$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/34/db1b48-1cc5-4833-93d9-b9464718ba37/1/c_IQ8SmaHgrucdwdeeX7EgktMKk.mft File: c_IQ8SmaHgrucdwdeeX7EgktMKk.mft (raw, json) Hash identifier: Syhb6pR+FYskQ36x/NCbwgaT8IT5p1ZPlTwbzGmnvU8= Subject key identifier: 65:33:87:C2:5A:42:C1:64:85:0F:09:00:91:F9:AC:18:23:9C:2E:DD Authority key identifier: 73:F2:10:F1:29:9A:1E:0A:EE:71:DC:1D:79:E5:FB:12:09:2D:30:A9 Certificate issuer: /CN=73f210f1299a1e0aee71dc1d79e5fb12092d30a9 Certificate serial: 0199221EC5B7F775729A4CD466B9168753B5 Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/c_IQ8SmaHgrucdwdeeX7EgktMKk.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/34/db1b48-1cc5-4833-93d9-b9464718ba37/1/c_IQ8SmaHgrucdwdeeX7EgktMKk.mft Manifest number: 1698 Signing time: Sun 07 Sep 2025 03:01:05 +0000 Manifest this update: Sun 07 Sep 2025 03:01:05 +0000 Manifest next update: Mon 08 Sep 2025 03:01:05 +0000 Files and hashes: 1: 7v-L1KuWY_QeDJxKFVyRkWnFePQ.roa (hash: bVQczQ08ozX20fYuXzWGYS1jimxc5e2Qx5nVzF/4kuk=) 2: H74wGZKnnU6XEP7nVKoqw4XaEjE.roa (hash: zhm555s3zw/KlbcjZuumbYd6+z6n6717Q/inEo++9C0=) 3: KFKPGq8CDIQff00UekrfFEmWWU4.roa (hash: pndCMKJbI0Ffrf6VYH3lHviYtYItndyotazCLP7aZyE=) 4: TLCOp8VQQYT-sDLZMkb_dNE0wJI.roa (hash: 8TF1RbnrjzrAYcRglOW5PIK7TmKRhUoFu7HvQr3ZHoA=) 5: XfGBei_fvFP0LcnT4xlGOunfSHY.roa (hash: ApG5cEMi+MNJR6ahm8kTy/uN64zS0fv0zRdzd/i6biA=) 6: ZLCgOlPZ-adZViTKhsMv3BABRVQ.roa (hash: y37YnkCGLdmrEa4m8cGkKpYMZJFVaIJVqpcOQKXrYQA=) 7: ZrwHnbp0cmRv-8Aq-3dTrUs96b8.roa (hash: laG521bBX3KOp9w13a5/N7g1SD2gsHS2KdTqelNAv1g=) 8: c_IQ8SmaHgrucdwdeeX7EgktMKk.crl (hash: BPE0BK7wD37QSRXeBM1GLBlMbJfbzF40nneF7JXvdwM=) 9: fUiU9NND6NDkXeCCtG2FpkvLAtQ.roa (hash: BipzZjfv9NJLde/5SLk/7HBxUjct/iO+maQqs2utFTw=) 10: mJUNw4dhsVDBnFTg7x4G5Co4xf0.roa (hash: uA/rqJShT3FbqgkbYlEQFRj/7911uoTUqkA+K2PLe1c=) 11: nT9Kl7qa4avyYi6PobndNFEx2JI.roa (hash: 4NhOocRVxQsq48Sjltw5zBhFh6NiUij1mxelAtmoUp0=) Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/34/db1b48-1cc5-4833-93d9-b9464718ba37/1/c_IQ8SmaHgrucdwdeeX7EgktMKk.crl rsync://rpki.ripe.net/repository/DEFAULT/34/db1b48-1cc5-4833-93d9-b9464718ba37/1/c_IQ8SmaHgrucdwdeeX7EgktMKk.mft rsync://rpki.ripe.net/repository/DEFAULT/c_IQ8SmaHgrucdwdeeX7EgktMKk.