$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/e2/ad3044-cdce-46cf-92c9-a954d053994a/1/1g9F98xLaR_UoxwfHAtPYF13pu8.mft File: 1g9F98xLaR_UoxwfHAtPYF13pu8.mft (raw, json) Hash identifier: 0DLJDyugLjBX3oBIE69bdJYmN4B3cO/52xxLX0mNK/o= Subject key identifier: 81:C9:C3:40:71:F4:DA:D5:49:C4:7E:5E:91:7B:8E:26:F0:01:9B:19 Authority key identifier: D6:0F:45:F7:CC:4B:69:1F:D4:A3:1C:1F:1C:0B:4F:60:5D:77:A6:EF Certificate issuer: /CN=d60f45f7cc4b691fd4a31c1f1c0b4f605d77a6ef Certificate serial: 01984708BA85B6F537BB6D6D5943BC006C12 Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/1g9F98xLaR_UoxwfHAtPYF13pu8.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/e2/ad3044-cdce-46cf-92c9-a954d053994a/1/1g9F98xLaR_UoxwfHAtPYF13pu8.mft Manifest number: 1609 Signing time: Sat 26 Jul 2025 14:00:10 +0000 Manifest this update: Sat 26 Jul 2025 14:00:10 +0000 Manifest next update: Sun 27 Jul 2025 14:00:10 +0000 Files and hashes: 1: 1g9F98xLaR_UoxwfHAtPYF13pu8.crl (hash: trVR6WdSsW4G/KjNIr0vTh9mKMjciFjts9vbZxvaxjE=) 2: GMAT5cnP7VsDriW3_zL3dmojRH8.roa (hash: 9OZgqMWwoj0IlbvwNkLekurnPx7RT1aRlKGSPHOL6N4=) 3: IoE67Ac0pXcZcF9gBBC8VKka1vE.roa (hash: kt4XWZcgrYkLHsaAC2c2z5iyqyhmqC0zJwGvhSrnQ3E=) 4: MnG_2GzorHPsXNp5Vum7-rUjReY.roa (hash: D3z8cv+XlClqN6b2gc/ybPBfC33Ewbb6orbavaJ/jxk=) 5: PPMANDrLvF7lVgznicSOoAT3-3U.roa (hash: goEhx/poAjkzaQRi2RGACZSEuEQ6nJJ0p5PoSp7o6bo=) 6: b5u0PP2LUmpbpNJ4qAdIl3s9IjI.roa (hash: 4ZbWUTDO0hiozFSxacFGW2XCjTl1RPjd3yDPIUYji9M=) 7: jfxb2BR-CQiCSpU8DpDydbDz1b0.roa (hash: fObbuEbq3/zFmHWpgeQlp5JFopCYl+4GEGdq5exW77c=) 8: rrmPFSxVt5xEtowDvlnYGvxrH3s.roa (hash: mhHuydqllyBkMxNXx9HLabM7W+Fte6mEhiiQe0n8fRA=) 9: th1p5jE1fl21GfKXyCflURpVpo0.roa (hash: w4pXoPCT9slYbdDvFiyPewBrsldI3f9m6umM8Wv0SkE=) 10: viBgIC4abJYY7C__L2VefsiYSYI.roa (hash: r+Hi34v0Qt4A/ODVfo4uFHb77CXM38aMXnF2F0o4IcY=) 11: xNr5I0Wokl-j2aBAEkjZmpNRVng.roa (hash: epmYMuuR7FlxzNy/fvLKPn2AzgVlFDZhQf7tXXleECM=) Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/e2/ad3044-cdce-46cf-92c9-a954d053994a/1/1g9F98xLaR_UoxwfHAtPYF13pu8.crl rsync://rpki.ripe.net/repository/DEFAULT/e2/ad3044-cdce-46cf-92c9-a954d053994a/1/1g9F98xLaR_UoxwfHAtPYF13pu8.mft rsync://rpki.ripe.net/repository/DEFAULT/1g9F98xLaR_UoxwfHAtPYF13pu8.