$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/bd/1fd0a6-4517-4a0b-b3c9-12ec22c9c5a2/1/MkdKx8qF4JwtSLM-e_Zvjtdk3g8.mft File: MkdKx8qF4JwtSLM-e_Zvjtdk3g8.mft (raw, json) Hash identifier: S4ZbYqAjNrf45pgTxTefNdmn9ATVpNjMgCpIcKExMbs= Subject key identifier: C7:CD:F3:C2:A8:38:89:36:22:F5:23:98:A4:68:16:C2:67:F6:E5:7B Authority key identifier: 32:47:4A:C7:CA:85:E0:9C:2D:48:B3:3E:7B:F6:6F:8E:D7:64:DE:0F Certificate issuer: /CN=32474ac7ca85e09c2d48b33e7bf66f8ed764de0f Certificate serial: 01983795D289E4759767FA72C258453C12F0 Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/MkdKx8qF4JwtSLM-e_Zvjtdk3g8.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/bd/1fd0a6-4517-4a0b-b3c9-12ec22c9c5a2/1/MkdKx8qF4JwtSLM-e_Zvjtdk3g8.mft Manifest number: 1618 Signing time: Wed 23 Jul 2025 14:00:22 +0000 Manifest this update: Wed 23 Jul 2025 14:00:22 +0000 Manifest next update: Thu 24 Jul 2025 14:00:22 +0000 Files and hashes: 1: 08x65D62xajmjuWxGOGX--5GFZ4.roa (hash: ku01TCluM3ObD1DEPpsLr/8jGhA1O5espf/zteTKSkk=) 2: 1-fxNLZQMykWE3SLBLsEKwibzn3o.roa (hash: U9t8UfOKITE6D0gBLc/Dtn9zr6EfXzJkxHJL0LBQvTo=) 3: FDmDvOACHulfshItBSDCX5mBYSQ.roa (hash: aexzHKGvD/WM+wZ6/qx7vyWxEHAqx7gswtzEcmCk74k=) 4: FzyJ-A4chBzu8lQqhpLh4dfVe9s.roa (hash: kikBFtCVFZZA5yK1FlsJJ2Y15ol/mIm/K3+f2pwmt3Q=) 5: JRfXlKgZScSlnAP9_s4mWUCHMzI.roa (hash: Yofq9QzaUqxyhMLfnSLcXXtmS3vz0xWVOjl3kItQ1gM=) 6: MkdKx8qF4JwtSLM-e_Zvjtdk3g8.crl (hash: vc7xkDJiwwkJGAUYgZQmBB9FGmOTJAfgnndBLBDZ3KI=) 7: UI2cnhatNs5ZeysmslxEpLBSTew.roa (hash: axZPCQgEFKrONNIyjteNC+Y0RYmX6khaCS5yj1K7lFE=) 8: XIqtTjvuJ5glY39EaIP6KmILhoo.roa (hash: oyK+JoJZ3ZJXn7BAWGpujgyfoF5xI3Ds91YiwWdI2PE=) 9: b_MAVuI29oBciIh7vGGq0NJVEzc.roa (hash: hDxp3S5bhbbLqI6OACypq5MMFaQlI+7lCsYe3tJ2F9c=) 10: dOfaSe3fIYIhGR1xcwXjfUk3OeI.roa (hash: uz8UfxMH6M1zEnn7EFrd8TVCQANQpajV/Ux4YkN59Jk=) 11: ivBw7pb2lERE4O4pT70f-IjK-H8.roa (hash: 9+du4uvg6+sqYU99LVsbimMbdhpdO5ppSVPQO3/HDIY=) 12: vaL0J_r43BzBTm5r8Bo75j0pTF8.roa (hash: 75FzmVXUE4MjGcr9LiSgeGxgqkVwVmsZ6mF1xXYO59Y=) 13: wjhfspu_G4HGizYS_OBNLClt3cU.roa (hash: bxfIFEAR3HaNo4msf1HR2PgJlfyMNGagLyOKrjbfFag=) Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/bd/1fd0a6-4517-4a0b-b3c9-12ec22c9c5a2/1/MkdKx8qF4JwtSLM-e_Zvjtdk3g8.crl rsync://rpki.ripe.net/repository/DEFAULT/bd/1fd0a6-4517-4a0b-b3c9-12ec22c9c5a2/1/MkdKx8qF4JwtSLM-e_Zvjtdk3g8.mft rsync://rpki.ripe.net/repository/DEFAULT/MkdKx8qF4JwtSLM-e_Zvjtdk3g8.