$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/aa/ea4455-7836-44c4-b2a3-2ece04e185c2/1/3O9Y1M-jVUP4SIonVuaSTmR7RYk.mft File: 3O9Y1M-jVUP4SIonVuaSTmR7RYk.mft (raw, json) Hash identifier: LNP/VsN05M1KBIbbnhJIgEA8n0e9/ADBXqanhQnjh/A= Subject key identifier: C0:EF:83:51:20:3A:A1:07:5E:59:8E:AC:11:85:F0:29:78:46:6C:4B Authority key identifier: DC:EF:58:D4:CF:A3:55:43:F8:48:8A:27:56:E6:92:4E:64:7B:45:89 Certificate issuer: /CN=dcef58d4cfa35543f8488a2756e6924e647b4589 Certificate serial: 0198350351A1F11807D8AAA09520958524A4 Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/3O9Y1M-jVUP4SIonVuaSTmR7RYk.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/aa/ea4455-7836-44c4-b2a3-2ece04e185c2/1/3O9Y1M-jVUP4SIonVuaSTmR7RYk.mft Manifest number: 1569 Signing time: Wed 23 Jul 2025 02:01:06 +0000 Manifest this update: Wed 23 Jul 2025 02:01:06 +0000 Manifest next update: Thu 24 Jul 2025 02:01:06 +0000 Files and hashes: 1: 3O9Y1M-jVUP4SIonVuaSTmR7RYk.crl (hash: e646sspEa21szG8J+G0SZpAl4v4L6r03nvtbyk9T8AE=) 2: 41fVJkrPbHKQA079D4QVuoSoMHA.roa (hash: sr+TybZqUtIImaDgTqztSGD1XE6oloq4BZ2M4Xpg+u0=) 3: 4pf6JhZ2ZrbzDs3KIhxGjElBlaw.roa (hash: vXT1uBYUu9e7P+u/IiXkrVdl2Zw3UbzSeW2UWFK34Jw=) 4: 6klSWkjjUTbGuPtDfN8cALab9cs.roa (hash: sdgQjkXScGhQKnR4al8+skMwfxtoqagBTslhZkfSKNY=) 5: B3w7E9gvZEzFwMrG99Xq-T1MEBw.roa (hash: X2c/+qNKKXp5+FBng9aKxlFFZbDBWHiqkfhHgQbP6bg=) 6: C2H1BSmYMIrZggVB3V-MZ8CR5SY.roa (hash: MAmDjDLmFQyW+O4vZbG4q4tWTwrvQlayeoQlXr+Fu/8=) 7: DJ2HKm_1c1O48zC-cc12FURV1-w.roa (hash: odPYR1sTJx4nskAcxBKfAydZplTxWpbfAnjmQhPzJX8=) 8: GmlPqmYgpg61oCrtTG9RzmgTZRQ.roa (hash: lOFhsoN8S3GIIvzatAuS7mkyT16CCVPA77MjKa8aWWc=) 9: RZCNuFYkMVfet6khSeCWtqT4r3s.roa (hash: bz5sfARWaL0oWhzQTAMOexVtHrjfBeAF+vBi8eYpl/U=) 10: Sn1YHf-JTelJa8AbFEu9eCrJc-Y.roa (hash: 4RQ4/nSSdbUjaSMtOe+F2ienAydzSYTXwrbRmuUcEJY=) 11: UE3TFsD19f6wQr0gTHDaiwhGdqA.roa (hash: h9a9K3MMF0WQfDnzSvLb5P+n54cp7dIKew88pGDYldk=) 12: VicyF_0e_bvvcn0fKM8q40zu1n8.roa (hash: C5AQCG/2PEYP519Z6IOs4YDYOnLl0s41qulpvbJvJ4g=) 13: _HxOSGDLp42EFmYvwzkWMgsUDRc.roa (hash: ld3Ed4rdMoSUbT+R2+5BJt8zZUTSFFBqMJ22iFdBG+s=) 14: cHLxjuzlgoGDINIVaFsru4PZ9BE.roa (hash: o3eUI2kqgbIKISwJ6D+XZ6uUN50wRiiahX5yY1sTPn4=) 15: lknEfiAWsTgVxunxpJ4Cim6vi_Y.roa (hash: 9nT6QBaPn6YGSLcfszLUc2cPb60rXG8wS9MlLTeVBhw=) 16: mdB3D_zcc3ZMQewiv3J0UZ_sUlo.roa (hash: NsB59ITpkzoeK9pRuPozIMWrvt6Lae+60ChrUSCRg50=) 17: mjTSWLEuvIRJ-mDUVhSblHWE7N4.roa (hash: rmzWSKN3Yb/xA6p/q8UxEXQjDhun2rkoNnE76zOjZHo=) 18: pxtXnWk-oYZ7Qby89ddSCgu91ts.roa (hash: RB8UdezmP543bft1AFoJ1CEu6eopqGc7lCF9jSa1eTc=) 19: q74_W6xdG6goIDi1c08_8gJ6uTE.roa (hash: pxdR0KPAM6OXX14ayHaIWzZB+fjREFkJhs6uGstYGhI=) 20: r3Ck7fpoOKp57Mk1jJgw8XHWAxg.roa (hash: jDsvxvKf5uFW/4bW6b3NOwjRJy48sDgwtQTJJofZqGM=) 21: v99_kaWjoTKnpnOcBogb8Emjk4M.roa (hash: unshnZnS3tg5XPSrGj9Iy+gxnhESQoD/3z5Y8oIxogo=) 22: y38_fk_dl6De5uovg7WKuAzPolA.roa (hash: PsHTMj/SkJczqFC8znjT596YhybynG/bm1yXYsS6Cxs=) 23: z6d9djVL2RnXuevi6Ot8E8e62tc.roa (hash: o9Kh9fFp+5NbfQXFw6W0ABs1khVR+g751jXSLlxLU4c=) 24: zUeLco_9U8ifNR5PMJI3zpijW74.roa (hash: 3lduL1beP27BPGmbMBwONs6g5YeSTXx0lXyH1JulpN4=) Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/aa/ea4455-7836-44c4-b2a3-2ece04e185c2/1/3O9Y1M-jVUP4SIonVuaSTmR7RYk.crl rsync://rpki.ripe.net/repository/DEFAULT/aa/ea4455-7836-44c4-b2a3-2ece04e185c2/1/3O9Y1M-jVUP4SIonVuaSTmR7RYk.mft rsync://rpki.ripe.net/repository/DEFAULT/3O9Y1M-jVUP4SIonVuaSTmR7RYk.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Thu 24 Jul 2025 02:01:06 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:98:35:03:51:a1:f1:18:07:d8:aa:a0:95:20:95:85:24:a4 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=dcef58d4cfa35543f8488a2756e6924e647b4589 Validity Not Before: Jul 23 02:01:06 2025 GMT Not After : Jul 24 02:01:06 2025 GMT Subject: CN=c0ef8351203aa1075e598eac1185f02978466c4b Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:dd:57:64:7a:c8:34:49:cb:64:3c:85:46:ad:95: 58:7e:93:b6:65:f6:98:4c:98:d5:34:bb:c6:f3:ea: f3:a9:ad:13:cb:0d:d2:df:04:98:59:0c:0a:aa:ad: f4:ff:9f:9b:a1:97:84:59:e9:91:7d:25:52:0e:e3: 96:81:5d:89:cf:15:08:3b:8c:4c:dc:66:bb:3b:9d: e2:50:4d:33:be:03:35:80:92:c4:da:67:96:da:da: 60:c4:d3:21:eb:30:21:8c:6b:ee:78:00:e2:fc:2a: c7:ac:f9:ab:c6:13:68:f9:f3:87:f9:c6:5b:e2:4d: 1d:ef:94:50:1d:66:e5:97:e0:6b:d8:47:c4:cd:fc: 49:08:67:44:b6:21:35:c5:df:90:e2:a6:df:11:1c: 60:71:9a:61:23:17:e1:25:6e:a7:a2:84:5d:a8:49: 16:c8:3c:76:15:d3:ef:ca:0c:68:72:c9:19:76:9b: 86:75:73:0b:a1:15:64:cf:69:62:3c:3b:60:98:1c: 9f:9e:72:63:c5:0b:df:97:48:8f:8e:66:47:ff:d5: b4:db:08:bf:a4:c3:32:7b:8b:25:ff:3b:56:26:cd: e9:4c:9b:4a:ad:bd:4d:11:7a:13:7f:9d:78:93:ec: ea:2e:75:89:b9:e2:e9:24:15:84:5d:a9:77:ab:b9: 0f:6b Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: C0:EF:83:51:20:3A:A1:07:5E:59:8E:AC:11:85:F0:29:78:46:6C:4B X509v3 Authority Key Identifier: keyid:DC:EF:58:D4:CF:A3:55:43:F8:48:8A:27:56:E6:92:4E:64:7B:45:89 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/3O9Y1M-jVUP4SIonVuaSTmR7RYk.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/aa/ea4455-7836-44c4-b2a3-2ece04e185c2/1/3O9Y1M-jVUP4SIonVuaSTmR7RYk.mft X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/aa/ea4455-7836-44c4-b2a3-2ece04e185c2/1/3O9Y1M-jVUP4SIonVuaSTmR7RYk.