$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/cc/051fa2-c580-4a02-a186-e69f7a5d2d90/1/8P8sYimvdjqZ9TSaMlEN9KRSYUM.mft File: 8P8sYimvdjqZ9TSaMlEN9KRSYUM.mft (raw, json) Hash identifier: IWie9PXuxOP1VRAaI5Ufnw9ZhRgO5YVk0KMsD/80NUM= Subject key identifier: FE:46:01:92:FB:CD:29:4C:F5:A4:07:03:AB:FE:71:01:E4:9F:BD:32 Authority key identifier: F0:FF:2C:62:29:AF:76:3A:99:F5:34:9A:32:51:0D:F4:A4:52:61:43 Certificate issuer: /CN=f0ff2c6229af763a99f5349a32510df4a4526143 Certificate serial: 0198451A619A1691A098C188D476F3A05EF8 Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/8P8sYimvdjqZ9TSaMlEN9KRSYUM.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/cc/051fa2-c580-4a02-a186-e69f7a5d2d90/1/8P8sYimvdjqZ9TSaMlEN9KRSYUM.mft Manifest number: 1603 Signing time: Sat 26 Jul 2025 05:00:13 +0000 Manifest this update: Sat 26 Jul 2025 05:00:13 +0000 Manifest next update: Sun 27 Jul 2025 05:00:13 +0000 Files and hashes: 1: 00x2a7vYcUP_RgzqZlJDShLq9Do.roa (hash: cq08qt5t6pt7+g4zB6xtHZuctjeJqy9pw/L/lk8TYFo=) 2: 8P8sYimvdjqZ9TSaMlEN9KRSYUM.crl (hash: qcd8h5Tj1229o7PVZU973TZHhIDKdn8ePRvM3VRmf2A=) 3: KVMzJG-tiBiXKGfDbX7s-fqSUcs.roa (hash: izdiO/l04uY0Tl9GP7xbaa4HsWMYkrOgbs0SiG0a1K8=) 4: OBC2jp5FIHT7G9c2m1xsJUD2ivs.roa (hash: DrwuyysosoB70lBjSllnHo3rVU0U0NusilzO8tRi9Q0=) 5: OxF-ngX6YGUArZrbAYmh9hpGzkU.roa (hash: zhEaR7GNPbf+2lOaH8uFUPJFKzbpuLS5x4CvU7dkxPs=) 6: Q2Pg2GNHELVKyFoNgxOuT8YFvLY.roa (hash: DsyRU7FSw+3XDKbBM9HrtgkzYSVPnqWwqknbD6CWVSU=) 7: RO-InVXPYoHaB1ZpM-19yr94dQs.roa (hash: 8Y6VcUcgO4alufdIJ4djN2KAnB4AyYetp1VZzDDuyNk=) 8: TbcAJ-7kgZbLEMeBArn-aI2s0Oc.roa (hash: ebCgIhbDpPxtlRtDjitUarjC0W1nxe0ujpocy11Koxs=) 9: _gM5SG_4QQqKocZtcQPCR80SAmI.roa (hash: ee8TJS3VrEj5YXrt15hISXpN3dVXM3P5ROyjlVEMHSs=) 10: fG6If6WZh4pXAVRu1gEQ7wbPbEs.roa (hash: OIBSpF8oXZotrR8RVX6KacBPnJZCoNiFLIZ7aWyayQU=) 11: gfQeyx6Q7sjS4Xpny9IUQ8tQxLY.roa (hash: zrq/geD7ajZHxMLm7OvFbnGGXeIS14GfMNfAscurlR8=) Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/cc/051fa2-c580-4a02-a186-e69f7a5d2d90/1/8P8sYimvdjqZ9TSaMlEN9KRSYUM.crl rsync://rpki.ripe.net/repository/DEFAULT/cc/051fa2-c580-4a02-a186-e69f7a5d2d90/1/8P8sYimvdjqZ9TSaMlEN9KRSYUM.mft rsync://rpki.ripe.net/repository/DEFAULT/8P8sYimvdjqZ9TSaMlEN9KRSYUM.