$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/bb/b4b150-dbb8-465f-8155-e4419b64212e/1/8FIRKM9jSqavp-9S1THz_NVWKPk.mft File: 8FIRKM9jSqavp-9S1THz_NVWKPk.mft (raw, json) Hash identifier: j7UmfzyPMXIG2LT2Ogz0Wp46k1MYU6i1S+ABqfODIdw= Subject key identifier: BC:60:15:78:D6:74:03:D3:BD:25:01:46:BB:C2:1F:A9:7F:DD:7A:AD Authority key identifier: F0:52:11:28:CF:63:4A:A6:AF:A7:EF:52:D5:31:F3:FC:D5:56:28:F9 Certificate issuer: /CN=f0521128cf634aa6afa7ef52d531f3fcd55628f9 Certificate serial: 019849659E47B970D9E730F5ABA2F6E17EC1 Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/8FIRKM9jSqavp-9S1THz_NVWKPk.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/bb/b4b150-dbb8-465f-8155-e4419b64212e/1/8FIRKM9jSqavp-9S1THz_NVWKPk.mft Manifest number: 160A Signing time: Sun 27 Jul 2025 01:00:53 +0000 Manifest this update: Sun 27 Jul 2025 01:00:53 +0000 Manifest next update: Mon 28 Jul 2025 01:00:53 +0000 Files and hashes: 1: 0vpioq7e7IBvU0f7txi-wExHAPw.roa (hash: lCvUWIuH8RdERCkztaN1NhfYOchJDmj9ywnhD1WG0qs=) 2: 1-t-clxlx4vHi76xBwGIh0Y5orug.roa (hash: WGphFqEzeHYQfivrVaHRtOvOzzhN/PDKxrZlm3FuIDA=) 3: 4CCEdgNV-fGWUC_aGHxQwbUsOKQ.roa (hash: zTRmkFZkHzwf+QYURy5/v5Sjyovq0HLSmOwtNQ48L/c=) 4: 8FIRKM9jSqavp-9S1THz_NVWKPk.crl (hash: asrK1Jgo+kGYQ+NWd4xFNdknFYJTXsB2XDUom4AQ0DI=) 5: 9oOMh0CjqydkdSKEbK66nXXsu4E.roa (hash: qQJNJWud5A2R6q9LElC5WdsYynVdzga12kQWDH61mWo=) 6: AoQYABlbiRY1s0Gu3McHV58zrpk.roa (hash: 9zDAXKdytFg/3YwoUton7cniFW2Ja9ArE5tJ2skkn+c=) 7: OdGF_e17lYBOCmXmsk6hkXdf7b4.roa (hash: mFKHbPekFFY75D3Eu+1fU9mzEnOZ9+rJaeHup24zW3Q=) 8: PFyByii-LGzRSy90jiJ5mw1207A.roa (hash: gIS/3e5ejAqBGpUPti4f7RxoNdrem0KAE6vwjMubh3s=) 9: Qkq_75MjyviWe2NqgT_-Mwn9gnM.roa (hash: wJb9fi2vDIIR6voDYxFFRDUWuFkEQa98zP1PFmkzpXs=) 10: ScwFXX2rYjT7naQciVMaotJ-UfM.roa (hash: X8Vp96ZEvVObF+OkcOx9P04g9HBNU6my6Pc/b9LR72Y=) 11: rh7_88ku0NVEacOTg4kYRNyhUIs.roa (hash: Uz863y1lKUf+O+OGV8gNQDxIpi4RBI83I9R9FXt5Xp4=) 12: u37q8oxj6d2YnoBLY1VE3CqS2g0.roa (hash: QV9HVDjMgl4TBfOFPjFKF+CTfrUEm6XmvkI/fobJGaM=) Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/bb/b4b150-dbb8-465f-8155-e4419b64212e/1/8FIRKM9jSqavp-9S1THz_NVWKPk.crl rsync://rpki.ripe.net/repository/DEFAULT/bb/b4b150-dbb8-465f-8155-e4419b64212e/1/8FIRKM9jSqavp-9S1THz_NVWKPk.mft rsync://rpki.ripe.net/repository/DEFAULT/8FIRKM9jSqavp-9S1THz_NVWKPk.