$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/cd/6168d7-946c-4574-91ea-82ad14555eaa/1/mCz4CcDj6OVVL50N0uJ-DdLY2r4.mft File: mCz4CcDj6OVVL50N0uJ-DdLY2r4.mft (raw, json) Hash identifier: GqSVFIxZy8DPObu3M2Jsavhd9APrq0BpprYYVXp0HbI= Subject key identifier: 29:E8:D9:D6:63:63:66:15:3D:34:81:2F:37:4F:35:45:2D:AC:1B:79 Authority key identifier: 98:2C:F8:09:C0:E3:E8:E5:55:2F:9D:0D:D2:E2:7E:0D:D2:D8:DA:BE Certificate issuer: /CN=982cf809c0e3e8e5552f9d0dd2e27e0dd2d8dabe Certificate serial: 01982D4957EC0FA7D8DD4FC398B4E2449E11 Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/mCz4CcDj6OVVL50N0uJ-DdLY2r4.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/cd/6168d7-946c-4574-91ea-82ad14555eaa/1/mCz4CcDj6OVVL50N0uJ-DdLY2r4.mft Manifest number: 16C5 Signing time: Mon 21 Jul 2025 14:00:38 +0000 Manifest this update: Mon 21 Jul 2025 14:00:38 +0000 Manifest next update: Tue 22 Jul 2025 14:00:38 +0000 Files and hashes: 1: 1-W8fXv0jttdWKlzJAXVxxYtpRug.roa (hash: gpIh638+Fcd1tAei50b0+8GVpPlev9wrd/g4gdASdjg=) 2: 1UWB6DiO5XdV3re-o8rnuoqA6Ms.roa (hash: acQwekWVQZ/8nvJFITjzBnRus/D8fEtyc11Q6KELe7w=) 3: 21_l98tMuuHtah8-s1GQ4s9w80o.roa (hash: kBh4jdwY3MGZ4Pq8reV1XfNIfs+7zVu2WLUGJ+5lgvc=) 4: 4w30D5KawwaEKeLXCLppZs-985Y.roa (hash: D2Lwmoer5qGID/4i5fsaA6M5CcgJmrhikqoV9diBlTk=) 5: 584_8-MCCtntQOfvULwWZs9O7nE.roa (hash: 2qpHd4/GVV0NiG+wogJB5AQCeDp3yyLGq0zIUvBip28=) 6: Brhkd2-auvvZmCyvxy5ORhHeQ6E.roa (hash: g8WF2m4nW9TPwqD2pE0ddCjVXs1fr0m/MHPrZ/Qj2HI=) 7: CnHjgZKNSNMP8dJ_BtYZ7Xo4ZrM.roa (hash: FqQbIRpVOThM0L1uy/AMjORSqSUsS/5+snA6mZqlQAA=) 8: G5bYAs5-DWEC8k2PerkxyvzK3O8.roa (hash: 0wZ64Natb0gIUfylulMGJdNUBBW0kgaRtyK7K218h3k=) 9: IrnlAQa6M1A96HHiDasRUfVGqbQ.roa (hash: xgq5FcKSqvltS9tf8414o9TbLoeW+VIxwonV5uaPruw=) 10: LOKrZEDDVhVnSlJWlOLgQ5nPcM0.roa (hash: 2CeUB6HU9O6IboYshEwLG/p+jYhiKQ64ZtA5Y3idzrs=) 11: LbbsmkI3GqawDuN3XH6acheMxPw.roa (hash: BqWA3SYDAKLfoYVuIlyCld31iNDXkXCl/KtIv69jNUw=) 12: OOYkNDqqDn1Unj3M-yrjf_S9VlU.roa (hash: oCGvjVeC4FC9ueufaA6bhsrNhxHd2pd306IA0XGXLfs=) 13: QJvPeNzFvPANqEbfkIc8-3zDQLs.roa (hash: felyBGjLHZhYiBLtOS5vAZwi9iqRNucwfxHrWgkMpWA=) 