$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/5c/f0340b-330e-45d7-be58-135717ef388a/1/FgVYAbd153QwYyFFX9Rj-9knPEw.mft File: FgVYAbd153QwYyFFX9Rj-9knPEw.mft (raw, json) Hash identifier: r8oYP6Y57DslfUHEzW4uq1YncQAHueV6MqKa11olrhs= Subject key identifier: 8E:A0:CE:92:A2:C8:9E:90:8C:4D:D5:DE:3E:66:11:55:DA:FC:EF:A6 Authority key identifier: 16:05:58:01:B7:75:E7:74:30:63:21:45:5F:D4:63:FB:D9:27:3C:4C Certificate issuer: /CN=16055801b775e774306321455fd463fbd9273c4c Certificate serial: 019856B333331C9CE6864BA3931304CC149F Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/FgVYAbd153QwYyFFX9Rj-9knPEw.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/5c/f0340b-330e-45d7-be58-135717ef388a/1/FgVYAbd153QwYyFFX9Rj-9knPEw.mft Manifest number: 03A3 Signing time: Tue 29 Jul 2025 15:00:41 +0000 Manifest this update: Tue 29 Jul 2025 15:00:41 +0000 Manifest next update: Wed 30 Jul 2025 15:00:41 +0000 Files and hashes: 1: 1KQdLQdqSavQ8opOsJBCC_LRSmI.roa (hash: sDbjsiQHm8jFEXwFUnfwIQmQndNvaybGYHSFGwTIBNw=) 2: 2KRS8xNg1n3MiFJIQWdojz6XlS0.roa (hash: VaIgVtBIZ8x0cTFrgwuhgZXExSOoccJFrVYDCE79DMA=) 3: 4dH0InVNCe3eGVOns4YVq3bL3OQ.roa (hash: l9lttAHNPRyWyc4Dp/A0rW4EbaVEYWri2lWohWA+AAY=) 4: CGF1BIeHy8IT5aGPGNEOXrLnJlM.roa (hash: 8VwJdcpb3DlrQc7aqH1TphMMsq6OhgM+K3smNx7xgHw=) 5: FgVYAbd153QwYyFFX9Rj-9knPEw.crl (hash: g8a2H3FCOm8TKGSBkVnunqWc0lW2Gv437JEoK/PVoiM=) 6: HlqaX9y1cpjv0wxGrlQZeagT5Q0.roa (hash: dZjid0DCr3cVa0kusKQlx9flhXPy/L6bL7wDHQcf1TY=) 7: HtWPks8re8wT-Qc0p_2vGh8QeMQ.roa (hash: hj+XgnyJ0Da4wSkZgTsnnXr4WcLVInfl1QD5sz921GI=) 8: IP3SbzCzrnAAxPssLmjl5qAuXoI.roa (hash: hNLmD1W+QN2f7iG3Q9COzZlD7x81+74weJVmNwFG0ok=) 9: KokmpyIZ-xJPhZHdbyQVUxoRW5o.roa (hash: b1lOLAYHQOxQVa21mEjqyKotS3xDQTkF8+kYPRp8ch4=) 10: Z8p5c-rlAPW0cZ-sWH7G-yZd9To.roa (hash: 14NxmVMH2EBfG9yj1NkfTzczT8KoDClH3gg1peZJpIk=) 11: aNo1lorx6tVQ1LtbDZZYpwG98bI.roa (hash: M/dPr78yQy8Oq7tst5W5cmGPYp+8hAOwwdyPVs5Qgpw=) 12: k7L5P2-pybM6axXauNiLmubVx5w.roa (hash: 4pNco59A+DAjWm/A0lbEMapWksPMnWRDbz3uqSa2hI0=) 13: nfwXLaa85PC-1c7VMk7rOkw_-kg.roa (hash: gQAkAYEgr329mA4EnpTCM1JOzdPYMZwZfd+KXQs7Zh4=) 14: tu3hGRkBbSBQ--nqT5wdg-lVn3Y.roa (hash: GOHAj03XK7r6uHKyuAW9rpoOeyK5T9KDx1ewuKony44=) 15: uBWox13mMSaJwJzdxZl5vrK1Uy0.roa (hash: n6tpZm0AgzOjJsWYl0Kbuzd8II7kteFHYXTsaYGDKCc=) 16: yZFvW812QeQ-SDOd-NxPjgAmXKs.roa (hash: tgPqsP3QLMneWItwJodL3YOV3kDTKFjFzXFmCkxHlLM=) 17: zOhruI3f8CmZnvrfikkp_umvSCQ.roa (hash: NEbucM5c57bMZLBETD9r4o+f8o+xAOVGhz7z1f9K4Ww=) Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/5c/f0340b-330e-45d7-be58-135717ef388a/1/FgVYAbd153QwYyFFX9Rj-9knPEw.crl rsync://rpki.ripe.net/repository/DEFAULT/5c/f0340b-330e-45d7-be58-135717ef388a/1/FgVYAbd153QwYyFFX9Rj-9knPEw.mft rsync://rpki.ripe.net/repository/DEFAULT/FgVYAbd153QwYyFFX9Rj-9knPEw.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Wed 30 Jul 2025 14:07:27 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:98:56:b3:33:33:1c:9c:e6:86:4b:a3:93:13:04:cc:14:9f Signature Algorithm: sha256WithRSAEncryption Issuer: CN=16055801b775e774306321455fd463fbd9273c4c Validity Not Before: Jul 29 15:00:41 2025 GMT Not After : Jul 30 15:00:41 2025 GMT Subject: CN=8ea0ce92a2c89e908c4dd5de3e661155dafcefa6 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:e2:89:97:cb:59:56:3b:2a:bc:8d:02:1c:7a:89: b3:df:bc:e4:00:5e:9d:c1:0a:b0:d2:5c:ec:54:e3: 99:83:99:38:b8:1e:b2:bd:88:d6:10:57:ee:3a:ba: 0e:fe:cd:49:b1:e8:dc:32:f9:b7:76:2f:bf:94:8e: a2:af:8d:53:a7:96:75:87:bf:c0:18:7a:9d:cb:d7: f5:8d:b4:3c:5a:82:bf:12:8b:95:8b:b6:a8:72:da: dc:cb:13:03:c3:97:f4:e1:45:3a:ef:cf:da:e3:32: 0a:f7:fe:b6:ed:61:ec:b8:8c:02:d4:d1:95:09:e3: 3f:a6:2a:77:84:06:48:63:89:88:f8:30:c6:e9:da: 69:3e:61:73:3a:55:79:04:a3:87:b6:a7:35:3e:73: e0:44:d3:33:2b:b7:3f:9e:26:0f:68:21:5a:13:15: 1c:c9:5e:c6:c9:41:a4:55:2a:9c:95:61:89:e4:59: 70:d5:59:ca:34:ec:10:eb:37:bb:5e:89:15:77:c8: 5b:41:0f:7a:ba:4f:6e:d6:30:ba:9f:00:64:d8:f5: 7f:e9:5f:94:9c:67:bc:66:44:91:dc:86:57:fa:b3: 30:41:49:e7:83:18:fe:5f:a4:1f:76:d6:d7:15:d4: a0:95:1f:47:0d:9a:3f:56:92:c2:76:1d:5a:93:99: 15:59 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 8E:A0:CE:92:A2:C8:9E:90:8C:4D:D5:DE:3E:66:11:55:DA:FC:EF:A6 X509v3 Authority Key Identifier: keyid:16:05:58:01:B7:75:E7:74:30:63:21:45:5F:D4:63:FB:D9:27:3C:4C X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/FgVYAbd153QwYyFFX9Rj-9knPEw.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/5c/f0340b-330e-45d7-be58-135717ef388a/1/FgVYAbd153QwYyFFX9Rj-9knPEw.mft X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/5c/f0340b-330e-45d7-be58-135717ef388a/1/FgVYAbd153QwYyFFX9Rj-9knPEw.