$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/36/ddf8b3-1c08-495c-8ddf-fae5dbed3b1b/1/b4Tkc4pw6jnAjO8hBDKuOZ7H6RU.mft File: b4Tkc4pw6jnAjO8hBDKuOZ7H6RU.mft (raw, json) Hash identifier: IzvMM7zRkv1CuRNbzAQcgtYBUoHH2FSx0TZPiE+PHho= Subject key identifier: D2:07:DE:74:FA:31:0B:92:85:9B:3F:5B:86:23:25:03:35:5A:7F:9A Authority key identifier: 6F:84:E4:73:8A:70:EA:39:C0:8C:EF:21:04:32:AE:39:9E:C7:E9:15 Certificate issuer: /CN=6f84e4738a70ea39c08cef210432ae399ec7e915 Certificate serial: 019826A2CD5A4F63B45B24201D85C91E5CEA Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/b4Tkc4pw6jnAjO8hBDKuOZ7H6RU.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/36/ddf8b3-1c08-495c-8ddf-fae5dbed3b1b/1/b4Tkc4pw6jnAjO8hBDKuOZ7H6RU.mft Manifest number: 176A Signing time: Sun 20 Jul 2025 07:01:00 +0000 Manifest this update: Sun 20 Jul 2025 07:01:00 +0000 Manifest next update: Mon 21 Jul 2025 07:01:00 +0000 Files and hashes: 1: 1-acserkdaRwKD1ZOt9mnNNr_tGk.roa (hash: 6hEtVWrVnbgrhSvEQ68FfjrHt5WP9Jfl8fiwkMXiUDI=) 2: 2NzLzMOeFuBmYcrjiyDs5_DFYgI.roa (hash: UjwWdB8k577gYTCkJHn1rSTdVabHuDeCfYMOytlfWbk=) 3: 4b9wapi-A3xvohc41Khc1lUVmhg.roa (hash: iNy46VLu2un4QkjNe7VEFguyWUL0vvJsdCZlhuaclZQ=) 4: 5ZZSm_Fa_pFTl_cyAdVd2h8Ixgc.roa (hash: BkNNieru96Ok0gqv++x1NXt1ZiRd17b/+Pd802cp/Gk=) 5: 5zoRP68EVGDpXKwRwzUsGLHu-RY.roa (hash: +G8Jr7o2yQYUluTJTvXDAD+vj+5ImCPfksbZKx/QVjg=) 6: 8Bdx7ml-IxOR8zep5zZoNkBwGG8.roa (hash: u443uH+UdC2uIR+H4JhpeF7cT/3AsKFTCneOg33HQiA=) 7: ADGW21X--XpG2WBIYj5kIM1Z0-g.roa (hash: 9A8sa2id1+8ByNAMewXe7FMcF817DiqS5V9Qri3bdTE=) 8: BScWdljv0AQRTZyIvglOZ0oFBE0.roa (hash: S79FUTXfJV4hESBGmFYG1R6KYPNaNufbRNEZRwYtCR0=) 9: BjGl9Q72g_Ec259If-Jk56BpizQ.roa (hash: ZmMAA1yu7c6D1XkjZod31MG9U+mujHQhvFcz7QsWW3s=) 10: HT9n5XGxiSRGbixWv-3kz0mWWh4.roa (hash: iHpx3TCWPvIoST4OBGoxr/waO+FYhNZeiOZuEYotXaU=) 11: JW8AyJFJPkQ1ZGONgpNYjy_UapU.roa (hash: 7j/1BSk7JznLZDNSRYDx/seCvE0WvECGanSxETBdFRU=) 12: Jo9_8piUxg2wee4-7hJARk5rotE.roa (hash: vqLLjwPcKVEzxJ3q8XfOQ/ryqpCfo/jKRQDYOnt6bJ4=) 13: KvaEQEmYbbYuHslL-MGtAyo-m2o.roa (hash: X5W6uO0llg8M0/nBFAkOWtE1oQ1OqXNWwnS/1SvBYmU=) 14: LMXjBxSACWe23B5KJVgWjys-RW4.roa (hash: bXK/65j0IbvpFBLJOgM7eXPZPRVnlnzA2N/1RiBf40M=) 