14: TrJv_8fKTcS_JBhUlD0AOoYAAQA.roa (hash: f2kfoia7LPQzOEBZN5rSYHh6gWQLd4Eepwr2rpiJk9c=) 15: UlqMdzKNjKKz7GVAWhNQ0GeC6iE.roa (hash: vyjrNuYYOAehZPhyITO+Q5uPp2e1fJC2nVGYypgHEhg=) 16: WJhqTCUN_AjGjAYRDp33eZN0BY4.roa (hash: 06Htmns2yq5ClkGiqHYQcD9sTifSqYU3RXoOiPSPCkE=) 17: azJgsmdTDF3ELk-I19mAROWoKeE.roa (hash: oh/dgWtIFhqfW7S9fR3cOqTRk0csYkiTH2ALt2aoNhQ=) 18: eChAGDbdQGMbx-CgEa8ktTddF6A.roa (hash: WaY78nyI3A8kBY4pFd0TG8ZJI0s+NCkhF+OV6SV5Crw=) 19: gN00iWVZ4X9ImdixtPXeB88eR_k.roa (hash: DPVgneYPbYS00UaxJyd5C7zkqYJRRcPWgn4xBTn6bHk=) 20: gnHztlWIUEkbfP_VpJDgy1aZ-q8.roa (hash: 8IEq5Il4ymKT0XR1RNf3aEeBm7YPqbccSq4VWhr/cXU=) 21: mCz4CcDj6OVVL50N0uJ-DdLY2r4.crl (hash: 4qCpq0wxn0k5o+ddmvTia+lpm5djZ7AZoXgG/kVBoBc=) 22: owD2F5PTIfIuOH1ResHlD6bHqfw.roa (hash: FwwD5nwDxuakINFZYh01TzvwO9abW6HL7q42RgazHtQ=) 23: qjM14mHgk1Edy0idzb8PcMe4oBE.roa (hash: pcsI+0E79qmlWXPdLST7nM+67d24tKTfwvx2fxrvqMw=) 24: s5Ai9g5eYYL8Bgx7ZWiTovq-xxE.roa (hash: BtApyhPvW43mqLBFeRPcKdPRw6DTk5KYzme6TZtVXns=) 25: sW7iMiWbwjQZ4JTr9eqMstrH0fY.roa (hash: fl3fF4gUVsev8QdVZnLOIu5u/5rzRWGxzrZRrAPXabs=) 26: tdG4gwbiCDTl2DZU4EFrqi-57Fc.roa (hash: HXWAwqtUcnHFWl+ei5dmWCUQV5Bz5IiYmO9iAB6ydxI=) 27: w23_TR4dcsNa31LTX8HVMLWRN_w.roa (hash: rfdkH9NAgBWGbrUS8/d8Rmrz5XY4u8KepKOXwjiNknw=) 28: wWRDfWHup1u0k3UjICPfUYIPuSY.roa (hash: yzH1M2v1GGWQRBkb4bWaRfefbh3n4eH1xoy+GhWge5A=) 29: wYxMdXSUEDjU1Cv3_j8xQDvi1yg.roa (hash: WyaQu0KrdFh/xZS6g5xHvbw77OL9Wai9qSXwo4Oty1g=) 30: xeXsIqRyNQ8tCJjLiS_SWkibat0.roa (hash: JByqNQHgtIum6mQVh/2h0Z7sUMkRsbp23RZvkf78Q8U=) 31: zA8L3Jvv9SEACC4CD6D8SPMP2Sk.roa (hash: Tngvw9PMaTEzEGc2VaqgRFM8azKZIG82ga5hio7GHN8=) Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/cd/6168d7-946c-4574-91ea-82ad14555eaa/1/mCz4CcDj6OVVL50N0uJ-DdLY2r4.crl rsync://rpki.ripe.net/repository/DEFAULT/cd/6168d7-946c-4574-91ea-82ad14555eaa/1/mCz4CcDj6OVVL50N0uJ-DdLY2r4.mft rsync://rpki.ripe.net/repository/DEFAULT/mCz4CcDj6OVVL50N0uJ-DdLY2r4.