$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/c0/e45e30-e7d8-4fb8-90ad-f71038e967a4/1/tIUv-6fVfFqK-7bqW-r33-wMFFo.mft File: tIUv-6fVfFqK-7bqW-r33-wMFFo.mft (raw, json) Hash identifier: WroxfOm5CE/Jy4Ywn9sYU+WYjBx/fCbmHglMes2R+jk= Subject key identifier: D9:27:7E:39:5E:31:F2:32:F0:13:51:60:C4:2C:6C:8F:AA:9B:4B:36 Authority key identifier: B4:85:2F:FB:A7:D5:7C:5A:8A:FB:B6:EA:5B:EA:F7:DF:EC:0C:14:5A Certificate issuer: /CN=b4852ffba7d57c5a8afbb6ea5beaf7dfec0c145a Certificate serial: 01983E3CE02C2D1ABF062611342301F87261 Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/tIUv-6fVfFqK-7bqW-r33-wMFFo.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/c0/e45e30-e7d8-4fb8-90ad-f71038e967a4/1/tIUv-6fVfFqK-7bqW-r33-wMFFo.mft Manifest number: 1610 Signing time: Thu 24 Jul 2025 21:00:33 +0000 Manifest this update: Thu 24 Jul 2025 21:00:33 +0000 Manifest next update: Fri 25 Jul 2025 21:00:33 +0000 Files and hashes: 1: 2zBG6wv0zKBe2XlbGkfLL9rOdtY.roa (hash: lxNpEB+wfb/SASGgTTjYX3zTxUdrCP8FyxAXU//G0JE=) 2: 60ZaPiBpi8SxBTjOjQUT9FiEU2Q.roa (hash: +EenJI8/Zu0itO/r18F94M+NWWU8CW03dUIDwunEbUc=) 3: EU2O-Gd0BV713EAdFoGJuGMnLgQ.roa (hash: DIGhFlsty46rXCRlbLUopCZPIy0Ap7bO0kln0jsUUZQ=) 4: O3sXFCWDkxRLQArJVgciZYJOH2k.roa (hash: wEiLpu8rEygqvBvHCRoBqicZ9xgf2J+eV7J8nj+KxjA=) 5: ZjHl0XpQM8CCJz6Om67G0wOmvS4.roa (hash: xCetPcOL8RFsZEGexQBgMW05eQfuM1TVnSNp6oyXZtQ=) 6: d8mFLNhZassFfsIT0V6Pg-FoNgA.roa (hash: G1lxk+WJgE19vtZBUhgAhwauP4CikNyKzPmcQ0hwXlc=) 7: dEvm44MVXindQlOEmPEQUDFIhOs.roa (hash: dVgBBC/Rmim2eB3c1PNCO34aKUguzhPQDH4vqUewLA0=) 8: l1wLvb6NKoGEYg4t8n0m6fJ0nkM.roa (hash: ql0IO639qJqy1cMjdHcoEEjUejhdun3XvEvt+WT91vI=) 9: nf_J-Be6PvK26ukKjJl6IQe1MJY.roa (hash: 0NfHfYZttT9eDOJu1RyDhX+/FDw371Nzr/BlGE9d+BA=) 10: tIUv-6fVfFqK-7bqW-r33-wMFFo.crl (hash: 25HYEJbP18oSPB4qc0t9v/9Tt2t0/t2+9v7eog5lf/g=) 11: w7JADU6oCGh6YbUdtkn1AWlz8C8.roa (hash: BeTxZ9eibtqN9brjaSZeCdnih1w74ddiTrBxnDrR2hk=) Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/c0/e45e30-e7d8-4fb8-90ad-f71038e967a4/1/tIUv-6fVfFqK-7bqW-r33-wMFFo.crl rsync://rpki.ripe.net/repository/DEFAULT/c0/e45e30-e7d8-4fb8-90ad-f71038e967a4/1/tIUv-6fVfFqK-7bqW-r33-wMFFo.mft rsync://rpki.ripe.net/repository/DEFAULT/tIUv-6fVfFqK-7bqW-r33-wMFFo.