$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/75/a1ae70-7996-4687-a0d7-5e0f4ab809bb/1/dD5EftuKXg4bHX9c3Ch8NkpfsLU.mft File: dD5EftuKXg4bHX9c3Ch8NkpfsLU.mft (raw, json) Hash identifier: nWuY2tzL1ew+ei+6lG4D7aRouMPVKjR7eyMzqIoINJs= Subject key identifier: FC:7F:79:46:B7:C6:BE:CE:B1:5D:0D:58:2F:E1:8C:B9:61:31:1C:67 Authority key identifier: 74:3E:44:7E:DB:8A:5E:0E:1B:1D:7F:5C:DC:28:7C:36:4A:5F:B0:B5 Certificate issuer: /CN=743e447edb8a5e0e1b1d7f5cdc287c364a5fb0b5 Certificate serial: 01991E0B299164FF63E9E3B3276F5878DA37 Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/dD5EftuKXg4bHX9c3Ch8NkpfsLU.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/75/a1ae70-7996-4687-a0d7-5e0f4ab809bb/1/dD5EftuKXg4bHX9c3Ch8NkpfsLU.mft Manifest number: 13CA Signing time: Sat 06 Sep 2025 08:01:11 +0000 Manifest this update: Sat 06 Sep 2025 08:01:11 +0000 Manifest next update: Sun 07 Sep 2025 08:01:11 +0000 Files and hashes: 1: 3CaVGaLlRCBtJGBXfSGA7zW-rCs.roa (hash: /HyApflaldYM3wui8EYCuzUIG18+LCBycHK+Nr4v5s8=) 2: 8K49Xpj4k5dyq2yRfoHAGiOSEeY.roa (hash: hmDY+ZS4NIOUWsCQUGN6/UlYo0A7Iss4LnNH2Vn6ChM=) 3: EIwgJdgCtKjSF1OnSZWkIAG5K2g.roa (hash: bhYZ1AB7z9n2WlipWCV/D9RvakS2owMjdFRvLRjlEoc=) 4: SpwpOai_FtguiEb6EOg32FrVvwo.roa (hash: HeWT4ZC3Atk3KoLa4nB04v2Zk03ppgVqDGcFZo3oFnU=) 5: _urUnPm3dxe0dhHO4I67DMxNM8w.roa (hash: peMugiexGfIHSWdQB0rJ+olLWcWf0//IWy/3iCQCuZI=) 6: dD5EftuKXg4bHX9c3Ch8NkpfsLU.crl (hash: 8hCcgGFb5hBMqVp2wPz9RYqvfob6XqS9V0eu8rtrj2c=) 7: fP9KcS2nAtlzdr_4yXDxYjDynAI.roa (hash: FSiW33FPGzpnEA+aiBD/xZClQVX484dW+n0rQsuAQfU=) 8: mvjla0bo-b4smMyT4MbECv-Xg3g.roa (hash: Vqa7w/SLiL/4k4HQ/RKtBsHmvexhX5wGtbX9qiUFZ2c=) 9: w_7-SYv5bHiwdydNGFlWuXsDXgg.roa (hash: KW5l2Z272khkMu93M3YIBl32KtQLTDgrGalDxIjvjZI=) 10: wsCfa_dpu6iZf2NU0pw8sHrNTzM.roa (hash: ID8HALsHr8nweeK/J/fa9245rIiMTt1S8ecp9UAgByg=) 11: zk606_tA-z-IeZTHslWjd57DyoU.roa (hash: OeeTCfdnHGAGbtMXpq4iRnyWATlD9GVuGnayUOxfrkU=) Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/75/a1ae70-7996-4687-a0d7-5e0f4ab809bb/1/dD5EftuKXg4bHX9c3Ch8NkpfsLU.crl rsync://rpki.ripe.net/repository/DEFAULT/75/a1ae70-7996-4687-a0d7-5e0f4ab809bb/1/dD5EftuKXg4bHX9c3Ch8NkpfsLU.mft rsync://rpki.ripe.net/repository/DEFAULT/dD5EftuKXg4bHX9c3Ch8NkpfsLU.