$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/d0/1e04b8-1031-43f9-9667-8e6f878db5f4/1/71fC2dk6x8-bLxfKp4WbaYWzm50.mft File: 71fC2dk6x8-bLxfKp4WbaYWzm50.mft (raw, json) Hash identifier: yI9bTYKb4hXj1zkrJKMFy0TE553dgycxvr1DK/3cTqg= Subject key identifier: A0:CD:06:D4:14:12:EC:5F:4D:8C:9A:2F:A7:67:98:5A:19:BA:80:70 Authority key identifier: EF:57:C2:D9:D9:3A:C7:CF:9B:2F:17:CA:A7:85:9B:69:85:B3:9B:9D Certificate issuer: /CN=ef57c2d9d93ac7cf9b2f17caa7859b6985b39b9d Certificate serial: 019827EC95292218FF347910112359374EF5 Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/71fC2dk6x8-bLxfKp4WbaYWzm50.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/d0/1e04b8-1031-43f9-9667-8e6f878db5f4/1/71fC2dk6x8-bLxfKp4WbaYWzm50.mft Manifest number: 1228 Signing time: Sun 20 Jul 2025 13:01:12 +0000 Manifest this update: Sun 20 Jul 2025 13:01:12 +0000 Manifest next update: Mon 21 Jul 2025 13:01:12 +0000 Files and hashes: 1: 0SnEDSu2fch50mXfNCrgepjBXHI.roa (hash: An4Aho4+/IQv1xSA0visBRO6r1aot3IcatgSZ0mIirs=) 2: 71fC2dk6x8-bLxfKp4WbaYWzm50.crl (hash: y7AUVSfmkX3q/ad9hDtFPP54MB2CSfqg55+5Xuf+RKI=) 3: CFEprGG9zI2SPXEkfveiqcGkxys.roa (hash: zwoMXpp3WPmfn1e+WeBEAccAThpouC8C+SBbtldgA/c=) 4: RLjWAiBDW7OGzF_VcCkKg-SuzTE.roa (hash: DCBINTtLxKJQkC6BRMLb3TMqWlrNb5ZnwJro+/q+QhU=) 5: Xd2QaW60upMnqwQIBHXXIoPXPzs.roa (hash: +i6BQOs/QyU2pk+3pSoh+wtk4Cf+VFJXifr7WtqVoY4=) 6: ZWH5dik-57qT_VKYcibYh0fZMes.roa (hash: V4HyXcC7GD93JW+xBhzBdGWwVycZxFz98efL+J+3t6c=) 7: d3w3nqB5Kl-FSC0jSCG-gsD4dlY.roa (hash: 33QNQ+kF6mFEetO5Rno9ayPExXyzerB4sZWFH0Ulruk=) 8: kaXih0ftxLoxKevElyyNGY3Am90.roa (hash: VV+Kmbg3++xVZSuR6z9QplDGDyuGw9lzxK6+uDRXc2k=) 9: mMAwso5PyMiUkBDuP91mCU2ukBI.roa (hash: 8lAOzf9Ul80EHkivmkCJNmV8WShjC87n8hXocC2Jg4o=) 10: n8t1FbmmcHRL1T025PodTqR3IcA.roa (hash: 449VA6EYanQ2mGU5FM+jEwpoRl0iEuk30UHtcfYkgJs=) 11: rL6AzulHQOLcRfhqRrPdMX43AzM.roa (hash: /p4sN3vL44k5lwQiWwAvoayVUuPAubPMAhf99ERn0+c=) 12: xE9QBs_-I-okZvOErWXLkoKDqmk.roa (hash: PCh0aczn6Bj3Hiz+iIpjZK10Xg+FpiTDJMX+WibJh2o=) Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/d0/1e04b8-1031-43f9-9667-8e6f878db5f4/1/71fC2dk6x8-bLxfKp4WbaYWzm50.crl rsync://rpki.ripe.net/repository/DEFAULT/d0/1e04b8-1031-43f9-9667-8e6f878db5f4/1/71fC2dk6x8-bLxfKp4WbaYWzm50.mft rsync://rpki.ripe.net/repository/DEFAULT/71fC2dk6x8-bLxfKp4WbaYWzm50.