$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/ed/428815-02b9-4606-b066-65d1567340fd/1/aZHFbxGnFxxhUyOXafVXvroQGC0.mft File: aZHFbxGnFxxhUyOXafVXvroQGC0.mft (raw, json) Hash identifier: 8+zmXVwg8Rln+kt6HSjspvgJQ0VWyK5LOvGsWmtUgCo= Subject key identifier: FD:71:4B:64:91:3E:EF:EF:1B:59:BD:FB:A8:80:79:2E:15:0B:37:AB Authority key identifier: 69:91:C5:6F:11:A7:17:1C:61:53:23:97:69:F5:57:BE:BA:10:18:2D Certificate issuer: /CN=6991c56f11a7171c6153239769f557beba10182d Certificate serial: 01991E4197A9C451F22695B293030A4D0FE8 Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/aZHFbxGnFxxhUyOXafVXvroQGC0.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/ed/428815-02b9-4606-b066-65d1567340fd/1/aZHFbxGnFxxhUyOXafVXvroQGC0.mft Manifest number: 09E1 Signing time: Sat 06 Sep 2025 09:00:39 +0000 Manifest this update: Sat 06 Sep 2025 09:00:39 +0000 Manifest next update: Sun 07 Sep 2025 09:00:39 +0000 Files and hashes: 1: 0ZnUbFz494YaFYXrrvpst6o3vps.roa (hash: OVgxGJmRNj8L4Akc46yjqXSfo2J2UzOCk6rafbqc2OA=) 2: 2R9OObFNaEDkANSZ-coBJRfRpcg.roa (hash: PuD3VMT0jUQBkYxsd7Ldnl6ZWhsJPerlMMUp2zMDWgw=) 3: 3B48XSzrqRQbODZNf87x_kjUhNo.roa (hash: y14T24Ofee6GJVa1mI4/7qxhdq0jl8KEydSAoin8Qhg=) 4: 4Big0S_3eVdxzCi9Q5-ZazqY78k.roa (hash: MZj2ZauIX6SjNg/AhkH3xRZrKv7KoBeknyWj0YQB2/w=) 5: 5KCmcBzgBtGKXXIdhXDGwgQX-Nc.roa (hash: 3MBj03+qouTWcvDDud6sW23ZkQ0DtRDfsHdVwPfcmzA=) 6: BnuRCNG1wcVZgzYhH3AO0QDn6nc.roa (hash: MelnLA0AceokIL7fTEiXdw1iO6Uw+ZhvD5k8pRZYCyE=) 7: GzbjpWWbs-1PqotRsV09E9K9Lz4.roa (hash: DPdOn5R31znLhVjpEt/89hnY5IoUTo1sHiV7ubrKX6Q=) 8: IR0N93wyt194hpjTT9eshHBGwCY.roa (hash: hm8stnovqLivJRd1Zt72YsNy0Lv8colWOGD8fUtYhVw=) 9: Ipr3KewOoeNwtKcMjwWhhMZ4XGk.roa (hash: 3JCwXXZ0yyhMNw7g8hWZGcEbqAf0RiAf0XwSMEKW1/k=) 10: LOqVm4ah0ZAFsNlsFHH6FIaOI2k.roa (hash: oIg9WImuyaH9IIZY4z9xPufl8Pg+NKHoU0mffdLY6gw=) 11: LiReZTb5eM73wM_EtDaxcTNj4Uc.roa (hash: VxzmF2kcB0hEh+Og8NMqll1d/dM5T/PwiOdBSWMF9+w=) 12: NdAX7Rrn7y-KonnG7TF23wCnJFU.roa (hash: 1r3koUbwGBNgbjNaxMGO8L4AUL4EQ4uI3dkO8TUFqEA=) 13: NxKKuEIzsEe5p3RwQBZ8j63Lsc4.roa (hash: mOT2nWmKWDEZ1VeM86bS3Qx+tjUuZhaB/QcxGF5t7y4=) 14: OxLywK9-WD8ykiaZCQkg8aVcCjY.roa (hash: iXcObwE6BigOurV7fYooDfgc8zyVyQ+nTBGFkUMqd08=) 15: PGgQA4lq16a2A-WgJ_ri64lGsRE.roa (hash: Q6QSZCDfq8qNTpDtgedLOR/KuDwL2RUnCSAMtaotxEg=) 16: Qjyx-VfeYJzhQ64OO3GeexbDjpo.roa (hash: rj+IOmmZrJFH/pGr6IiDQ9M39qURzS3Ek11UjeILldM=) 17: US4urt8SGYSwI0nrEmSfY23OtMo.roa (hash: WGkLaX+bRS10FeqEfnkw5XXJQ/dEDlUw6wG2fIeU7p0=) 18: UbTczMXH1DXAp6Y4rzAMo0-vjMY.roa (hash: /5fKT3FRRFYWFa0s/Qas8JVmnywA6hIsUQs3iIAfCSc=) 19: V9MunteQeVICf2ICr71lxQH0Fho.roa (hash: eyd5tdJUMOhtnb51XXGrnbSnVth9KptYyQQSksmwF/U=) 20: Xk5tmPIosW8yWOoBE4vC97DKTmI.roa (hash: n+WSuCldCqJF0J/zIrAAsy8W1NaktFT44ojEQwTF8/A=) 21: Y8kVBgTTg77JqceZAx8eeOkuigc.roa (hash: IFdbCND0Hr2WHlrHfsppyOn82/Cdt+j+/f3Y4nRrJM0=) 22: a75rOpjpaPa3RoX99f00xHpyQQk.roa (hash: pBUN5kZ0kemGdrUfIg4JmP66bIvq4vhJcqUtu9xb4uk=) 23: aZHFbxGnFxxhUyOXafVXvroQGC0.crl (hash: fN91Mb7NEemZiNk7DhJTQ1uXOGgpuMh7NRdIjrQ8n78=) 24: b6zYeEjl67JznhuFIRxDThbDp4A.roa (hash: f6N56pEzvl/vOG44ZWp29ysqFV1nObk7G8WN7kevpqI=) 25: cxoHocYfpOLbmWm9vZdeuztX1mM.roa (hash: n6b1cBbTDRO9vvH+MGVzzJhRTNkNJBd2SHTwJhIHGMM=) 26: eSDGXftwPU-DhjYptcEbu97gSEU.roa (hash: 298/MebJAxJVNu0RXxXXDu+aRB+xIjmk2sL/OavJmSI=) 27: gt8flTD_zJibygdA8dyeuF1l6X4.roa (hash: aubI8iptMgWbWF9zUBH11nChoCQulzBZponMqronaCU=) 28: h8jROV5bQoENdkPdOHcG_4qWdVY.roa (hash: glJfimln9Noz47bXSrY5ZJrPDNDjmCoZp6sAhb5XR58=) 29: hd5E-IfEq2TxeShk5Gaec24hUKw.roa (hash: gaGe3UUy/HO5uK3mGo4Jfk2cwdMRK/X0E0rPiNSPI88=) 30: mqFZ_6poK042LnYArfefb64YNZQ.roa (hash: z+bsA4ZcDvX2JPMlTZwVkKpOQPowKJ3wnhxnQ/pVUXU=) 31: r72MZC6TP9HFp69hVblH2z8aLDw.roa (hash: 60a58tQ14AuL0odo9HIWNyGRLIp51J3Om0fY3oCEnBg=) 32: wyYtlqseGv6gXQkCTy30WJ-H2eE.roa (hash: 0/U6xWPb4mk6ryPiHh563SCZx0Tww+D7flQW+39Amak=) Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/ed/428815-02b9-4606-b066-65d1567340fd/1/aZHFbxGnFxxhUyOXafVXvroQGC0.crl rsync://rpki.ripe.net/repository/DEFAULT/ed/428815-02b9-4606-b066-65d1567340fd/1/aZHFbxGnFxxhUyOXafVXvroQGC0.mft rsync://rpki.ripe.net/repository/DEFAULT/aZHFbxGnFxxhUyOXafVXvroQGC0.