15: RSdOaSCVA6ogR36fNmSEfGUHdAQ.roa (hash: IUUzQDet8SkqHV+8ZTZJqpqrDR0834YedORjDV1jlUQ=) 16: RjTJ2EaIZfE051tXU0vuScbwBZk.roa (hash: TowX0WWdHApvFSISjmRiH2FsG9LnVvVrELSSI98m3So=) 17: S41Cd1AR9Z2hLvzGr_WeJ_4qMlU.roa (hash: GjF5x01fdvJu7nYuxxfVRo6MwcjIthDWhsqgii6EbWo=) 18: Yed44AUAbqpY6pzy3aMkteNGQ_g.roa (hash: FZrMifpRX5lyJO47EzwgH+UZbzIMubq2K2YsFTZ5WZI=) 19: _8ZQWuUaGZ9feBTbscjwZbx48pM.roa (hash: TNfC23AEZS88V+zreqHVoePX0RM2CaFufz271/b9FGE=) 20: a50NC_KbZ3PAjC1mndgRcsuXyn8.roa (hash: s97CymR7q1YMF5NI8Qg8aTQzotgVHDsGx5ZdFa/dmDM=) 21: b4Tkc4pw6jnAjO8hBDKuOZ7H6RU.crl (hash: Nx7dO8XHeQbOt1w4xThkcUBtB9rS8H0d1ZmerpM5YD4=) 22: b87Ytvc_OnLAU1-AiNzrR9Ndx_A.roa (hash: V6H++cmx7ABhwsJs47K6MKjpAOnt/75CprhxJ6Gbmq0=) 23: bhQC1zmugCUygVdsESALM-lPxWs.roa (hash: je9TYnAZ6tB4EzwBybgxJXYtbsShxgoopSrP7paJTb0=) 24: c1sgK9zuoOxh6sun4HtvyHOmEJI.roa (hash: 7A9r5WGQuJQjFpmB8y8JqZJj3l8SSyjq29NCM8V6rMw=) 25: cKm65Eb_WOsg0rJgahrGEn-QzNM.roa (hash: pkezS3MrD2s+itmukvNwqj5ekac2E5fRWqLx+Gd03qs=) 26: cbttRTAQtZsHiLMa9aVnpoXBbRM.roa (hash: jWR2BjglYoR0DxuI3Xja/PASrPrmIYFaaoTINLM/F0k=) 27: hcWCxsNXJ9yg5Hoze1tY7q8fcf0.roa (hash: Cm/pymKAKLUiskldZpXb8kvJL0aycJOlWqVALOBQDjg=) 28: kKtRQezG1rMEyMQvP0RRWITiDNY.roa (hash: kg46EVpkE4+/VNPdECgsYCTszii5SSynRjie+wFP6H8=) 29: l5eLjRRQiofbgCfgGWC1ESLA0cI.roa (hash: A6wsuiAvc2IMJwsxkxrsjHGVGqfe958bhgt4EvG4y/o=) 30: lTt6-BquGF5yr17soQVU1ae3Nl4.roa (hash: cbpOu/9li7hUD3//tcAhamYiInAc+XJrVakWtx1CJTw=) 31: oyOwytjNRcSSmC0Uz56t5B0Pn0U.roa (hash: bjJY96goKiZV3xFO6+9vadLGgV/G2i2Ywu0z1Lu4FeE=) 32: pKgW_epUKKqINQVkGFPfKQN_JME.roa (hash: MpYnxhEKRzbjZbG7ScaYIGMVo8jyEDa8wL6U3lmWFGs=) 33: uBiCjzsr4xU25o2Q9uEI8pAvGi0.roa (hash: ndWd7SzVAqTlN/7xiWhTaXhcDTar2hjRQoFL1p1qfwY=) 34: uaFeOb3ZlsDhBvdC5DMfN4a2b_I.roa (hash: C+Q/JJpWz+OpRjzqLkpJWwNsijdGi5P+0vA5yzfq5BA=) 35: zMycwWf9Tpp5xSB6-C5UFRiyMQU.roa (hash: oLzSeqmsbJ/B++9sA71n/u3LkcCkqvS26sSAP1tYoR0=) Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/36/ddf8b3-1c08-495c-8ddf-fae5dbed3b1b/1/b4Tkc4pw6jnAjO8hBDKuOZ7H6RU.crl rsync://rpki.ripe.net/repository/DEFAULT/36/ddf8b3-1c08-495c-8ddf-fae5dbed3b1b/1/b4Tkc4pw6jnAjO8hBDKuOZ7H6RU.mft rsync://rpki.ripe.net/repository/DEFAULT/b4Tkc4pw6jnAjO8hBDKuOZ7H6RU.