$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/e1/01638c-6cb9-4589-909b-d37df634a929/1/bNmMLFSwy-oTTiepgc_d5zI24FU.mft File: bNmMLFSwy-oTTiepgc_d5zI24FU.mft (raw, json) Hash identifier: ozypokcPdv4mgd9RdivOkuY7lj8QW1akClNxLUPqIpA= Subject key identifier: A5:4C:79:28:48:9C:15:48:91:FD:B4:5E:8A:C7:19:36:C7:CD:08:F9 Authority key identifier: 6C:D9:8C:2C:54:B0:CB:EA:13:4E:27:A9:81:CF:DD:E7:32:36:E0:55 Certificate issuer: /CN=6cd98c2c54b0cbea134e27a981cfdde73236e055 Certificate serial: 0198315D165706177F16F3E33DB8DF82661A Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/bNmMLFSwy-oTTiepgc_d5zI24FU.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/e1/01638c-6cb9-4589-909b-d37df634a929/1/bNmMLFSwy-oTTiepgc_d5zI24FU.mft Manifest number: 12B1 Signing time: Tue 22 Jul 2025 09:00:40 +0000 Manifest this update: Tue 22 Jul 2025 09:00:40 +0000 Manifest next update: Wed 23 Jul 2025 09:00:40 +0000 Files and hashes: 1: 4TefOlatmM0RZvlgyykepaTA69w.roa (hash: oK3ggt3FwEGdGg67HpifWxggQ4sHuczhuCdiLpHFNGo=) 2: 7X_plhmrvkux1oibBja4OB7LETs.roa (hash: gnMgxFgUS9IL4J+87g7lZ1R3Q2jpCUYTvtTDs50/e2w=) 3: 8AIOf5iiWGq0P893PCbTNf2BkGU.roa (hash: HBMubVYts6z6OX4Jo+t8Ek09rhVu9H6F5CshJadR9AA=) 4: AIEW49j5InMuprcIv1re5ELo7Mg.roa (hash: CspD88WXE/VTrfWO2t59apJyKXsmRJQByqBIfAYqYok=) 5: NCuZRLXUSqeQd0-K94k8sdWt8i0.roa (hash: 9KnkKk3vCESK/jiryTSBEmdsg4CHDO3QXfIZjaFh0FM=) 6: VDBZ-Do7oLcSjkfG0QXXLZFsn18.roa (hash: tsSmWQNC/m3Eo2x7t6PBKV0awmBGlt2M1agXJLIK2d8=) 7: VEmtcTDf-XxN-2zL8Oay3Fp05IA.roa (hash: l7M61/tXdMzCop4fGPoOrVeYzOpgSiZ8UEnps3mMyhQ=) 8: WrznMHjZ-TWido1gLYI1bfVUCu0.roa (hash: ihQrw9/7rFTMBQ43NuItjX9UIXKmTvOZATZckZMKMRU=) 9: bNmMLFSwy-oTTiepgc_d5zI24FU.crl (hash: TICAttSFR6KMC1h0OLNxK8HkZnyVG8X0T3HCt0U4LZs=) 10: eIFvvK-ivxwVefbgEMRWrAvh218.roa (hash: enbiuy39QSMflYfm+7UJdD/VijdNzRJOnnOULTcOwog=) 11: lRDpcMs9bdL5LekISXn8HOYdt5w.roa (hash: wQgu4dQRpBf8xSuiFs4AOLGSs9pN4U3S1WwC8RUnajc=) 12: sCxYlTWiDhdRMcngf850A6XqaOE.roa (hash: kqrC9Mj0ll887+4wrCmPGnjHuKfBNUmVpy0g2oMFtCo=) Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/e1/01638c-6cb9-4589-909b-d37df634a929/1/bNmMLFSwy-oTTiepgc_d5zI24FU.crl rsync://rpki.ripe.net/repository/DEFAULT/e1/01638c-6cb9-4589-909b-d37df634a929/1/bNmMLFSwy-oTTiepgc_d5zI24FU.mft rsync://rpki.ripe.net/repository/DEFAULT/bNmMLFSwy-oTTiepgc_d5zI24FU.