$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/eb/eee131-bb8c-4887-869b-6fe4d8fed160/1/h0v4BwzuQwXRo4npEPtRArvMGUE.mft File: h0v4BwzuQwXRo4npEPtRArvMGUE.mft (raw, json) Hash identifier: prapsocbeeKPI8/8dUWpn6b8nQi7rCM5MndTrb3UoZw= Subject key identifier: E6:1C:11:7D:7B:8E:30:35:1E:95:E4:1D:34:4A:14:72:7C:64:D5:0E Authority key identifier: 87:4B:F8:07:0C:EE:43:05:D1:A3:89:E9:10:FB:51:02:BB:CC:19:41 Certificate issuer: /CN=874bf8070cee4305d1a389e910fb5102bbcc1941 Certificate serial: 01982FDCC1DDF5B80EF377B7BE8EFBD63864 Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/h0v4BwzuQwXRo4npEPtRArvMGUE.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/eb/eee131-bb8c-4887-869b-6fe4d8fed160/1/h0v4BwzuQwXRo4npEPtRArvMGUE.mft Manifest number: 0F83 Signing time: Tue 22 Jul 2025 02:00:53 +0000 Manifest this update: Tue 22 Jul 2025 02:00:53 +0000 Manifest next update: Wed 23 Jul 2025 02:00:53 +0000 Files and hashes: 1: 0OKEEKGhx09vrOl7RYzWo3_wxgQ.roa (hash: bVmqeltj/mUgRyI/UDd3qXuGmM6ZNTUv7NHdJ5Ecm14=) 2: 0na0952KGc1H37d43sfmQKJLL00.roa (hash: corUkZBv/wXf0UWamqTqW2vCXAO7jctIMZRyOPGvfMc=) 3: 0nyuKNwkHdjNx58vqjYZWHgdk04.roa (hash: IJwrVyR1/3bxuDIXcjl0pqsWJYg81ab8+TgzpFzMgak=) 4: 50gtoTdhN9nO756-F4DP2ztZ9co.roa (hash: PoNPNVOdbr6ZQt1a8yzQyLs5SXzvoUcV/tLE/CbCBRA=) 5: 5WW9l5SbU7Xc5dzcJPOjnh-Ti1k.roa (hash: 2mR14FDC49JE9sKTdrARapGEl+mL/ykOGzFFu5F/fQM=) 6: GPQpLDssO6fTD1dGaJR05RFssa4.roa (hash: fp71tS0Tf+vhKpm3TY4BWXK7QdJ3Wg7DCBdUoQ7F5lg=) 7: J9C16lcx8PgyurfKUP9kuPkC8qk.roa (hash: FgZNOU0gXFenPcB6tHkqCpKLWPVhc0a8myZew2TEgCo=) 8: LumIDmC9KaTmO5EmvKNIDB_MJ6I.roa (hash: T1v6ldOgSnHm0ILMw4lezNqfO7yaUlFFJv2DMeUijuQ=) 9: VvF4Vi4FweHBoF6fwzvWsqkmd1g.roa (hash: 0iNsEJDKXYV/LCkoqqh7O11YVgjXO/OY9nxGaKpwAV8=) 10: h0v4BwzuQwXRo4npEPtRArvMGUE.crl (hash: oiqvVEsuSrFYJ3DD3WtzkDe0T6WODGAeLlkc4TrfNa0=) 11: vevN_FQh1oLDczAFJHEKh5hEOxE.roa (hash: T6+n5imfk+pQSeT5Osi01ihP8snYGAynnv1xpTuEaoU=) 12: xER0K9I9xK8DBLC6KDcI75JR9LY.roa (hash: OqOr60qixfUKi1rv4+JZ/v9458y498eM0Dbfd2dxyz4=) Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/eb/eee131-bb8c-4887-869b-6fe4d8fed160/1/h0v4BwzuQwXRo4npEPtRArvMGUE.crl rsync://rpki.ripe.net/repository/DEFAULT/eb/eee131-bb8c-4887-869b-6fe4d8fed160/1/h0v4BwzuQwXRo4npEPtRArvMGUE.mft rsync://rpki.ripe.net/repository/DEFAULT/h0v4BwzuQwXRo4npEPtRArvMGUE.