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Mon 28 Jul 2025 00:00:05 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:98:49:65:9e:47:b9:70:d9:e7:30:f5:ab:a2:f6:e1:7e:c1 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=f0521128cf634aa6afa7ef52d531f3fcd55628f9 Validity Not Before: Jul 27 01:00:53 2025 GMT Not After : Jul 28 01:00:53 2025 GMT Subject: CN=bc601578d67403d3bd250146bbc21fa97fdd7aad Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:cc:2e:2a:62:ad:3d:66:47:48:db:00:53:32:49: e9:d9:4c:ee:ee:8b:c1:1a:2a:56:09:6e:a0:0b:db: dd:d2:09:1c:21:cc:63:f9:69:2a:90:dd:5c:7a:1d: b0:b0:f0:9b:c9:fd:06:14:a6:7f:10:a5:2f:c5:21: 23:4f:1f:af:51:40:32:ff:7f:59:a9:07:6b:71:2b: 55:53:7c:f9:6f:a4:1c:70:13:93:2c:61:78:c3:e7: 79:f0:47:40:2b:10:99:b2:fc:a2:8d:f1:31:dc:06: 3a:3d:98:87:ef:5c:ea:3f:e6:b1:49:f8:c6:c1:71: cb:80:cf:61:58:90:4d:61:72:52:8f:db:42:6c:cf: 5b:73:29:6d:14:55:4e:4d:f3:4e:a7:47:1b:76:9b: d4:f3:96:b8:24:1c:70:76:f0:44:2a:5c:ce:3b:3b: ae:63:69:ba:2f:d8:58:8d:9c:0a:2d:95:af:1f:bb: 29:a1:11:6a:e1:4e:04:98:a3:89:b1:f5:cc:b2:d3: 6b:d2:87:c0:57:e3:e0:28:07:0c:7b:93:7c:21:c8: cc:5c:eb:f8:c1:03:19:a7:a7:9f:d4:73:51:12:65: 49:c0:1b:ef:6a:50:d1:12:d2:1e:58:41:58:e8:41: f4:e6:c9:f2:29:d8:71:70:61:ac:3d:14:e8:87:ad: c3:bb Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: BC:60:15:78:D6:74:03:D3:BD:25:01:46:BB:C2:1F:A9:7F:DD:7A:AD X509v3 Authority Key Identifier: keyid:F0:52:11:28:CF:63:4A:A6:AF:A7:EF:52:D5:31:F3:FC:D5:56:28:F9 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/8FIRKM9jSqavp-9S1THz_NVWKPk.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/bb/b4b150-dbb8-465f-8155-e4419b64212e/1/8FIRKM9jSqavp-9S1THz_NVWKPk.mft X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/bb/b4b150-dbb8-465f-8155-e4419b64212e/1/8FIRKM9jSqavp-9S1THz_NVWKPk.