$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/25/30dc85-2dd8-4b1c-b151-4bd63adc7354/1/v4QRNUXZAAdg9mBipCIZM6LpWdg.mft File: v4QRNUXZAAdg9mBipCIZM6LpWdg.mft (raw, json) Hash identifier: v8WSn2pJ1lrSxPXFe+311CLm221Fq1FUbFA3bwGJmCM= Subject key identifier: C0:35:07:41:CD:9B:76:E3:74:DD:08:49:FC:14:14:8C:3B:6D:16:26 Authority key identifier: BF:84:11:35:45:D9:00:07:60:F6:60:62:A4:22:19:33:A2:E9:59:D8 Certificate issuer: /CN=bf84113545d9000760f66062a4221933a2e959d8 Certificate serial: 01982FDC8A3FBB0CBEA33CB7D71A2A11318A Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/v4QRNUXZAAdg9mBipCIZM6LpWdg.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/25/30dc85-2dd8-4b1c-b151-4bd63adc7354/1/v4QRNUXZAAdg9mBipCIZM6LpWdg.mft Manifest number: 1297 Signing time: Tue 22 Jul 2025 02:00:39 +0000 Manifest this update: Tue 22 Jul 2025 02:00:39 +0000 Manifest next update: Wed 23 Jul 2025 02:00:39 +0000 Files and hashes: 1: 1-DCahpulJuiQi8zdfIBNVSBP_a0.roa (hash: nTSeDU5/i/b0oztZzrG2CtOkwm9ZNipV4GkBR8TKl3w=) 2: 2e62pyAhQt2DxyPFxqODWQtQycw.roa (hash: 6QUHL09wvOyNqPTs2cgB2RoIpq+Ebpdxb1aI/fz0Ah0=) 3: 4HUEzjvO1URr-UPygZ4Bs6_KT9Q.roa (hash: 8gqeOkmM8zl20dUfCC3W3gzkl4K07sQTxtiB6AnAR2Q=) 4: 4V9UnV1Yi4lf1STc1xhZ4bIgUvA.roa (hash: OKQzkBUD42iLo7oYo0ouIYvBAPZ/5GAsgIcFR+QH2YU=) 5: 4xHSFz_h8RDTEizlLHiNqDZdB8k.roa (hash: k0/n97wXnLuKC+5MEW+78XWyuksvPTuMv3V0hsYhTuY=) 6: 6QviIP7RKjJfXyJHP71i3FDYWL4.roa (hash: QwitosOHcwHPVpSg5VFkyXo/VZmtnyWUke/Nxvg71U0=) 7: 8BYyiV_FmTFHvbWCMT9MCIE0Jec.roa (hash: vchZYcV4SDRnLThnALYy/67VTOlcKJqhG1pqy1A7Xrw=) 8: C-9z8ht5WfkqXe5T02TWElDQHq0.roa (hash: 1QuiVMAynqn64XKAO48JlQaP57PEKALVhYDiuC06tGA=) 9: C6g1ONP_vtRLZw5SWoA9vplmgJM.roa (hash: HonD5XzzqQhi7JX6hKbSZGFHe/yxLPBH/XIA/EDB12Q=) 10: ENmvSrLnZ5l3zdl7_SWX-dmV2iw.roa (hash: d78rG1JxemNpbntQxK8HRnUpFVFRNZsmtcWweXwXHFA=) 11: GkulWb9O_JudfoJFvg0VKRWcC-c.roa (hash: imc0Oai3NRq2Ce4v1cDaGA0yeaVNNKi0sCBD6N92KYk=) 12: LHp-Ta0kps7ZGlhRPmsNyhh2hwA.roa (hash: bBoLumt4C2qITlPGkAX4DT2//QAjdutXa5WDertG6UU=) 13: M08pG0WnhIQX2KOfjmHJXSyaCoc.roa (hash: 7/2skEcs3WncoMu7ukPnikjrb0ygdobEezSJD1ACHfA=) 14: MVzetovtGmRyshR5xnQeUk8Tcj4.roa (hash: mg7B6jgZRyqNtZfobIMwdCZZ8B96W2fgBgCBDsqyUw0=) 15: PKjMMvZfZGO6d3QofJpMp8mLoEg.roa (hash: PLZzvSg9ShprS72UhVRcTHvYPm2OE+eVMBgJ7lsQMMA=) 16: Q2uH0kQd1mGKZxWodmd4mRQRHhk.roa (hash: sUsJy3husqKKmvF1HsBe/XSQWllpwuvFf6kbg39WROs=) 17: QDo92mi4UWCLSwxkXaA5OctFTkc.roa (hash: ovBhPdG/TKSn9sfg2AM068Pokavj0m1i5AMYnj3jGLs=) 18: RJ_pu626Ce_XeWRRjGCg0rBJ5No.roa (hash: CnjyAdkpFkqDDXWo/A5sDL6/Mzrh604ryWOcVYb0EdU=) 19: UnjUUsbulhDzBwKFih0qX4dYSxo.roa (hash: zO3PIrwe+xgSWoHcPY2w0UaXKoLO1fCh81rcz/LjIf8=) 20: W5sU-ZO6WBhRXGkiRRiQQs5_9rk.roa (hash: buoQ3JOzvBjf3H+zLixOxcXYRqSn97Vev1LEOeeiEno=) 21: XlhxtDrnef0LIn9STUD5IsH1ycc.roa (hash: 8c7ddXQfFoWwM7tA+K1eFR8xfvHddWeWNMUF9Typ4Ww=) 22: YyBDnlwVRLs70MJK1KT4FesLKyU.roa (hash: 4tm/JGl1e/uknO1Ju/nt2CfaO1Nf+gSmh9MxSuAs2aA=) 23: fuMedyng8Q6xPnFdNbl_N8_Sxo4.roa (hash: sqU76Se28Ec/MvIdqZD/zhVxUgHos++zus2QQ63LwTY=) 24: gprH44AplwwXGaOOjeCuLFfIu_g.roa (hash: vbsZE0UvtEhxU037nRwlkmHVqRPfyWPC+cnqZxvX81M=) 25: hP2fgAy34XIg7aM2C0Ad6ElaYgI.roa (hash: /xs3DUUFJAe9wbGBaQmfw6+eASI54MfNuZpQE+CXA0o=) 26: lsUTyap9w4Y2oLY8ZnktLZStCYQ.roa (hash: emTi848aQBwWEDQNS5g3zSRylsJAzf0KVP+OaAM5+qE=) 27: m7lMiWju66nWi4ie7Vt74icILpg.roa (hash: x3s/oVaZakSkOMeloqbQaRy3FaKUq2eo4wHClY5zjYc=) 28: pWKwCP_lM1lV6k1_8iA6jNpjHqg.roa (hash: RStEnKPVfL8STTUgjI+bGS1TABSbUFHPohIVOs18xGk=) 29: rlvR4lgAAPe6NxanZUVpezIwE3A.roa (hash: z8dG8w6G/0kvxVmZ+4RC/Z1OH/kukWiL1TxfJ/ZMp5Y=) 30: v4QRNUXZAAdg9mBipCIZM6LpWdg.crl (hash: mJbJPvVtMItx++agUKFHJXyIjfqe5nKR3Z/mGq9ivoE=) 31: w8idkeWbG52TtIpx9U6pAxc7Df8.roa (hash: u3rb6lYT1ibz1O/axkufNUJsAz+Fi6V/7un9KfX38o4=) 32: yn1GwROcUgRKZlTBqW_F9Or69fY.roa (hash: RW3qs3OMo0v6AzSxdEGAc3fTls7oUr/QT/SMMhP5/Tw=) Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/25/30dc85-2dd8-4b1c-b151-4bd63adc7354/1/v4QRNUXZAAdg9mBipCIZM6LpWdg.crl rsync://rpki.ripe.net/repository/DEFAULT/25/30dc85-2dd8-4b1c-b151-4bd63adc7354/1/v4QRNUXZAAdg9mBipCIZM6LpWdg.mft rsync://rpki.ripe.net/repository/DEFAULT/v4QRNUXZAAdg9mBipCIZM6LpWdg.