$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/c5/9ab42a-df92-4e42-9e33-5c5892afa487/1/8E6yBPNYAEeIIk4vsY5NXnS-v40.mft File: 8E6yBPNYAEeIIk4vsY5NXnS-v40.mft (raw, json) Hash identifier: SRWFQE9GX2zk4sctLECPtH54amdj7jYNaLFCc0Z/bSY= Subject key identifier: 7F:24:F0:48:37:5F:B9:E5:D5:8E:E4:92:88:0A:68:CF:82:FC:C6:C5 Authority key identifier: F0:4E:B2:04:F3:58:00:47:88:22:4E:2F:B1:8E:4D:5E:74:BE:BF:8D Certificate issuer: /CN=f04eb204f358004788224e2fb18e4d5e74bebf8d Certificate serial: 0198364CA37FF83D5D459CAA944177215149 Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/8E6yBPNYAEeIIk4vsY5NXnS-v40.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/c5/9ab42a-df92-4e42-9e33-5c5892afa487/1/8E6yBPNYAEeIIk4vsY5NXnS-v40.mft Manifest number: 101A Signing time: Wed 23 Jul 2025 08:00:48 +0000 Manifest this update: Wed 23 Jul 2025 08:00:48 +0000 Manifest next update: Thu 24 Jul 2025 08:00:48 +0000 Files and hashes: 1: 1gtsCJyHdZ_mz1Vmc6aYSOZRTug.roa (hash: i5FmepCDxpYMWJtIWumi8I2WhRPEkV925D+zrSFUKqc=) 2: 8E6yBPNYAEeIIk4vsY5NXnS-v40.crl (hash: Idvffn9pNFHCwSmSueaSolaOVXr5y+KvWqiol7n3W+0=) 3: AFN8OqvwZcsViNN-78O6BvKElME.roa (hash: gpOsJUC88/6LJdG6QKOWEGeO9P8/YN9o1I8OET+li9E=) 4: HzrOiNg5IGbvxaY6EJtaFTiPwJc.roa (hash: YVHrJ9qFMIVBjiboinqQXWeAb+UlfN0QhYG5EqTl3JU=) 5: KuzmOknbrD4Lg71OoDCO-y0GoDQ.roa (hash: L4TpWALjC8fwxZDKVNiQiJm1WAVC/DpX7t4BNMww1vk=) 6: N-Bn6UoZzfA4_e9vqjwupkidrwM.roa (hash: P0ucGjyfHx1AsSd/Hp9hPmA5fgW6WVVitbxsp2xrVOM=) 7: Xw6d5Q0Ua1XRZl5MjugABbqCL-g.roa (hash: 7lcJjOAWe6HvAJ8ku7/K4ZXcDrrbdwoOF4w1DXALzIA=) 8: hFAl1HVJl_9l3iGKDXy7Q3YLL-4.roa (hash: t3lebss2cDykApymCPDX/VFxLKKQQSAwSa+9uLLWAvg=) 9: ij6-YE2XVidboU68JMPVKequ6tg.roa (hash: YEMop9i5KBqo0Emc5LLaJ2ZkaUOlrtnZjcsi8p8jPuQ=) 10: lmLPjrfNDPS9XohB9eEXKDTvTVw.roa (hash: YUDeNZCjz7C+nv1yj/KNPiCOaWxteb6jP1PE6tH/qfc=) 11: vir9lXd95VlX33FtFKeYsF-pV7c.roa (hash: qWwJG4kSEBMq0oRm7MvhT+tJgjjEqP9pDam2i3CMe+g=) 12: vwnatcxNwSZQjN_EAgtCA6gLjGQ.roa (hash: is+QjkNRgmAAQFm1WLdb+VI9EY3XXeS9tjv/htKBkks=) 13: wOKO5BfevHhq6oErWALub8pu8xU.roa (hash: JFoG8SyIRYLSlAyJTBoEWjYzWkPzFQdNMJLWFlUmxRU=) 14: y3py8_KdR5szTCwNnRNNAmSQtvY.roa (hash: +cv+uistxcq+Q/hhXmk+IkG5TAaaXh44QKjmgbuLZlE=) Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/c5/9ab42a-df92-4e42-9e33-5c5892afa487/1/8E6yBPNYAEeIIk4vsY5NXnS-v40.crl rsync://rpki.ripe.net/repository/DEFAULT/c5/9ab42a-df92-4e42-9e33-5c5892afa487/1/8E6yBPNYAEeIIk4vsY5NXnS-v40.mft rsync://rpki.ripe.net/repository/DEFAULT/8E6yBPNYAEeIIk4vsY5NXnS-v40.