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Mon 08 Sep 2025 03:01:05 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:99:22:1e:c5:b7:f7:75:72:9a:4c:d4:66:b9:16:87:53:b5 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=73f210f1299a1e0aee71dc1d79e5fb12092d30a9 Validity Not Before: Sep 7 03:01:05 2025 GMT Not After : Sep 8 03:01:05 2025 GMT Subject: CN=653387c25a42c164850f090091f9ac18239c2edd Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:b7:6f:ea:d5:f5:f8:5d:ca:79:58:97:75:4e:6d: 39:2c:d0:93:ed:a7:19:f8:78:96:fb:44:df:b6:80: 41:30:0a:2f:58:af:22:bf:4e:47:84:70:3c:2a:df: b0:c4:14:d2:80:dc:2d:db:73:c6:d3:5a:2b:6c:02: 4d:a8:fa:9c:cb:ad:3d:02:f5:97:61:50:8e:cd:90: e3:e5:ba:69:8f:f3:0a:18:fe:90:8b:26:84:ea:72: 8b:fe:65:df:9d:49:85:29:61:5a:2d:de:6f:9c:9b: cc:45:24:8d:c0:71:5f:6e:9b:32:67:51:04:12:c4: 33:82:5d:64:60:e8:04:a5:6e:59:a1:0c:66:f1:1b: 9f:1a:e7:b3:00:4f:2b:04:75:6e:41:26:09:05:01: 43:ab:3c:2d:1c:75:77:b7:e2:19:69:57:60:7e:ac: 6c:06:bb:f2:73:c0:fb:21:9d:cc:ae:6f:fd:0d:46: 46:36:75:43:79:f1:90:0c:93:e6:44:0b:bc:f9:13: 4d:a9:3b:46:41:74:fd:43:19:d2:6a:18:61:8b:f3: b7:22:1e:2f:9b:1d:b9:c3:cd:1b:5b:d0:31:61:be: 4c:a2:cc:f1:56:8d:6b:aa:98:82:d2:8c:c1:e8:9b: ff:01:5c:20:2e:32:57:ae:bc:dc:e9:bb:51:58:d9: b4:dd Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 65:33:87:C2:5A:42:C1:64:85:0F:09:00:91:F9:AC:18:23:9C:2E:DD X509v3 Authority Key Identifier: keyid:73:F2:10:F1:29:9A:1E:0A:EE:71:DC:1D:79:E5:FB:12:09:2D:30:A9 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/c_IQ8SmaHgrucdwdeeX7EgktMKk.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/34/db1b48-1cc5-4833-93d9-b9464718ba37/1/c_IQ8SmaHgrucdwdeeX7EgktMKk.mft X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/34/db1b48-1cc5-4833-93d9-b9464718ba37/1/c_IQ8SmaHgrucdwdeeX7EgktMKk.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 57:14:12:13:07:be:59:15:98:5f:d8:8a:77:a7:03:99:1f:23: 58:2c:5c:d2:e8:e8:fe:2e:ef:a8:09:cf:8d:9b:e4:38:56:f1: 43:40:99:69:50:e6:4b:29:d4:14:b7:fd:13:1d:a5:9b:43:7b: 58:63:81:0c:71:f7:24:be:5e:da:e8:b2:82:0c:bc:11:e1:fb: de:42:f1:21:67:30:e1:c7:64:6b:85:58:bb:ff:85:b2:49:20: eb:ca:83:34:29:a7:dd:7f:e4:3e:75:6a:ba:f6:35:b3:08:e1: 76:53:f2:01:ce:68:04:20:14:fe:26:64:fa:7d:f7:52:40:3d: 8e:72:51:8d:21:96:ae:87:a4:47:03:6b:b3:9c:79:99:3a:fd: 66:13:32:56:8b:e6:50:73:34:6a:38:5d:ef:18:8a:0f:65:d9: 7f:23:c2:8d:59:4c:c2:ea:c9:f2:7b:81:77:d9:34:23:2f:3e: 4f:72:fe:10:60:af:88:93:43:ca:f2:1e:2a:58:d6:44:6c:5c: 7d:b5:42:65:0f:2b:af:54:c9:23:1a:90:2a:ac:38:81:6e:fc: c2:26:db:20:9f:1c:8f:5a:48:82:3b:76:bf:c4:53:7b:c1:fd: 45:2b:5d:de:ba:8a:d8:a3:f8:07:d2:fc:75:99:16:3c:a8:58: 1c:10:d0:7a -----BEGIN CERTIFICATE----- MIIFFjCCA/6gAwIBAgISAZkiHsW393VymkzUZrkWh1O1MA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKDczZjIxMGYxMjk5YTFlMGFlZTcxZGMxZDc5ZTVmYjEyMDky ZDMwYTkwHhcNMjUwOTA3MDMwMTA1WhcNMjUwOTA4MDMwMTA1WjAzMTEwLwYDVQQD Eyg2NTMzODdjMjVhNDJjMTY0ODUwZjA5MDA5MWY5YWMxODIzOWMyZWRkMIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAt2/q1fX4Xcp5WJd1Tm05LNCT7acZ +HiW+0TftoBBMAovWK8iv05HhHA8Kt+wxBTSgNwt23PG01orbAJNqPqcy609AvWX YVCOzZDj5bppj/MKGP6QiyaE6nKL/mXfnUmFKWFaLd5vnJvMRSSNwHFfbpsyZ1EE EsQzgl1kYOgEpW5ZoQxm8RufGuezAE8rBHVuQSYJBQFDqzwtHHV3t+IZaVdgfqxs Brvyc8D7IZ3Mrm/9DUZGNnVDefGQDJPmRAu8+RNNqTtGQXT9QxnSahhhi/O3Ih4v mx25w80bW9AxYb5MoszxVo1rqpiC0ozB6Jv/AVwgLjJXrrzc6btRWNm03QIDAQAB o4ICIjCCAh4wHQYDVR0OBBYEFGUzh8JaQsFkhQ8JAJH5rBgjnC7dMB8GA1UdIwQY MBaAFHPyEPEpmh4K7nHcHXnl+xIJLTCpMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvY19JUThTbWFIZ3J1Y2R3ZGVlWDdFZ2t0TUtrLmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC8zNC9kYjFiNDgtMWNjNS00ODMzLTkzZDkt Yjk0NjQ3MThiYTM3LzEvY19JUThTbWFIZ3J1Y2R3ZGVlWDdFZ2t0TUtrLm1mdDCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC8zNC9kYjFiNDgtMWNjNS00ODMzLTkzZDktYjk0NjQ3MThiYTM3 LzEvY19JUThTbWFIZ3J1Y2R3ZGVlWDdFZ2t0TUtrLmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAVxQSEwe+ WRWYX9iKd6cDmR8jWCxc0ujo/i7vqAnPjZvkOFbxQ0CZaVDmSynUFLf9Ex2lm0N7 WGOBDHH3JL5e2uiyggy8EeH73kLxIWcw4cdka4VYu/+Fskkg68qDNCmn3X/kPnVq uvY1swjhdlPyAc5oBCAU/iZk+n33UkA9jnJRjSGWroekRwNrs5x5mTr9ZhMyVovm UHM0ajhd7xiKD2XZfyPCjVlMwurJ8nuBd9k0Iy8+T3L+EGCviJNDyvIeKljWRGxc fbVCZQ8rr1TJIxqQKqw4gW78wibbIJ8cj1pIgjt2v8RTe8H9RStd3rqK2KP4B9L8 dZkWPKhYHBDQeg== -----END CERTIFICATE-----Generated at Sun Sep 7 11:25:02 2025 by rpki-client