$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/bc/d140fb-03ae-45d9-8ddc-e1ed9dd2a02a/1/p5u6KAWpiJVOT-xCVwUw8W-ecJM.mft File: p5u6KAWpiJVOT-xCVwUw8W-ecJM.mft (raw, json) Hash identifier: OjwxeN6bAEgFMyosJd4K8/JE/PX3ERpim8deoCzqldc= Subject key identifier: D5:66:BC:FA:C4:4E:A6:C1:A9:B6:93:B8:3D:70:EE:BD:5E:D8:32:BB Authority key identifier: A7:9B:BA:28:05:A9:88:95:4E:4F:EC:42:57:05:30:F1:6F:9E:70:93 Certificate issuer: /CN=a79bba2805a988954e4fec42570530f16f9e7093 Certificate serial: 01984AAEF4B22D589A768756845D2B474F75 Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/p5u6KAWpiJVOT-xCVwUw8W-ecJM.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/bc/d140fb-03ae-45d9-8ddc-e1ed9dd2a02a/1/p5u6KAWpiJVOT-xCVwUw8W-ecJM.mft Manifest number: 1618 Signing time: Sun 27 Jul 2025 07:00:36 +0000 Manifest this update: Sun 27 Jul 2025 07:00:36 +0000 Manifest next update: Mon 28 Jul 2025 07:00:36 +0000 Files and hashes: 1: D-RIX_FD-SN5SshOisKYwCgAV_I.roa (hash: x033PUL0ZGG5mDhT/he8/ieNNlTHX9WAHAFDtaJQ278=) 2: DzfEbFPfYy4xpas3bsxIDlFZktA.roa (hash: THhbtWRVoUEwxJC8CZKbYrVSasGjOcgtKoQ/LVP3UKA=) 3: E9n95xnL19yX1B4Vk9ExkIt3f-c.roa (hash: ouMNy3kdRPfar+w1HNS2jM0LMO/r+ZZQenoBAODEfBY=) 4: EAoNPZ8TpgdLFjCSj501GJeuEXI.roa (hash: pO6PSYGesSNZg2BIOmFMIZ89ZMsZTFVJdrF49KPq8PA=) 5: FFaDrp2TE8Iso6bJlqnb0FqxMJo.roa (hash: Jw9G+J8hnCo8w1musIzxpySO6bTcvYrzNLckyhAd2sE=) 6: FXDFb34PBHFpzXqxsfO-MRRoL1w.roa (hash: oabg5c6EyRNzxsL44FI1GqhM5cn4+01B5g9m9wTra50=) 7: IUh9_C97qpOKm_8AV-AspCaoEAg.roa (hash: c2S3m+7nRWXLhOWwBs+WGI3pFEVCypK98I+qc9J+WoQ=) 8: Nbis52_bGmBIGC7k7OWz54ZVymo.roa (hash: aH/DSjSBHo+CUhmGlittWaZYo1UBwB3kdgrpakh3geQ=) 9: PPsYUSjJ6B10FlewER5Ai8nn-_A.roa (hash: 10T1YdRCwRDgbSqL2l2y0wL7RPOmP97+IJQfqf219GY=) 10: oJr4DCeqtN2tV6Ugf36L9eXTcTI.roa (hash: vOwTJ+3Vsj2ap8ElFcEgLM26b3Nku6y6ruqjJGc7XJs=) 11: p5u6KAWpiJVOT-xCVwUw8W-ecJM.crl (hash: k0Oqf/303vOifFKD/MruzCTL0EA/EK76r/kHMDT3AeU=) 12: wx9ZLfHq6PPLS3pCuhQK4_vKdmU.roa (hash: DnxpnoHYAliciPu4AVi4OmZMasKtCCrMr0Wd+JxLlgQ=) Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/bc/d140fb-03ae-45d9-8ddc-e1ed9dd2a02a/1/p5u6KAWpiJVOT-xCVwUw8W-ecJM.crl rsync://rpki.ripe.net/repository/DEFAULT/bc/d140fb-03ae-45d9-8ddc-e1ed9dd2a02a/1/p5u6KAWpiJVOT-xCVwUw8W-ecJM.mft rsync://rpki.ripe.net/repository/DEFAULT/p5u6KAWpiJVOT-xCVwUw8W-ecJM.