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Thu 24 Jul 2025 07:00:25 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:98:36:4c:a3:7f:f8:3d:5d:45:9c:aa:94:41:77:21:51:49 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=f04eb204f358004788224e2fb18e4d5e74bebf8d Validity Not Before: Jul 23 08:00:48 2025 GMT Not After : Jul 24 08:00:48 2025 GMT Subject: CN=7f24f048375fb9e5d58ee492880a68cf82fcc6c5 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:ad:02:f1:4f:d4:89:9f:70:4a:3f:09:b8:9d:27: bd:c0:8e:a4:ed:72:2d:78:c6:3f:4f:33:b0:ef:e5: ce:9c:d0:fa:42:cc:7d:f3:7e:16:77:fe:6d:3e:fe: c9:95:10:1a:47:04:49:d7:72:82:bb:38:56:53:e8: ec:ab:d0:10:18:c9:e6:29:d6:02:0a:d2:46:53:ba: d2:6e:b5:c0:1b:3c:10:b3:65:49:23:9e:32:df:56: 38:ff:e8:b4:7b:d9:fc:c7:12:65:97:cb:42:fa:b3: 76:55:99:51:a0:b4:f5:fb:8d:71:46:59:0f:01:52: e8:db:ab:66:ed:bf:da:5c:33:b5:54:03:0a:45:23: 07:14:3c:91:02:3f:94:ad:10:67:4e:57:14:c9:76: df:95:34:22:5d:ee:03:24:9e:7e:aa:c9:1f:bc:1a: 7a:13:30:2a:97:68:7b:97:62:05:82:cf:d4:91:96: 8d:87:47:72:2e:08:27:67:d2:19:73:72:3e:d4:34: 90:75:87:d2:a9:e5:c2:8d:92:9f:79:eb:23:61:3e: dd:49:c1:0e:80:25:5f:a7:02:ee:8a:ee:c6:fe:a9: 2c:68:b8:71:db:a4:db:9e:12:30:de:fb:0b:b2:0e: a9:04:61:c3:9f:17:8d:f6:8e:19:95:87:6a:87:24: bf:1b Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 7F:24:F0:48:37:5F:B9:E5:D5:8E:E4:92:88:0A:68:CF:82:FC:C6:C5 X509v3 Authority Key Identifier: keyid:F0:4E:B2:04:F3:58:00:47:88:22:4E:2F:B1:8E:4D:5E:74:BE:BF:8D X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/8E6yBPNYAEeIIk4vsY5NXnS-v40.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/c5/9ab42a-df92-4e42-9e33-5c5892afa487/1/8E6yBPNYAEeIIk4vsY5NXnS-v40.mft X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/c5/9ab42a-df92-4e42-9e33-5c5892afa487/1/8E6yBPNYAEeIIk4vsY5NXnS-v40.