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Fri 25 Jul 2025 21:00:33 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:98:3e:3c:e0:2c:2d:1a:bf:06:26:11:34:23:01:f8:72:61 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=b4852ffba7d57c5a8afbb6ea5beaf7dfec0c145a Validity Not Before: Jul 24 21:00:33 2025 GMT Not After : Jul 25 21:00:33 2025 GMT Subject: CN=d9277e395e31f232f0135160c42c6c8faa9b4b36 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:a2:c8:c9:75:1d:d0:a6:10:e8:6d:7c:a1:1a:74: 47:10:60:35:03:75:ec:cf:8f:1e:c9:11:f2:f4:71: c6:b9:8d:91:fc:f4:f2:8a:15:f9:23:a2:29:41:65: 4c:97:12:d7:71:7e:f5:5a:16:ae:2d:a5:bd:54:02: 6f:45:72:d1:7b:24:b8:a5:70:ab:c1:94:85:e3:a1: 60:12:54:51:3b:52:71:bc:b3:91:44:80:92:09:10: 52:96:4d:cd:a7:a5:d1:cf:95:cb:6a:7f:69:10:13: a8:e9:4a:02:2f:6e:8d:2f:2e:34:bd:87:ad:37:34: 2c:6d:86:b9:9c:90:25:23:ca:f4:93:bb:da:6a:0b: 27:0b:c1:38:6e:5f:31:17:33:e5:e6:a4:33:ac:69: 3f:b6:52:2a:bc:e6:d4:77:d3:19:63:34:5f:de:e2: d3:94:ce:f7:6a:e4:f0:fa:1e:e4:3a:a3:e6:70:cb: 5f:7a:2c:a5:aa:3a:40:0c:ce:b7:10:4a:d7:c4:f2: c3:7c:c6:49:38:a0:63:37:ee:ce:9d:ef:1e:7f:32: 42:ed:b7:97:8f:9c:76:56:12:cb:ac:8b:1c:2b:1a: e6:c7:fd:a7:f8:eb:3c:32:7e:cd:82:cc:f8:89:b8: aa:02:4d:b6:e6:7b:23:63:fd:06:be:70:3f:5d:23: ba:8f Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: D9:27:7E:39:5E:31:F2:32:F0:13:51:60:C4:2C:6C:8F:AA:9B:4B:36 X509v3 Authority Key Identifier: keyid:B4:85:2F:FB:A7:D5:7C:5A:8A:FB:B6:EA:5B:EA:F7:DF:EC:0C:14:5A X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/tIUv-6fVfFqK-7bqW-r33-wMFFo.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/c0/e45e30-e7d8-4fb8-90ad-f71038e967a4/1/tIUv-6fVfFqK-7bqW-r33-wMFFo.mft X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/c0/e45e30-e7d8-4fb8-90ad-f71038e967a4/1/tIUv-6fVfFqK-7bqW-r33-wMFFo.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption a6:31:3d:d3:5a:7c:c3:b6:68:00:38:5b:cb:6d:ab:76:20:08: 7c:e0:c0:bd:cc:c3:a0:fe:ff:b4:88:7d:19:ac:31:d9:52:4f: b1:00:27:82:8f:b9:d2:91:93:35:44:01:e0:b6:30:1e:1c:00: 18:a5:6e:14:a4:ad:da:6c:34:73:83:17:c1:a9:34:dc:e8:e0: 40:f4:e0:0e:79:cd:e3:93:29:b7:eb:ea:7c:d3:b6:a7:f5:31: 