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Thu 24 Jul 2025 14:00:22 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:98:37:95:d2:89:e4:75:97:67:fa:72:c2:58:45:3c:12:f0 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=32474ac7ca85e09c2d48b33e7bf66f8ed764de0f Validity Not Before: Jul 23 14:00:22 2025 GMT Not After : Jul 24 14:00:22 2025 GMT Subject: CN=c7cdf3c2a838893622f52398a46816c267f6e57b Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:98:09:53:5e:0d:ed:e6:86:6c:01:7c:f4:cf:b9: 6a:40:a0:d2:da:b6:18:17:43:a1:c5:7d:c6:50:ee: 63:a3:a0:9b:7f:2c:c0:d6:2f:5a:16:56:4b:dd:30: 8a:bb:da:c8:37:b4:15:62:c1:4b:12:98:1b:ea:74: 62:c0:51:1c:7f:26:a2:18:d7:c1:6b:cb:6e:ae:e1: d0:84:2e:30:c6:d2:e4:ce:a4:1f:a6:fe:dc:4e:fa: ff:26:13:16:e1:7d:ef:c4:28:91:a4:da:ea:1d:88: 20:63:16:cb:47:4b:8d:a8:f7:8f:ab:e5:89:f6:75: ee:ee:6a:01:37:0a:57:21:a5:a7:56:86:05:24:09: ff:47:e8:f3:90:4e:3b:54:ac:f1:88:2e:1a:24:9a: 95:69:5f:fc:9f:0d:38:f4:35:fe:d3:31:c2:23:d9: 2f:c8:09:1b:51:96:bd:e8:9a:9f:fa:9a:c1:dc:4e: 95:e5:8b:65:26:fa:15:2f:83:4d:8f:b9:32:83:45: ed:e8:c5:2d:8b:dd:12:a7:1b:7d:1d:dd:b9:39:bc: 66:84:c8:7e:19:d6:80:04:85:c4:8d:84:03:a1:a3: 6f:bd:ef:17:4a:25:1d:15:d5:a5:25:57:b9:c7:fb: 81:19:10:33:28:fb:52:3d:bf:d8:ed:e5:39:b3:fe: 82:ef Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: C7:CD:F3:C2:A8:38:89:36:22:F5:23:98:A4:68:16:C2:67:F6:E5:7B X509v3 Authority Key Identifier: keyid:32:47:4A:C7:CA:85:E0:9C:2D:48:B3:3E:7B:F6:6F:8E:D7:64:DE:0F X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/MkdKx8qF4JwtSLM-e_Zvjtdk3g8.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/bd/1fd0a6-4517-4a0b-b3c9-12ec22c9c5a2/1/MkdKx8qF4JwtSLM-e_Zvjtdk3g8.mft X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/bd/1fd0a6-4517-4a0b-b3c9-12ec22c9c5a2/1/MkdKx8qF4JwtSLM-e_Zvjtdk3g8.