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Mon 28 Jul 2025 00:00:05 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:98:4a:ae:f4:b2:2d:58:9a:76:87:56:84:5d:2b:47:4f:75 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=a79bba2805a988954e4fec42570530f16f9e7093 Validity Not Before: Jul 27 07:00:36 2025 GMT Not After : Jul 28 07:00:36 2025 GMT Subject: CN=d566bcfac44ea6c1a9b693b83d70eebd5ed832bb Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:c0:fb:60:c4:0d:5f:ef:fa:6b:5c:d2:50:76:36: 3a:3d:b4:53:4d:89:21:a8:91:d0:0d:c7:f1:d6:3f: 8a:9d:c3:8d:93:c8:c6:c5:39:2d:86:d3:13:9f:64: 67:36:02:79:28:e4:ff:46:47:07:84:de:09:bf:cf: bb:e5:27:d4:68:1a:5e:6b:cd:ce:ec:d6:de:dd:6e: 80:5a:8f:01:33:b7:90:99:66:f8:d9:1e:e6:39:c5: aa:68:c1:06:8a:2c:fa:87:dd:e7:80:30:71:71:43: 93:89:db:aa:77:99:b4:e9:51:36:8d:eb:78:3a:fb: 98:4d:c7:e1:e7:b3:9d:8e:35:af:ce:86:d8:14:44: 93:d5:9e:f7:1d:29:c4:d7:47:4e:e3:77:de:85:fb: 37:09:c1:a1:11:5d:65:e6:83:06:ce:70:a9:cd:4a: 17:7e:d7:e2:74:b1:18:22:34:5f:9a:c0:0b:22:c4: 3b:5d:34:5d:58:67:bc:eb:41:7f:9d:c7:65:2b:5b: 6f:6a:d5:89:63:b6:c2:aa:01:d6:ed:50:44:db:d8: 23:4b:e2:2b:58:8c:ac:04:c9:0a:99:00:db:3e:e2: 91:ce:58:78:ba:dd:8a:b6:cf:c6:3a:ef:51:03:ff: 8b:ea:fd:04:f7:f0:11:72:64:3c:5d:80:62:2b:a7: c6:ff Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: D5:66:BC:FA:C4:4E:A6:C1:A9:B6:93:B8:3D:70:EE:BD:5E:D8:32:BB X509v3 Authority Key Identifier: keyid:A7:9B:BA:28:05:A9:88:95:4E:4F:EC:42:57:05:30:F1:6F:9E:70:93 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/p5u6KAWpiJVOT-xCVwUw8W-ecJM.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/bc/d140fb-03ae-45d9-8ddc-e1ed9dd2a02a/1/p5u6KAWpiJVOT-xCVwUw8W-ecJM.mft X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/bc/d140fb-03ae-45d9-8ddc-e1ed9dd2a02a/1/p5u6KAWpiJVOT-xCVwUw8W-ecJM.