$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/46/5d8915-c448-40e7-8caa-ba771ffd269c/1/jRHLAV35uqthIo27zhfdTgDmPBM.mft File: jRHLAV35uqthIo27zhfdTgDmPBM.mft (raw, json) Hash identifier: f5eVW5A9yknFcEz7Mk5aCJ+mykj/0C6DxZ+bDHrYZmw= Subject key identifier: B7:AB:D5:2B:06:87:69:31:1F:85:E7:60:80:7D:74:F0:96:01:C2:2F Authority key identifier: 8D:11:CB:01:5D:F9:BA:AB:61:22:8D:BB:CE:17:DD:4E:00:E6:3C:13 Certificate issuer: /CN=8d11cb015df9baab61228dbbce17dd4e00e63c13 Certificate serial: 019917649428B705CECBEC33FB4BAAE940F8 Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/jRHLAV35uqthIo27zhfdTgDmPBM.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/46/5d8915-c448-40e7-8caa-ba771ffd269c/1/jRHLAV35uqthIo27zhfdTgDmPBM.mft Manifest number: 160B Signing time: Fri 05 Sep 2025 01:01:31 +0000 Manifest this update: Fri 05 Sep 2025 01:01:31 +0000 Manifest next update: Sat 06 Sep 2025 01:01:31 +0000 Files and hashes: 1: A3slZgyg9eemzONzeM4ZjQZOkQA.roa (hash: X0hOJW7H3OQv8gNe/Scffw0tX7rp3lfITg3c2bDp62I=) 2: Dyi32KlOskocQHPe6FUF7ELQs5U.roa (hash: D3EF+UreJY6p0ckzuksgWXVvYetF6sITxKDGv/w2L0k=) 3: FJEFcX2c3QiytgwJXtBXdfXF7AQ.roa (hash: wDOQFjMrdpmJOwUI55qSC810FFGrsaY4QPcOoJKWykM=) 4: G_noKzntiWHLaHSdta1FputJESM.roa (hash: 76HBYH18Q5+wfRzE5ydGp21BC62rcsuS2tSvCzBrWp8=) 5: K9IKE8UzWzIlRqgdm5DBscj4DXI.roa (hash: TmNOvsKyJxclTHoJrrP+Wz2lJl3QKp06vZRtwf2Wkwo=) 6: Orf0-crrS-m0d2xw75OekVLRhcU.roa (hash: NyC6YqKt0FNmC1unp3jevt47/gr2Ss5dzqvXJGD2AjU=) 7: THZGRo10wjMlm6DbRUy7KjrwfkM.roa (hash: 9FjGohVB5WEFkwBSNZEgEcooaudVJnnxxDK2Jy9/LgI=) 8: VmEKVuU_uT-v34QUxuvTEoMoaug.roa (hash: lCfgs7Wts05rdP9N+OaYxsLVxOabAGR5SUtGArrm95M=) 9: Vxz_brs8mMP8pyfBjMG6SqLCoLA.roa (hash: InPdcQtGkZTGLva52kv6ADnfkbCulTXgK4jOcLs8G7M=) 10: Xmin5XG-kRl49Vt7ZEcTgSLDhDM.roa (hash: DHMC7YXYfDSAA2x6JnOvMwJT1zdpAymlypp6F1bKmgY=) 11: Yfzph1m23vmbClyvIoORpS1CW-E.roa (hash: SuwU2G9eYZ/n+GS6xB/GEsh3UziEYPdyi1WD5kRpjAo=) 12: _vcj5hH5PQmqE-mf4-B7kcWGpfg.roa (hash: ReLlnYnzQbiQ5Pk/0fIjBSPY1fpdoMBMJpSnkiSreWk=) 13: d-sWN4azI8sU7mlb0U-920Rsmtc.roa (hash: eiusVr40X1jFuIAj+CFi96eXy2bKXAQXnB20dKkv/70=) 14: jRHLAV35uqthIo27zhfdTgDmPBM.crl (hash: l9O2bM/GVA3lKHPhwNnFl1H4C3GvCWZrwPxhy4ShoVs=) 15: mwm5rC4rfoUfkUGj1keywZQhhGw.roa (hash: dDwtNYt9WubuetSqef0LQakniH0rgBVhQK32OI1f1fU=) 16: nyxtNnWsxM3-5IIVvMZ44cQVEYU.roa (hash: ub8VtVKtgWVEPS0rlKsjT0ZjeuiFnfLTw/tC6ZpW/Vo=) 17: