$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/fb/79e905-fb0d-4b8b-9390-50d2b70bcf31/1/8uKBD0mzb91kHDJr0d5OQtEosEY.mft File: 8uKBD0mzb91kHDJr0d5OQtEosEY.mft (raw, json) Hash identifier: zIRVbLS2Bk/sRU30tG+UqDZCGA6bSrSvROCl6Tkttqk= Subject key identifier: 7B:2C:00:01:1E:29:8D:D9:E9:A9:74:4C:CC:75:9D:08:D8:C1:92:0C Authority key identifier: F2:E2:81:0F:49:B3:6F:DD:64:1C:32:6B:D1:DE:4E:42:D1:28:B0:46 Certificate issuer: /CN=f2e2810f49b36fdd641c326bd1de4e42d128b046 Certificate serial: 0198CB369F76EB4B0CB0D650563359799EE5 Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/8uKBD0mzb91kHDJr0d5OQtEosEY.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/fb/79e905-fb0d-4b8b-9390-50d2b70bcf31/1/8uKBD0mzb91kHDJr0d5OQtEosEY.mft Manifest number: 1652 Signing time: Thu 21 Aug 2025 06:00:11 +0000 Manifest this update: Thu 21 Aug 2025 06:00:11 +0000 Manifest next update: Fri 22 Aug 2025 06:00:11 +0000 Files and hashes: 1: 1nLm5M5xfJ_suNGM5E1Zv1P9buc.roa (hash: 8x4G+E8iExmOXonfPhkgFAssRVwUmXgRDU/QwrPhfTc=) 2: 8uKBD0mzb91kHDJr0d5OQtEosEY.crl (hash: LhPJwjcBlo5KWUQozOS8p2bgZPgzBdP0LQRKoCbsTRw=) 3: LRM9_QXJ86lLn_T4yr6pQZsd-6U.roa (hash: O97zVnycTINnlYntMUnMI33GyBSK5H4R2ai1eQR3zfs=) 4: Lfi2kFGwKCjTFh-UgGwG9fE3y28.roa (hash: vsaKPg/3Dci9H1drLTZRN5KQySI72yp3XcQ7k6Dlcjo=) 5: _rcbdTd7xszqNhgAb_FkQpQyFAU.roa (hash: tlTacIT/p2BLnUW4V7ZFwYt3E+NE62BrqrDQeWEcWEY=) 6: cSIsSraiS7nIkZaNHDPeLhmfWzw.roa (hash: 6RDnXeZI7Aggjdy420rt58R6tW8oEB+ao9gxbA9zhLY=) 7: cT2NBd6CzvlyjEEfvaGsHGPxIbc.roa (hash: 5qkGkFqB6MaSnnKFQR4ILKQDwkrOhYsEol0WfvvJ+hs=) 8: mgsVdxyrFBjubnGQwn9ZD0Aa8KQ.roa (hash: WUYiTP5VTCdXuJgIU+Sgp6znUUnvoPyUsuU1tYAduHA=) 9: qhtmZa0GBJu-LNeg5d5k1hem6bE.roa (hash: Uh/IbFG52qMt7jSUYgnpbLvKrotH1qlqQb6PDTI4TP4=) 10: wodM1-EUQJUVgPu2FeLNzhcjNAQ.roa (hash: oqpoLkjU7X7RENp32UMSCTEvk2YhpXGRDxHAfJ9Hiks=) Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/fb/79e905-fb0d-4b8b-9390-50d2b70bcf31/1/8uKBD0mzb91kHDJr0d5OQtEosEY.crl rsync://rpki.ripe.net/repository/DEFAULT/fb/79e905-fb0d-4b8b-9390-50d2b70bcf31/1/8uKBD0mzb91kHDJr0d5OQtEosEY.mft rsync://rpki.ripe.net/repository/DEFAULT/8uKBD0mzb91kHDJr0d5OQtEosEY.