$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/e0/8cac0c-3426-4f07-af20-cbb95183b27a/1/o20K5eL7_8zgh3Drwgwha5-_lIU.mft File: o20K5eL7_8zgh3Drwgwha5-_lIU.mft (raw, json) Hash identifier: jD7NfsEnEUQi+w4ei88dCF7hdi564VNtXa//s5x6LBw= Subject key identifier: EC:02:9C:D3:DF:0F:99:03:1B:82:9C:CC:7C:A7:0D:D4:DC:E4:9B:1E Authority key identifier: A3:6D:0A:E5:E2:FB:FF:CC:E0:87:70:EB:C2:0C:21:6B:9F:BF:94:85 Certificate issuer: /CN=a36d0ae5e2fbffcce08770ebc20c216b9fbf9485 Certificate serial: 01985C108900543076F67B58396979F71C7E Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/o20K5eL7_8zgh3Drwgwha5-_lIU.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/e0/8cac0c-3426-4f07-af20-cbb95183b27a/1/o20K5eL7_8zgh3Drwgwha5-_lIU.mft Manifest number: 1639 Signing time: Wed 30 Jul 2025 16:00:44 +0000 Manifest this update: Wed 30 Jul 2025 16:00:44 +0000 Manifest next update: Thu 31 Jul 2025 16:00:44 +0000 Files and hashes: 1: 1XbIXlsc12j6nm66ObHlANu1FxM.roa (hash: lxZWGjYaWrGULnJUqbEWkt5IyYC/5a04fccF0g2Mp+o=) 2: 3RFddkozoZGvDJWQRcnS3tQnN6k.roa (hash: KSM4qOmDj4X6PN9gZp6oxzJSTfcXsGzAsnDPsOPcYvo=) 3: 5Ni6TTomkpPGcPlO3kSvRsrQu-U.roa (hash: 1JbN0aQZgu8I5lbFUp1QWBBO58Y4WN7qnz2P+FqHbJQ=) 4: BUbLcDK2mlbMmQrWrXK_KkB_Z8I.roa (hash: 5p58mg305UQz5j2iOVYn7ENJmD3sfGRtf406Z23M5Fg=) 5: DlEN3D6ABTKOQAUtaBMUB9rDXTg.roa (hash: 7Z/Q1II+IY41ZQNrl/gNVuPJHIVrAlLxhLrLlp3uHJ8=) 6: RdqjtJDLFWOt3Phx5mE_iQ2n2ac.roa (hash: lxo1VRjxzcOyUQlNG+1uXakzpre9ZL0uw2/WRhwVovc=) 7: fz5OQX3YNuZKli23fQPsHJMHAjg.roa (hash: 2W1jdhiJm6VJW0yfAkLiyNtl6yjC+Bfx3j0Hv8QWt58=) 8: o20K5eL7_8zgh3Drwgwha5-_lIU.crl (hash: yYTEyyjHc7NO2f4+DD01rkSPF/O9H9p3IthPyQnTMLY=) 9: tn7ZdWo9WQgYlB0Z6sOK2If7PKQ.roa (hash: 8aBGWuWam9C6QXOPco15OTid7ItEiEbxf2K863xiGIk=) 10: uxPuBCLIiL0vvpcp5iG57n6Nxl8.roa (hash: 9FJQPnJf1+iHQwAWGEeso0fULqarFlyxqNgrRoa6pYY=) 11: v8yHhVnQZ24d3Hqq-_MmljsyF-o.roa (hash: ldyVLPmDRLippOD+hn4EjHJmd9dcu8cUfl/mwJelT5M=) 12: vOg7pIai3eYlqI8nGfkYR-448qE.roa (hash: k2twTqEvKHP86X8yabE26RQnv5iqhvXZjH+b4EIuDog=) Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/e0/8cac0c-3426-4f07-af20-cbb95183b27a/1/o20K5eL7_8zgh3Drwgwha5-_lIU.crl rsync://rpki.ripe.net/repository/DEFAULT/e0/8cac0c-3426-4f07-af20-cbb95183b27a/1/o20K5eL7_8zgh3Drwgwha5-_lIU.mft rsync://rpki.ripe.net/repository/DEFAULT/o20K5eL7_8zgh3Drwgwha5-_lIU.