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Wed 23 Jul 2025 02:00:53 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:98:2f:dc:c1:dd:f5:b8:0e:f3:77:b7:be:8e:fb:d6:38:64 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=874bf8070cee4305d1a389e910fb5102bbcc1941 Validity Not Before: Jul 22 02:00:53 2025 GMT Not After : Jul 23 02:00:53 2025 GMT Subject: CN=e61c117d7b8e30351e95e41d344a14727c64d50e Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:a6:5a:0b:ad:0a:ba:ff:09:47:59:4f:5b:56:8c: 55:ab:9c:c6:66:7d:65:00:39:9e:47:b0:47:d8:f3: 89:b3:5f:3d:36:fe:6a:5c:2d:d7:dd:e8:ab:07:70: 8b:32:dc:06:49:37:77:e1:43:17:34:03:b2:a6:8e: d9:a7:ca:00:18:29:d9:4c:59:73:60:9c:21:d7:2e: a7:d3:ee:72:81:ce:05:15:a4:89:cd:00:6d:21:5d: 88:57:38:5f:82:e9:93:4c:d0:cd:6a:de:7e:cf:d9: e3:3e:28:fc:c6:cf:aa:20:1d:3f:dc:3a:bd:7d:9c: dd:b3:45:53:7d:f5:bb:ae:62:e4:dd:b5:ec:58:4a: ce:8b:64:b2:b2:c9:ab:e1:4f:72:20:4b:ea:4b:92: 93:ea:14:f1:1c:95:0a:91:50:e4:34:b9:ad:01:06: 6d:ab:e7:ae:94:14:9b:e3:e8:36:67:0a:88:da:a8: 5f:8a:2f:f5:1e:60:dd:0b:70:63:b9:6b:fa:9c:a8: dc:7d:ab:9f:ab:6d:69:cc:5e:2b:57:b9:1d:a5:a5: 6b:65:dd:b2:52:67:d1:b3:80:67:e9:64:60:86:0b: f7:ef:cd:4a:78:68:13:3f:04:fe:c8:77:37:ac:2b: 94:af:ee:49:46:59:81:61:c8:df:4a:eb:dd:38:9f: e9:9b Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: E6:1C:11:7D:7B:8E:30:35:1E:95:E4:1D:34:4A:14:72:7C:64:D5:0E X509v3 Authority Key Identifier: keyid:87:4B:F8:07:0C:EE:43:05:D1:A3:89:E9:10:FB:51:02:BB:CC:19:41 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/h0v4BwzuQwXRo4npEPtRArvMGUE.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/eb/eee131-bb8c-4887-869b-6fe4d8fed160/1/h0v4BwzuQwXRo4npEPtRArvMGUE.mft X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/eb/eee131-bb8c-4887-869b-6fe4d8fed160/1/h0v4BwzuQwXRo4npEPtRArvMGUE.