$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/ed/8e8e82-5274-4d2f-8ca0-ab19fcb0ce64/1/4VgI8_khvIw-6ofHWExYTBAAsFE.mft File: 4VgI8_khvIw-6ofHWExYTBAAsFE.mft (raw, json) Hash identifier: RVpgmi4FNiAzKfLhCus3Qm8hoecvzNmPzEY/+Sauwvo= Subject key identifier: 65:DF:A0:68:E4:51:2E:55:84:60:1B:1A:17:C2:AF:5C:E7:86:13:B7 Authority key identifier: E1:58:08:F3:F9:21:BC:8C:3E:EA:87:C7:58:4C:58:4C:10:00:B0:51 Certificate issuer: /CN=e15808f3f921bc8c3eea87c7584c584c1000b051 Certificate serial: 0198529F0E217841FB2BE7F9C86CBF13C39D Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/4VgI8_khvIw-6ofHWExYTBAAsFE.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/ed/8e8e82-5274-4d2f-8ca0-ab19fcb0ce64/1/4VgI8_khvIw-6ofHWExYTBAAsFE.mft Manifest number: 1627 Signing time: Mon 28 Jul 2025 20:00:12 +0000 Manifest this update: Mon 28 Jul 2025 20:00:12 +0000 Manifest next update: Tue 29 Jul 2025 20:00:12 +0000 Files and hashes: 1: 4VgI8_khvIw-6ofHWExYTBAAsFE.crl (hash: RtJlsFPeZ/59CpUU/qIrfdk+cnfAaPTfJWo7SC1know=) 2: 7hCd_HKEYkXLvNCBLfMsTezcRXs.roa (hash: U6tVugGWrDYmHCXTomFCnYlQyCN2W9AcT+utfrGkYmM=) 3: HK9YTPeAPa2mm7JsqVFDcEqWktE.roa (hash: pGFfaceKosL6QVYMO3oG4sR8CNlOKvbDd43IVlI91l4=) 4: SiUykNKTjaApyo1sqndO19rBYAs.roa (hash: jaR1D2Lqsnpc33UxJXomGKoF/S6s6EdMDhOpwvCqmiY=) 5: YxnLmhiEAoRIPwqx7D5pI2tVg0E.roa (hash: Z5VZl3NN5nIeNmBSmYIBYR811mPwFTzRI+uDPXf+8B0=) 6: dsVEniM-PjP3aF57gRKfJeGsuXA.roa (hash: rATVs9dRCK5irdzRkSY1vrtCfxCwPvZoSJA3EPbdN5Q=) 7: jNJogHc9h5lodSxhpjDRYEENUOM.roa (hash: O0aQYdB/pHChDSdymrPe8W/YPJRqMLBI8pg3+YHjgZ8=) 8: myrzpFPZKEFrMiKvWzGEDQDrl_I.roa (hash: J9rVlZg9Lutrp3UmbnqdopvJazmPd6IwXd6xHibeysc=) 9: pm4iWvL8z96fIGtjxaGjSXeRJT4.roa (hash: ZYVelcX+1GR4HDMDdE6U47zsAh6vEcuxWCIg/8E3uZE=) 10: qeW6k62Ova_Op7BhYtzucMuedHs.roa (hash: iPCOF2sKXY5KaN1yHnhdOMP4cE9n3NAPWSlvKOP6/hY=) 11: qispPpKIlPSWV1rI1EAZQtlT-p0.roa (hash: sBtkCqwyGciPSktKwAiba5P4WFIxvlZFVG+B/hvcwgI=) 12: z1XxJmXXx8uVxhk9CwQJXiPqHzU.roa (hash: EaljD/90P2BfuVNTpmwdBC+zdctwtxvncMDcXLvuk10=) Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/ed/8e8e82-5274-4d2f-8ca0-ab19fcb0ce64/1/4VgI8_khvIw-6ofHWExYTBAAsFE.crl rsync://rpki.ripe.net/repository/DEFAULT/ed/8e8e82-5274-4d2f-8ca0-ab19fcb0ce64/1/4VgI8_khvIw-6ofHWExYTBAAsFE.mft rsync://rpki.ripe.net/repository/DEFAULT/4VgI8_khvIw-6ofHWExYTBAAsFE.