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Tue 22 Jul 2025 14:00:38 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:98:2d:49:57:ec:0f:a7:d8:dd:4f:c3:98:b4:e2:44:9e:11 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=982cf809c0e3e8e5552f9d0dd2e27e0dd2d8dabe Validity Not Before: Jul 21 14:00:38 2025 GMT Not After : Jul 22 14:00:38 2025 GMT Subject: CN=29e8d9d6636366153d34812f374f35452dac1b79 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:9b:33:09:2b:3e:2c:3d:2f:50:51:7f:ae:3b:c0: bf:78:7c:d6:d6:c4:be:df:2c:ca:90:7f:d8:c3:68: f3:78:0e:9a:30:d9:e6:05:3b:69:75:99:54:28:83: 7a:62:4a:2f:a5:dd:d3:e0:a3:8b:49:46:81:82:b6: 16:31:39:de:5e:f6:c0:d6:ab:b6:5e:6c:29:b0:56: ca:20:c5:dc:f6:28:27:b3:b2:59:0b:07:cc:0d:c0: 75:93:b7:ae:5a:1e:9d:68:cc:0e:5e:0a:3b:77:c3: 6e:fd:bc:de:a5:bc:8f:0b:75:f8:90:65:11:40:d7: 4a:5d:c5:e9:97:f1:17:5e:1c:8c:20:ad:7a:f0:f7: 38:5a:68:77:f7:87:5c:5e:e5:6a:26:24:83:37:53: 68:04:2c:04:f4:e0:95:d0:65:7d:ad:f9:45:1c:3b: bc:90:dd:9a:9c:fb:b0:a8:4d:1a:30:e3:12:7e:7f: 0b:23:2e:7d:bf:8e:25:54:75:36:7a:e9:e8:9c:10: 90:00:27:bb:07:c0:28:c7:82:11:be:04:48:32:9c: fc:e8:4b:0b:97:f5:19:3b:2e:58:34:33:ff:4c:fe: 9d:63:0e:00:f4:9f:d1:cc:ca:8b:c7:02:c6:07:2f: 5c:2f:15:f5:8a:ab:94:c9:9f:ad:b0:4e:a7:1e:d6: 0b:b3 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 29:E8:D9:D6:63:63:66:15:3D:34:81:2F:37:4F:35:45:2D:AC:1B:79 X509v3 Authority Key Identifier: keyid:98:2C:F8:09:C0:E3:E8:E5:55:2F:9D:0D:D2:E2:7E:0D:D2:D8:DA:BE X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/mCz4CcDj6OVVL50N0uJ-DdLY2r4.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/cd/6168d7-946c-4574-91ea-82ad14555eaa/1/mCz4CcDj6OVVL50N0uJ-DdLY2r4.mft X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/cd/6168d7-946c-4574-91ea-82ad14555eaa/1/mCz4CcDj6OVVL50N0uJ-DdLY2r4.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 61:23:4f:ba:d7:0b:47:df:f1:66:0a:b2:96:fa:7a:5f:d8:96: ec:78:fb:13:93:e1:94:71:38:d7:90:20:0e:1b:0d:e9:3b:d7: 6e:93:63:6e:fe:d8:50:32:0f:cc:4e:90:77:55:83:b1:9a:47: 49:d6:bb:d0:5c:aa:09:45:0c:d2:22:61:7d:49:f8:56:13:6e: 18:d0:b0:22:d8:27:c2:de:85:35:85:75:77:e0:24:60:d2:16: e7:56:08:41:12:20:64:c1:32:6f:2c:4a:56:66:e5:4e:0f:27: 97:39:e3:b8:bf:2c:12:61:df:8c:e2:e1:fe:3f:a7:d5:d6:c8: cb:43:48:f2:93:5d:a0:41:6a:4f:1f:49:0a:1a:07:40:d9:e8: ff:d1:9f:a5:bd:65:57:2a:cf:2b:1e:13:bb:fc:d9:0d:5e:04: 19:f4:67:25:4b:46:84:8f:a8:1f:dd:e5:d5:d9:87:8d:75:39: d5:62:37:3e:81:a5:df:a7:86:56:ae:64:ac:fb:a0:25:60:e0: a5:d0:9d:a0:e8:ce:d2:77:cf:a2:4c:72:62:58:8c:91:62:d6: 52:a3:d9:34:09:93:c9:de:3c:16:43:84:96:2b:87:00:a2:11: b4:97:39:aa:ce:40:44:c7:2d:c6:ad:5d:32:93:79:87:7e:a3: 9f:1c:51:0d -----BEGIN CERTIFICATE----- MIIFFjCCA/6gAwIBAgISAZgtSVfsD6fY3U/DmLTiRJ4RMA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKDk4MmNmODA5YzBlM2U4ZTU1NTJmOWQwZGQyZTI3ZTBkZDJk OGRhYmUwHhcNMjUwNzIxMTQwMDM4WhcNMjUwNzIyMTQwMDM4WjAzMTEwLwYDVQQD EygyOWU4ZDlkNjYzNjM2NjE1M2QzNDgxMmYzNzRmMzU0NTJkYWMxYjc5MIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAmzMJKz4sPS9QUX+uO8C/eHzW1sS+ 3yzKkH/Yw2jzeA6aMNnmBTtpdZlUKIN6Ykovpd3T4KOLSUaBgrYWMTneXvbA1qu2 XmwpsFbKIMXc9igns7JZCwfMDcB1k7euWh6daMwOXgo7d8Nu/bzepbyPC3X4kGUR QNdKXcXpl/EXXhyMIK168Pc4Wmh394dcXuVqJiSDN1NoBCwE9OCV0GV9rflFHDu8 kN2anPuwqE0aMOMSfn8LIy59v44lVHU2eunonBCQACe7B8Aox4IRvgRIMpz86EsL l/UZOy5YNDP/TP6dYw4A9J/RzMqLxwLGBy9cLxX1iquUyZ+tsE6nHtYLswIDAQAB o4ICIjCCAh4wHQYDVR0OBBYEFCno2dZjY2YVPTSBLzdPNUUtrBt5MB8GA1UdIwQY MBaAFJgs+AnA4+jlVS+dDdLifg3S2Nq+MA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvbUN6NENjRGo2T1ZWTDUwTjB1Si1EZExZMnI0LmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC9jZC82MTY4ZDctOTQ2Yy00NTc0LTkxZWEt ODJhZDE0NTU1ZWFhLzEvbUN6NENjRGo2T1ZWTDUwTjB1Si1EZExZMnI0Lm1mdDCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC9jZC82MTY4ZDctOTQ2Yy00NTc0LTkxZWEtODJhZDE0NTU1ZWFh LzEvbUN6NENjRGo2T1ZWTDUwTjB1Si1EZExZMnI0LmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAYSNPutcL R9/xZgqylvp6X9iW7Hj7E5PhlHE415AgDhsN6TvXbpNjbv7YUDIPzE6Qd1WDsZpH Sda70FyqCUUM0iJhfUn4VhNuGNCwItgnwt6FNYV1d+AkYNIW51YIQRIgZMEybyxK VmblTg8nlznjuL8sEmHfjOLh/j+n1dbIy0NI8pNdoEFqTx9JChoHQNno/9Gfpb1l VyrPKx4Tu/zZDV4EGfRnJUtGhI+oH93l1dmHjXU51WI3PoGl36eGVq5krPugJWDg pdCdoOjO0nfPokxyYliMkWLWUqPZNAmTyd48FkOEliuHAKIRtJc5qs5ARMctxq1d MpN5h36jnxxRDQ== -----END CERTIFICATE-----Generated at Mon Jul 21 18:08:30 2025 by rpki-client