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 5f:1b:b7:5f:02:2a:db:e8:ab:cb:01:09:5c:c5:bf:c8:75:8f: 8f:84:4d:fb:d3:ab:e9:67:aa:86:ad:d3:3f:77:fa:4a:32:62: 08:fb:58:f9:35:3b:5b:ad:bf:9b:d0:34:2a:65:e5:d4:e3:47: 8a:66:bf:e2:6e:52:34:70:ce:52:70:14:bb:c5:0a:73:c9:a4: a1:9d:e9:0c:66:77:bb:94:06:68:e2:4d:e2:74:1f:17:9a:fd: 5f:50:28:d3:ea:d4:14:4d:bc:b4:9d:ba:24:ab:b1:44:3d:ed: 5d:dc:ab:15:d6:12:c3:5c:56:26:9a:2d:b8:0d:1a:16:60:1d: 97:aa:7f:ba:d5:cd:56:36:84:11:ff:66:f1:f5:e7:32:5a:0d: 6b:8d:0a:07:fa:0f:70:f5:67:44:d3:0d:ba:19:d2:e1:16:96: 6f:74:79:e9:f4:c9:dd:eb:ab:f8:24:41:b9:9e:37:c1:05:f0: 5f:c5:28:d4:e4:3e:41:f9:a5:82:32:19:1d:75:cb:13:d4:db: f7:92:c1:2d:e3:49:dd:b4:61:f9:32:2c:6b:33:3c:8b:f3:01: 9b:b3:b0:80:d7:c2:c3:e7:68:d2:72:aa:76:02:09:41:0b:88: af:43:6e:3e:87:a3:3f:5f:48:cd:83:72:5b:c7:c4:4c:f1:f9: 87:06:42:df -----BEGIN CERTIFICATE----- MIIFFjCCA/6gAwIBAgISAZgv3MHd9bgO83e3vo771jhkMA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKDg3NGJmODA3MGNlZTQzMDVkMWEzODllOTEwZmI1MTAyYmJj YzE5NDEwHhcNMjUwNzIyMDIwMDUzWhcNMjUwNzIzMDIwMDUzWjAzMTEwLwYDVQQD EyhlNjFjMTE3ZDdiOGUzMDM1MWU5NWU0MWQzNDRhMTQ3MjdjNjRkNTBlMIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAploLrQq6/wlHWU9bVoxVq5zGZn1l ADmeR7BH2POJs189Nv5qXC3X3eirB3CLMtwGSTd34UMXNAOypo7Zp8oAGCnZTFlz YJwh1y6n0+5ygc4FFaSJzQBtIV2IVzhfgumTTNDNat5+z9njPij8xs+qIB0/3Dq9 fZzds0VTffW7rmLk3bXsWErOi2Syssmr4U9yIEvqS5KT6hTxHJUKkVDkNLmtAQZt q+eulBSb4+g2ZwqI2qhfii/1HmDdC3BjuWv6nKjcfaufq21pzF4rV7kdpaVrZd2y UmfRs4Bn6WRghgv3781KeGgTPwT+yHc3rCuUr+5JRlmBYcjfSuvdOJ/pmwIDAQAB o4ICIjCCAh4wHQYDVR0OBBYEFOYcEX17jjA1HpXkHTRKFHJ8ZNUOMB8GA1UdIwQY MBaAFIdL+AcM7kMF0aOJ6RD7UQK7zBlBMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvaDB2NEJ3enVRd1hSbzRucEVQdFJBcnZNR1VFLmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC9lYi9lZWUxMzEtYmI4Yy00ODg3LTg2OWIt NmZlNGQ4ZmVkMTYwLzEvaDB2NEJ3enVRd1hSbzRucEVQdFJBcnZNR1VFLm1mdDCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC9lYi9lZWUxMzEtYmI4Yy00ODg3LTg2OWItNmZlNGQ4ZmVkMTYw LzEvaDB2NEJ3enVRd1hSbzRucEVQdFJBcnZNR1VFLmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAXxu3XwIq 2+irywEJXMW/yHWPj4RN+9Or6Weqhq3TP3f6SjJiCPtY+TU7W62/m9A0KmXl1ONH ima/4m5SNHDOUnAUu8UKc8mkoZ3pDGZ3u5QGaOJN4nQfF5r9X1Ao0+rUFE28tJ26 JKuxRD3tXdyrFdYSw1xWJpotuA0aFmAdl6p/utXNVjaEEf9m8fXnMloNa40KB/oP cPVnRNMNuhnS4RaWb3R56fTJ3eur+CRBuZ43wQXwX8Uo1OQ+QfmlgjIZHXXLE9Tb 95LBLeNJ3bRh+TIsazM8i/MBm7OwgNfCw+do0nKqdgIJQQuIr0NuPoejP19IzYNy W8fETPH5hwZC3w== -----END CERTIFICATE-----Generated at Tue Jul 22 12:28:34 2025 by rpki-client