$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/fd/5786ab-067e-440c-b276-1b06d1c704c1/1/09VvB74YTLpS9v3ASegRTSYWwyo.mft File: 09VvB74YTLpS9v3ASegRTSYWwyo.mft (raw, json) Hash identifier: ExzjHI7tbCTv1YBHS6+Ak8laJ/GZLa4cQVD/BPyvF3Y= Subject key identifier: 93:E9:4D:3A:CA:0D:E2:78:A4:2D:5E:8B:71:1B:DB:5F:A2:1E:11:13 Authority key identifier: D3:D5:6F:07:BE:18:4C:BA:52:F6:FD:C0:49:E8:11:4D:26:16:C3:2A Certificate issuer: /CN=d3d56f07be184cba52f6fdc049e8114d2616c32a Certificate serial: 01984852F0167D310C5D2218A618BE205491 Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/09VvB74YTLpS9v3ASegRTSYWwyo.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/fd/5786ab-067e-440c-b276-1b06d1c704c1/1/09VvB74YTLpS9v3ASegRTSYWwyo.mft Manifest number: 1608 Signing time: Sat 26 Jul 2025 20:00:51 +0000 Manifest this update: Sat 26 Jul 2025 20:00:51 +0000 Manifest next update: Sun 27 Jul 2025 20:00:51 +0000 Files and hashes: 1: 09VvB74YTLpS9v3ASegRTSYWwyo.crl (hash: XjJPTKO4Eca6wO62/+mZDexOByc/t7hupy0NRwfmJ2k=) 2: 4c68WXa89S9GaEZ3betWtfOynEI.roa (hash: fVAp1PUxEqPq1PXw46ujCE/Pw+4uzGlNeTIsndTtQ4g=) 3: 7kfcYNNoB5VB3-_80xlsWN3weyk.roa (hash: 1wJop1mQ6qBQDepGqT5ANO4tx0iRC5GqiIyWQqeZxiY=) 4: Bs0O01jXAqadcOrA_652_6vgquk.roa (hash: hEdFCfeLg1JToe8V2oyy+hkNpnht00+5NYTQRgNDOq8=) 5: KidN7PJCXFwqwby4fVpHaeAhpFY.roa (hash: rFMoYmqrD8lR5TajeeUqUicyuRT28K2jKIN4IFZHnsU=) 6: NYzishm2ogJfRyzy8nT6kXYmzuI.roa (hash: LaEEfSMmtUB1mBqYxGiYK3KhOkpxYURIQoeWj6Zjkz4=) 7: RIPl0ZcnNzCRnoJoRMQdo7FatJo.roa (hash: V51bdAbDUbCCdG4ap1IngeKOzNBFdbTp51TPAvBkqrE=) 8: eKmkaw2M8tueZ_tzxfDI9F6CNcc.roa (hash: fg34CUb41rhu+065E2VZ9qaIx2X2iqQ2jxGQO4GwQe4=) 9: pq2QS5SBDS3pAxrbz1jylBKYb1c.roa (hash: kdt9b8eHxviCcBXo3alD6ToqY7JvOLmYwFiRPu6twu8=) 10: tpxzfABwHA4uTKjODgtKlvT10t8.roa (hash: /uiIY+OMfjw8MyTKZlNYbS4i9kHVxO0uNCEe4Op3YPE=) 11: xz6DVtU3-Ra9kwVQS1hT5B1NgIk.roa (hash: L6obqobAUv8Kf3w8kISkegiNvXZC3M7YbdVJnQVDNRA=) Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/fd/5786ab-067e-440c-b276-1b06d1c704c1/1/09VvB74YTLpS9v3ASegRTSYWwyo.crl rsync://rpki.ripe.net/repository/DEFAULT/fd/5786ab-067e-440c-b276-1b06d1c704c1/1/09VvB74YTLpS9v3ASegRTSYWwyo.mft rsync://rpki.ripe.net/repository/DEFAULT/09VvB74YTLpS9v3ASegRTSYWwyo.