$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/90/9d9192-273c-4ca9-b2ba-fa9cb51cd0f1/1/ayM9dVCLToXMz0Q0mny3AxmNHSY.mft File: ayM9dVCLToXMz0Q0mny3AxmNHSY.mft (raw, json) Hash identifier: pvTbVTws/wFoNnlPIusVWTo7N49kXHq3d0tHjRma8IY= Subject key identifier: 02:A9:EE:B4:F8:16:B6:6C:76:D3:E2:E3:A9:06:32:74:9B:7F:E6:EE Authority key identifier: 6B:23:3D:75:50:8B:4E:85:CC:CF:44:34:9A:7C:B7:03:19:8D:1D:26 Certificate issuer: /CN=6b233d75508b4e85cccf44349a7cb703198d1d26 Certificate serial: 019826D967B500540C6DE8673319993C4CAE Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/ayM9dVCLToXMz0Q0mny3AxmNHSY.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/90/9d9192-273c-4ca9-b2ba-fa9cb51cd0f1/1/ayM9dVCLToXMz0Q0mny3AxmNHSY.mft Manifest number: 1356 Signing time: Sun 20 Jul 2025 08:00:38 +0000 Manifest this update: Sun 20 Jul 2025 08:00:38 +0000 Manifest next update: Mon 21 Jul 2025 08:00:38 +0000 Files and hashes: 1: 2cIKXah99bs326V7_K2_ATU1wCc.roa (hash: 8U7vy7F8tH1dtIEl5RJoquiwlVH7Dw2C2urkmS/8Z1s=) 2: 3Q5YOz_BI10ve__t3IetYuqaGUA.roa (hash: ZILL1qGL3E11+bnE750yzGJ+LQfFTIO6h5xfluweBiQ=) 3: AjBp57cbFRBUIwIaXhNlUU4xc9Y.roa (hash: ZV9AX+FvWa4YVP0u/DD5byIthcNtHTveftQNUrL/KbI=) 4: CDcE_vqm19Y_w1U_nUrldF-Ugs0.roa (hash: xI3BVyx2LWN6Xd4vh4ettZDFc5P8efBg+uxBmnTHoxk=) 5: MWVrNJSe74q7kEhW6qS8QXcSrrc.roa (hash: SMPMCny2Jv5HoImrcf2XEmoMCaHU3khczb0z6CCQ9uc=) 6: ONBLhs2q3EPNBcKzjuUXI9NfDXk.roa (hash: 02TEqjTXH1kKdBwPOe/Fj5S0NZ7Hp7pCF4TDcYi4oGk=) 7: ZkxRUMGE9CQRvySfgcJj3kHytZg.roa (hash: UKRx7jBVZPPDl6SgbH7t7Qygyz8pBsSIfl7nu9h+mgg=) 8: aB6sxL1ZlKSQNpa4jL29xIkPi_I.roa (hash: zA0AFONbK9br9fZoJVU4SW6cugn1tuIJBYSB1Nl3/G8=) 9: ayM9dVCLToXMz0Q0mny3AxmNHSY.crl (hash: opft0gGmaIKg4REfpbhVV5cbNJiSiV8rUmzfi2CMVOQ=) 10: fZeNbyH5ujZlgqfP9AgorOMXohA.roa (hash: Dn0aZqCRGKt2adMmUTTsiPmw4Pp+E7zhFHoCHO312UY=) 11: fb3lzsKRuT3DqmRVbbR-BGF4wXU.roa (hash: pxuBhHoXzqbakdVTx6L5TNOxX98HDl41yiAFcXSWT3Q=) 12: hEZZKQJ28Km_5UhH3cpxvYkLLZU.roa (hash: +vaYxbzQEi6M9mf3DyKNxFAOI6eLzddsZf7cVFe2WCE=) 13: hUM0lQ0ODj8Qil7w4D2sZvQVB4w.roa (hash: 8bKnMQhqygeFZmPwESYE+kESImBLAc2qmeTscpnWZ2s=) 14: hZs6PbiV1FHRQvgoNjIWkApb1x4.roa (hash: slbvJPVch+dH2HvE/UBBZulZ2jCavWoY4Ccie6OcAiU=) 15: itqdYmGsrfepmyYSKCd1c5R77js.roa (hash: W2/G8eoM3IFmeLBvMWU5XzC6g/z37f1zNFuZs/37yXE=) 16: lUA4Psv--QayOhT_SsZZvDZxilM.roa (hash: YGf2R2IX409XBgVvc7ca6dAQRj+o7jLte4H3tVm4ZpY=) 17: nPdGgeG-9wHMZBn1oHFY2TrIyd4.roa (hash: ixNDdEbsReVkHb4nZt1NyyQNAMSP0+ayTT4IyJE76/4=) 18: np9eNjgoLA0jYeMYnFqjApZ6K1s.roa (hash: rFv0HF9ou+nHz2ggvRQ0cKKf/+Wgihlq0XkCRw5GtV4=) 19: u5pfngYD-0MqXeQ11DbdTP8EwmU.roa (hash: xtu5m2bHnGuokc2D/B489MeQCUa3PeUYpTlbCBj8908=) Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/90/9d9192-273c-4ca9-b2ba-fa9cb51cd0f1/1/ayM9dVCLToXMz0Q0mny3AxmNHSY.crl rsync://rpki.ripe.net/repository/DEFAULT/90/9d9192-273c-4ca9-b2ba-fa9cb51cd0f1/1/ayM9dVCLToXMz0Q0mny3AxmNHSY.mft rsync://rpki.ripe.net/repository/DEFAULT/ayM9dVCLToXMz0Q0mny3AxmNHSY.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Mon 21 Jul 2025 08:00:38 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:98:26:d9:67:b5:00:54:0c:6d:e8:67:33:19:99:3c:4c:ae Signature Algorithm: sha256WithRSAEncryption Issuer: CN=6b233d75508b4e85cccf44349a7cb703198d1d26 Validity Not Before: Jul 20 08:00:38 2025 GMT Not After : Jul 21 08:00:38 2025 GMT Subject: CN=02a9eeb4f816b66c76d3e2e3a90632749b7fe6ee Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:9f:56:ad:25:4e:4d:01:8c:6e:0d:a3:31:21:17: dd:50:c9:55:63:1d:45:95:d2:cb:39:70:ae:60:c3: ee:e3:66:ed:33:2c:94:ad:aa:35:15:b6:29:83:9c: 5a:b3:ee:c9:4f:11:28:50:20:6e:43:c4:43:14:ee: 68:3b:bb:e8:87:7e:d8:7e:b6:d3:6c:8f:c2:e3:d1: d5:15:5e:21:35:bf:b6:d5:5e:2b:b6:6d:77:89:d8: 94:78:24:83:e3:73:0c:6c:59:14:83:51:e9:ba:6a: 45:8b:e2:bf:54:16:b7:3a:8f:d5:ff:f6:fa:4b:b5: 88:49:98:48:96:bd:b9:ad:8a:71:30:e5:b0:3d:46: 8c:3a:7a:71:49:74:91:35:c6:b0:a7:fe:e7:2b:3b: ba:b7:73:59:4e:4d:64:20:42:be:df:e9:0d:92:2f: 6d:ac:bc:cc:6f:35:1a:19:bc:b1:b2:05:b8:5b:7f: a0:47:b0:87:ff:b1:6a:0a:7d:cc:d3:3c:05:4d:e4: 8e:7e:5c:94:18:8b:34:31:4f:02:ea:3d:cf:fb:6f: a2:40:6a:5c:96:e2:56:13:7b:5f:bd:86:0e:f1:2e: f2:ab:94:76:d5:63:ba:5f:55:57:c1:c2:f9:8e:0a: ea:38:db:2e:5e:99:4b:39:b1:7b:c3:83:8b:fd:86: 4e:4b Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 02:A9:EE:B4:F8:16:B6:6C:76:D3:E2:E3:A9:06:32:74:9B:7F:E6:EE X509v3 Authority Key Identifier: keyid:6B:23:3D:75:50:8B:4E:85:CC:CF:44:34:9A:7C:B7:03:19:8D:1D:26 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/ayM9dVCLToXMz0Q0mny3AxmNHSY.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/90/9d9192-273c-4ca9-b2ba-fa9cb51cd0f1/1/ayM9dVCLToXMz0Q0mny3AxmNHSY.mft X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/90/9d9192-273c-4ca9-b2ba-fa9cb51cd0f1/1/ayM9dVCLToXMz0Q0mny3AxmNHSY.