$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/c4/11e5b3-43aa-4279-9441-7e8c6d4d9bef/1/_97EpGpubk-aktC6Lgs6tWWL4b0.mft File: _97EpGpubk-aktC6Lgs6tWWL4b0.mft (raw, json) Hash identifier: +6YOnFHpOzy4/YCRXrk4rmFkE+KDw46Q0lvYMunMIdo= Subject key identifier: 6F:52:F4:7D:CA:51:DC:12:B8:7D:02:05:25:AB:86:4A:D4:E6:9A:B7 Authority key identifier: FF:DE:C4:A4:6A:6E:6E:4F:9A:92:D0:BA:2E:0B:3A:B5:65:8B:E1:BD Certificate issuer: /CN=ffdec4a46a6e6e4f9a92d0ba2e0b3ab5658be1bd Certificate serial: 01983795AB8FAA4E72CD391CFC64B02FCEE9 Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/_97EpGpubk-aktC6Lgs6tWWL4b0.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/c4/11e5b3-43aa-4279-9441-7e8c6d4d9bef/1/_97EpGpubk-aktC6Lgs6tWWL4b0.mft Manifest number: 1611 Signing time: Wed 23 Jul 2025 14:00:12 +0000 Manifest this update: Wed 23 Jul 2025 14:00:12 +0000 Manifest next update: Thu 24 Jul 2025 14:00:12 +0000 Files and hashes: 1: 1P2Zej4pxQtuIhEVIdzvWNHoMjM.roa (hash: 1V31P+tFYcgF/AzLiAsVDYFl2+asLT680sp7HqmRmh0=) 2: 9LGSNE38RZCTyouOtHVx3qVP6lw.roa (hash: ugV2YTVWDidN8y0vBVq2PfGkhQx7PuXVEwNoZCBbGX8=) 3: OsAkT1Bjc6Bx57ink5LVscASSVM.roa (hash: Me3jYRS4jKNnlOdyWwLlCaXNsCc57NzdmZ5lT79t3Rw=) 4: RmwlFKm2A6wCOU2tiPLTSzuhAA8.roa (hash: NB+w6tJSmFPHFd2FMxkqFpCOapIk+qQqzfmt3QzOsMk=) 5: UobB1JoTOzUGFpCCZFbxasjgqAA.roa (hash: ms0cbPIRl6WuE78I/a1I+geJkM+CYYhZiVIqQ6+fwVY=) 6: VuROyrWs92eKXOizp2Q-0fnpLR0.roa (hash: fMjWZ/dM7054cYWsnjZNa6zVf7FPSoCGvOyM76Sl6Mc=) 7: VxRGHdP__z9RHajqH60awAUqQgg.roa (hash: tIdE9ZmAuCmbV7t2it8DIWQnm6yvOgpE7cprrHK2On0=) 8: _97EpGpubk-aktC6Lgs6tWWL4b0.crl (hash: HiCfW1P7HsJj3/HVoeiniGvXegYZROT2wja78BZa/nY=) 9: iP8ql6ZvDkSsBTs1J-PrJpdHpKo.roa (hash: tXTXKqH5Aew+pK21GPBswq4NS3nwUUaBaQxJqd2WYgg=) 10: pJnO9Ba6alCVKMIllyGL5_n-nHo.roa (hash: cF7/LpWh8txlnJKiWf+FQfbAzOZvclLDIIzD8uyNUD0=) 11: vWqmka3oaZQE1cXhvhKJIPN3ikY.roa (hash: wwmYNtR3Cqpxb6sHd4D0z140EddAwpyxzJ7dHxOqth4=) 12: zwTIjW4kVksFhIqqz0Hm86Td_eI.roa (hash: 4Gmw/YEt79d2ifSjcQjjCNUl4cViPsDbJFWDQ996oV4=) Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/c4/11e5b3-43aa-4279-9441-7e8c6d4d9bef/1/_97EpGpubk-aktC6Lgs6tWWL4b0.crl rsync://rpki.ripe.net/repository/DEFAULT/c4/11e5b3-43aa-4279-9441-7e8c6d4d9bef/1/_97EpGpubk-aktC6Lgs6tWWL4b0.mft rsync://rpki.ripe.net/repository/DEFAULT/_97EpGpubk-aktC6Lgs6tWWL4b0.