$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/1b/8d55c0-9aa0-4be7-82a8-dab6b83cf7ec/1/THhEq-9xHCMshPg8gHpCCvOARyg.mft File: THhEq-9xHCMshPg8gHpCCvOARyg.mft (raw, json) Hash identifier: FfmyclsDvzvKodCgb/t7eVwXkVl5NpbKrod0URs9yDs= Subject key identifier: 8E:CB:A3:21:0A:D6:3C:77:E0:E6:AE:F2:A6:3B:4F:60:DB:E5:A6:BC Authority key identifier: 4C:78:44:AB:EF:71:1C:23:2C:84:F8:3C:80:7A:42:0A:F3:80:47:28 Certificate issuer: /CN=4c7844abef711c232c84f83c807a420af3804728 Certificate serial: 0199326D63F35156C8B9C42C13CEAF88E6AE Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/THhEq-9xHCMshPg8gHpCCvOARyg.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/1b/8d55c0-9aa0-4be7-82a8-dab6b83cf7ec/1/THhEq-9xHCMshPg8gHpCCvOARyg.mft Manifest number: 1683 Signing time: Wed 10 Sep 2025 07:00:53 +0000 Manifest this update: Wed 10 Sep 2025 07:00:53 +0000 Manifest next update: Thu 11 Sep 2025 07:00:53 +0000 Files and hashes: 1: 159ekJmBdzbPKpbON9hMEymGJuU.roa (hash: QP5wYUCm1hSjghfra2oVcPBPcr/BrQ1M69D/IBh13Ek=) 2: 788_6eQ_xFNLe9_wIK-pQKXpCzE.roa (hash: LF8TeWNVGROo8mUa/fN3lL86dQZtL7W6m2p1cv4RWDU=) 3: 7VL3TCVUHIkzVI-u_BV2H3VUTW0.roa (hash: 5DAqYiaH4HvpC1IHfjR7Nmgzznm6FMPuOC84EeBazuE=) 4: 8MxR-Tev1o1VL0t9VRgCRAf7vnI.roa (hash: acrlUTRAmmeUc2aIFqU4RxZwx6fjf2929QZq18A30Bo=) 5: DHF4t5PSRpk6qWKPy2mALhrDjIE.roa (hash: suENCv+FxMCoCroXS4u7UEipCrKhSFMxZ7eSrCqloAg=) 6: DP14eQdBJZ0IZ5xEuLsmxQbl9EY.roa (hash: I1RANQtOMkvey7c50zVN0sFWZ6sc3/FFShaZqQlcjW8=) 7: FetsHfbdUifY1TU89hnwoFpg5QI.roa (hash: ZHBz8QvXKu/jKruoZfTsft4ugiggH0hcJsS7NZeRumw=) 8: Kt5AY6bZ1gA0AyxYwkZX9eyBtTA.roa (hash: vEFM1Xuk52lqHbsTCEtx4tTiPZIq8w5DR7ss3hbOLsE=) 9: MfLf638cBMkfH5M2VRdb5zkozps.roa (hash: 2fcAYwjckXPjFWKMKBGwmwkGYgpmXwgfJsrW0TpRDWg=) 10: NOqs7ZQrrn3ai8o8Sfr5QgX_zoY.roa (hash: ewnWA3/QGkEv1H2zslDa2f3WNqSiX0NCN6++76C2dyc=) 11: RTDW_9ir78QV7tSH_VhKQZV9o9E.roa (hash: d4l0MWyE7MGz6KUyIY2o+vwNtkeh3WQEvCQ4JDRIKNw=) 12: SkDqJYtasnJYM-biaYFDlw-lbLI.roa (hash: SIZnkeDSwwVblW7CmwDd2pAiA3RYFWayoud1xIYiOZE=) 13: THhEq-9xHCMshPg8gHpCCvOARyg.crl (hash: dN3JX2WfjBb/LWBtwjxyC/3DGpf2kT3xO3kwycHpotI=) 14: Ufg6XzRgoNG-SJwB5vLfRpSdKwM.roa (hash: JG7/C3Qu/BlDNJo3Xbaaiz8UsqXv4SIf7aVJX/4oLC8=) 15: Ux9zLJtd4_p9NV0Me_W8PVyz43I.roa (hash: GS5Alel3iVAtxVyr3H/1KmbzeB55m9O8mdahO6mwu3I=) 16: V4n_ERvR3r7FSnduE0noOKeefts.roa (hash: LPIfQu7peWz7IwtM6LejZS6t2OBvUe9ksCubWX40zoU=) 17: ak_XLj7BZSfR9vOAnnvTOmDEr6A.roa (hash: ikKkuXaDQk5CUy5oU8HwbfJMv8LLvWp+LKDjQ5BFERQ=) 18: eV7DHZCofiB8XK6t9zdEW8QBmNE.roa (hash: ziPPnswaXIfrS3ugoGocK/TB+/DsS0Y8eyLBNQhW8CA=) 19: ehl3MzoakHMyAhI6D9Y3Cy-GPCQ.roa (hash: c/pdm8QJPrUaNWBntBuCKT5L6EGDpSv8U+KeXzAhvgM=) 20: