$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/32/153788-14b7-4551-9ade-6aea9057c800/1/rrZuxejyQF9vjUhuc_uCuN4N7g8.mft File: rrZuxejyQF9vjUhuc_uCuN4N7g8.mft (raw, json) Hash identifier: O2hFQLl66uYC6VeFLsvE4KQIc5agL5KYuMnRnOOmc98= Subject key identifier: C4:71:15:2D:81:A4:40:4D:EB:0C:59:91:BB:08:4A:62:58:0B:BA:C0 Authority key identifier: AE:B6:6E:C5:E8:F2:40:5F:6F:8D:48:6E:73:FB:82:B8:DE:0D:EE:0F Certificate issuer: /CN=aeb66ec5e8f2405f6f8d486e73fb82b8de0dee0f Certificate serial: 0198673980799EB63E9F59FF458736F9184E Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/rrZuxejyQF9vjUhuc_uCuN4N7g8.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/32/153788-14b7-4551-9ade-6aea9057c800/1/rrZuxejyQF9vjUhuc_uCuN4N7g8.mft Manifest number: 1614 Signing time: Fri 01 Aug 2025 20:01:18 +0000 Manifest this update: Fri 01 Aug 2025 20:01:18 +0000 Manifest next update: Sat 02 Aug 2025 20:01:18 +0000 Files and hashes: 1: 0xAeo2a2iLttbU-9qLwxhP3W5ss.roa (hash: KCgM9KWWYMbjy0SQJWIlI1gevbRgwTSQjmHIQMhZOFo=) 2: 1GGtyTPgPlDy6MPQ5o0gS_2Q9UM.roa (hash: gOi5uzaamNISRfWC/jzX0CQnB58FX9BTQozvqpu683k=) 3: 1VO0RuZDCw_d3nrvSLXPJBFpELM.roa (hash: RVMlSLh90fckV0ULVrxGXrllRUKBMW1qpE2aUDAMp18=) 4: MHaB6YDK7hMFt-_1LMKEcRnolXY.roa (hash: HMU04XiVIqiavwZxk6eCzMS/VCWuh3NjcyT+luDuzS0=) 5: XFEEccbEsmiETxVTXsuQHob0Ig8.roa (hash: gNVdhv6luqDbEY/yZdldKTkFqgtu7cFYTeubRvuYlMs=) 6: XYvBe2DkMF52qzkhOJvtRBiIQio.roa (hash: vc4GpSOFPSWnmLVNnXKMqCyW7C32uripWcLl8WvCvmE=) 7: cgoioMwhBMFnR_o18uz7lh61zXU.roa (hash: muq8Pq9FVp8y13ZY1OD1P/qR19HpxP198AkqSx2L6EM=) 8: rrZuxejyQF9vjUhuc_uCuN4N7g8.crl (hash: xiGxTdaSfpXsFhFboLOvQZ+PugfuXarvSnB4yAiqEUQ=) 9: s1oFGEPvL8IMjYASLXkMEl3bONc.roa (hash: ID8ZOvyObfK0KrvTgF7I419RUO3QA/UAdGzXegtjwU0=) 10: upooLs-mDkOyiBT2fNGHj5cQ7E4.roa (hash: cglav+FWNX7UNTqPwwJsYgYuI7r/rTbr7vfv4F0chKo=) 11: vVMu6Hcqt_WNniCkUUd49xRBXDg.roa (hash: PFqhmo3voRuIoBNZ1c/3YzTjWO4jWVlUC05kdiWQzXU=) 12: vzw_vkrK3T6hMf3CfVO_XMRDNQY.roa (hash: TyRzYsx0I5A5DgLqk0b56yUe558XEXu6adROBLfEbBY=) Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/32/153788-14b7-4551-9ade-6aea9057c800/1/rrZuxejyQF9vjUhuc_uCuN4N7g8.crl rsync://rpki.ripe.net/repository/DEFAULT/32/153788-14b7-4551-9ade-6aea9057c800/1/rrZuxejyQF9vjUhuc_uCuN4N7g8.mft rsync://rpki.ripe.net/repository/DEFAULT/rrZuxejyQF9vjUhuc_uCuN4N7g8.