v5kzcztD_Zc4DwbwnN4YfKR9YoA.roa (hash: 33e8kQ++AVlCN79vtcp+1+C+oGUNBxplYHYOGaRMl58=) Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/46/5d8915-c448-40e7-8caa-ba771ffd269c/1/jRHLAV35uqthIo27zhfdTgDmPBM.crl rsync://rpki.ripe.net/repository/DEFAULT/46/5d8915-c448-40e7-8caa-ba771ffd269c/1/jRHLAV35uqthIo27zhfdTgDmPBM.mft rsync://rpki.ripe.net/repository/DEFAULT/jRHLAV35uqthIo27zhfdTgDmPBM.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Sat 06 Sep 2025 01:00:24 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:99:17:64:94:28:b7:05:ce:cb:ec:33:fb:4b:aa:e9:40:f8 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=8d11cb015df9baab61228dbbce17dd4e00e63c13 Validity Not Before: Sep 5 01:01:31 2025 GMT Not After : Sep 6 01:01:31 2025 GMT Subject: CN=b7abd52b068769311f85e760807d74f09601c22f Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:c5:19:b8:75:ed:b5:b1:85:c0:07:1b:74:ab:db: bb:87:a1:41:86:20:c6:50:3e:73:2c:d4:b4:64:d6: 24:23:0d:b1:60:1d:b0:9c:75:0e:a3:ce:fc:0b:c9: fa:f1:44:87:ca:74:83:8a:b6:14:01:03:a7:be:99: 9c:61:fb:c7:05:ee:cb:8c:7e:b0:4f:8d:b2:06:14: 89:f3:24:6f:f8:20:9f:fd:db:69:c2:02:bd:5a:f9: 86:a6:91:29:80:14:84:c3:0d:3b:53:73:2f:20:d8: 15:5f:46:77:9f:38:0a:42:8e:2c:9a:c0:a0:b5:e0: e2:d3:6d:5d:76:44:9a:25:78:22:d4:68:3d:78:81: 40:50:af:5f:2b:02:28:8b:6d:db:e7:a1:d1:1e:23: 59:b8:e0:59:3e:62:cd:dd:bb:2d:db:30:b9:5f:50: 6a:8f:b0:ab:58:3a:1b:e2:b1:3f:f7:07:ad:f5:81: da:d5:8e:b4:fa:08:36:68:ad:17:de:d6:53:b4:55: 72:d5:be:5a:3f:79:50:fe:09:22:0b:69:89:36:4f: e7:bc:22:55:be:c9:f5:89:37:be:75:05:47:4d:cb: d5:b2:74:44:2e:1c:d0:e3:ef:1e:80:05:65:d6:06: 00:81:19:5c:ce:08:6d:4d:46:c6:fc:13:34:2c:8e: 90:95 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: B7:AB:D5:2B:06:87:69:31:1F:85:E7:60:80:7D:74:F0:96:01:C2:2F X509v3 Authority Key Identifier: keyid:8D:11:CB:01:5D:F9:BA:AB:61:22:8D:BB:CE:17:DD:4E:00:E6:3C:13 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/jRHLAV35uqthIo27zhfdTgDmPBM.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/46/5d8915-c448-40e7-8caa-ba771ffd269c/1/jRHLAV35uqthIo27zhfdTgDmPBM.mft X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/46/5d8915-c448-40e7-8caa-ba771ffd269c/1/jRHLAV35uqthIo27zhfdTgDmPBM.