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 52:91:cf:42:6e:7a:04:41:c3:db:ba:06:1d:1e:02:ef:ec:98: 0a:9e:16:f8:34:bb:1c:21:c9:9a:da:c8:d4:ac:ed:9d:cc:a4: 26:6d:37:a9:90:75:d5:6b:78:49:76:51:da:a1:01:60:2f:3c: a8:06:6b:f0:28:af:89:df:15:c6:02:9c:cd:4d:82:46:09:c5: 1e:fe:26:30:72:d9:a6:2d:ff:77:db:0b:77:3b:01:10:80:ee: 51:e6:d6:5c:35:af:a6:c5:a2:b0:99:d8:3b:0d:97:7f:d3:ba: 70:a1:e7:8c:92:2c:68:32:4d:6c:69:89:9b:82:32:ec:42:71: a3:29:fc:2d:01:78:df:a2:26:c4:f1:ae:95:5d:6d:01:45:d4: 66:bb:1f:f7:4b:ab:21:29:11:57:47:a0:73:ce:4a:74:50:5b: 31:8c:f3:74:b9:c4:af:70:3d:5f:8e:7f:62:b2:86:7e:c5:01: ee:72:d2:b5:78:b0:b1:21:97:9b:3e:9a:4e:d2:0b:77:9f:ee: dc:ed:11:ec:12:48:a6:f2:cf:a0:a5:7c:c9:d3:c2:7c:c3:df: be:44:03:cb:b0:ab:f3:f3:63:3f:a4:63:b5:56:aa:07:a0:44: c4:16:7b:37:ce:d1:f1:97:c9:28:a4:46:a1:2a:a7:13:69:1b: 06:af:b1:91 -----BEGIN CERTIFICATE----- MIIFFjCCA/6gAwIBAgISAZg2TKN/+D1dRZyqlEF3IVFJMA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKGYwNGViMjA0ZjM1ODAwNDc4ODIyNGUyZmIxOGU0ZDVlNzRi ZWJmOGQwHhcNMjUwNzIzMDgwMDQ4WhcNMjUwNzI0MDgwMDQ4WjAzMTEwLwYDVQQD Eyg3ZjI0ZjA0ODM3NWZiOWU1ZDU4ZWU0OTI4ODBhNjhjZjgyZmNjNmM1MIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEArQLxT9SJn3BKPwm4nSe9wI6k7XIt eMY/TzOw7+XOnND6Qsx9834Wd/5tPv7JlRAaRwRJ13KCuzhWU+jsq9AQGMnmKdYC CtJGU7rSbrXAGzwQs2VJI54y31Y4/+i0e9n8xxJll8tC+rN2VZlRoLT1+41xRlkP AVLo26tm7b/aXDO1VAMKRSMHFDyRAj+UrRBnTlcUyXbflTQiXe4DJJ5+qskfvBp6 EzAql2h7l2IFgs/UkZaNh0dyLggnZ9IZc3I+1DSQdYfSqeXCjZKfeesjYT7dScEO gCVfpwLuiu7G/qksaLhx26TbnhIw3vsLsg6pBGHDnxeN9o4ZlYdqhyS/GwIDAQAB o4ICIjCCAh4wHQYDVR0OBBYEFH8k8Eg3X7nl1Y7kkogKaM+C/MbFMB8GA1UdIwQY MBaAFPBOsgTzWABHiCJOL7GOTV50vr+NMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvOEU2eUJQTllBRWVJSWs0dnNZNU5YblMtdjQwLmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC9jNS85YWI0MmEtZGY5Mi00ZTQyLTllMzMt NWM1ODkyYWZhNDg3LzEvOEU2eUJQTllBRWVJSWs0dnNZNU5YblMtdjQwLm1mdDCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC9jNS85YWI0MmEtZGY5Mi00ZTQyLTllMzMtNWM1ODkyYWZhNDg3 LzEvOEU2eUJQTllBRWVJSWs0dnNZNU5YblMtdjQwLmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAUpHPQm56 BEHD27oGHR4C7+yYCp4W+DS7HCHJmtrI1KztncykJm03qZB11Wt4SXZR2qEBYC88 qAZr8Civid8VxgKczU2CRgnFHv4mMHLZpi3/d9sLdzsBEIDuUebWXDWvpsWisJnY Ow2Xf9O6cKHnjJIsaDJNbGmJm4Iy7EJxoyn8LQF436ImxPGulV1tAUXUZrsf90ur ISkRV0egc85KdFBbMYzzdLnEr3A9X45/YrKGfsUB7nLStXiwsSGXmz6aTtILd5/u 3O0R7BJIpvLPoKV8ydPCfMPfvkQDy7Cr8/NjP6RjtVaqB6BExBZ7N87R8ZfJKKRG oSqnE2kbBq+xkQ== -----END CERTIFICATE-----Generated at Wed Jul 23 11:47:23 2025 by rpki-client