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Fri 22 Aug 2025 06:00:11 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:98:cb:36:9f:76:eb:4b:0c:b0:d6:50:56:33:59:79:9e:e5 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=f2e2810f49b36fdd641c326bd1de4e42d128b046 Validity Not Before: Aug 21 06:00:11 2025 GMT Not After : Aug 22 06:00:11 2025 GMT Subject: CN=7b2c00011e298dd9e9a9744ccc759d08d8c1920c Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:bf:8e:0f:ab:91:18:e2:62:64:6d:3a:1e:fe:62: d8:db:2d:eb:be:b5:a3:e6:81:aa:41:31:7e:b9:ee: df:85:eb:9b:61:26:36:3d:ca:3c:b2:9d:54:0d:41: 5b:8f:0d:7f:4c:39:40:78:5c:c3:e7:16:bb:f2:fc: e7:5e:da:48:a0:14:45:4f:26:47:60:24:c3:b0:7b: 96:a6:d3:f2:b3:e8:0a:9d:71:d9:ec:16:45:36:fe: 46:bf:96:12:8c:34:6f:09:27:09:ad:57:37:98:d8: a6:75:3f:d9:74:92:23:19:bd:9e:23:b9:25:8e:dc: e9:5e:8a:e1:18:ed:cb:d3:16:18:35:eb:e8:cb:25: be:a7:52:84:4f:b5:1c:35:98:9c:4f:4f:84:0c:da: 70:ee:2d:ca:a1:a8:6b:9d:0d:ad:63:f2:9a:3d:f9: cf:bf:c0:81:b2:bb:d0:67:ca:17:0c:de:0e:d4:54: 5c:07:e4:bc:a6:db:cf:8a:6d:f0:43:74:49:74:c7: 0d:87:02:cd:25:35:6a:2c:2e:e3:5e:7d:d2:40:b3: df:2b:7c:68:74:c0:a0:6d:60:5e:93:da:31:c7:27: d2:90:fc:9d:62:d8:e5:f4:92:5d:1b:8f:9c:15:5b: e3:ac:62:fa:fa:ed:6b:10:ff:4c:ba:9b:c7:7d:f7: bb:85 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 7B:2C:00:01:1E:29:8D:D9:E9:A9:74:4C:CC:75:9D:08:D8:C1:92:0C X509v3 Authority Key Identifier: keyid:F2:E2:81:0F:49:B3:6F:DD:64:1C:32:6B:D1:DE:4E:42:D1:28:B0:46 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/8uKBD0mzb91kHDJr0d5OQtEosEY.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/fb/79e905-fb0d-4b8b-9390-50d2b70bcf31/1/8uKBD0mzb91kHDJr0d5OQtEosEY.mft X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/fb/79e905-fb0d-4b8b-9390-50d2b70bcf31/1/8uKBD0mzb91kHDJr0d5OQtEosEY.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 2d:66:1f:ef:66:1a:72:ed:a8:76:0f:2c:c8:a8:2c:b7:d7:47: f1:08:8c:31:70:40:a6:f6:b0:89:76:bc:22:df:bb:ed:ce:cb: 04:f2:55:e4:3f:01:d7:12:93:39:f4:d2:2b:c0:9d:a7:63:71: 80:bc:5d:c9:31:5d:72:e7:16:b1:71:ff:81:7b:62:32:c8:e9: d5:03:b5:38:4b:96:a7:8f:55:85:72:4c:1d:10:9c:a1:d5:f4: d1:e1:8b:3c:c2:66:11:1a:c0:68:36:ad:23:8d:1a:da:e1:56: f8:64:2a:75:88:88:e1:45:f0:40:9f:6c:5d:b1:b8:dc:7a:de: 5a:8c:b9:94:a2:e9:d8:48:47:ad:16:08:b0:ad:6c:5d:e3:89: ca:d9:e1:d0:fc:ee:24:75:08:27:a4:4f:6b:fc:16:a8:34:be: 64:b0:42:4d:f3:43:eb:37:29:7a:a0:04:a9:a1:12:c2:62:52: 69:95:e5:1d:2f:e4:eb:cd:bd:59:a8:72:02:d7:ed:30:bb:50: 4c:d8:c2:16:db:5a:11:3a:7b:b3:ea:c5:68:0c:bf:75:cc:14: 64:85:5e:1f:fd:99:4e:0d:3b:59:25:55:fb:38:b7:dd:b2:c1: 09:84:3f:46:4a:6d:0b:87:5d:96:6e:e6:07:91:56:61:ab:c9: c0:f1:86:13 -----BEGIN CERTIFICATE----- MIIFFjCCA/6gAwIBAgISAZjLNp9260sMsNZQVjNZeZ7lMA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKGYyZTI4MTBmNDliMzZmZGQ2NDFjMzI2YmQxZGU0ZTQyZDEy OGIwNDYwHhcNMjUwODIxMDYwMDExWhcNMjUwODIyMDYwMDExWjAzMTEwLwYDVQQD Eyg3YjJjMDAwMTFlMjk4ZGQ5ZTlhOTc0NGNjYzc1OWQwOGQ4YzE5MjBjMIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAv44Pq5EY4mJkbToe/mLY2y3rvrWj 5oGqQTF+ue7fheubYSY2Pco8sp1UDUFbjw1/TDlAeFzD5xa78vznXtpIoBRFTyZH YCTDsHuWptPys+gKnXHZ7BZFNv5Gv5YSjDRvCScJrVc3mNimdT/ZdJIjGb2eI7kl jtzpXorhGO3L0xYYNevoyyW+p1KET7UcNZicT0+EDNpw7i3KoahrnQ2tY/KaPfnP v8CBsrvQZ8oXDN4O1FRcB+S8ptvPim3wQ3RJdMcNhwLNJTVqLC7jXn3SQLPfK3xo dMCgbWBek9oxxyfSkPydYtjl9JJdG4+cFVvjrGL6+u1rEP9MupvHffe7hQIDAQAB o4ICIjCCAh4wHQYDVR0OBBYEFHssAAEeKY3Z6al0TMx1nQjYwZIMMB8GA1UdIwQY MBaAFPLigQ9Js2/dZBwya9HeTkLRKLBGMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvOHVLQkQwbXpiOTFrSERKcjBkNU9RdEVvc0VZLmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC9mYi83OWU5MDUtZmIwZC00YjhiLTkzOTAt NTBkMmI3MGJjZjMxLzEvOHVLQkQwbXpiOTFrSERKcjBkNU9RdEVvc0VZLm1mdDCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC9mYi83OWU5MDUtZmIwZC00YjhiLTkzOTAtNTBkMmI3MGJjZjMx LzEvOHVLQkQwbXpiOTFrSERKcjBkNU9RdEVvc0VZLmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEALWYf72Ya cu2odg8syKgst9dH8QiMMXBApvawiXa8It+77c7LBPJV5D8B1xKTOfTSK8Cdp2Nx gLxdyTFdcucWsXH/gXtiMsjp1QO1OEuWp49VhXJMHRCcodX00eGLPMJmERrAaDat I40a2uFW+GQqdYiI4UXwQJ9sXbG43HreWoy5lKLp2EhHrRYIsK1sXeOJytnh0Pzu JHUIJ6RPa/wWqDS+ZLBCTfND6zcpeqAEqaESwmJSaZXlHS/k6829WahyAtftMLtQ TNjCFttaETp7s+rFaAy/dcwUZIVeH/2ZTg07WSVV+zi33bLBCYQ/RkptC4ddlm7m B5FWYavJwPGGEw== -----END CERTIFICATE-----Generated at Thu Aug 21 16:29:57 2025 by rpki-client