$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/c0/b70658-e1dc-4944-a06b-1c680adf7a26/1/02AMuv0m_uUGT8ifMB38jjwdPKU.mft File: 02AMuv0m_uUGT8ifMB38jjwdPKU.mft (raw, json) Hash identifier: U4tigg5bAYRrLYqfIs/9NGRi1CrzvC2eTB5L7ceRGEg= Subject key identifier: E5:0A:30:88:E1:23:FB:66:38:02:27:C8:88:F1:82:14:E3:93:B3:20 Authority key identifier: D3:60:0C:BA:FD:26:FE:E5:06:4F:C8:9F:30:1D:FC:8E:3C:1D:3C:A5 Certificate issuer: /CN=d3600cbafd26fee5064fc89f301dfc8e3c1d3ca5 Certificate serial: 01982859E8ADDE0DEF5F302E9ED761933EFE Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/02AMuv0m_uUGT8ifMB38jjwdPKU.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/c0/b70658-e1dc-4944-a06b-1c680adf7a26/1/02AMuv0m_uUGT8ifMB38jjwdPKU.mft Manifest number: 15FF Signing time: Sun 20 Jul 2025 15:00:37 +0000 Manifest this update: Sun 20 Jul 2025 15:00:37 +0000 Manifest next update: Mon 21 Jul 2025 15:00:37 +0000 Files and hashes: 1: 02AMuv0m_uUGT8ifMB38jjwdPKU.crl (hash: UYpyj77fiZ6DS33es+twntfWIjb4B8JcOx6w9Nq98+0=) 2: 2WkxZ6d8ewxrLWO8WH12o0AY6xw.roa (hash: nbEjkYORzyFd58OrYmjVC1fHN4kRwapxAIIPY/slelc=) 3: 8elKK2rgNwwXkrg0pHAsC0Str_Y.roa (hash: gbjL4NS8CEtaB75aGSiE2TUcZMbd9WI+VArcCJKxNo4=) 4: AG97hJvhy0UeDTt3HIas70L9MWQ.roa (hash: CpGaF4KcigctK1KLFQXtXWhD0jjodHuaq3LolhI5NC8=) 5: EEkMm6nCb9R4YLtB4IXzgCR8OOM.roa (hash: 7A7HQmXagHkrgjRynPlWf1aNJTOS5cJM4PvFKY2czsg=) 6: JdavXfgS1C88UGPje2KGgh-CbRs.roa (hash: fsvo1+m2SxrjapW7ugn4l/vkPt8HqDS/T913gxJRh4I=) 7: M-yd6Ugm4j37VvR5jMt-KNJrmEI.roa (hash: vqjDdTSN4DxJrQed7BY7JJ0opDc9Ee98YYBmwBxXED4=) 8: Nedx1_M66uIc0vDKNZQnQXlLIdM.roa (hash: zJ8+VfMNsVLvkhPB7kvPUzmVC3uoyAUluiAWRCM46n4=) 9: Qi9XVq-dT2o75N7dfhs2g5GBACU.roa (hash: ZA6fIgi4q3HA9rAbCvC+Xiwj/72PmBX2B2EUlsP/w2Q=) 10: Z3835702684lqYvr6YcO1CBN9v8.roa (hash: ix7qVq4wKUu1ecDe/rFafECXz6RKxGTKJ4zfcl+Dsfw=) 11: jLnip0BdB36NRqrdIhQucDZy8-A.roa (hash: PgGmCULcevmCru0Kv0QVroNMx8/gH95JrLZ6JaAFDWc=) Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/c0/b70658-e1dc-4944-a06b-1c680adf7a26/1/02AMuv0m_uUGT8ifMB38jjwdPKU.crl rsync://rpki.ripe.net/repository/DEFAULT/c0/b70658-e1dc-4944-a06b-1c680adf7a26/1/02AMuv0m_uUGT8ifMB38jjwdPKU.mft rsync://rpki.ripe.net/repository/DEFAULT/02AMuv0m_uUGT8ifMB38jjwdPKU.