$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/59/86297a-d219-4567-9171-421e6bc7e2e8/1/4tW7QBGA5V9cFl1HkI3_T-KaDYY.mft File: 4tW7QBGA5V9cFl1HkI3_T-KaDYY.mft (raw, json) Hash identifier: fYPKYiLf/AC9RoVkSNoaf+Gt3hsCWab208HIU0x3UKQ= Subject key identifier: 50:C8:93:2F:9A:42:58:4E:BA:A3:16:B3:86:5D:CD:70:F9:3C:5A:1E Authority key identifier: E2:D5:BB:40:11:80:E5:5F:5C:16:5D:47:90:8D:FF:4F:E2:9A:0D:86 Certificate issuer: /CN=e2d5bb401180e55f5c165d47908dff4fe29a0d86 Certificate serial: 019838041E2882A95A32092BBBAF6DB1A3DE Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/4tW7QBGA5V9cFl1HkI3_T-KaDYY.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/59/86297a-d219-4567-9171-421e6bc7e2e8/1/4tW7QBGA5V9cFl1HkI3_T-KaDYY.mft Manifest number: 09C0 Signing time: Wed 23 Jul 2025 16:00:50 +0000 Manifest this update: Wed 23 Jul 2025 16:00:50 +0000 Manifest next update: Thu 24 Jul 2025 16:00:50 +0000 Files and hashes: 1: 4tW7QBGA5V9cFl1HkI3_T-KaDYY.crl (hash: I/sMb6XSgR3a//K0yu+u2aw8JrgRN+pjqbtv6qB+w5E=) 2: 5DnR59g0uDhlCeBnwu0_1-KUFeg.roa (hash: jAnqTMpaItG0GhBN/hjRVmkf1KAEsae1ohPc+vQL06Q=) 3: 8PxMQW8r6gNYx6cR3PMs2yrl5ew.roa (hash: GqHXtanVRqdO2QW4vR+6/WyxTi1dfx0DVX7E+ZRdtvU=) 4: DamwXsWqw-pNiIY7Y9gzUoz46SI.roa (hash: 1+3IDizWDcTViB++VKv1xbkAGlHPeiHczREvYVy1BEk=) 5: Dt-A1UKjqPAgnYkiz5oOF3KPif4.roa (hash: jW2Q0BDw92rsfiM8k0/wQ6GD7kmaBburgq62TnGU9aA=) 6: Kn_2eJGh3EcHDuB-OJ8l3E2w8hE.roa (hash: kQ83aGfbv2Iq481MBuTu7pjTHv3tFZPurvWLoY3PlVA=) 7: LAI14FhpOzU-rcfdJ6U9PG061Ec.roa (hash: avAt1L3mlV+2vo4CiZ8YrFs2RggnJV+Qj20+5tYBmII=) 8: LbrW0uU2svuMgCfEegCflkeiJNI.roa (hash: xicAKV+b+Rrkk93cgla0jRgvKkmUQRZcuO0wo+Vll1I=) 9: NH99_Parr6i87GqyKHm971OOvUA.roa (hash: ejRR3IxtFm+BdQE6JvQ7L16gCRkI9epYBVSx8aKoP8A=) 10: OOSnnzJCzwuc2Oreq9KoON2OJy4.roa (hash: 8ZWXugZrnN7Xp4F6Xn87sRk2TjB10Ze3ouSEvaxFbzM=) 11: Q820-mh3gTLx3r5yd43BKUrxxh8.roa (hash: koyxE8n/nkkyiE6UfVNmxydTa2BJ9VFKJe/4B3gcMPg=) 12: QRvqjOpbm1bsYYXVNYJCdsL2K9c.roa (hash: gbsaPykuhKfA/rXSneeYnuzsVzL0kGuorXD/sYaSjK8=) 13: STuoLQHHZBzK_Ldaz7xkxpSaBqY.roa (hash: ZzI62CUIffeXt6hPl33Fk7eNbx5SV7+e0g7j7C8NgSI=) 14: dPORcLPPy7vGPpK7YO0ZCdg3SLc.roa (hash: M8CeF8WcmPBFysMRz6rWQ9roOEfHfMbz/n6BV0QqyTM=) 15: ea2ONoTt3SySSjctEUa2mvxPlk0.roa (hash: aHDpbhU3poNDj7sgG29oLTuaOz779tw43LjPP8jq2GU=) 16: gPbim5HyI5_coGPfod5GORXHFJM.roa (hash: WqgzuFgOy6ZgR1XpLM/1W9uFliVDMHByx6+nWg3yG7Q=) 17: hV1kQUu8Pdq1hwLjpsPqwMqfj_U.roa (hash: N1eliwWO7Qtxwve5drBayNA7B9DMRJgSbxRNUu9dsfY=) 18: o1MTa_u6ng7YChqgqqMpF_EDHDo.roa (hash: medB94fc43SFhZiIXkS8L2CLIYdmUFnxbXmgm5u0RKM=) 19: pA-Fq_J6A5SNZJF98Uix7eSPlIg.roa (hash: 7lwAf6YG9+AyLk5HAGkoZYURCw6qLQhN2f3/kdNJO0w=) 20: v5F31cV6XBvE5243s4oHQBqQQDM.roa (hash: +2WzyiNTSNMZQ/+SFfQYAFWtFS/6Ce5PKrWiHjJlqng=) 21: xbbY79UbNbRYIgyXeBU4cy_zCmI.roa (hash: c0Ac2LrLggmLnLPt492ZZRPubOLwoYV4rcik5rRDaO0=) 22: zw1raLzJkOzuLdWVP5BWRU84p2o.roa (hash: XIzDwzNdh9cyZCy+DakAR8zEkFIdZM7IKTxs2TBKsWM=) Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/59/86297a-d219-4567-9171-421e6bc7e2e8/1/4tW7QBGA5V9cFl1HkI3_T-KaDYY.crl rsync://rpki.ripe.net/repository/DEFAULT/59/86297a-d219-4567-9171-421e6bc7e2e8/1/4tW7QBGA5V9cFl1HkI3_T-KaDYY.mft rsync://rpki.ripe.net/repository/DEFAULT/4tW7QBGA5V9cFl1HkI3_T-KaDYY.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Thu 24 Jul 2025 16:00:50 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:98:38:04:1e:28:82:a9:5a:32:09:2b:bb:af:6d:b1:a3:de Signature Algorithm: sha256WithRSAEncryption Issuer: CN=e2d5bb401180e55f5c165d47908dff4fe29a0d86 Validity Not Before: Jul 23 16:00:50 2025 GMT Not After : Jul 24 16:00:50 2025 GMT Subject: CN=50c8932f9a42584ebaa316b3865dcd70f93c5a1e Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:96:39:81:ad:f1:80:ee:f5:4b:d8:1a:bc:45:8c: 5d:e9:20:71:29:5d:56:12:e2:6a:d5:23:67:02:c8: 24:7b:0e:ac:03:b2:88:4f:e4:6c:03:a3:0c:8d:48: aa:07:f2:60:fd:64:49:ee:60:d4:8b:bb:26:48:aa: b4:ee:2e:54:0b:21:e1:3e:27:00:f4:d4:0f:cb:e7: ad:7c:6c:29:35:e1:cf:07:4d:a2:d1:28:2a:86:bb: ee:20:03:95:ce:7d:fe:c8:1d:db:49:a2:0e:8a:3e: 67:e0:aa:81:20:d5:0a:db:8c:e5:57:d6:80:01:1a: 50:ce:3e:47:0d:84:28:08:08:b1:7a:02:f3:44:fd: 3a:ef:c3:79:a4:58:94:93:a8:96:1d:95:ec:06:a4: 32:f7:32:1c:25:ed:8b:41:42:9a:76:dd:9e:d2:ef: 41:d3:1c:02:2f:0f:19:76:70:41:b7:5d:6a:be:3e: f8:22:f3:22:29:e3:20:66:e3:f8:3d:24:78:fa:25: 17:f8:e2:cf:ae:6b:76:0d:d5:9c:f1:7d:21:ab:b0: f5:62:58:11:72:f9:b0:8b:46:51:b2:0c:0e:f2:d0: e3:f5:d8:22:ee:10:67:44:6c:da:33:d0:fa:1d:e9: 76:2c:a8:c6:4d:9f:39:01:2f:e4:79:6d:92:a7:46: 98:b5 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 50:C8:93:2F:9A:42:58:4E:BA:A3:16:B3:86:5D:CD:70:F9:3C:5A:1E X509v3 Authority Key Identifier: keyid:E2:D5:BB:40:11:80:E5:5F:5C:16:5D:47:90:8D:FF:4F:E2:9A:0D:86 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/4tW7QBGA5V9cFl1HkI3_T-KaDYY.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/59/86297a-d219-4567-9171-421e6bc7e2e8/1/4tW7QBGA5V9cFl1HkI3_T-KaDYY.mft X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/59/86297a-d219-4567-9171-421e6bc7e2e8/1/4tW7QBGA5V9cFl1HkI3_T-KaDYY.