$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/33/863ba0-0476-43d7-8be7-66eda228fec7/1/vEcD4Iyg1qMQy8ZD_8swf_bNxlw.mft File: vEcD4Iyg1qMQy8ZD_8swf_bNxlw.mft (raw, json) Hash identifier: JXCDQI57na86ODtX1ujmUvJ2bdF3oc0XicRuLd+eJoM= Subject key identifier: C3:05:46:8C:F6:FA:31:58:C9:2E:28:FB:CE:4D:2E:52:01:D6:C7:7E Authority key identifier: BC:47:03:E0:8C:A0:D6:A3:10:CB:C6:43:FF:CB:30:7F:F6:CD:C6:5C Certificate issuer: /CN=bc4703e08ca0d6a310cbc643ffcb307ff6cdc65c Certificate serial: 01984A40FA29A499E24FA0D5788FDFFE7AD8 Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/vEcD4Iyg1qMQy8ZD_8swf_bNxlw.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/33/863ba0-0476-43d7-8be7-66eda228fec7/1/vEcD4Iyg1qMQy8ZD_8swf_bNxlw.mft Manifest number: 1311 Signing time: Sun 27 Jul 2025 05:00:28 +0000 Manifest this update: Sun 27 Jul 2025 05:00:28 +0000 Manifest next update: Mon 28 Jul 2025 05:00:28 +0000 Files and hashes: 1: 8Fk9kDKNu_wHTuVpwQ1FTDYEEUM.roa (hash: R9lk1OKBJor+p6Fk8Cm9760Y52YkNlkiK4HwLBjauEw=) 2: LCMzGb8KK1XAn7ueElCREh4ehR0.roa (hash: 9Gw2b+IOeGIlGw5y7XNoxgCnQ7hXETrnIXJowIYGjqA=) 3: LShVVLJCwZTpOQVpRu4BHXCMY5o.roa (hash: qOW5Q7zU6W8XRrp7RUj6wZmvzkpmHb4NVAohhcOeaxY=) 4: bmuOfACYZiZOnCTz9ES9s06c_ac.roa (hash: kxF+XBYjW7ExfLjJidwuYPma+i/t1erJy7+ooTz+eSY=) 5: dqSVfYV4r9M8RMZopTNsSTKHeIY.roa (hash: XrN+1wwdRwyX8n7r+VHCtW4D45jLjIPlWVhNaBZnVwQ=) 6: h9mNIwplN3HJblv2au9Os6COmfk.roa (hash: MUN1yxszebSMcti0G9u7TeXrwfcHsFyRaIzpQnCM9XQ=) 7: mUZj0w-uWUstpfqo5cH06vK19uA.roa (hash: MzyNzzDoUFyK/QZw2a/+HQPhRLTClRfb/mdHjVRhByQ=) 8: r0mTEa6qt-IyELm4t03iQrSQvaU.roa (hash: 5O0ZRSkH9lwLC8LUcZsdLUDFOU7u/lNlnWwcFjFATOs=) 9: rHoYFPQ0T9Hef-z6s-pJ7i0yyQo.roa (hash: xQJ9yww4YSKaaEyQBdYXA5up0iEVqjr/At6e2xJMUB8=) 10: vEcD4Iyg1qMQy8ZD_8swf_bNxlw.crl (hash: qzaZ27chc94SEO58u1jg34tIbM/Y2U2R45lItazvvNk=) 11: vfYaTtc4brt0Ov1kx9oCUOHIJXI.roa (hash: eB+hXGbiqW76z1VHwcXpM+YfyI+lZHNYCy9KL7CJ5lM=) Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/33/863ba0-0476-43d7-8be7-66eda228fec7/1/vEcD4Iyg1qMQy8ZD_8swf_bNxlw.crl rsync://rpki.ripe.net/repository/DEFAULT/33/863ba0-0476-43d7-8be7-66eda228fec7/1/vEcD4Iyg1qMQy8ZD_8swf_bNxlw.mft rsync://rpki.ripe.net/repository/DEFAULT/vEcD4Iyg1qMQy8ZD_8swf_bNxlw.