$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/f2/cc6e99-6e5f-401b-912d-1095544c6c50/1/mc5WmhTC2zdy8jGHzmjmVB7ABI4.mft File: mc5WmhTC2zdy8jGHzmjmVB7ABI4.mft (raw, json) Hash identifier: WPdxoNFV6lZ2Z8vNKuNK1Zv/9gsg72PKiV07luWwgXg= Subject key identifier: 43:2E:EF:E1:BB:80:69:32:0B:08:C4:07:21:05:DA:83:EC:31:D2:CD Authority key identifier: 99:CE:56:9A:14:C2:DB:37:72:F2:31:87:CE:68:E6:54:1E:C0:04:8E Certificate issuer: /CN=99ce569a14c2db3772f23187ce68e6541ec0048e Certificate serial: 01982747A720558CF002B42A64A2A9B6E2D8 Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/mc5WmhTC2zdy8jGHzmjmVB7ABI4.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/f2/cc6e99-6e5f-401b-912d-1095544c6c50/1/mc5WmhTC2zdy8jGHzmjmVB7ABI4.mft Manifest number: 1610 Signing time: Sun 20 Jul 2025 10:01:03 +0000 Manifest this update: Sun 20 Jul 2025 10:01:03 +0000 Manifest next update: Mon 21 Jul 2025 10:01:03 +0000 Files and hashes: 1: 7hlWKm8vTIF0LH1H2oS6Admh1TI.roa (hash: JGgMMA+OZIrWq67kkKcLVk/aNndkz3SnG1R5RYOVvj8=) 2: 8Okcs_WzeZSlRzql6-e5V5V7syA.roa (hash: Bgf74cz9Nwo/ctlxM9vVhY3z4DibfYQP6Uszu31EXc8=) 3: AJpw_2i3EoQNYD9kunMPYOdByi8.roa (hash: 2y+udfjFmNVer5C4pJzKndxIM53KHs0ELdljGNxXclM=) 4: BW-ZjApW-eGpyxFEOc0qqC_7S5k.roa (hash: RqpMiCDIPeUSPd1EPbgHwl0XZwlcr7/eFSWcSxO7pPY=) 5: FjCA5Ak9pc8iYQAo2kd8vxWMg2c.roa (hash: LWHCt8fi0ffLNOHRJ69hCW6DNWkN+nY4S8kMpRaQ7ss=) 6: Ik8Kqt-zKfrsdQjyrAjHXX-mlLc.roa (hash: Zg9C0+0W8n0QIjR6RRPkp/OJIpBk8iu2+syGMIoxQyg=) 7: P82-6fcmXy1vqdLrwWWqytTl0TM.roa (hash: z01aDruR3yMRSRzpiGY2CGLWYQwuEAMQJV+YU0LBGGA=) 8: RYdEtsOojE3SXyShhqAjMIQl9xQ.roa (hash: bxAZYk1bj8j4gGSsg9+CUkCHFq1GRl7baVopFxolE0s=) 9: WBeAt2UOvPgAdfpllYF8DBrXsx8.roa (hash: IGhLKO/rQTI4tOBHJDgWqI73xTyqxuZsgF0ztyC/dOc=) 10: bbmenZqkY_bNQyceoK-fLvwWxdc.roa (hash: 5/uuA7PsJ4CyNOajTBR0J1Bkylsmq9V39AJtX9hFgFU=) 11: dMlBq16YcIM7-JR7sVrQGjUo5Ts.roa (hash: i7NU7NT4PhY/w3tg6T+Z3qdRHBm2oFSaLm/74+Urx2g=) 12: f4e7IUwG3JkPasx3oPPOpKnw014.roa (hash: oT75cSQjF7ggxHOJOkz6Sxjs0hfilCF0H6NE1nJtUfo=) 13: mNguxrQSssFTgOvDx-TtVJcngJ0.roa (hash: p4yScE1NaP9LVRZLGH/RikX/bIEDOl76JK/45ns5C9Q=) 14: mc5WmhTC2zdy8jGHzmjmVB7ABI4.crl (hash: jn8kEHuQuoarjTnX7+8GBWInC0QC6aPdLLeGmMuLVf4=) 15: u_mqTybwgy-hqVDwwCNi1Bf-8tI.roa (hash: JZzfV1nFUUQsICoBUJ9//kJmxjSvH3d3D7ybB8QQr/Y=) Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/f2/cc6e99-6e5f-401b-912d-1095544c6c50/1/mc5WmhTC2zdy8jGHzmjmVB7ABI4.crl rsync://rpki.ripe.net/repository/DEFAULT/f2/cc6e99-6e5f-401b-912d-1095544c6c50/1/mc5WmhTC2zdy8jGHzmjmVB7ABI4.mft rsync://rpki.ripe.net/repository/DEFAULT/mc5WmhTC2zdy8jGHzmjmVB7ABI4.