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Sun 07 Sep 2025 04:00:23 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:99:1e:0b:29:91:64:ff:63:e9:e3:b3:27:6f:58:78:da:37 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=743e447edb8a5e0e1b1d7f5cdc287c364a5fb0b5 Validity Not Before: Sep 6 08:01:11 2025 GMT Not After : Sep 7 08:01:11 2025 GMT Subject: CN=fc7f7946b7c6beceb15d0d582fe18cb961311c67 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:98:95:4a:df:79:64:74:3d:b9:02:25:ef:d2:7f: 68:23:86:8f:7b:59:0c:ca:53:f6:22:bf:c2:7a:30: 55:89:eb:78:ac:ca:19:1e:cf:f5:c9:17:6a:ca:ee: 6a:fb:1c:9f:55:15:02:e2:98:0c:fb:1a:32:11:b9: 12:a1:99:a8:55:54:fa:b4:e5:cf:56:f4:fa:cd:11: f4:8a:4b:1d:4e:ef:16:bd:ca:46:6b:94:98:e4:9e: 27:06:15:d0:b8:dc:f8:32:61:94:d5:2c:bd:a3:59: a0:01:d6:b8:d8:71:2f:24:58:d3:c5:ec:6a:b5:4e: f8:69:81:9c:75:ca:7d:4f:6d:15:f7:74:2b:71:29: b0:bd:41:05:4c:d8:6c:20:76:a0:a9:32:b5:76:c5: 68:2d:bb:41:fa:f1:35:be:05:a2:34:88:be:81:79: 1f:f4:0f:9f:74:7d:3b:b6:fa:92:e4:03:f1:fd:66: 1a:f9:75:f4:4b:0c:ea:6c:d8:3c:0d:82:0b:74:41: ca:04:1b:36:f7:57:97:57:9c:63:fd:a4:68:fe:7b: 92:60:8b:af:0b:f0:a5:03:db:e2:5c:88:18:e1:cf: fb:88:fa:ac:4b:b1:d2:61:1a:85:2f:80:e9:48:8d: 96:9b:a3:a3:54:5b:4f:4d:10:0e:c1:62:47:37:f8: f5:d5 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: FC:7F:79:46:B7:C6:BE:CE:B1:5D:0D:58:2F:E1:8C:B9:61:31:1C:67 X509v3 Authority Key Identifier: keyid:74:3E:44:7E:DB:8A:5E:0E:1B:1D:7F:5C:DC:28:7C:36:4A:5F:B0:B5 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/dD5EftuKXg4bHX9c3Ch8NkpfsLU.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/75/a1ae70-7996-4687-a0d7-5e0f4ab809bb/1/dD5EftuKXg4bHX9c3Ch8NkpfsLU.mft X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/75/a1ae70-7996-4687-a0d7-5e0f4ab809bb/1/dD5EftuKXg4bHX9c3Ch8NkpfsLU.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 04:82:3d:5d:a9:a7:ab:bd:87:78:8d:7b:81:16:e9:96:ff:6c: 92:35:b8:28:d9:94:3d:3f:83:bc:67:c5:d5:f5:1a:8d:cf:57: ba:1e:b6:b3:b7:bc:c2:0b:ce:a7:2a:6e:42:f9:cc:90:79:58: 4b:31:bd:20:c6:b1:22:c1:c3:7f:c8:8c:57:b9:4c:dc:c0:9b: b5:1d:5a:a6:29:e2:8b:db:a8:fe:df:c7:de:88:93:32:22:83: 