$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/f1/a8b14b-fb25-47f8-8b0d-271d25e20574/1/ER1oFDdScdGjy9EhVdsR0r1BqNM.mft File: ER1oFDdScdGjy9EhVdsR0r1BqNM.mft (raw, json) Hash identifier: F1/9Aow4mH34S3+BzZ+1RloR+K8nvzN3DXjVdrNSHIA= Subject key identifier: 75:D4:41:59:64:F4:4B:44:2A:5B:45:D4:57:27:49:70:18:D2:53:8C Authority key identifier: 11:1D:68:14:37:52:71:D1:A3:CB:D1:21:55:DB:11:D2:BD:41:A8:D3 Certificate issuer: /CN=111d6814375271d1a3cbd12155db11d2bd41a8d3 Certificate serial: 019848C0AF19E490993E5024E74F2ECDABCC Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/ER1oFDdScdGjy9EhVdsR0r1BqNM.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/f1/a8b14b-fb25-47f8-8b0d-271d25e20574/1/ER1oFDdScdGjy9EhVdsR0r1BqNM.mft Manifest number: 14C6 Signing time: Sat 26 Jul 2025 22:00:43 +0000 Manifest this update: Sat 26 Jul 2025 22:00:43 +0000 Manifest next update: Sun 27 Jul 2025 22:00:43 +0000 Files and hashes: 1: 1-Eladd6sj8Y7vq1mtW5h6ASM_tM.roa (hash: auxhruGljCxtN9ijkL9KZ/K4C+RcNKrzhKvUSRg/9HQ=) 2: 1-dpIOgQrHNlMUsxt6C2Ztf5nfuM.roa (hash: pCUJMhojWf39aVt/QyofbsbuGjc8Gizw3ZJ2MSqOsTA=) 3: 1-gUTUj2JpuChCvozdxCQFTR22DM.roa (hash: f/2CCyCRw0ujuPO8AP04nbSH6GVLpL5l8bdrrfS8KoQ=) 4: 4JmdsvBatEpFanHBLwN8tE53B0o.roa (hash: rZ4Y8EU6soeJCyiHjLhVB0iARab8gRMfLlwRpZ6KFuk=) 5: 7ap_QJi20SaGnPgK1pV6_7cP-Uo.roa (hash: BOo8F2wEw4BgZClwTOfUjkt0HIqhHPtSsQJru4E0kFk=) 6: 7pYVLfxDyksCdUmiOhbgviOo3x8.roa (hash: QcPN759vJqixjDGU3gmMeZsCeSMWabiqP3hVma37vPU=) 7: ER1oFDdScdGjy9EhVdsR0r1BqNM.crl (hash: UvaQLauby0U2sRvLG4voEXdv8rMX8hcVuZKaWc/NyVg=) 8: Hfkubm6yrWEn7gBE9wSMaD_ExXE.roa (hash: FXP2ir2FJkx6oy+MltDsbhNB8kOwwEjeXoSk5fOxlUM=) 9: Kk7xKrzHzx6qmDJI5CVBM_Sl474.roa (hash: m5FUWhJ54zbQwUlYkehhIiOw3x1SXokhdxGSIsx1B6c=) 10: Si8V8khtv0yVUA78DGGzfalNcCk.roa (hash: TuKNETdYYEdxWIcOAjkF1OdADD7zXp4g+mS6E5V7pvo=) 11: XjirH4cwDvxlRkAGxm7FSwAK2sM.roa (hash: YF/U/qPEr6M3Q+MIXQrnfUUKIV5n5WTRe7Dd9hsZTtM=) 12: aaSIhAJHCTwygtdFuXnOQPW6bY4.roa (hash: wv3RWyn/0THt7bCTdq/aMs2HWBM2MxgNANY6nblHNaA=) 13: azpo2jbXZip4fzf6JfxzYCloMXU.roa (hash: lChd9oLNFRupauF5HA1DBK7UGcNDTVpyA1eioCbGUns=) 14: cozXNddBZMRS0D_fVDWk42XqVNI.roa (hash: nP2wP4zibtasbSbsg7EMlMPSKjFkuBzXXdP2DBCONIM=) 15: iwe0kg-crqIWyp2IScMa9LxREgQ.roa (hash: CaVzf6weXzwiNznLUpeTB+QaHcaNjVgYiVjygsUgHxg=) 16: lQoeI3fot2NEOazpcJqwENKoEUU.roa (hash: Elimcemes6spMNky/T+TAYcPtxVw5jFrGcayiuk5D80=) 17: