$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/bf/746410-026b-45c9-81cd-f12835f0247b/1/hdDnY_k1wXFpTxcgVutEIJ2y4s0.mft File: hdDnY_k1wXFpTxcgVutEIJ2y4s0.mft (raw, json) Hash identifier: CGl5oJRXFVEKYQKAudB1BDJpMyA9wortD2NWHoCMJFM= Subject key identifier: 53:73:F7:0B:50:B4:83:1B:60:C2:2D:0D:7D:41:D1:01:84:CF:95:60 Authority key identifier: 85:D0:E7:63:F9:35:C1:71:69:4F:17:20:56:EB:44:20:9D:B2:E2:CD Certificate issuer: /CN=85d0e763f935c171694f172056eb44209db2e2cd Certificate serial: 01983A60141DE8533B54B1FF19B72CC7FCBE Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/hdDnY_k1wXFpTxcgVutEIJ2y4s0.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/bf/746410-026b-45c9-81cd-f12835f0247b/1/hdDnY_k1wXFpTxcgVutEIJ2y4s0.mft Manifest number: 1219 Signing time: Thu 24 Jul 2025 03:00:31 +0000 Manifest this update: Thu 24 Jul 2025 03:00:31 +0000 Manifest next update: Fri 25 Jul 2025 03:00:31 +0000 Files and hashes: 1: 2Il6q-ZqOuI80bOhmO2ATk_4gjA.roa (hash: qZ2AvjwfuN5RofSpAulT+zvOokvk9hdo9R5gBG6wVV8=) 2: EqxVNlycylxq6ufI9ng2ltdK1KM.roa (hash: b+kpuQsONfGhMD7qgwxZkbzW/4IKkzNE5v/myC4W0qY=) 3: MceCU4XPd0t7fhZxTxvxReumv1Q.roa (hash: 5TdX80iYVUkF2JY7Z9ZEOYjAnRhS8f4vWckTIPnEXdo=) 4: QdYIwbhgXZFZDGrsD1bCfWnJfNM.roa (hash: GAa3KktDwm+TlBojUO7F6LnOQMJ0zxC/VLgeFCn23pI=) 5: V1rb0y6iu1TTOsIZQYPUPITNZdc.roa (hash: 4TLj9uQX2T55ymBodPD3FK/tTeE67Ngmw9g4awglSqU=) 6: Yjrt4HsK8wh6pJI81KOUWlnSEwg.roa (hash: XmuwPChIn1UvgMab/4oMWsQTN7bkJ51y5zUd1xVolH0=) 7: aaic0TQ08KDxqNotu0QjynGFp8k.roa (hash: y+rn4gyMmixGkyVVHgb8Zj+xOMFFm7BJm3FAMYf/M4M=) 8: cO2-NOuH2RV4sPciOdoA32su67Q.roa (hash: 9jc3V+7f0q1/c2NMI1faaA1MEEx9FCl4Vp7wxvOlyNU=) 9: euovkC8FzqkWizkBlJiIPuOidbU.roa (hash: NVQ3tcOFWDZctMMGjmKl2U9mGUa0NK9LjFLKrJC2iHM=) 10: gdNItxWNsM4KiGU05OylhksApCc.roa (hash: WiPvUqderzx9CicZMrqZIDKRBrczrFFx57GnwN1V0lI=) 11: hdDnY_k1wXFpTxcgVutEIJ2y4s0.crl (hash: +5KkunOE0rSpYeDoQKAhIi2kgbtT2BdGNi/AIW/8tzU=) 12: oMpZucICfk-8ZesIjg26RzH9z8Q.roa (hash: avfjdtl0mm9+afn2EBtC58m5oIaLp8/rBFhWdaYQq6o=) 13: zYeF4EOXDH9wga2Hl1a9xt43c_E.roa (hash: qprf7Kh7V9oLipnyoiqapOwT3fD2c8ij+cCs23g5KeE=) Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/bf/746410-026b-45c9-81cd-f12835f0247b/1/hdDnY_k1wXFpTxcgVutEIJ2y4s0.crl rsync://rpki.ripe.net/repository/DEFAULT/bf/746410-026b-45c9-81cd-f12835f0247b/1/hdDnY_k1wXFpTxcgVutEIJ2y4s0.mft rsync://rpki.ripe.net/repository/DEFAULT/hdDnY_k1wXFpTxcgVutEIJ2y4s0.