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 70:f8:62:0f:10:56:fd:cd:17:ff:d0:ee:e2:b6:96:6b:64:ef: 7c:a2:03:49:2a:17:21:45:71:02:5c:09:e1:30:ce:89:b5:a4: 1b:95:da:d2:94:d4:33:33:8d:d7:70:44:82:ad:96:12:b3:9b: 79:2d:94:34:b8:69:d8:70:c6:73:2b:12:da:b1:29:9f:c9:07: de:d7:21:4a:01:fb:1b:b1:b8:ce:82:e5:1c:19:a7:fb:e8:55: 14:00:05:c7:d6:b2:25:18:08:8f:64:e7:65:18:ee:89:8c:7f: e2:c1:97:c7:b8:bd:92:e0:23:4d:f1:35:cf:dc:30:7e:da:bb: 51:e6:e1:01:97:7c:3a:f8:ff:09:b6:b3:8d:d9:44:d7:3c:22: 6d:89:e7:b0:63:4d:be:70:a3:6c:9a:a5:a4:36:e2:ef:ae:c0: f1:f1:45:2b:74:19:08:05:be:5c:82:90:2e:3d:fe:02:0b:80: b2:5c:e4:ad:bf:7f:94:27:57:b3:6f:3a:c0:8f:ed:ff:2c:33: 93:06:b0:fc:0d:49:65:d6:86:25:52:7d:c1:34:10:26:9b:35: 57:56:62:41:16:33:03:01:a2:87:0e:4a:8d:f3:1e:01:ee:f6: a9:d0:14:53:52:9a:c4:45:a8:c1:c9:db:d7:53:f9:72:13:b0: 1f:49:f7:22 -----BEGIN CERTIFICATE----- MIIFFjCCA/6gAwIBAgISAZkXZJQotwXOy+wz+0uq6UD4MA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKDhkMTFjYjAxNWRmOWJhYWI2MTIyOGRiYmNlMTdkZDRlMDBl NjNjMTMwHhcNMjUwOTA1MDEwMTMxWhcNMjUwOTA2MDEwMTMxWjAzMTEwLwYDVQQD EyhiN2FiZDUyYjA2ODc2OTMxMWY4NWU3NjA4MDdkNzRmMDk2MDFjMjJmMIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAxRm4de21sYXABxt0q9u7h6FBhiDG UD5zLNS0ZNYkIw2xYB2wnHUOo878C8n68USHynSDirYUAQOnvpmcYfvHBe7LjH6w T42yBhSJ8yRv+CCf/dtpwgK9WvmGppEpgBSEww07U3MvINgVX0Z3nzgKQo4smsCg teDi021ddkSaJXgi1Gg9eIFAUK9fKwIoi23b56HRHiNZuOBZPmLN3bst2zC5X1Bq j7CrWDob4rE/9wet9YHa1Y60+gg2aK0X3tZTtFVy1b5aP3lQ/gkiC2mJNk/nvCJV vsn1iTe+dQVHTcvVsnRELhzQ4+8egAVl1gYAgRlczghtTUbG/BM0LI6QlQIDAQAB o4ICIjCCAh4wHQYDVR0OBBYEFLer1SsGh2kxH4XnYIB9dPCWAcIvMB8GA1UdIwQY MBaAFI0RywFd+bqrYSKNu84X3U4A5jwTMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvalJITEFWMzV1cXRoSW8yN3poZmRUZ0RtUEJNLmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC80Ni81ZDg5MTUtYzQ0OC00MGU3LThjYWEt YmE3NzFmZmQyNjljLzEvalJITEFWMzV1cXRoSW8yN3poZmRUZ0RtUEJNLm1mdDCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC80Ni81ZDg5MTUtYzQ0OC00MGU3LThjYWEtYmE3NzFmZmQyNjlj LzEvalJITEFWMzV1cXRoSW8yN3poZmRUZ0RtUEJNLmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAcPhiDxBW /c0X/9Du4raWa2TvfKIDSSoXIUVxAlwJ4TDOibWkG5Xa0pTUMzON13BEgq2WErOb eS2UNLhp2HDGcysS2rEpn8kH3tchSgH7G7G4zoLlHBmn++hVFAAFx9ayJRgIj2Tn ZRjuiYx/4sGXx7i9kuAjTfE1z9wwftq7UebhAZd8Ovj/CbazjdlE1zwibYnnsGNN vnCjbJqlpDbi767A8fFFK3QZCAW+XIKQLj3+AguAslzkrb9/lCdXs286wI/t/ywz kwaw/A1JZdaGJVJ9wTQQJps1V1ZiQRYzAwGihw5KjfMeAe72qdAUU1KaxEWowcnb 11P5chOwH0n3Ig== -----END CERTIFICATE-----Generated at Fri Sep 5 06:06:23 2025 by rpki-client