$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/30/4e7bc7-260e-47e6-8388-a184f3556e43/1/5884hLeAB6Jdvi4s7wzHO2mSH4g.mft File: 5884hLeAB6Jdvi4s7wzHO2mSH4g.mft (raw, json) Hash identifier: EP5B5A5tddorqWZBUav9fvZvLHRIoK2ym7qBUraNBag= Subject key identifier: DF:C2:86:68:BF:18:D4:60:78:9E:FD:EE:EF:75:7C:4C:81:9E:84:C7 Authority key identifier: E7:CF:38:84:B7:80:07:A2:5D:BE:2E:2C:EF:0C:C7:3B:69:92:1F:88 Certificate issuer: /CN=e7cf3884b78007a25dbe2e2cef0cc73b69921f88 Certificate serial: 0199221EC712657D1F6D99BEC1E23CDDE0F2 Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/5884hLeAB6Jdvi4s7wzHO2mSH4g.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/30/4e7bc7-260e-47e6-8388-a184f3556e43/1/5884hLeAB6Jdvi4s7wzHO2mSH4g.mft Manifest number: 1631 Signing time: Sun 07 Sep 2025 03:01:06 +0000 Manifest this update: Sun 07 Sep 2025 03:01:06 +0000 Manifest next update: Mon 08 Sep 2025 03:01:06 +0000 Files and hashes: 1: 0LDsu8q8BNCVXMdgo8IAmxRh6lg.roa (hash: G5jGPy0QrJ03EB2ETPwF643gtEqN7L0Vq2ZY/sUU8MU=) 2: 5884hLeAB6Jdvi4s7wzHO2mSH4g.crl (hash: bQHe7cKzqXsU+uFN0Z3HarYxCxU9gUJYgnAw0olVMlE=) 3: B6snV1O7L6xN7jjaiNZWbxtP82Q.roa (hash: Z+4+/9OXk8fDzA3Dm2Dl/g02UpTK3tqTpOQvWThJM1E=) 4: MYlZiK8j4I-CRpNK84XFADjqS_Q.roa (hash: sHYzc9/ggp3cDmlo2cdq6sgs+CvgzddIutlRUEG3Jro=) 5: OUXqqWfQTCMLecmZJOetX8nDJq4.roa (hash: sVR/luDbfjaWQ+Na2uxCSWiX3jfCtfpibuRPwKT8RuI=) 6: P8Q-dEsRs4H8f4xsbLowkJwmY-M.roa (hash: dvuvjztjSPRyovxa6mOiurUCRvnf3SsP4Zst2kQEuLU=) 7: SNfpSksRdeq_X6alujKtqxhgfmI.roa (hash: Ma1Hn2WiNgfoHoDq7NgShnN2PavA2o6Q6gAsmbAJ6uM=) 8: Xxx-aLbVPMFeFACAuRgkyYhKGZ4.roa (hash: Qjsr5YH+eP1GQSztBosIVdbSouCX9Gvl5XQ/f3iIe+4=) 9: bFYSJ_I4YgMVW4I9mBgSvFA_y-8.roa (hash: H2VlaHHW6c4b4Aq4JHISuCEj338oIr6DsQEFdgqSCMc=) 10: fUwIM0sp1GFSdwqWjPbX7BRcPzQ.roa (hash: Xh0ESEMvO/UeKqHJNYyYyUnRbpIWXGZSxLiX7rQbHOo=) 11: hnPMD0kJyESSkpzLaNH091YhR5k.roa (hash: reehn+NC4fwGIk+sTumI22RgUJ8t2cZVaMoj+4y8WfY=) 12: z2F52wGzH9BMrpqKt2YykAg8u8Y.roa (hash: bvYJ2BHirZKw/0tfOS28eGnj6Ugji4ZaJ639S6rbz9g=) 13: zBe1zgNHDCKtxdrkxgm3eBXCBPU.roa (hash: BXmYyj4eoSdWaSTfE6Ragmw+4eV3ZTlYx1CDpgMgYSs=) Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/30/4e7bc7-260e-47e6-8388-a184f3556e43/1/5884hLeAB6Jdvi4s7wzHO2mSH4g.crl rsync://rpki.ripe.net/repository/DEFAULT/30/4e7bc7-260e-47e6-8388-a184f3556e43/1/5884hLeAB6Jdvi4s7wzHO2mSH4g.mft rsync://rpki.ripe.net/repository/DEFAULT/5884hLeAB6Jdvi4s7wzHO2mSH4g.