$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/f5/6990e9-c3c0-478a-9997-95b08e3660cf/1/kiIItHtqhk2dH_M-BqqB0TgZp04.mft File: kiIItHtqhk2dH_M-BqqB0TgZp04.mft (raw, json) Hash identifier: HbeIc/bODxLeg96uCQ//gQDk5bWs86TS3GsVnpoVhNs= Subject key identifier: BB:CD:E5:15:22:B6:1C:92:EF:E4:18:26:FC:7D:2C:5E:9A:5A:54:F3 Authority key identifier: 92:22:08:B4:7B:6A:86:4D:9D:1F:F3:3E:06:AA:81:D1:38:19:A7:4E Certificate issuer: /CN=922208b47b6a864d9d1ff33e06aa81d13819a74e Certificate serial: 01984107626426F8645D72EFE4F58DCA89D7 Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/kiIItHtqhk2dH_M-BqqB0TgZp04.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/f5/6990e9-c3c0-478a-9997-95b08e3660cf/1/kiIItHtqhk2dH_M-BqqB0TgZp04.mft Manifest number: 1643 Signing time: Fri 25 Jul 2025 10:00:59 +0000 Manifest this update: Fri 25 Jul 2025 10:00:59 +0000 Manifest next update: Sat 26 Jul 2025 10:00:59 +0000 Files and hashes: 1: 1-rtI9dIBDPGpB7XLgp5LO6PPhNw.roa (hash: ZOyoK37XAa4AMrftPMDpS57217i8QyMPPSqOrLIuDh0=) 2: 1MqnWOr2XX863k_xrrBNGhpSTM8.roa (hash: ZAHJz2QsnnKlOkhGF4MOgyBVqnyxAgqsRswDwRAbn1Q=) 3: 58DWe-1QkmdAAqPP4rIPqHcvLEQ.roa (hash: DoGggoOx/JhNet5jvaMZxZ4j9WBmZq4GGjQzfQbuj24=) 4: ETJiLj_FPEXG5No5WrAoxGg_y_w.roa (hash: 662t7NLUufLVnPvlW5VowqyxEXMWNP4WIugo2zvrIGE=) 5: QX1PzB0slLNh42gV_9Uq9W7-NNU.roa (hash: 42Me4JYy4dGGMwi/uXUY8iDNdYDcztDyEjfKcP1cPGo=) 6: XPCmvArgHR13v_k02Z1LW1lWJx8.roa (hash: 9yrs8EgUGCgumASichQb2a43gXVQMGz8ZJNkpOkb3cg=) 7: XWYIJ6UuSY9_AQiT-hJINBObDQE.roa (hash: PdxLhxNEU7vSAkCuLaQWVId/t5OMWmj8bekrOqUDrSs=) 8: cOLPd5Lu_3ww7o-cdhWB7-TfdNY.roa (hash: S/36KJdTMQ8aIP0tPHIBx2zWJTQd/RRNG/oJA1iTyvo=) 9: iCgmGpyhGXjIvVkyeLmT7N8_y-4.roa (hash: jOahkOswhpSU7ry2oaBtzcTaxYOf5EimbWn3HXDfD9I=) 10: j-60Smkd34pUp65Reim9QN1pXBY.roa (hash: M2tsmNC79ATfwuHh7j2unUzS2isZxvxmhlA+F7YtpNY=) 11: jT8TtCFNTlKwPMmqlrycg4pd3Ks.roa (hash: Z/6XZMJC3dE7VsH6nt9a6dKmCPvrRaks+OkbIUHxD+w=) 12: kiIItHtqhk2dH_M-BqqB0TgZp04.crl (hash: VfRHNKJ/eA+fWDYJnbNSNf3jKZhC6CTBwyoZc6cp9sY=) 13: knSytMRDBBEnCJmSSPDhHWtHg0c.roa (hash: xgKSyUyWK6rR5NEa7nVIywiPdyu/cPSGzuk49MX8f0A=) 14: vBAure0FxWxWdTfj2W3O6_7De24.roa (hash: yikPG1Koq3q/WuhD/GCuT4mpPwhtQgx1jshmNW1jKHY=) 15: yyPUAj_dCWAktPW0jmBjCiRvIJg.roa (hash: H8oCA9x6vnmIvl4HatB3uvnypYSjgIN9/CrfMgatutI=) Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/f5/6990e9-c3c0-478a-9997-95b08e3660cf/1/kiIItHtqhk2dH_M-BqqB0TgZp04.crl rsync://rpki.ripe.net/repository/DEFAULT/f5/6990e9-c3c0-478a-9997-95b08e3660cf/1/kiIItHtqhk2dH_M-BqqB0TgZp04.mft rsync://rpki.ripe.net/repository/DEFAULT/kiIItHtqhk2dH_M-BqqB0TgZp04.