$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/c8/a96024-6555-4e8d-af37-62bb6d63e59d/1/3_JHJt8-d_b0yOBDZhOzURDurzg.mft File: 3_JHJt8-d_b0yOBDZhOzURDurzg.mft (raw, json) Hash identifier: KJsvsu17ctNsn2kLMkgxpxwJT+vTe96At/txtBMSVJY= Subject key identifier: 35:9C:6B:05:DD:69:C8:3A:77:93:FB:5E:7B:BF:66:6D:24:29:BB:8C Authority key identifier: DF:F2:47:26:DF:3E:77:F6:F4:C8:E0:43:66:13:B3:51:10:EE:AF:38 Certificate issuer: /CN=dff24726df3e77f6f4c8e0436613b35110eeaf38 Certificate serial: 01983427788E9C8B9CD07F31E47EC4990186 Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/3_JHJt8-d_b0yOBDZhOzURDurzg.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/c8/a96024-6555-4e8d-af37-62bb6d63e59d/1/3_JHJt8-d_b0yOBDZhOzURDurzg.mft Manifest number: 11EB Signing time: Tue 22 Jul 2025 22:00:58 +0000 Manifest this update: Tue 22 Jul 2025 22:00:58 +0000 Manifest next update: Wed 23 Jul 2025 22:00:58 +0000 Files and hashes: 1: 3_HM3LXI2dI7yCUkbwsS0LVmtPQ.roa (hash: dlvoBhBeGam9xbjGOiUpXKoso+XH3qNTVfnBCvdbd3Q=) 2: 3_JHJt8-d_b0yOBDZhOzURDurzg.crl (hash: PdpvGhDoySE4u0xEQd2sBIZ6lSlyXNLrCoeYjTAsUKQ=) 3: E_7EA8UJkxlGETtzRt_qHmFJYsI.roa (hash: 407g7UlI6CqSY6AOA+kHrysQofaOwh0+lRwTxsDvEPM=) 4: EgzHUocwnSDaTR0mcH1N2AahbPA.roa (hash: qnns/hwFAonNH2cGnXK7MoaWY9Y+ZF5REF6qTFex00M=) 5: EqWJbW00yHom-8ojBy6QYR1H3FM.roa (hash: jchk7todvo3pxE5MJlQ/7M5jHRN15mY+WmGn6RIiL74=) 6: LBBRl1_5PTCAndMsefaH2qIgsWI.roa (hash: P4yu/hSYw0dip59FJgO1wKqB51hJxMddEa7BdAJON18=) 7: SFJQLYtyuvLa-Z-_p6GETmClzzQ.roa (hash: TpY/D4v+35T3Gg8FMD0C6YxKf8fx/yuDpF1EWp6QNws=) 8: SW2UHW6XXrCRSFkNV0CVmfSilT8.roa (hash: OU29d/hqTbWW7Cob/3TqpwPxH+8rWvDwLVXV+Khg58o=) 9: gLpL93_717seB53wtn-PIYRSJpQ.roa (hash: BEBryS8Pk5M96RkjmV9ApUKiEfxXTgBuMMQoR0rPtvE=) 10: sl5VJ3i7CbF6mq-XTH5pxWMmK5o.roa (hash: 4bfJxuYHYnVskQrhNVV+ZwN1afVTdgzyH0yWLAaqMRM=) 11: ve4kS1FSpKOZDfPOmvEJot6T9gc.roa (hash: /8G7vYP5BGzfa/caGIr/zNwzv8N1oQfYQzWhKIYfL+g=) 12: yiW-kmeX6T3jx-yL7EZZYoVvwps.roa (hash: QstF1sZuORe/6EM2aW5TGBrHuj8rjUHPJQAAamVQG0Y=) Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/c8/a96024-6555-4e8d-af37-62bb6d63e59d/1/3_JHJt8-d_b0yOBDZhOzURDurzg.crl rsync://rpki.ripe.net/repository/DEFAULT/c8/a96024-6555-4e8d-af37-62bb6d63e59d/1/3_JHJt8-d_b0yOBDZhOzURDurzg.mft rsync://rpki.ripe.net/repository/DEFAULT/3_JHJt8-d_b0yOBDZhOzURDurzg.