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 41:56:b0:9d:45:59:ff:db:22:15:5b:40:5e:62:3f:4a:04:5b: c6:71:0c:6b:6a:23:1f:95:6d:b0:65:25:43:b5:d3:6f:66:cf: c4:43:c7:ca:3f:32:e4:d1:5f:2a:e7:70:c3:30:3e:38:d9:55: fe:f3:67:d8:1f:25:fb:4d:b9:a8:03:1a:44:df:31:2e:4a:8f: c0:93:b6:6a:b4:b4:07:c9:67:26:91:46:0a:b2:b8:1f:d4:85: 38:28:07:df:4d:0c:e3:ae:a9:9e:0f:36:4b:25:3f:e3:3c:d0: 65:fe:b7:64:49:e5:c7:dd:c2:90:06:5e:fc:fc:c6:1c:b9:00: 6a:0a:d0:4b:53:07:37:55:e4:34:97:56:f3:87:55:de:1b:68: e2:8b:05:88:67:00:87:31:73:1e:e3:74:bb:83:9d:3d:dc:42: 72:ae:ee:40:ad:22:ac:78:19:a9:94:5c:6b:19:63:74:8b:d4: 65:3f:54:da:99:72:48:c3:4d:9b:fc:1c:63:2f:fe:ec:9c:43: a6:a4:d4:55:89:9f:1b:0b:8f:96:ca:87:bf:05:d1:e0:45:1e: 6c:4b:ca:a2:61:d8:bb:84:08:ea:1c:23:d9:f2:f7:17:a8:8e: 8c:41:73:cb:80:0f:3b:6b:72:5f:0a:56:ab:f7:04:83:0d:8c: 9c:47:37:59 -----BEGIN CERTIFICATE----- MIIFFjCCA/6gAwIBAgISAZhJZZ5HuXDZ5zD1q6L24X7BMA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKGYwNTIxMTI4Y2Y2MzRhYTZhZmE3ZWY1MmQ1MzFmM2ZjZDU1 NjI4ZjkwHhcNMjUwNzI3MDEwMDUzWhcNMjUwNzI4MDEwMDUzWjAzMTEwLwYDVQQD EyhiYzYwMTU3OGQ2NzQwM2QzYmQyNTAxNDZiYmMyMWZhOTdmZGQ3YWFkMIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAzC4qYq09ZkdI2wBTMknp2Uzu7ovB GipWCW6gC9vd0gkcIcxj+WkqkN1ceh2wsPCbyf0GFKZ/EKUvxSEjTx+vUUAy/39Z qQdrcStVU3z5b6QccBOTLGF4w+d58EdAKxCZsvyijfEx3AY6PZiH71zqP+axSfjG wXHLgM9hWJBNYXJSj9tCbM9bcyltFFVOTfNOp0cbdpvU85a4JBxwdvBEKlzOOzuu Y2m6L9hYjZwKLZWvH7spoRFq4U4EmKOJsfXMstNr0ofAV+PgKAcMe5N8IcjMXOv4 wQMZp6ef1HNREmVJwBvvalDREtIeWEFY6EH05snyKdhxcGGsPRToh63DuwIDAQAB o4ICIjCCAh4wHQYDVR0OBBYEFLxgFXjWdAPTvSUBRrvCH6l/3XqtMB8GA1UdIwQY MBaAFPBSESjPY0qmr6fvUtUx8/zVVij5MA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvOEZJUktNOWpTcWF2cC05UzFUSHpfTlZXS1BrLmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC9iYi9iNGIxNTAtZGJiOC00NjVmLTgxNTUt ZTQ0MTliNjQyMTJlLzEvOEZJUktNOWpTcWF2cC05UzFUSHpfTlZXS1BrLm1mdDCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC9iYi9iNGIxNTAtZGJiOC00NjVmLTgxNTUtZTQ0MTliNjQyMTJl LzEvOEZJUktNOWpTcWF2cC05UzFUSHpfTlZXS1BrLmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAQVawnUVZ /9siFVtAXmI/SgRbxnEMa2ojH5VtsGUlQ7XTb2bPxEPHyj8y5NFfKudwwzA+ONlV /vNn2B8l+025qAMaRN8xLkqPwJO2arS0B8lnJpFGCrK4H9SFOCgH300M466png82 SyU/4zzQZf63ZEnlx93CkAZe/PzGHLkAagrQS1MHN1XkNJdW84dV3hto4osFiGcA hzFzHuN0u4OdPdxCcq7uQK0irHgZqZRcaxljdIvUZT9U2plySMNNm/wcYy/+7JxD pqTUVYmfGwuPlsqHvwXR4EUebEvKomHYu4QI6hwj2fL3F6iOjEFzy4APO2tyXwpW q/cEgw2MnEc3WQ== -----END CERTIFICATE-----Generated at Sun Jul 27 08:50:29 2025 by rpki-client