$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/de/f2bd6c-4843-4ead-aa09-3c16ff841ab2/1/b8UNDUIGe3arGi6OUz_4SbZdVvU.mft File: b8UNDUIGe3arGi6OUz_4SbZdVvU.mft (raw, json) Hash identifier: 7bBcdBxW+nWPW0zfniiTu1phuYRMeuVtaekqBvSnY1E= Subject key identifier: 35:30:FD:27:CD:48:58:5E:B7:08:EA:38:3C:31:0B:3D:69:D8:54:4B Authority key identifier: 6F:C5:0D:0D:42:06:7B:76:AB:1A:2E:8E:53:3F:F8:49:B6:5D:56:F5 Certificate issuer: /CN=6fc50d0d42067b76ab1a2e8e533ff849b65d56f5 Certificate serial: 01983BA943224DA6BDFB6E8E45D81892053B Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/b8UNDUIGe3arGi6OUz_4SbZdVvU.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/de/f2bd6c-4843-4ead-aa09-3c16ff841ab2/1/b8UNDUIGe3arGi6OUz_4SbZdVvU.mft Manifest number: 1622 Signing time: Thu 24 Jul 2025 09:00:05 +0000 Manifest this update: Thu 24 Jul 2025 09:00:05 +0000 Manifest next update: Fri 25 Jul 2025 09:00:05 +0000 Files and hashes: 1: 0Abj6PSR4FyJUqM6LoN6KFa-26E.roa (hash: 3N4/akmiC/u7gL1HF+D/mYuikLJRGoPmYVruDqzajtA=) 2: 1-HYjW61poyKPMhvfx7U4CngkbXQ.roa (hash: FgaQ7pllPxrtYs+K7a4T0YujtsmGhQlX0nAW+eszuLQ=) 3: 1X78ozO3_5ULJTTX4ARholYkMtY.roa (hash: 1YfjPO55+mmSYnYEpQNn/8Y7Ymp0JTDMtIPTDKYWHh8=) 4: 3yeC5jM2ksuqKR2Zh5IvhgGT7kM.roa (hash: aly6yVEpJfsikwPOCEOA8sYqzyulJ58cobvGMlp3Pfc=) 5: ESsRo9MaF3o9GqzJvXZpu73We6Y.roa (hash: UaGHPYsyEVFFkrfNGoMdaOZN1uzCFEON6PTFyG+oUvY=) 6: H6AhUHbx8OlryRkBD15AK_97AFI.roa (hash: aVuSxMtEE3jtCIFUPkZzKs9s0u5aGihLcG9skQiW4iU=) 7: IE5Ot6kXSpSm_XTJaCWCEcClZ1E.roa (hash: ecVDNUR7HlsILjWVcvUtVx/095hxRc4P38CIzJWANj8=) 8: K8brr-FPsMEnGF0kbZo88qS6lTk.roa (hash: qW/T11RMV283PJtyNsGcccWeoOYrXus8SlIyII3hPJA=) 9: OQtVR-cBTyQL6VvIXAOtawOW2cA.roa (hash: Y4JxghrLsZ564AFIbmlJP5QHypmTlarb7NM9FNTmN7A=) 10: RzzP2UDDSAPrZWNFm6aBz91iMgQ.roa (hash: 1RDkfiEzt2ZEB4LXorNIAFk4fcDKeMEBcQ7w1edzRtU=) 11: UND6ykiM5N2Whk6faH2bgr5_Tp8.roa (hash: 5dH/g9DexAH0bhxx/mr0h3rPJ5N5miOI47JiKbqWBiU=) 12: XKHgN2jT3_6QMfOgHKrS1JlPtdM.roa (hash: 0/lku7LnO6lIZwW3HNYBW2LCc3aSui+jPA3GCkogDfQ=) 13: b8UNDUIGe3arGi6OUz_4SbZdVvU.crl (hash: pNDlqCnoEXseXFg3ltElNEg0uJQj5TIVIBmVikPvqE8=) 14: hz97jgo9bqt0uT-ArAt9KzOXsP4.roa (hash: bhze+d6pD3xd6tpzBiM9HUGCjaef6tJylvnHETr5GxE=) 15: iNYkqcS0PNGby4-GJu8UVMQggRY.roa (hash: nyGk+qZgZIHoVA2y4TNTNY21X6xYGa600Okb1SMJu44=) 16: wEFBReYub_TeCbtnkjQHEDS6zaQ.roa (hash: 5e2lfQsxA6BsgP6dDtPIK0Ql9foij6lPOeMn2Q1JhkI=) Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/de/f2bd6c-4843-4ead-aa09-3c16ff841ab2/1/b8UNDUIGe3arGi6OUz_4SbZdVvU.crl rsync://rpki.ripe.net/repository/DEFAULT/de/f2bd6c-4843-4ead-aa09-3c16ff841ab2/1/b8UNDUIGe3arGi6OUz_4SbZdVvU.mft rsync://rpki.ripe.net/repository/DEFAULT/b8UNDUIGe3arGi6OUz_4SbZdVvU.