38:83:74:ac:e5:a4:73:1b:cc:c2:3c:a1:d1:f7:e6:91:e7:41: f2:b2:00:f2:f6:e8:ba:1a:3c:b1:00:4f:ef:65:c5:ce:b9:b8: eb:97:4d:82:05:77:ca:d6:36:53:97:b4:23:9b:73:81:72:41: 0e:fe:ae:92:d1:51:d4:11:03:78:fc:6e:a6:a2:7f:94:3c:11: 05:bc:36:17:18:b8:ea:b4:e4:66:e5:41:b8:35:3d:fc:34:2a: b2:37:56:a8:1e:d3:c6:a4:ff:9c:5a:17:64:ca:50:d6:3f:95: f1:2d:67:d0:27:43:bb:55:f9:bb:de:3e:87:50:f3:a8:90:05: f4:49:ea:7f:fa:53:75:0b:e1:55:ac:7d:3d:12:ff:00:6f:ed: 93:2e:16:ef:dd:ef:c0:ed:1f:a7:5f:41:6f:23:2f:5c:43:87: 70:01:5b:6f -----BEGIN CERTIFICATE----- MIIFFjCCA/6gAwIBAgISAZkeCymRZP9j6eOzJ29YeNo3MA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKDc0M2U0NDdlZGI4YTVlMGUxYjFkN2Y1Y2RjMjg3YzM2NGE1 ZmIwYjUwHhcNMjUwOTA2MDgwMTExWhcNMjUwOTA3MDgwMTExWjAzMTEwLwYDVQQD EyhmYzdmNzk0NmI3YzZiZWNlYjE1ZDBkNTgyZmUxOGNiOTYxMzExYzY3MIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAmJVK33lkdD25AiXv0n9oI4aPe1kM ylP2Ir/CejBViet4rMoZHs/1yRdqyu5q+xyfVRUC4pgM+xoyEbkSoZmoVVT6tOXP VvT6zRH0iksdTu8WvcpGa5SY5J4nBhXQuNz4MmGU1Sy9o1mgAda42HEvJFjTxexq tU74aYGcdcp9T20V93QrcSmwvUEFTNhsIHagqTK1dsVoLbtB+vE1vgWiNIi+gXkf 9A+fdH07tvqS5APx/WYa+XX0SwzqbNg8DYILdEHKBBs291eXV5xj/aRo/nuSYIuv C/ClA9viXIgY4c/7iPqsS7HSYRqFL4DpSI2Wm6OjVFtPTRAOwWJHN/j11QIDAQAB o4ICIjCCAh4wHQYDVR0OBBYEFPx/eUa3xr7OsV0NWC/hjLlhMRxnMB8GA1UdIwQY MBaAFHQ+RH7bil4OGx1/XNwofDZKX7C1MA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvZEQ1RWZ0dUtYZzRiSFg5YzNDaDhOa3Bmc0xVLmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC83NS9hMWFlNzAtNzk5Ni00Njg3LWEwZDct NWUwZjRhYjgwOWJiLzEvZEQ1RWZ0dUtYZzRiSFg5YzNDaDhOa3Bmc0xVLm1mdDCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC83NS9hMWFlNzAtNzk5Ni00Njg3LWEwZDctNWUwZjRhYjgwOWJi LzEvZEQ1RWZ0dUtYZzRiSFg5YzNDaDhOa3Bmc0xVLmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEABII9Xamn q72HeI17gRbplv9skjW4KNmUPT+DvGfF1fUajc9Xuh62s7e8wgvOpypuQvnMkHlY SzG9IMaxIsHDf8iMV7lM3MCbtR1apinii9uo/t/H3oiTMiKDOIN0rOWkcxvMwjyh 0ffmkedB8rIA8vbouho8sQBP72XFzrm465dNggV3ytY2U5e0I5tzgXJBDv6uktFR 1BEDePxupqJ/lDwRBbw2Fxi46rTkZuVBuDU9/DQqsjdWqB7TxqT/nFoXZMpQ1j+V 8S1n0CdDu1X5u94+h1DzqJAF9Enqf/pTdQvhVax9PRL/AG/tky4W793vwO0fp19B byMvXEOHcAFbbw== -----END CERTIFICATE-----Generated at Sat Sep 6 11:45:35 2025 by rpki-client