85:a3:02:2d:cd:8c:b7:1c:e8:19:fe:fa:de:04:d1:82:e7:58: 76:d3:05:58:a1:a8:d8:56:ab:6c:61:57:06:95:e3:1c:ac:1b: cb:a6:4e:94:07:dd:00:93:ea:2c:f6:56:72:fe:2d:57:a6:41: 26:a3:a1:06:f5:ef:35:e6:5b:53:0f:25:8c:92:2e:b8:3e:1b: 75:07:8f:81:36:fb:05:77:dd:88:a2:27:c6:84:ff:db:23:60: 2f:eb:52:5a:13:31:ea:60:47:4e:07:b1:24:1d:60:60:87:61: 55:bf:90:5a:cf:d3:7e:66:09:58:98:e8:07:77:bc:e5:71:ce: 85:61:aa:d6:f7:6e:4a:a2:ff:65:89:42:95:5a:2f:7a:2b:75: 8e:12:5e:05:43:00:eb:3d:3f:21:8e:48:b3:92:63:67:d8:2a: 5d:b6:96:91 -----BEGIN CERTIFICATE----- MIIFFjCCA/6gAwIBAgISAZg+POAsLRq/BiYRNCMB+HJhMA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKGI0ODUyZmZiYTdkNTdjNWE4YWZiYjZlYTViZWFmN2RmZWMw YzE0NWEwHhcNMjUwNzI0MjEwMDMzWhcNMjUwNzI1MjEwMDMzWjAzMTEwLwYDVQQD EyhkOTI3N2UzOTVlMzFmMjMyZjAxMzUxNjBjNDJjNmM4ZmFhOWI0YjM2MIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAosjJdR3QphDobXyhGnRHEGA1A3Xs z48eyRHy9HHGuY2R/PTyihX5I6IpQWVMlxLXcX71WhauLaW9VAJvRXLReyS4pXCr wZSF46FgElRRO1JxvLORRICSCRBSlk3Np6XRz5XLan9pEBOo6UoCL26NLy40vYet NzQsbYa5nJAlI8r0k7vaagsnC8E4bl8xFzPl5qQzrGk/tlIqvObUd9MZYzRf3uLT lM73auTw+h7kOqPmcMtfeiylqjpADM63EErXxPLDfMZJOKBjN+7One8efzJC7beX j5x2VhLLrIscKxrmx/2n+Os8Mn7Ngsz4ibiqAk225nsjY/0GvnA/XSO6jwIDAQAB o4ICIjCCAh4wHQYDVR0OBBYEFNknfjleMfIy8BNRYMQsbI+qm0s2MB8GA1UdIwQY MBaAFLSFL/un1Xxaivu26lvq99/sDBRaMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvdElVdi02ZlZmRnFLLTdicVctcjMzLXdNRkZvLmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC9jMC9lNDVlMzAtZTdkOC00ZmI4LTkwYWQt ZjcxMDM4ZTk2N2E0LzEvdElVdi02ZlZmRnFLLTdicVctcjMzLXdNRkZvLm1mdDCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC9jMC9lNDVlMzAtZTdkOC00ZmI4LTkwYWQtZjcxMDM4ZTk2N2E0 LzEvdElVdi02ZlZmRnFLLTdicVctcjMzLXdNRkZvLmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEApjE901p8 w7ZoADhby22rdiAIfODAvczDoP7/tIh9Gawx2VJPsQAngo+50pGTNUQB4LYwHhwA GKVuFKSt2mw0c4MXwak03OjgQPTgDnnN45Mpt+vqfNO2p/UxhaMCLc2MtxzoGf76 3gTRgudYdtMFWKGo2FarbGFXBpXjHKwby6ZOlAfdAJPqLPZWcv4tV6ZBJqOhBvXv NeZbUw8ljJIuuD4bdQePgTb7BXfdiKInxoT/2yNgL+tSWhMx6mBHTgexJB1gYIdh Vb+QWs/TfmYJWJjoB3e85XHOhWGq1vduSqL/ZYlClVoveit1jhJeBUMA6z0/IY5I s5JjZ9gqXbaWkQ== -----END CERTIFICATE-----Generated at Fri Jul 25 00:55:11 2025 by rpki-client