$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/c7/29e166-98d2-49f2-8497-0503749adea0/1/RotZLzEQvGw1JJqCcaDawamssM4.mft File: RotZLzEQvGw1JJqCcaDawamssM4.mft (raw, json) Hash identifier: 4o0dtCm0EA7Cuy1lCnOVWQXYltAEcMbGqqGws3JYXBc= Subject key identifier: 60:81:F2:9C:7C:48:D7:9D:37:57:80:A2:1F:CD:C6:4C:B9:9A:BC:86 Authority key identifier: 46:8B:59:2F:31:10:BC:6C:35:24:9A:82:71:A0:DA:C1:A9:AC:B0:CE Certificate issuer: /CN=468b592f3110bc6c35249a8271a0dac1a9acb0ce Certificate serial: 01984889442FA7843B9A199386B35A1559B1 Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/RotZLzEQvGw1JJqCcaDawamssM4.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/c7/29e166-98d2-49f2-8497-0503749adea0/1/RotZLzEQvGw1JJqCcaDawamssM4.mft Manifest number: 060C Signing time: Sat 26 Jul 2025 21:00:12 +0000 Manifest this update: Sat 26 Jul 2025 21:00:12 +0000 Manifest next update: Sun 27 Jul 2025 21:00:12 +0000 Files and hashes: 1: 4PdFFqbPgnyAF8OAZU59EP79EQE.roa (hash: 0N0pRYIfSwp4rQqEao9ImOBW5Z4au+nqt0SGDhOprnI=) 2: 8u1Ww9yNVHCXoKy959EsUaU71zs.roa (hash: MCjwWNvinwMVi61YdY3QarB5BMMcy4gUuYfqYD2T3PI=) 3: B5kdDxNFhlA9AT3PyqFkTX6RY6M.roa (hash: Xin+IDogu4+kKllgKutdfXdJm2piOKuXIHOph9bE8Zw=) 4: RotZLzEQvGw1JJqCcaDawamssM4.crl (hash: dyqvFAYDHqKVvfta0RBOmggBa/Gsn4JDyh+EvNA9TOw=) 5: _vYyrixRE-yXYNd95EagmmedMZs.roa (hash: Nq9E9fzlDdc1TerNy7pW2Y+cp+tsEL9ANsKsoDQ0Pwo=) 6: acuhZu0U_WkSARaVYcWUYOom_tc.roa (hash: Vz362bHKA5YHWnFAcuO7fZwKtrbxdBbzK4dNCKeHQsQ=) 7: bvgsPr3D5PPxL6J89BfI0hjp6nU.roa (hash: gQ8pHX8IE1KeaNe50ukz0WLLfO6NzXHlCO7loLPh0Ow=) 8: elD2CPARB_SCiElYBqX86L528iA.roa (hash: 4GpojDoTFDR9/As1unQ2wQcCWk8x0pykSLzc87gKTZw=) 9: i1oSM0zm6FdsD8GW2rr18ZJYU9c.roa (hash: vhtU0Gjcgqwk2dDqzgcdqq71xJAqWywoPwJaRLlLExA=) 10: moar5P9-vHm1h7dW1fwgc72NFhw.roa (hash: JbVrT9GvQCxgYaVUxgeC2lZytQA7NzFvIW4W5mDjY3A=) 11: wpO2gWHd7fIiJY2UmwBghuKU8Pk.roa (hash: eNcYuQe4vVrI0lLxGnwWNPY5OwCaWdtNSK5bPAl0Ug8=) Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/c7/29e166-98d2-49f2-8497-0503749adea0/1/RotZLzEQvGw1JJqCcaDawamssM4.crl rsync://rpki.ripe.net/repository/DEFAULT/c7/29e166-98d2-49f2-8497-0503749adea0/1/RotZLzEQvGw1JJqCcaDawamssM4.mft rsync://rpki.ripe.net/repository/DEFAULT/RotZLzEQvGw1JJqCcaDawamssM4.