$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/10/290e44-b479-46cf-ab4b-b38e2677b3dc/1/0he0cshBwdaFUKJPGTbSnMbCj2o.mft File: 0he0cshBwdaFUKJPGTbSnMbCj2o.mft (raw, json) Hash identifier: FBIl+z7OKkctP/KUWQ07dqPyZBbMCK4v8QZHz2DZDe0= Subject key identifier: E1:6E:AF:3E:A1:5E:53:88:69:E5:F3:0F:40:69:96:5E:F8:CE:99:CF Authority key identifier: D2:17:B4:72:C8:41:C1:D6:85:50:A2:4F:19:36:D2:9C:C6:C2:8F:6A Certificate issuer: /CN=d217b472c841c1d68550a24f1936d29cc6c28f6a Certificate serial: 0199183FC7A94A6D675BC06949BC0D395763 Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/0he0cshBwdaFUKJPGTbSnMbCj2o.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/10/290e44-b479-46cf-ab4b-b38e2677b3dc/1/0he0cshBwdaFUKJPGTbSnMbCj2o.mft Manifest number: 16E1 Signing time: Fri 05 Sep 2025 05:00:56 +0000 Manifest this update: Fri 05 Sep 2025 05:00:56 +0000 Manifest next update: Sat 06 Sep 2025 05:00:56 +0000 Files and hashes: 1: 0he0cshBwdaFUKJPGTbSnMbCj2o.crl (hash: FSy6RmMNj4fHAVMHyaYHqsumOHAWFppA/ZREcWl7Kuo=) 2: 0httGqgqnBD-cyBZkV5zP0LpIO4.roa (hash: e5sFUpuEkPspxdtpRMty2JvPNTXvUGFt57BwVt8wTQk=) 3: 20w83vHPyYnLSWr2qqWCmD2gZNY.roa (hash: ClK+X58yEmA5ygXK0mo1ANs6qUTT/V8TWnwZD7Tusy4=) 4: 2s4ghGsMJ4UjziczDpj7_nBo6GE.roa (hash: jn5a6RlzlWn5orrS4JyYzumT++ei7+4zrAsQWhkhOUE=) 5: A-FcY1w1X7TzQFigxT1IrWquTEc.roa (hash: VdZxwPXAYD5eXobUjd0+WlugUlYZzKWPDmGfZNzWyp8=) 6: BBOySe2ApZYQpT0wPGJ7zV8XzsA.roa (hash: N6DdRHz14Xr18smaWB+L/0EFbg9FmP8IrnnkdfkP5sA=) 7: BjUAlonCB1CjmbTY52apZdHRGFk.roa (hash: vBVzlWqlUuZ7F5qeBjljk7LIKAFRXIaJSFWC4T698rw=) 8: DRLbJL7meHAnOmMNiiVi2VhOOMc.roa (hash: Lp9UgdizeLrJK6Zry0u6HD2WAPxw4E+r1wzuyfdMmtU=) 9: EXfTHtw-3BJt59JkT36dPstORFo.roa (hash: MhW4Yoiges2mvr+KewFgpAREQV0Mu5obgGNxi9eeOQc=) 10: FRvZFyOxFoddRwR8NWy2iDyogY8.roa (hash: bzSWZTj+o0faBM1dsh+8mBoLaK0jcFLNse7M1DVkpUs=) 11: G8jjrx8EZbysXI_Z13e_0NqYZdU.roa (hash: GPSkTNwl/L8vVjia7LOR9ahqlqqIZvGFNcWIGIi/vHw=) 12: H5_UEf6RMp0ZMb_Mv4D8iAcwsyU.roa (hash: uonWTKVU8g+mUAIIxQ5x86Iq7w5qOGhQtxDY89kAJIY=) 13: Ib_gkG0OXaC9YGgBGzmQj28oy6Y.roa (hash: Dfa7w0wU+Mwe8FRxusOe5J5w207sEqOGP3MEUAezXaw=) 14: Jp0UMtlRd8ZwvCOhqfD_ADrBKLI.roa (hash: mR/skrtMXmYrNl0WIwSjaGFdp8tWtvYO7SMbQmVqf6A=) 15: LbbuvYNCQUioVv8zQH-Fc5UlHII.roa (hash: YzZ+diVYTspWHIE3LvR+g+W1S6ZTUYeSZQdRtZ8vrSI=) 16: MguR744HGmOoEMdrlIzPUQQNYfs.roa (hash: Ve4h+6FdNbKYu9bYvRE5Dbmxn7BK8VvZ01cl79qxeJc=) 17: PcsvqoFss2sjt8KP5dE_s9b5R94.roa (hash: 2VnZlh9WN/gvQzrunwflGg0cw7Ym2P+YsV38lpVH0Gs=) 18: RySOnwd5yNUvkpOdlWzbq8gD58I.roa (hash: pMm1Q5jN9tu+9MZBtGXjdw1riel86JfdVWVMRs8pgEY=) 19: UNh6P6o5iukKyngJ923OKln6euE.roa (hash: N5ex54TauXC69hfaRmQEjxuyvZMfnOJEFnqZWvxkb8A=) 20: XXSSAkKxHIvFb1XDuVgAK48p7oI.roa (hash: p4mx1wVBI5jfCHEyW7RDH/AavCZwfWlBpFNbLCutJY0=) 21: Y5c3qkFCpv03-ICNcuAXdHgS3cY.roa (hash: XJDCD20D/hEgr09ZL/gnt/32UJp0okrjk8WR5CoxVyQ=) 22: Y6R9BZ4jbo-SeP4MKzTkUzdRmEs.roa (hash: T03e4fff7Y/zXUb0yVVk+lWsYWaY+JCxTDBS+p8Hygw=) 23: _Ja5VSGfVwaP_RssqzUEn4YMRnM.roa (hash: IopLtmpqrddq1TLUa3ph8Vkd8Gg6tUuEa1Mf8B120SY=) 24: dSIvoRbcXmjEhaD-HdyHYcdmt90.roa (hash: JqFQVPXSWhIrd/AlZzo80JSKjqGLV5nybtYrZ/HoQns=) 25: fW0mZX2qVdA0eoUEboZhAE59bUE.roa (hash: stVjqf6xlyz/MOhoo6Rt330zmsp7vd4IC5S2fUEJ5WM=) 26: kqDz7smZzEggwnOtTZ91wrlBE4c.roa (hash: OteTjZY0hrzoBDeoZG9laIbeOhFIt32mklvyy1YBT38=) 27: m9Q0QpkVO1rZKT8wIA-lB6ceYcg.roa (hash: yW9VuP+7IZqfB9uY1adWMtzwRUiSlhz/2UYbCN1BQSU=) 28: oqSgizr5ODUUGjBb8_Wzxokx-xk.roa (hash: Kl53NJDKPjecKCh1ZqXsoFCQIzYfPyjvOORgLlse+gY=) 29: qlt-CjR0Oi0L3lo2PS7A4jbvIUg.roa (hash: iydTkBpS1P6s3+CKe74qws4olK3ajXbhwYqoUw/uhBk=) 30: tdzsaKxsamCWBVwoUkqT8RggY6A.roa (hash: Fv0PNntXjBHiuO1Z367HBdmxJtFfh7CR44dwT354/lw=) 31: vFNkivgTExOsjU64HiM4VzsQFiw.roa (hash: DXIqZ5v2rgtSNx+D9s1xP6RBmK/3bmgJ3j5QKRP0qEA=) 32: wMbP2rODQDC-jcOXAyW7ktyAwFs.roa (hash: 9dxgb9cFX2rvzK0yUiEPPHMObwlTuLCycMbvyIulqKU=) 33: yNK_se_8Y1MH-IyQZOfpZj_aArA.roa (hash: Y/8odYpFkGDQCB6ybQitBRTCfwLFaWn7M7svPHhRrhA=) 34: z4dbT2rdI1MPHPzn2a4SSpvkt3E.roa (hash: pftbqIKgzEeVO9sl0LAVO5XHYPxIgJ6YwaN9JqNCTzk=) Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/10/290e44-b479-46cf-ab4b-b38e2677b3dc/1/0he0cshBwdaFUKJPGTbSnMbCj2o.crl rsync://rpki.ripe.net/repository/DEFAULT/10/290e44-b479-46cf-ab4b-b38e2677b3dc/1/0he0cshBwdaFUKJPGTbSnMbCj2o.mft rsync://rpki.ripe.net/repository/DEFAULT/0he0cshBwdaFUKJPGTbSnMbCj2o.