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 64:cf:a0:09:47:df:07:a3:9a:d1:b3:f8:ba:8d:60:1a:df:99: a2:90:93:bb:43:8b:45:5c:7e:6f:2b:be:8f:de:11:e3:00:87: d1:5b:57:4d:f3:d4:c7:6e:1c:7c:f2:2d:1d:da:c9:ae:31:6a: fd:90:fd:0c:98:96:10:4c:cf:48:a9:42:7f:2c:75:b4:0b:20: bc:eb:d7:a9:c1:1d:87:26:69:05:32:d3:39:45:a1:23:a9:08: 7e:c8:ff:d2:dd:52:1f:c2:40:f2:4d:13:47:6f:b7:79:0e:7d: c4:4f:b2:83:c0:5a:2c:ae:78:89:e3:50:a1:cc:60:91:fa:ac: e8:14:f5:86:3c:17:28:0c:98:ad:57:10:52:d5:e4:c7:68:0f: 8e:c3:fa:18:83:f2:f8:cb:fb:0e:e6:9b:24:de:59:0e:50:e0: 1a:75:3a:30:a6:16:f2:20:3a:1d:40:bf:92:00:aa:28:02:eb: 74:b1:28:27:f1:78:72:de:ad:bf:c4:0b:f3:ba:05:dd:da:7f: 47:b5:4b:1a:8c:87:ec:ec:9c:4f:96:00:30:74:72:a8:84:31: 07:40:1a:10:e4:ff:bd:2e:96:b0:37:8a:43:b9:d8:a4:20:f6: aa:47:4c:28:1a:79:5a:df:3f:22:a0:47:3f:79:a2:7b:82:57: 6c:5a:20:af -----BEGIN CERTIFICATE----- MIIFFjCCA/6gAwIBAgISAZhWszMzHJzmhkujkxMEzBSfMA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKDE2MDU1ODAxYjc3NWU3NzQzMDYzMjE0NTVmZDQ2M2ZiZDky NzNjNGMwHhcNMjUwNzI5MTUwMDQxWhcNMjUwNzMwMTUwMDQxWjAzMTEwLwYDVQQD Eyg4ZWEwY2U5MmEyYzg5ZTkwOGM0ZGQ1ZGUzZTY2MTE1NWRhZmNlZmE2MIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEA4omXy1lWOyq8jQIceomz37zkAF6d wQqw0lzsVOOZg5k4uB6yvYjWEFfuOroO/s1JsejcMvm3di+/lI6ir41Tp5Z1h7/A GHqdy9f1jbQ8WoK/EouVi7aoctrcyxMDw5f04UU678/a4zIK9/627WHsuIwC1NGV CeM/pip3hAZIY4mI+DDG6dppPmFzOlV5BKOHtqc1PnPgRNMzK7c/niYPaCFaExUc yV7GyUGkVSqclWGJ5Flw1VnKNOwQ6ze7XokVd8hbQQ96uk9u1jC6nwBk2PV/6V+U nGe8ZkSR3IZX+rMwQUnngxj+X6QfdtbXFdSglR9HDZo/VpLCdh1ak5kVWQIDAQAB o4ICIjCCAh4wHQYDVR0OBBYEFI6gzpKiyJ6QjE3V3j5mEVXa/O+mMB8GA1UdIwQY MBaAFBYFWAG3ded0MGMhRV/UY/vZJzxMMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvRmdWWUFiZDE1M1F3WXlGRlg5UmotOWtuUEV3LmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC81Yy9mMDM0MGItMzMwZS00NWQ3LWJlNTgt MTM1NzE3ZWYzODhhLzEvRmdWWUFiZDE1M1F3WXlGRlg5UmotOWtuUEV3Lm1mdDCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC81Yy9mMDM0MGItMzMwZS00NWQ3LWJlNTgtMTM1NzE3ZWYzODhh LzEvRmdWWUFiZDE1M1F3WXlGRlg5UmotOWtuUEV3LmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAZM+gCUff B6Oa0bP4uo1gGt+ZopCTu0OLRVx+byu+j94R4wCH0VtXTfPUx24cfPItHdrJrjFq /ZD9DJiWEEzPSKlCfyx1tAsgvOvXqcEdhyZpBTLTOUWhI6kIfsj/0t1SH8JA8k0T R2+3eQ59xE+yg8BaLK54ieNQocxgkfqs6BT1hjwXKAyYrVcQUtXkx2gPjsP6GIPy +Mv7DuabJN5ZDlDgGnU6MKYW8iA6HUC/kgCqKALrdLEoJ/F4ct6tv8QL87oF3dp/ R7VLGoyH7OycT5YAMHRyqIQxB0AaEOT/vS6WsDeKQ7nYpCD2qkdMKBp5Wt8/IqBH P3mie4JXbFogrw== -----END CERTIFICATE-----Generated at Tue Jul 29 16:27:34 2025 by rpki-client