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Thu 31 Jul 2025 15:09:48 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:98:5c:10:89:00:54:30:76:f6:7b:58:39:69:79:f7:1c:7e Signature Algorithm: sha256WithRSAEncryption Issuer: CN=a36d0ae5e2fbffcce08770ebc20c216b9fbf9485 Validity Not Before: Jul 30 16:00:44 2025 GMT Not After : Jul 31 16:00:44 2025 GMT Subject: CN=ec029cd3df0f99031b829ccc7ca70dd4dce49b1e Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:b9:7d:8f:7c:5f:6d:5e:0a:fd:db:2f:45:2a:55: f6:13:8a:4c:4c:52:ad:43:f6:d1:00:e3:80:90:5a: e4:68:d9:a5:32:4e:17:28:55:c6:b2:f0:0a:ef:5b: 66:42:1e:67:71:65:2b:ac:28:ed:8c:53:15:d9:31: ba:92:ce:ac:94:ad:08:09:ed:9d:36:6f:eb:e1:9a: d0:f2:92:be:f1:ee:a1:2c:2f:3f:8e:5f:42:0e:74: 8d:20:2c:62:94:a4:58:cc:c6:39:4d:d7:4e:68:f7: c6:7b:b1:ec:1a:68:1e:10:1f:cb:a6:32:c3:25:1b: 31:52:88:7a:93:c5:5b:76:16:0a:42:ac:70:89:8b: aa:76:55:54:4d:af:3c:b6:83:83:a0:9b:af:cc:71: 9e:31:8a:d0:55:eb:4c:11:15:cb:f7:5d:ba:95:6b: d1:f6:7a:94:d7:b7:ce:a1:9e:c8:3c:e3:3b:a1:53: 8d:42:4f:43:0e:44:b9:e3:c5:4b:54:e9:55:cf:03: 9f:98:de:13:47:0e:34:dd:a1:52:4e:45:0a:9e:60: 94:86:f7:57:60:43:ec:fc:8f:79:8c:6e:d3:84:82: 66:0c:de:40:04:43:ab:31:84:6c:34:51:43:3a:9c: 25:d2:07:8f:79:cf:aa:e5:3f:d2:49:66:02:6b:a1: a9:11 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: EC:02:9C:D3:DF:0F:99:03:1B:82:9C:CC:7C:A7:0D:D4:DC:E4:9B:1E X509v3 Authority Key Identifier: keyid:A3:6D:0A:E5:E2:FB:FF:CC:E0:87:70:EB:C2:0C:21:6B:9F:BF:94:85 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/o20K5eL7_8zgh3Drwgwha5-_lIU.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/e0/8cac0c-3426-4f07-af20-cbb95183b27a/1/o20K5eL7_8zgh3Drwgwha5-_lIU.mft X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/e0/8cac0c-3426-4f07-af20-cbb95183b27a/1/o20K5eL7_8zgh3Drwgwha5-_lIU.