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Tue 29 Jul 2025 20:00:12 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:98:52:9f:0e:21:78:41:fb:2b:e7:f9:c8:6c:bf:13:c3:9d Signature Algorithm: sha256WithRSAEncryption Issuer: CN=e15808f3f921bc8c3eea87c7584c584c1000b051 Validity Not Before: Jul 28 20:00:12 2025 GMT Not After : Jul 29 20:00:12 2025 GMT Subject: CN=65dfa068e4512e5584601b1a17c2af5ce78613b7 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:8a:0e:88:bd:58:28:28:4f:d4:3e:b4:c9:8c:ac: c9:0c:8a:92:5b:8a:2b:c2:60:27:2d:6b:a5:8d:41: 42:4f:1d:d6:fd:12:81:36:9b:ef:58:36:2b:d0:ba: c6:04:6c:11:48:a1:42:26:26:ce:c9:19:ad:e0:0f: 1f:fa:eb:da:47:f6:45:63:02:41:8c:9e:80:3a:a1: 72:42:87:64:d8:3f:ba:cc:c4:89:a0:92:46:c0:08: 44:b3:af:57:eb:49:28:82:c7:30:95:3c:d7:97:13: cc:62:57:d7:4e:fc:93:6e:d7:14:4a:3c:3a:c5:00: 21:ac:b8:b4:63:68:f9:28:d0:15:b1:92:33:5e:8f: 3b:dd:cd:3c:67:0b:10:65:c7:32:f9:45:bb:94:a1: 10:53:f4:2e:fa:4f:4b:c5:07:50:41:27:ed:e3:7e: ff:8e:47:51:40:1d:12:f7:b4:cb:70:18:69:94:bd: 02:4d:25:2c:02:ce:f8:4c:94:1e:47:b1:43:8b:8b: fe:7c:97:b7:e3:e1:e4:3a:a9:8c:68:21:7b:06:ee: 59:c1:73:14:0e:58:a4:fb:90:1a:41:bd:10:48:cd: 15:cf:43:38:a6:39:50:e1:3a:d6:30:ec:e7:09:5c: 29:bb:f1:6e:95:85:e7:2c:50:6f:a3:cd:2d:b6:73: b1:51 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 65:DF:A0:68:E4:51:2E:55:84:60:1B:1A:17:C2:AF:5C:E7:86:13:B7 X509v3 Authority Key Identifier: keyid:E1:58:08:F3:F9:21:BC:8C:3E:EA:87:C7:58:4C:58:4C:10:00:B0:51 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/4VgI8_khvIw-6ofHWExYTBAAsFE.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/ed/8e8e82-5274-4d2f-8ca0-ab19fcb0ce64/1/4VgI8_khvIw-6ofHWExYTBAAsFE.mft X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/ed/8e8e82-5274-4d2f-8ca0-ab19fcb0ce64/1/4VgI8_khvIw-6ofHWExYTBAAsFE.