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Fri 25 Jul 2025 08:00:05 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:98:3b:a9:43:22:4d:a6:bd:fb:6e:8e:45:d8:18:92:05:3b Signature Algorithm: sha256WithRSAEncryption Issuer: CN=6fc50d0d42067b76ab1a2e8e533ff849b65d56f5 Validity Not Before: Jul 24 09:00:05 2025 GMT Not After : Jul 25 09:00:05 2025 GMT Subject: CN=3530fd27cd48585eb708ea383c310b3d69d8544b Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:b7:af:de:4f:6e:9a:23:f5:3a:73:48:f3:8d:97: 21:b4:d8:6d:86:46:40:01:87:9e:0d:fa:93:23:67: 49:86:ba:70:f6:86:b4:9c:1f:44:0f:7e:de:7b:c1: 20:91:d4:b3:ad:93:46:5a:3b:65:be:6c:c6:eb:55: 7a:78:58:90:a9:7d:68:93:d1:70:39:38:b6:89:13: 72:3d:a6:1d:05:99:66:6a:25:63:05:16:25:8e:f9: cf:16:0a:0b:5f:41:67:59:c9:b5:0b:04:7c:f1:5e: f7:37:b9:a2:8f:97:5e:58:18:75:8d:22:7f:a0:01: aa:5b:5f:fc:53:15:10:76:5a:21:00:7a:35:5d:f9: 9b:ab:e5:51:9b:5c:95:85:1a:77:cb:6d:58:46:1f: 9f:64:75:57:1c:3f:3b:ce:f4:a0:8e:8f:c8:d8:08: 86:c9:4a:a7:31:dc:b8:2f:73:1c:15:45:17:cd:5f: de:8f:c1:c0:34:98:21:48:37:e9:3a:2a:5e:b1:7c: 60:df:b3:6e:65:04:fa:c7:4e:2f:29:c4:ee:43:1b: d5:49:1b:86:61:91:59:8b:7f:1e:37:51:8c:83:99: a9:15:d2:28:20:4f:15:d3:83:4a:c4:a1:d0:51:54: 69:6e:2d:38:ef:0f:5d:55:3a:f6:ac:00:ee:a3:71: 47:4d Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 35:30:FD:27:CD:48:58:5E:B7:08:EA:38:3C:31:0B:3D:69:D8:54:4B X509v3 Authority Key Identifier: keyid:6F:C5:0D:0D:42:06:7B:76:AB:1A:2E:8E:53:3F:F8:49:B6:5D:56:F5 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/b8UNDUIGe3arGi6OUz_4SbZdVvU.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/de/f2bd6c-4843-4ead-aa09-3c16ff841ab2/1/b8UNDUIGe3arGi6OUz_4SbZdVvU.mft X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/de/f2bd6c-4843-4ead-aa09-3c16ff841ab2/1/b8UNDUIGe3arGi6OUz_4SbZdVvU.