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 1e:d6:9d:da:e7:05:d0:49:f7:a8:aa:8e:fa:96:69:7c:03:91: ce:6d:7a:65:83:30:78:d7:69:8d:97:c6:56:2b:c1:da:2b:33: 9b:81:b2:9f:1d:47:e5:16:2f:fc:48:07:97:d2:25:cc:97:7c: fe:79:fb:59:71:d1:3d:af:0e:52:a7:3b:97:d7:10:f8:c2:c5: 0c:85:06:75:5a:f7:3f:16:da:f0:31:c4:02:e6:1b:b5:8c:f9: 93:88:aa:f1:5f:5f:4a:44:cb:e4:df:f3:5a:3e:79:d2:63:19: 88:a1:f3:ab:d1:c5:87:63:c6:23:9b:23:3b:cc:a7:04:51:5b: b4:af:fe:ed:23:be:a3:d0:1a:de:6d:d7:ee:fa:5b:aa:ef:0a: 89:64:3c:99:35:e3:33:60:01:3d:9a:3d:01:68:4d:f2:1a:e5: bc:9c:0d:24:e2:2f:03:2c:7d:33:fb:7d:64:0d:4d:c6:ed:a0: 47:95:8d:10:11:36:6c:63:20:86:c8:07:4d:d3:62:9d:b9:7c: 65:91:09:d3:36:18:81:51:0c:18:d6:f7:48:6c:8f:75:a1:0a: db:0e:16:3c:aa:25:10:4c:72:19:b2:9a:67:ea:d8:6a:00:38: 4d:cf:f2:af:f7:08:fc:a0:e8:50:c4:ca:ca:cd:76:17:07:1f: 58:13:e8:44 -----BEGIN CERTIFICATE----- MIIFFjCCA/6gAwIBAgISAZg1A1Gh8RgH2KqglSCVhSSkMA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKGRjZWY1OGQ0Y2ZhMzU1NDNmODQ4OGEyNzU2ZTY5MjRlNjQ3 YjQ1ODkwHhcNMjUwNzIzMDIwMTA2WhcNMjUwNzI0MDIwMTA2WjAzMTEwLwYDVQQD EyhjMGVmODM1MTIwM2FhMTA3NWU1OThlYWMxMTg1ZjAyOTc4NDY2YzRiMIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEA3Vdkesg0SctkPIVGrZVYfpO2ZfaY TJjVNLvG8+rzqa0Tyw3S3wSYWQwKqq30/5+boZeEWemRfSVSDuOWgV2JzxUIO4xM 3Ga7O53iUE0zvgM1gJLE2meW2tpgxNMh6zAhjGvueADi/CrHrPmrxhNo+fOH+cZb 4k0d75RQHWbll+Br2EfEzfxJCGdEtiE1xd+Q4qbfERxgcZphIxfhJW6nooRdqEkW yDx2FdPvygxocskZdpuGdXMLoRVkz2liPDtgmByfnnJjxQvfl0iPjmZH/9W02wi/ pMMye4sl/ztWJs3pTJtKrb1NEXoTf514k+zqLnWJueLpJBWEXal3q7kPawIDAQAB o4ICIjCCAh4wHQYDVR0OBBYEFMDvg1EgOqEHXlmOrBGF8Cl4RmxLMB8GA1UdIwQY MBaAFNzvWNTPo1VD+EiKJ1bmkk5ke0WJMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvM085WTFNLWpWVVA0U0lvblZ1YVNUbVI3UllrLmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC9hYS9lYTQ0NTUtNzgzNi00NGM0LWIyYTMt MmVjZTA0ZTE4NWMyLzEvM085WTFNLWpWVVA0U0lvblZ1YVNUbVI3UllrLm1mdDCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC9hYS9lYTQ0NTUtNzgzNi00NGM0LWIyYTMtMmVjZTA0ZTE4NWMy LzEvM085WTFNLWpWVVA0U0lvblZ1YVNUbVI3UllrLmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAHtad2ucF 0En3qKqO+pZpfAORzm16ZYMweNdpjZfGVivB2iszm4Gynx1H5RYv/EgHl9IlzJd8 /nn7WXHRPa8OUqc7l9cQ+MLFDIUGdVr3Pxba8DHEAuYbtYz5k4iq8V9fSkTL5N/z Wj550mMZiKHzq9HFh2PGI5sjO8ynBFFbtK/+7SO+o9Aa3m3X7vpbqu8KiWQ8mTXj M2ABPZo9AWhN8hrlvJwNJOIvAyx9M/t9ZA1Nxu2gR5WNEBE2bGMghsgHTdNinbl8 ZZEJ0zYYgVEMGNb3SGyPdaEK2w4WPKolEExyGbKaZ+rYagA4Tc/yr/cI/KDoUMTK ys12FwcfWBPoRA== -----END CERTIFICATE-----Generated at Wed Jul 23 11:41:26 2025 by rpki-client