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Sat 26 Jul 2025 08:00:05 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:98:41:07:62:64:26:f8:64:5d:72:ef:e4:f5:8d:ca:89:d7 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=922208b47b6a864d9d1ff33e06aa81d13819a74e Validity Not Before: Jul 25 10:00:59 2025 GMT Not After : Jul 26 10:00:59 2025 GMT Subject: CN=bbcde51522b61c92efe41826fc7d2c5e9a5a54f3 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:c4:a9:0f:67:7f:f3:8a:a9:02:a3:6b:b5:31:ec: 8d:71:e0:f6:80:34:22:ae:7b:b1:82:d1:eb:67:2c: d5:6d:d0:74:2f:4a:b8:5a:22:a6:c4:32:36:0e:fc: fb:d6:d9:5b:ee:a5:3d:dd:55:8b:e4:34:a2:46:ab: dd:ed:ff:fc:85:bd:97:b8:b4:60:ab:2c:ae:1d:8f: 7d:68:77:ff:b6:7d:43:01:67:2e:fe:83:0c:c7:8c: 92:83:c4:df:26:5f:c4:e5:34:84:b0:49:c3:c8:4f: 91:ef:38:90:3a:22:52:87:19:5e:cc:75:68:d8:61: cf:95:45:4d:36:e0:dc:d1:2c:8b:11:98:d4:8d:d7: a4:84:c5:67:2e:7e:df:7c:d1:b8:8c:ad:bf:c6:2b: db:f3:54:c9:5a:53:f6:23:42:fe:76:39:70:b9:12: 1c:f0:e3:40:0e:34:ef:47:d2:ae:ee:cc:f9:82:0c: 9e:0f:2a:37:db:15:7f:91:11:13:52:f1:bd:ed:db: c8:8a:e8:03:a0:a8:5f:69:6c:8f:fc:9b:10:c8:45: 91:2b:2e:6c:a6:89:51:f3:1e:82:51:ff:86:18:ea: 98:c2:9f:02:ec:64:05:b8:ca:fa:66:6d:ee:de:27: 09:cf:ae:21:8a:93:8c:c0:53:d6:1c:da:d7:bc:98: 62:8b Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: BB:CD:E5:15:22:B6:1C:92:EF:E4:18:26:FC:7D:2C:5E:9A:5A:54:F3 X509v3 Authority Key Identifier: keyid:92:22:08:B4:7B:6A:86:4D:9D:1F:F3:3E:06:AA:81:D1:38:19:A7:4E X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/kiIItHtqhk2dH_M-BqqB0TgZp04.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/f5/6990e9-c3c0-478a-9997-95b08e3660cf/1/kiIItHtqhk2dH_M-BqqB0TgZp04.mft X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/f5/6990e9-c3c0-478a-9997-95b08e3660cf/1/kiIItHtqhk2dH_M-BqqB0TgZp04.