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Sun 27 Jul 2025 15:00:05 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:98:48:52:f0:16:7d:31:0c:5d:22:18:a6:18:be:20:54:91 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=d3d56f07be184cba52f6fdc049e8114d2616c32a Validity Not Before: Jul 26 20:00:51 2025 GMT Not After : Jul 27 20:00:51 2025 GMT Subject: CN=93e94d3aca0de278a42d5e8b711bdb5fa21e1113 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:d5:00:52:65:08:71:2a:0b:e1:d0:1c:96:84:de: 44:fe:02:ac:d2:93:f6:c5:5f:5e:32:c4:ec:2d:b4: 76:28:1f:2d:e8:4b:91:1f:10:7a:02:8d:bb:32:ce: b6:b8:e5:c6:2e:f5:2a:46:ac:d6:b0:14:d4:24:1e: f7:2e:1a:62:0f:4c:4b:12:ac:7d:ed:ec:cb:5c:f3: ba:72:ec:ca:77:7b:8b:24:18:e6:98:bb:cc:14:ce: 58:5f:50:20:4e:be:fe:aa:b8:95:7a:ca:32:6e:0d: 32:75:2a:00:07:93:8e:4c:28:1f:62:bc:6f:ef:61: 5f:56:a9:a1:30:75:96:9f:f5:83:e0:13:fb:73:3e: af:94:bc:84:6a:a5:b8:96:69:0a:92:36:71:31:31: fc:03:81:3e:af:e1:d3:54:8c:47:cb:b8:27:40:f6: 84:23:1c:4a:3d:82:22:7f:d4:cf:98:18:6f:b4:ad: a1:15:e1:44:83:51:3b:0c:0e:c8:68:e4:56:d6:83: 3e:a2:ac:06:7c:32:93:dd:f8:ce:0b:db:fe:5c:7b: a2:6f:3a:86:b9:4f:9f:ae:ba:ce:09:91:dc:3a:33: 4b:d4:cc:70:1d:72:5b:52:a6:43:e3:26:07:78:c0: e7:dd:e0:a9:2a:97:8b:c1:c0:c3:06:90:16:5b:ed: b3:cd Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 93:E9:4D:3A:CA:0D:E2:78:A4:2D:5E:8B:71:1B:DB:5F:A2:1E:11:13 X509v3 Authority Key Identifier: keyid:D3:D5:6F:07:BE:18:4C:BA:52:F6:FD:C0:49:E8:11:4D:26:16:C3:2A X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/09VvB74YTLpS9v3ASegRTSYWwyo.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/fd/5786ab-067e-440c-b276-1b06d1c704c1/1/09VvB74YTLpS9v3ASegRTSYWwyo.mft X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/fd/5786ab-067e-440c-b276-1b06d1c704c1/1/09VvB74YTLpS9v3ASegRTSYWwyo.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 52:43:07:7d:eb:28:9d:12:fe:eb:74:ea:f4:26:17:a5:a0:b9: 69:50:e0:94:f5:05:eb:5e:9c:5a:26:7c:fc:ff:44:b6:9b:d4: 2d:8c:2c:c4:cc:6c:e1:48:12:c6:01:38:c3:8d:a1:35:6b:71: cf:59:e5:fe:b0:2f:06:8f:8b:7c:5d:41:bc:b2:1c:f3:87:29: 2e:56:b5:db:b8:b2:3c:99:47:c1:e9:17:83:39:33:30:d1:6e: fe:0b:01:f8:40:c4:7d:d8:97:b9:b5:0b:e0:ab:39:6d:a0:52: 19:9e:14:6a:54:e1:be:30:2c:e4:51:34:bb:3c:89:e6:56:66: 0c:b9:2d:67:a9:e6:63:57:0f:ed:6c:28:a1:da:54:8a:c7:b2: 13:96:33:08:9a:e3:2b:6e:15:86:d6:a9:01:38:cf:4a:a8:ff: f8:c3:6f:2b:c5:1e:b8:10:48:e8:35:39:90:c5:b8:16:d4:f3: 7e:96:61:94:7f:b6:79:00:87:14:42:bb:e2:63:59:28:66:b8: cf:45:17:10:cc:1d:ee:47:b7:dc:9d:f9:6a:fa:5b:31:ee:1c: b0:1b:a2:cc:f4:65:15:27:d0:ad:70:5f:67:73:1e:5e:4d:7b: 0b:79:cf:0c:34:e8:eb:ec:8e:be:2c:f2:06:b3:7d:11:0c:c4: c6:41:8e:d0 -----BEGIN CERTIFICATE----- MIIFFjCCA/6gAwIBAgISAZhIUvAWfTEMXSIYphi+IFSRMA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKGQzZDU2ZjA3YmUxODRjYmE1MmY2ZmRjMDQ5ZTgxMTRkMjYx NmMzMmEwHhcNMjUwNzI2MjAwMDUxWhcNMjUwNzI3MjAwMDUxWjAzMTEwLwYDVQQD Eyg5M2U5NGQzYWNhMGRlMjc4YTQyZDVlOGI3MTFiZGI1ZmEyMWUxMTEzMIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEA1QBSZQhxKgvh0ByWhN5E/gKs0pP2 xV9eMsTsLbR2KB8t6EuRHxB6Ao27Ms62uOXGLvUqRqzWsBTUJB73LhpiD0xLEqx9 7ezLXPO6cuzKd3uLJBjmmLvMFM5YX1AgTr7+qriVesoybg0ydSoAB5OOTCgfYrxv 72FfVqmhMHWWn/WD4BP7cz6vlLyEaqW4lmkKkjZxMTH8A4E+r+HTVIxHy7gnQPaE IxxKPYIif9TPmBhvtK2hFeFEg1E7DA7IaORW1oM+oqwGfDKT3fjOC9v+XHuibzqG uU+frrrOCZHcOjNL1MxwHXJbUqZD4yYHeMDn3eCpKpeLwcDDBpAWW+2zzQIDAQAB o4ICIjCCAh4wHQYDVR0OBBYEFJPpTTrKDeJ4pC1ei3Eb21+iHhETMB8GA1UdIwQY MBaAFNPVbwe+GEy6Uvb9wEnoEU0mFsMqMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvMDlWdkI3NFlUTHBTOXYzQVNlZ1JUU1lXd3lvLmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC9mZC81Nzg2YWItMDY3ZS00NDBjLWIyNzYt MWIwNmQxYzcwNGMxLzEvMDlWdkI3NFlUTHBTOXYzQVNlZ1JUU1lXd3lvLm1mdDCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC9mZC81Nzg2YWItMDY3ZS00NDBjLWIyNzYtMWIwNmQxYzcwNGMx LzEvMDlWdkI3NFlUTHBTOXYzQVNlZ1JUU1lXd3lvLmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAUkMHfeso nRL+63Tq9CYXpaC5aVDglPUF616cWiZ8/P9EtpvULYwsxMxs4UgSxgE4w42hNWtx z1nl/rAvBo+LfF1BvLIc84cpLla127iyPJlHwekXgzkzMNFu/gsB+EDEfdiXubUL 4Ks5baBSGZ4UalThvjAs5FE0uzyJ5lZmDLktZ6nmY1cP7WwoodpUiseyE5YzCJrj K24VhtapATjPSqj/+MNvK8UeuBBI6DU5kMW4FtTzfpZhlH+2eQCHFEK74mNZKGa4 z0UXEMwd7ke33J35avpbMe4csBuizPRlFSfQrXBfZ3MeXk17C3nPDDTo6+yOvizy BrN9EQzExkGO0A== -----END CERTIFICATE-----Generated at Sun Jul 27 01:05:52 2025 by rpki-client