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Fri 25 Jul 2025 03:00:31 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:98:3a:60:14:1d:e8:53:3b:54:b1:ff:19:b7:2c:c7:fc:be Signature Algorithm: sha256WithRSAEncryption Issuer: CN=85d0e763f935c171694f172056eb44209db2e2cd Validity Not Before: Jul 24 03:00:31 2025 GMT Not After : Jul 25 03:00:31 2025 GMT Subject: CN=5373f70b50b4831b60c22d0d7d41d10184cf9560 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:af:65:25:fc:2e:8e:e0:4b:d6:0b:11:13:29:eb: 03:e0:ff:83:95:17:13:d0:32:2a:fa:42:3c:3c:31: fc:3f:e5:15:bf:87:1a:65:51:6e:c6:16:08:7b:a3: aa:9a:18:4d:d3:4b:86:4b:9d:5d:38:55:2c:9b:01: 51:ca:a2:bc:46:2a:46:63:0a:ca:86:5f:6e:4e:c2: d9:d7:4e:df:6c:81:82:35:8a:8b:34:ed:12:55:85: d0:97:3c:a2:14:60:dd:42:c2:31:23:38:25:10:22: b3:a9:51:51:a9:d2:c0:ba:2e:a7:f3:e1:9b:36:13: 51:a1:00:52:6e:b8:1a:64:40:ff:33:1b:22:71:2f: 04:37:24:78:df:4c:38:9f:96:f8:07:70:95:58:7d: ae:f9:a3:ef:9e:0c:4a:ef:81:8e:73:08:92:84:f9: 6a:be:72:32:f6:30:58:4e:61:45:cd:8d:59:74:1f: 9f:d5:b2:3d:29:7c:35:02:7a:e0:5b:85:15:fd:17: 02:4e:9e:c0:5b:ec:0f:18:7c:0e:89:d8:f3:80:7a: b7:8e:0c:1a:c1:23:16:20:f3:ee:e4:e3:b8:9a:5e: bb:ba:8f:c4:14:42:c7:6b:52:aa:f8:2b:2e:30:8a: 27:89:45:14:ab:f8:c8:6b:07:7f:12:77:0e:66:c7: 48:5f Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 53:73:F7:0B:50:B4:83:1B:60:C2:2D:0D:7D:41:D1:01:84:CF:95:60 X509v3 Authority Key Identifier: keyid:85:D0:E7:63:F9:35:C1:71:69:4F:17:20:56:EB:44:20:9D:B2:E2:CD X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/hdDnY_k1wXFpTxcgVutEIJ2y4s0.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/bf/746410-026b-45c9-81cd-f12835f0247b/1/hdDnY_k1wXFpTxcgVutEIJ2y4s0.mft X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/bf/746410-026b-45c9-81cd-f12835f0247b/1/hdDnY_k1wXFpTxcgVutEIJ2y4s0.