vsEC-C0-IZ2XJzdCqJMyLFlVXyo.roa (hash: 6dyvsyNO+SBB5YmEGzfWoUfWH/YqXAoOIBD3aTROXnU=) Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/f1/a8b14b-fb25-47f8-8b0d-271d25e20574/1/ER1oFDdScdGjy9EhVdsR0r1BqNM.crl rsync://rpki.ripe.net/repository/DEFAULT/f1/a8b14b-fb25-47f8-8b0d-271d25e20574/1/ER1oFDdScdGjy9EhVdsR0r1BqNM.mft rsync://rpki.ripe.net/repository/DEFAULT/ER1oFDdScdGjy9EhVdsR0r1BqNM.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Sun 27 Jul 2025 20:00:05 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:98:48:c0:af:19:e4:90:99:3e:50:24:e7:4f:2e:cd:ab:cc Signature Algorithm: sha256WithRSAEncryption Issuer: CN=111d6814375271d1a3cbd12155db11d2bd41a8d3 Validity Not Before: Jul 26 22:00:43 2025 GMT Not After : Jul 27 22:00:43 2025 GMT Subject: CN=75d4415964f44b442a5b45d45727497018d2538c Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:82:76:a6:59:bb:de:e9:f1:e9:8d:84:00:5d:c5: 48:a5:1f:3a:eb:db:1f:ae:a2:a5:3b:9f:a4:c8:b1: bd:19:8a:3d:bd:67:31:e9:fc:42:eb:9d:aa:ac:e6: 4d:92:d3:bd:f0:14:8b:df:88:25:47:a4:f5:0a:1d: e5:5f:1b:d7:15:dc:a0:56:3c:64:f7:21:ae:c4:e9: 53:64:69:33:44:b1:35:29:d7:ee:89:3f:6d:97:53: d8:19:24:7e:73:77:07:31:24:ad:8f:43:80:8d:d1: 18:19:8e:bf:2e:58:d2:1f:23:a6:48:fd:9d:c6:7e: e2:26:7e:b8:60:56:ca:a2:28:72:09:23:22:ec:1f: e3:7a:3b:64:f5:68:cc:1b:55:6c:7f:93:f2:ef:26: 1e:2b:e5:2e:fc:2d:66:94:30:a7:eb:a4:49:c5:ff: 9d:ce:4d:d1:f4:c9:87:ee:c3:41:df:fd:de:ce:ce: 14:32:da:5c:fa:08:95:aa:b7:f1:e7:e5:02:f5:be: d2:11:e0:9f:28:10:fa:10:69:65:36:04:91:20:52: e2:2b:a6:8b:e8:63:8b:bd:79:92:99:70:b5:56:9a: 7f:16:1f:c8:7e:c7:df:22:a0:be:9f:ad:4d:b1:02: 55:d4:7c:0b:d0:bf:a4:18:c8:cd:dd:70:7e:4f:d5: 92:07 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 75:D4:41:59:64:F4:4B:44:2A:5B:45:D4:57:27:49:70:18:D2:53:8C X509v3 Authority Key Identifier: keyid:11:1D:68:14:37:52:71:D1:A3:CB:D1:21:55:DB:11:D2:BD:41:A8:D3 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/ER1oFDdScdGjy9EhVdsR0r1BqNM.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/f1/a8b14b-fb25-47f8-8b0d-271d25e20574/1/ER1oFDdScdGjy9EhVdsR0r1BqNM.mft X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/f1/a8b14b-fb25-47f8-8b0d-271d25e20574/1/ER1oFDdScdGjy9EhVdsR0r1BqNM.