$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/df/01058a-4a82-4818-972d-842858122bbc/1/RklSvBZUQexuLiAQyTPcgw82FzE.mft File: RklSvBZUQexuLiAQyTPcgw82FzE.mft (raw, json) Hash identifier: Oie5kJRtCAMr3eKqVRKdNLUrT0jwAvGsUBkJJJajPeg= Subject key identifier: B8:A4:24:63:6A:28:41:ED:8D:88:84:5D:CE:3B:9A:69:85:2E:19:0D Authority key identifier: 46:49:52:BC:16:54:41:EC:6E:2E:20:10:C9:33:DC:83:0F:36:17:31 Certificate issuer: /CN=464952bc165441ec6e2e2010c933dc830f361731 Certificate serial: 01984A7833A6E11F6A96D75E5D57B1816994 Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/RklSvBZUQexuLiAQyTPcgw82FzE.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/df/01058a-4a82-4818-972d-842858122bbc/1/RklSvBZUQexuLiAQyTPcgw82FzE.mft Manifest number: 09AB Signing time: Sun 27 Jul 2025 06:00:48 +0000 Manifest this update: Sun 27 Jul 2025 06:00:48 +0000 Manifest next update: Mon 28 Jul 2025 06:00:48 +0000 Files and hashes: 1: 7HWHA8UqwHtsqDMBW-DwrAaDDjM.roa (hash: e8s5o0udkcNi/3gr4/Pby8a6BORkIl6Tk5BcUgdqf98=) 2: 8ZU3bGrm9xWhwMuNBNg_sVSf78w.roa (hash: q1BAPF4hVnnZILV3v3GzNcOP1nX7SZBYfnbCOVjjzwo=) 3: 9-Cs-wlSKolkQOZlHuZ6o38xnW8.roa (hash: /LvilRmKOS6giT5Dw0+bvBLFwH/Vk7jUGiOc4qBQkvY=) 4: CH-MNJ62x7kM2_t2iuWi-Pl441k.roa (hash: HaFXnQzr7MPgH+K0peJzoRzHcSdMpsIno7S1dDVTYls=) 5: F93HK3zZbjyanEiJSO9cArJniew.roa (hash: wrh+x7Klvcmq0ZMqoDo7aM3datdsQCypsCC/kWY8BG4=) 6: RklSvBZUQexuLiAQyTPcgw82FzE.crl (hash: eB2+VtI+YHvxZhwGjNOBlJEBy6MnFtcfMTNvuvk77Mo=) 7: RocZhE1Sgw4wWmm8LnKO4d7f68w.roa (hash: +rys+d7y9dD2VIYL252iXtWKGL/n4lME4L1WtriVBxI=) 8: U47Wz_LD2xLJywbdswHmPzRJpDo.roa (hash: qCq8pw/dLAXcMlcPqPaGHxhAYIuN8gInNQEcnd7HSIs=) 9: cSOzcJuJznyp0-yCo16vcwC-SO4.roa (hash: /BcpV3CpFg+yHnaLyG3CeUoFmA/RLptEV35Vt1SRJwQ=) 10: g8u27N4QItUirByGNIpicNOy82Y.roa (hash: 86XD7A3oPGKMoD9IAzlfVhw0nOpZrI3Tfibq7N31K6c=) 11: iH3j8qY1-071YfTwOblznlAQw6s.roa (hash: yME8emyVjusbrBjqemdlgI+CwPOa3VlHZpR5ZeMxUWc=) 12: mGSm6WnPN8htR3E3SqRmvrkDAW0.roa (hash: ma8SoOibhRfVHVvLv4aSGOKoznJfyTFPs8hixxk0hN8=) 13: o8lbHUF5p8P0LSI1V6iY7jMTuTg.roa (hash: ZQCfB91uZ1JZ71d13fCWoNRsNQvDiuAzDxXdM3rVpoo=) 14: ryDPDikJ1i_zY_ss9G41qhvN3jc.roa (hash: h94vj7TMlIg5ainHE5mYHmcUUj3Q1WNeWVzGbaI/3Fg=) 15: s34gFp_Dg8YCv8xU55YOYuR_tp0.roa (hash: 6OSop7WtLWi7lLLdg7yDCXvjXq4AkQqEA6GX04GSf58=) Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/df/01058a-4a82-4818-972d-842858122bbc/1/RklSvBZUQexuLiAQyTPcgw82FzE.crl rsync://rpki.ripe.net/repository/DEFAULT/df/01058a-4a82-4818-972d-842858122bbc/1/RklSvBZUQexuLiAQyTPcgw82FzE.mft rsync://rpki.ripe.net/repository/DEFAULT/RklSvBZUQexuLiAQyTPcgw82FzE.