$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/c5/888869-7a65-415b-b68f-5484402ceb7a/1/sMIK4drMoxgVsnRwKSfBpanbx7M.mft File: sMIK4drMoxgVsnRwKSfBpanbx7M.mft (raw, json) Hash identifier: h8/6zAO64+QyhUdty9RLahk+UIMkV+AhCK9XdlPlshg= Subject key identifier: 2F:45:47:BE:AE:EA:A4:12:FC:E9:9B:A2:F3:A8:08:21:64:22:16:95 Authority key identifier: B0:C2:0A:E1:DA:CC:A3:18:15:B2:74:70:29:27:C1:A5:A9:DB:C7:B3 Certificate issuer: /CN=b0c20ae1dacca31815b274702927c1a5a9dbc7b3 Certificate serial: 01984BC1CF24CF780A072CBAA7444A3C7455 Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/sMIK4drMoxgVsnRwKSfBpanbx7M.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/c5/888869-7a65-415b-b68f-5484402ceb7a/1/sMIK4drMoxgVsnRwKSfBpanbx7M.mft Manifest number: 1615 Signing time: Sun 27 Jul 2025 12:00:49 +0000 Manifest this update: Sun 27 Jul 2025 12:00:49 +0000 Manifest next update: Mon 28 Jul 2025 12:00:49 +0000 Files and hashes: 1: BO-bzW2V5HfZnpDWCOZRREj0_aA.roa (hash: bBvM5GD33JW26g6UBHC38zwmrN/wxvFNIrA/ZVP1z3g=) 2: D2VP3boIbKOt_7fZmoGwBMd0j_E.roa (hash: 5B9i3Ekd388l3dq3yF+uoTeTOTbzf9g6nU3q4mHoYKI=) 3: KDntMwv7lfN57GwH3c-ooOZ7MV8.roa (hash: N8ZIBiU8gH7tSdeMv2oT8+5VHr8ZvOaPGXUGzn1qd6o=) 4: MKXE3l_kRrUK-SEa0SjlnZgrzOY.roa (hash: qB75ATBjq0bvGr3VuX9ZJkiNF1i/cky+GUiK1V7um9s=) 5: OMLGm3M8AukdVmECZgGAm5oBI6w.roa (hash: NhtCtzcMBYjPL2amj6HhHMrktNr+dPVzL27OzOSW9VY=) 6: QhEieVCa4VzXwRS2R-uT3VD69zA.roa (hash: g7EksG6Y5xUVpGTxJtSk1SiYEQY9x4uAiGIMcbCmQ/k=) 7: T_vGm-YR8rSAG_LKyG-LL0j3jZY.roa (hash: ctLCD3mPPm9ORV/MIVYXQC7GReMvIOdcov6IyRw8Un0=) 8: VT5Wd_pqOJ9dH5ke9coXfMElArk.roa (hash: fLcCO/2FWRaPE55k8VUjCjI94f4/oSwtLUtlY9+MVT8=) 9: ZwvgwSFitJnn0NI2TLMjAG1OYEI.roa (hash: 3EAQTTBdwC0en0ttbPcWmRtInqoUrBVPVbUH2J6E2Tg=) 10: i2Cr6PSWUcoNruWdbdR97Em0Dh4.roa (hash: kTy26coV3ftFQPHtpIaAlqr+Ns/2fmpdvjWPntGul4A=) 11: sMIK4drMoxgVsnRwKSfBpanbx7M.crl (hash: wNWbiRkUPnZEB2jgRXz5GSVp3hULojdQ2jq1Q4/qAzE=) Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/c5/888869-7a65-415b-b68f-5484402ceb7a/1/sMIK4drMoxgVsnRwKSfBpanbx7M.crl rsync://rpki.ripe.net/repository/DEFAULT/c5/888869-7a65-415b-b68f-5484402ceb7a/1/sMIK4drMoxgVsnRwKSfBpanbx7M.mft rsync://rpki.ripe.net/repository/DEFAULT/sMIK4drMoxgVsnRwKSfBpanbx7M.