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 2c:e1:c2:b3:82:ff:0e:30:ab:8b:44:91:aa:8e:5a:66:88:a6: 6c:6a:10:66:3c:58:a9:7a:da:90:05:1c:aa:b8:af:7e:ee:72: ce:33:34:e2:cd:f2:5d:57:32:a6:c0:e0:c7:92:15:2a:ac:0b: ae:29:d8:93:de:5d:75:a1:d3:dc:78:69:30:f9:1d:0e:cd:7e: cf:cc:8e:54:39:d6:c2:26:ab:df:7b:e8:8c:64:4f:4a:3e:07: cb:cf:46:a1:27:8f:3b:5a:42:79:c1:de:35:63:82:4c:45:9f: 8f:e6:6a:9f:98:43:aa:95:7b:65:7f:cc:aa:52:12:ab:50:45: 68:56:0e:56:04:bc:5f:f4:14:bc:f3:e7:b3:10:e8:6d:63:64: 40:75:22:5b:3a:01:e8:10:10:60:8e:79:87:28:c8:28:fb:2c: bd:af:b9:8f:2a:00:cd:67:75:07:6b:9c:77:f3:2d:36:22:b3: 33:7f:74:94:95:87:53:96:c9:53:e1:8a:80:8f:95:7b:87:56: 69:58:d9:cf:e6:3e:00:84:a9:a7:95:b1:3c:4d:bb:4b:2e:c8: d5:6c:45:ab:72:1a:ce:c4:32:b1:87:6e:93:ef:2e:e5:4c:ff: fa:08:38:dc:1f:16:0d:a6:61:92:c4:fa:1c:92:20:1a:60:7d: 75:2b:57:1a -----BEGIN CERTIFICATE----- MIIFFjCCA/6gAwIBAgISAZhIwK8Z5JCZPlAk508uzavMMA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKDExMWQ2ODE0Mzc1MjcxZDFhM2NiZDEyMTU1ZGIxMWQyYmQ0 MWE4ZDMwHhcNMjUwNzI2MjIwMDQzWhcNMjUwNzI3MjIwMDQzWjAzMTEwLwYDVQQD Eyg3NWQ0NDE1OTY0ZjQ0YjQ0MmE1YjQ1ZDQ1NzI3NDk3MDE4ZDI1MzhjMIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAgnamWbve6fHpjYQAXcVIpR8669sf rqKlO5+kyLG9GYo9vWcx6fxC652qrOZNktO98BSL34glR6T1Ch3lXxvXFdygVjxk 9yGuxOlTZGkzRLE1KdfuiT9tl1PYGSR+c3cHMSStj0OAjdEYGY6/LljSHyOmSP2d xn7iJn64YFbKoihyCSMi7B/jejtk9WjMG1Vsf5Py7yYeK+Uu/C1mlDCn66RJxf+d zk3R9MmH7sNB3/3ezs4UMtpc+giVqrfx5+UC9b7SEeCfKBD6EGllNgSRIFLiK6aL 6GOLvXmSmXC1Vpp/Fh/IfsffIqC+n61NsQJV1HwL0L+kGMjN3XB+T9WSBwIDAQAB o4ICIjCCAh4wHQYDVR0OBBYEFHXUQVlk9EtEKltF1FcnSXAY0lOMMB8GA1UdIwQY MBaAFBEdaBQ3UnHRo8vRIVXbEdK9QajTMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvRVIxb0ZEZFNjZEdqeTlFaFZkc1IwcjFCcU5NLmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC9mMS9hOGIxNGItZmIyNS00N2Y4LThiMGQt MjcxZDI1ZTIwNTc0LzEvRVIxb0ZEZFNjZEdqeTlFaFZkc1IwcjFCcU5NLm1mdDCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC9mMS9hOGIxNGItZmIyNS00N2Y4LThiMGQtMjcxZDI1ZTIwNTc0 LzEvRVIxb0ZEZFNjZEdqeTlFaFZkc1IwcjFCcU5NLmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEALOHCs4L/ DjCri0SRqo5aZoimbGoQZjxYqXrakAUcqrivfu5yzjM04s3yXVcypsDgx5IVKqwL rinYk95ddaHT3HhpMPkdDs1+z8yOVDnWwiar33vojGRPSj4Hy89GoSePO1pCecHe NWOCTEWfj+Zqn5hDqpV7ZX/MqlISq1BFaFYOVgS8X/QUvPPnsxDobWNkQHUiWzoB 6BAQYI55hyjIKPssva+5jyoAzWd1B2ucd/MtNiKzM390lJWHU5bJU+GKgI+Ve4dW aVjZz+Y+AISpp5WxPE27Sy7I1WxFq3IazsQysYduk+8u5Uz/+gg43B8WDaZhksT6 HJIgGmB9dStXGg== -----END CERTIFICATE-----Generated at Sun Jul 27 03:43:05 2025 by rpki-client