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Mon 21 Jul 2025 06:21:25 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:98:27:47:a7:20:55:8c:f0:02:b4:2a:64:a2:a9:b6:e2:d8 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=99ce569a14c2db3772f23187ce68e6541ec0048e Validity Not Before: Jul 20 10:01:03 2025 GMT Not After : Jul 21 10:01:03 2025 GMT Subject: CN=432eefe1bb8069320b08c4072105da83ec31d2cd Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:c1:8a:27:6b:bb:00:66:a8:8b:50:62:8b:c6:18: 6f:4d:7b:a7:a1:ae:fb:2a:36:9e:69:53:0c:00:e7: 97:76:5c:37:cc:8c:07:35:a1:4b:76:12:de:65:a6: d3:6e:29:90:31:37:36:3b:2f:1d:db:fb:27:3b:3f: 41:a3:97:19:5d:ed:f3:e2:8d:95:24:1a:df:ea:92: 1f:78:5e:7b:b8:f3:2c:5a:72:31:1a:d5:dd:49:02: 6b:e4:9b:8d:d4:2a:c7:e5:0b:06:d1:24:df:02:c2: cb:92:c9:70:d3:39:ad:4e:bc:e9:5d:41:d7:bb:2e: c9:04:32:41:89:6b:3f:a8:5a:9c:b0:2c:b9:17:3f: f3:a3:0f:a1:2b:1e:59:31:86:06:77:43:7e:c4:de: e7:7a:6e:4c:1f:73:09:79:ac:61:67:96:0b:db:49: 44:0a:20:54:ec:8b:89:0b:14:be:7f:4a:79:dd:9a: 45:25:d9:55:05:94:0d:79:8c:97:7a:cb:29:15:03: 12:89:b5:3a:89:57:58:b1:1f:7c:a7:3b:d8:02:18: 5f:3d:e7:4a:c5:b5:24:3c:bf:5b:e8:b8:5c:39:1c: 43:cc:5f:e8:fd:09:88:e6:50:50:99:75:54:ee:ea: 2f:0a:5a:e0:20:5e:b9:60:61:dd:b2:e0:18:07:77: a6:f3 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 43:2E:EF:E1:BB:80:69:32:0B:08:C4:07:21:05:DA:83:EC:31:D2:CD X509v3 Authority Key Identifier: keyid:99:CE:56:9A:14:C2:DB:37:72:F2:31:87:CE:68:E6:54:1E:C0:04:8E X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/mc5WmhTC2zdy8jGHzmjmVB7ABI4.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/f2/cc6e99-6e5f-401b-912d-1095544c6c50/1/mc5WmhTC2zdy8jGHzmjmVB7ABI4.mft X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/f2/cc6e99-6e5f-401b-912d-1095544c6c50/1/mc5WmhTC2zdy8jGHzmjmVB7ABI4.