$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/40/38fc33-06c1-4006-9e23-f74d9518576c/1/J6OeR5TDRhLn8iVpsaaoFxAmCuU.mft File: J6OeR5TDRhLn8iVpsaaoFxAmCuU.mft (raw, json) Hash identifier: zvIu+7qZrcrRxRw0TQEo4QREWrQSN5qt96LGmo+MFIM= Subject key identifier: 2A:A9:CB:20:03:28:B9:EA:52:74:CA:2D:0B:40:82:90:35:90:F8:44 Authority key identifier: 27:A3:9E:47:94:C3:46:12:E7:F2:25:69:B1:A6:A8:17:10:26:0A:E5 Certificate issuer: /CN=27a39e4794c34612e7f22569b1a6a81710260ae5 Certificate serial: 0198477723959B0854FC10B0314E144E548C Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/J6OeR5TDRhLn8iVpsaaoFxAmCuU.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/40/38fc33-06c1-4006-9e23-f74d9518576c/1/J6OeR5TDRhLn8iVpsaaoFxAmCuU.mft Manifest number: 1714 Signing time: Sat 26 Jul 2025 16:00:46 +0000 Manifest this update: Sat 26 Jul 2025 16:00:46 +0000 Manifest next update: Sun 27 Jul 2025 16:00:46 +0000 Files and hashes: 1: 1eUzZitDZ013U4KoMXhLsZt-Ouw.roa (hash: onauJHUcj3/Gk42IQtCwNxPA1GwGcTPdZF4tzNU5Cic=) 2: 3eUT08I9fAP3Rh0UE9FbfxsG1bc.roa (hash: akr8fvq3b1MRJAZxmdxssOux5X/sXZanMRkztgAfzHg=) 3: 5Iferc6Kf7i45AUyO-E8UN7tGJQ.roa (hash: PF/OXmqK94ZNXt4Qav+wUWED52asr16psDBYkskx91A=) 4: 6kvBNM7QxzqNFUQY6UJAUSlEXG0.roa (hash: VzytZI3MZIGD76NTvtSVMrgwhYYU4KZfB6J50PMrkLQ=) 5: 7vYSmlk2u5zvZg_3ArmbDEY_sNU.roa (hash: Jq4Qzcnido1Bc85YICom1I+PBuMze7LAU9Wcp1OqdNY=) 6: 9CecUJWAhyUbD-JEeW3t7Q_bT3I.roa (hash: Ql1G0HHXMA7dM1rPg1JGzT0qhMxhyvoFIN+xbPIAbQE=) 7: 9JYLRbAyBiZx1C4OYbnwWphquZ4.roa (hash: IXG5gmo6XuX7z6I59d8WQFp9CPf9KqOZ7R0eb0+uGzE=) 8: 9TOpmOFT85FoIQt7VW00tnNSDyc.roa (hash: SCLGJPJrvLPHM3t4jGt50TpAdXlieT/PBKVM3GuTOz8=) 9: D9kReuUfnqK0y7nk-I74tRESYYU.roa (hash: onEFa0+ErZ1aSjQk8E05b4+s3hg4ZO35purvDEgyF2w=) 10: F4LyibxUyKDWiTWokbR8Nu9dwFg.roa (hash: ls3OOX8CUo2Fe8GCCqRqasL5CwSJNwzKwm1rIE9s2yA=) 11: GAOT9zYxLw8oZDIwUIGywpBcjB4.roa (hash: hUanzkdOKXITITs1YgDbKjXXABKxTMzchE87QAQ0bYE=) 12: GS2XVRqZpeDdiCx3T0QMEG4okfQ.roa (hash: c+r+fHHe/APmANIkQRbs62jauEl4PzEDrWx2I+B9cis=) 13: GeTD2FnRC1JSiACi7Zc6xwpLCFA.roa (hash: VeVaUKTcdEDW2fRzvPABtIyMQZZZ9rNn6xJNVY7+2r0=) 14: GvXRVawHzzCi7pgsF39SYGKOL1c.roa (hash: IOKiIV1qdEfGlMmS/WoO8wBdPAZPaBqF8Ff8rokjp5c=) 15: J6OeR5TDRhLn8iVpsaaoFxAmCuU.crl (hash: QkvrkA9blP+7V+n7RgTzxdgOkuf/xbu8RTUWmrYIUZ0=) 16: KKuykAsgSlfU2_ah3gPApjpa_bY.roa (hash: lDZxYhBz6e/2Gw3mx1uSU5ra67aA2s9x9ASpcPzvb6k=) 17: Md7YZ-d1Y1XheM9ry7B9sgz4YA4.roa (hash: Ih78eioWDLIJh2FdRhV0xY7L6/wFxYgEtTJFDLMZDFU=) 18: NHulc4Xr5UTDZcaKywtBQBKjze4.roa (hash: XJgO5TSUWtITNdkmTiFR6yAsuz/yfG1PVcms5HB/rmg=) 19: SI6JcMkAdXeahj7NGt32DCzk_N4.roa (hash: XmnPzPSkO2n35usGEIRF1Qz4ke4WyZ//abuJ7KDgxxQ=) 20: SbU6Wu3VYL_xJUdthJTMBSanghY.roa (hash: 0SfBRTqaFb3y7K9XYOO4Yq/M+ASPHTLlHQOS0a7mCG8=) 21: TthjPRR5wXxsEh-6VCqYJXzgbKE.roa (hash: qNNifR39ahZ3yfEWA6+o5w3ku4jFU0k6pJdFlQXCAdc=) 22: Vbp_L2hdFxTdfzdKLSX_zbLl_mk.roa (hash: 4m7gesb3gkf55hVL1cOVKzNKguAUApHfmA6sJrKWwxA=) 23: W7QzaER1vR-s3Pj4KyrMCvE0NVo.roa (hash: ZgPuCeX9vl95FC5nGpWcD3MQhmHO62QrHuHCGcZ3dQ0=) 24: WRheQN0amA9-_VCQME57u4bK-ks.roa (hash: blzydWxPl2ahI62ziLjMaHt088mTMKIJq9ZUkNAzqD0=) 25: YZm_xLtmsH08Bas2THq1RxLz81g.roa (hash: qHMBbTPBGSfjxU8aJsAB/XiYXwHHASUN+b5Hn+g/xts=) 26: _mea20OFuYFsi2iTbTW6kjzayQ8.roa (hash: 15vxvAMXVj8o1NZa+nAjbC1U25nrqGTHLYeckcnvDkE=) 27: bjGyoAnqbJlTY8yxoW8Vw9QTKXY.roa (hash: KkR9uPlQKsAZ2pDuHous5MwgFIvneEVZmAg7v37TsdA=) 28: ghdkEXOYieGGhOcxGRo9LY6w5LY.roa (hash: 4cdu+XE7YUzkOZIE2VvcRY1Ie1MDvn7w+dAFcHrze/w=) 29: p45g5foq91zKggpm9xOru9V5Ta8.roa (hash: aescxVeG95+vLWeERAq4yBUOFPEiqWqdLL4rR3/2YL0=) 30: rGkstG6DmG4B7cdYh3EO2voHOpA.roa (hash: SmsIhLLPmjYgcUx7ha4qQmd2o5KZk8x1FvvtQ8LvAQs=) 31: sPN4MQOyS-s_riyCy93fzpeT-34.roa (hash: yENIXfYPwcHSIXCDZ9TP6nlOKTHnb7yHcks9QDKcNxs=) 32: sbm57hbO9DMhZVoyKG3SdA-duFk.roa (hash: 6anRwGUA22JIE2yI5cX9sKlVcBQWgTcUOS+5xTEbTcw=) 33: uFxKkTJ2FS-YadWkkiFDxhg46zw.roa (hash: CKurhe6gxcartqAcpNhLJ0w752vEmApcJaVpSiuG5Lk=) Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/40/38fc33-06c1-4006-9e23-f74d9518576c/1/J6OeR5TDRhLn8iVpsaaoFxAmCuU.crl rsync://rpki.ripe.net/repository/DEFAULT/40/38fc33-06c1-4006-9e23-f74d9518576c/1/J6OeR5TDRhLn8iVpsaaoFxAmCuU.mft rsync://rpki.ripe.net/repository/DEFAULT/J6OeR5TDRhLn8iVpsaaoFxAmCuU.