$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/6a/a8ebe4-d0b3-4e7d-af25-0468042486dc/1/8N2BqDPZsEPH_9Y1pZh_U2lxGA0.mft File: 8N2BqDPZsEPH_9Y1pZh_U2lxGA0.mft (raw, json) Hash identifier: 0sR6cOjZoLdmq+jEnbL+2fWx3LbRtwT0E/IW9Us5iQM= Subject key identifier: 25:E7:EC:8D:55:88:C1:99:DF:C9:FB:97:DA:18:F5:17:CA:0B:08:C7 Authority key identifier: F0:DD:81:A8:33:D9:B0:43:C7:FF:D6:35:A5:98:7F:53:69:71:18:0D Certificate issuer: /CN=f0dd81a833d9b043c7ffd635a5987f536971180d Certificate serial: 019825FE238D44E2DBBD6A360AC6F6FC1AD6 Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/8N2BqDPZsEPH_9Y1pZh_U2lxGA0.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/6a/a8ebe4-d0b3-4e7d-af25-0468042486dc/1/8N2BqDPZsEPH_9Y1pZh_U2lxGA0.mft Manifest number: 16D7 Signing time: Sun 20 Jul 2025 04:01:08 +0000 Manifest this update: Sun 20 Jul 2025 04:01:08 +0000 Manifest next update: Mon 21 Jul 2025 04:01:08 +0000 Files and hashes: 1: 00HzaSSvDvRjERwmfvdjpZVhsNE.roa (hash: +xQ6mtoKyYWJtlJmpUovxKbX7u1JMLk6/Bxa96yfCZU=) 2: 1-pkoPKMCZ9qOJcUpbg4SD3YM82I.roa (hash: fr0BGqmmgkymb/Io2tWlqm6/TRfrQYD5zH4bv2liAY4=) 3: 60lT6E7Hw-SybLa6dCTef8Owqso.roa (hash: kxBaSXQQFFLnQ/jWfDvLC1N4uboGoYMJnKAExPscFWo=) 4: 8N2BqDPZsEPH_9Y1pZh_U2lxGA0.crl (hash: bn0DsFc8OSNsK3+SE3SjpnNJoRJP0LhR5RGr6Qc5fW4=) 5: AkeW0dNO6HwoGorE-RVkvkd5lYI.roa (hash: cFEnsrh1nsOvG/GU22O2yZ4HJtAwycOwC2PtRPjLqBI=) 6: B1142MZmoWC79cU7wc6SpTqGiyI.roa (hash: ho8/5G5V6c0C9LD1lAUutQeKnpgOVsvxXS6BHwKivQY=) 7: G9iD8U4QCioeA79cHr2xVSAWeEI.roa (hash: isof3/aO68rNSeHuTbxaBE/zI2rUwZRzXlA4N/t2RR8=) 8: H8YJLWnpWipMvgIr9ji5smf4Tfk.roa (hash: M3PeYVw02zCqgGsGWVEqY9NDqtJ4pOhlFV2aXiG2+JY=) 9: KbXum3tGxYpXO3QIbsz4v0Gc9YE.roa (hash: Xdbf5vp7RPXfCgiOaz1rHhCCOGhSA6vAYCYI/x90YU0=) 10: Mdp9Kv-Vu7KoI3CAPKr9JqJyQF0.roa (hash: SVNqMzugCbLVwMP8haqTfMrXYGbHl90Ct7rAkwp4GGU=) 11: Nx6plveuESXQK8zHN0saWCNgZtg.roa (hash: QL/uKZ/nr+28xsvZGhgIMqZgRaxPkWfGMmZV7z027VM=) 12: O9cN0ZR3uRs9JZLPjZ_apekO_1o.roa (hash: VyuL/Lcqim34ks+x+bFHqTVYiETL9VCXnibosD6RzqE=) 13: PXz0xECU6TjhYqxiIXtEO5Wt6wc.roa (hash: IQ6HG99adaSd4g8dYN9Tq5G654BtgGfHZKvbtQePiBg=) 14: QUqReStf6TEFnsU1tSixUGPYTuI.roa (hash: K60fCDp86LLBo6obO2VN9uWaTquDob132b4Q/cH5WYU=) 15: RRXv77ic8-YnL2L0BrEWnnilces.roa (hash: oObWYvqL50IXeyb91XFkxYV2GVpxyr296NJwG9LKFJk=) 16: S5aHdm30TryFtG2jDVy3wkSOz2Q.roa (hash: gGROgcge0wvbKabdkDSLw/YtICixKaiQd0Hk++1c5Is=) 17: TW2quqEtMmBMtjFETxrg2LVk9Oo.roa (hash: 63aKh4PjYXwflLNSYPKfmuOdFvd6LVwJFipNOxlRjJI=) 18: WZKLhLcb_14f65w-Gxi0P7Y4PGI.roa (hash: rd8mwsH5vvMfna/I2W08kC0v/oG9b9ll9tJk/Yl4I2o=) 19: XLs5m7yFpYbQixlyQEPtxV_7mOs.roa (hash: Fghw0ZM8qJSM1Rk38Og5x502OtV7xRwTHNOwSJX4CJo=) 20: YJCi9AWh99xuK45xoYGOeQ7CnmE.roa (hash: Ti9BtXIsKFet++HwcTL4uva9A9w4W22YtG5seAitsY8=) 21: ZasgQLj553uShFx9qygvcO1idVY.roa (hash: xV4yVjOGaxnmU8uKE6oE/eSTkUdEZQ/Ub4WuQWWJos0=) 22: _NcltatYeskVsJ2GmWYQEOtBuzU.roa (hash: EFUSsiFNwzbPc+B6nty0bVOEIqERfMB5igPoEOdQ1Ow=) 23: arMtKMIP71-vKvUAgp4clBsMWok.roa (hash: tYZYrtz6Qwf6eAJhxSX8JcByWBMLnLzyGmAuVNAgGeU=) 24: cmkgGNwAjlwl-nXBDnQsuZkaQjk.roa (hash: GH4mAasSrVefCL06doAPOCgwr9kOuVQg7pmr2jmaWv0=) 25: pAaBglS_ph_lomtz_pi-YWsNz74.roa (hash: +DNf/G42yq93h12+GOLlNd9IxjCcQ12CMJ+kjCCl/Cw=) 26: qq4fM1ObQGyaLMmavbeC_4huAhs.roa (hash: uj3kwNGwI3ye+3/FlFrfR0c/PIhlj04gSoV4ikzeXw8=) 27: sJ8MWzOJrRSDCEy5539zFEW54Fg.roa (hash: SrkAclwJ6pGZe3QnLXmTkQWct0fK9CqayvHKB5l708k=) 28: tIoiJqn_Zw4bkifEyWUceFVpDXE.roa (hash: +3bSV4N3AQ7/Wh4s2xd9vZBKmvEVCXYmroX/aifAP+8=) Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/6a/a8ebe4-d0b3-4e7d-af25-0468042486dc/1/8N2BqDPZsEPH_9Y1pZh_U2lxGA0.crl rsync://rpki.ripe.net/repository/DEFAULT/6a/a8ebe4-d0b3-4e7d-af25-0468042486dc/1/8N2BqDPZsEPH_9Y1pZh_U2lxGA0.mft rsync://rpki.ripe.net/repository/DEFAULT/8N2BqDPZsEPH_9Y1pZh_U2lxGA0.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Mon 21 Jul 2025 04:00:25 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:98:25:fe:23:8d:44:e2:db:bd:6a:36:0a:c6:f6:fc:1a:d6 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=f0dd81a833d9b043c7ffd635a5987f536971180d Validity Not Before: Jul 20 04:01:08 2025 GMT Not After : Jul 21 04:01:08 2025 GMT Subject: CN=25e7ec8d5588c199dfc9fb97da18f517ca0b08c7 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:c6:ea:13:b0:69:91:ce:bf:02:fd:a6:ff:2d:aa: b4:8e:a0:95:f5:1e:04:ec:b9:f5:b3:9f:df:a8:27: 16:50:0b:81:1a:3a:b1:a0:17:77:29:f2:e0:e3:37: e5:38:f3:f5:99:b4:a6:cf:0a:0f:5a:69:5f:e0:e2: 07:b2:c8:27:f1:cc:1b:4b:78:5b:7b:8d:4e:89:20: 7d:ca:1b:73:c6:29:60:3a:2c:fa:54:ce:34:02:12: af:cc:c8:60:7a:5d:cb:ec:85:02:55:d1:01:09:b8: 57:d2:12:0f:7e:73:13:62:d8:65:68:28:97:bd:91: 91:3f:e5:3e:ed:7d:a5:45:95:06:cf:6f:6a:f2:05: af:62:25:08:4e:fb:dd:06:73:95:e3:38:d7:a4:67: 92:e8:d1:2b:67:c1:42:b1:d6:6b:df:b3:71:60:6b: 89:d1:8c:1e:ea:e2:38:65:1f:fa:44:80:4f:95:9c: 4c:df:21:9d:42:a6:ee:53:a7:b6:2f:8c:74:56:88: 27:5a:52:82:ae:eb:34:56:ac:04:0e:59:bc:e1:47: b5:af:68:a8:ff:99:b0:0d:f9:e6:d1:1b:19:2c:98: bc:28:91:c1:2b:59:f8:e7:1f:b9:87:46:66:4c:ab: 99:dc:48:39:35:70:3f:ae:b5:3b:a3:f5:a1:6b:55: 0b:eb Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 25:E7:EC:8D:55:88:C1:99:DF:C9:FB:97:DA:18:F5:17:CA:0B:08:C7 X509v3 Authority Key Identifier: keyid:F0:DD:81:A8:33:D9:B0:43:C7:FF:D6:35:A5:98:7F:53:69:71:18:0D X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/8N2BqDPZsEPH_9Y1pZh_U2lxGA0.