$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/c1/ae9211-c52d-480d-a591-d75869c0c71e/1/pnhXc98xO5FxG_a8WxSezCRrnok.mft File: pnhXc98xO5FxG_a8WxSezCRrnok.mft (raw, json) Hash identifier: ENfckn+c4XhIkKeYjq7qym7b6R+ORhyl0tK24b8d67Y= Subject key identifier: DE:49:AC:54:33:C0:FE:6D:6C:60:C6:2D:FB:A5:D7:26:05:F4:A2:D6 Authority key identifier: A6:78:57:73:DF:31:3B:91:71:1B:F6:BC:5B:14:9E:CC:24:6B:9E:89 Certificate issuer: /CN=a6785773df313b91711bf6bc5b149ecc246b9e89 Certificate serial: 01984965961E39E8725DFCD6C0DDC45DA509 Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/pnhXc98xO5FxG_a8WxSezCRrnok.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/c1/ae9211-c52d-480d-a591-d75869c0c71e/1/pnhXc98xO5FxG_a8WxSezCRrnok.mft Manifest number: 13CA Signing time: Sun 27 Jul 2025 01:00:50 +0000 Manifest this update: Sun 27 Jul 2025 01:00:50 +0000 Manifest next update: Mon 28 Jul 2025 01:00:50 +0000 Files and hashes: 1: 4_O_iIpyAI9RehObq-pOpadb0Oc.roa (hash: yk0faU3G873g+gLSQoGVoe7NYYyCWEaHzHI6ZIk9UdY=) 2: 7loUqY3SMQ476AvW8cBj_oE5D0w.roa (hash: 9ZWiK7Ya0oQoJXKuXssFNZZZ1jcO9WaxjH/2eSSyYlw=) 3: 9qXJnie35SdfH2J2EgodKBngTzA.roa (hash: jwDaD5ZgcucjZdcdoISWLpA3Zdrcncz7G1jWAlDHN4k=) 4: _K6pKy4r_yxn6KKjdedN6hKQIRc.roa (hash: Fa8PiwPRQ/Nbg/tMa4sLtAZckTKFYG8hQ2oLAm3z+YE=) 5: eeGo9wragRSvkLaXijzUVv6g1UQ.roa (hash: f0fCuBwmYqh4E9JpX2SXK0IGaTdlCqkrpCwPLzLM7U8=) 6: f_BAmJDU6YD_W-jGGFTEv2Fs7Ak.roa (hash: PaLYZLAv0TrU+Bsc9bxTmK6PnOfA5lCBIqcJSl9Ay7o=) 7: h0Rq-64YdH2Rhgx8VqQPxecaOJk.roa (hash: +OMPPDfPiGbQBs5xm10WtKzO2XvkhzUC6VL8TFg0R8M=) 8: p7CrYRPqjfqg5-SpOOWgZYcH7pg.roa (hash: VxeYJO6+oO8JTtkcjhdpm2dOlDG12rU/cm/baKhjYqs=) 9: pnhXc98xO5FxG_a8WxSezCRrnok.crl (hash: g2MjgPPyg+flIrYL9vBRkGcPq5mWm3rTD+TVp2Q7Jvw=) 10: vm5i6AVzmYzAz9qPwbnD4VrLfVA.roa (hash: VDQ8oeDiLzJU7KaKEM2DHEI37PMjg/GP0JQI1knZDEc=) 11: yj9vr2VnE10QnxtDsz-n2QVr0i4.roa (hash: oY4OEejijqth0Kn/mWSI257F9MR4bW3yyLCjseFCr/g=) Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/c1/ae9211-c52d-480d-a591-d75869c0c71e/1/pnhXc98xO5FxG_a8WxSezCRrnok.crl rsync://rpki.ripe.net/repository/DEFAULT/c1/ae9211-c52d-480d-a591-d75869c0c71e/1/pnhXc98xO5FxG_a8WxSezCRrnok.mft rsync://rpki.ripe.net/repository/DEFAULT/pnhXc98xO5FxG_a8WxSezCRrnok.