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 79:a4:80:fe:b4:0c:37:3b:2a:30:fb:d2:00:1c:0e:f8:66:80: 52:9c:3a:b9:50:3e:54:e7:f8:2d:03:91:ab:60:b9:59:bb:c2: 77:ed:24:f0:09:14:15:9b:42:bf:0c:00:65:31:b5:bb:9c:60: f3:7b:c9:6d:ad:d7:1c:b8:da:f4:b3:a1:28:90:94:85:fd:e4: f0:b9:f1:4a:37:3d:8b:4e:06:cd:75:50:e6:fa:d6:7d:a2:7c: 0d:23:d3:ca:90:ee:3a:88:6d:73:61:f3:5f:25:99:7c:5f:45: 47:9e:08:2b:62:6d:ee:da:82:07:5d:3e:89:31:a1:2a:cf:0f: d7:6f:88:cb:ab:59:2a:af:34:7d:ab:50:35:e2:12:3c:d9:b8: 47:6b:7a:d5:34:6d:cf:59:9a:92:7f:63:6c:a2:be:90:36:2f: 5f:ec:a7:4c:bc:3b:ca:01:bb:85:2b:a1:d9:0d:66:b0:c8:62: 85:d6:09:df:57:8a:3c:06:39:0d:55:b5:50:d4:a9:a4:0c:c9: 3a:60:9f:33:6c:ca:68:9c:dd:0f:ba:52:7e:60:0f:7e:9b:8e: 6b:4a:ab:af:ee:f6:a5:4e:1b:e0:3e:f8:b8:dd:de:28:05:22: 44:36:55:c2:cb:e8:fc:68:ae:7f:a8:24:e2:53:35:04:e0:71: fd:49:a9:58 -----BEGIN CERTIFICATE----- MIIFFjCCA/6gAwIBAgISAZg3ldKJ5HWXZ/pywlhFPBLwMA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKDMyNDc0YWM3Y2E4NWUwOWMyZDQ4YjMzZTdiZjY2ZjhlZDc2 NGRlMGYwHhcNMjUwNzIzMTQwMDIyWhcNMjUwNzI0MTQwMDIyWjAzMTEwLwYDVQQD EyhjN2NkZjNjMmE4Mzg4OTM2MjJmNTIzOThhNDY4MTZjMjY3ZjZlNTdiMIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAmAlTXg3t5oZsAXz0z7lqQKDS2rYY F0OhxX3GUO5jo6CbfyzA1i9aFlZL3TCKu9rIN7QVYsFLEpgb6nRiwFEcfyaiGNfB a8turuHQhC4wxtLkzqQfpv7cTvr/JhMW4X3vxCiRpNrqHYggYxbLR0uNqPePq+WJ 9nXu7moBNwpXIaWnVoYFJAn/R+jzkE47VKzxiC4aJJqVaV/8nw049DX+0zHCI9kv yAkbUZa96Jqf+prB3E6V5YtlJvoVL4NNj7kyg0Xt6MUti90Spxt9Hd25ObxmhMh+ GdaABIXEjYQDoaNvve8XSiUdFdWlJVe5x/uBGRAzKPtSPb/Y7eU5s/6C7wIDAQAB o4ICIjCCAh4wHQYDVR0OBBYEFMfN88KoOIk2IvUjmKRoFsJn9uV7MB8GA1UdIwQY MBaAFDJHSsfKheCcLUizPnv2b47XZN4PMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvTWtkS3g4cUY0Snd0U0xNLWVfWnZqdGRrM2c4LmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC9iZC8xZmQwYTYtNDUxNy00YTBiLWIzYzkt MTJlYzIyYzljNWEyLzEvTWtkS3g4cUY0Snd0U0xNLWVfWnZqdGRrM2c4Lm1mdDCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC9iZC8xZmQwYTYtNDUxNy00YTBiLWIzYzktMTJlYzIyYzljNWEy LzEvTWtkS3g4cUY0Snd0U0xNLWVfWnZqdGRrM2c4LmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAeaSA/rQM NzsqMPvSABwO+GaAUpw6uVA+VOf4LQORq2C5WbvCd+0k8AkUFZtCvwwAZTG1u5xg 83vJba3XHLja9LOhKJCUhf3k8LnxSjc9i04GzXVQ5vrWfaJ8DSPTypDuOohtc2Hz XyWZfF9FR54IK2Jt7tqCB10+iTGhKs8P12+Iy6tZKq80fatQNeISPNm4R2t61TRt z1makn9jbKK+kDYvX+ynTLw7ygG7hSuh2Q1msMhihdYJ31eKPAY5DVW1UNSppAzJ OmCfM2zKaJzdD7pSfmAPfpuOa0qrr+72pU4b4D74uN3eKAUiRDZVwsvo/Giuf6gk 4lM1BOBx/UmpWA== -----END CERTIFICATE-----Generated at Wed Jul 23 23:21:43 2025 by rpki-client