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Mon 21 Jul 2025 13:00:25 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:98:28:59:e8:ad:de:0d:ef:5f:30:2e:9e:d7:61:93:3e:fe Signature Algorithm: sha256WithRSAEncryption Issuer: CN=d3600cbafd26fee5064fc89f301dfc8e3c1d3ca5 Validity Not Before: Jul 20 15:00:37 2025 GMT Not After : Jul 21 15:00:37 2025 GMT Subject: CN=e50a3088e123fb66380227c888f18214e393b320 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:a4:8d:bb:7b:23:46:3d:26:d3:55:a9:4e:dd:f9: d6:31:34:9c:be:c8:31:07:3d:9f:6d:03:04:3f:02: 14:8b:a4:ac:06:a8:e3:ca:27:60:bb:29:08:3d:5e: 78:dd:3c:ac:d1:4c:2c:a3:17:3e:66:46:c8:ca:bb: 6c:c1:9c:12:a6:c1:72:b8:2f:0f:67:94:bd:49:ad: 53:13:8d:e9:91:39:83:70:31:4a:7e:f5:ff:72:33: a1:e1:bb:c2:4c:1e:2a:f2:37:cd:ba:cd:84:59:5c: 5a:8d:d4:0b:02:c0:ff:7b:db:bd:1e:08:eb:99:1d: 32:6c:08:bf:6c:85:2a:d5:d8:97:09:37:78:58:18: be:9e:6f:9a:b9:14:66:21:db:a6:e9:05:5a:bd:6d: 5c:1c:b0:25:f9:86:5c:df:48:7d:47:a3:0f:26:07: 05:1c:36:4c:54:f0:42:fa:5e:95:b7:e1:93:94:2d: 28:20:28:e6:f6:af:c8:93:ac:da:fb:cc:57:dc:24: 41:43:68:ff:e7:19:28:55:f2:a2:32:db:bd:5d:70: f4:40:86:12:9f:93:a1:9d:12:89:8e:d5:2b:49:7f: af:d4:6a:63:88:b0:72:64:71:0d:9a:58:01:f4:66: ee:d1:55:a6:8f:c2:48:44:3a:c4:f0:0c:e9:73:a2: 6d:6d Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: E5:0A:30:88:E1:23:FB:66:38:02:27:C8:88:F1:82:14:E3:93:B3:20 X509v3 Authority Key Identifier: keyid:D3:60:0C:BA:FD:26:FE:E5:06:4F:C8:9F:30:1D:FC:8E:3C:1D:3C:A5 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/02AMuv0m_uUGT8ifMB38jjwdPKU.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/c0/b70658-e1dc-4944-a06b-1c680adf7a26/1/02AMuv0m_uUGT8ifMB38jjwdPKU.mft X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/c0/b70658-e1dc-4944-a06b-1c680adf7a26/1/02AMuv0m_uUGT8ifMB38jjwdPKU.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 79:0d:a5:15:fa:9d:56:e9:26:15:a4:37:9d:41:05:f5:41:39: 3e:1a:f6:49:4d:b0:7b:94:54:89:af:27:df:e8:9d:4c:80:4a: b8:61:78:b0:73:10:17:ee:65:ef:c7:c8:55:fd:33:ea:22:90: b1:30:9b:94:e6:3f:c0:15:e6:8c:96:77:3d:e9:30:00:75:f6: 62:1d:15:39:fc:c4:d5:9a:b9:cc:2a:bb:c3:c1:71:79:e7:22: 