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Wed 23 Jul 2025 22:00:25 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:98:34:27:78:8e:9c:8b:9c:d0:7f:31:e4:7e:c4:99:01:86 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=dff24726df3e77f6f4c8e0436613b35110eeaf38 Validity Not Before: Jul 22 22:00:58 2025 GMT Not After : Jul 23 22:00:58 2025 GMT Subject: CN=359c6b05dd69c83a7793fb5e7bbf666d2429bb8c Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:b2:27:90:eb:11:95:0c:8b:fa:5e:44:bf:93:94: 99:31:95:c2:5c:30:e9:c0:4c:b2:56:7d:7c:c4:d1: 25:47:1d:ce:df:7d:7d:df:f9:6c:48:dd:09:1d:79: d1:2b:da:55:e8:cc:ea:f4:d4:08:f5:76:4f:2b:fb: 88:16:31:d8:ba:76:02:38:93:0c:1d:38:35:41:e1: 95:b9:5d:1c:ab:5a:ac:48:07:ec:6b:2e:fd:4a:b2: 18:25:75:8d:b6:1f:3f:dc:1e:4e:d2:2b:85:cb:30: 98:7b:ab:25:08:98:6f:84:28:8b:57:a6:2a:cf:f5: 3c:5a:f6:7e:f8:3e:2a:8b:21:20:0a:d7:0e:fb:f7: 40:8d:40:03:03:31:47:63:a8:19:52:f0:7c:55:f5: 75:6b:2d:fb:61:85:85:0e:8a:e9:b1:0e:76:41:bc: b1:a8:f4:ab:df:7c:a5:18:f3:27:4c:b9:e9:3c:d9: ac:ca:67:5e:97:d5:2b:bc:c3:50:a4:2c:9b:3f:71: 7b:e2:c1:e2:5f:6e:44:e9:13:75:6e:19:94:27:b4: eb:62:96:54:f5:cf:29:30:bf:c3:16:14:b0:88:c2: c1:cc:0e:bd:18:02:b4:b8:01:53:da:59:23:a0:d1: 99:7c:84:e2:c0:60:05:84:9d:0b:1a:9a:79:ba:4d: 43:91 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 35:9C:6B:05:DD:69:C8:3A:77:93:FB:5E:7B:BF:66:6D:24:29:BB:8C X509v3 Authority Key Identifier: keyid:DF:F2:47:26:DF:3E:77:F6:F4:C8:E0:43:66:13:B3:51:10:EE:AF:38 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/3_JHJt8-d_b0yOBDZhOzURDurzg.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/c8/a96024-6555-4e8d-af37-62bb6d63e59d/1/3_JHJt8-d_b0yOBDZhOzURDurzg.mft X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/c8/a96024-6555-4e8d-af37-62bb6d63e59d/1/3_JHJt8-d_b0yOBDZhOzURDurzg.