$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/db/8e07dd-4fe5-4820-bcbe-5dd6e22ebab0/1/SAXxfC1xM9La06jffjUxXjfvXa8.mft File: SAXxfC1xM9La06jffjUxXjfvXa8.mft (raw, json) Hash identifier: Ur8Y1e99KSw8twnEkxucsPoPGwSDXDn/yOKwC4Y+Sb8= Subject key identifier: 91:34:CF:DC:A4:D3:65:1F:1D:2E:D9:CF:42:9B:76:F8:F5:CF:46:95 Authority key identifier: 48:05:F1:7C:2D:71:33:D2:DA:D3:A8:DF:7E:35:31:5E:37:EF:5D:AF Certificate issuer: /CN=4805f17c2d7133d2dad3a8df7e35315e37ef5daf Certificate serial: 01983B04F8F3E243BD29D4AD19F138D31C2C Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/SAXxfC1xM9La06jffjUxXjfvXa8.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/db/8e07dd-4fe5-4820-bcbe-5dd6e22ebab0/1/SAXxfC1xM9La06jffjUxXjfvXa8.mft Manifest number: 16A2 Signing time: Thu 24 Jul 2025 06:00:38 +0000 Manifest this update: Thu 24 Jul 2025 06:00:38 +0000 Manifest next update: Fri 25 Jul 2025 06:00:38 +0000 Files and hashes: 1: 0Ku6hM-uBGPbIB_elC1-63mAMPQ.roa (hash: COta24brNXG7Hg0yqxT50IIeRD/EU1T0z8f77M/W0Yo=) 2: 0r24pIQSTUD5N5L07GOWGFKPpV8.roa (hash: trXkO9svjCxRC078/qaWkwZVcRw/r/RbNzaK05elAEs=) 3: 1-W34Y2-6ZjemXz3iWQp8JT5r4fo.roa (hash: jNjeNOA7d8RyKrYy4kXSP0ufCj18S8yCDg4Nofw0dAY=) 4: EkFoJFaGBhEamXzDueIrcP26LBc.roa (hash: PQO2ZDlIaJ7jCYwx8vtlK6hg74IbDpuCQQjGUuzjVhU=) 5: KQ1oNR09mKgd5ku7SR1U_e9V9fQ.roa (hash: cs83TD53Tvlf/W2SbQnH3f+S/haNzyXJayHuIXfao20=) 6: R3xayF97XK3f6WN53ZX5sxR54jo.roa (hash: 3PZ+HViUokDQMZxJmaE1uzBy+pQRq/4nLFWrCe3sMjU=) 7: R4JA4ZrzZRT6P7L7s0XA8tBlvow.roa (hash: UZWxFLVEGSwKY6r7vPrE+HW6Om5TTOD3+yQvi0X4C9A=) 8: SAXxfC1xM9La06jffjUxXjfvXa8.crl (hash: /X6ULUoc1RCEhNZDYKEhCqiccRmZl58tHF+70j4rKyQ=) 9: U9JKjRKHCxdIsPDNQPOR88OqmCg.roa (hash: lajLKbejzI40eVa7BHAS4fdbPpPskr27n+GpeXAUSBk=) 10: V5zbutGfbh5lgD5tOB55BSZL6mM.roa (hash: 8dfbuUOKEzC/ptg0//A1zNKfTmzKWKS3nTLCemG3GRo=) 11: VgwcNuoBbQF8vGnu87-98unWzYI.roa (hash: xzpL3I9r8p4R1FCkPrlQ5XYcS0wswEmNqu/eM1IOMwU=) 12: WclbZXzoRolOPnP1txTGa2N2wfw.roa (hash: bkUop8nfZL+I8FoNjqYPn2viT45YyNvKLtfeDigIXyI=) 13: Zj4JwFMN6H5YeHt4cvNXltyCdE4.roa (hash: CWOsIZG4hIEMhn5XzXUXZbhFt0Yejg6in7qKXYgJegA=) 14: _yzn5oDusX2X0X7GKZBcg6brbLE.roa (hash: 3Zb9XtEnFpg2ZnedyDM6Fmzs7qviCkwqPZ3m1FKhSy0=) 15: b81Y2U7ou3gE7qnhOIrH6wzIwHE.roa (hash: evIbesfBnQDx6fK9X24u14Wb1m4RUjoEvZ0+mfP0N8E=) 16: bZniM2QlgkpTXR-OwANLXtwZtPE.roa (hash: 1uGphNb2cimTL54FLmsjWSi2OJxcMRM81uY8UPnrcpo=) 17: iPxdZuzxvDtlhje1pBxfz_ffoSI.roa (hash: 5nZeFKjMPEJbsRI/uBt0UR440fY87EaeHxRz6CkKzyc=) 18: uE7Yr0mrdBcUX1IW6FuzHWklFWE.roa (hash: Txuv8knFAVKbDTm6XQpLWHHm/zIqEkh3sPLdu38MgYQ=) 19: ulYg4AG1ul90cUDOSHCVqM9kgX0.roa (hash: YyEEkcY+cM/W31h/eE29O/fYkGie+5JT9vHD80X8ftc=) 20: yF60MXomOPXicQ4dVy_gu3Jce0c.roa (hash: 5FKE6qFccFKdKUpBcGBwVGHo07CqDvWyXp8ktMwwG+M=) Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/db/8e07dd-4fe5-4820-bcbe-5dd6e22ebab0/1/SAXxfC1xM9La06jffjUxXjfvXa8.crl rsync://rpki.ripe.net/repository/DEFAULT/db/8e07dd-4fe5-4820-bcbe-5dd6e22ebab0/1/SAXxfC1xM9La06jffjUxXjfvXa8.mft rsync://rpki.ripe.net/repository/DEFAULT/SAXxfC1xM9La06jffjUxXjfvXa8.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Fri 25 Jul 2025 06:00:38 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:98:3b:04:f8:f3:e2:43:bd:29:d4:ad:19:f1:38:d3:1c:2c Signature Algorithm: sha256WithRSAEncryption Issuer: CN=4805f17c2d7133d2dad3a8df7e35315e37ef5daf Validity Not Before: Jul 24 06:00:38 2025 GMT Not After : Jul 25 06:00:38 2025 GMT Subject: CN=9134cfdca4d3651f1d2ed9cf429b76f8f5cf4695 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:e9:c2:7b:5e:10:3c:b7:ea:aa:b4:f8:a9:15:40: 6a:95:98:39:96:60:d0:d1:8a:a8:91:9a:8d:99:d6: 51:0c:b0:84:b5:4c:3e:2d:58:26:24:55:77:b2:07: b0:02:8c:cf:a3:47:ab:ff:19:55:f3:f5:65:f2:72: 38:73:10:4c:33:1a:af:ac:bd:df:92:48:6b:0a:dc: 2c:09:b3:0c:77:6b:e3:ae:12:79:f3:af:4f:50:e1: 8b:7d:8a:77:ed:19:a5:d5:d5:f4:b6:7e:57:83:f1: b8:5e:30:a3:bb:63:8f:10:dc:96:d3:46:81:fa:51: 4b:bb:7e:2c:04:f7:63:97:e1:1c:d8:19:fa:13:d4: 42:9e:ac:f1:65:4d:95:48:72:29:47:74:19:72:0b: 0a:de:ba:67:07:5e:5b:4e:01:c3:82:7a:1b:34:19: 36:57:2a:6e:c6:d3:33:db:e0:08:7e:a3:45:c9:2f: 31:bc:42:0a:91:45:f9:02:c6:53:2f:b3:86:4e:50: 3a:f5:55:e0:9e:67:51:8b:a4:ef:85:bb:89:d4:1c: 29:f7:77:d4:f5:bb:45:07:c0:8e:fe:0d:18:56:dc: a9:4c:41:1c:7d:b0:d1:42:81:e5:58:ce:5e:1b:ea: 42:3c:68:d2:64:c0:22:00:0b:97:22:c0:66:c0:d4: b5:07 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 91:34:CF:DC:A4:D3:65:1F:1D:2E:D9:CF:42:9B:76:F8:F5:CF:46:95 X509v3 Authority Key Identifier: keyid:48:05:F1:7C:2D:71:33:D2:DA:D3:A8:DF:7E:35:31:5E:37:EF:5D:AF X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/SAXxfC1xM9La06jffjUxXjfvXa8.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/db/8e07dd-4fe5-4820-bcbe-5dd6e22ebab0/1/SAXxfC1xM9La06jffjUxXjfvXa8.mft X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/db/8e07dd-4fe5-4820-bcbe-5dd6e22ebab0/1/SAXxfC1xM9La06jffjUxXjfvXa8.