$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/b2/6c203d-6221-460a-af49-c12218765154/1/MlCPt4HKbb2CIfLC-VSjp0RrK0I.mft File: MlCPt4HKbb2CIfLC-VSjp0RrK0I.mft (raw, json) Hash identifier: rDOtC473Xwg9sF6YYwrPAHEnWwgP8WrpHyJcH9jJiJ8= Subject key identifier: CC:B3:1A:9C:20:45:9E:F9:69:6F:FC:68:8E:42:0D:90:5E:AB:78:FD Authority key identifier: 32:50:8F:B7:81:CA:6D:BD:82:21:F2:C2:F9:54:A3:A7:44:6B:2B:42 Certificate issuer: /CN=32508fb781ca6dbd8221f2c2f954a3a7446b2b42 Certificate serial: 01990DBC5AAD912A3CECFD1F7B400985C2F4 Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/MlCPt4HKbb2CIfLC-VSjp0RrK0I.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/b2/6c203d-6221-460a-af49-c12218765154/1/MlCPt4HKbb2CIfLC-VSjp0RrK0I.mft Manifest number: 1673 Signing time: Wed 03 Sep 2025 04:01:11 +0000 Manifest this update: Wed 03 Sep 2025 04:01:11 +0000 Manifest next update: Thu 04 Sep 2025 04:01:11 +0000 Files and hashes: 1: 7sUlQFo2i2sGz_Vst269K_D-c-U.roa (hash: awgZwYT2+l2C5RaRZHXtrmJNbZfubWqB+2+301bBQBU=) 2: MlCPt4HKbb2CIfLC-VSjp0RrK0I.crl (hash: ZPG7ynEBPRnxJeak859HhEC6NVt1MavnxwFcXaw4/hE=) 3: N6977Tm3BxtAWxQMZFqlxhSXVqI.roa (hash: avNpgfUO6xrr8rilL4FRK/J7Wxu+LI2r4IfOPlXIeJI=) 4: OqobHIZLFLbZk0OR9E-PF1zk1Lw.roa (hash: Op02L+M19/z5j79qbmcRNqPT6icOYzM0VJzQXj5mmv8=) 5: TEsKuOI8Wr3xLM61BToTHvaxLG0.roa (hash: rGoXl2FfQwurIyUgTu1Dn9mUe7pNqUYv/AJnXAkg28U=) 6: i7jWP6E6hcB7Kvbk4mThF2buTs8.roa (hash: OqH0B+K5eYlDv/BpS97jLxNiwQggexBzkbjaho23mP4=) 7: nqc-9YDKd79YsE90D6bPl2BpKgE.roa (hash: VLqSIZaMWc7sFSdSIdfn5EqqZNs2ezp2l6diOyM4sNY=) 8: rgeIy49dLmNJww9sp8JRWKXD-n8.roa (hash: L8MUX4zAy84NplfwfzJB7WI9HcrmosjCL1UuxDQCssQ=) 9: xZ2vcM-Bgt-peFWCq0zItN8_N0c.roa (hash: IJSnWW805B1m7rlymmTJG2w628sB6dalr9ieL5l/bMk=) 10: zZigjvCd6NcudatYLyfpsyOboFA.roa (hash: vGtEfaZy/GpSD6Vra1IvWRrERF5jpy55majvnW9xdMY=) Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/b2/6c203d-6221-460a-af49-c12218765154/1/MlCPt4HKbb2CIfLC-VSjp0RrK0I.crl rsync://rpki.ripe.net/repository/DEFAULT/b2/6c203d-6221-460a-af49-c12218765154/1/MlCPt4HKbb2CIfLC-VSjp0RrK0I.mft rsync://rpki.ripe.net/repository/DEFAULT/MlCPt4HKbb2CIfLC-VSjp0RrK0I.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Wed 03 Sep 2025 23:00:36 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:99:0d:bc:5a:ad:91:2a:3c:ec:fd:1f:7b:40:09:85:c2:f4 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=32508fb781ca6dbd8221f2c2f954a3a7446b2b42 Validity Not Before: Sep 3 04:01:11 2025 GMT Not After : Sep 4 04:01:11 2025 GMT Subject: CN=ccb31a9c20459ef9696ffc688e420d905eab78fd Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:c4:a5:db:83:6e:7b:17:a0:f7:8e:8d:8c:b9:0e: b5:a2:ff:58:6f:57:11:7d:04:6d:b5:2e:e4:41:7b: 8b:93:6a:f3:5b:83:d8:59:18:ee:4a:65:58:e5:86: aa:bc:06:1e:98:11:14:17:1b:98:7c:87:ae:6f:4d: af:7a:cd:9e:66:e7:0a:62:17:a1:4f:f2:ab:ff:0c: 85:af:ca:ed:80:af:ac:b7:78:2c:f0:dc:07:9f:c7: bd:1d:52:63:cb:ee:fb:59:5e:0f:0b:b1:a7:c5:61: 3d:b8:e0:06:48:75:ab:70:ef:b7:ad:51:64:4a:4d: ef:73:b1:a4:f3:a9:62:f3:88:22:0c:10:09:6d:d6: be:c5:19:5a:56:32:d8:1f:e0:dd:5b:f4:16:53:83: 7e:f8:19:7e:4b:da:64:91:2f:df:ec:7e:68:3f:c8: 71:1f:89:76:d7:51:0a:0d:e7:b7:42:ef:0f:09:a9: 18:c1:31:ce:bd:9d:4f:2c:99:e2:00:96:9f:06:38: b1:3f:5f:99:a1:00:ea:48:01:f5:a3:75:06:94:d2: 1a:c8:7b:d4:28:e0:f8:c5:3d:6d:6e:64:32:72:e1: 60:ea:88:84:f0:14:10:0a:a7:92:59:f4:2e:9b:f3: 74:fb:09:1f:51:da:35:6b:3e:14:05:8a:79:56:13: 1c:99 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: CC:B3:1A:9C:20:45:9E:F9:69:6F:FC:68:8E:42:0D:90:5E:AB:78:FD X509v3 Authority Key Identifier: keyid:32:50:8F:B7:81:CA:6D:BD:82:21:F2:C2:F9:54:A3:A7:44:6B:2B:42 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/MlCPt4HKbb2CIfLC-VSjp0RrK0I.