$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/bd/f053cd-1d79-43a1-9aab-0e72416b4dc7/1/o4nnA1sI4YGjQfN-2nND0j8cr6Q.mft File: o4nnA1sI4YGjQfN-2nND0j8cr6Q.mft (raw, json) Hash identifier: Z+/hFtFJkF1zpY7Qc5Wu/QXFPe5YkGKDcxfqaWr4OBM= Subject key identifier: B7:D8:23:F5:38:92:CE:79:D7:81:72:25:2F:76:29:DD:7F:11:49:DB Authority key identifier: A3:89:E7:03:5B:08:E1:81:A3:41:F3:7E:DA:73:43:D2:3F:1C:AF:A4 Certificate issuer: /CN=a389e7035b08e181a341f37eda7343d23f1cafa4 Certificate serial: 01982E92F52791853AFEA9E385FE1A85D4DB Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/o4nnA1sI4YGjQfN-2nND0j8cr6Q.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/bd/f053cd-1d79-43a1-9aab-0e72416b4dc7/1/o4nnA1sI4YGjQfN-2nND0j8cr6Q.mft Manifest number: 1523 Signing time: Mon 21 Jul 2025 20:00:39 +0000 Manifest this update: Mon 21 Jul 2025 20:00:39 +0000 Manifest next update: Tue 22 Jul 2025 20:00:39 +0000 Files and hashes: 1: A-6dGixYiVjP5SArd3OOXzF_y94.roa (hash: dHKBVyiR8mv13Z7wTMxDvJhUaTAdj4JJSYSEmomSgRI=) 2: EdyN193XAqCuwUeh3uoqwgMp6YM.roa (hash: aMp83WD7+8DMvO0EZKm2i6yVdt39wHGmWPL1VSmKtjM=) 3: KWzqOLtIWSWtWkByhLp85FW_7rM.roa (hash: +yMm4K7E6517qc0jJ3daW8uChLhsqKi3MVBCXwIyDXI=) 4: ZMT2qJeQlu-C5i0G01EBCNd-g6M.roa (hash: Jul8wggfGDzUNFRFlHhNzs2me0GUF4GTUbIsvxzWDwQ=) 5: adPv80nsAvDoMdbWFhmbQrTYx_c.roa (hash: 4ui5pcCs9o10PJAGBjhy0LQC0IJvn6eEg11QBgbYrhM=) 6: ayrwJOZcqXwPotZkkftDNJvjVWI.roa (hash: u8hehMe3mSy7WRp8JZKZ+vW+iYZYC7RSsKKYne4ZeUk=) 7: dBRyMZmE2MJby6jWlOxwaQP0Xaw.roa (hash: n5MzTBEIB9PdMNKBfe5+OAUwctGrct8tICmAF1a6F9E=) 8: fnuqhATdgk7065LZ-MFpw_mk_Sk.roa (hash: MF0/pFOYDoQu2nRxFXy3gK33SujqFiXhgPkh2E7fsqk=) 9: mPlgxbWD56Le2xy3b_FhRsqSxsc.roa (hash: AfWfwIbPTYGoiVxVmMF6d4mso8lDoU2eXTIxJq7pZSw=) 10: o4nnA1sI4YGjQfN-2nND0j8cr6Q.crl (hash: HvsCF4s05v4umrnjbVAEd4WV4fDX4UEl9Npv6oTUZyo=) Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/bd/f053cd-1d79-43a1-9aab-0e72416b4dc7/1/o4nnA1sI4YGjQfN-2nND0j8cr6Q.crl rsync://rpki.ripe.net/repository/DEFAULT/bd/f053cd-1d79-43a1-9aab-0e72416b4dc7/1/o4nnA1sI4YGjQfN-2nND0j8cr6Q.mft rsync://rpki.ripe.net/repository/DEFAULT/o4nnA1sI4YGjQfN-2nND0j8cr6Q.