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Mon 28 Jul 2025 09:00:05 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:98:4b:c1:cf:24:cf:78:0a:07:2c:ba:a7:44:4a:3c:74:55 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=b0c20ae1dacca31815b274702927c1a5a9dbc7b3 Validity Not Before: Jul 27 12:00:49 2025 GMT Not After : Jul 28 12:00:49 2025 GMT Subject: CN=2f4547beaeeaa412fce99ba2f3a8082164221695 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:c9:0f:e6:9e:bb:55:dd:07:5f:cf:28:6d:fc:c7: 2d:c7:4b:1d:9b:f9:fe:b9:8b:d4:b3:f2:85:ae:c0: c5:80:76:ff:dd:a7:10:7e:4b:5a:ca:61:17:aa:cd: ba:1e:5b:3f:2a:eb:81:dd:10:4c:11:e4:1c:b5:d7: 5a:c4:5a:82:ca:cc:c9:94:7e:e9:d0:0d:fc:21:fe: fc:23:d4:f3:03:bc:c5:87:65:89:cf:1c:5f:a3:77: 74:6a:8e:7b:c2:a9:26:8b:36:da:b5:ea:04:39:20: 15:42:09:07:09:dc:f7:c5:22:9d:c6:30:7e:df:43: af:a4:62:0f:14:48:1d:f8:da:cc:91:df:02:1c:90: 2c:2e:7d:88:7a:8b:73:13:11:1c:6b:12:b1:da:1f: 37:bf:c8:e7:ba:43:94:be:bb:59:db:df:b9:79:89: 01:b8:91:05:8b:ee:6e:84:d2:09:17:1f:6a:3c:e0: ed:a8:43:f4:81:f0:0c:03:57:1a:b5:7c:ba:da:48: 6c:3b:d0:14:d5:a7:a2:20:50:50:13:ac:34:97:33: 12:da:b7:fa:76:ad:b0:96:5e:ce:9e:2a:3b:82:8c: b7:42:bc:03:a5:c1:ee:7e:60:2d:d1:ff:08:bc:ec: 8c:26:c0:6f:62:02:a9:ba:14:8a:d7:3e:00:25:67: 2d:95 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 2F:45:47:BE:AE:EA:A4:12:FC:E9:9B:A2:F3:A8:08:21:64:22:16:95 X509v3 Authority Key Identifier: keyid:B0:C2:0A:E1:DA:CC:A3:18:15:B2:74:70:29:27:C1:A5:A9:DB:C7:B3 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/sMIK4drMoxgVsnRwKSfBpanbx7M.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/c5/888869-7a65-415b-b68f-5484402ceb7a/1/sMIK4drMoxgVsnRwKSfBpanbx7M.mft X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/c5/888869-7a65-415b-b68f-5484402ceb7a/1/sMIK4drMoxgVsnRwKSfBpanbx7M.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 20:38:98:62:07:15:95:ac:0a:57:a8:67:07:60:5e:c7:c6:9c: d1:58:87:a3:0c:a2:b9:5b:5e:61:07:06:29:a3:c3:ad:c1:80: d8:64:57:4d:dc:d2:60:d7:1d:c3:95:0f:e0:f1:68:b2:62:c1: e1:2b:bb:7d:81:f0:7f:e9:8d:74:7d:48:35:91:ec:19:65:ed: 41:3c:b2:c7:5c:25:22:8a:6e:37:d3:a1:8c:22:37:e7:ed:26: ec:8b:be:67:d0:4f:2b:e6:59:da:41:44:75:6b:f3:de:26:d2: 44:ec:4b:0f:62:cb:1c:a4:3e:88:32:63:31:35:29:0a:3a:7d: 5f:bf:7e:26:17:50:18:9e:dc:7f:f1:e2:09:29:ae:4e:34:a1: 59:8c:3d:8a:f3:c4:f4:6b:ac:6a:69:bf:83:b0:11:52:e4:11: dd:37:51:a5:54:75:44:9a:45:f3:44:a4:9e:08:e8:cd:e1:c4: 91:d6:5d:fc:39:63:ef:68:10:09:9f:fb:82:53:6b:89:74:2e: ea:79:e8:8f:a1:b2:35:34:13:68:2e:b8:f1:7e:0c:9a:c1:30: 31:5f:72:46:17:0e:08:72:e5:0e:8f:64:67:de:16:8e:d1:df: 68:d7:3e:d5:b4:e1:1a:34:8e:cd:f7:79:31:fd:56:08:0d:c2: a4:e0:97:b5 -----BEGIN CERTIFICATE----- MIIFFjCCA/6gAwIBAgISAZhLwc8kz3gKByy6p0RKPHRVMA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKGIwYzIwYWUxZGFjY2EzMTgxNWIyNzQ3MDI5MjdjMWE1YTlk YmM3YjMwHhcNMjUwNzI3MTIwMDQ5WhcNMjUwNzI4MTIwMDQ5WjAzMTEwLwYDVQQD EygyZjQ1NDdiZWFlZWFhNDEyZmNlOTliYTJmM2E4MDgyMTY0MjIxNjk1MIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAyQ/mnrtV3Qdfzyht/Mctx0sdm/n+ uYvUs/KFrsDFgHb/3acQfktaymEXqs26Hls/KuuB3RBMEeQctddaxFqCyszJlH7p 0A38If78I9TzA7zFh2WJzxxfo3d0ao57wqkmizbateoEOSAVQgkHCdz3xSKdxjB+ 30OvpGIPFEgd+NrMkd8CHJAsLn2IeotzExEcaxKx2h83v8jnukOUvrtZ29+5eYkB uJEFi+5uhNIJFx9qPODtqEP0gfAMA1catXy62khsO9AU1aeiIFBQE6w0lzMS2rf6 dq2wll7Onio7goy3QrwDpcHufmAt0f8IvOyMJsBvYgKpuhSK1z4AJWctlQIDAQAB o4ICIjCCAh4wHQYDVR0OBBYEFC9FR76u6qQS/OmbovOoCCFkIhaVMB8GA1UdIwQY MBaAFLDCCuHazKMYFbJ0cCknwaWp28ezMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvc01JSzRkck1veGdWc25Sd0tTZkJwYW5ieDdNLmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC9jNS84ODg4NjktN2E2NS00MTViLWI2OGYt NTQ4NDQwMmNlYjdhLzEvc01JSzRkck1veGdWc25Sd0tTZkJwYW5ieDdNLm1mdDCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC9jNS84ODg4NjktN2E2NS00MTViLWI2OGYtNTQ4NDQwMmNlYjdh LzEvc01JSzRkck1veGdWc25Sd0tTZkJwYW5ieDdNLmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAIDiYYgcV lawKV6hnB2Bex8ac0ViHowyiuVteYQcGKaPDrcGA2GRXTdzSYNcdw5UP4PFosmLB 4Su7fYHwf+mNdH1INZHsGWXtQTyyx1wlIopuN9OhjCI35+0m7Iu+Z9BPK+ZZ2kFE dWvz3ibSROxLD2LLHKQ+iDJjMTUpCjp9X79+JhdQGJ7cf/HiCSmuTjShWYw9ivPE 9Gusamm/g7ARUuQR3TdRpVR1RJpF80SkngjozeHEkdZd/Dlj72gQCZ/7glNriXQu 6nnoj6GyNTQTaC648X4MmsEwMV9yRhcOCHLlDo9kZ94WjtHfaNc+1bThGjSOzfd5 Mf1WCA3CpOCXtQ== -----END CERTIFICATE-----Generated at Sun Jul 27 15:55:05 2025 by rpki-client