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption b8:d0:21:fb:21:ef:7f:ba:47:f8:40:a1:59:95:43:6f:5d:0a: 51:52:70:c6:4e:1d:51:70:02:70:d8:31:f6:2a:f7:df:fd:69: 43:5a:31:8c:5c:d1:1a:83:b9:d1:1b:2f:b1:ec:cb:6a:84:d0: 49:a0:ba:b4:78:f2:d5:17:71:cb:46:03:d6:4d:20:a9:85:86: dd:90:4d:1a:a4:b2:97:66:7e:d3:fe:a4:44:7c:bf:8c:59:92: 32:9d:e5:7c:ba:ed:55:a6:21:05:2e:f9:ba:ba:12:9d:6c:22: 70:bd:54:3c:a2:58:94:62:58:8c:29:49:08:61:c4:68:62:96: 54:ce:a0:6a:59:22:ed:24:c0:b0:31:0a:3a:a6:22:83:05:35: 3b:17:ad:6d:98:d5:1b:ec:12:c9:06:e6:6a:72:31:b3:89:c5: 60:d6:9a:9c:b0:48:fe:f9:7b:19:ae:2b:cf:c3:2a:39:f9:f3: c6:11:e7:a2:52:a7:75:88:8d:1b:78:e4:8a:e6:e5:8e:a0:0b: ca:b3:a8:6f:67:8f:0f:d7:4d:b5:d9:25:e3:40:90:ee:70:d5: af:86:64:52:a5:63:c2:ef:07:c1:58:50:19:c1:4a:5e:10:d6: 35:5c:80:ae:19:cc:e8:d0:70:7c:8b:ac:bf:08:e7:10:fc:29: f5:a2:50:27 -----BEGIN CERTIFICATE----- MIIFFjCCA/6gAwIBAgISAZhBB2JkJvhkXXLv5PWNyonXMA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKDkyMjIwOGI0N2I2YTg2NGQ5ZDFmZjMzZTA2YWE4MWQxMzgx OWE3NGUwHhcNMjUwNzI1MTAwMDU5WhcNMjUwNzI2MTAwMDU5WjAzMTEwLwYDVQQD EyhiYmNkZTUxNTIyYjYxYzkyZWZlNDE4MjZmYzdkMmM1ZTlhNWE1NGYzMIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAxKkPZ3/ziqkCo2u1MeyNceD2gDQi rnuxgtHrZyzVbdB0L0q4WiKmxDI2Dvz71tlb7qU93VWL5DSiRqvd7f/8hb2XuLRg qyyuHY99aHf/tn1DAWcu/oMMx4ySg8TfJl/E5TSEsEnDyE+R7ziQOiJShxlezHVo 2GHPlUVNNuDc0SyLEZjUjdekhMVnLn7ffNG4jK2/xivb81TJWlP2I0L+djlwuRIc 8ONADjTvR9Ku7sz5ggyeDyo32xV/kRETUvG97dvIiugDoKhfaWyP/JsQyEWRKy5s polR8x6CUf+GGOqYwp8C7GQFuMr6Zm3u3icJz64hipOMwFPWHNrXvJhiiwIDAQAB o4ICIjCCAh4wHQYDVR0OBBYEFLvN5RUithyS7+QYJvx9LF6aWlTzMB8GA1UdIwQY MBaAFJIiCLR7aoZNnR/zPgaqgdE4GadOMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQva2lJSXRIdHFoazJkSF9NLUJxcUIwVGdacDA0LmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC9mNS82OTkwZTktYzNjMC00NzhhLTk5OTct OTViMDhlMzY2MGNmLzEva2lJSXRIdHFoazJkSF9NLUJxcUIwVGdacDA0Lm1mdDCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC9mNS82OTkwZTktYzNjMC00NzhhLTk5OTctOTViMDhlMzY2MGNm LzEva2lJSXRIdHFoazJkSF9NLUJxcUIwVGdacDA0LmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAuNAh+yHv f7pH+EChWZVDb10KUVJwxk4dUXACcNgx9ir33/1pQ1oxjFzRGoO50RsvsezLaoTQ SaC6tHjy1Rdxy0YD1k0gqYWG3ZBNGqSyl2Z+0/6kRHy/jFmSMp3lfLrtVaYhBS75 uroSnWwicL1UPKJYlGJYjClJCGHEaGKWVM6galki7STAsDEKOqYigwU1OxetbZjV G+wSyQbmanIxs4nFYNaanLBI/vl7Ga4rz8MqOfnzxhHnolKndYiNG3jkiubljqAL yrOob2ePD9dNtdkl40CQ7nDVr4ZkUqVjwu8HwVhQGcFKXhDWNVyArhnM6NBwfIus vwjnEPwp9aJQJw== -----END CERTIFICATE-----Generated at Fri Jul 25 13:18:48 2025 by rpki-client