$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/09/7ba1b1-5562-4a32-9f5d-14d238527835/1/C047O4QkIliGMULtOhl5LZfLvHQ.mft File: C047O4QkIliGMULtOhl5LZfLvHQ.mft (raw, json) Hash identifier: wcJTpNmFPwqmxMEnlcC5IOq6X8GICupHfAGNbPW3Zh0= Subject key identifier: B0:A5:E5:16:77:64:A6:76:A8:66:FE:8B:86:36:AE:05:14:89:BD:B9 Authority key identifier: 0B:4E:3B:3B:84:24:22:58:86:31:42:ED:3A:19:79:2D:97:CB:BC:74 Certificate issuer: /CN=0b4e3b3b84242258863142ed3a19792d97cbbc74 Certificate serial: 0199255633F461E978416C832012FEB40053 Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/C047O4QkIliGMULtOhl5LZfLvHQ.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/09/7ba1b1-5562-4a32-9f5d-14d238527835/1/C047O4QkIliGMULtOhl5LZfLvHQ.mft Manifest number: 034E Signing time: Sun 07 Sep 2025 18:00:30 +0000 Manifest this update: Sun 07 Sep 2025 18:00:30 +0000 Manifest next update: Mon 08 Sep 2025 18:00:30 +0000 Files and hashes: 1: 1-l_gre_pxhYS4_zZwDxZG1Nt_5c.roa (hash: 79+LUQppQGCR1ma6gkDs/MxaDYgg8iUK7GVvWKXvzJ8=) 2: 4EVIucA70gYtRBC_kvd8S_jO4G4.roa (hash: f24fNYbERcDJzGGGVxLcXRg46QfyX7NJWLWSxrMNmcw=) 3: 5YXlOnC7KCTj7UzlNZlOxZvAU2A.roa (hash: T7MnY/lemIb/NM4Aol+M9yTWYUELeSP5U5PUK8QCRLE=) 4: 5jJR8ex_Cu2DpLymyUyPZOMyOkE.roa (hash: xzEHQ5rCOad65DlaTD/0zOgecwAYSd4+GjZ0k61Ou6I=) 5: 6xBMykXleXyosV01BLEJTU6ypG8.roa (hash: ZdidGgqZmV19VuoUDkEoHJw8nogOkry2PBFmQAw+osI=) 6: C047O4QkIliGMULtOhl5LZfLvHQ.crl (hash: LBMoV1Tk2lDyuzjKXZblc4+BAmyBPLMOweerc82/QMM=) 7: DOAEIvCj-u7rs38MBt2OY5TO5ck.roa (hash: L2KlUD/3hwbtTHy39+u/XA4u/e4Wc7hTiaNnBwb1Xl8=) 8: E0upJVXmvrb9QB1vHUoxxOXLw38.roa (hash: 4mhxGqIUoY4Bc+dX0kK4RcxfBAsMjNcaP7xXT7MwJUE=) 9: EvZmdpYLd03WERL_L0i0mrtj944.roa (hash: CV2qEuFjtfL/Sdsin89UXRGI8h47pjbkcQWbmiCWOHY=) 10: H49hyQPEQJXxJVi2iR8A2ADQ41U.roa (hash: eqi7i//uHcpOg1OfB0kupkpo9kTQKxZE6a6NNvU+Pyg=) 11: QqRdYAKP11yK_Y5Yoe1GlCLvPIM.roa (hash: B0QgrQfgkvXm7vAQLsl/pTmN0f26n576ETmzI38WdjE=) 12: Tv3eHkTibu1-NKazXj-AMkMj7Sw.roa (hash: lHAqhVPifaQjD9rLTD+uDdEniFd0R32cYJ3zWnuqKHM=) 13: UoCD-Jw-d36aunkLRuz6ly1x2v0.roa (hash: IL5ej7uIEFxvULFt7FLIix+P1FPdxsPj2Yas43tG1o8=) 14: WYDhKvX3XAA22u3zmx5t7_eZGTE.roa (hash: pU6LgSkwwG4ehzshKxsB7E/uLzJdORsNAagXHUzBDD4=) 15: b7g_AfGKRKl1uxe-BoiQM3sl0nw.roa (hash: Zf9ZuQPGxN3TX6S4uzmoIy9WChIwMZZm6ZNHezb6N+U=) 16: bCaBS4aQHjuaa_tTVMTRXq8OR_U.roa (hash: 7H4q9uVHSlMkwQO5xRA3Q4nmZoDkIn1SJmtZoSSXixQ=) 17: bsbpbOfEUspT2FSFU7Dpjg5QFsw.roa (hash: 1S0gGuFvbVkAU0skMefR3m5Pq9v5mIgplTKpElL9/XI=) 18: i9pP0UdC60SIkPjAyVnRvnkLQpI.roa (hash: DCLA36TFrAK5MuagUyc5DT4JGQhrH1BUGZII4pznSfI=) 19: lzUrfdjvi4X0daNPvReXYlaxfUs.roa (hash: mmPPsLggwrEErlARtsPqmojwc7jNfBJKDlKr0vM/KnA=) 20: mrriTsp_r84VvXOZ9vwCDiafNfA.roa (hash: 237ftlrT6P/fqAsRok2Wq3N6bqs/PXVVGhXC7gyjJzY=) 21: qa2CW4uODzDkm2CmPACzVMfywlo.roa (hash: hm7X8GWW08mhXHAmgZF26ZoPtjwf8VScQbQBIGqBTN0=) 22: sbkxRvSrfQGNdpGANqUogURHroU.roa (hash: GVO8i7AC/aFii+I0dhy+QGbxHH4AqRNBV/o41DJJYK4=) 23: tra90j-TkDoNhw2jYUOuCLQtLHQ.roa (hash: rMHYa+7snR9OTOD/IZ29XHnehX6LzLjK9r4pNKm+rGM=) 24: uuTcIhmMVylXKoo0d8I18SaHjWU.roa (hash: a8ZKg1ASt06tQrhILg7SaB6+2r8ufbJSPrndEQoQ7X4=) 25: wPGbhSOTVO3W6IHlbrSy3bcGNLc.roa (hash: JCi40r9Uzz4ur2p29IZ7AQpEQaCcaPWxmQf31vmLka0=) Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/09/7ba1b1-5562-4a32-9f5d-14d238527835/1/C047O4QkIliGMULtOhl5LZfLvHQ.crl rsync://rpki.ripe.net/repository/DEFAULT/09/7ba1b1-5562-4a32-9f5d-14d238527835/1/C047O4QkIliGMULtOhl5LZfLvHQ.mft rsync://rpki.ripe.net/repository/DEFAULT/C047O4QkIliGMULtOhl5LZfLvHQ.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Mon 08 Sep 2025 16:00:23 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:99:25:56:33:f4:61:e9:78:41:6c:83:20:12:fe:b4:00:53 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=0b4e3b3b84242258863142ed3a19792d97cbbc74 Validity Not Before: Sep 7 18:00:30 2025 GMT Not After : Sep 8 18:00:30 2025 GMT Subject: CN=b0a5e5167764a676a866fe8b8636ae051489bdb9 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:ab:3f:03:13:c1:06:73:d8:c8:2f:a2:b1:46:7f: 47:3f:ee:1b:8f:bb:de:81:3f:e6:b8:e4:08:d9:02: c7:39:f2:42:91:94:e6:4e:78:83:37:8e:7d:96:aa: ad:cc:23:1d:22:61:cb:4f:f4:d6:17:ca:a6:3b:1d: e7:21:1e:cf:b4:af:3e:ce:41:f8:d9:65:1b:19:5a: 02:45:22:54:0e:58:14:f7:3a:91:3a:bd:27:06:32: 4b:e7:01:7d:2a:ae:e4:f9:72:c7:65:e4:df:c2:13: 1f:bf:6a:70:84:ef:a0:8d:e7:ea:c6:c2:2c:41:8d: 0f:80:a9:e9:78:04:92:56:d2:14:7e:36:fa:bd:26: 96:3a:f4:fe:7a:d0:b9:2f:dd:fb:93:cc:4a:78:79: b5:53:8d:1a:04:69:c1:bc:2c:0c:60:15:7c:f2:10: a1:06:80:33:03:16:56:c1:75:f0:9b:11:02:7c:d3: 6a:92:07:d8:bf:ba:50:cc:e5:1f:ac:6d:79:95:4e: 2e:27:24:1f:2b:6b:c0:4b:c7:25:cc:f4:29:ce:8f: 5c:dd:aa:69:1b:41:c4:31:96:fb:ae:69:10:16:7e: b3:5a:18:a4:ab:88:b5:a9:ec:ee:07:b4:5a:38:78: bc:80:7d:43:d8:56:46:08:7f:3a:51:92:ea:79:ca: 74:25 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: B0:A5:E5:16:77:64:A6:76:A8:66:FE:8B:86:36:AE:05:14:89:BD:B9 X509v3 Authority Key Identifier: keyid:0B:4E:3B:3B:84:24:22:58:86:31:42:ED:3A:19:79:2D:97:CB:BC:74 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/C047O4QkIliGMULtOhl5LZfLvHQ.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/09/7ba1b1-5562-4a32-9f5d-14d238527835/1/C047O4QkIliGMULtOhl5LZfLvHQ.mft X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/09/7ba1b1-5562-4a32-9f5d-14d238527835/1/C047O4QkIliGMULtOhl5LZfLvHQ.