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Sun 27 Jul 2025 11:00:05 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:98:47:08:ba:85:b6:f5:37:bb:6d:6d:59:43:bc:00:6c:12 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=d60f45f7cc4b691fd4a31c1f1c0b4f605d77a6ef Validity Not Before: Jul 26 14:00:10 2025 GMT Not After : Jul 27 14:00:10 2025 GMT Subject: CN=81c9c34071f4dad549c47e5e917b8e26f0019b19 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:b3:7e:60:c4:e9:24:51:59:ec:89:0a:da:49:e5: 7c:4c:dd:38:29:61:9c:9f:81:f8:10:f3:07:80:ad: b0:17:ee:84:b5:04:0f:1f:04:c8:d8:9b:ac:68:d8: c3:6f:f0:55:c0:1a:29:78:c3:31:4e:6f:54:3f:87: ee:d9:25:c9:9a:04:57:b5:00:05:23:e4:a6:8b:54: bf:bd:5e:52:71:49:79:3b:40:c7:29:9f:57:39:83: 12:3a:30:12:cb:1e:e4:0d:d8:79:94:b1:ea:b1:52: 37:6d:b2:bd:a8:8b:81:d6:3c:ed:85:0b:95:6b:c4: 36:df:79:5d:4b:fe:3c:5c:a0:2c:e6:5e:85:f8:9d: f9:c3:c8:d9:59:d2:51:11:48:13:11:a2:6f:da:90: ce:0f:9e:0a:53:67:51:65:ea:c3:f7:90:5a:0f:73: 0f:65:45:d5:33:9a:0f:48:c9:28:e2:48:ea:73:5c: c8:e3:f6:3a:0b:f6:b1:c2:1d:b6:54:6b:0c:67:87: d1:55:6e:57:c1:6b:38:22:3d:ed:a2:ff:b8:f8:9b: 2a:6b:a4:50:9b:08:16:0f:6f:99:c3:46:aa:91:8f: e7:62:52:de:b7:ad:7a:b9:fe:43:9a:d9:d4:c7:a0: 18:36:48:5c:d5:c3:47:a2:d7:b2:96:71:ee:8c:9c: 7d:71 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 81:C9:C3:40:71:F4:DA:D5:49:C4:7E:5E:91:7B:8E:26:F0:01:9B:19 X509v3 Authority Key Identifier: keyid:D6:0F:45:F7:CC:4B:69:1F:D4:A3:1C:1F:1C:0B:4F:60:5D:77:A6:EF X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/1g9F98xLaR_UoxwfHAtPYF13pu8.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/e2/ad3044-cdce-46cf-92c9-a954d053994a/1/1g9F98xLaR_UoxwfHAtPYF13pu8.mft X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/e2/ad3044-cdce-46cf-92c9-a954d053994a/1/1g9F98xLaR_UoxwfHAtPYF13pu8.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 65:fa:37:08:77:c5:bb:23:c3:d2:fa:5a:76:a0:ed:88:d8:0e: 6e:72:d2:55:87:4a:97:aa:a5:c7:49:0a:f0:25:10:30:52:b6: 5a:ab:a0:4f:14:5f:6a:6c:7a:e1:d1:08:c1:ed:10:4a:20:91: c6:5b:ab:6f:61:0f:71:35:38:fb:c7:71:7c:4a:ef:75:91:1c: 38:94:09:89:2b:ee:05:2a:d5:88:c5:f6:43:6e:6f:70:eb:eb: 