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Mon 28 Jul 2025 05:00:04 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:98:4a:78:33:a6:e1:1f:6a:96:d7:5e:5d:57:b1:81:69:94 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=464952bc165441ec6e2e2010c933dc830f361731 Validity Not Before: Jul 27 06:00:48 2025 GMT Not After : Jul 28 06:00:48 2025 GMT Subject: CN=b8a424636a2841ed8d88845dce3b9a69852e190d Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:b3:66:27:06:6c:32:fe:71:73:52:7a:ea:9d:17: c6:8c:e3:97:fe:c5:f5:2f:eb:8a:d8:34:91:9b:30: 2d:b0:2f:99:38:6a:5c:c7:32:c7:a2:67:a3:c2:d3: 47:91:4b:fc:30:2b:18:04:00:ec:2f:73:ce:f1:f0: 58:66:7f:a6:c0:79:4f:fc:8a:e6:45:b5:31:af:5f: 27:a9:2d:6f:cf:4d:b1:f4:d1:0d:fa:68:00:1e:fa: c7:95:1d:57:dd:a7:d9:0e:e1:4a:0f:f9:56:7f:12: 7a:97:63:ac:93:3c:f6:5d:7c:a8:c7:8e:9e:5a:14: d4:94:10:8f:a6:1c:a5:2c:e5:cf:2c:53:e0:07:62: 65:a0:f6:d8:dc:bb:0d:e9:db:61:6a:45:e3:d4:f4: 43:31:e3:5e:c8:32:f5:b0:80:a1:1e:29:6e:c5:cb: 1b:ea:b1:72:e3:63:d7:71:ff:f8:b7:ee:e1:f1:7c: 3f:c5:dd:60:eb:c2:e9:52:34:6c:ac:b5:c4:20:e7: 0c:83:f7:e9:e5:13:23:97:95:28:88:6c:c6:9e:ff: ed:d4:a5:1a:9d:47:cc:3a:74:97:59:ba:f6:f3:cd: cf:85:90:20:93:53:73:a0:d7:aa:56:9e:c8:5b:c7: 5c:bb:55:a9:64:b1:ba:36:5c:a3:b5:61:ee:ab:32: 60:ed Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: B8:A4:24:63:6A:28:41:ED:8D:88:84:5D:CE:3B:9A:69:85:2E:19:0D X509v3 Authority Key Identifier: keyid:46:49:52:BC:16:54:41:EC:6E:2E:20:10:C9:33:DC:83:0F:36:17:31 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/RklSvBZUQexuLiAQyTPcgw82FzE.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/df/01058a-4a82-4818-972d-842858122bbc/1/RklSvBZUQexuLiAQyTPcgw82FzE.mft X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/df/01058a-4a82-4818-972d-842858122bbc/1/RklSvBZUQexuLiAQyTPcgw82FzE.