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Wed 23 Jul 2025 08:00:25 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:98:31:5d:16:57:06:17:7f:16:f3:e3:3d:b8:df:82:66:1a Signature Algorithm: sha256WithRSAEncryption Issuer: CN=6cd98c2c54b0cbea134e27a981cfdde73236e055 Validity Not Before: Jul 22 09:00:40 2025 GMT Not After : Jul 23 09:00:40 2025 GMT Subject: CN=a54c7928489c154891fdb45e8ac71936c7cd08f9 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:d6:9b:29:35:12:99:1d:07:05:e8:ae:d4:82:f6: 24:1a:a8:a3:40:1a:ea:36:a8:fa:d7:f1:e3:87:ff: 03:75:e0:9a:37:71:79:3c:0c:20:7f:37:fc:a4:39: ff:ee:05:67:fb:f8:ed:3f:1e:6a:df:e3:3c:c6:61: 38:d3:d9:ad:18:2d:b5:34:3a:a3:26:eb:b4:45:2a: 54:79:6c:f7:f4:48:0a:da:2a:3e:3c:de:12:3e:30: 12:14:bd:fe:f1:46:b1:14:61:6a:2c:58:c4:f0:b3: ce:0d:58:b0:0e:db:d3:e0:33:d2:fa:24:c6:ba:6e: 75:b1:d4:e4:15:c9:7b:c6:6a:fd:60:08:de:41:ab: 5d:78:8e:b5:2e:99:f6:1c:c8:6a:86:10:72:df:ec: 44:15:b0:2b:12:38:e0:5b:e2:c7:b2:7f:97:94:64: 41:fb:be:3e:13:c4:ed:00:91:b7:34:c7:b1:13:cf: c6:a1:b3:e4:51:39:1a:0a:ee:a7:5d:a2:62:58:2d: 69:2c:5b:7f:7d:8e:1b:da:4e:05:31:95:d5:44:83: e2:d3:cd:2c:f1:3e:05:3d:d7:68:90:44:d6:34:86: 35:51:ea:5b:97:ac:a0:99:ff:73:cf:17:59:79:3b: 59:98:95:d2:41:d1:ca:1b:42:df:b9:8a:94:56:21: 58:65 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: A5:4C:79:28:48:9C:15:48:91:FD:B4:5E:8A:C7:19:36:C7:CD:08:F9 X509v3 Authority Key Identifier: keyid:6C:D9:8C:2C:54:B0:CB:EA:13:4E:27:A9:81:CF:DD:E7:32:36:E0:55 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/bNmMLFSwy-oTTiepgc_d5zI24FU.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/e1/01638c-6cb9-4589-909b-d37df634a929/1/bNmMLFSwy-oTTiepgc_d5zI24FU.mft X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/e1/01638c-6cb9-4589-909b-d37df634a929/1/bNmMLFSwy-oTTiepgc_d5zI24FU.