$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/98/b03213-5e80-4931-81ce-f752d81605fb/1/1-TrGzSJAJJu6YBcfCG6RAcyHyiQ.mft File: 1-TrGzSJAJJu6YBcfCG6RAcyHyiQ.mft (raw, json) Hash identifier: BfVVMCPp6e8YEsCuxg2abQOWxbfjuEtk9AAma1qwbQs= Subject key identifier: 64:4B:EB:42:DA:EA:B6:89:49:B2:2D:90:34:F2:FE:10:C3:B8:46:73 Authority key identifier: F9:3A:C6:CD:22:40:24:9B:BA:60:17:1F:08:6E:91:01:CC:87:CA:24 Certificate issuer: /CN=f93ac6cd2240249bba60171f086e9101cc87ca24 Certificate serial: 01983A96F6DC41C8CB30D79CEA073C1B27EA Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/1-TrGzSJAJJu6YBcfCG6RAcyHyiQ.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/98/b03213-5e80-4931-81ce-f752d81605fb/1/1-TrGzSJAJJu6YBcfCG6RAcyHyiQ.mft Manifest number: 109E Signing time: Thu 24 Jul 2025 04:00:28 +0000 Manifest this update: Thu 24 Jul 2025 04:00:28 +0000 Manifest next update: Fri 25 Jul 2025 04:00:28 +0000 Files and hashes: 1: 1-TrGzSJAJJu6YBcfCG6RAcyHyiQ.crl (hash: llcmzDKXtMRnJj1LVykVrbrQsPkS5YOwwhfSsKGIKHs=) 2: 1rvU47bf__v_KrHYYRPHuR8fgjc.roa (hash: HO9MgV76hbMMfAjtcpab0pQMUXJlCX3bhzQB4ONUQns=) 3: 22T8EVZzlO41oAMFJlvqzAG1qBo.roa (hash: bfWurW2nFor6WKDfmZqrumDW3WLiIUdWZMuqYcYHQ4U=) 4: 2Eku4G4QcFntTeBnPdjQt16QDE8.roa (hash: /h0JlWzojsWTrZMYWqaSRG6HTNQqdKotAsOYfDdHfIU=) 5: 4ooJNHbCgJHfVSaDRkuU0t8O_Vo.roa (hash: +SG76G9IyTI0k0seOJpd2UmxDLN7P9YRF6si6eLLNeA=) 6: 8tB6p8pD3Es3mcW7_h_tKKFo3gs.roa (hash: /upIizdLvhAVo+dTJgi7w1RXZAYuejov/d8qUeJyxe0=) 7: 9qr8r8xTppJSHLya24yoc85Hk7U.roa (hash: lgokGB6Ll002voLL4TcV40sMF+WO24Rj8TUlgWDpzXo=) 8: IAaDUlLUfgx8yfwZmpcftz_J3zA.roa (hash: v1q3KD/AbTqO/Q8Ibts7qUHfFpUCjL1VF+LMfn/fbQI=) 9: Pj3zogl5ZYWOBY3ig7th641eV9A.roa (hash: 7ElQ3zJdzTdZczGF6CkoIorKYRoi8e4nnKid4Ex6yb0=) 10: QAKkeXuZL_ZFLh3yXryVAC9r4uc.roa (hash: UUlL1WVDgsXwZrqIFrcSXaDunz9z9QLg+VVmo+sK9RI=) 11: T4c9dXjox_IR0w4Sp6j6uIsrN8w.roa (hash: t8vtLXPqqc+zrZrNOi4D5mdJAEBF1Ira9/CrglSSLyQ=) 12: TUz_WJSMNczh0a4oE0JPAiZeFwc.roa (hash: W6HJwXWWYxWpF1iC+V/7g0tdFSADqlwW02aC7Kto7U8=) 13: UD8PeoC507j-R5gM4iVeaToplJg.roa (hash: E+NOjqQP7fFW4dktZcx7zBoGyfZltq1IW944Fil+FoI=) 14: Uvc0mIYrtGDSDiJY8e0YxhvZfsc.roa (hash: t1AKkHKCvtUzgk+Av5NTg1kvHY45d4XWobXLQBwd5jg=) 15: WSh4WlDKBbGMyb7nRqG4Mxx97R0.roa (hash: PyohQrEbBmUFGkizOCRWLarzuzBDIMXrn/I9XNTnDqs=) 16: XIJUooGzzFBzLgFVyUb-bnI6Oy8.roa (hash: TCYLQRnuzWsgOnaV3SPssBWZuYXYMvyZ2XlBCOrqK8s=) 17: XSjZ6P2-J8Hkfl3O5rZuaXFNxu4.roa (hash: mDVKUCcUGNt3ihgIQHKFLdzsYM8bgFSt2hrni9Xfg/0=) 18: ZVz0SKvkjOxlciVFBqTr0VUiknA.roa (hash: uFR00EkEnl9o+CnA+h+cBK23mrxF+agDbELB+ERqUFU=) 