43:b2:93:a1:9d:1d:12:30:8b:86:17:27:6d:97:e3:9b:1f:fe: 7d:9e:6e:80:db:05:83:fd:2e:cb:16:08:3e:21:4c:79:70:45: 47:d9:7b:a1:0c:fa:f4:75:fe:39:41:e6:a0:c2:a8:85:12:55: 9a:68:a4:2b:1c:d6:e4:4d:5a:18:e1:29:f3:be:9f:57:fb:f0: 47:53:8e:86:73:18:a9:5a:85:d2:98:90:00:31:61:30:c7:4b: c2:84:01:95:d9:b3:e0:f9:56:63:6b:c3:08:f8:68:dd:1e:57: 28:ef:f6:c8:47:57:79:60:63:3b:36:8f:35:b5:64:d3:f0:f2: 1e:b5:e4:46:4f:aa:72:b1:08:f7:82:bb:9c:07:ac:e4:f8:1b: c0:a7:f4:66:e6:41:20:eb:c9:90:50:df:4b:aa:55:3c:7f:07: ee:a4:33:31 -----BEGIN CERTIFICATE----- MIIFFjCCA/6gAwIBAgISAZhHCLqFtvU3u21tWUO8AGwSMA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKGQ2MGY0NWY3Y2M0YjY5MWZkNGEzMWMxZjFjMGI0ZjYwNWQ3 N2E2ZWYwHhcNMjUwNzI2MTQwMDEwWhcNMjUwNzI3MTQwMDEwWjAzMTEwLwYDVQQD Eyg4MWM5YzM0MDcxZjRkYWQ1NDljNDdlNWU5MTdiOGUyNmYwMDE5YjE5MIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAs35gxOkkUVnsiQraSeV8TN04KWGc n4H4EPMHgK2wF+6EtQQPHwTI2JusaNjDb/BVwBopeMMxTm9UP4fu2SXJmgRXtQAF I+Smi1S/vV5ScUl5O0DHKZ9XOYMSOjASyx7kDdh5lLHqsVI3bbK9qIuB1jzthQuV a8Q233ldS/48XKAs5l6F+J35w8jZWdJREUgTEaJv2pDOD54KU2dRZerD95BaD3MP ZUXVM5oPSMko4kjqc1zI4/Y6C/axwh22VGsMZ4fRVW5XwWs4Ij3tov+4+Jsqa6RQ mwgWD2+Zw0aqkY/nYlLet616uf5DmtnUx6AYNkhc1cNHoteylnHujJx9cQIDAQAB o4ICIjCCAh4wHQYDVR0OBBYEFIHJw0Bx9NrVScR+XpF7jibwAZsZMB8GA1UdIwQY MBaAFNYPRffMS2kf1KMcHxwLT2Bdd6bvMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvMWc5Rjk4eExhUl9Vb3h3ZkhBdFBZRjEzcHU4LmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC9lMi9hZDMwNDQtY2RjZS00NmNmLTkyYzkt YTk1NGQwNTM5OTRhLzEvMWc5Rjk4eExhUl9Vb3h3ZkhBdFBZRjEzcHU4Lm1mdDCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC9lMi9hZDMwNDQtY2RjZS00NmNmLTkyYzktYTk1NGQwNTM5OTRh LzEvMWc5Rjk4eExhUl9Vb3h3ZkhBdFBZRjEzcHU4LmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAZfo3CHfF uyPD0vpadqDtiNgObnLSVYdKl6qlx0kK8CUQMFK2WqugTxRfamx64dEIwe0QSiCR xlurb2EPcTU4+8dxfErvdZEcOJQJiSvuBSrViMX2Q25vcOvrQ7KToZ0dEjCLhhcn bZfjmx/+fZ5ugNsFg/0uyxYIPiFMeXBFR9l7oQz69HX+OUHmoMKohRJVmmikKxzW 5E1aGOEp876fV/vwR1OOhnMYqVqF0piQADFhMMdLwoQBldmz4PlWY2vDCPho3R5X KO/2yEdXeWBjOzaPNbVk0/DyHrXkRk+qcrEI94K7nAes5PgbwKf0ZuZBIOvJkFDf S6pVPH8H7qQzMQ== -----END CERTIFICATE-----Generated at Sat Jul 26 19:56:38 2025 by rpki-client