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Sun 27 Jul 2025 20:00:05 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:98:48:89:44:2f:a7:84:3b:9a:19:93:86:b3:5a:15:59:b1 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=468b592f3110bc6c35249a8271a0dac1a9acb0ce Validity Not Before: Jul 26 21:00:12 2025 GMT Not After : Jul 27 21:00:12 2025 GMT Subject: CN=6081f29c7c48d79d375780a21fcdc64cb99abc86 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:c0:79:9b:82:de:d0:05:0c:d5:a4:aa:09:be:ce: 06:9f:7e:8d:ab:a0:e0:e6:50:0b:c9:e0:df:1d:0b: 79:9f:7c:d9:41:86:4e:78:35:3a:d7:7b:bf:bd:ae: 95:d4:0f:88:1f:cb:15:52:82:b6:62:e0:b9:49:d8: 3c:a2:2c:cf:13:20:82:00:02:25:b7:7f:76:21:4f: c4:f0:60:54:a1:82:46:1e:6f:b5:42:04:b9:41:c7: f5:93:1d:2c:6c:f6:22:60:84:c0:ba:e0:ee:23:1e: d2:4f:d7:8f:ce:4c:4c:ce:0a:ce:1e:e3:34:69:d7: ba:7f:87:3d:4d:11:0b:cb:75:35:91:48:4c:b0:cf: 50:8c:d2:38:db:d7:d3:c2:00:a8:2e:05:d0:e8:6c: 01:0d:12:61:0e:87:d6:7f:f8:8d:f1:37:5c:81:3b: 1f:65:d8:02:2d:fd:5b:82:f8:b1:dc:60:18:b1:67: 13:2a:32:e9:cd:24:ce:42:3e:c2:5e:74:d9:3b:cb: d0:e4:07:95:a4:fa:a8:bc:ea:53:67:65:9e:b4:35: 08:15:1b:bd:af:04:e6:1c:d5:ea:d6:fc:87:8d:03: 0f:fb:4c:03:2b:d2:96:a1:e5:75:a4:1a:fd:f2:31: 9b:4e:6b:4a:b5:d5:83:2b:08:a8:17:4b:d5:c3:d2: b9:e3 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 60:81:F2:9C:7C:48:D7:9D:37:57:80:A2:1F:CD:C6:4C:B9:9A:BC:86 X509v3 Authority Key Identifier: keyid:46:8B:59:2F:31:10:BC:6C:35:24:9A:82:71:A0:DA:C1:A9:AC:B0:CE X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/RotZLzEQvGw1JJqCcaDawamssM4.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/c7/29e166-98d2-49f2-8497-0503749adea0/1/RotZLzEQvGw1JJqCcaDawamssM4.mft X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/c7/29e166-98d2-49f2-8497-0503749adea0/1/RotZLzEQvGw1JJqCcaDawamssM4.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 6f:6c:5a:76:93:37:22:5c:c5:75:d0:9d:e4:5e:c5:ca:73:b9: aa:49:26:68:16:7d:d3:9e:aa:c0:6c:12:27:a6:23:3f:b6:a0: 14:db:30:85:12:2d:3b:44:63:1d:86:25:64:b0:21:c2:61:5a: 81:77:88:7f:98:e0:cd:58:09:57:d0:68:e4:cd:bb:c8:d9:9d: 27:2d:b9:51:6e:f1:ac:08:b1:44:a1:c8:33:18:68:ba:3a:0a: 