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 96:79:1e:1e:23:33:a4:2b:94:1c:3b:42:2d:e7:34:1e:ee:31: 32:c8:16:87:84:46:12:dd:11:21:e7:e9:39:49:0f:4a:b2:39: ff:b7:d1:f6:45:b5:2d:ac:5a:ce:91:d3:91:ec:57:f4:c9:4d: 0b:0f:0c:75:e4:13:a2:55:05:9b:cf:93:13:69:09:ae:47:c7: ca:77:5d:4b:9b:db:43:c5:44:7d:ae:4c:a4:75:bc:e1:e0:5e: 5a:c6:90:70:c5:55:63:08:71:a9:86:b7:8f:c3:03:ed:9b:88: fc:d6:99:37:16:b9:cb:d6:42:da:51:b5:ab:b3:5a:99:0d:8d: 5e:bb:2d:ab:32:36:9c:e2:00:52:3f:d7:5b:81:d4:7e:0d:54: 2c:af:fd:a3:06:91:1b:78:3e:22:bf:28:bc:df:6c:c3:6b:59: 40:21:0d:39:73:e3:44:32:34:31:20:a8:3d:af:41:38:71:86: 69:4d:da:9d:14:7b:a1:c3:75:d6:6a:11:a0:cb:13:66:6f:94: af:38:d5:29:00:ad:ff:b6:fe:d2:65:2f:07:66:8a:c7:0e:d1: 66:aa:41:c8:73:da:18:dc:6c:e7:0b:e3:fd:81:92:20:5f:1d: d5:5e:33:c0:3f:cd:ec:3a:aa:00:67:e2:2c:37:bc:34:e5:c9: 3a:ed:71:86 -----BEGIN CERTIFICATE----- MIIFFjCCA/6gAwIBAgISAZg6YBQd6FM7VLH/Gbcsx/y+MA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKDg1ZDBlNzYzZjkzNWMxNzE2OTRmMTcyMDU2ZWI0NDIwOWRi MmUyY2QwHhcNMjUwNzI0MDMwMDMxWhcNMjUwNzI1MDMwMDMxWjAzMTEwLwYDVQQD Eyg1MzczZjcwYjUwYjQ4MzFiNjBjMjJkMGQ3ZDQxZDEwMTg0Y2Y5NTYwMIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAr2Ul/C6O4EvWCxETKesD4P+DlRcT 0DIq+kI8PDH8P+UVv4caZVFuxhYIe6OqmhhN00uGS51dOFUsmwFRyqK8RipGYwrK hl9uTsLZ107fbIGCNYqLNO0SVYXQlzyiFGDdQsIxIzglECKzqVFRqdLAui6n8+Gb NhNRoQBSbrgaZED/MxsicS8ENyR430w4n5b4B3CVWH2u+aPvngxK74GOcwiShPlq vnIy9jBYTmFFzY1ZdB+f1bI9KXw1AnrgW4UV/RcCTp7AW+wPGHwOidjzgHq3jgwa wSMWIPPu5OO4ml67uo/EFELHa1Kq+CsuMIoniUUUq/jIawd/EncOZsdIXwIDAQAB o4ICIjCCAh4wHQYDVR0OBBYEFFNz9wtQtIMbYMItDX1B0QGEz5VgMB8GA1UdIwQY MBaAFIXQ52P5NcFxaU8XIFbrRCCdsuLNMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvaGREbllfazF3WEZwVHhjZ1Z1dEVJSjJ5NHMwLmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC9iZi83NDY0MTAtMDI2Yi00NWM5LTgxY2Qt ZjEyODM1ZjAyNDdiLzEvaGREbllfazF3WEZwVHhjZ1Z1dEVJSjJ5NHMwLm1mdDCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC9iZi83NDY0MTAtMDI2Yi00NWM5LTgxY2QtZjEyODM1ZjAyNDdi LzEvaGREbllfazF3WEZwVHhjZ1Z1dEVJSjJ5NHMwLmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAlnkeHiMz pCuUHDtCLec0Hu4xMsgWh4RGEt0RIefpOUkPSrI5/7fR9kW1LaxazpHTkexX9MlN Cw8MdeQTolUFm8+TE2kJrkfHynddS5vbQ8VEfa5MpHW84eBeWsaQcMVVYwhxqYa3 j8MD7ZuI/NaZNxa5y9ZC2lG1q7NamQ2NXrstqzI2nOIAUj/XW4HUfg1ULK/9owaR G3g+Ir8ovN9sw2tZQCENOXPjRDI0MSCoPa9BOHGGaU3anRR7ocN11moRoMsTZm+U rzjVKQCt/7b+0mUvB2aKxw7RZqpByHPaGNxs5wvj/YGSIF8d1V4zwD/N7DqqAGfi LDe8NOXJOu1xhg== -----END CERTIFICATE-----Generated at Thu Jul 24 12:15:10 2025 by rpki-client