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Tue 22 Jul 2025 20:00:39 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:98:2e:92:f5:27:91:85:3a:fe:a9:e3:85:fe:1a:85:d4:db Signature Algorithm: sha256WithRSAEncryption Issuer: CN=a389e7035b08e181a341f37eda7343d23f1cafa4 Validity Not Before: Jul 21 20:00:39 2025 GMT Not After : Jul 22 20:00:39 2025 GMT Subject: CN=b7d823f53892ce79d78172252f7629dd7f1149db Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:aa:82:17:25:ee:00:a7:b9:7a:90:bb:98:4e:0f: 15:12:2b:6d:e3:2d:ec:88:d8:75:60:c5:06:d5:83: 84:32:b4:da:ce:b5:82:f1:a4:11:0f:83:3c:fc:a1: 74:4f:9e:2b:bd:fd:77:a4:aa:53:50:7d:3b:58:8d: cc:7e:c3:b9:08:04:d7:0e:46:7a:f7:52:59:05:77: 89:f2:9c:32:82:aa:98:e4:b6:8d:3f:94:42:30:80: b2:2e:a4:0f:5e:1a:9b:81:a2:99:17:ce:43:a6:14: 24:56:f7:d4:0a:b6:5b:ef:36:52:0a:90:11:9b:66: 69:96:86:4e:ea:d7:99:05:31:c9:c7:f0:1c:bf:9c: 36:ca:37:5d:25:36:35:06:0f:70:3a:16:a2:34:63: d4:a4:ea:12:b4:96:4f:43:63:f5:3e:c8:87:c6:a0: 27:ee:b6:2a:fd:2b:75:b9:4f:c4:b4:11:2b:c3:fc: db:2d:b5:d7:5d:98:b6:30:8d:17:52:3f:14:de:ca: 5d:8a:3f:b8:82:5a:06:af:06:97:3f:5e:6c:72:c7: 69:8c:86:36:18:5f:01:6a:31:bf:2e:1e:da:2f:bd: 03:e1:e9:3c:23:b5:c5:82:7a:19:e1:ae:f9:93:af: 21:92:19:7e:bf:50:f3:17:4f:04:54:ef:7d:3c:0a: f2:7f Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: B7:D8:23:F5:38:92:CE:79:D7:81:72:25:2F:76:29:DD:7F:11:49:DB X509v3 Authority Key Identifier: keyid:A3:89:E7:03:5B:08:E1:81:A3:41:F3:7E:DA:73:43:D2:3F:1C:AF:A4 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/o4nnA1sI4YGjQfN-2nND0j8cr6Q.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/bd/f053cd-1d79-43a1-9aab-0e72416b4dc7/1/o4nnA1sI4YGjQfN-2nND0j8cr6Q.mft X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/bd/f053cd-1d79-43a1-9aab-0e72416b4dc7/1/o4nnA1sI4YGjQfN-2nND0j8cr6Q.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 47:63:20:95:8e:8d:7d:bd:a0:27:c2:65:53:aa:47:e2:22:27: b2:f1:ac:07:a2:3a:6d:7b:c7:41:a5:32:b3:61:f6:5d:8e:41: 3c:6e:dc:86:ec:eb:2b:70:93:f7:70:95:5a:af:98:c7:69:f3: 41:cf:c2:de:7d:87:2c:d8:75:53:a0:07:b1:cb:da:27:20:4d: 6e:b5:7b:a9:cc:8a:28:27:70:4b:1c:d2:da:03:63:4a:19:15: ea:56:1b:a8:87:38:0f:2a:6b:06:34:a7:6b:ab:35:3f:fa:b9: 