etz2hZixJbP5i4gWcSwK7LRFSm0.roa (hash: He+gUSNkDpgM/YmAlWou/f7IBd7ClRDJZpOAAsQM4Gc=) 21: j4rh0ZB1TNetuBYRDobHojuhdfk.roa (hash: gG/GxtjjKSA1/GWHAwQGCjfaoi/2Fsi2k0vRIown77I=) 22: nRd2QQHJvxWvYt2MaDtdcdyAXq0.roa (hash: yZqn0BYFHogcQ5mr/kG0CSKrE+RjbicfkkCTMtc6QdE=) 23: pgzL98bXwq-9exs7N1Aw8lwmeJ8.roa (hash: xy+0YdokIF7xVDG+fNdt0bMI+vPVGsiM9WuUOpAJvfE=) 24: tl2CuMI8daX_Uy_0-dhV_jYIjok.roa (hash: fhgp+n0E4Y3FzjH1buSmXdmrrGnvYKzvAV0R9W80bHI=) 25: vTuj5nkiC_3i4jeecr0ZYlh6QFQ.roa (hash: hGNi9opDGQg4RKjrBzVyQfTDJbC2WxKz4FBHifedxJI=) 26: yJHEdUxsuxE5hka9evM6UogprJA.roa (hash: ISigKBqS2g0TxwqY9vjjEMwica/8G6mT5W+e6wBxj6M=) Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/1b/8d55c0-9aa0-4be7-82a8-dab6b83cf7ec/1/THhEq-9xHCMshPg8gHpCCvOARyg.crl rsync://rpki.ripe.net/repository/DEFAULT/1b/8d55c0-9aa0-4be7-82a8-dab6b83cf7ec/1/THhEq-9xHCMshPg8gHpCCvOARyg.mft rsync://rpki.ripe.net/repository/DEFAULT/THhEq-9xHCMshPg8gHpCCvOARyg.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Thu 11 Sep 2025 02:00:22 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:99:32:6d:63:f3:51:56:c8:b9:c4:2c:13:ce:af:88:e6:ae Signature Algorithm: sha256WithRSAEncryption Issuer: CN=4c7844abef711c232c84f83c807a420af3804728 Validity Not Before: Sep 10 07:00:53 2025 GMT Not After : Sep 11 07:00:53 2025 GMT Subject: CN=8ecba3210ad63c77e0e6aef2a63b4f60dbe5a6bc Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:a7:5d:38:64:fd:92:70:ac:c2:bf:c6:97:a4:8e: 9e:09:84:0d:04:52:f7:bd:34:9b:f1:3f:6c:cc:f0: 44:b4:d2:ac:8f:d6:a9:d5:34:3c:04:20:f3:eb:59: 50:22:33:ce:e5:df:e1:b9:c4:da:76:64:6b:4c:22: 1f:34:e8:b2:f5:1e:67:fb:63:d0:25:a0:2d:c4:1c: fe:7c:99:34:2d:fc:10:1d:7f:fc:75:a9:a0:7d:4d: f7:cf:e8:c1:a2:b1:27:86:94:f4:52:7a:83:5f:87: 9d:ac:29:04:d7:0a:32:f4:04:06:75:02:a2:30:25: 94:5b:80:00:e1:d1:15:fb:b3:76:5a:6e:5a:c6:38: 8e:6f:04:00:48:97:c0:38:ff:8e:38:bd:f3:aa:5a: 5b:7d:98:52:01:ba:ad:56:de:1f:9b:4c:13:b3:6a: fb:2d:76:62:ac:4f:91:61:2e:d9:70:e0:b0:58:fd: 7d:3a:9b:4c:9c:f7:f8:08:f8:93:0f:07:5e:06:29: 56:0e:3a:b9:df:98:91:78:ea:9b:ae:0e:f8:81:25: ee:d1:98:02:ae:b4:7e:fb:fc:17:33:aa:93:81:ee: af:26:47:55:16:cb:56:c7:8f:67:03:f5:5a:f0:2f: 30:f4:48:86:e0:fa:30:09:fa:bd:a9:83:5d:b4:87: 39:65 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 8E:CB:A3:21:0A:D6:3C:77:E0:E6:AE:F2:A6:3B:4F:60:DB:E5:A6:BC X509v3 Authority Key Identifier: keyid:4C:78:44:AB:EF:71:1C:23:2C:84:F8:3C:80:7A:42:0A:F3:80:47:28 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/THhEq-9xHCMshPg8gHpCCvOARyg.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/1b/8d55c0-9aa0-4be7-82a8-dab6b83cf7ec/1/THhEq-9xHCMshPg8gHpCCvOARyg.mft X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/1b/8d55c0-9aa0-4be7-82a8-dab6b83cf7ec/1/THhEq-9xHCMshPg8gHpCCvOARyg.