$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/e1/0f9f02-c2ad-4ec8-b4d5-dfbfa3fcf021/1/5L6O_sH7A9ivl5rxy6E6CEWnsLo.mft File: 5L6O_sH7A9ivl5rxy6E6CEWnsLo.mft (raw, json) Hash identifier: CImG0K1VJ4KebhO6/PBTsQeiCq0IXO+9cTX7WRohKds= Subject key identifier: D7:9C:A4:5F:85:AB:15:1C:E5:C5:9E:BE:40:44:31:31:4D:C8:01:97 Authority key identifier: E4:BE:8E:FE:C1:FB:03:D8:AF:97:9A:F1:CB:A1:3A:08:45:A7:B0:BA Certificate issuer: /CN=e4be8efec1fb03d8af979af1cba13a0845a7b0ba Certificate serial: 01983CF340F20EA87B320C11ADDA867A7B75 Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/5L6O_sH7A9ivl5rxy6E6CEWnsLo.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/e1/0f9f02-c2ad-4ec8-b4d5-dfbfa3fcf021/1/5L6O_sH7A9ivl5rxy6E6CEWnsLo.mft Manifest number: 0AFB Signing time: Thu 24 Jul 2025 15:00:31 +0000 Manifest this update: Thu 24 Jul 2025 15:00:31 +0000 Manifest next update: Fri 25 Jul 2025 15:00:31 +0000 Files and hashes: 1: 2m_CYVmLsPzF7bcN6vIid84YZD8.roa (hash: LBmz6BkcC+hYAgg9NpyTpTiVYvW2FI/a+Z33OiNH3bM=) 2: 4nVbm_9mW8-MAn0I_kGjdBfxhVw.roa (hash: pTL9FLQm2ArdSOx4IvTJl5dYC4wcCTYCswuw3GEGHMQ=) 3: 5L6O_sH7A9ivl5rxy6E6CEWnsLo.crl (hash: MS0aNb/hjCUZ+70DStniCmG4a/lVgK2jYUV4mCb07lg=) 4: ASUGNfdEr-zmHuBMKbmczWEEyX0.roa (hash: XbBf6Nfds25faGeda9A9EZrA0jUpRsOTRIO73TfrGdU=) 5: D_RGKNjU3HO1804H_N4lL39f8xU.roa (hash: lQxsMyLpAGFJHo/y+xtaq8v1/ZEVry9ym0LdrZC/Bgk=) 6: Di4BCmfwCebJmpiiwQVl8kD1SGY.roa (hash: YROnCwrXQNQ5Na/T+Qstm6PeSLYo1KpF7+7yHOQYHZY=) 7: GPFpap7M0DbSFtJBpaKp67RfOgs.roa (hash: 6C0EKVC4/wJ0awCJ51hmh22riQaO8QV9e+LjKWFhq3o=) 8: IrnZpWugwiVaDWE0Y8y2HTk6myM.roa (hash: hz4dzGEJlp9nAI/PksWqX4be/cNB9cFXoUk0RTppUW4=) 9: UPL7qImi1Ys3kJpNeUneyjua3iE.roa (hash: yEbc7GI9w/HHKG7S49YH0IbZWjyzBWFPN0Ij4so55ao=) 10: Wqi1dLZsHvoMXUpSlZaZNHPgS_4.roa (hash: uMbe0TM0fIuYtnHf63Llp9sJ+CZVXJ/tOzlQU2AOjts=) 11: gqYJ1QlxZp2sfbvxF5yVPiDZ3Dk.roa (hash: +mkHl1F4HLXN9PfWQktZtYiROfsgXfptEmlNuP4F0GM=) 12: hrJ9G8LdPfpuv4HEnlrj0UM1FZI.roa (hash: Ap/wGOk300z33ESWLkwykljx6YcmZDQ+kuaPYGOBuOE=) 13: ip51KpcMdfOcRWLVf2HbT1-y1Tk.roa (hash: w96a29aqdZpAZsW1TalxljppYBFpY8XCQQF21I+O+bg=) 14: qOKY-IzakK8b3r-fGGAM7SuFUFM.roa (hash: 0xmS3lTVgR47MEU89O0ODLmZ+nEhlRcq1hkGVTaLD7U=) 15: u_PvNoZGGKwKo1fIPAvA4pNGOWE.roa (hash: 7nleymXLPmClcPELIrjirAmjx3u5krkfwTmE5v3abBQ=) Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/e1/0f9f02-c2ad-4ec8-b4d5-dfbfa3fcf021/1/5L6O_sH7A9ivl5rxy6E6CEWnsLo.crl rsync://rpki.ripe.net/repository/DEFAULT/e1/0f9f02-c2ad-4ec8-b4d5-dfbfa3fcf021/1/5L6O_sH7A9ivl5rxy6E6CEWnsLo.mft rsync://rpki.ripe.net/repository/DEFAULT/5L6O_sH7A9ivl5rxy6E6CEWnsLo.