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption ac:23:9c:bd:ff:fe:11:eb:c3:54:0f:a9:89:41:81:dc:a1:9b: dc:e6:b1:bc:89:1a:aa:16:8b:5b:01:da:d5:d0:a6:94:54:c4: 73:b6:ea:06:a4:90:bf:64:17:41:f2:de:bb:10:27:55:b5:5a: 4d:4e:36:a9:ce:d3:05:71:15:d5:c5:ba:91:ea:dc:0e:0f:84: 6f:6c:12:00:ea:04:4b:53:8e:70:f8:ad:16:79:37:4f:c7:ff: 61:c4:ff:4c:82:97:d5:84:29:60:7d:40:26:3f:ca:b8:28:df: c5:b5:d6:a2:6d:fb:b6:60:7f:c6:33:9f:89:9f:f7:bb:ed:0d: 77:95:6c:16:44:4f:72:4c:d5:5c:5a:92:fe:dc:54:a0:a8:ca: 9c:ba:dc:e6:93:f2:e1:f3:f5:19:fb:4f:37:f8:76:bc:e0:bc: 7c:20:0c:c8:c4:68:2f:fe:f3:cd:6c:bc:48:cf:ca:62:96:d7: df:8a:78:e7:b7:a2:67:d5:bf:37:54:84:d8:46:32:1d:e9:aa: c8:54:f8:1c:ad:b2:9a:fa:62:4c:fe:71:13:d3:f4:80:0a:b6: 03:5e:4c:32:9d:d2:81:4b:74:d1:1c:33:56:84:67:9b:a6:76: a2:da:6d:4e:0a:5d:3c:8f:73:9a:97:4b:d2:49:d4:ff:d5:4a: 46:15:5e:04 -----BEGIN CERTIFICATE----- MIIFFjCCA/6gAwIBAgISAZhKrvSyLViadodWhF0rR091MA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKGE3OWJiYTI4MDVhOTg4OTU0ZTRmZWM0MjU3MDUzMGYxNmY5 ZTcwOTMwHhcNMjUwNzI3MDcwMDM2WhcNMjUwNzI4MDcwMDM2WjAzMTEwLwYDVQQD EyhkNTY2YmNmYWM0NGVhNmMxYTliNjkzYjgzZDcwZWViZDVlZDgzMmJiMIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAwPtgxA1f7/prXNJQdjY6PbRTTYkh qJHQDcfx1j+KncONk8jGxTkthtMTn2RnNgJ5KOT/RkcHhN4Jv8+75SfUaBpea83O 7Nbe3W6AWo8BM7eQmWb42R7mOcWqaMEGiiz6h93ngDBxcUOTiduqd5m06VE2jet4 OvuYTcfh57OdjjWvzobYFEST1Z73HSnE10dO43fehfs3CcGhEV1l5oMGznCpzUoX ftfidLEYIjRfmsALIsQ7XTRdWGe860F/ncdlK1tvatWJY7bCqgHW7VBE29gjS+Ir WIysBMkKmQDbPuKRzlh4ut2Kts/GOu9RA/+L6v0E9/ARcmQ8XYBiK6fG/wIDAQAB o4ICIjCCAh4wHQYDVR0OBBYEFNVmvPrETqbBqbaTuD1w7r1e2DK7MB8GA1UdIwQY MBaAFKebuigFqYiVTk/sQlcFMPFvnnCTMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvcDV1NktBV3BpSlZPVC14Q1Z3VXc4Vy1lY0pNLmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC9iYy9kMTQwZmItMDNhZS00NWQ5LThkZGMt ZTFlZDlkZDJhMDJhLzEvcDV1NktBV3BpSlZPVC14Q1Z3VXc4Vy1lY0pNLm1mdDCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC9iYy9kMTQwZmItMDNhZS00NWQ5LThkZGMtZTFlZDlkZDJhMDJh LzEvcDV1NktBV3BpSlZPVC14Q1Z3VXc4Vy1lY0pNLmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEArCOcvf/+ EevDVA+piUGB3KGb3OaxvIkaqhaLWwHa1dCmlFTEc7bqBqSQv2QXQfLeuxAnVbVa TU42qc7TBXEV1cW6kercDg+Eb2wSAOoES1OOcPitFnk3T8f/YcT/TIKX1YQpYH1A Jj/KuCjfxbXWom37tmB/xjOfiZ/3u+0Nd5VsFkRPckzVXFqS/txUoKjKnLrc5pPy 4fP1GftPN/h2vOC8fCAMyMRoL/7zzWy8SM/KYpbX34p457eiZ9W/N1SE2EYyHemq yFT4HK2ymvpiTP5xE9P0gAq2A15MMp3SgUt00RwzVoRnm6Z2otptTgpdPI9zmpdL 0knU/9VKRhVeBA== -----END CERTIFICATE-----Generated at Sun Jul 27 08:24:47 2025 by rpki-client