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Mon 28 Jul 2025 00:00:05 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:98:49:65:96:1e:39:e8:72:5d:fc:d6:c0:dd:c4:5d:a5:09 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=a6785773df313b91711bf6bc5b149ecc246b9e89 Validity Not Before: Jul 27 01:00:50 2025 GMT Not After : Jul 28 01:00:50 2025 GMT Subject: CN=de49ac5433c0fe6d6c60c62dfba5d72605f4a2d6 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:9d:63:75:2c:7c:c5:be:82:ab:e9:29:9d:0c:c7: d4:e8:08:a5:3e:9f:56:28:2f:70:4a:fb:6e:1e:01: cd:3c:16:41:17:65:0d:f6:f9:b0:cf:11:8c:b5:1e: b0:31:a7:52:d4:41:58:e9:aa:a0:af:fc:d4:9d:0f: 93:79:ec:22:5e:0a:ab:2c:3b:c8:c6:c5:68:14:07: 95:77:7e:df:13:c2:0f:7c:7d:94:31:c0:39:c4:be: 8e:af:d9:d5:90:8a:40:09:54:01:73:cf:a6:8c:62: f1:9b:8a:39:a4:d7:f2:f6:96:4b:41:9c:48:ea:b9: 28:18:33:96:4e:62:c9:ab:ef:dd:67:d0:63:f7:ad: 2b:b4:d7:43:88:6c:f3:fc:11:37:8d:45:18:23:69: d7:6e:a1:fe:bd:4b:ea:ab:42:45:29:24:c9:bb:ed: 31:13:06:04:8f:7f:aa:bd:f2:71:d5:8f:f6:e6:b0: 01:25:bb:a9:79:db:c6:10:16:e5:5d:7b:b2:e4:78: 81:ad:7c:0f:8d:07:69:55:4d:39:5c:f9:1c:cc:09: af:69:c7:d1:77:56:01:ca:f5:de:6d:d4:6a:ea:ce: d2:9a:b8:b5:9e:5d:94:b9:e5:16:09:05:81:79:78: 84:3f:e3:75:8b:3f:32:2f:f1:bd:b5:97:11:77:8c: 43:43 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: DE:49:AC:54:33:C0:FE:6D:6C:60:C6:2D:FB:A5:D7:26:05:F4:A2:D6 X509v3 Authority Key Identifier: keyid:A6:78:57:73:DF:31:3B:91:71:1B:F6:BC:5B:14:9E:CC:24:6B:9E:89 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/pnhXc98xO5FxG_a8WxSezCRrnok.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/c1/ae9211-c52d-480d-a591-d75869c0c71e/1/pnhXc98xO5FxG_a8WxSezCRrnok.mft X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/c1/ae9211-c52d-480d-a591-d75869c0c71e/1/pnhXc98xO5FxG_a8WxSezCRrnok.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption bc:06:79:86:40:af:dd:71:b6:31:ac:48:1a:40:0f:74:df:e7: 70:c7:dd:ca:78:19:ed:b1:b1:a8:91:a2:ee:48:c4:4d:28:92: 78:45:c9:89:83:1d:7c:bc:81:1b:46:f3:95:98:10:7f:c7:f0: 40:36:ba:8d:28:90:4f:4c:64:79:af:84:7d:b2:04:f7:df:2b: 72:c8:fa:d4:5b:38:6d:1b:11:f2:9b:53:d1:37:12:43:26:7f: 