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Fri 25 Jul 2025 15:00:31 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:98:3c:f3:40:f2:0e:a8:7b:32:0c:11:ad:da:86:7a:7b:75 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=e4be8efec1fb03d8af979af1cba13a0845a7b0ba Validity Not Before: Jul 24 15:00:31 2025 GMT Not After : Jul 25 15:00:31 2025 GMT Subject: CN=d79ca45f85ab151ce5c59ebe404431314dc80197 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:9b:21:85:55:60:1c:d7:31:e0:7f:29:73:bb:e8: 12:73:39:59:0c:0a:a2:b5:3c:69:bf:98:85:23:d1: 5b:74:bf:9c:88:26:17:f3:77:3c:4f:a9:29:4a:75: fe:fd:f1:5e:cb:76:87:a1:1f:c0:d9:c2:90:46:1d: 9b:36:61:ce:f2:89:03:a8:21:92:42:2d:12:c6:66: b2:9a:b0:38:de:9a:89:db:93:14:9a:b3:bb:2d:c5: 13:06:91:a7:a3:d1:85:c5:2b:ea:7e:88:f2:da:5c: 74:4d:ee:7d:43:26:b6:2c:d3:f7:72:65:e3:00:46: 48:cf:7c:17:6c:25:25:c6:a1:50:d2:f8:1b:25:40: 15:0b:83:95:45:27:29:c6:de:dd:ee:70:5a:86:f2: da:c9:c4:f8:5a:e1:7c:41:bc:16:89:02:3c:a5:84: 83:e6:f4:16:46:ad:0b:8d:d7:b8:b8:42:22:65:e4: 59:cb:e0:f7:0b:6a:4f:ad:aa:4f:d6:c6:83:6a:4f: 6d:83:08:f9:5a:3c:9f:37:6a:cb:59:54:44:1a:87: ab:c3:69:7e:e2:67:94:65:30:b2:a3:6c:17:fe:6b: 94:6f:69:df:62:5a:04:ae:92:bf:c7:83:c3:1d:88: e0:f2:5c:22:5f:f8:72:75:4c:92:7a:96:d1:74:ec: c3:79 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: D7:9C:A4:5F:85:AB:15:1C:E5:C5:9E:BE:40:44:31:31:4D:C8:01:97 X509v3 Authority Key Identifier: keyid:E4:BE:8E:FE:C1:FB:03:D8:AF:97:9A:F1:CB:A1:3A:08:45:A7:B0:BA X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/5L6O_sH7A9ivl5rxy6E6CEWnsLo.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/e1/0f9f02-c2ad-4ec8-b4d5-dfbfa3fcf021/1/5L6O_sH7A9ivl5rxy6E6CEWnsLo.mft X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/e1/0f9f02-c2ad-4ec8-b4d5-dfbfa3fcf021/1/5L6O_sH7A9ivl5rxy6E6CEWnsLo.