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Sun 27 Jul 2025 02:00:05 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:98:45:1a:61:9a:16:91:a0:98:c1:88:d4:76:f3:a0:5e:f8 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=f0ff2c6229af763a99f5349a32510df4a4526143 Validity Not Before: Jul 26 05:00:13 2025 GMT Not After : Jul 27 05:00:13 2025 GMT Subject: CN=fe460192fbcd294cf5a40703abfe7101e49fbd32 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:c7:a0:dc:53:49:3c:ec:c3:65:7b:4f:a5:3a:5b: 6b:61:34:99:bb:75:7a:d7:7f:96:05:d5:5d:6e:26: cc:6a:c9:ea:63:95:6f:e7:96:66:2d:64:19:cb:bb: 57:8c:19:d3:8d:b2:34:b8:2b:43:9f:f3:58:14:67: 62:e6:55:8f:68:b7:72:41:4a:1e:9e:45:ab:6c:30: aa:9d:ef:13:bc:8d:41:08:2a:18:aa:62:91:95:5e: b3:3a:5a:6e:39:97:f4:01:d2:63:64:23:11:7d:4f: 6c:69:d3:c9:c9:05:27:67:23:46:95:8b:28:84:3c: d5:14:18:31:44:ff:2f:29:44:6e:6b:bd:51:0c:fa: 3e:ce:3d:d1:1e:38:fa:8f:a4:6b:72:f3:16:10:4f: 74:56:8e:ed:3f:af:78:5d:c9:b3:91:8b:90:82:92: f2:4c:95:eb:fc:5f:7d:4e:14:a3:e8:e4:20:d5:41: 9c:44:46:61:16:f5:8e:94:05:bf:71:60:43:04:ca: 37:2d:52:c5:a7:8f:a2:24:a7:cc:3b:53:87:38:4e: cd:3e:81:c8:39:84:ce:11:e4:61:96:6c:9f:2b:d3: eb:d6:12:b5:e5:0a:b7:5a:91:4d:02:57:26:6b:ac: d5:90:be:bd:71:82:be:f8:30:96:97:68:77:91:ba: e0:ab Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: FE:46:01:92:FB:CD:29:4C:F5:A4:07:03:AB:FE:71:01:E4:9F:BD:32 X509v3 Authority Key Identifier: keyid:F0:FF:2C:62:29:AF:76:3A:99:F5:34:9A:32:51:0D:F4:A4:52:61:43 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/8P8sYimvdjqZ9TSaMlEN9KRSYUM.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/cc/051fa2-c580-4a02-a186-e69f7a5d2d90/1/8P8sYimvdjqZ9TSaMlEN9KRSYUM.mft X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/cc/051fa2-c580-4a02-a186-e69f7a5d2d90/1/8P8sYimvdjqZ9TSaMlEN9KRSYUM.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 29:50:39:6a:a2:2c:e2:ba:70:23:5e:40:e2:2f:0d:43:ac:c1: 02:e6:1e:57:ab:3d:ae:0e:c8:2f:15:29:b9:e4:5b:a6:0e:03: e6:ea:f4:ef:17:dd:01:41:c3:09:4d:20:a6:86:72:d5:df:ec: c0:a5:6a:3a:04:1e:57:9d:23:e0:24:7f:ea:9f:bb:1c:e7:c2: 7b:c0:f5:0c:af:a4:98:67:ca:fe:07:1a:c9:1c:7a:0b:16:d4: b7:9e:a0:ad:9f:21:ed:0d:96:a1:de:e0:8b:7c:1f:96:e9:f8: 14:33:5d:4c:3e:4e:f5:d2:c0:a6:df:3a:b7:9a:46:7c:cf:b2: 77:70:72:58:b6:85:37:f3:27:88:d1:70:c6:9d:31:c8:24:5c: dc:74:39:d6:49:60:e4:13:24:bf:e9:a0:25:b5:e8:d1:a1:2a: 18:c0:4b:60:ee:f9:f7:87:d9:47:5c:4a:77:c5:64:10:85:fe: 06:d8:0d:50:ec:69:9c:2e:da:93:1a:a1:19:9a:76:61:5d:2d: 43:8b:e6:91:24:3f:f1:ca:93:ff:c2:d0:39:0a:a4:4a:71:1f: 07:b7:88:92:59:67:30:b8:81:80:7f:90:64:92:e9:57:3f:d6: 2f:94:48:a9:08:54:a8:e2:aa:ce:7d:f6:4d:66:5c:7a:a7:ce: e3:02:18:78 -----BEGIN CERTIFICATE----- MIIFFjCCA/6gAwIBAgISAZhFGmGaFpGgmMGI1HbzoF74MA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKGYwZmYyYzYyMjlhZjc2M2E5OWY1MzQ5YTMyNTEwZGY0YTQ1 MjYxNDMwHhcNMjUwNzI2MDUwMDEzWhcNMjUwNzI3MDUwMDEzWjAzMTEwLwYDVQQD EyhmZTQ2MDE5MmZiY2QyOTRjZjVhNDA3MDNhYmZlNzEwMWU0OWZiZDMyMIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAx6DcU0k87MNle0+lOltrYTSZu3V6 13+WBdVdbibMasnqY5Vv55ZmLWQZy7tXjBnTjbI0uCtDn/NYFGdi5lWPaLdyQUoe nkWrbDCqne8TvI1BCCoYqmKRlV6zOlpuOZf0AdJjZCMRfU9sadPJyQUnZyNGlYso hDzVFBgxRP8vKURua71RDPo+zj3RHjj6j6RrcvMWEE90Vo7tP694XcmzkYuQgpLy TJXr/F99ThSj6OQg1UGcREZhFvWOlAW/cWBDBMo3LVLFp4+iJKfMO1OHOE7NPoHI OYTOEeRhlmyfK9Pr1hK15Qq3WpFNAlcma6zVkL69cYK++DCWl2h3kbrgqwIDAQAB o4ICIjCCAh4wHQYDVR0OBBYEFP5GAZL7zSlM9aQHA6v+cQHkn70yMB8GA1UdIwQY MBaAFPD/LGIpr3Y6mfU0mjJRDfSkUmFDMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvOFA4c1lpbXZkanFaOVRTYU1sRU45S1JTWVVNLmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC9jYy8wNTFmYTItYzU4MC00YTAyLWExODYt ZTY5ZjdhNWQyZDkwLzEvOFA4c1lpbXZkanFaOVRTYU1sRU45S1JTWVVNLm1mdDCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC9jYy8wNTFmYTItYzU4MC00YTAyLWExODYtZTY5ZjdhNWQyZDkw LzEvOFA4c1lpbXZkanFaOVRTYU1sRU45S1JTWVVNLmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAKVA5aqIs 4rpwI15A4i8NQ6zBAuYeV6s9rg7ILxUpueRbpg4D5ur07xfdAUHDCU0gpoZy1d/s wKVqOgQeV50j4CR/6p+7HOfCe8D1DK+kmGfK/gcayRx6CxbUt56grZ8h7Q2Wod7g i3wflun4FDNdTD5O9dLApt86t5pGfM+yd3ByWLaFN/MniNFwxp0xyCRc3HQ51klg 5BMkv+mgJbXo0aEqGMBLYO7594fZR1xKd8VkEIX+BtgNUOxpnC7akxqhGZp2YV0t Q4vmkSQ/8cqT/8LQOQqkSnEfB7eIkllnMLiBgH+QZJLpVz/WL5RIqQhUqOKqzn32 TWZceqfO4wIYeA== -----END CERTIFICATE-----Generated at Sat Jul 26 11:05:19 2025 by rpki-client