0d:1f:76:ed:6b:8b:57:9f:21:a8:75:80:aa:93:6b:96:49:ca: 08:3e:48:9d:48:d3:f9:68:77:7b:c4:4d:b9:47:e1:fe:28:74: 8a:ff:55:02:b1:6d:58:7e:de:e8:b2:a8:63:f4:ac:f4:19:0f: 59:85:3f:0c:32:b3:cb:c4:37:31:63:07:8d:80:40:38:dc:f1: 59:e2:60:5d:3d:d5:b9:55:24:53:a8:e5:93:81:14:83:29:43: 35:29:c2:c3:9e:0f:bc:1b:76:6e:54:d9:ac:82:83:e2:ac:f1: 57:b9:a3:45:5f:d6:27:9a:76:74:eb:7b:7b:ca:3a:f5:70:31: 5c:82:c1:d4:58:81:a1:09:f7:5f:fe:74:6f:54:7e:c7:1b:fe: ad:77:04:d7:06:47:3c:5c:01:77:31:cf:52:e9:ad:ec:b6:79: 7e:65:70:8f -----BEGIN CERTIFICATE----- MIIFFjCCA/6gAwIBAgISAZhJZZYeOehyXfzWwN3EXaUJMA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKGE2Nzg1NzczZGYzMTNiOTE3MTFiZjZiYzViMTQ5ZWNjMjQ2 YjllODkwHhcNMjUwNzI3MDEwMDUwWhcNMjUwNzI4MDEwMDUwWjAzMTEwLwYDVQQD EyhkZTQ5YWM1NDMzYzBmZTZkNmM2MGM2MmRmYmE1ZDcyNjA1ZjRhMmQ2MIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAnWN1LHzFvoKr6SmdDMfU6AilPp9W KC9wSvtuHgHNPBZBF2UN9vmwzxGMtR6wMadS1EFY6aqgr/zUnQ+TeewiXgqrLDvI xsVoFAeVd37fE8IPfH2UMcA5xL6Or9nVkIpACVQBc8+mjGLxm4o5pNfy9pZLQZxI 6rkoGDOWTmLJq+/dZ9Bj960rtNdDiGzz/BE3jUUYI2nXbqH+vUvqq0JFKSTJu+0x EwYEj3+qvfJx1Y/25rABJbupedvGEBblXXuy5HiBrXwPjQdpVU05XPkczAmvacfR d1YByvXebdRq6s7Smri1nl2UueUWCQWBeXiEP+N1iz8yL/G9tZcRd4xDQwIDAQAB o4ICIjCCAh4wHQYDVR0OBBYEFN5JrFQzwP5tbGDGLful1yYF9KLWMB8GA1UdIwQY MBaAFKZ4V3PfMTuRcRv2vFsUnswka56JMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvcG5oWGM5OHhPNUZ4R19hOFd4U2V6Q1Jybm9rLmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC9jMS9hZTkyMTEtYzUyZC00ODBkLWE1OTEt ZDc1ODY5YzBjNzFlLzEvcG5oWGM5OHhPNUZ4R19hOFd4U2V6Q1Jybm9rLm1mdDCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC9jMS9hZTkyMTEtYzUyZC00ODBkLWE1OTEtZDc1ODY5YzBjNzFl LzEvcG5oWGM5OHhPNUZ4R19hOFd4U2V6Q1Jybm9rLmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAvAZ5hkCv 3XG2MaxIGkAPdN/ncMfdyngZ7bGxqJGi7kjETSiSeEXJiYMdfLyBG0bzlZgQf8fw QDa6jSiQT0xkea+EfbIE998rcsj61Fs4bRsR8ptT0TcSQyZ/DR927WuLV58hqHWA qpNrlknKCD5InUjT+Wh3e8RNuUfh/ih0iv9VArFtWH7e6LKoY/Ss9BkPWYU/DDKz y8Q3MWMHjYBAONzxWeJgXT3VuVUkU6jlk4EUgylDNSnCw54PvBt2blTZrIKD4qzx V7mjRV/WJ5p2dOt7e8o69XAxXILB1FiBoQn3X/50b1R+xxv+rXcE1wZHPFwBdzHP Uumt7LZ5fmVwjw== -----END CERTIFICATE-----Generated at Sun Jul 27 08:32:25 2025 by rpki-client