6e:17:2b:0f:3e:2c:2d:1f:bf:25:82:74:52:1d:93:1f:e6:23: 58:d1:6d:cd:74:87:52:b0:92:b0:dc:72:16:54:99:74:e3:7c: 5b:99:5a:16:a8:9b:6a:66:c3:e4:8a:7d:c2:fe:a4:fd:42:02: e5:57:16:7a:79:16:eb:c9:a0:5e:31:dd:d1:c6:4f:1e:f9:f6: 68:14:93:72:76:a3:36:5e:14:65:04:de:d6:4f:e8:e8:1c:f6: a2:b1:da:e7:c1:97:5d:e9:fd:de:a8:21:c2:9d:0c:3a:6f:60: 56:2a:67:10:1e:75:23:2f:da:7c:99:10:88:53:44:b5:5d:28: 38:ca:9a:59:14:8a:e5:21:81:1c:85:fc:73:c0:f1:29:9e:ca: 54:96:b7:1e:5d:87:a0:8e:97:cf:70:58:31:84:ed:20:fb:7a: bd:38:09:2e -----BEGIN CERTIFICATE----- MIIFFjCCA/6gAwIBAgISAZgoWeit3g3vXzAuntdhkz7+MA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKGQzNjAwY2JhZmQyNmZlZTUwNjRmYzg5ZjMwMWRmYzhlM2Mx ZDNjYTUwHhcNMjUwNzIwMTUwMDM3WhcNMjUwNzIxMTUwMDM3WjAzMTEwLwYDVQQD EyhlNTBhMzA4OGUxMjNmYjY2MzgwMjI3Yzg4OGYxODIxNGUzOTNiMzIwMIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEApI27eyNGPSbTValO3fnWMTScvsgx Bz2fbQMEPwIUi6SsBqjjyidguykIPV543Tys0Uwsoxc+ZkbIyrtswZwSpsFyuC8P Z5S9Sa1TE43pkTmDcDFKfvX/cjOh4bvCTB4q8jfNus2EWVxajdQLAsD/e9u9Hgjr mR0ybAi/bIUq1diXCTd4WBi+nm+auRRmIdum6QVavW1cHLAl+YZc30h9R6MPJgcF HDZMVPBC+l6Vt+GTlC0oICjm9q/Ik6za+8xX3CRBQ2j/5xkoVfKiMtu9XXD0QIYS n5OhnRKJjtUrSX+v1GpjiLByZHENmlgB9Gbu0VWmj8JIRDrE8Azpc6JtbQIDAQAB o4ICIjCCAh4wHQYDVR0OBBYEFOUKMIjhI/tmOAInyIjxghTjk7MgMB8GA1UdIwQY MBaAFNNgDLr9Jv7lBk/InzAd/I48HTylMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvMDJBTXV2MG1fdVVHVDhpZk1CMzhqandkUEtVLmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC9jMC9iNzA2NTgtZTFkYy00OTQ0LWEwNmIt MWM2ODBhZGY3YTI2LzEvMDJBTXV2MG1fdVVHVDhpZk1CMzhqandkUEtVLm1mdDCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC9jMC9iNzA2NTgtZTFkYy00OTQ0LWEwNmItMWM2ODBhZGY3YTI2 LzEvMDJBTXV2MG1fdVVHVDhpZk1CMzhqandkUEtVLmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAeQ2lFfqd VukmFaQ3nUEF9UE5Phr2SU2we5RUia8n3+idTIBKuGF4sHMQF+5l78fIVf0z6iKQ sTCblOY/wBXmjJZ3PekwAHX2Yh0VOfzE1Zq5zCq7w8FxeecibhcrDz4sLR+/JYJ0 Uh2TH+YjWNFtzXSHUrCSsNxyFlSZdON8W5laFqibambD5Ip9wv6k/UIC5VcWenkW 68mgXjHd0cZPHvn2aBSTcnajNl4UZQTe1k/o6Bz2orHa58GXXen93qghwp0MOm9g VipnEB51Iy/afJkQiFNEtV0oOMqaWRSK5SGBHIX8c8DxKZ7KVJa3Hl2HoI6Xz3BY MYTtIPt6vTgJLg== -----END CERTIFICATE-----Generated at Sun Jul 20 16:20:31 2025 by rpki-client