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 4c:70:09:67:57:d9:12:ac:a9:2c:54:6b:a0:92:1a:ce:46:67: 3d:a8:bb:fe:7b:49:b0:37:c3:6a:eb:99:13:5b:7e:39:1b:b6: ab:e9:a5:f9:87:8e:5d:be:25:b1:19:66:82:dd:7b:1b:f5:72: 04:4a:e5:4e:15:aa:f3:53:5a:02:56:c3:f2:a6:d8:2d:34:8c: f9:00:62:c5:1c:51:54:b9:e7:8c:13:51:a6:da:a1:4f:35:64: 6a:de:da:62:58:07:f8:34:ce:db:6c:a2:3b:85:c8:84:20:57: f6:74:2e:9c:b6:3f:ca:28:bc:8f:2a:dc:05:8a:81:d6:08:c1: 9a:26:7b:14:f8:42:09:b8:ae:45:5c:56:5a:a6:4d:90:79:b7: 88:25:4a:42:d0:46:79:ca:1c:f7:aa:b2:88:c5:9d:90:0b:d3: 2a:d6:3f:2d:cf:40:95:8d:ef:e7:e9:4f:2f:56:89:2a:08:39: 3d:fe:5f:0d:61:e4:a6:b8:e7:56:14:d5:93:ee:41:ab:88:3b: 06:3b:4b:e0:bf:75:68:33:19:2b:9b:d7:75:82:13:02:08:d7: e8:ea:2c:6e:3f:44:c1:48:6e:51:8d:8c:fd:e3:df:d4:78:0e: f6:44:1c:ae:79:50:2d:1f:e7:61:a8:94:1d:07:ce:af:c7:98: 63:4d:e5:2c -----BEGIN CERTIFICATE----- MIIFFjCCA/6gAwIBAgISAZhKeDOm4R9qltdeXVexgWmUMA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKDQ2NDk1MmJjMTY1NDQxZWM2ZTJlMjAxMGM5MzNkYzgzMGYz NjE3MzEwHhcNMjUwNzI3MDYwMDQ4WhcNMjUwNzI4MDYwMDQ4WjAzMTEwLwYDVQQD EyhiOGE0MjQ2MzZhMjg0MWVkOGQ4ODg0NWRjZTNiOWE2OTg1MmUxOTBkMIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAs2YnBmwy/nFzUnrqnRfGjOOX/sX1 L+uK2DSRmzAtsC+ZOGpcxzLHomejwtNHkUv8MCsYBADsL3PO8fBYZn+mwHlP/Irm RbUxr18nqS1vz02x9NEN+mgAHvrHlR1X3afZDuFKD/lWfxJ6l2Oskzz2XXyox46e WhTUlBCPphylLOXPLFPgB2JloPbY3LsN6dthakXj1PRDMeNeyDL1sIChHiluxcsb 6rFy42PXcf/4t+7h8Xw/xd1g68LpUjRsrLXEIOcMg/fp5RMjl5UoiGzGnv/t1KUa nUfMOnSXWbr2883PhZAgk1NzoNeqVp7IW8dcu1WpZLG6NlyjtWHuqzJg7QIDAQAB o4ICIjCCAh4wHQYDVR0OBBYEFLikJGNqKEHtjYiEXc47mmmFLhkNMB8GA1UdIwQY MBaAFEZJUrwWVEHsbi4gEMkz3IMPNhcxMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvUmtsU3ZCWlVRZXh1TGlBUXlUUGNndzgyRnpFLmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC9kZi8wMTA1OGEtNGE4Mi00ODE4LTk3MmQt ODQyODU4MTIyYmJjLzEvUmtsU3ZCWlVRZXh1TGlBUXlUUGNndzgyRnpFLm1mdDCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC9kZi8wMTA1OGEtNGE4Mi00ODE4LTk3MmQtODQyODU4MTIyYmJj LzEvUmtsU3ZCWlVRZXh1TGlBUXlUUGNndzgyRnpFLmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEATHAJZ1fZ EqypLFRroJIazkZnPai7/ntJsDfDauuZE1t+ORu2q+ml+YeOXb4lsRlmgt17G/Vy BErlThWq81NaAlbD8qbYLTSM+QBixRxRVLnnjBNRptqhTzVkat7aYlgH+DTO22yi O4XIhCBX9nQunLY/yii8jyrcBYqB1gjBmiZ7FPhCCbiuRVxWWqZNkHm3iCVKQtBG ecoc96qyiMWdkAvTKtY/Lc9AlY3v5+lPL1aJKgg5Pf5fDWHkprjnVhTVk+5Bq4g7 BjtL4L91aDMZK5vXdYITAgjX6Oosbj9EwUhuUY2M/ePf1HgO9kQcrnlQLR/nYaiU HQfOr8eYY03lLA== -----END CERTIFICATE-----Generated at Sun Jul 27 11:42:31 2025 by rpki-client