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/6a/a8ebe4-d0b3-4e7d-af25-0468042486dc/1/8N2BqDPZsEPH_9Y1pZh_U2lxGA0.mft X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/6a/a8ebe4-d0b3-4e7d-af25-0468042486dc/1/8N2BqDPZsEPH_9Y1pZh_U2lxGA0.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 25:bf:f9:52:cb:05:bc:ce:4b:61:23:aa:2a:16:b4:65:13:31: 31:81:0e:06:94:79:64:6f:ce:59:51:ff:fc:f6:4d:e8:74:c3: e2:62:e6:15:8a:93:69:2d:3e:42:66:dd:49:8f:5a:84:13:78: 1f:20:91:c8:25:92:cd:68:25:af:3f:41:ac:fc:7b:22:69:b4: 49:fd:2d:2c:8c:68:f0:4e:6f:6c:5b:2c:e6:90:c7:df:28:98: 08:3e:b6:51:e4:ba:35:bc:60:e2:5e:b8:05:6d:7e:a2:b3:14: 60:5b:06:ee:b3:28:01:e8:5e:d3:e6:4c:aa:44:4e:7d:98:7d: b2:7b:38:e7:19:fc:64:46:30:10:f6:77:86:57:71:c5:63:fa: f2:d0:57:4a:7f:93:50:65:78:b2:13:8a:6f:fd:57:dd:74:3a: 23:85:68:bb:fa:06:48:a3:48:a9:67:3a:0d:77:bf:9c:18:41: 4b:23:cf:d6:14:70:f6:4c:4c:6f:6e:de:6e:ca:e7:e0:15:0b: b7:f0:20:44:95:83:95:f3:9b:97:6d:b1:a9:b0:6a:1d:80:d6: 8f:d1:dd:46:8e:5a:3d:66:38:3f:0b:55:af:2f:87:f1:50:60: 3d:9e:58:22:90:97:37:b3:49:85:cb:fd:76:11:8b:ab:19:ab: e2:3f:dd:da -----BEGIN CERTIFICATE----- MIIFFjCCA/6gAwIBAgISAZgl/iONROLbvWo2Csb2/BrWMA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKGYwZGQ4MWE4MzNkOWIwNDNjN2ZmZDYzNWE1OTg3ZjUzNjk3 MTE4MGQwHhcNMjUwNzIwMDQwMTA4WhcNMjUwNzIxMDQwMTA4WjAzMTEwLwYDVQQD EygyNWU3ZWM4ZDU1ODhjMTk5ZGZjOWZiOTdkYTE4ZjUxN2NhMGIwOGM3MIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAxuoTsGmRzr8C/ab/Laq0jqCV9R4E 7Ln1s5/fqCcWUAuBGjqxoBd3KfLg4zflOPP1mbSmzwoPWmlf4OIHssgn8cwbS3hb e41OiSB9yhtzxilgOiz6VM40AhKvzMhgel3L7IUCVdEBCbhX0hIPfnMTYthlaCiX vZGRP+U+7X2lRZUGz29q8gWvYiUITvvdBnOV4zjXpGeS6NErZ8FCsdZr37NxYGuJ 0Ywe6uI4ZR/6RIBPlZxM3yGdQqbuU6e2L4x0VognWlKCrus0VqwEDlm84Ue1r2io /5mwDfnm0RsZLJi8KJHBK1n45x+5h0ZmTKuZ3Eg5NXA/rrU7o/Wha1UL6wIDAQAB o4ICIjCCAh4wHQYDVR0OBBYEFCXn7I1ViMGZ38n7l9oY9RfKCwjHMB8GA1UdIwQY MBaAFPDdgagz2bBDx//WNaWYf1NpcRgNMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvOE4yQnFEUFpzRVBIXzlZMXBaaF9VMmx4R0EwLmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC82YS9hOGViZTQtZDBiMy00ZTdkLWFmMjUt MDQ2ODA0MjQ4NmRjLzEvOE4yQnFEUFpzRVBIXzlZMXBaaF9VMmx4R0EwLm1mdDCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC82YS9hOGViZTQtZDBiMy00ZTdkLWFmMjUtMDQ2ODA0MjQ4NmRj LzEvOE4yQnFEUFpzRVBIXzlZMXBaaF9VMmx4R0EwLmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAJb/5UssF vM5LYSOqKha0ZRMxMYEOBpR5ZG/OWVH//PZN6HTD4mLmFYqTaS0+QmbdSY9ahBN4 HyCRyCWSzWglrz9BrPx7Imm0Sf0tLIxo8E5vbFss5pDH3yiYCD62UeS6Nbxg4l64 BW1+orMUYFsG7rMoAehe0+ZMqkROfZh9sns45xn8ZEYwEPZ3hldxxWP68tBXSn+T UGV4shOKb/1X3XQ6I4Vou/oGSKNIqWc6DXe/nBhBSyPP1hRw9kxMb27ebsrn4BUL t/AgRJWDlfObl22xqbBqHYDWj9HdRo5aPWY4PwtVry+H8VBgPZ5YIpCXN7NJhcv9 dhGLqxmr4j/d2g== -----END CERTIFICATE-----Generated at Sun Jul 20 12:58:41 2025 by rpki-client