$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/a8/9fa83d-b2a3-45e4-8499-f525816402bd/1/_4IwmmgUZ4rXLj8xpP4CcvQL2YY.mft File: _4IwmmgUZ4rXLj8xpP4CcvQL2YY.mft (raw, json) Hash identifier: x9oOjx5VPbpVp4ZJyukxnn6Rl+lpzQ7HHtrLdi60/k4= Subject key identifier: 2D:78:F0:05:13:D4:70:66:5A:36:DC:47:2A:A3:87:DE:AD:35:43:71 Authority key identifier: FF:82:30:9A:68:14:67:8A:D7:2E:3F:31:A4:FE:02:72:F4:0B:D9:86 Certificate issuer: /CN=ff82309a6814678ad72e3f31a4fe0272f40bd986 Certificate serial: 019838A8EFF1DE98EEA3E85F4AD38E620A24 Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/_4IwmmgUZ4rXLj8xpP4CcvQL2YY.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/a8/9fa83d-b2a3-45e4-8499-f525816402bd/1/_4IwmmgUZ4rXLj8xpP4CcvQL2YY.mft Manifest number: 163D Signing time: Wed 23 Jul 2025 19:00:52 +0000 Manifest this update: Wed 23 Jul 2025 19:00:52 +0000 Manifest next update: Thu 24 Jul 2025 19:00:52 +0000 Files and hashes: 1: 07ZXjsdxsFuEtdgHwbOq-R5G76E.roa (hash: 1M9pQCAfVRT7MQ/Zj4tT9AVlQVRcilmGlJyGKK/xyXM=) 2: 1-qG54akf4ZK4Vn2nJAtq8qKMB-M.roa (hash: +KrvgwuNM4eT5l98LWe/CjZjFxSOKRz6fj1mSGz0IgM=) 3: 4PQhz7MOxuhGtS_nPubpyXMJOcI.roa (hash: BnJSvsApOD8luZipfIRx4R+p7IT8Z+rfRgGtpM8nPhY=) 4: 7_xHvFH9z1lTBMmCYCZyfOMLpCE.roa (hash: Dy9Ep1VuSlW1UwNypkd8T87oMpJakHz3KhMW+QvcJps=) 5: 8JVDAVLNFauwqQaVfnt2Vbf7qyM.roa (hash: v8PEoTepb8SY5IPZDmMyByiGGEsM8VZnFBHuEpMHhf8=) 6: DkrqBWdKXLO6zlgYF9nBanc3tCY.roa (hash: D0HuRt9BsDF5UOb7SYENCbRIf9DzDWOZO4bE+KdMZlU=) 7: GYDa6uF4PXtvgFCZif9U8DfyJhs.roa (hash: x9pM/mAY2BLb1r8R45XN3qmt1Gw8vPBkNTNsNDjS6Jk=) 8: ISiMd8SOBUmeZ3l9pfTrNrRMVZ4.roa (hash: jX1VL1H9HdYzBbWtVwBVZy9/vxHTwytZF8IGlvhq3Yc=) 9: JXUpuOiDJbpAQ6wJyegYg23uwQY.roa (hash: IcXnbwWR3QdHkuBHHjMtVeQKCG9JaMJJR88n+O+Lv4g=) 10: K3gtWKami_XUUUtVwrQwwcMOVAg.roa (hash: 01aEVs3iMb11GEQQScA48mgu1ByLdBE37Eq3V2mjiGQ=) 11: Kn5AOeIvqDj0QyY0a6gvSVOYK04.roa (hash: /7QM63bFC+CBTXnuyFwX9/7nQ/C+RhIxyYwX13EXYS0=) 12: LL7AEgR132RnJITVXb1v0I3LCyw.roa (hash: gwRFxp3BgZCfzCqdNDK/XuHwvvhdYQt+5LD2lZsPRaU=) 13: NaXmOsDpDUrJU-L3cR4MsoyMUQA.roa (hash: dVVNZQbSo8+6scs7Gd+Q59/WTz4n0kcfFCZ13Y+qz7s=) 14: UryH-7kbyXWUJTfxmD8_iKhQToA.roa (hash: 9X1VOT+y467gWK0X8aw0s4QPOjoJGbo5qGz+HUSG1OM=) 15: V4iFmGmpuX9vmwKfCIL4MHq3iJo.roa (hash: I7wr4UYfNx1god3F0V72adpmlcw8clHUqo883JUOo54=) 16: XR-_EEDwF8zWqFnUJesI7P4suXw.roa (hash: 5Fp6z6r3AdWNjIT316J/wStOBp8ELRHvRNd1XNc9tso=) 17: ZtIB391wA96ODwULxOuaUb3zKjw.roa (hash: iYFjXUPN6915L3avwAU1BHDz24hStz0uZXCywgYk214=) 18: _4IwmmgUZ4rXLj8xpP4CcvQL2YY.crl (hash: VU+LkLHGTzEqfTc5b4pF31ywATHNaTWLdJqKvWFZB3U=) 19: bke-YJ-tbDLGpp3kvZGH2TLdlOI.roa (hash: NXBX9RHNDwlq1k9iub5dxUrFv5q8FjUTbkNsfuh2Uzo=) 20: bloAk3yeA7RnUogV_JT9EWIP-hM.roa (hash: 2fE3VucaSZiB1/IjzEIuOiCkE2iec+1KGKY3worRZJI=) 21: bzmfxm3S5hbe6Gaa6wvgeLEiaNA.roa (hash: Ar56s14Axf0ioHIstHBEGHX85IVOcRUFRcIehjO4vNI=) 22: iUM8bJHwQ48CpEg1dQgbuZoF2F8.roa (hash: FAU/hqJaw9dZlVsB9TPc90NTrKoL6yNGJeYIXg92yTQ=) 23: pN1QTddIk2qdFe_mOVuHdGmP3Z4.roa (hash: CywtU84R198uQ8xF6BjJqnsNgApLacLlntN4HmgGHZM=) 24: rE9cybiH6oB4mGa5EHSN9cceqWE.roa (hash: YG48gdDn/SUyc3i/+XHJ5HagqvRplqEN/up/vYOmvBI=) 25: uYzA14o4SLgVDIUH1V-hG4krcmM.roa (hash: AAmmFasdZzQbOIJJuAxM6M66jvg5N0KdzbSbTAsq2+w=) 26: waIdBiyQcZY5S3UHlSgYjhWy3yA.roa (hash: B01bIchSEkzdF5UX/NW8F0eHIFCkAlYI9AyRAZwvgUg=) 27: yphDYCojIc0PisUPqGFzcSpaHr4.roa (hash: kueA64oPFnuqfOUJ8KFf+GceWa+kI7exnedP73+jI8A=) Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/a8/9fa83d-b2a3-45e4-8499-f525816402bd/1/_4IwmmgUZ4rXLj8xpP4CcvQL2YY.crl rsync://rpki.ripe.net/repository/DEFAULT/a8/9fa83d-b2a3-45e4-8499-f525816402bd/1/_4IwmmgUZ4rXLj8xpP4CcvQL2YY.mft rsync://rpki.ripe.net/repository/DEFAULT/_4IwmmgUZ4rXLj8xpP4CcvQL2YY.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Thu 24 Jul 2025 14:37:04 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:98:38:a8:ef:f1:de:98:ee:a3:e8:5f:4a:d3:8e:62:0a:24 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=ff82309a6814678ad72e3f31a4fe0272f40bd986 Validity Not Before: Jul 23 19:00:52 2025 GMT Not After : Jul 24 19:00:52 2025 GMT Subject: CN=2d78f00513d470665a36dc472aa387dead354371 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:b1:4e:d0:53:e0:ef:e0:e2:78:69:f9:ad:fd:07: b5:43:63:6c:65:25:0d:fc:e3:ae:1e:d7:27:ce:cb: 6f:51:a6:55:cd:59:16:23:15:a7:b4:8e:af:7a:ae: 7e:e0:11:1a:c2:6b:42:9b:f8:ab:2a:f5:bb:4a:be: 3a:48:e3:90:4d:58:71:55:3a:8b:e1:a6:25:b9:87: 8e:25:10:1e:a6:c7:27:5f:15:b1:d9:89:1a:f5:a3: 87:ae:50:7d:aa:a8:2e:d7:ec:bc:7f:c6:12:dd:44: e1:7a:e9:2d:ae:c9:0c:59:90:6a:b2:cd:07:18:36: f7:81:64:5f:6c:a4:b9:20:8a:d0:48:ab:50:07:4a: 56:dc:a4:d3:2c:d5:1a:83:3b:2e:80:5f:5c:cb:5e: 41:f3:fb:2c:b5:73:32:56:1a:9e:87:e7:40:b5:55: 34:eb:d3:e5:a3:d8:47:fc:74:f6:ca:7b:f5:60:0b: 69:13:c2:e0:d6:ec:ab:d5:09:a6:10:b2:9c:65:cc: fd:3f:78:26:01:fc:9f:91:38:14:84:1a:73:82:e1: 49:81:ad:ac:05:fb:6f:fe:cb:ef:d1:ea:e1:c1:2b: 2c:47:6c:ac:ad:95:60:0f:ea:5b:64:91:4c:bd:76: ad:84:75:36:8a:17:19:f8:c1:55:a0:92:ff:88:ef: 0e:1f Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 2D:78:F0:05:13:D4:70:66:5A:36:DC:47:2A:A3:87:DE:AD:35:43:71 X509v3 Authority Key Identifier: keyid:FF:82:30:9A:68:14:67:8A:D7:2E:3F:31:A4:FE:02:72:F4:0B:D9:86 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/_4IwmmgUZ4rXLj8xpP4CcvQL2YY.