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/b2/6c203d-6221-460a-af49-c12218765154/1/MlCPt4HKbb2CIfLC-VSjp0RrK0I.mft X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/b2/6c203d-6221-460a-af49-c12218765154/1/MlCPt4HKbb2CIfLC-VSjp0RrK0I.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 21:67:42:1e:0b:a1:fd:aa:c0:b0:f1:86:93:b0:9e:e5:ba:af: e3:92:bc:0b:7f:90:bf:b4:ba:b4:a6:6a:90:d0:77:01:c1:d7: 72:23:b9:32:27:b5:fb:28:76:8f:09:f2:da:e2:f0:68:aa:fb: 09:30:68:d9:16:87:c3:b3:a4:fd:c2:20:b0:6e:bd:c0:25:53: 8a:c9:eb:bc:cc:25:68:58:0b:2a:e2:9e:d6:d0:91:25:6b:fa: 0a:d9:a4:c4:d6:cb:84:8f:a5:fe:bb:db:e0:f5:24:fb:91:2b: c2:51:a2:0e:25:9f:5b:0b:96:d3:87:99:b5:c5:23:84:a3:4a: c8:35:7d:2c:69:f7:64:ea:52:21:8d:82:7c:3b:f7:c2:ad:14: 91:15:bc:8a:c3:75:e0:a5:e5:1e:d4:52:65:15:29:fc:de:ea: 38:81:c2:68:56:57:b9:67:72:27:6a:f2:86:24:d5:0e:b8:b1: 55:36:27:d3:8e:24:f1:a2:f7:29:63:a3:b2:5b:b6:38:d6:57: ad:6a:e3:56:a1:5b:3f:0b:d4:34:a8:30:fd:ab:69:ef:24:9c: 88:a7:1e:8b:5c:3b:85:38:83:4e:98:6f:75:a5:e8:cc:4e:13: 63:e2:aa:8b:11:0a:12:11:02:f7:0c:39:42:bb:54:7b:97:11: 1f:dc:24:bf -----BEGIN CERTIFICATE----- MIIFFjCCA/6gAwIBAgISAZkNvFqtkSo87P0fe0AJhcL0MA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKDMyNTA4ZmI3ODFjYTZkYmQ4MjIxZjJjMmY5NTRhM2E3NDQ2 YjJiNDIwHhcNMjUwOTAzMDQwMTExWhcNMjUwOTA0MDQwMTExWjAzMTEwLwYDVQQD EyhjY2IzMWE5YzIwNDU5ZWY5Njk2ZmZjNjg4ZTQyMGQ5MDVlYWI3OGZkMIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAxKXbg257F6D3jo2MuQ61ov9Yb1cR fQRttS7kQXuLk2rzW4PYWRjuSmVY5YaqvAYemBEUFxuYfIeub02ves2eZucKYheh T/Kr/wyFr8rtgK+st3gs8NwHn8e9HVJjy+77WV4PC7GnxWE9uOAGSHWrcO+3rVFk Sk3vc7Gk86li84giDBAJbda+xRlaVjLYH+DdW/QWU4N++Bl+S9pkkS/f7H5oP8hx H4l211EKDee3Qu8PCakYwTHOvZ1PLJniAJafBjixP1+ZoQDqSAH1o3UGlNIayHvU KOD4xT1tbmQycuFg6oiE8BQQCqeSWfQum/N0+wkfUdo1az4UBYp5VhMcmQIDAQAB o4ICIjCCAh4wHQYDVR0OBBYEFMyzGpwgRZ75aW/8aI5CDZBeq3j9MB8GA1UdIwQY MBaAFDJQj7eBym29giHywvlUo6dEaytCMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvTWxDUHQ0SEtiYjJDSWZMQy1WU2pwMFJySzBJLmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC9iMi82YzIwM2QtNjIyMS00NjBhLWFmNDkt YzEyMjE4NzY1MTU0LzEvTWxDUHQ0SEtiYjJDSWZMQy1WU2pwMFJySzBJLm1mdDCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC9iMi82YzIwM2QtNjIyMS00NjBhLWFmNDktYzEyMjE4NzY1MTU0 LzEvTWxDUHQ0SEtiYjJDSWZMQy1WU2pwMFJySzBJLmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAIWdCHguh /arAsPGGk7Ce5bqv45K8C3+Qv7S6tKZqkNB3AcHXciO5Mie1+yh2jwny2uLwaKr7 CTBo2RaHw7Ok/cIgsG69wCVTisnrvMwlaFgLKuKe1tCRJWv6CtmkxNbLhI+l/rvb 4PUk+5ErwlGiDiWfWwuW04eZtcUjhKNKyDV9LGn3ZOpSIY2CfDv3wq0UkRW8isN1 4KXlHtRSZRUp/N7qOIHCaFZXuWdyJ2ryhiTVDrixVTYn044k8aL3KWOjslu2ONZX rWrjVqFbPwvUNKgw/atp7ySciKcei1w7hTiDTphvdaXozE4TY+KqixEKEhEC9ww5 QrtUe5cRH9wkvw== -----END CERTIFICATE-----Generated at Wed Sep 3 06:59:40 2025 by rpki-client