$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/c9/40498e-d1c0-484c-abcb-61e7f40d5dd6/1/rr85Ti8bJRyI2YiocWEIRYB4bvU.mft File: rr85Ti8bJRyI2YiocWEIRYB4bvU.mft (raw, json) Hash identifier: J2WgvvQ+XYm8Wsmm3CnjTApV0vejqy9wpcyXBSd1X6w= Subject key identifier: 28:68:CA:9F:4D:7A:1C:E7:1A:53:45:FB:EF:25:41:7D:5A:64:7D:CC Authority key identifier: AE:BF:39:4E:2F:1B:25:1C:88:D9:88:A8:71:61:08:45:80:78:6E:F5 Certificate issuer: /CN=aebf394e2f1b251c88d988a87161084580786ef5 Certificate serial: 0198481BEFBD0C88304B7EBA43778F51566A Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/rr85Ti8bJRyI2YiocWEIRYB4bvU.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/c9/40498e-d1c0-484c-abcb-61e7f40d5dd6/1/rr85Ti8bJRyI2YiocWEIRYB4bvU.mft Manifest number: 1617 Signing time: Sat 26 Jul 2025 19:00:47 +0000 Manifest this update: Sat 26 Jul 2025 19:00:47 +0000 Manifest next update: Sun 27 Jul 2025 19:00:47 +0000 Files and hashes: 1: 0M_CHtTZz2ksD2BrxQYB5GYr6Qs.roa (hash: pjePI9MMIzsxZCozr1MX0ua7tggMW3H280y5yB3P7S0=) 2: 1-_mCNfP9_HNiBcEsvWHOFnGkC9I.roa (hash: JsQNy89vRBMXhfgHBZLMyPK1KVQmDn747eH7PkqTbv4=) 3: 499vYtwuw8upiAA2ubHtry-MPMw.roa (hash: Z3mdQWlNWDCy7MpQvjVwxOFHXRgVUsKCd9CYyZydkdQ=) 4: BV9MkYw-noIEhqphKumJe_rAYPw.roa (hash: cTycQR7uMvIZ+ka9U/Z707XPur1pq5RdGRaj9s/WBEk=) 5: C9bq6HqiO8wvPt8Ohvw7Ya0CzfI.roa (hash: eBedAMyLvvyEc8yS2VDwWUUS44f1pIhLP9yn06vWvAA=) 6: L3ZGNHnhgVbtJA6v9_KfCLPdQu4.roa (hash: tRfv/CcITA5fhGSfuor8bEI1B/6QYSwrTAH88Vxz5+8=) 7: c_qSQSef9yQq7ko-zsOrz05POQI.roa (hash: FNYiHqlJ6193udyi9UzOaM0voKaXuvqgwAhp2rGz6i4=) 8: imE36QLRTMX_BQ-hGxHCq-HzUSs.roa (hash: 9oBmGg8MmifOi5UePbS9lDJePGL5vAfP7BimBla3w98=) 9: lmrSRQ5ihg55QvYqat1AjaV_GvQ.roa (hash: hnfw4d4vCZD3abd8/WtjTv2gdPGfcl5xx0Mpy2oIhPc=) 10: rq3_2EMmh0cv5ivlO8JPPUeogQc.roa (hash: 9kTdzZUfT/wSfRhG2PTu31/f9X4NTLfSEK/53blCYJ4=) 11: rr85Ti8bJRyI2YiocWEIRYB4bvU.crl (hash: AjTu0P8r0Sxe/3SkoHHYCj8G+JyrLzV671NODAM/JHQ=) 12: uFaCHWPgxrsotozK3-PvWIlEI14.roa (hash: E71w1Kj/9g7CI68LBGPMUUdmv1Dhxwi441Gs522xPmQ=) Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/c9/40498e-d1c0-484c-abcb-61e7f40d5dd6/1/rr85Ti8bJRyI2YiocWEIRYB4bvU.crl rsync://rpki.ripe.net/repository/DEFAULT/c9/40498e-d1c0-484c-abcb-61e7f40d5dd6/1/rr85Ti8bJRyI2YiocWEIRYB4bvU.mft rsync://rpki.ripe.net/repository/DEFAULT/rr85Ti8bJRyI2YiocWEIRYB4bvU.