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 5d:9d:58:3a:22:bf:2e:36:48:b2:cd:24:1a:fa:7f:6e:ca:ce: af:81:ed:a2:9d:1d:0f:f3:27:a5:b5:62:fa:78:5d:48:4d:ae: 0b:61:e3:aa:b1:70:3f:0f:4b:88:0e:82:36:34:c3:89:98:b2: c3:00:85:4d:30:26:73:89:97:5a:3a:2c:46:c0:ba:1d:7b:52: 4b:46:4e:0a:3d:20:9c:fb:84:92:d4:2f:8d:ec:22:59:52:1a: ed:4c:48:eb:05:93:95:24:81:31:d8:d2:66:53:14:c7:82:54: 57:a3:cf:9e:70:11:d0:fc:5d:25:57:40:82:d0:b3:c9:d5:da: 8b:9a:7a:30:a0:29:ea:3d:6d:db:34:9d:90:f6:4e:b7:a5:17: d6:c1:ff:a1:1f:bf:ec:bf:56:91:46:98:a8:c5:37:52:38:e4: 6d:5c:70:b4:41:69:c4:63:dd:7a:0b:41:aa:72:58:fd:45:9d: 93:1b:83:de:17:70:b9:7d:79:c3:cf:70:89:23:cb:24:41:ba: 91:f2:91:56:04:dd:cb:35:86:65:be:3a:b4:9c:c2:69:39:cc: 6e:c8:46:d7:cd:23:d1:f3:96:23:70:1b:81:a8:d9:c1:04:a3: b6:54:51:a0:bc:aa:3b:7f:ca:23:45:2c:3d:57:4e:bb:cf:a7: 4a:57:47:c1 -----BEGIN CERTIFICATE----- MIIFFjCCA/6gAwIBAgISAZhcEIkAVDB29ntYOWl59xx+MA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKGEzNmQwYWU1ZTJmYmZmY2NlMDg3NzBlYmMyMGMyMTZiOWZi Zjk0ODUwHhcNMjUwNzMwMTYwMDQ0WhcNMjUwNzMxMTYwMDQ0WjAzMTEwLwYDVQQD EyhlYzAyOWNkM2RmMGY5OTAzMWI4MjljY2M3Y2E3MGRkNGRjZTQ5YjFlMIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAuX2PfF9tXgr92y9FKlX2E4pMTFKt Q/bRAOOAkFrkaNmlMk4XKFXGsvAK71tmQh5ncWUrrCjtjFMV2TG6ks6slK0ICe2d Nm/r4ZrQ8pK+8e6hLC8/jl9CDnSNICxilKRYzMY5TddOaPfGe7HsGmgeEB/LpjLD JRsxUoh6k8VbdhYKQqxwiYuqdlVUTa88toODoJuvzHGeMYrQVetMERXL9126lWvR 9nqU17fOoZ7IPOM7oVONQk9DDkS548VLVOlVzwOfmN4TRw403aFSTkUKnmCUhvdX YEPs/I95jG7ThIJmDN5ABEOrMYRsNFFDOpwl0gePec+q5T/SSWYCa6GpEQIDAQAB o4ICIjCCAh4wHQYDVR0OBBYEFOwCnNPfD5kDG4KczHynDdTc5JseMB8GA1UdIwQY MBaAFKNtCuXi+//M4Idw68IMIWufv5SFMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvbzIwSzVlTDdfOHpnaDNEcndnd2hhNS1fbElVLmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC9lMC84Y2FjMGMtMzQyNi00ZjA3LWFmMjAt Y2JiOTUxODNiMjdhLzEvbzIwSzVlTDdfOHpnaDNEcndnd2hhNS1fbElVLm1mdDCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC9lMC84Y2FjMGMtMzQyNi00ZjA3LWFmMjAtY2JiOTUxODNiMjdh LzEvbzIwSzVlTDdfOHpnaDNEcndnd2hhNS1fbElVLmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAXZ1YOiK/ LjZIss0kGvp/bsrOr4Htop0dD/MnpbVi+nhdSE2uC2HjqrFwPw9LiA6CNjTDiZiy wwCFTTAmc4mXWjosRsC6HXtSS0ZOCj0gnPuEktQvjewiWVIa7UxI6wWTlSSBMdjS ZlMUx4JUV6PPnnAR0PxdJVdAgtCzydXai5p6MKAp6j1t2zSdkPZOt6UX1sH/oR+/ 7L9WkUaYqMU3UjjkbVxwtEFpxGPdegtBqnJY/UWdkxuD3hdwuX15w89wiSPLJEG6 kfKRVgTdyzWGZb46tJzCaTnMbshG180j0fOWI3AbgajZwQSjtlRRoLyqO3/KI0Us PVdOu8+nSldHwQ== -----END CERTIFICATE-----Generated at Wed Jul 30 18:06:46 2025 by rpki-client