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Sat 02 Aug 2025 19:51:28 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:98:67:39:80:79:9e:b6:3e:9f:59:ff:45:87:36:f9:18:4e Signature Algorithm: sha256WithRSAEncryption Issuer: CN=aeb66ec5e8f2405f6f8d486e73fb82b8de0dee0f Validity Not Before: Aug 1 20:01:18 2025 GMT Not After : Aug 2 20:01:18 2025 GMT Subject: CN=c471152d81a4404deb0c5991bb084a62580bbac0 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:b4:a1:fe:2b:48:92:ab:86:a2:42:5c:40:10:09: 71:63:c6:90:f4:3d:5e:35:d4:3b:b9:12:c2:e1:f6: 50:6e:d9:49:58:cb:a2:0c:72:a5:cf:24:fa:7f:f2: e0:f1:26:6c:e1:61:5a:3b:05:68:92:58:8d:81:25: 2b:f0:af:6b:f2:cd:98:d1:28:d9:df:20:e7:81:d7: d0:f9:be:61:36:3c:04:62:09:0d:a1:13:f4:dd:b1: 43:12:b5:d9:23:01:06:8b:6b:62:81:57:ef:82:ef: 67:30:1b:2c:9e:13:9d:a4:c5:98:67:4e:d2:72:50: 42:4b:6f:df:6b:83:6d:1d:cd:fb:28:b2:3a:ec:c2: 1b:61:1c:c7:22:3a:76:39:d1:eb:8f:1b:00:23:a5: 88:fe:c6:9d:de:91:af:f6:6e:03:1c:a5:17:d1:07: ae:b1:83:3d:80:e4:e5:68:d1:dd:97:8d:e4:1d:87: 31:aa:9f:ed:32:e0:8e:67:38:44:34:3e:a0:2a:7b: 1a:51:0e:81:ce:e4:ab:25:05:0d:d3:3e:2e:88:da: dc:10:66:03:88:b9:2f:81:a5:c1:f8:ba:f5:81:12: ed:1b:0d:15:92:0f:2f:92:78:0a:dd:9d:99:c6:8a: d3:90:76:19:85:4b:5e:6b:5e:c7:cb:cc:e6:55:5c: 19:b7 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: C4:71:15:2D:81:A4:40:4D:EB:0C:59:91:BB:08:4A:62:58:0B:BA:C0 X509v3 Authority Key Identifier: keyid:AE:B6:6E:C5:E8:F2:40:5F:6F:8D:48:6E:73:FB:82:B8:DE:0D:EE:0F X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/rrZuxejyQF9vjUhuc_uCuN4N7g8.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/32/153788-14b7-4551-9ade-6aea9057c800/1/rrZuxejyQF9vjUhuc_uCuN4N7g8.mft X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/32/153788-14b7-4551-9ade-6aea9057c800/1/rrZuxejyQF9vjUhuc_uCuN4N7g8.