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Wed 23 Jul 2025 02:00:39 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:98:2f:dc:8a:3f:bb:0c:be:a3:3c:b7:d7:1a:2a:11:31:8a Signature Algorithm: sha256WithRSAEncryption Issuer: CN=bf84113545d9000760f66062a4221933a2e959d8 Validity Not Before: Jul 22 02:00:39 2025 GMT Not After : Jul 23 02:00:39 2025 GMT Subject: CN=c0350741cd9b76e374dd0849fc14148c3b6d1626 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:c2:fb:32:49:6e:30:24:b8:72:9e:3c:f9:f2:04: f0:7a:14:48:1a:ca:5b:2a:f2:56:2f:19:24:47:ec: 8f:ed:db:07:a9:06:f9:81:f9:6c:ed:da:be:0c:94: 06:a8:50:af:76:92:ab:0b:54:dd:df:77:ee:b2:1b: ea:a8:52:52:c0:c9:ed:47:ae:6a:0e:d0:86:7b:67: 8f:b5:40:47:61:cc:0f:ff:e5:cf:73:97:5f:69:1d: 2e:15:41:21:f8:2f:d4:d3:00:ef:83:a7:8d:03:d2: 66:86:11:38:63:c8:e9:0e:fd:0e:02:53:ac:22:1f: 9a:d5:90:bb:8c:0b:b0:90:53:cc:b8:80:8d:54:eb: bd:ce:a1:a1:da:77:4c:4f:7c:4c:a4:19:ca:ef:85: 73:dd:b4:7b:05:9d:33:ab:1f:65:0d:e6:c1:64:57: c1:33:e0:c2:32:06:50:a4:83:ec:51:c8:3a:73:d7: 59:6a:a7:b9:1d:04:73:ee:c2:0f:e0:77:91:81:d6: df:7a:65:2e:d5:d0:55:a6:0f:8f:ac:fe:ed:be:b5: 7a:e9:69:d0:67:b3:3b:ea:e7:f3:0a:96:6e:61:eb: a1:9c:45:91:00:e2:81:ac:38:98:b3:a2:49:0e:28: b8:50:8b:63:86:fa:78:bd:c8:8b:b5:49:a7:5a:81: 40:1b Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: C0:35:07:41:CD:9B:76:E3:74:DD:08:49:FC:14:14:8C:3B:6D:16:26 X509v3 Authority Key Identifier: keyid:BF:84:11:35:45:D9:00:07:60:F6:60:62:A4:22:19:33:A2:E9:59:D8 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/v4QRNUXZAAdg9mBipCIZM6LpWdg.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/25/30dc85-2dd8-4b1c-b151-4bd63adc7354/1/v4QRNUXZAAdg9mBipCIZM6LpWdg.mft X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/25/30dc85-2dd8-4b1c-b151-4bd63adc7354/1/v4QRNUXZAAdg9mBipCIZM6LpWdg.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption af:10:2a:5c:15:65:95:24:5b:a7:42:f1:be:a1:a5:42:6f:27: 0e:e0:78:72:0f:c9:de:ea:9a:9a:e9:16:9c:9a:98:a9:42:67: a5:26:fe:bb:0a:fb:09:9e:59:dc:ca:2e:c2:11:25:95:0e:92: cf:c6:f9:85:65:8c:ae:0e:ab:6d:b1:09:78:d4:2b:12:48:a8: 60:f5:e4:82:ae:ae:3b:c1:79:d1:e1:bb:2e:75:ce:30:69:41: ed:8b:7b:43:8d:38:b7:dc:a1:01:ff:ad:60:b3:b1:ba:27:f8: 8d:27:7d:e7:36:df:89:9d:de:b6:f6:e3:15:1a:9c:fb:f4:3a: 