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Thu 24 Jul 2025 14:00:12 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:98:37:95:ab:8f:aa:4e:72:cd:39:1c:fc:64:b0:2f:ce:e9 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=ffdec4a46a6e6e4f9a92d0ba2e0b3ab5658be1bd Validity Not Before: Jul 23 14:00:12 2025 GMT Not After : Jul 24 14:00:12 2025 GMT Subject: CN=6f52f47dca51dc12b87d020525ab864ad4e69ab7 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:c5:ea:12:2f:2b:d1:d2:0f:f2:4d:5a:20:d1:c8: e3:29:40:c1:09:2b:61:d6:dd:6b:57:df:00:e8:f5: 5c:8a:ef:c6:6b:31:44:1b:68:48:16:96:2e:a6:ff: d7:3b:70:b2:4f:20:40:0b:be:f0:2a:55:e1:66:ea: ff:d1:34:61:40:76:74:55:af:ac:84:8e:90:53:05: 9e:0e:21:6e:62:59:a3:60:ce:98:1a:11:5f:3d:00: 9c:4c:9f:bd:66:ad:9d:32:1d:d6:b7:b2:8c:25:1d: 3b:7d:21:f9:6a:d8:a7:18:6c:95:3f:d4:ef:db:3d: a7:83:f0:38:0a:46:de:66:f7:a6:a2:64:3d:7d:76: d0:47:b9:f4:7e:f0:f5:f7:f5:c6:00:76:a5:77:ed: c3:0f:4e:b8:25:1f:87:aa:dd:5b:00:22:64:29:0d: 5e:db:87:53:08:2f:ed:ed:35:90:40:f1:c2:80:10: af:31:bf:75:b6:2c:c3:47:2d:a8:2a:b5:2d:a8:f0: 9d:7f:80:52:da:31:7d:fa:6b:64:35:5b:b2:c9:a1: f8:83:4e:ad:4d:42:6d:4b:3f:54:cb:6f:32:ab:b1: 5b:48:83:33:e2:1f:2d:fd:54:f0:c5:7b:05:f2:02: c2:93:aa:59:17:0e:81:96:ae:62:80:6a:f0:fd:cc: 04:4f Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 6F:52:F4:7D:CA:51:DC:12:B8:7D:02:05:25:AB:86:4A:D4:E6:9A:B7 X509v3 Authority Key Identifier: keyid:FF:DE:C4:A4:6A:6E:6E:4F:9A:92:D0:BA:2E:0B:3A:B5:65:8B:E1:BD X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/_97EpGpubk-aktC6Lgs6tWWL4b0.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/c4/11e5b3-43aa-4279-9441-7e8c6d4d9bef/1/_97EpGpubk-aktC6Lgs6tWWL4b0.mft X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/c4/11e5b3-43aa-4279-9441-7e8c6d4d9bef/1/_97EpGpubk-aktC6Lgs6tWWL4b0.