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Sat 06 Sep 2025 01:00:24 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:99:18:3f:c7:a9:4a:6d:67:5b:c0:69:49:bc:0d:39:57:63 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=d217b472c841c1d68550a24f1936d29cc6c28f6a Validity Not Before: Sep 5 05:00:56 2025 GMT Not After : Sep 6 05:00:56 2025 GMT Subject: CN=e16eaf3ea15e538869e5f30f4069965ef8ce99cf Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:8e:af:08:ce:b8:f2:0f:54:ff:38:07:79:12:2e: 29:c8:16:46:e2:60:70:6a:f0:6e:ab:47:07:29:8b: 98:07:19:32:85:4a:18:39:05:e7:a0:5b:19:04:fa: 56:f8:a5:dc:97:c7:66:0f:fd:99:17:75:9f:35:d3: a1:b6:d7:40:69:be:a0:6b:47:dc:00:53:e0:18:0b: 16:0c:c8:1d:a4:32:1f:e7:35:3b:23:1b:c7:d0:f8: cd:fa:d8:c4:20:19:3b:6c:8c:8c:a1:70:57:44:3a: e5:f2:ca:20:8a:e7:06:0b:44:48:b2:da:9b:5d:f5: 84:48:85:4d:bd:13:0e:68:25:4e:99:0b:7b:a6:33: 48:70:fa:75:7d:ad:56:f6:87:dc:b8:43:fa:e1:cb: cc:8b:96:a3:f3:2e:a9:d1:71:c1:73:bf:94:96:29: c0:2a:05:05:ad:b4:06:c5:07:ae:c2:2b:37:f3:d8: 85:6e:6b:c6:1c:ae:c1:c5:e9:73:67:2e:64:4f:f7: 88:83:f2:32:02:9c:f9:9e:c3:28:6f:f9:92:04:3a: 5d:c7:38:a4:af:ef:81:3d:6c:33:8c:90:b9:15:a2: 5c:4d:a4:4b:f9:81:86:b0:19:00:b1:cc:7b:4e:35: 98:ef:e8:90:04:bf:a9:49:ac:7c:ce:a0:32:64:64: 4e:d1 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: E1:6E:AF:3E:A1:5E:53:88:69:E5:F3:0F:40:69:96:5E:F8:CE:99:CF X509v3 Authority Key Identifier: keyid:D2:17:B4:72:C8:41:C1:D6:85:50:A2:4F:19:36:D2:9C:C6:C2:8F:6A X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/0he0cshBwdaFUKJPGTbSnMbCj2o.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/10/290e44-b479-46cf-ab4b-b38e2677b3dc/1/0he0cshBwdaFUKJPGTbSnMbCj2o.mft X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/10/290e44-b479-46cf-ab4b-b38e2677b3dc/1/0he0cshBwdaFUKJPGTbSnMbCj2o.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 80:58:ec:88:8f:04:f8:17:69:20:f1:17:b2:b9:8b:e2:e4:ae: 41:89:7c:87:34:4a:99:76:33:12:d6:6d:05:0f:c0:57:fd:01: dc:fc:2e:78:03:6d:06:dc:1a:03:5b:cb:4d:31:b7:02:2c:6d: b6:55:9a:47:be:e2:94:20:5b:3b:9f:60:b9:f9:ed:17:6f:ab: 02:dc:7d:44:01:0e:54:1f:0e:de:5c:91:c0:9d:84:8e:f6:96: 45:46:d5:77:42:f9:22:fb:f5:c4:25:3e:0e:ab:ac:88:38:0e: 