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 6d:b6:36:67:25:a5:7d:2e:d1:ee:0b:5d:45:e3:d9:fa:13:38: a4:c2:ca:05:c0:10:59:09:67:8d:c3:11:b9:69:af:eb:2f:fb: d1:14:48:da:5d:72:46:07:11:d9:42:6e:7e:11:97:07:a1:4d: 83:29:e9:91:40:a4:26:b6:21:8f:7f:e4:b5:73:58:f1:af:db: a1:55:3f:14:c9:fb:9c:24:a1:e9:f1:9a:5c:6c:25:81:68:ca: 91:45:f6:2e:5e:41:89:d6:7c:2d:52:83:1c:d1:d4:61:13:9e: 3b:a6:9c:b0:b4:63:10:63:e0:fe:1e:a9:98:b2:90:32:41:39: ca:bc:b0:0d:4e:5c:ef:34:b0:2c:0a:a7:b6:fd:03:ba:3d:83: 67:c0:be:17:f0:20:94:78:ab:ee:26:e3:fc:f5:a7:25:bb:ce: 6d:85:d5:21:d6:4f:b1:9b:ea:14:60:ec:9b:2b:7a:fb:5c:c3: 5c:62:44:b6:14:24:94:a8:ce:d9:cd:f1:74:87:18:07:8c:d7: cb:75:ad:7b:9d:87:85:d6:fc:9b:3f:28:4d:af:d8:69:15:11: dd:99:e3:30:1f:1c:ca:d5:cf:a0:e8:44:94:d5:13:c3:09:6b: 9e:ad:29:4e:1f:92:bd:e3:08:d7:2b:d9:a5:49:e8:d2:79:8d: bb:63:51:31 -----BEGIN CERTIFICATE----- MIIFFjCCA/6gAwIBAgISAZg4BB4ogqlaMgkru69tsaPeMA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKGUyZDViYjQwMTE4MGU1NWY1YzE2NWQ0NzkwOGRmZjRmZTI5 YTBkODYwHhcNMjUwNzIzMTYwMDUwWhcNMjUwNzI0MTYwMDUwWjAzMTEwLwYDVQQD Eyg1MGM4OTMyZjlhNDI1ODRlYmFhMzE2YjM4NjVkY2Q3MGY5M2M1YTFlMIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAljmBrfGA7vVL2Bq8RYxd6SBxKV1W EuJq1SNnAsgkew6sA7KIT+RsA6MMjUiqB/Jg/WRJ7mDUi7smSKq07i5UCyHhPicA 9NQPy+etfGwpNeHPB02i0SgqhrvuIAOVzn3+yB3bSaIOij5n4KqBINUK24zlV9aA ARpQzj5HDYQoCAixegLzRP0678N5pFiUk6iWHZXsBqQy9zIcJe2LQUKadt2e0u9B 0xwCLw8ZdnBBt11qvj74IvMiKeMgZuP4PSR4+iUX+OLPrmt2DdWc8X0hq7D1YlgR cvmwi0ZRsgwO8tDj9dgi7hBnRGzaM9D6Hel2LKjGTZ85AS/keW2Sp0aYtQIDAQAB o4ICIjCCAh4wHQYDVR0OBBYEFFDIky+aQlhOuqMWs4ZdzXD5PFoeMB8GA1UdIwQY MBaAFOLVu0ARgOVfXBZdR5CN/0/img2GMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvNHRXN1FCR0E1VjljRmwxSGtJM19ULUthRFlZLmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC81OS84NjI5N2EtZDIxOS00NTY3LTkxNzEt NDIxZTZiYzdlMmU4LzEvNHRXN1FCR0E1VjljRmwxSGtJM19ULUthRFlZLm1mdDCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC81OS84NjI5N2EtZDIxOS00NTY3LTkxNzEtNDIxZTZiYzdlMmU4 LzEvNHRXN1FCR0E1VjljRmwxSGtJM19ULUthRFlZLmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAbbY2ZyWl fS7R7gtdRePZ+hM4pMLKBcAQWQlnjcMRuWmv6y/70RRI2l1yRgcR2UJufhGXB6FN gynpkUCkJrYhj3/ktXNY8a/boVU/FMn7nCSh6fGaXGwlgWjKkUX2Ll5BidZ8LVKD HNHUYROeO6acsLRjEGPg/h6pmLKQMkE5yrywDU5c7zSwLAqntv0Duj2DZ8C+F/Ag lHir7ibj/PWnJbvObYXVIdZPsZvqFGDsmyt6+1zDXGJEthQklKjO2c3xdIcYB4zX y3Wte52Hhdb8mz8oTa/YaRUR3ZnjMB8cytXPoOhElNUTwwlrnq0pTh+SveMI1yvZ pUno0nmNu2NRMQ== -----END CERTIFICATE-----Generated at Thu Jul 24 01:28:54 2025 by rpki-client