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 3a:fc:91:58:c0:6e:ac:0a:bd:f1:b5:ae:f0:71:e3:89:51:e5: 97:5a:51:7e:76:5c:9f:56:16:a5:56:11:44:a8:45:91:95:e6: 1d:47:fc:c2:a0:01:bb:b6:7a:32:13:ae:b4:aa:b7:91:ff:c4: 08:90:81:f1:fa:34:64:02:a7:4a:61:7a:52:3b:7d:b1:ac:0f: bb:ef:6b:30:3d:db:82:62:87:b4:26:b4:a0:3c:39:74:e6:bf: 73:3c:84:8c:b5:4f:44:9d:6b:23:28:ff:b5:d0:6c:61:37:30: 34:c3:63:8d:ec:b6:0a:4d:26:7b:08:5e:8d:1c:c7:06:7a:06: 0e:53:bc:79:d2:ee:5a:d1:03:cc:8c:41:c5:f6:fe:ac:fe:db: b9:5c:91:06:65:ec:83:06:2e:11:17:7d:4a:9b:fb:ba:45:b4: 4d:06:21:8a:a2:8a:35:66:88:de:c3:b2:f0:82:50:98:fb:e2: 5f:e9:28:ca:20:58:32:86:69:2b:d3:78:99:e2:96:66:57:9c: 9c:f6:a6:15:cc:ef:d4:6b:04:e8:f7:bd:36:d0:e3:e3:ae:8e: cc:5b:91:96:95:05:83:2d:5d:33:89:0a:c2:fd:8d:2f:ce:aa: d0:27:96:42:d5:85:8e:20:2f:43:7c:d1:1e:f0:84:7f:c2:95: eb:b8:7d:81 -----BEGIN CERTIFICATE----- MIIFFjCCA/6gAwIBAgISAZg880DyDqh7MgwRrdqGent1MA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKGU0YmU4ZWZlYzFmYjAzZDhhZjk3OWFmMWNiYTEzYTA4NDVh N2IwYmEwHhcNMjUwNzI0MTUwMDMxWhcNMjUwNzI1MTUwMDMxWjAzMTEwLwYDVQQD EyhkNzljYTQ1Zjg1YWIxNTFjZTVjNTllYmU0MDQ0MzEzMTRkYzgwMTk3MIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAmyGFVWAc1zHgfylzu+gSczlZDAqi tTxpv5iFI9FbdL+ciCYX83c8T6kpSnX+/fFey3aHoR/A2cKQRh2bNmHO8okDqCGS Qi0SxmaymrA43pqJ25MUmrO7LcUTBpGno9GFxSvqfojy2lx0Te59Qya2LNP3cmXj AEZIz3wXbCUlxqFQ0vgbJUAVC4OVRScpxt7d7nBahvLaycT4WuF8QbwWiQI8pYSD 5vQWRq0Ljde4uEIiZeRZy+D3C2pPrapP1saDak9tgwj5WjyfN2rLWVREGoerw2l+ 4meUZTCyo2wX/muUb2nfYloErpK/x4PDHYjg8lwiX/hydUySepbRdOzDeQIDAQAB o4ICIjCCAh4wHQYDVR0OBBYEFNecpF+FqxUc5cWevkBEMTFNyAGXMB8GA1UdIwQY MBaAFOS+jv7B+wPYr5ea8cuhOghFp7C6MA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvNUw2T19zSDdBOWl2bDVyeHk2RTZDRVduc0xvLmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC9lMS8wZjlmMDItYzJhZC00ZWM4LWI0ZDUt ZGZiZmEzZmNmMDIxLzEvNUw2T19zSDdBOWl2bDVyeHk2RTZDRVduc0xvLm1mdDCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC9lMS8wZjlmMDItYzJhZC00ZWM4LWI0ZDUtZGZiZmEzZmNmMDIx LzEvNUw2T19zSDdBOWl2bDVyeHk2RTZDRVduc0xvLmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAOvyRWMBu rAq98bWu8HHjiVHll1pRfnZcn1YWpVYRRKhFkZXmHUf8wqABu7Z6MhOutKq3kf/E CJCB8fo0ZAKnSmF6Ujt9sawPu+9rMD3bgmKHtCa0oDw5dOa/czyEjLVPRJ1rIyj/ tdBsYTcwNMNjjey2Ck0mewhejRzHBnoGDlO8edLuWtEDzIxBxfb+rP7buVyRBmXs gwYuERd9Spv7ukW0TQYhiqKKNWaI3sOy8IJQmPviX+koyiBYMoZpK9N4meKWZlec nPamFczv1GsE6Pe9NtDj466OzFuRlpUFgy1dM4kKwv2NL86q0CeWQtWFjiAvQ3zR HvCEf8KV67h9gQ== -----END CERTIFICATE-----Generated at Fri Jul 25 00:58:28 2025 by rpki-client