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Mon 28 Jul 2025 05:00:04 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:98:4a:40:fa:29:a4:99:e2:4f:a0:d5:78:8f:df:fe:7a:d8 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=bc4703e08ca0d6a310cbc643ffcb307ff6cdc65c Validity Not Before: Jul 27 05:00:28 2025 GMT Not After : Jul 28 05:00:28 2025 GMT Subject: CN=c305468cf6fa3158c92e28fbce4d2e5201d6c77e Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:f2:98:c1:4c:c7:c6:b1:36:79:26:85:8c:d8:1c: 97:f8:3f:7e:7e:53:6e:11:ed:00:f5:94:04:6b:5a: c9:fd:ce:aa:b9:66:b4:16:25:40:cd:c4:a5:40:fa: a1:2f:8f:bc:05:ab:2a:34:ce:2d:c8:38:9a:60:7e: c5:81:85:4e:9c:67:f5:17:11:82:43:6e:84:74:8f: 47:ef:8c:09:4f:4d:34:c8:8a:7c:a2:c5:e0:c0:77: 57:d3:f7:fb:aa:e8:14:8d:f8:76:56:e7:c6:3d:ed: f0:4d:bf:6e:2b:0a:a1:e0:fa:d7:9a:8b:d4:d5:2b: 9f:24:2d:6e:ab:95:b3:44:38:01:25:97:97:30:b2: 42:ba:1b:4c:dd:94:0b:07:d5:72:a0:03:c0:77:72: e8:9c:b3:db:f7:83:71:bb:19:1e:0f:d4:18:33:f6: 90:44:6d:64:1c:c4:d8:b1:1f:0d:24:fe:50:18:b3: 35:e4:7c:91:f4:0b:be:c7:de:da:76:19:81:57:1b: d6:df:fa:a5:09:3e:5e:cd:93:af:52:72:f3:65:3e: e3:93:23:d8:fd:4c:15:b4:d3:6c:86:9e:17:d9:34: e5:e1:02:23:5d:89:cd:a9:b4:c7:76:07:ce:7a:f7: 17:56:4b:c1:5e:a2:2b:43:4f:da:8c:57:e9:46:20: 44:eb Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: C3:05:46:8C:F6:FA:31:58:C9:2E:28:FB:CE:4D:2E:52:01:D6:C7:7E X509v3 Authority Key Identifier: keyid:BC:47:03:E0:8C:A0:D6:A3:10:CB:C6:43:FF:CB:30:7F:F6:CD:C6:5C X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/vEcD4Iyg1qMQy8ZD_8swf_bNxlw.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/33/863ba0-0476-43d7-8be7-66eda228fec7/1/vEcD4Iyg1qMQy8ZD_8swf_bNxlw.mft X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/33/863ba0-0476-43d7-8be7-66eda228fec7/1/vEcD4Iyg1qMQy8ZD_8swf_bNxlw.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 8e:c9:30:3f:4d:17:b8:40:1a:0b:a6:b7:04:8e:82:5c:58:df: 3a:e0:30:49:c3:22:e6:d4:5f:f8:5c:42:e1:e3:3d:ea:c4:dc: 82:d8:16:5b:70:c1:c3:69:a6:ab:a9:bd:46:61:7a:e2:f3:fc: e3:a0:9e:f9:a3:28:67:42:4d:e2:b9:66:79:88:f8:5f:60:56: 1d:e1:85:58:d2:8e:d3:78:9f:a3:ed:a1:75:97:8f:16:be:5a: 