37:f4:83:56:5c:0a:a6:fb:e1:63:8d:91:3a:fd:ee:fb:d3:c8: 09:84:30:eb:06:00:10:14:7f:3e:16:da:43:fd:0c:a9:d8:cf: 88:7a:5c:4b:0e:b4:d9:cf:c0:d4:07:5f:1c:8b:c0:be:51:e0: 7e:6f:c7:35:90:3e:6d:87:3a:e5:53:7e:56:69:61:15:5b:47: 54:9a:fb:ef:6e:51:a4:0f:f8:98:e4:5e:ae:17:c8:cd:44:dd: 62:04:44:a7:a5:28:e3:c6:cf:6c:7b:7c:95:c7:e6:ec:d1:4a: 64:05:d1:92:93:86:c8:84:a3:5d:53:20:09:d0:eb:e6:0e:87: 69:b9:60:94:b0:83:09:52:d8:d1:95:eb:45:38:39:ba:8c:22: eb:92:37:95 -----BEGIN CERTIFICATE----- MIIFFjCCA/6gAwIBAgISAZkYP8epSm1nW8BpSbwNOVdjMA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKGQyMTdiNDcyYzg0MWMxZDY4NTUwYTI0ZjE5MzZkMjljYzZj MjhmNmEwHhcNMjUwOTA1MDUwMDU2WhcNMjUwOTA2MDUwMDU2WjAzMTEwLwYDVQQD EyhlMTZlYWYzZWExNWU1Mzg4NjllNWYzMGY0MDY5OTY1ZWY4Y2U5OWNmMIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAjq8IzrjyD1T/OAd5Ei4pyBZG4mBw avBuq0cHKYuYBxkyhUoYOQXnoFsZBPpW+KXcl8dmD/2ZF3WfNdOhttdAab6ga0fc AFPgGAsWDMgdpDIf5zU7IxvH0PjN+tjEIBk7bIyMoXBXRDrl8sogiucGC0RIstqb XfWESIVNvRMOaCVOmQt7pjNIcPp1fa1W9ofcuEP64cvMi5aj8y6p0XHBc7+UlinA KgUFrbQGxQeuwis389iFbmvGHK7BxelzZy5kT/eIg/IyApz5nsMob/mSBDpdxzik r++BPWwzjJC5FaJcTaRL+YGGsBkAscx7TjWY7+iQBL+pSax8zqAyZGRO0QIDAQAB o4ICIjCCAh4wHQYDVR0OBBYEFOFurz6hXlOIaeXzD0Bpll74zpnPMB8GA1UdIwQY MBaAFNIXtHLIQcHWhVCiTxk20pzGwo9qMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvMGhlMGNzaEJ3ZGFGVUtKUEdUYlNuTWJDajJvLmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC8xMC8yOTBlNDQtYjQ3OS00NmNmLWFiNGIt YjM4ZTI2NzdiM2RjLzEvMGhlMGNzaEJ3ZGFGVUtKUEdUYlNuTWJDajJvLm1mdDCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC8xMC8yOTBlNDQtYjQ3OS00NmNmLWFiNGItYjM4ZTI2NzdiM2Rj LzEvMGhlMGNzaEJ3ZGFGVUtKUEdUYlNuTWJDajJvLmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAgFjsiI8E +BdpIPEXsrmL4uSuQYl8hzRKmXYzEtZtBQ/AV/0B3PwueANtBtwaA1vLTTG3Aixt tlWaR77ilCBbO59gufntF2+rAtx9RAEOVB8O3lyRwJ2EjvaWRUbVd0L5Ivv1xCU+ DqusiDgON/SDVlwKpvvhY42ROv3u+9PICYQw6wYAEBR/PhbaQ/0MqdjPiHpcSw60 2c/A1AdfHIvAvlHgfm/HNZA+bYc65VN+VmlhFVtHVJr7725RpA/4mORerhfIzUTd YgREp6Uo48bPbHt8lcfm7NFKZAXRkpOGyISjXVMgCdDr5g6HablglLCDCVLY0ZXr RTg5uowi65I3lQ== -----END CERTIFICATE-----Generated at Fri Sep 5 06:05:38 2025 by rpki-client