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Mon 08 Sep 2025 03:01:06 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:99:22:1e:c7:12:65:7d:1f:6d:99:be:c1:e2:3c:dd:e0:f2 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=e7cf3884b78007a25dbe2e2cef0cc73b69921f88 Validity Not Before: Sep 7 03:01:06 2025 GMT Not After : Sep 8 03:01:06 2025 GMT Subject: CN=dfc28668bf18d460789efdeeef757c4c819e84c7 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:b8:1b:b6:87:40:3e:e4:0a:a7:db:20:d1:af:11: ce:13:53:34:6e:a5:54:aa:22:e5:fb:2e:26:77:5e: 28:ff:0a:5e:2f:72:4d:e4:15:97:29:ff:8a:1f:bb: d5:e9:b7:f3:f0:a3:72:b8:6e:d0:26:da:dd:a3:a7: 93:a4:6a:e8:c5:20:6c:32:0e:9c:e0:91:9c:a3:07: e1:1d:ca:a2:80:ca:1b:9e:c6:57:e8:bb:db:f0:00: c4:e9:c9:98:87:40:7a:1c:04:da:93:30:a2:2a:91: 75:5c:2f:f6:53:23:69:99:57:78:ad:2f:54:eb:98: 3a:1c:d5:00:57:40:c6:d0:f9:2b:ab:63:dd:62:77: 8c:c9:4a:e0:42:82:05:c4:cb:05:96:21:39:68:d8: e9:17:85:26:35:f5:6e:35:a3:51:0b:15:e0:6f:ba: 1d:3f:d3:f8:69:e1:8f:cf:ec:e1:3e:06:54:16:cf: be:ca:2d:59:2d:e1:13:a8:47:3a:77:1f:dd:aa:e5: dc:72:96:c7:8b:ae:27:2e:6e:ab:81:21:8e:18:ba: 67:82:16:b8:ca:c0:67:b7:9b:9f:ea:81:e6:6f:db: 12:97:5a:fa:b3:51:ee:84:2d:37:08:d4:1e:66:85: 16:4f:a3:60:23:dd:0d:09:db:7d:c7:0a:e4:5e:b0: 77:c9 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: DF:C2:86:68:BF:18:D4:60:78:9E:FD:EE:EF:75:7C:4C:81:9E:84:C7 X509v3 Authority Key Identifier: keyid:E7:CF:38:84:B7:80:07:A2:5D:BE:2E:2C:EF:0C:C7:3B:69:92:1F:88 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/5884hLeAB6Jdvi4s7wzHO2mSH4g.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/30/4e7bc7-260e-47e6-8388-a184f3556e43/1/5884hLeAB6Jdvi4s7wzHO2mSH4g.mft X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/30/4e7bc7-260e-47e6-8388-a184f3556e43/1/5884hLeAB6Jdvi4s7wzHO2mSH4g.