9b:e0:86:89:12:d9:60:20:1d:8f:d0:de:5d:68:f5:a9:03:35: dd:fa:dd:40:e6:ef:ac:6d:b8:bf:e0:7b:ba:b4:78:11:cb:02: 72:d7:85:64:19:e1:c4:f1:11:f2:a6:c5:5e:6b:41:f8:3f:4e: a8:68:ea:9e:dd:06:09:c5:e5:dc:9e:77:ca:2d:8e:05:52:59: 4c:18:52:3f:32:50:b7:0f:5d:b6:69:14:93:41:19:b2:23:68: 5c:e6:be:28:a3:ad:8c:2b:2d:9a:3b:c0:d1:6a:3f:f6:7e:32: 58:41:35:6d:35:21:97:a0:c5:83:85:68:1c:7a:ac:67:62:d0: 17:82:6f:c9:0f:0a:cf:2f:3f:14:e3:19:56:58:be:23:72:2c: 56:c0:ce:64:f0:cc:92:d9:a2:89:ff:60:0f:3b:54:16:e6:75: b6:b5:47:61 -----BEGIN CERTIFICATE----- MIIFFjCCA/6gAwIBAgISAZhKQPoppJniT6DVeI/f/nrYMA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKGJjNDcwM2UwOGNhMGQ2YTMxMGNiYzY0M2ZmY2IzMDdmZjZj ZGM2NWMwHhcNMjUwNzI3MDUwMDI4WhcNMjUwNzI4MDUwMDI4WjAzMTEwLwYDVQQD EyhjMzA1NDY4Y2Y2ZmEzMTU4YzkyZTI4ZmJjZTRkMmU1MjAxZDZjNzdlMIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEA8pjBTMfGsTZ5JoWM2ByX+D9+flNu Ee0A9ZQEa1rJ/c6quWa0FiVAzcSlQPqhL4+8BasqNM4tyDiaYH7FgYVOnGf1FxGC Q26EdI9H74wJT000yIp8osXgwHdX0/f7qugUjfh2VufGPe3wTb9uKwqh4PrXmovU 1SufJC1uq5WzRDgBJZeXMLJCuhtM3ZQLB9VyoAPAd3LonLPb94NxuxkeD9QYM/aQ RG1kHMTYsR8NJP5QGLM15HyR9Au+x97adhmBVxvW3/qlCT5ezZOvUnLzZT7jkyPY /UwVtNNshp4X2TTl4QIjXYnNqbTHdgfOevcXVkvBXqIrQ0/ajFfpRiBE6wIDAQAB o4ICIjCCAh4wHQYDVR0OBBYEFMMFRoz2+jFYyS4o+85NLlIB1sd+MB8GA1UdIwQY MBaAFLxHA+CMoNajEMvGQ//LMH/2zcZcMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvdkVjRDRJeWcxcU1ReThaRF84c3dmX2JOeGx3LmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC8zMy84NjNiYTAtMDQ3Ni00M2Q3LThiZTct NjZlZGEyMjhmZWM3LzEvdkVjRDRJeWcxcU1ReThaRF84c3dmX2JOeGx3Lm1mdDCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC8zMy84NjNiYTAtMDQ3Ni00M2Q3LThiZTctNjZlZGEyMjhmZWM3 LzEvdkVjRDRJeWcxcU1ReThaRF84c3dmX2JOeGx3LmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAjskwP00X uEAaC6a3BI6CXFjfOuAwScMi5tRf+FxC4eM96sTcgtgWW3DBw2mmq6m9RmF64vP8 46Ce+aMoZ0JN4rlmeYj4X2BWHeGFWNKO03ifo+2hdZePFr5am+CGiRLZYCAdj9De XWj1qQM13frdQObvrG24v+B7urR4EcsCcteFZBnhxPER8qbFXmtB+D9OqGjqnt0G CcXl3J53yi2OBVJZTBhSPzJQtw9dtmkUk0EZsiNoXOa+KKOtjCstmjvA0Wo/9n4y WEE1bTUhl6DFg4VoHHqsZ2LQF4JvyQ8Kzy8/FOMZVli+I3IsVsDOZPDMktmiif9g DztUFuZ1trVHYQ== -----END CERTIFICATE-----Generated at Sun Jul 27 12:03:17 2025 by rpki-client