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Mon 21 Jul 2025 13:00:25 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:98:27:ec:95:29:22:18:ff:34:79:10:11:23:59:37:4e:f5 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=ef57c2d9d93ac7cf9b2f17caa7859b6985b39b9d Validity Not Before: Jul 20 13:01:12 2025 GMT Not After : Jul 21 13:01:12 2025 GMT Subject: CN=a0cd06d41412ec5f4d8c9a2fa767985a19ba8070 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:b2:f6:f3:76:d5:8f:0b:3f:2b:f0:e8:c9:ea:67: a4:73:dc:47:81:d0:ce:7f:44:1a:58:e4:06:df:14: 6f:f6:dc:11:39:2b:eb:2a:46:a9:29:b3:2f:f7:28: 58:cf:81:9e:4b:80:e1:3f:b4:7b:40:c9:4e:97:07: 7e:dd:11:0a:b9:92:26:af:10:90:13:60:bc:71:8c: 4b:e1:83:66:6e:3a:56:ac:63:06:79:84:2d:25:b2: 66:e3:d1:2d:76:75:57:52:b4:f4:8a:ce:7a:0e:2a: df:af:0e:27:9f:8e:ed:41:62:36:54:e8:11:a1:08: a2:ed:f1:2c:96:69:2a:8d:2c:b4:9a:2f:ab:a3:67: 59:77:60:08:70:7d:b7:a1:d0:7d:70:66:8f:07:47: 8d:31:4a:5d:f0:0b:be:3c:a4:f3:ce:56:6b:fb:98: cc:e6:cd:aa:25:3a:cb:30:4c:fc:1b:76:0b:9c:69: 1f:8b:7e:ef:29:48:18:bb:e4:d3:44:93:f1:29:b1: 24:ed:bd:89:f3:5b:d7:a2:f0:24:83:27:3d:89:36: 06:51:f0:dc:2b:53:38:47:ea:d7:7f:4a:7c:f4:e2: 05:65:50:05:4e:d9:a4:c3:8e:9c:59:4b:2a:20:cf: eb:ef:17:7c:02:63:c8:d5:f9:7a:48:20:b3:f3:0a: c9:6b Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: A0:CD:06:D4:14:12:EC:5F:4D:8C:9A:2F:A7:67:98:5A:19:BA:80:70 X509v3 Authority Key Identifier: keyid:EF:57:C2:D9:D9:3A:C7:CF:9B:2F:17:CA:A7:85:9B:69:85:B3:9B:9D X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/71fC2dk6x8-bLxfKp4WbaYWzm50.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/d0/1e04b8-1031-43f9-9667-8e6f878db5f4/1/71fC2dk6x8-bLxfKp4WbaYWzm50.mft X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/d0/1e04b8-1031-43f9-9667-8e6f878db5f4/1/71fC2dk6x8-bLxfKp4WbaYWzm50.