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Sun 07 Sep 2025 04:00:23 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:99:1e:41:97:a9:c4:51:f2:26:95:b2:93:03:0a:4d:0f:e8 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=6991c56f11a7171c6153239769f557beba10182d Validity Not Before: Sep 6 09:00:39 2025 GMT Not After : Sep 7 09:00:39 2025 GMT Subject: CN=fd714b64913eefef1b59bdfba880792e150b37ab Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:b1:15:79:71:dc:86:f3:74:8a:1f:da:e0:b8:8b: ba:47:94:a4:d3:ef:a9:6d:53:27:8f:03:86:ba:7a: ea:dc:25:bc:ba:4c:87:0f:4c:52:3b:17:67:10:13: 75:73:3d:df:ba:8f:93:d6:bc:cc:eb:49:93:bf:7d: 07:fe:88:40:8c:c8:87:84:6a:36:f6:0a:2c:fe:65: 9b:5d:7d:3f:95:71:bd:61:c0:bf:26:44:af:9f:d3: 51:a9:76:66:cf:c0:24:8b:1e:30:10:de:04:da:80: 67:82:46:b8:28:3b:63:35:24:3a:9d:58:52:59:6c: 4d:b6:21:0f:dc:21:79:fa:fc:8a:c9:2d:51:68:04: aa:7f:fe:58:ef:d0:b8:2b:1e:00:34:24:ed:dd:0e: fd:52:35:03:d1:2d:1a:f0:f6:a5:0b:1d:ae:e8:ff: 54:8b:e5:d6:99:0d:f1:de:68:e8:58:39:76:0b:8d: 31:9d:59:0e:ca:71:8f:ca:88:17:e2:1e:8d:bb:ac: 45:b4:7a:21:a8:8a:16:f4:b9:25:a9:24:70:dd:c6: af:0d:c2:8c:c9:90:bd:ab:38:44:b0:a0:39:eb:1d: 9c:fc:79:4f:74:3b:8b:cf:14:d9:bb:75:12:e8:d4: 79:f0:b2:57:f5:1c:c5:73:40:57:99:f8:86:ca:8e: 4b:45 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: FD:71:4B:64:91:3E:EF:EF:1B:59:BD:FB:A8:80:79:2E:15:0B:37:AB X509v3 Authority Key Identifier: keyid:69:91:C5:6F:11:A7:17:1C:61:53:23:97:69:F5:57:BE:BA:10:18:2D X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/aZHFbxGnFxxhUyOXafVXvroQGC0.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/ed/428815-02b9-4606-b066-65d1567340fd/1/aZHFbxGnFxxhUyOXafVXvroQGC0.mft X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/ed/428815-02b9-4606-b066-65d1567340fd/1/aZHFbxGnFxxhUyOXafVXvroQGC0.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 70:b4:9f:be:a2:f4:c5:16:39:0f:db:1d:8b:9d:38:41:80:e7: 16:1b:4e:77:73:fe:40:36:fc:f0:8e:f6:b5:44:93:84:65:96: 9a:5a:54:d3:e3:39:e3:66:13:72:bd:a0:11:0d:6f:11:52:3d: 6e:05:b0:92:87:e4:b0:67:79:89:99:66:e8:74:66:1f:b8:09: de:68:ed:9c:67:13:6a:c7:f7:21:bb:a4:42:eb:75:06:64:3d: 66:e5:03:f9:18:3b:05:ea:f0:5b:f7:62:41:5b:9d:fc:54:a0: 40:84:b4:72:d2:a7:86:b2:b2:ba:42:49:63:62:9f:82:54:60: 