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/a8/9fa83d-b2a3-45e4-8499-f525816402bd/1/_4IwmmgUZ4rXLj8xpP4CcvQL2YY.mft X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/a8/9fa83d-b2a3-45e4-8499-f525816402bd/1/_4IwmmgUZ4rXLj8xpP4CcvQL2YY.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 6b:b8:2b:30:b6:22:7a:00:31:4d:37:c7:23:ae:b3:b5:c1:95: 7a:7c:9c:b5:d9:f3:9b:06:f5:ad:10:0f:07:7e:98:b4:01:5d: f3:5b:fc:85:b8:50:fc:e9:9a:d9:07:8d:1d:92:b0:7f:b5:a0: f8:ba:ca:6e:63:e8:07:b2:b9:19:30:53:df:76:8b:4f:a4:73: 08:ff:20:22:77:a9:2f:b4:a7:09:83:30:f9:4f:e7:52:22:3a: aa:c4:10:50:cf:43:18:d8:86:f9:0f:4d:a5:17:01:36:c8:09: e6:6b:19:df:d5:01:f2:42:66:ff:32:6d:84:22:a5:55:a7:ca: 74:be:11:57:b9:7f:c3:b2:22:4a:8c:ff:0b:92:5a:72:96:7a: 17:e9:d5:bd:b1:e6:34:2e:4a:7b:51:10:96:a0:03:62:a1:33: 48:f3:88:52:ce:8a:28:48:41:23:e6:3c:11:08:23:ae:2a:6f: 01:61:ab:32:e8:a7:cb:20:c9:65:71:23:90:c8:ff:13:76:95: 7a:b0:4b:20:01:41:b0:b1:91:ae:97:82:29:8e:6c:9f:2a:23: e5:1f:99:02:35:f9:4a:ab:7d:1f:4d:e3:d3:3c:94:b7:39:e7: 3a:8d:8f:14:7c:a6:ad:bf:15:b7:e4:80:fc:18:5b:25:de:42: ea:cf:1e:28 -----BEGIN CERTIFICATE----- MIIFFjCCA/6gAwIBAgISAZg4qO/x3pjuo+hfStOOYgokMA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKGZmODIzMDlhNjgxNDY3OGFkNzJlM2YzMWE0ZmUwMjcyZjQw YmQ5ODYwHhcNMjUwNzIzMTkwMDUyWhcNMjUwNzI0MTkwMDUyWjAzMTEwLwYDVQQD EygyZDc4ZjAwNTEzZDQ3MDY2NWEzNmRjNDcyYWEzODdkZWFkMzU0MzcxMIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAsU7QU+Dv4OJ4afmt/Qe1Q2NsZSUN /OOuHtcnzstvUaZVzVkWIxWntI6veq5+4BEawmtCm/irKvW7Sr46SOOQTVhxVTqL 4aYluYeOJRAepscnXxWx2Yka9aOHrlB9qqgu1+y8f8YS3UTheuktrskMWZBqss0H GDb3gWRfbKS5IIrQSKtQB0pW3KTTLNUagzsugF9cy15B8/sstXMyVhqeh+dAtVU0 69Plo9hH/HT2ynv1YAtpE8Lg1uyr1QmmELKcZcz9P3gmAfyfkTgUhBpzguFJga2s Bftv/svv0erhwSssR2ysrZVgD+pbZJFMvXathHU2ihcZ+MFVoJL/iO8OHwIDAQAB o4ICIjCCAh4wHQYDVR0OBBYEFC148AUT1HBmWjbcRyqjh96tNUNxMB8GA1UdIwQY MBaAFP+CMJpoFGeK1y4/MaT+AnL0C9mGMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvXzRJd21tZ1VaNHJYTGo4eHBQNENjdlFMMllZLmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC9hOC85ZmE4M2QtYjJhMy00NWU0LTg0OTkt ZjUyNTgxNjQwMmJkLzEvXzRJd21tZ1VaNHJYTGo4eHBQNENjdlFMMllZLm1mdDCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC9hOC85ZmE4M2QtYjJhMy00NWU0LTg0OTktZjUyNTgxNjQwMmJk LzEvXzRJd21tZ1VaNHJYTGo4eHBQNENjdlFMMllZLmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAa7grMLYi egAxTTfHI66ztcGVenyctdnzmwb1rRAPB36YtAFd81v8hbhQ/Oma2QeNHZKwf7Wg +LrKbmPoB7K5GTBT33aLT6RzCP8gInepL7SnCYMw+U/nUiI6qsQQUM9DGNiG+Q9N pRcBNsgJ5msZ39UB8kJm/zJthCKlVafKdL4RV7l/w7IiSoz/C5JacpZ6F+nVvbHm NC5Ke1EQlqADYqEzSPOIUs6KKEhBI+Y8EQgjripvAWGrMuinyyDJZXEjkMj/E3aV erBLIAFBsLGRrpeCKY5snyoj5R+ZAjX5Sqt9H03j0zyUtznnOo2PFHymrb8Vt+SA /BhbJd5C6s8eKA== -----END CERTIFICATE-----Generated at Wed Jul 23 23:24:52 2025 by rpki-client