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 11:07:6e:f5:85:a1:05:f7:2f:64:d2:c2:fd:bb:f5:b8:48:c0: 8d:81:a4:ef:70:6c:77:e1:d0:cb:1e:3f:cf:41:96:3b:53:9f: 9c:4e:45:0e:9d:a8:69:69:81:26:be:62:e2:3e:c0:8a:d0:32: d8:20:0b:41:f5:33:fb:f6:b7:e3:16:2e:5f:2a:97:e8:a0:60: d2:ac:74:1a:39:90:54:cd:8a:60:38:88:81:99:ef:b7:64:41: 4c:62:5e:29:d5:e5:0a:82:2d:38:93:22:59:c9:12:2f:2c:09: f3:21:85:28:95:c1:e1:3a:49:e1:16:8f:26:62:ed:0d:5a:b0: d6:e5:75:68:99:70:9e:46:e1:c3:d4:47:de:b5:c8:99:fa:38: 15:f3:9f:b1:bd:c1:d7:98:a9:c7:d3:b6:1e:c7:e0:8c:9a:a7: 58:d4:bb:ed:b6:2d:db:e0:73:f4:ab:1f:a8:db:dc:66:25:99: 4c:e2:74:61:63:70:20:29:62:e9:bd:1c:53:7a:e4:e5:7e:9b: 46:a4:b6:b5:25:e8:08:7a:ef:31:b4:e8:b9:42:28:e5:1c:b6: 0b:8b:1d:e2:40:5e:02:f2:cf:73:9e:b0:ef:4b:59:d5:ab:fa: 64:b4:d7:c8:53:20:f6:a4:fa:65:3c:ac:d1:d8:e7:85:71:fb: 12:4b:64:a3 -----BEGIN CERTIFICATE----- MIIFFjCCA/6gAwIBAgISAZhSnw4heEH7K+f5yGy/E8OdMA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKGUxNTgwOGYzZjkyMWJjOGMzZWVhODdjNzU4NGM1ODRjMTAw MGIwNTEwHhcNMjUwNzI4MjAwMDEyWhcNMjUwNzI5MjAwMDEyWjAzMTEwLwYDVQQD Eyg2NWRmYTA2OGU0NTEyZTU1ODQ2MDFiMWExN2MyYWY1Y2U3ODYxM2I3MIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAig6IvVgoKE/UPrTJjKzJDIqSW4or wmAnLWuljUFCTx3W/RKBNpvvWDYr0LrGBGwRSKFCJibOyRmt4A8f+uvaR/ZFYwJB jJ6AOqFyQodk2D+6zMSJoJJGwAhEs69X60kogscwlTzXlxPMYlfXTvyTbtcUSjw6 xQAhrLi0Y2j5KNAVsZIzXo873c08ZwsQZccy+UW7lKEQU/Qu+k9LxQdQQSft437/ jkdRQB0S97TLcBhplL0CTSUsAs74TJQeR7FDi4v+fJe34+HkOqmMaCF7Bu5ZwXMU Dlik+5AaQb0QSM0Vz0M4pjlQ4TrWMOznCVwpu/FulYXnLFBvo80ttnOxUQIDAQAB o4ICIjCCAh4wHQYDVR0OBBYEFGXfoGjkUS5VhGAbGhfCr1znhhO3MB8GA1UdIwQY MBaAFOFYCPP5IbyMPuqHx1hMWEwQALBRMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvNFZnSThfa2h2SXctNm9mSFdFeFlUQkFBc0ZFLmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC9lZC84ZThlODItNTI3NC00ZDJmLThjYTAt YWIxOWZjYjBjZTY0LzEvNFZnSThfa2h2SXctNm9mSFdFeFlUQkFBc0ZFLm1mdDCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC9lZC84ZThlODItNTI3NC00ZDJmLThjYTAtYWIxOWZjYjBjZTY0 LzEvNFZnSThfa2h2SXctNm9mSFdFeFlUQkFBc0ZFLmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAEQdu9YWh BfcvZNLC/bv1uEjAjYGk73Bsd+HQyx4/z0GWO1OfnE5FDp2oaWmBJr5i4j7AitAy 2CALQfUz+/a34xYuXyqX6KBg0qx0GjmQVM2KYDiIgZnvt2RBTGJeKdXlCoItOJMi WckSLywJ8yGFKJXB4TpJ4RaPJmLtDVqw1uV1aJlwnkbhw9RH3rXImfo4FfOfsb3B 15ipx9O2HsfgjJqnWNS77bYt2+Bz9KsfqNvcZiWZTOJ0YWNwICli6b0cU3rk5X6b RqS2tSXoCHrvMbTouUIo5Ry2C4sd4kBeAvLPc56w70tZ1av6ZLTXyFMg9qT6ZTys 0djnhXH7Ektkow== -----END CERTIFICATE-----Generated at Tue Jul 29 04:00:42 2025 by rpki-client