60:70:21:b0:1a:91:69:0d:4b:9b:c2:4a:de:d0:d8:15:2b:4a: 1e:7b:60:6e:ed:fb:f9:fa:76:e1:c5:a9:9a:54:a3:a9:78:2b: 68:f6:d3:34:5e:99:ed:80:e2:ee:1a:80:f4:99:94:a8:b3:bc: 70:c6:3e:7b:53:8c:c0:36:f5:a6:ca:2c:11:59:19:f1:9a:b5: 67:50:15:f0:0b:12:d2:67:b0:38:90:45:3f:e5:12:ce:50:51: dc:88:a5:fc:a1:9d:4c:d4:8b:0b:d3:ea:49:7b:45:ba:ae:44: 79:a4:ad:04:1c:78:51:f0:fd:0d:f8:77:8b:f3:48:f1:5f:b2: 9e:ca:79:0d -----BEGIN CERTIFICATE----- MIIFFjCCA/6gAwIBAgISAZkeQZepxFHyJpWykwMKTQ/oMA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKDY5OTFjNTZmMTFhNzE3MWM2MTUzMjM5NzY5ZjU1N2JlYmEx MDE4MmQwHhcNMjUwOTA2MDkwMDM5WhcNMjUwOTA3MDkwMDM5WjAzMTEwLwYDVQQD EyhmZDcxNGI2NDkxM2VlZmVmMWI1OWJkZmJhODgwNzkyZTE1MGIzN2FiMIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAsRV5cdyG83SKH9rguIu6R5Sk0++p bVMnjwOGunrq3CW8ukyHD0xSOxdnEBN1cz3fuo+T1rzM60mTv30H/ohAjMiHhGo2 9gos/mWbXX0/lXG9YcC/JkSvn9NRqXZmz8Akix4wEN4E2oBngka4KDtjNSQ6nVhS WWxNtiEP3CF5+vyKyS1RaASqf/5Y79C4Kx4ANCTt3Q79UjUD0S0a8PalCx2u6P9U i+XWmQ3x3mjoWDl2C40xnVkOynGPyogX4h6Nu6xFtHohqIoW9LklqSRw3cavDcKM yZC9qzhEsKA56x2c/HlPdDuLzxTZu3US6NR58LJX9RzFc0BXmfiGyo5LRQIDAQAB o4ICIjCCAh4wHQYDVR0OBBYEFP1xS2SRPu/vG1m9+6iAeS4VCzerMB8GA1UdIwQY MBaAFGmRxW8RpxccYVMjl2n1V766EBgtMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvYVpIRmJ4R25GeHhoVXlPWGFmVlh2cm9RR0MwLmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC9lZC80Mjg4MTUtMDJiOS00NjA2LWIwNjYt NjVkMTU2NzM0MGZkLzEvYVpIRmJ4R25GeHhoVXlPWGFmVlh2cm9RR0MwLm1mdDCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC9lZC80Mjg4MTUtMDJiOS00NjA2LWIwNjYtNjVkMTU2NzM0MGZk LzEvYVpIRmJ4R25GeHhoVXlPWGFmVlh2cm9RR0MwLmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAcLSfvqL0 xRY5D9sdi504QYDnFhtOd3P+QDb88I72tUSThGWWmlpU0+M542YTcr2gEQ1vEVI9 bgWwkofksGd5iZlm6HRmH7gJ3mjtnGcTasf3IbukQut1BmQ9ZuUD+Rg7BerwW/di QVud/FSgQIS0ctKnhrKyukJJY2KfglRgYHAhsBqRaQ1Lm8JK3tDYFStKHntgbu37 +fp24cWpmlSjqXgraPbTNF6Z7YDi7hqA9JmUqLO8cMY+e1OMwDb1psosEVkZ8Zq1 Z1AV8AsS0mewOJBFP+USzlBR3Iil/KGdTNSLC9PqSXtFuq5EeaStBBx4UfD9Dfh3 i/NI8V+ynsp5DQ== -----END CERTIFICATE-----Generated at Sat Sep 6 13:36:00 2025 by rpki-client