2I4MzRiMDFlZjIwZmQ2YjhhZmJlZmM3MIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEA1B9T24AR6E5U6y3wlDCc7r25OJZY yW2jKE6Au0qqVH7HLPNxlpZmMoMjnMlDCc1olWkV3mQDhq+ejUIY1+TVpcrewqMb uYgZb6JRtqM3lh1QtLP3lut20tJGo6KKhrCnUaJdEY4N6E/h90sX9BvfneRfUKmX cBZ9G69w/PZsUO0ghH/dJNJM5G+qXYMncVDFE3jTUYyZwNP4cDdu613rWKgZM/hR eA5Q9b6zXzf53WKDZow3kRCQCSK7EA2myRbQLhTbhds0HFoKf4eGjlvJ66lVKaVs RPBomHndG/UEQmEpzZG81ebXXBrfSqujji+o3i9IJlzBCfXTD7Dy+9P2swIDAQAB o4ICIjCCAh4wHQYDVR0OBBYEFPiLMFv3YdZry4NLAe8g/WuK++/HMB8GA1UdIwQY MBaAFON+4eztGfigo6Y1v6omQpPjQ3eVMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvNDM3aDdPMFotS0NqcGpXX3FpWkNrLU5EZDVVLmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC9iOC82ZDVkNzUtNGQxZS00Njk3LWIxZDMt MzZlMzQ0YWJjOWQzLzEvNDM3aDdPMFotS0NqcGpXX3FpWkNrLU5EZDVVLm1mdDCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC9iOC82ZDVkNzUtNGQxZS00Njk3LWIxZDMtMzZlMzQ0YWJjOWQz LzEvNDM3aDdPMFotS0NqcGpXX3FpWkNrLU5EZDVVLmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAH9suQTtY /Oo0potZ5sSn9Uh2C209aGo7WY1E3eizWks2VS7MxOfQ/ZWZZ4gMP9rbawcIXGrE 8jAAg1dRTAJc6a4izgsVO7IHfGRAXOLo0zfLFEn+v5ON2bziDD6yhD44ZTqOg2Al M6BZ6/Mfuohfmmt4fmzqNHyyA2zkVO/ghh4Uhz65ZkEwK4WDA15dw3IP0+Lg8pbq +fMpRGmkjM3dnN5xt/pTnswbtkFAW/0NJNa1bRbQDML5daT9wpgYqY3lwMv4RQ0m YdEPaepHHAEWamUoMlJCslKSN5rubFiTD3RY9NlAvOgr82x+G3OcMbi1go6VNABJ rHxxO3CBa9z1sQ== -----END CERTIFICATE-----Generated at Sun Jul 20 20:21:16 2025 by rpki-client