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 27:51:25:75:0d:16:46:9f:b8:12:ac:b5:7b:a3:3d:03:c9:fb: 6a:bd:8d:ab:66:6c:7b:eb:49:2f:ee:57:0b:11:c6:fd:0c:b2: b9:d2:98:13:ee:aa:3c:c7:2f:fb:82:e6:18:24:81:f6:bc:05: 8b:8e:08:13:4e:9f:ea:d0:f3:04:5d:7a:9f:73:bf:83:3f:08: ba:cf:c4:69:55:0e:a8:12:9b:00:e5:ed:74:2e:83:2f:a4:c3: 7d:64:50:7d:c2:7f:24:37:09:dd:9a:3e:72:8a:f4:e2:b7:cf: 3f:39:a4:36:ac:85:32:9a:57:91:15:94:64:28:e0:58:7a:68: 5f:d7:9e:4a:f7:cb:f7:c0:20:c1:47:8c:fe:df:d8:02:aa:09: da:0f:7c:99:ac:e8:af:1d:8c:e7:c4:8c:fe:2d:cb:3c:49:1e: 32:f5:f1:e1:61:99:5a:e2:93:28:36:2e:e3:fc:55:72:fa:8e: e3:11:17:45:d4:f9:57:51:9c:7b:38:e1:dc:61:3f:56:35:ca: 2a:07:d2:cb:1b:97:82:78:50:ac:e8:eb:e3:fb:e9:a5:77:1b: 8a:ac:5a:1d:c1:2c:f0:43:ac:95:e5:f2:e8:8f:9d:17:f0:06: 1a:8e:20:02:b2:01:b8:0a:4f:7f:29:b2:f4:98:df:d0:77:27: 89:9b:94:d1 -----BEGIN CERTIFICATE----- MIIFFjCCA/6gAwIBAgISAZkiHscSZX0fbZm+weI83eDyMA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKGU3Y2YzODg0Yjc4MDA3YTI1ZGJlMmUyY2VmMGNjNzNiNjk5 MjFmODgwHhcNMjUwOTA3MDMwMTA2WhcNMjUwOTA4MDMwMTA2WjAzMTEwLwYDVQQD EyhkZmMyODY2OGJmMThkNDYwNzg5ZWZkZWVlZjc1N2M0YzgxOWU4NGM3MIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAuBu2h0A+5Aqn2yDRrxHOE1M0bqVU qiLl+y4md14o/wpeL3JN5BWXKf+KH7vV6bfz8KNyuG7QJtrdo6eTpGroxSBsMg6c 4JGcowfhHcqigMobnsZX6Lvb8ADE6cmYh0B6HATakzCiKpF1XC/2UyNpmVd4rS9U 65g6HNUAV0DG0Pkrq2PdYneMyUrgQoIFxMsFliE5aNjpF4UmNfVuNaNRCxXgb7od P9P4aeGPz+zhPgZUFs++yi1ZLeETqEc6dx/dquXccpbHi64nLm6rgSGOGLpngha4 ysBnt5uf6oHmb9sSl1r6s1HuhC03CNQeZoUWT6NgI90NCdt9xwrkXrB3yQIDAQAB o4ICIjCCAh4wHQYDVR0OBBYEFN/Chmi/GNRgeJ797u91fEyBnoTHMB8GA1UdIwQY MBaAFOfPOIS3gAeiXb4uLO8Mxztpkh+IMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvNTg4NGhMZUFCNkpkdmk0czd3ekhPMm1TSDRnLmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC8zMC80ZTdiYzctMjYwZS00N2U2LTgzODgt YTE4NGYzNTU2ZTQzLzEvNTg4NGhMZUFCNkpkdmk0czd3ekhPMm1TSDRnLm1mdDCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC8zMC80ZTdiYzctMjYwZS00N2U2LTgzODgtYTE4NGYzNTU2ZTQz LzEvNTg4NGhMZUFCNkpkdmk0czd3ekhPMm1TSDRnLmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAJ1EldQ0W Rp+4Eqy1e6M9A8n7ar2Nq2Zse+tJL+5XCxHG/QyyudKYE+6qPMcv+4LmGCSB9rwF i44IE06f6tDzBF16n3O/gz8Ius/EaVUOqBKbAOXtdC6DL6TDfWRQfcJ/JDcJ3Zo+ cor04rfPPzmkNqyFMppXkRWUZCjgWHpoX9eeSvfL98AgwUeM/t/YAqoJ2g98mazo rx2M58SM/i3LPEkeMvXx4WGZWuKTKDYu4/xVcvqO4xEXRdT5V1Gcezjh3GE/VjXK KgfSyxuXgnhQrOjr4/vppXcbiqxaHcEs8EOsleXy6I+dF/AGGo4gArIBuApPfymy 9Jjf0HcniZuU0Q== -----END CERTIFICATE-----Generated at Sun Sep 7 09:53:58 2025 by rpki-client