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 97:02:c5:09:d0:e3:b7:74:e8:a3:94:63:43:cc:fb:c5:13:38: 4c:00:a8:c5:63:1d:51:f1:fd:f6:0e:d0:39:e6:bc:a3:26:c8: f2:dd:3e:67:7f:69:c5:ad:84:75:4c:5d:3d:9b:2d:94:11:a8: 12:50:00:ab:31:ac:20:08:6f:50:a7:bb:b3:02:c1:9e:de:20: c0:5a:ff:67:a9:15:7a:bd:61:3d:93:07:53:d6:60:a6:3b:ae: b2:58:3a:40:d9:a6:89:b7:3a:be:06:cb:bb:db:cf:5a:c1:2e: 8e:01:af:df:6c:f8:51:0f:cb:64:be:fd:13:cc:3b:28:40:df: 9f:d6:f2:70:13:a7:96:1b:e1:7e:7f:d7:6d:e2:8c:a9:31:3f: d8:34:fa:9c:17:b0:4e:12:02:00:19:92:b1:dc:82:92:a2:6b: d1:dd:30:fe:f4:98:ee:cf:11:ec:51:81:1d:0d:8d:e0:2d:45: 38:0d:8a:b0:ce:6c:5b:e0:c7:2d:79:e5:94:0b:af:f5:69:80: 5d:3f:1b:f1:03:5e:d1:31:04:02:78:a3:48:a6:43:b9:5c:96: 9b:68:17:54:1c:21:06:d5:ff:45:02:50:18:12:83:12:bf:80: 7d:5d:14:c2:5b:ee:df:34:9a:0c:8f:ac:c7:6d:1b:9e:24:72: 22:d4:6e:1d -----BEGIN CERTIFICATE----- MIIFFjCCA/6gAwIBAgISAZg7qUMiTaa9+26ORdgYkgU7MA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKDZmYzUwZDBkNDIwNjdiNzZhYjFhMmU4ZTUzM2ZmODQ5YjY1 ZDU2ZjUwHhcNMjUwNzI0MDkwMDA1WhcNMjUwNzI1MDkwMDA1WjAzMTEwLwYDVQQD EygzNTMwZmQyN2NkNDg1ODVlYjcwOGVhMzgzYzMxMGIzZDY5ZDg1NDRiMIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAt6/eT26aI/U6c0jzjZchtNhthkZA AYeeDfqTI2dJhrpw9oa0nB9ED37ee8EgkdSzrZNGWjtlvmzG61V6eFiQqX1ok9Fw OTi2iRNyPaYdBZlmaiVjBRYljvnPFgoLX0FnWcm1CwR88V73N7mij5deWBh1jSJ/ oAGqW1/8UxUQdlohAHo1Xfmbq+VRm1yVhRp3y21YRh+fZHVXHD87zvSgjo/I2AiG yUqnMdy4L3McFUUXzV/ej8HANJghSDfpOipesXxg37NuZQT6x04vKcTuQxvVSRuG YZFZi38eN1GMg5mpFdIoIE8V04NKxKHQUVRpbi047w9dVTr2rADuo3FHTQIDAQAB o4ICIjCCAh4wHQYDVR0OBBYEFDUw/SfNSFhetwjqODwxCz1p2FRLMB8GA1UdIwQY MBaAFG/FDQ1CBnt2qxoujlM/+Em2XVb1MA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvYjhVTkRVSUdlM2FyR2k2T1V6XzRTYlpkVnZVLmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC9kZS9mMmJkNmMtNDg0My00ZWFkLWFhMDkt M2MxNmZmODQxYWIyLzEvYjhVTkRVSUdlM2FyR2k2T1V6XzRTYlpkVnZVLm1mdDCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC9kZS9mMmJkNmMtNDg0My00ZWFkLWFhMDktM2MxNmZmODQxYWIy LzEvYjhVTkRVSUdlM2FyR2k2T1V6XzRTYlpkVnZVLmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAlwLFCdDj t3Too5RjQ8z7xRM4TACoxWMdUfH99g7QOea8oybI8t0+Z39pxa2EdUxdPZstlBGo ElAAqzGsIAhvUKe7swLBnt4gwFr/Z6kVer1hPZMHU9Zgpjuuslg6QNmmibc6vgbL u9vPWsEujgGv32z4UQ/LZL79E8w7KEDfn9bycBOnlhvhfn/XbeKMqTE/2DT6nBew ThICABmSsdyCkqJr0d0w/vSY7s8R7FGBHQ2N4C1FOA2KsM5sW+DHLXnllAuv9WmA XT8b8QNe0TEEAnijSKZDuVyWm2gXVBwhBtX/RQJQGBKDEr+AfV0Uwlvu3zSaDI+s x20bniRyItRuHQ== -----END CERTIFICATE-----Generated at Thu Jul 24 11:54:37 2025 by rpki-client