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 6b:95:e0:86:39:cd:dc:4a:de:77:bb:ee:1d:a7:94:97:47:fd: ea:9a:2e:39:56:44:25:c8:3d:96:0c:d6:a6:63:a0:aa:54:c2: bf:a6:80:95:85:a8:ff:6f:b5:66:8f:4c:d9:9c:c8:25:9e:69: 0a:dd:b8:43:55:58:fe:90:61:83:1c:a9:cd:87:d2:ff:b5:b0: 9d:20:e5:e9:33:51:52:db:64:ad:09:51:88:25:56:c3:a1:c3: ec:5e:70:f4:df:96:7d:a0:38:b6:7c:66:3b:45:9c:95:cf:42: fe:a8:41:73:e2:08:3a:7b:cc:e1:89:7f:04:ed:90:a9:54:d6: 49:e0:fb:9c:3c:d3:cf:a0:c5:f4:c6:2f:83:ae:a9:74:91:92: cb:32:96:63:6a:b1:e7:53:90:d0:1a:86:40:97:9d:49:bf:1d: 5d:9a:96:a3:0a:e7:49:40:04:c2:e0:00:6f:dd:65:dd:71:26: f3:f1:f3:42:f1:f4:27:cf:09:de:cc:43:c2:5b:92:71:8e:7c: fd:95:30:07:5d:36:3f:ac:11:7d:39:19:dd:14:9d:20:24:52: 0a:50:83:43:dd:40:01:9a:03:61:c3:83:d5:4f:f2:6a:4f:99: 6c:1d:90:93:45:08:6d:45:06:dc:c3:3a:8b:e7:49:b4:4c:00: a7:a7:9d:1e -----BEGIN CERTIFICATE----- MIIFFjCCA/6gAwIBAgISAZklVjP0Yel4QWyDIBL+tABTMA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKDBiNGUzYjNiODQyNDIyNTg4NjMxNDJlZDNhMTk3OTJkOTdj YmJjNzQwHhcNMjUwOTA3MTgwMDMwWhcNMjUwOTA4MTgwMDMwWjAzMTEwLwYDVQQD EyhiMGE1ZTUxNjc3NjRhNjc2YTg2NmZlOGI4NjM2YWUwNTE0ODliZGI5MIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAqz8DE8EGc9jIL6KxRn9HP+4bj7ve gT/muOQI2QLHOfJCkZTmTniDN459lqqtzCMdImHLT/TWF8qmOx3nIR7PtK8+zkH4 2WUbGVoCRSJUDlgU9zqROr0nBjJL5wF9Kq7k+XLHZeTfwhMfv2pwhO+gjefqxsIs QY0PgKnpeASSVtIUfjb6vSaWOvT+etC5L937k8xKeHm1U40aBGnBvCwMYBV88hCh BoAzAxZWwXXwmxECfNNqkgfYv7pQzOUfrG15lU4uJyQfK2vAS8clzPQpzo9c3app G0HEMZb7rmkQFn6zWhikq4i1qezuB7RaOHi8gH1D2FZGCH86UZLqecp0JQIDAQAB o4ICIjCCAh4wHQYDVR0OBBYEFLCl5RZ3ZKZ2qGb+i4Y2rgUUib25MB8GA1UdIwQY MBaAFAtOOzuEJCJYhjFC7ToZeS2Xy7x0MA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvQzA0N080UWtJbGlHTVVMdE9obDVMWmZMdkhRLmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC8wOS83YmExYjEtNTU2Mi00YTMyLTlmNWQt MTRkMjM4NTI3ODM1LzEvQzA0N080UWtJbGlHTVVMdE9obDVMWmZMdkhRLm1mdDCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC8wOS83YmExYjEtNTU2Mi00YTMyLTlmNWQtMTRkMjM4NTI3ODM1 LzEvQzA0N080UWtJbGlHTVVMdE9obDVMWmZMdkhRLmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAa5XghjnN 3Ered7vuHaeUl0f96pouOVZEJcg9lgzWpmOgqlTCv6aAlYWo/2+1Zo9M2ZzIJZ5p Ct24Q1VY/pBhgxypzYfS/7WwnSDl6TNRUttkrQlRiCVWw6HD7F5w9N+WfaA4tnxm O0Wclc9C/qhBc+IIOnvM4Yl/BO2QqVTWSeD7nDzTz6DF9MYvg66pdJGSyzKWY2qx 51OQ0BqGQJedSb8dXZqWowrnSUAEwuAAb91l3XEm8/HzQvH0J88J3sxDwluScY58 /ZUwB102P6wRfTkZ3RSdICRSClCDQ91AAZoDYcOD1U/yak+ZbB2Qk0UIbUUG3MM6 i+dJtEwAp6edHg== -----END CERTIFICATE-----Generated at Sun Sep 7 20:01:13 2025 by rpki-client