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 4c:ba:8d:1c:43:07:bb:89:09:18:00:d1:fe:43:28:6e:00:ab: cd:b8:39:d9:e5:c6:88:cd:4b:5a:07:47:05:12:db:78:74:7c: c2:51:e5:71:10:8d:d9:62:1f:65:d9:54:49:0a:82:79:ea:72: b0:11:e1:9d:9d:77:01:1b:8e:64:e3:83:e5:2c:e8:36:97:e2: b6:eb:70:c5:32:c3:17:39:61:44:2e:4c:30:a1:b6:8f:a3:76: 5d:ce:81:d1:52:0d:01:42:c6:da:96:ac:74:cb:0a:24:0b:50: 0c:b2:7b:7b:96:e1:75:24:17:46:9e:57:66:84:64:45:b6:06: a5:fb:1a:db:f8:3a:08:3a:f3:ad:12:7d:85:09:1b:9a:72:ec: 39:37:e6:84:58:1c:0f:9b:2e:58:00:a4:cc:6d:12:98:a8:eb: c7:15:43:f8:f6:66:f0:b5:8c:0f:5f:55:44:55:de:e6:62:bf: 94:e3:4f:28:74:41:d3:95:d4:97:1d:1d:af:d3:7d:19:5b:cf: c2:5b:29:ca:f9:82:21:0c:b7:0c:5b:c4:77:25:c9:e0:92:7e: 27:1d:28:01:58:ae:70:1c:6d:b3:20:51:3f:d9:8a:91:ef:7b: bf:13:83:14:ef:20:31:7e:a4:29:23:0f:bc:61:4c:8f:a5:7c: 12:a5:b2:ae -----BEGIN CERTIFICATE----- MIIFFjCCA/6gAwIBAgISAZgnR6cgVYzwArQqZKKptuLYMA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKDk5Y2U1NjlhMTRjMmRiMzc3MmYyMzE4N2NlNjhlNjU0MWVj MDA0OGUwHhcNMjUwNzIwMTAwMTAzWhcNMjUwNzIxMTAwMTAzWjAzMTEwLwYDVQQD Eyg0MzJlZWZlMWJiODA2OTMyMGIwOGM0MDcyMTA1ZGE4M2VjMzFkMmNkMIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAwYona7sAZqiLUGKLxhhvTXunoa77 KjaeaVMMAOeXdlw3zIwHNaFLdhLeZabTbimQMTc2Oy8d2/snOz9Bo5cZXe3z4o2V JBrf6pIfeF57uPMsWnIxGtXdSQJr5JuN1CrH5QsG0STfAsLLkslw0zmtTrzpXUHX uy7JBDJBiWs/qFqcsCy5Fz/zow+hKx5ZMYYGd0N+xN7nem5MH3MJeaxhZ5YL20lE CiBU7IuJCxS+f0p53ZpFJdlVBZQNeYyXesspFQMSibU6iVdYsR98pzvYAhhfPedK xbUkPL9b6LhcORxDzF/o/QmI5lBQmXVU7uovClrgIF65YGHdsuAYB3em8wIDAQAB o4ICIjCCAh4wHQYDVR0OBBYEFEMu7+G7gGkyCwjEByEF2oPsMdLNMB8GA1UdIwQY MBaAFJnOVpoUwts3cvIxh85o5lQewASOMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvbWM1V21oVEMyemR5OGpHSHptam1WQjdBQkk0LmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC9mMi9jYzZlOTktNmU1Zi00MDFiLTkxMmQt MTA5NTU0NGM2YzUwLzEvbWM1V21oVEMyemR5OGpHSHptam1WQjdBQkk0Lm1mdDCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC9mMi9jYzZlOTktNmU1Zi00MDFiLTkxMmQtMTA5NTU0NGM2YzUw LzEvbWM1V21oVEMyemR5OGpHSHptam1WQjdBQkk0LmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEATLqNHEMH u4kJGADR/kMobgCrzbg52eXGiM1LWgdHBRLbeHR8wlHlcRCN2WIfZdlUSQqCeepy sBHhnZ13ARuOZOOD5SzoNpfitutwxTLDFzlhRC5MMKG2j6N2Xc6B0VINAULG2pas dMsKJAtQDLJ7e5bhdSQXRp5XZoRkRbYGpfsa2/g6CDrzrRJ9hQkbmnLsOTfmhFgc D5suWACkzG0SmKjrxxVD+PZm8LWMD19VRFXe5mK/lONPKHRB05XUlx0dr9N9GVvP wlspyvmCIQy3DFvEdyXJ4JJ+Jx0oAViucBxtsyBRP9mKke97vxODFO8gMX6kKSMP vGFMj6V8EqWyrg== -----END CERTIFICATE-----Generated at Sun Jul 20 16:20:31 2025 by rpki-client