19: q8aI8en4lXWEAOIqjltL2dKCNEM.roa (hash: mIK7Q6QxymI6Gyc9Mumf03eU529f/5ddct/D368l5+0=) 20: yRetO5hGF2Sg7Urg7tPPa5ziUiI.roa (hash: 0y+iCbPQCXEytpzJVMYbIqcFI7KG0+fLz2JnONERKbY=) Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/98/b03213-5e80-4931-81ce-f752d81605fb/1/1-TrGzSJAJJu6YBcfCG6RAcyHyiQ.crl rsync://rpki.ripe.net/repository/DEFAULT/98/b03213-5e80-4931-81ce-f752d81605fb/1/1-TrGzSJAJJu6YBcfCG6RAcyHyiQ.mft rsync://rpki.ripe.net/repository/DEFAULT/1-TrGzSJAJJu6YBcfCG6RAcyHyiQ.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Fri 25 Jul 2025 04:00:28 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:98:3a:96:f6:dc:41:c8:cb:30:d7:9c:ea:07:3c:1b:27:ea Signature Algorithm: sha256WithRSAEncryption Issuer: CN=f93ac6cd2240249bba60171f086e9101cc87ca24 Validity Not Before: Jul 24 04:00:28 2025 GMT Not After : Jul 25 04:00:28 2025 GMT Subject: CN=644beb42daeab68949b22d9034f2fe10c3b84673 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:c7:33:da:a9:1c:b6:91:7a:15:bd:a7:d6:90:6f: 9e:4b:ca:2a:a8:97:c0:7f:22:0e:79:c5:2f:e4:5d: 71:6b:62:d5:d6:06:24:b2:d3:a4:1e:c6:1f:ce:57: 1f:77:33:f1:9a:df:09:cf:3b:cf:c5:6c:c2:b9:32: 99:b1:97:9d:fe:de:4e:30:b0:f0:2e:8b:ac:e5:8b: fb:fb:80:a9:e0:8c:16:86:c0:87:71:29:b9:b2:03: be:f1:6e:cf:9b:62:b8:e7:09:47:1e:00:29:5f:35: 4b:61:ce:1f:00:f6:88:96:cf:50:56:83:fd:05:73: b9:8a:f6:39:81:66:11:07:77:95:4c:2f:8b:f4:e7: df:9c:31:ad:36:93:9e:e4:a8:9b:06:c9:96:99:db: fa:f1:b9:37:55:47:3c:ed:77:21:04:a5:53:6f:92: 9c:14:21:32:a1:f7:6a:04:d9:f9:9e:e6:7f:d0:41: 01:a4:65:38:7f:13:1c:8f:67:7f:04:86:80:d8:c2: c1:0c:95:18:87:50:f7:e7:0a:86:ad:e9:8c:b5:36: 48:f7:5e:36:73:c0:75:89:06:8a:2b:61:5c:ea:5e: 14:34:bd:ae:a0:db:ab:30:8f:50:a9:c4:bb:c4:d3: 1a:18:e7:fd:c3:3b:d1:ec:dd:6c:a8:a3:e4:6e:d3: 27:97 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 64:4B:EB:42:DA:EA:B6:89:49:B2:2D:90:34:F2:FE:10:C3:B8:46:73 X509v3 Authority Key Identifier: keyid:F9:3A:C6:CD:22:40:24:9B:BA:60:17:1F:08:6E:91:01:CC:87:CA:24 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/1-TrGzSJAJJu6YBcfCG6RAcyHyiQ.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/98/b03213-5e80-4931-81ce-f752d81605fb/1/1-TrGzSJAJJu6YBcfCG6RAcyHyiQ.mft X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/98/b03213-5e80-4931-81ce-f752d81605fb/1/1-TrGzSJAJJu6YBcfCG6RAcyHyiQ.