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 08:62:36:84:a4:04:c5:19:86:77:9e:58:e1:34:16:79:a4:9c: 13:9c:46:0d:ca:ec:d6:e8:ed:49:0c:92:ca:cf:c7:62:92:a2: b0:91:70:88:a3:5b:42:1d:95:f5:50:8e:0f:62:88:92:23:85: 81:cc:00:e0:0e:2f:27:68:99:0c:8a:e7:a9:7b:39:18:96:69: 3b:ac:41:28:28:5e:e7:09:90:d9:f3:05:7b:67:7d:24:2a:7e: 13:22:db:fe:91:2e:2e:a1:f6:dc:da:05:d0:1e:1c:a5:da:a9: 07:3d:96:c8:bf:12:78:ac:f2:75:86:2c:39:31:c9:58:e2:9a: 88:fc:b0:a5:33:bf:a2:3c:d8:b8:46:a7:33:ef:58:d2:e1:93: fd:be:c3:51:39:80:4b:58:72:07:31:61:d7:9d:92:a1:46:c7: fd:92:33:fa:61:7c:4f:17:63:cf:f0:89:37:06:4f:29:f0:42: dd:4a:c3:0f:0d:ee:1e:f1:fb:0c:8a:3e:be:49:f7:38:cc:08: aa:02:19:e4:91:b2:81:34:7b:09:7a:a7:b1:0b:4f:a9:36:5f: e3:b4:81:9c:d2:3c:05:e8:c5:88:ec:49:0e:4e:e2:df:c9:69: bf:48:3f:52:b7:2f:49:22:e3:0c:77:26:bd:8e:d7:67:9f:ef: f4:90:ce:9f -----BEGIN CERTIFICATE----- MIIFFjCCA/6gAwIBAgISAZkybWPzUVbIucQsE86viOauMA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKDRjNzg0NGFiZWY3MTFjMjMyYzg0ZjgzYzgwN2E0MjBhZjM4 MDQ3MjgwHhcNMjUwOTEwMDcwMDUzWhcNMjUwOTExMDcwMDUzWjAzMTEwLwYDVQQD Eyg4ZWNiYTMyMTBhZDYzYzc3ZTBlNmFlZjJhNjNiNGY2MGRiZTVhNmJjMIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAp104ZP2ScKzCv8aXpI6eCYQNBFL3 vTSb8T9szPBEtNKsj9ap1TQ8BCDz61lQIjPO5d/hucTadmRrTCIfNOiy9R5n+2PQ JaAtxBz+fJk0LfwQHX/8damgfU33z+jBorEnhpT0UnqDX4edrCkE1woy9AQGdQKi MCWUW4AA4dEV+7N2Wm5axjiObwQASJfAOP+OOL3zqlpbfZhSAbqtVt4fm0wTs2r7 LXZirE+RYS7ZcOCwWP19OptMnPf4CPiTDwdeBilWDjq535iReOqbrg74gSXu0ZgC rrR++/wXM6qTge6vJkdVFstWx49nA/Va8C8w9EiG4PowCfq9qYNdtIc5ZQIDAQAB o4ICIjCCAh4wHQYDVR0OBBYEFI7LoyEK1jx34Oau8qY7T2Db5aa8MB8GA1UdIwQY MBaAFEx4RKvvcRwjLIT4PIB6QgrzgEcoMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvVEhoRXEtOXhIQ01zaFBnOGdIcENDdk9BUnlnLmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC8xYi84ZDU1YzAtOWFhMC00YmU3LTgyYTgt ZGFiNmI4M2NmN2VjLzEvVEhoRXEtOXhIQ01zaFBnOGdIcENDdk9BUnlnLm1mdDCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC8xYi84ZDU1YzAtOWFhMC00YmU3LTgyYTgtZGFiNmI4M2NmN2Vj LzEvVEhoRXEtOXhIQ01zaFBnOGdIcENDdk9BUnlnLmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEACGI2hKQE xRmGd55Y4TQWeaScE5xGDcrs1ujtSQySys/HYpKisJFwiKNbQh2V9VCOD2KIkiOF gcwA4A4vJ2iZDIrnqXs5GJZpO6xBKChe5wmQ2fMFe2d9JCp+EyLb/pEuLqH23NoF 0B4cpdqpBz2WyL8SeKzydYYsOTHJWOKaiPywpTO/ojzYuEanM+9Y0uGT/b7DUTmA S1hyBzFh152SoUbH/ZIz+mF8Txdjz/CJNwZPKfBC3UrDDw3uHvH7DIo+vkn3OMwI qgIZ5JGygTR7CXqnsQtPqTZf47SBnNI8BejFiOxJDk7i38lpv0g/UrcvSSLjDHcm vY7XZ5/v9JDOnw== -----END CERTIFICATE-----Generated at Wed Sep 10 10:13:14 2025 by rpki-client