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Sun 27 Jul 2025 11:00:05 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:98:48:1b:ef:bd:0c:88:30:4b:7e:ba:43:77:8f:51:56:6a Signature Algorithm: sha256WithRSAEncryption Issuer: CN=aebf394e2f1b251c88d988a87161084580786ef5 Validity Not Before: Jul 26 19:00:47 2025 GMT Not After : Jul 27 19:00:47 2025 GMT Subject: CN=2868ca9f4d7a1ce71a5345fbef25417d5a647dcc Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:c0:e0:f4:e9:fb:c0:6c:ff:a3:0a:ae:c8:14:91: 40:63:f1:0e:f3:d8:12:6f:3d:c5:b6:e0:71:7d:5a: 72:00:4c:3e:68:f0:23:54:94:9b:4f:e1:44:6d:e8: 3f:26:62:58:ae:ba:e1:1b:ce:47:fc:8a:43:27:6a: 3e:49:5a:61:88:24:b7:6d:85:aa:8b:9a:e5:8c:66: 74:03:d7:70:ab:ac:37:f2:54:f1:62:9c:1a:f5:2d: f4:5d:f2:60:98:e3:87:dc:51:55:6e:1c:2a:6d:a1: 1a:2b:00:61:fd:96:cf:d9:60:c9:b6:41:76:60:4f: 51:4a:06:ae:06:98:eb:32:cb:88:a2:21:04:74:95: be:b8:5e:f2:61:ec:61:5e:64:58:17:13:2b:9b:a5: 5c:ca:38:73:62:4c:32:52:b3:23:c2:23:5f:4a:66: c7:34:10:02:28:3d:3c:46:06:f3:49:ad:00:af:ad: b3:a5:08:84:98:05:10:19:1f:4b:39:89:62:e0:75: ef:06:01:c2:8b:0a:68:f7:d6:78:3c:59:8d:a2:44: e6:b1:b5:46:59:89:52:4c:c3:37:8f:34:1b:24:6d: f9:8c:e2:85:48:5f:32:7c:cb:37:2b:8f:ce:55:93: b4:6b:17:b5:c5:07:cc:1f:5c:6c:dd:80:d8:7e:2e: 30:dd Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 28:68:CA:9F:4D:7A:1C:E7:1A:53:45:FB:EF:25:41:7D:5A:64:7D:CC X509v3 Authority Key Identifier: keyid:AE:BF:39:4E:2F:1B:25:1C:88:D9:88:A8:71:61:08:45:80:78:6E:F5 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/rr85Ti8bJRyI2YiocWEIRYB4bvU.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/c9/40498e-d1c0-484c-abcb-61e7f40d5dd6/1/rr85Ti8bJRyI2YiocWEIRYB4bvU.mft X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/c9/40498e-d1c0-484c-abcb-61e7f40d5dd6/1/rr85Ti8bJRyI2YiocWEIRYB4bvU.