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 70:3a:e9:40:87:9a:80:bd:fd:f3:23:99:07:5f:0e:87:4c:f5: c7:8c:fa:95:d2:62:ca:e2:79:d7:d8:27:8c:c4:6a:52:d1:6f: 3f:b3:7c:b9:aa:7a:9f:bb:d6:35:f1:3c:46:2e:a7:a7:88:c3: 9a:41:a1:6b:3c:bc:10:98:4c:06:0b:05:eb:d8:f9:13:f7:11: b0:c7:c1:18:87:c7:bb:24:09:32:30:fc:c7:45:a1:04:c1:37: cb:51:50:dc:c1:43:9a:fe:7a:75:1d:cc:e4:3a:b0:34:09:d2: 8e:f2:38:c6:86:1f:d8:d9:c2:cf:7c:45:f4:c1:23:33:a7:a7: c6:34:ac:27:77:fd:88:65:95:f9:e4:71:cc:74:c7:b2:27:b7: a8:be:bb:48:20:93:da:74:2f:91:60:47:cd:24:7c:99:07:dc: 26:1f:06:dd:f6:d1:d0:dd:08:f0:fd:a9:bb:db:0f:a7:a0:0c: dc:f4:30:f5:97:41:41:dd:4a:9b:71:85:2b:27:ae:c8:62:79: 23:16:e5:34:57:1a:2f:8f:48:d3:77:48:6e:83:f7:5b:36:38: 1c:c3:a2:9d:10:56:70:83:d1:85:77:d6:4d:c2:59:3d:da:22: 76:80:79:0d:7a:fa:96:40:8a:6b:36:77:26:ce:44:8a:79:f8: 3f:27:af:4c -----BEGIN CERTIFICATE----- MIIFFjCCA/6gAwIBAgISAZgxXRZXBhd/FvPjPbjfgmYaMA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKDZjZDk4YzJjNTRiMGNiZWExMzRlMjdhOTgxY2ZkZGU3MzIz NmUwNTUwHhcNMjUwNzIyMDkwMDQwWhcNMjUwNzIzMDkwMDQwWjAzMTEwLwYDVQQD EyhhNTRjNzkyODQ4OWMxNTQ4OTFmZGI0NWU4YWM3MTkzNmM3Y2QwOGY5MIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEA1pspNRKZHQcF6K7UgvYkGqijQBrq Nqj61/Hjh/8DdeCaN3F5PAwgfzf8pDn/7gVn+/jtPx5q3+M8xmE409mtGC21NDqj Juu0RSpUeWz39EgK2io+PN4SPjASFL3+8UaxFGFqLFjE8LPODViwDtvT4DPS+iTG um51sdTkFcl7xmr9YAjeQatdeI61Lpn2HMhqhhBy3+xEFbArEjjgW+LHsn+XlGRB +74+E8TtAJG3NMexE8/GobPkUTkaCu6nXaJiWC1pLFt/fY4b2k4FMZXVRIPi080s 8T4FPddokETWNIY1Uepbl6ygmf9zzxdZeTtZmJXSQdHKG0LfuYqUViFYZQIDAQAB o4ICIjCCAh4wHQYDVR0OBBYEFKVMeShInBVIkf20XorHGTbHzQj5MB8GA1UdIwQY MBaAFGzZjCxUsMvqE04nqYHP3ecyNuBVMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvYk5tTUxGU3d5LW9UVGllcGdjX2Q1ekkyNEZVLmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC9lMS8wMTYzOGMtNmNiOS00NTg5LTkwOWIt ZDM3ZGY2MzRhOTI5LzEvYk5tTUxGU3d5LW9UVGllcGdjX2Q1ekkyNEZVLm1mdDCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC9lMS8wMTYzOGMtNmNiOS00NTg5LTkwOWItZDM3ZGY2MzRhOTI5 LzEvYk5tTUxGU3d5LW9UVGllcGdjX2Q1ekkyNEZVLmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAcDrpQIea gL398yOZB18Oh0z1x4z6ldJiyuJ519gnjMRqUtFvP7N8uap6n7vWNfE8Ri6np4jD mkGhazy8EJhMBgsF69j5E/cRsMfBGIfHuyQJMjD8x0WhBME3y1FQ3MFDmv56dR3M 5DqwNAnSjvI4xoYf2NnCz3xF9MEjM6enxjSsJ3f9iGWV+eRxzHTHsie3qL67SCCT 2nQvkWBHzSR8mQfcJh8G3fbR0N0I8P2pu9sPp6AM3PQw9ZdBQd1Km3GFKyeuyGJ5 IxblNFcaL49I03dIboP3WzY4HMOinRBWcIPRhXfWTcJZPdoidoB5DXr6lkCKazZ3 Js5Einn4PyevTA== -----END CERTIFICATE-----Generated at Tue Jul 22 11:55:48 2025 by rpki-client