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 34:03:86:48:14:e5:02:f3:79:9e:08:ac:8c:8a:cd:4e:2f:d1: 8e:69:aa:90:da:94:39:7a:47:e2:79:00:39:aa:5c:bc:85:73: f8:7f:10:4b:a2:7c:17:33:80:4c:ce:31:84:c0:f0:92:57:64: b9:26:d2:ae:bc:5a:c3:a0:d6:cb:96:38:28:24:5e:69:2b:b2: 0b:de:94:34:dc:80:6a:46:b6:be:52:09:95:d8:98:b8:32:06: 2b:c6:ac:ef:eb:e6:11:e4:24:8b:4f:8b:59:34:9a:e6:f8:2c: dc:9e:67:fa:18:06:32:71:15:6e:10:72:3b:ec:81:a8:71:52: c9:06:d2:6b:16:2b:8e:f8:5e:c3:2b:60:99:b9:5b:89:a5:70: 0f:85:44:41:64:3c:2e:d8:b1:65:0c:eb:3f:42:ae:56:7b:fd: 9d:f7:f2:1e:61:ff:c2:cd:d4:ee:ac:83:5b:a8:74:12:a9:91: 6a:1b:3f:36:bc:b8:43:5e:2b:c7:e3:07:9f:c7:74:78:c3:95: 5b:95:c3:57:38:aa:85:24:a7:fc:7e:48:65:3c:b3:b4:a4:6e: 56:a3:4e:21:49:65:43:22:74:7d:8c:66:af:fe:d7:b2:c9:b6: c0:75:b7:a1:9e:e8:93:e6:bd:62:8f:b4:13:53:6a:7b:70:eb: 8f:25:14:98 -----BEGIN CERTIFICATE----- MIIFFjCCA/6gAwIBAgISAZgn7JUpIhj/NHkQESNZN071MA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKGVmNTdjMmQ5ZDkzYWM3Y2Y5YjJmMTdjYWE3ODU5YjY5ODVi MzliOWQwHhcNMjUwNzIwMTMwMTEyWhcNMjUwNzIxMTMwMTEyWjAzMTEwLwYDVQQD EyhhMGNkMDZkNDE0MTJlYzVmNGQ4YzlhMmZhNzY3OTg1YTE5YmE4MDcwMIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAsvbzdtWPCz8r8OjJ6mekc9xHgdDO f0QaWOQG3xRv9twROSvrKkapKbMv9yhYz4GeS4DhP7R7QMlOlwd+3REKuZImrxCQ E2C8cYxL4YNmbjpWrGMGeYQtJbJm49EtdnVXUrT0is56Dirfrw4nn47tQWI2VOgR oQii7fEslmkqjSy0mi+ro2dZd2AIcH23odB9cGaPB0eNMUpd8Au+PKTzzlZr+5jM 5s2qJTrLMEz8G3YLnGkfi37vKUgYu+TTRJPxKbEk7b2J81vXovAkgyc9iTYGUfDc K1M4R+rXf0p89OIFZVAFTtmkw46cWUsqIM/r7xd8AmPI1fl6SCCz8wrJawIDAQAB o4ICIjCCAh4wHQYDVR0OBBYEFKDNBtQUEuxfTYyaL6dnmFoZuoBwMB8GA1UdIwQY MBaAFO9XwtnZOsfPmy8XyqeFm2mFs5udMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvNzFmQzJkazZ4OC1iTHhmS3A0V2JhWVd6bTUwLmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC9kMC8xZTA0YjgtMTAzMS00M2Y5LTk2Njct OGU2Zjg3OGRiNWY0LzEvNzFmQzJkazZ4OC1iTHhmS3A0V2JhWVd6bTUwLm1mdDCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC9kMC8xZTA0YjgtMTAzMS00M2Y5LTk2NjctOGU2Zjg3OGRiNWY0 LzEvNzFmQzJkazZ4OC1iTHhmS3A0V2JhWVd6bTUwLmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEANAOGSBTl AvN5ngisjIrNTi/RjmmqkNqUOXpH4nkAOapcvIVz+H8QS6J8FzOATM4xhMDwkldk uSbSrrxaw6DWy5Y4KCReaSuyC96UNNyAaka2vlIJldiYuDIGK8as7+vmEeQki0+L WTSa5vgs3J5n+hgGMnEVbhByO+yBqHFSyQbSaxYrjvhewytgmblbiaVwD4VEQWQ8 LtixZQzrP0KuVnv9nffyHmH/ws3U7qyDW6h0EqmRahs/Nry4Q14rx+MHn8d0eMOV W5XDVziqhSSn/H5IZTyztKRuVqNOIUllQyJ0fYxmr/7Xssm2wHW3oZ7ok+a9Yo+0 E1Nqe3DrjyUUmA== -----END CERTIFICATE-----Generated at Sun Jul 20 20:12:26 2025 by rpki-client