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 5b:4f:1b:d4:45:83:fb:43:05:32:30:f3:bf:1e:eb:2c:ec:04: 06:45:22:fb:d3:c7:d3:b0:38:30:a9:26:b4:2e:6b:9b:e6:b7: d6:69:c3:3b:dc:c0:ef:2d:7a:6c:c5:11:e5:45:c2:e1:a8:d5: db:e6:9c:98:02:77:21:9b:77:ea:7a:e1:45:31:f0:97:0f:7e: e7:54:03:27:90:ec:8c:7c:87:82:01:16:e9:41:5d:4e:0a:f2: a5:03:71:19:74:61:4a:8f:43:b5:81:03:5b:19:68:15:bb:94: ef:08:13:c6:d0:4d:80:f1:89:24:2f:5f:27:e4:03:13:2a:90: 8d:38:3b:2b:a3:93:ce:6f:12:37:9e:61:8e:88:8e:6f:71:d8: 26:9b:9e:4b:62:1e:0d:31:3e:f9:b8:a0:d8:8a:9c:49:da:68: 76:8e:72:ee:62:a5:13:d0:f2:b2:99:d6:a1:f5:13:18:83:26: 75:7d:7e:87:09:83:93:61:57:5f:b5:9c:01:6c:b7:ab:d3:73: bb:ba:1b:72:ec:ac:d2:42:20:c4:e0:9c:1f:6b:ab:46:24:7b: 86:f5:0a:fc:a4:19:09:8c:6c:b5:dd:6e:f4:ac:b5:f4:18:56: 4f:19:4a:64:91:46:42:0a:c4:1c:cf:ad:ea:fc:d5:f5:c9:c2: ec:97:e3:e1 -----BEGIN CERTIFICATE----- MIIFGTCCBAGgAwIBAgISAZg6lvbcQcjLMNec6gc8GyfqMA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKGY5M2FjNmNkMjI0MDI0OWJiYTYwMTcxZjA4NmU5MTAxY2M4 N2NhMjQwHhcNMjUwNzI0MDQwMDI4WhcNMjUwNzI1MDQwMDI4WjAzMTEwLwYDVQQD Eyg2NDRiZWI0MmRhZWFiNjg5NDliMjJkOTAzNGYyZmUxMGMzYjg0NjczMIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAxzPaqRy2kXoVvafWkG+eS8oqqJfA fyIOecUv5F1xa2LV1gYkstOkHsYfzlcfdzPxmt8JzzvPxWzCuTKZsZed/t5OMLDw Lous5Yv7+4Cp4IwWhsCHcSm5sgO+8W7Pm2K45wlHHgApXzVLYc4fAPaIls9QVoP9 BXO5ivY5gWYRB3eVTC+L9OffnDGtNpOe5KibBsmWmdv68bk3VUc87XchBKVTb5Kc FCEyofdqBNn5nuZ/0EEBpGU4fxMcj2d/BIaA2MLBDJUYh1D35wqGremMtTZI9142 c8B1iQaKK2Fc6l4UNL2uoNurMI9QqcS7xNMaGOf9wzvR7N1sqKPkbtMnlwIDAQAB o4ICJTCCAiEwHQYDVR0OBBYEFGRL60La6raJSbItkDTy/hDDuEZzMB8GA1UdIwQY MBaAFPk6xs0iQCSbumAXHwhukQHMh8okMA4GA1UdDwEB/wQEAwIHgDBlBggrBgEF BQcBAQRZMFcwVQYIKwYBBQUHMAKGSXJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvMS1Uckd6U0pBSkp1NllCY2ZDRzZSQWN5SHlpUS5jZXIw gY4GCCsGAQUFBwELBIGBMH8wfQYIKwYBBQUHMAuGcXJzeW5jOi8vcnBraS5yaXBl Lm5ldC9yZXBvc2l0b3J5L0RFRkFVTFQvOTgvYjAzMjEzLTVlODAtNDkzMS04MWNl LWY3NTJkODE2MDVmYi8xLzEtVHJHelNKQUpKdTZZQmNmQ0c2UkFjeUh5aVEubWZ0 MIGCBgNVHR8EezB5MHegdaBzhnFyc3luYzovL3Jwa2kucmlwZS5uZXQvcmVwb3Np dG9yeS9ERUZBVUxULzk4L2IwMzIxMy01ZTgwLTQ5MzEtODFjZS1mNzUyZDgxNjA1 ZmIvMS8xLVRyR3pTSkFKSnU2WUJjZkNHNlJBY3lIeWlRLmNybDAYBgNVHSABAf8E DjAMMAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgAC BQAwFQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAW08b 1EWD+0MFMjDzvx7rLOwEBkUi+9PH07A4MKkmtC5rm+a31mnDO9zA7y16bMUR5UXC 4ajV2+acmAJ3IZt36nrhRTHwlw9+51QDJ5DsjHyHggEW6UFdTgrypQNxGXRhSo9D tYEDWxloFbuU7wgTxtBNgPGJJC9fJ+QDEyqQjTg7K6OTzm8SN55hjoiOb3HYJpue S2IeDTE++big2IqcSdpodo5y7mKlE9DyspnWofUTGIMmdX1+hwmDk2FXX7WcAWy3 q9Nzu7obcuys0kIgxOCcH2urRiR7hvUK/KQZCYxstd1u9Ky19BhWTxlKZJFGQgrE HM+t6vzV9cnC7Jfj4Q== -----END CERTIFICATE-----Generated at Thu Jul 24 12:17:24 2025 by rpki-client