$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/ca/3c4b8a-bfc7-41e9-99e1-f3e506aeaa01/1/crePZoL8OcVbQdSPgLiDjV0tvwc.mft File: crePZoL8OcVbQdSPgLiDjV0tvwc.mft (raw, json) Hash identifier: gl7w+69hxOxUE2uvMLIUmXUaffK/aG2N03/WF4hQMG4= Subject key identifier: 29:AE:6D:0F:5B:AA:1C:80:EF:D8:26:59:05:67:FA:C8:02:24:46:4C Authority key identifier: 72:B7:8F:66:82:FC:39:C5:5B:41:D4:8F:80:B8:83:8D:5D:2D:BF:07 Certificate issuer: /CN=72b78f6682fc39c55b41d48f80b8838d5d2dbf07 Certificate serial: 0198277E3DC6B93F735ECDF221C8C0271E20 Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/crePZoL8OcVbQdSPgLiDjV0tvwc.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/ca/3c4b8a-bfc7-41e9-99e1-f3e506aeaa01/1/crePZoL8OcVbQdSPgLiDjV0tvwc.mft Manifest number: 16A1 Signing time: Sun 20 Jul 2025 11:00:41 +0000 Manifest this update: Sun 20 Jul 2025 11:00:41 +0000 Manifest next update: Mon 21 Jul 2025 11:00:41 +0000 Files and hashes: 1: 0OZkbbyiMfqEfV6yyCrB9dZN96k.roa (hash: yh5A+U+9EnV2n5u+gDax0tr2hQqxxV1tomwYV6gGiGM=) 2: 58pgEzEV4itxzFdqyuzKp1koy9E.roa (hash: tH6QFOaJ/p4keTuKKE46gn/xyoU7W70E/+/4aSveeLE=) 3: 5r9vRpGVuYtXkpY_gxNOwp72FRM.roa (hash: p2/UqV+zSZG9CO8DgUFhrhtPDwWS+PrqkaZ4I6cJraI=) 4: AGmA39KwwTaMo71xV9rDHmreSZs.roa (hash: Ryun1mCIWyFFcbzTBG9eqylu4psXL7qEbax/r+ERVGA=) 5: BL8I68n0S5EatljR0k4XZsKHA24.roa (hash: iOoLcUwIbkzuVCDzFIpNedtLQogspd3V7HdfhJiPZWg=) 6: BxtsjwaylqDgyShxS785H67TnbY.roa (hash: tVOA9jGSji8cVYr6ivVtJAHBG6QSJ270Wt89fBmSzFA=) 7: DskJ3QKfzbRX76wY5Y62eU4erR4.roa (hash: Om0rFiAWDXCVX1P62G7M/6mKMjWs5VmA/8EV8q++G+4=) 8: HJXynx2uFMrozK0BwN_XiNicEXc.roa (hash: XBl8zf0cmZgPFmTC1lgt4taQCGc6CeICpMmTKkOBzjQ=) 9: InrDEGCfKU8jJed9KnH2vx-d78Y.roa (hash: NgTZkZMP5rtVotSPrvAaVc/98gXGQA3bDBX67D3E0+U=) 10: JkkRBzU6KqC4iLmQvNFLg1pZbqQ.roa (hash: qQIWTHDKXS9dJmmc6TGCroCf2SQogHaE6HLb5eCxiv8=) 11: KrudkOICJ6o23J172JFVZgrTE8Q.roa (hash: LOElKXAo1zxfoDmHY1gKUaU9NBQHXV4qqyUFnydMwws=) 12: NcVlekWCiF1MqD0pMFbt8sBm4xk.roa (hash: zMGQInzAKzEgCcQ8IjKoVLyb75jlj1C6HwQ11XN+6E8=) 13: Q-cb4AjNFoWCznmTrkTd9_2MtQ8.roa (hash: 2USY3xNUmziDvmtALMRGKfhIKkZceNSRez2thcTQVsI=) 14: Q7A84Re88TEGuWZsIYTnNdLRtqQ.roa (hash: 62XanU5j/TVPu9hICaR497zqHzXQbEaOUBFnOheHiVs=) 15: U1dZiJQ-sCfZlcybNwHIMoVg7mU.roa (hash: V0t6ji4+oFj9qeofPxTRdRG8LndbBllIM0CiNf6vz94=) 16: Vb_RpJ-2VDeLhxtyu1EnKEq8cTI.roa (hash: H3HLjc2fYtCp8h81NRRKqe5UGP2PQxcS5tkL3rkueM8=) 17: XQSdpYywXniH-4RrFE8ADb_IkFg.roa (hash: p9OQSem/8VfhwT/7ja70OsbXAHFO0qdQ0IRvRySU44M=) 18: acgWZk7QsmW2aj_bCsaJjnM5BPc.roa (hash: HUCf1r1zAbFUe3WPNLagsH4LPR/2P6TikCHZR4iIaH0=) 19: crePZoL8OcVbQdSPgLiDjV0tvwc.crl (hash: D8LS+vVJoMJpYjD0N3LpHeYQxb8SJsueRdnuuzm28ig=) 20: fFDNE0jBCsbuSwHbNND790VHIUs.roa (hash: b2he0HY8iZ5ebk1T/0G0aRJSFCMcs4PxhlyzHEE/x2Q=) 21: hHcyNgOmxrhkn3DhNfaigHX94g8.roa (hash: B65e/+ApHFBG2pXE/i7USQDriRyCgT5A9AG/tPBTPh8=) 22: qpXqPI2Lm4U2S7PWScdAxzqLkns.roa (hash: Bzilqha0faSvo6uHWLbDknjpYoOKZ5PiVLmh9/Jq3LE=) 23: tLeTX2mDyZywGxWENlzbh31YjEk.roa (hash: oJWFgj144bSQKh5Erjef6SB52VX9Hcmd1SlOzzWkJpU=) 24: tc7szezkYqgXsem-emQpM9XcR9c.roa (hash: O2yXB3yzO1tbqMoeSHRvGfT3YmTyzVXNjGllWoLMqq0=) 25: ur6JY6LTt9bSdFyx_2wS6ELsIzA.roa (hash: b219K+gQY2uaL3+siADKQhZv8ifl18rx5LHYKsxXYxA=) 26: uyXQtDlM4ZwnqdZAtXrlk36c7e4.roa (hash: YXJ2U0awsdiqeieBuuyLP082uokuubFdWDICnN4d+bI=) 27: wnY5Ebsttfchh5_cjKHfXygWQuY.roa (hash: pCJ1hwFTcCv21l06fDQUFO4YTCzZdCwHc6g2mOw0WNI=) 28: zAHjS8tPU8HEmTCCDINtaHrVJIM.roa (hash: 0QsNUBchy9W2sgLs15kxSXqG8C8jBUSbYSVE7+dh+t0=) 29: zDVyzwRVn1CT-RP9xlaFiJNPMHE.roa (hash: OeT1n7LBHt2BLA6NJKyqqdEda9ZFBBnrzNwADjp7exA=) Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/ca/3c4b8a-bfc7-41e9-99e1-f3e506aeaa01/1/crePZoL8OcVbQdSPgLiDjV0tvwc.crl rsync://rpki.ripe.net/repository/DEFAULT/ca/3c4b8a-bfc7-41e9-99e1-f3e506aeaa01/1/crePZoL8OcVbQdSPgLiDjV0tvwc.mft rsync://rpki.ripe.net/repository/DEFAULT/crePZoL8OcVbQdSPgLiDjV0tvwc.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Mon 21 Jul 2025 06:21:25 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:98:27:7e:3d:c6:b9:3f:73:5e:cd:f2:21:c8:c0:27:1e:20 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=72b78f6682fc39c55b41d48f80b8838d5d2dbf07 Validity Not Before: Jul 20 11:00:41 2025 GMT Not After : Jul 21 11:00:41 2025 GMT Subject: CN=29ae6d0f5baa1c80efd826590567fac80224464c Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:b2:05:6c:92:f8:d2:52:7e:dd:03:ff:8e:3f:10: 1b:cf:1a:51:d8:60:88:23:d4:a8:75:b0:70:86:94: b6:41:b5:e6:a6:16:60:65:70:56:b0:9d:cf:45:8d: 7e:57:c4:9a:e3:58:b1:3f:83:99:2c:fc:84:7b:05: e6:35:65:a2:2d:8c:9b:0a:23:9c:27:c1:21:d3:39: a8:a4:9d:ab:9a:05:48:d1:78:9e:23:22:95:45:21: 7f:f6:ac:31:f3:cb:30:48:09:c2:09:33:ed:26:ef: 95:dc:6b:ce:63:cb:15:bb:06:27:de:d9:98:cf:98: a5:3c:dc:37:15:88:7c:58:09:11:ef:60:ba:56:fa: f2:5c:11:0a:53:e8:e8:75:fd:09:51:c4:a0:2f:66: 9d:38:cb:8d:9c:e3:0f:00:f5:90:ea:f6:a7:36:6e: 63:72:56:8e:c9:8d:b0:b9:70:b2:a1:96:3b:9f:a6: c0:9f:03:4d:f0:21:5a:bf:e6:53:51:c8:b8:bb:5b: db:98:44:e4:ee:93:52:36:75:06:cc:66:6c:44:6a: 84:0c:f7:64:2b:e4:43:5d:f1:a2:b3:59:86:1e:8c: e8:91:10:ee:7c:69:73:28:1a:d1:60:27:b4:32:40: d4:b9:b8:a7:9b:db:3a:2b:6e:9d:f5:e1:8e:f5:98: 16:b5 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 29:AE:6D:0F:5B:AA:1C:80:EF:D8:26:59:05:67:FA:C8:02:24:46:4C X509v3 Authority Key Identifier: keyid:72:B7:8F:66:82:FC:39:C5:5B:41:D4:8F:80:B8:83:8D:5D:2D:BF:07 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/crePZoL8OcVbQdSPgLiDjV0tvwc.