59:d5:05:71:6f:1b:b5:8b:a5:ff:fd:84:68:42:a3:5f:39:4b: c0:02:90:05:e5:51:59:81:bb:43:ed:24:03:9d:79:12:9f:e9: ec:b2:e4:73:32:be:8c:16:30:f1:04:61:52:f0:74:71:d6:8f: 32:e4:7b:ef:de:1b:f6:69:bd:fb:b3:b2:3a:0b:79:5e:50:6d: 72:03:64:df:54:a9:0b:50:2b:d9:15:d5:d4:1e:b9:63:c8:8b: c6:44:66:06:98:37:fb:e3:59:55:fb:02:14:05:7a:3b:a6:32: 57:19:6b:26:67:de:17:f5:70:fa:21:33:7c:27:7a:f9:ad:c1: 09:f2:fd:ac:43:58:d2:91:4e:0a:73:12:fd:12:89:82:b7:83: f3:aa:36:fa -----BEGIN CERTIFICATE----- MIIFFjCCA/6gAwIBAgISAZgukvUnkYU6/qnjhf4ahdTbMA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKGEzODllNzAzNWIwOGUxODFhMzQxZjM3ZWRhNzM0M2QyM2Yx Y2FmYTQwHhcNMjUwNzIxMjAwMDM5WhcNMjUwNzIyMjAwMDM5WjAzMTEwLwYDVQQD EyhiN2Q4MjNmNTM4OTJjZTc5ZDc4MTcyMjUyZjc2MjlkZDdmMTE0OWRiMIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAqoIXJe4Ap7l6kLuYTg8VEitt4y3s iNh1YMUG1YOEMrTazrWC8aQRD4M8/KF0T54rvf13pKpTUH07WI3MfsO5CATXDkZ6 91JZBXeJ8pwygqqY5LaNP5RCMICyLqQPXhqbgaKZF85DphQkVvfUCrZb7zZSCpAR m2ZploZO6teZBTHJx/Acv5w2yjddJTY1Bg9wOhaiNGPUpOoStJZPQ2P1PsiHxqAn 7rYq/St1uU/EtBErw/zbLbXXXZi2MI0XUj8U3spdij+4gloGrwaXP15scsdpjIY2 GF8BajG/Lh7aL70D4ek8I7XFgnoZ4a75k68hkhl+v1DzF08EVO99PAryfwIDAQAB o4ICIjCCAh4wHQYDVR0OBBYEFLfYI/U4ks5514FyJS92Kd1/EUnbMB8GA1UdIwQY MBaAFKOJ5wNbCOGBo0HzftpzQ9I/HK+kMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvbzRubkExc0k0WUdqUWZOLTJuTkQwajhjcjZRLmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC9iZC9mMDUzY2QtMWQ3OS00M2ExLTlhYWIt MGU3MjQxNmI0ZGM3LzEvbzRubkExc0k0WUdqUWZOLTJuTkQwajhjcjZRLm1mdDCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC9iZC9mMDUzY2QtMWQ3OS00M2ExLTlhYWItMGU3MjQxNmI0ZGM3 LzEvbzRubkExc0k0WUdqUWZOLTJuTkQwajhjcjZRLmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAR2MglY6N fb2gJ8JlU6pH4iInsvGsB6I6bXvHQaUys2H2XY5BPG7chuzrK3CT93CVWq+Yx2nz Qc/C3n2HLNh1U6AHscvaJyBNbrV7qcyKKCdwSxzS2gNjShkV6lYbqIc4DyprBjSn a6s1P/q5WdUFcW8btYul//2EaEKjXzlLwAKQBeVRWYG7Q+0kA515Ep/p7LLkczK+ jBYw8QRhUvB0cdaPMuR7794b9mm9+7OyOgt5XlBtcgNk31SpC1Ar2RXV1B65Y8iL xkRmBpg3++NZVfsCFAV6O6YyVxlrJmfeF/Vw+iEzfCd6+a3BCfL9rENY0pFOCnMS /RKJgreD86o2+g== -----END CERTIFICATE-----Generated at Tue Jul 22 01:23:02 2025 by rpki-client