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 2e:1b:0e:f3:cf:7c:c2:38:e9:c4:65:09:fd:50:c7:35:05:99: d4:56:83:93:05:b2:1a:19:c6:db:bb:bb:c9:7a:07:17:fe:5b: f7:bf:4d:a8:d1:d6:62:3d:8a:15:f3:b5:91:07:f2:5b:90:de: 85:bc:e0:bb:c7:65:64:31:7a:ae:78:cf:4c:1d:32:8f:1a:0b: 49:da:10:88:e1:6c:d8:54:21:24:a5:57:bc:88:fa:e7:73:a5: fa:2b:03:26:6d:72:46:22:3e:87:56:7c:0a:6a:01:12:84:a7: f7:b4:dd:d8:2c:ce:e7:68:e7:6f:1d:99:13:44:0a:1f:d2:bc: 40:a1:db:d3:b8:8a:16:16:ce:bb:a9:66:0e:3d:5a:d0:06:98: e0:ec:40:4d:06:f1:1b:37:c7:bc:b2:6e:11:98:f1:b7:1e:79: 84:51:23:c6:53:1f:43:b3:76:ba:f5:0d:76:44:9c:fc:7e:00: 03:ef:74:f8:af:64:5e:3e:59:18:46:c9:f1:df:ff:a2:1d:4f: 4d:f2:78:cc:a5:17:e2:c0:21:b0:b3:6b:97:61:44:3c:91:9c: 90:b0:54:67:ef:4d:67:a7:bd:cd:9c:64:b3:65:82:d6:cd:5f: df:74:06:d3:7f:5d:f0:18:4c:99:50:f2:4c:f6:a1:a8:85:5d: 60:bf:9c:9e -----BEGIN CERTIFICATE----- MIIFFjCCA/6gAwIBAgISAZg7BPjz4kO9KdStGfE40xwsMA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKDQ4MDVmMTdjMmQ3MTMzZDJkYWQzYThkZjdlMzUzMTVlMzdl ZjVkYWYwHhcNMjUwNzI0MDYwMDM4WhcNMjUwNzI1MDYwMDM4WjAzMTEwLwYDVQQD Eyg5MTM0Y2ZkY2E0ZDM2NTFmMWQyZWQ5Y2Y0MjliNzZmOGY1Y2Y0Njk1MIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEA6cJ7XhA8t+qqtPipFUBqlZg5lmDQ 0YqokZqNmdZRDLCEtUw+LVgmJFV3sgewAozPo0er/xlV8/Vl8nI4cxBMMxqvrL3f kkhrCtwsCbMMd2vjrhJ5869PUOGLfYp37Rml1dX0tn5Xg/G4XjCju2OPENyW00aB +lFLu34sBPdjl+Ec2Bn6E9RCnqzxZU2VSHIpR3QZcgsK3rpnB15bTgHDgnobNBk2 VypuxtMz2+AIfqNFyS8xvEIKkUX5AsZTL7OGTlA69VXgnmdRi6TvhbuJ1Bwp93fU 9btFB8CO/g0YVtypTEEcfbDRQoHlWM5eG+pCPGjSZMAiAAuXIsBmwNS1BwIDAQAB o4ICIjCCAh4wHQYDVR0OBBYEFJE0z9yk02UfHS7Zz0Kbdvj1z0aVMB8GA1UdIwQY MBaAFEgF8XwtcTPS2tOo3341MV43712vMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvU0FYeGZDMXhNOUxhMDZqZmZqVXhYamZ2WGE4LmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC9kYi84ZTA3ZGQtNGZlNS00ODIwLWJjYmUt NWRkNmUyMmViYWIwLzEvU0FYeGZDMXhNOUxhMDZqZmZqVXhYamZ2WGE4Lm1mdDCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC9kYi84ZTA3ZGQtNGZlNS00ODIwLWJjYmUtNWRkNmUyMmViYWIw LzEvU0FYeGZDMXhNOUxhMDZqZmZqVXhYamZ2WGE4LmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEALhsO8898 wjjpxGUJ/VDHNQWZ1FaDkwWyGhnG27u7yXoHF/5b979NqNHWYj2KFfO1kQfyW5De hbzgu8dlZDF6rnjPTB0yjxoLSdoQiOFs2FQhJKVXvIj653Ol+isDJm1yRiI+h1Z8 CmoBEoSn97Td2CzO52jnbx2ZE0QKH9K8QKHb07iKFhbOu6lmDj1a0AaY4OxATQbx GzfHvLJuEZjxtx55hFEjxlMfQ7N2uvUNdkSc/H4AA+90+K9kXj5ZGEbJ8d//oh1P TfJ4zKUX4sAhsLNrl2FEPJGckLBUZ+9NZ6e9zZxks2WC1s1f33QG039d8BhMmVDy TPahqIVdYL+cng== -----END CERTIFICATE-----Generated at Thu Jul 24 11:57:45 2025 by rpki-client