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 6e:9c:e9:54:31:b8:4b:3b:57:c0:a5:d3:e4:cd:4e:5b:c1:f9: 53:0c:2b:36:65:31:c2:6e:75:13:21:5a:7b:77:c3:fc:6f:ea: 11:b0:c5:8b:d2:57:d0:06:81:2d:d4:c6:47:44:f1:63:54:fa: 29:cc:c4:41:32:ed:01:75:a9:d7:02:81:e3:24:ea:e9:85:63: 25:c5:62:c0:c6:2b:98:4b:a8:30:26:a2:a4:4c:5c:e0:31:98: 45:e1:d9:7f:31:d5:fc:ef:d0:18:e3:31:7c:91:ff:5f:70:5d: ca:3d:c1:52:01:c4:cb:09:7e:87:a9:e8:5f:dc:a5:c0:1e:5d: c7:61:f6:2d:f6:48:a1:e4:2d:e5:44:77:92:5b:fe:b6:d1:f9: 0d:d9:1d:8c:ad:9c:c0:17:40:10:bc:e3:6c:fb:b4:31:2d:0a: 9f:cd:03:de:56:7e:ab:68:e5:da:85:24:6e:e6:b9:bb:5e:29: 42:86:e6:d4:e1:2f:49:6b:0c:34:0a:a7:b9:78:5f:2e:1d:7f: 3d:36:fe:5f:91:a2:2d:27:74:cc:50:cf:7c:4c:6f:7f:a4:b3: 35:98:df:c3:c0:fd:a5:55:c7:a8:ef:5d:bf:6d:c2:6a:6b:bb: 62:39:24:e2:9c:f1:63:55:bd:a9:3b:ce:b2:05:de:d8:e2:47: 26:cb:ac:4d -----BEGIN CERTIFICATE----- MIIFFjCCA/6gAwIBAgISAZhIG++9DIgwS366Q3ePUVZqMA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKGFlYmYzOTRlMmYxYjI1MWM4OGQ5ODhhODcxNjEwODQ1ODA3 ODZlZjUwHhcNMjUwNzI2MTkwMDQ3WhcNMjUwNzI3MTkwMDQ3WjAzMTEwLwYDVQQD EygyODY4Y2E5ZjRkN2ExY2U3MWE1MzQ1ZmJlZjI1NDE3ZDVhNjQ3ZGNjMIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAwOD06fvAbP+jCq7IFJFAY/EO89gS bz3FtuBxfVpyAEw+aPAjVJSbT+FEbeg/JmJYrrrhG85H/IpDJ2o+SVphiCS3bYWq i5rljGZ0A9dwq6w38lTxYpwa9S30XfJgmOOH3FFVbhwqbaEaKwBh/ZbP2WDJtkF2 YE9RSgauBpjrMsuIoiEEdJW+uF7yYexhXmRYFxMrm6VcyjhzYkwyUrMjwiNfSmbH NBACKD08RgbzSa0Ar62zpQiEmAUQGR9LOYli4HXvBgHCiwpo99Z4PFmNokTmsbVG WYlSTMM3jzQbJG35jOKFSF8yfMs3K4/OVZO0axe1xQfMH1xs3YDYfi4w3QIDAQAB o4ICIjCCAh4wHQYDVR0OBBYEFChoyp9NehznGlNF++8lQX1aZH3MMB8GA1UdIwQY MBaAFK6/OU4vGyUciNmIqHFhCEWAeG71MA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvcnI4NVRpOGJKUnlJMllpb2NXRUlSWUI0YnZVLmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC9jOS80MDQ5OGUtZDFjMC00ODRjLWFiY2It NjFlN2Y0MGQ1ZGQ2LzEvcnI4NVRpOGJKUnlJMllpb2NXRUlSWUI0YnZVLm1mdDCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC9jOS80MDQ5OGUtZDFjMC00ODRjLWFiY2ItNjFlN2Y0MGQ1ZGQ2 LzEvcnI4NVRpOGJKUnlJMllpb2NXRUlSWUI0YnZVLmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAbpzpVDG4 SztXwKXT5M1OW8H5UwwrNmUxwm51EyFae3fD/G/qEbDFi9JX0AaBLdTGR0TxY1T6 KczEQTLtAXWp1wKB4yTq6YVjJcViwMYrmEuoMCaipExc4DGYReHZfzHV/O/QGOMx fJH/X3Bdyj3BUgHEywl+h6noX9ylwB5dx2H2LfZIoeQt5UR3klv+ttH5DdkdjK2c wBdAELzjbPu0MS0Kn80D3lZ+q2jl2oUkbua5u14pQobm1OEvSWsMNAqnuXhfLh1/ PTb+X5GiLSd0zFDPfExvf6SzNZjfw8D9pVXHqO9dv23Camu7Yjkk4pzxY1W9qTvO sgXe2OJHJsusTQ== -----END CERTIFICATE-----Generated at Sat Jul 26 20:01:12 2025 by rpki-client