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Sun 27 Jul 2025 11:00:05 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:98:47:77:23:95:9b:08:54:fc:10:b0:31:4e:14:4e:54:8c Signature Algorithm: sha256WithRSAEncryption Issuer: CN=27a39e4794c34612e7f22569b1a6a81710260ae5 Validity Not Before: Jul 26 16:00:46 2025 GMT Not After : Jul 27 16:00:46 2025 GMT Subject: CN=2aa9cb200328b9ea5274ca2d0b4082903590f844 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:bb:33:3f:f4:e0:b7:c2:b8:4b:d2:4b:26:0e:fb: 5d:f4:df:b4:34:53:c9:ae:a0:b7:32:67:72:9d:f1: e7:fb:53:21:21:c5:ce:0a:24:ec:76:02:a3:c6:2e: f0:47:68:96:c0:7b:78:3d:e9:5d:c7:98:97:50:6a: 14:43:29:fc:b0:41:62:20:1d:d8:49:c7:bc:47:37: 4b:1c:c4:44:82:a4:de:93:55:9e:70:08:11:65:e3: 6d:9c:39:7d:67:e1:f6:31:11:9f:32:0d:54:9a:f9: 58:4d:43:e0:0d:83:b0:47:b7:47:22:be:c3:81:2d: f9:63:be:05:55:24:a2:3a:8a:15:21:30:7c:34:4d: 91:ed:a6:5a:df:58:06:19:cd:1f:cd:df:4b:e5:c7: 2d:cf:29:1c:75:b4:72:00:78:1e:b0:65:9c:cc:7d: b4:89:2b:de:07:40:2d:fd:74:f1:cf:11:d0:99:bc: c4:cb:97:fe:a8:d7:b0:0f:91:19:fb:f2:01:1b:bb: 9a:df:6e:49:79:a4:f4:d8:5b:0f:a6:ad:eb:ca:7b: 49:b2:72:bd:c4:bb:f8:80:a0:19:f5:57:8e:c1:dd: 7f:c0:f3:31:8a:7f:ca:83:06:97:e1:49:fe:32:07: 90:b4:93:03:1f:e4:24:ac:ba:c5:d9:75:4f:83:e8: fd:db Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 2A:A9:CB:20:03:28:B9:EA:52:74:CA:2D:0B:40:82:90:35:90:F8:44 X509v3 Authority Key Identifier: keyid:27:A3:9E:47:94:C3:46:12:E7:F2:25:69:B1:A6:A8:17:10:26:0A:E5 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/J6OeR5TDRhLn8iVpsaaoFxAmCuU.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/40/38fc33-06c1-4006-9e23-f74d9518576c/1/J6OeR5TDRhLn8iVpsaaoFxAmCuU.mft X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/40/38fc33-06c1-4006-9e23-f74d9518576c/1/J6OeR5TDRhLn8iVpsaaoFxAmCuU.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption a7:7d:9e:c8:53:b6:58:1d:bf:4f:32:1f:15:28:ab:d2:f7:cd: 35:93:cb:88:86:17:41:70:0b:98:ae:c9:ea:08:db:bc:25:a1: 54:54:b9:2c:ee:5f:e7:6f:5f:b3:c6:7e:e1:55:8a:be:17:be: ed:1b:37:0d:dd:a4:36:55:06:03:6c:ae:e9:10:0f:69:ba:d8: 01:31:fb:d7:16:b8:db:4f:5f:96:ce:b1:77:f2:1f:54:c2:10: ea:da:32:15:a2:21:02:d8:7e:5d:c4:02:9f:60:48:57:17:8b: e9:44:b8:12:74:b2:d7:07:b7:31:a9:5b:c9:01:ce:20:07:dc: 79:5c:71:ad:75:8f:4d:26:f0:92:a8:23:5c:95:fa:1a:56:6d: bc:7e:c3:0e:59:9a:ed:9b:72:8f:a7:f3:8f:52:03:ac:09:41: 24:e8:5c:9c:2a:d4:1f:aa:b9:e2:fd:18:05:3c:e8:75:2c:78: 07:11:de:ac:0f:8e:a9:e4:f8:5e:93:7e:f7:13:e0:6a:da:98: a7:47:bb:91:98:c0:8f:3c:ce:56:44:d6:e3:6b:dc:7f:fe:f0: ab:cb:9c:3a:9f:59:7b:39:6d:3a:b6:af:20:15:bd:45:4a:38: 13:79:e0:76:01:61:2a:91:9e:76:6c:a4:53:99:48:43:e3:0d: 1e:28:bf:69 -----BEGIN CERTIFICATE----- MIIFFjCCA/6gAwIBAgISAZhHdyOVmwhU/BCwMU4UTlSMMA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKDI3YTM5ZTQ3OTRjMzQ2MTJlN2YyMjU2OWIxYTZhODE3MTAy NjBhZTUwHhcNMjUwNzI2MTYwMDQ2WhcNMjUwNzI3MTYwMDQ2WjAzMTEwLwYDVQQD EygyYWE5Y2IyMDAzMjhiOWVhNTI3NGNhMmQwYjQwODI5MDM1OTBmODQ0MIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAuzM/9OC3wrhL0ksmDvtd9N+0NFPJ rqC3MmdynfHn+1MhIcXOCiTsdgKjxi7wR2iWwHt4Peldx5iXUGoUQyn8sEFiIB3Y Sce8RzdLHMREgqTek1WecAgRZeNtnDl9Z+H2MRGfMg1UmvlYTUPgDYOwR7dHIr7D gS35Y74FVSSiOooVITB8NE2R7aZa31gGGc0fzd9L5cctzykcdbRyAHgesGWczH20 iSveB0At/XTxzxHQmbzEy5f+qNewD5EZ+/IBG7ua325JeaT02FsPpq3ryntJsnK9 xLv4gKAZ9VeOwd1/wPMxin/KgwaX4Un+MgeQtJMDH+QkrLrF2XVPg+j92wIDAQAB o4ICIjCCAh4wHQYDVR0OBBYEFCqpyyADKLnqUnTKLQtAgpA1kPhEMB8GA1UdIwQY MBaAFCejnkeUw0YS5/IlabGmqBcQJgrlMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvSjZPZVI1VERSaExuOGlWcHNhYW9GeEFtQ3VVLmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC80MC8zOGZjMzMtMDZjMS00MDA2LTllMjMt Zjc0ZDk1MTg1NzZjLzEvSjZPZVI1VERSaExuOGlWcHNhYW9GeEFtQ3VVLm1mdDCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC80MC8zOGZjMzMtMDZjMS00MDA2LTllMjMtZjc0ZDk1MTg1NzZj LzEvSjZPZVI1VERSaExuOGlWcHNhYW9GeEFtQ3VVLmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAp32eyFO2 WB2/TzIfFSir0vfNNZPLiIYXQXALmK7J6gjbvCWhVFS5LO5f529fs8Z+4VWKvhe+ 7Rs3Dd2kNlUGA2yu6RAPabrYATH71xa4209fls6xd/IfVMIQ6toyFaIhAth+XcQC n2BIVxeL6US4EnSy1we3MalbyQHOIAfceVxxrXWPTSbwkqgjXJX6GlZtvH7DDlma 7Ztyj6fzj1IDrAlBJOhcnCrUH6q54v0YBTzodSx4BxHerA+OqeT4XpN+9xPgatqY p0e7kZjAjzzOVkTW42vcf/7wq8ucOp9ZezltOravIBW9RUo4E3ngdgFhKpGedmyk U5lIQ+MNHii/aQ== -----END CERTIFICATE-----Generated at Sat Jul 26 20:34:42 2025 by rpki-client