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption aa:07:13:1b:68:5b:18:4a:9c:c6:de:21:9b:d3:91:b6:b9:3c: d8:45:67:f8:2c:b8:7e:79:f1:4d:94:71:20:91:11:28:4b:fc: fb:00:dc:eb:d1:d8:56:47:56:e1:49:07:c3:47:ae:ee:c2:5b: 48:41:9e:0c:5e:3f:b3:ff:82:ea:f6:51:c2:de:01:94:d7:c0: ba:b3:0a:eb:01:19:ea:85:ea:f2:16:b8:22:30:03:37:7b:d6: 33:59:84:91:3b:28:fa:63:29:9a:e9:94:9c:77:73:b0:de:ce: 39:9f:6d:49:df:5e:83:e1:8c:21:41:a3:b0:b7:ae:66:fe:ae: de:88:20:7b:fe:a7:cd:81:ba:fe:29:61:ed:c0:08:33:5b:c7: 68:70:00:45:04:59:e2:4f:d3:61:cc:7c:ec:14:da:d3:f9:2b: f1:65:c4:56:ac:e9:56:0d:c5:2d:d8:11:84:d0:85:69:d8:87: 02:2b:d1:3a:a3:3f:ae:7b:e3:b2:5e:25:b8:ea:b4:80:ae:87: 9c:58:ab:f6:82:d0:bf:7a:6c:38:f5:87:8d:65:dd:5d:18:e2: 70:41:37:1e:dd:68:75:77:90:17:3a:14:e6:4f:2c:b3:f2:56: 7a:d4:07:02:62:1d:98:df:af:83:fd:30:6f:13:a8:c6:e9:a0: 3a:9b:e2:c9 -----BEGIN CERTIFICATE----- MIIFFjCCA/6gAwIBAgISAZg0J3iOnIuc0H8x5H7EmQGGMA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKGRmZjI0NzI2ZGYzZTc3ZjZmNGM4ZTA0MzY2MTNiMzUxMTBl ZWFmMzgwHhcNMjUwNzIyMjIwMDU4WhcNMjUwNzIzMjIwMDU4WjAzMTEwLwYDVQQD EygzNTljNmIwNWRkNjljODNhNzc5M2ZiNWU3YmJmNjY2ZDI0MjliYjhjMIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAsieQ6xGVDIv6XkS/k5SZMZXCXDDp wEyyVn18xNElRx3O33193/lsSN0JHXnRK9pV6Mzq9NQI9XZPK/uIFjHYunYCOJMM HTg1QeGVuV0cq1qsSAfsay79SrIYJXWNth8/3B5O0iuFyzCYe6slCJhvhCiLV6Yq z/U8WvZ++D4qiyEgCtcO+/dAjUADAzFHY6gZUvB8VfV1ay37YYWFDorpsQ52Qbyx qPSr33ylGPMnTLnpPNmsymdel9UrvMNQpCybP3F74sHiX25E6RN1bhmUJ7TrYpZU 9c8pML/DFhSwiMLBzA69GAK0uAFT2lkjoNGZfITiwGAFhJ0LGpp5uk1DkQIDAQAB o4ICIjCCAh4wHQYDVR0OBBYEFDWcawXdacg6d5P7Xnu/Zm0kKbuMMB8GA1UdIwQY MBaAFN/yRybfPnf29MjgQ2YTs1EQ7q84MA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvM19KSEp0OC1kX2IweU9CRFpoT3pVUkR1cnpnLmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC9jOC9hOTYwMjQtNjU1NS00ZThkLWFmMzct NjJiYjZkNjNlNTlkLzEvM19KSEp0OC1kX2IweU9CRFpoT3pVUkR1cnpnLm1mdDCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC9jOC9hOTYwMjQtNjU1NS00ZThkLWFmMzctNjJiYjZkNjNlNTlk LzEvM19KSEp0OC1kX2IweU9CRFpoT3pVUkR1cnpnLmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAqgcTG2hb GEqcxt4hm9ORtrk82EVn+Cy4fnnxTZRxIJERKEv8+wDc69HYVkdW4UkHw0eu7sJb SEGeDF4/s/+C6vZRwt4BlNfAurMK6wEZ6oXq8ha4IjADN3vWM1mEkTso+mMpmumU nHdzsN7OOZ9tSd9eg+GMIUGjsLeuZv6u3ogge/6nzYG6/ilh7cAIM1vHaHAARQRZ 4k/TYcx87BTa0/kr8WXEVqzpVg3FLdgRhNCFadiHAivROqM/rnvjsl4luOq0gK6H nFir9oLQv3psOPWHjWXdXRjicEE3Ht1odXeQFzoU5k8ss/JWetQHAmIdmN+vg/0w bxOoxumgOpviyQ== -----END CERTIFICATE-----Generated at Wed Jul 23 08:01:02 2025 by rpki-client