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 1c:98:dd:55:9d:e3:54:1b:6d:09:29:22:bd:04:a2:ac:20:a9: e6:c8:fa:24:8d:39:d5:ac:1c:52:d9:74:ff:98:86:2c:3e:43: e9:83:99:74:56:fe:95:51:1b:e3:54:7e:9b:51:8c:21:a3:b5: 51:7e:02:de:85:b7:44:a0:e2:c6:03:92:d9:3a:ef:54:f2:f7: 91:11:df:cc:26:8e:5b:1a:65:ac:14:55:33:6e:99:b7:4f:5b: 85:43:1d:61:7d:1e:60:26:5f:8a:6a:56:38:0d:7e:6e:42:4a: 20:a9:1f:30:30:08:14:dd:f5:d0:20:13:26:7a:f2:0d:60:24: 35:88:88:34:3c:7b:c0:1c:90:11:88:95:56:4a:79:b9:4a:61: bd:64:ee:06:b1:a6:72:a0:2c:76:af:e2:e1:92:ff:f9:0a:6a: df:e0:14:e4:b4:3b:17:47:c5:67:e3:c8:a7:94:12:c5:7e:e9: c1:5f:1b:d5:b1:f7:f9:ce:42:9a:27:d0:ae:62:80:07:18:be: de:a6:98:89:af:1d:fd:1f:c1:92:17:ac:0c:e8:b2:af:86:95: 09:a7:cd:b5:ac:1e:37:b9:ff:7a:07:a0:c5:bb:0a:e5:a6:e0: b3:f0:92:46:3f:bc:b2:a4:d0:03:77:5e:da:e3:17:28:95:ed: 7a:2b:f8:86 -----BEGIN CERTIFICATE----- MIIFFjCCA/6gAwIBAgISAZhnOYB5nrY+n1n/RYc2+RhOMA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKGFlYjY2ZWM1ZThmMjQwNWY2ZjhkNDg2ZTczZmI4MmI4ZGUw ZGVlMGYwHhcNMjUwODAxMjAwMTE4WhcNMjUwODAyMjAwMTE4WjAzMTEwLwYDVQQD EyhjNDcxMTUyZDgxYTQ0MDRkZWIwYzU5OTFiYjA4NGE2MjU4MGJiYWMwMIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAtKH+K0iSq4aiQlxAEAlxY8aQ9D1e NdQ7uRLC4fZQbtlJWMuiDHKlzyT6f/Lg8SZs4WFaOwVokliNgSUr8K9r8s2Y0SjZ 3yDngdfQ+b5hNjwEYgkNoRP03bFDErXZIwEGi2tigVfvgu9nMBssnhOdpMWYZ07S clBCS2/fa4NtHc37KLI67MIbYRzHIjp2OdHrjxsAI6WI/sad3pGv9m4DHKUX0Qeu sYM9gOTlaNHdl43kHYcxqp/tMuCOZzhEND6gKnsaUQ6BzuSrJQUN0z4uiNrcEGYD iLkvgaXB+Lr1gRLtGw0Vkg8vkngK3Z2ZxorTkHYZhUtea17Hy8zmVVwZtwIDAQAB o4ICIjCCAh4wHQYDVR0OBBYEFMRxFS2BpEBN6wxZkbsISmJYC7rAMB8GA1UdIwQY MBaAFK62bsXo8kBfb41IbnP7grjeDe4PMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvcnJadXhlanlRRjl2alVodWNfdUN1TjRON2c4LmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC8zMi8xNTM3ODgtMTRiNy00NTUxLTlhZGUt NmFlYTkwNTdjODAwLzEvcnJadXhlanlRRjl2alVodWNfdUN1TjRON2c4Lm1mdDCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC8zMi8xNTM3ODgtMTRiNy00NTUxLTlhZGUtNmFlYTkwNTdjODAw LzEvcnJadXhlanlRRjl2alVodWNfdUN1TjRON2c4LmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAHJjdVZ3j VBttCSkivQSirCCp5sj6JI051awcUtl0/5iGLD5D6YOZdFb+lVEb41R+m1GMIaO1 UX4C3oW3RKDixgOS2TrvVPL3kRHfzCaOWxplrBRVM26Zt09bhUMdYX0eYCZfimpW OA1+bkJKIKkfMDAIFN310CATJnryDWAkNYiINDx7wByQEYiVVkp5uUphvWTuBrGm cqAsdq/i4ZL/+Qpq3+AU5LQ7F0fFZ+PIp5QSxX7pwV8b1bH3+c5CmifQrmKABxi+ 3qaYia8d/R/BkhesDOiyr4aVCafNtaweN7n/egegxbsK5abgs/CSRj+8sqTQA3de 2uMXKJXteiv4hg== -----END CERTIFICATE-----Generated at Fri Aug 1 23:42:11 2025 by rpki-client