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 9e:43:dd:d3:7d:29:b9:86:cf:50:1d:00:f5:ff:24:33:95:e3: f9:a8:7c:5d:25:bd:bd:03:2a:b6:0e:57:d5:45:4f:46:0c:3f: db:92:00:88:59:09:e0:15:81:78:ab:da:c8:c5:22:4e:0c:d5: 25:58:19:ad:91:9d:94:9a:93:fb:e7:8d:bf:80:64:a0:32:35: 34:17:18:22:56:d7:12:94:79:63:5b:2c:56:46:b3:3f:d3:5f: ff:9a:ac:90:1d:bb:4f:f7:eb:36:4b:9b:b9:21:56:1b:42:e2: 5a:a5:fc:08:0b:3e:fb:3e:9f:57:53:70:b4:7a:26:df:93:6f: e4:84:23:d3:0b:40:a1:c4:a4:de:89:ae:8f:63:2a:87:c0:3d: cc:05:96:c6:82:8a:67:c4:00:31:5d:c8:49:cd:5a:bc:9e:80: df:4f:09:75:6f:00:06:05:cb:2f:66:2e:8b:4c:98:a2:62:df: b5:53:4c:9b:57:b6:8b:b7:e1:17:00:bd:3d:00:52:8d:c3:b3: a9:0c:52:be:2c:87:db:c5:07:0f:48:7c:6d:07:02:c5:1e:c6: 36:bb:e3:8a:88:ee:82:5e:6c:2c:6f:4f:20:ee:82:ec:28:f0: 65:a8:cf:43:ba:3b:43:54:5f:80:03:b0:33:96:6b:54:75:11: 17:3a:10:80 -----BEGIN CERTIFICATE----- MIIFFjCCA/6gAwIBAgISAZg3lauPqk5yzTkc/GSwL87pMA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKGZmZGVjNGE0NmE2ZTZlNGY5YTkyZDBiYTJlMGIzYWI1NjU4 YmUxYmQwHhcNMjUwNzIzMTQwMDEyWhcNMjUwNzI0MTQwMDEyWjAzMTEwLwYDVQQD Eyg2ZjUyZjQ3ZGNhNTFkYzEyYjg3ZDAyMDUyNWFiODY0YWQ0ZTY5YWI3MIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAxeoSLyvR0g/yTVog0cjjKUDBCSth 1t1rV98A6PVciu/GazFEG2hIFpYupv/XO3CyTyBAC77wKlXhZur/0TRhQHZ0Va+s hI6QUwWeDiFuYlmjYM6YGhFfPQCcTJ+9Zq2dMh3Wt7KMJR07fSH5atinGGyVP9Tv 2z2ng/A4CkbeZvemomQ9fXbQR7n0fvD19/XGAHald+3DD064JR+Hqt1bACJkKQ1e 24dTCC/t7TWQQPHCgBCvMb91tizDRy2oKrUtqPCdf4BS2jF9+mtkNVuyyaH4g06t TUJtSz9Uy28yq7FbSIMz4h8t/VTwxXsF8gLCk6pZFw6Blq5igGrw/cwETwIDAQAB o4ICIjCCAh4wHQYDVR0OBBYEFG9S9H3KUdwSuH0CBSWrhkrU5pq3MB8GA1UdIwQY MBaAFP/exKRqbm5PmpLQui4LOrVli+G9MA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvXzk3RXBHcHViay1ha3RDNkxnczZ0V1dMNGIwLmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC9jNC8xMWU1YjMtNDNhYS00Mjc5LTk0NDEt N2U4YzZkNGQ5YmVmLzEvXzk3RXBHcHViay1ha3RDNkxnczZ0V1dMNGIwLm1mdDCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC9jNC8xMWU1YjMtNDNhYS00Mjc5LTk0NDEtN2U4YzZkNGQ5YmVm LzEvXzk3RXBHcHViay1ha3RDNkxnczZ0V1dMNGIwLmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAnkPd030p uYbPUB0A9f8kM5Xj+ah8XSW9vQMqtg5X1UVPRgw/25IAiFkJ4BWBeKvayMUiTgzV JVgZrZGdlJqT++eNv4BkoDI1NBcYIlbXEpR5Y1ssVkazP9Nf/5qskB27T/frNkub uSFWG0LiWqX8CAs++z6fV1NwtHom35Nv5IQj0wtAocSk3omuj2Mqh8A9zAWWxoKK Z8QAMV3ISc1avJ6A308JdW8ABgXLL2Yui0yYomLftVNMm1e2i7fhFwC9PQBSjcOz qQxSviyH28UHD0h8bQcCxR7GNrvjiojugl5sLG9PIO6C7CjwZajPQ7o7Q1RfgAOw M5ZrVHURFzoQgA== -----END CERTIFICATE-----Generated at Wed Jul 23 22:45:46 2025 by rpki-client