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/ca/3c4b8a-bfc7-41e9-99e1-f3e506aeaa01/1/crePZoL8OcVbQdSPgLiDjV0tvwc.mft X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/ca/3c4b8a-bfc7-41e9-99e1-f3e506aeaa01/1/crePZoL8OcVbQdSPgLiDjV0tvwc.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 5d:c4:16:b5:ca:0c:cb:be:74:03:7f:54:71:43:cf:04:4d:16: 64:cb:cb:33:2d:91:88:2d:63:8b:13:44:8b:b3:d5:59:7a:10: ef:fc:a3:07:c9:0e:c7:72:8d:86:bf:a7:e0:17:36:00:94:ca: cd:36:1b:94:b5:d6:e9:ae:fa:c0:93:b0:65:ce:ad:a0:ac:9a: 3a:07:81:ae:34:2f:60:2e:b7:51:db:fe:b1:39:b6:e8:29:f5: a2:0e:ab:7e:f3:86:be:f8:e6:09:a1:6d:85:40:e0:74:ef:4f: 9e:4b:0e:79:90:a9:16:f3:c8:75:53:60:6b:ed:0c:29:87:9e: cb:d9:f5:0c:d1:1f:b5:65:36:44:41:10:44:7f:df:f2:6a:fb: f4:24:48:d7:9e:10:13:8d:18:2f:6c:49:2b:50:57:d8:d3:53: c1:23:69:e6:74:6c:47:c0:a9:52:0b:49:f2:32:35:d5:c2:54: 5a:3c:8c:cf:cb:ac:1e:9f:56:12:42:cd:f0:bc:4e:cf:e2:a4: 4c:9a:d0:54:ad:85:d9:62:c7:09:a9:e3:50:66:07:1b:90:b1: 76:ef:86:02:8e:e5:b9:a3:f8:cd:21:87:ae:35:0a:8c:52:e4: 59:14:62:d0:27:10:05:f5:1b:d1:39:39:01:4a:92:22:94:41: 52:7f:af:c5 -----BEGIN CERTIFICATE----- MIIFFjCCA/6gAwIBAgISAZgnfj3GuT9zXs3yIcjAJx4gMA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKDcyYjc4ZjY2ODJmYzM5YzU1YjQxZDQ4ZjgwYjg4MzhkNWQy ZGJmMDcwHhcNMjUwNzIwMTEwMDQxWhcNMjUwNzIxMTEwMDQxWjAzMTEwLwYDVQQD EygyOWFlNmQwZjViYWExYzgwZWZkODI2NTkwNTY3ZmFjODAyMjQ0NjRjMIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAsgVskvjSUn7dA/+OPxAbzxpR2GCI I9SodbBwhpS2QbXmphZgZXBWsJ3PRY1+V8Sa41ixP4OZLPyEewXmNWWiLYybCiOc J8Eh0zmopJ2rmgVI0XieIyKVRSF/9qwx88swSAnCCTPtJu+V3GvOY8sVuwYn3tmY z5ilPNw3FYh8WAkR72C6VvryXBEKU+jodf0JUcSgL2adOMuNnOMPAPWQ6vanNm5j claOyY2wuXCyoZY7n6bAnwNN8CFav+ZTUci4u1vbmETk7pNSNnUGzGZsRGqEDPdk K+RDXfGis1mGHozokRDufGlzKBrRYCe0MkDUubinm9s6K26d9eGO9ZgWtQIDAQAB o4ICIjCCAh4wHQYDVR0OBBYEFCmubQ9bqhyA79gmWQVn+sgCJEZMMB8GA1UdIwQY MBaAFHK3j2aC/DnFW0HUj4C4g41dLb8HMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvY3JlUFpvTDhPY1ZiUWRTUGdMaURqVjB0dndjLmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC9jYS8zYzRiOGEtYmZjNy00MWU5LTk5ZTEt ZjNlNTA2YWVhYTAxLzEvY3JlUFpvTDhPY1ZiUWRTUGdMaURqVjB0dndjLm1mdDCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC9jYS8zYzRiOGEtYmZjNy00MWU5LTk5ZTEtZjNlNTA2YWVhYTAx LzEvY3JlUFpvTDhPY1ZiUWRTUGdMaURqVjB0dndjLmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAXcQWtcoM y750A39UcUPPBE0WZMvLMy2RiC1jixNEi7PVWXoQ7/yjB8kOx3KNhr+n4Bc2AJTK zTYblLXW6a76wJOwZc6toKyaOgeBrjQvYC63Udv+sTm26Cn1og6rfvOGvvjmCaFt hUDgdO9PnksOeZCpFvPIdVNga+0MKYeey9n1DNEftWU2REEQRH/f8mr79CRI154Q E40YL2xJK1BX2NNTwSNp5nRsR8CpUgtJ8jI11cJUWjyMz8usHp9WEkLN8LxOz+Kk TJrQVK2F2WLHCanjUGYHG5Cxdu+GAo7luaP4zSGHrjUKjFLkWRRi0CcQBfUb0Tk5 AUqSIpRBUn+vxQ== -----END CERTIFICATE-----Generated at Sun Jul 20 14:08:56 2025 by rpki-client