06:9b:7c:28:23:b6:06:a2:f5:bf:ca:b4:21:51:41:78:76:74: 96:e1:7b:5a:9a:0d:d3:69:c5:1b:ef:fc:63:da:a6:ef:96:40: 97:60:01:61:bf:55:38:6f:e8:18:cc:14:18:69:be:d6:56:ce: 11:01:3a:a2:b7:26:aa:53:6d:6a:1f:7a:eb:1c:34:d9:f9:e2: 4d:20:88:3b:c3:02:31:e0:a5:c3:60:da:86:39:4a:01:df:be: 81:0f:06:c1:35:b5:d7:98:f0:e7:30:ed:e6:47:22:59:7a:df: 15:13:fd:89:7d:e7:18:42:5d:9c:ca:01:3f:7d:c2:59:1d:81: c2:3d:a8:a2:85:a0:19:a0:fc:4c:b4:af:30:06:b6:b1:a1:71: 1e:5d:fa:12:b7:54:8f:71:11:4a:ed:dd:70:d1:c8:39:76:84: 31:6b:73:37 -----BEGIN CERTIFICATE----- MIIFFjCCA/6gAwIBAgISAZhIiUQvp4Q7mhmThrNaFVmxMA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKDQ2OGI1OTJmMzExMGJjNmMzNTI0OWE4MjcxYTBkYWMxYTlh Y2IwY2UwHhcNMjUwNzI2MjEwMDEyWhcNMjUwNzI3MjEwMDEyWjAzMTEwLwYDVQQD Eyg2MDgxZjI5YzdjNDhkNzlkMzc1NzgwYTIxZmNkYzY0Y2I5OWFiYzg2MIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAwHmbgt7QBQzVpKoJvs4Gn36Nq6Dg 5lALyeDfHQt5n3zZQYZOeDU613u/va6V1A+IH8sVUoK2YuC5Sdg8oizPEyCCAAIl t392IU/E8GBUoYJGHm+1QgS5Qcf1kx0sbPYiYITAuuDuIx7ST9ePzkxMzgrOHuM0 ade6f4c9TRELy3U1kUhMsM9QjNI429fTwgCoLgXQ6GwBDRJhDofWf/iN8TdcgTsf ZdgCLf1bgvix3GAYsWcTKjLpzSTOQj7CXnTZO8vQ5AeVpPqovOpTZ2WetDUIFRu9 rwTmHNXq1vyHjQMP+0wDK9KWoeV1pBr98jGbTmtKtdWDKwioF0vVw9K54wIDAQAB o4ICIjCCAh4wHQYDVR0OBBYEFGCB8px8SNedN1eAoh/Nxky5mryGMB8GA1UdIwQY MBaAFEaLWS8xELxsNSSagnGg2sGprLDOMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvUm90Wkx6RVF2R3cxSkpxQ2NhRGF3YW1zc000LmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC9jNy8yOWUxNjYtOThkMi00OWYyLTg0OTct MDUwMzc0OWFkZWEwLzEvUm90Wkx6RVF2R3cxSkpxQ2NhRGF3YW1zc000Lm1mdDCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC9jNy8yOWUxNjYtOThkMi00OWYyLTg0OTctMDUwMzc0OWFkZWEw LzEvUm90Wkx6RVF2R3cxSkpxQ2NhRGF3YW1zc000LmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAb2xadpM3 IlzFddCd5F7FynO5qkkmaBZ9056qwGwSJ6YjP7agFNswhRItO0RjHYYlZLAhwmFa gXeIf5jgzVgJV9Bo5M27yNmdJy25UW7xrAixRKHIMxhoujoKBpt8KCO2BqL1v8q0 IVFBeHZ0luF7WpoN02nFG+/8Y9qm75ZAl2ABYb9VOG/oGMwUGGm+1lbOEQE6orcm qlNtah966xw02fniTSCIO8MCMeClw2DahjlKAd++gQ8GwTW115jw5zDt5kciWXrf FRP9iX3nGEJdnMoBP33CWR2Bwj2oooWgGaD8TLSvMAa2saFxHl36ErdUj3ERSu3d cNHIOXaEMWtzNw== -----END CERTIFICATE-----Generated at Sun Jul 27 01:50:34 2025 by rpki-client