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Mon 21 Jul 2025 07:01:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:98:26:a2:cd:5a:4f:63:b4:5b:24:20:1d:85:c9:1e:5c:ea Signature Algorithm: sha256WithRSAEncryption Issuer: CN=6f84e4738a70ea39c08cef210432ae399ec7e915 Validity Not Before: Jul 20 07:01:00 2025 GMT Not After : Jul 21 07:01:00 2025 GMT Subject: CN=d207de74fa310b92859b3f5b86232503355a7f9a Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:b7:38:08:ef:b4:36:0b:37:89:80:d3:af:b7:dd: bc:d4:b9:bb:4c:cc:dd:f6:67:75:25:3a:d6:8e:ad: 46:b6:f5:ed:a7:87:9b:4e:98:c4:7c:d6:2b:78:fe: 40:ed:b1:8f:0a:22:c7:16:19:2c:29:7f:4d:c2:0e: 73:35:17:5f:70:14:7a:36:ab:ef:c4:6a:e2:37:78: 5b:50:7b:c2:62:07:a5:d5:4e:94:a7:4b:b9:0b:68: b2:43:c2:8e:ce:3d:ea:4b:5b:3d:06:0d:59:26:d5: 44:ef:c3:49:9f:a0:9a:82:d2:e9:1a:9f:d4:17:d2: 4d:9c:93:4b:82:92:d6:97:3a:72:c4:77:cd:ac:3d: ab:b3:b1:38:05:2c:30:2c:92:3c:2f:8a:e6:b8:71: 2f:6b:c9:40:f1:de:39:ba:12:5a:ea:a4:01:13:f1: 2d:09:1a:0b:b2:7d:7b:5f:4b:92:76:69:fa:f2:9d: ea:09:21:33:92:6a:63:87:e0:61:6e:b2:64:d3:24: 51:5b:05:fb:08:e9:ea:d5:f6:91:89:f7:2a:7e:c0: 08:c2:a7:38:bd:15:ec:61:06:7f:d0:fb:33:d7:9e: fb:ec:21:62:00:ad:27:f9:18:45:d3:52:71:4f:98: 1d:b1:53:0d:3f:8d:26:06:6c:7f:7d:33:ef:86:57: 9e:17 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: D2:07:DE:74:FA:31:0B:92:85:9B:3F:5B:86:23:25:03:35:5A:7F:9A X509v3 Authority Key Identifier: keyid:6F:84:E4:73:8A:70:EA:39:C0:8C:EF:21:04:32:AE:39:9E:C7:E9:15 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/b4Tkc4pw6jnAjO8hBDKuOZ7H6RU.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/36/ddf8b3-1c08-495c-8ddf-fae5dbed3b1b/1/b4Tkc4pw6jnAjO8hBDKuOZ7H6RU.mft X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/36/ddf8b3-1c08-495c-8ddf-fae5dbed3b1b/1/b4Tkc4pw6jnAjO8hBDKuOZ7H6RU.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 08:1d:ee:cc:77:2d:5a:fa:49:3e:bc:ec:03:c0:83:e7:79:63: 66:dc:1e:b7:3b:5f:cd:fa:bd:47:60:45:fd:87:96:ef:72:2d: 78:a3:b8:ac:88:e6:64:4d:5d:74:1c:3d:c3:cd:25:20:d8:cd: 94:91:7c:8a:ef:16:2f:86:cf:db:e4:c4:13:33:a5:e2:fc:9b: 05:0c:52:f9:33:46:04:71:ad:f4:5d:c7:ea:4a:ee:cb:12:b3: d0:87:c8:6b:0c:c6:22:b9:1d:eb:5b:3c:94:a6:ef:e6:88:df: 55:8f:54:8d:8d:5b:2a:51:a6:5d:ce:c8:60:1c:5b:73:03:1a: a5:bc:29:4a:7d:6d:3a:8f:da:b6:e9:ef:aa:cc:8e:3e:a7:e8: 5d:a6:ea:63:81:e6:1f:c3:42:df:b2:13:25:2a:f9:02:e4:20: 8a:90:70:ef:b0:d5:4d:4f:9e:cf:72:f9:ed:a0:0c:12:55:37: 09:99:37:8a:78:a8:87:96:fe:f3:cf:9c:0d:b9:a1:4a:e0:e2: 5a:0a:fe:81:86:5a:92:1c:2a:d8:0e:59:bd:d1:24:2a:11:57: 31:84:56:4b:6f:8a:ba:69:ae:fd:f1:43:4e:b4:d0:90:e7:2c: f0:70:3a:dd:33:30:5d:a5:aa:39:85:1f:b7:b2:07:09:52:28: cc:67:c1:c4 -----BEGIN CERTIFICATE----- MIIFFjCCA/6gAwIBAgISAZgmos1aT2O0WyQgHYXJHlzqMA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKDZmODRlNDczOGE3MGVhMzljMDhjZWYyMTA0MzJhZTM5OWVj N2U5MTUwHhcNMjUwNzIwMDcwMTAwWhcNMjUwNzIxMDcwMTAwWjAzMTEwLwYDVQQD EyhkMjA3ZGU3NGZhMzEwYjkyODU5YjNmNWI4NjIzMjUwMzM1NWE3ZjlhMIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAtzgI77Q2CzeJgNOvt9281Lm7TMzd 9md1JTrWjq1GtvXtp4ebTpjEfNYreP5A7bGPCiLHFhksKX9Nwg5zNRdfcBR6Nqvv xGriN3hbUHvCYgel1U6Up0u5C2iyQ8KOzj3qS1s9Bg1ZJtVE78NJn6CagtLpGp/U F9JNnJNLgpLWlzpyxHfNrD2rs7E4BSwwLJI8L4rmuHEva8lA8d45uhJa6qQBE/Et CRoLsn17X0uSdmn68p3qCSEzkmpjh+BhbrJk0yRRWwX7COnq1faRifcqfsAIwqc4 vRXsYQZ/0Psz15777CFiAK0n+RhF01JxT5gdsVMNP40mBmx/fTPvhleeFwIDAQAB o4ICIjCCAh4wHQYDVR0OBBYEFNIH3nT6MQuShZs/W4YjJQM1Wn+aMB8GA1UdIwQY MBaAFG+E5HOKcOo5wIzvIQQyrjmex+kVMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvYjRUa2M0cHc2am5Bak84aEJES3VPWjdINlJVLmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC8zNi9kZGY4YjMtMWMwOC00OTVjLThkZGYt ZmFlNWRiZWQzYjFiLzEvYjRUa2M0cHc2am5Bak84aEJES3VPWjdINlJVLm1mdDCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC8zNi9kZGY4YjMtMWMwOC00OTVjLThkZGYtZmFlNWRiZWQzYjFi LzEvYjRUa2M0cHc2am5Bak84aEJES3VPWjdINlJVLmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEACB3uzHct WvpJPrzsA8CD53ljZtwetztfzfq9R2BF/YeW73IteKO4rIjmZE1ddBw9w80lINjN lJF8iu8WL4bP2+TEEzOl4vybBQxS+TNGBHGt9F3H6kruyxKz0IfIawzGIrkd61s8 lKbv5ojfVY9UjY1bKlGmXc7IYBxbcwMapbwpSn1tOo/atunvqsyOPqfoXabqY4Hm H8NC37ITJSr5AuQgipBw77DVTU+ez3L57aAMElU3CZk3inioh5b+88+cDbmhSuDi Wgr+gYZakhwq2A5ZvdEkKhFXMYRWS2+Kummu/fFDTrTQkOcs8HA63TMwXaWqOYUf t7IHCVIozGfBxA== -----END CERTIFICATE-----Generated at Sun Jul 20 16:20:34 2025 by rpki-client