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 21:89:1f:13:9e:bb:54:ec:fb:62:fa:19:37:1b:45:7a:0e:ee: ad:52:4b:4f:13:8b:f8:1e:4c:84:f0:ad:fa:b5:21:20:54:12: 9b:90:a3:11:1f:87:6c:77:33:3f:48:21:fb:d0:b1:3f:7c:53: 55:ea:66:93:a7:4d:56:1d:95:6d:6e:71:74:97:86:96:65:43: 6c:65:40:33:f4:e2:4e:fb:b7:0c:50:8c:9b:b2:91:9d:c3:f8: 26:97:54:dd:11:c3:d6:e7:eb:64:31:3f:f5:8a:41:94:95:c0: 6a:75:63:bb:37:57:34:25:ee:f3:3d:d9:00:83:e2:74:01:13: 31:20:64:2f:2b:87:92:24:5b:c4:5b:43:27:bc:52:fa:35:d9: 3f:8e:07:09:38:95:58:7c:e2:c6:a8:0a:e4:f5:63:9a:5a:c8: 20:34:44:f7:ad:2f:9b:8b:ba:d3:2c:5c:6b:b9:94:7c:40:c4: ed:53:39:36:e3:04:83:cf:3e:8e:98:2e:34:22:5a:04:83:92: 22:41:97:90:db:79:89:da:ae:79:4e:39:b5:08:e5:04:6f:9e: b7:94:7b:80:3d:24:ce:b1:c4:fa:c7:40:eb:66:37:28:05:d7: 7c:bc:a9:f3:c5:78:9c:64:c4:12:25:4a:68:d9:fa:73:8e:e5: a8:29:45:a5 -----BEGIN CERTIFICATE----- MIIFFjCCA/6gAwIBAgISAZgm2We1AFQMbehnMxmZPEyuMA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKDZiMjMzZDc1NTA4YjRlODVjY2NmNDQzNDlhN2NiNzAzMTk4 ZDFkMjYwHhcNMjUwNzIwMDgwMDM4WhcNMjUwNzIxMDgwMDM4WjAzMTEwLwYDVQQD EygwMmE5ZWViNGY4MTZiNjZjNzZkM2UyZTNhOTA2MzI3NDliN2ZlNmVlMIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAn1atJU5NAYxuDaMxIRfdUMlVYx1F ldLLOXCuYMPu42btMyyUrao1FbYpg5xas+7JTxEoUCBuQ8RDFO5oO7voh37YfrbT bI/C49HVFV4hNb+21V4rtm13idiUeCSD43MMbFkUg1HpumpFi+K/VBa3Oo/V//b6 S7WISZhIlr25rYpxMOWwPUaMOnpxSXSRNcawp/7nKzu6t3NZTk1kIEK+3+kNki9t rLzMbzUaGbyxsgW4W3+gR7CH/7FqCn3M0zwFTeSOflyUGIs0MU8C6j3P+2+iQGpc luJWE3tfvYYO8S7yq5R21WO6X1VXwcL5jgrqONsuXplLObF7w4OL/YZOSwIDAQAB o4ICIjCCAh4wHQYDVR0OBBYEFAKp7rT4FrZsdtPi46kGMnSbf+buMB8GA1UdIwQY MBaAFGsjPXVQi06FzM9ENJp8twMZjR0mMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvYXlNOWRWQ0xUb1hNejBRMG1ueTNBeG1OSFNZLmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC85MC85ZDkxOTItMjczYy00Y2E5LWIyYmEt ZmE5Y2I1MWNkMGYxLzEvYXlNOWRWQ0xUb1hNejBRMG1ueTNBeG1OSFNZLm1mdDCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC85MC85ZDkxOTItMjczYy00Y2E5LWIyYmEtZmE5Y2I1MWNkMGYx LzEvYXlNOWRWQ0xUb1hNejBRMG1ueTNBeG1OSFNZLmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAIYkfE567 VOz7YvoZNxtFeg7urVJLTxOL+B5MhPCt+rUhIFQSm5CjER+HbHczP0gh+9CxP3xT Vepmk6dNVh2VbW5xdJeGlmVDbGVAM/TiTvu3DFCMm7KRncP4JpdU3RHD1ufrZDE/ 9YpBlJXAanVjuzdXNCXu8z3ZAIPidAETMSBkLyuHkiRbxFtDJ7xS+jXZP44HCTiV WHzixqgK5PVjmlrIIDRE960vm4u60yxca7mUfEDE7VM5NuMEg88+jpguNCJaBIOS IkGXkNt5idqueU45tQjlBG+et5R7gD0kzrHE+sdA62Y3KAXXfLyp88V4nGTEEiVK aNn6c47lqClFpQ== -----END CERTIFICATE-----Generated at Sun Jul 20 18:05:14 2025 by rpki-client