4e:65:2f:01:77:81:9f:37:e0:0f:82:65:33:9e:1c:10:96:5d: 66:4c:88:06:5f:1a:6d:33:a7:2d:49:0c:0c:c0:e8:90:b4:d1: f0:50:f0:08:02:bd:40:77:fa:12:87:9e:fa:90:6a:d2:3d:2f: 1c:57:f9:32:60:cf:df:6f:c0:98:eb:3d:1d:c4:69:07:75:69: 7a:60:e1:f3:e3:77:44:aa:c3:fe:be:71:69:b3:cc:37:b5:e4: 49:59:0e:48:27:33:3c:a2:33:77:bd:62:e2:43:51:aa:3c:a7: 9a:fe:89:86:86:ba:a5:08:a4:3f:ea:90:e6:a4:68:ac:f5:5a: 91:c9:2c:a2 -----BEGIN CERTIFICATE----- MIIFFjCCA/6gAwIBAgISAZgv3Io/uwy+ozy31xoqETGKMA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKGJmODQxMTM1NDVkOTAwMDc2MGY2NjA2MmE0MjIxOTMzYTJl OTU5ZDgwHhcNMjUwNzIyMDIwMDM5WhcNMjUwNzIzMDIwMDM5WjAzMTEwLwYDVQQD EyhjMDM1MDc0MWNkOWI3NmUzNzRkZDA4NDlmYzE0MTQ4YzNiNmQxNjI2MIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAwvsySW4wJLhynjz58gTwehRIGspb KvJWLxkkR+yP7dsHqQb5gfls7dq+DJQGqFCvdpKrC1Td33fushvqqFJSwMntR65q DtCGe2ePtUBHYcwP/+XPc5dfaR0uFUEh+C/U0wDvg6eNA9JmhhE4Y8jpDv0OAlOs Ih+a1ZC7jAuwkFPMuICNVOu9zqGh2ndMT3xMpBnK74Vz3bR7BZ0zqx9lDebBZFfB M+DCMgZQpIPsUcg6c9dZaqe5HQRz7sIP4HeRgdbfemUu1dBVpg+PrP7tvrV66WnQ Z7M76ufzCpZuYeuhnEWRAOKBrDiYs6JJDii4UItjhvp4vciLtUmnWoFAGwIDAQAB o4ICIjCCAh4wHQYDVR0OBBYEFMA1B0HNm3bjdN0ISfwUFIw7bRYmMB8GA1UdIwQY MBaAFL+EETVF2QAHYPZgYqQiGTOi6VnYMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvdjRRUk5VWFpBQWRnOW1CaXBDSVpNNkxwV2RnLmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC8yNS8zMGRjODUtMmRkOC00YjFjLWIxNTEt NGJkNjNhZGM3MzU0LzEvdjRRUk5VWFpBQWRnOW1CaXBDSVpNNkxwV2RnLm1mdDCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC8yNS8zMGRjODUtMmRkOC00YjFjLWIxNTEtNGJkNjNhZGM3MzU0 LzEvdjRRUk5VWFpBQWRnOW1CaXBDSVpNNkxwV2RnLmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEArxAqXBVl lSRbp0LxvqGlQm8nDuB4cg/J3uqamukWnJqYqUJnpSb+uwr7CZ5Z3MouwhEllQ6S z8b5hWWMrg6rbbEJeNQrEkioYPXkgq6uO8F50eG7LnXOMGlB7Yt7Q404t9yhAf+t YLOxuif4jSd95zbfiZ3etvbjFRqc+/Q6TmUvAXeBnzfgD4JlM54cEJZdZkyIBl8a bTOnLUkMDMDokLTR8FDwCAK9QHf6Eoee+pBq0j0vHFf5MmDP32/AmOs9HcRpB3Vp emDh8+N3RKrD/r5xabPMN7XkSVkOSCczPKIzd71i4kNRqjynmv6Jhoa6pQikP+qQ 5qRorPVakcksog== -----END CERTIFICATE-----Generated at Tue Jul 22 11:48:58 2025 by rpki-client