$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/1c/b20d83-612c-4b62-97a3-1a5e5f191bfa/1/MH2IfALgfJ5HTR-OIQScqmzj-9M.mft File: MH2IfALgfJ5HTR-OIQScqmzj-9M.mft (raw, json) Hash identifier: 4VEGrMor81dCKT4Sj3wdtUS2AO5DzdSf9gIr/q+zto8= Subject key identifier: 60:1F:E8:6D:F6:3A:77:60:1D:0A:F9:83:ED:7A:18:B3:DF:63:3F:10 Authority key identifier: 30:7D:88:7C:02:E0:7C:9E:47:4D:1F:8E:21:04:9C:AA:6C:E3:FB:D3 Certificate issuer: /CN=307d887c02e07c9e474d1f8e21049caa6ce3fbd3 Certificate serial: 019954C28DC8E7D940ED28B4A801E7FFDD00 Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/MH2IfALgfJ5HTR-OIQScqmzj-9M.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/1c/b20d83-612c-4b62-97a3-1a5e5f191bfa/1/MH2IfALgfJ5HTR-OIQScqmzj-9M.mft Manifest number: 168F Signing time: Tue 16 Sep 2025 23:01:00 +0000 Manifest this update: Tue 16 Sep 2025 23:01:00 +0000 Manifest next update: Wed 17 Sep 2025 23:01:00 +0000 Files and hashes: 1: Go3D60IftVT7kBobBk8HTq_r6wY.roa (hash: /aH1VuqUtHMC947Kt5tr1ajHSrdHN60XTYZiPes2dOU=) 2: JKKr0NwqKrBRfO9-TNMA6fKjebU.roa (hash: +prVLn/SSNSb/SQ4BmX9heAxTyq0XNrqnNVcVb/zNYQ=) 3: MH2IfALgfJ5HTR-OIQScqmzj-9M.crl (hash: 943Rm3UO1Fw2sf7/X9k5TqaPRWGrqTwfzmJXDqnwi+U=) 4: OrdWNePRO-azuf-x7WJ0gNqkZc8.roa (hash: ehZsJBwER/Ak+kPEJiQOXw5pziTKWHwzzGUWq4oZM/c=) 5: Q3_mv-tF2Z1EHDZHaZk8mJMN1bk.roa (hash: oXSPeYLnMI9gMBulzyR8eDJwfmPdLhgYhc4vqS0U/tE=) 6: S2TXSI-3n25IfgGnM4uuJwml268.roa (hash: DAgFF4qJxC/k8JOz+sB1Q1cvXx4PDaouIru4SXZXgbU=) 7: UJuJe34B0guqTgOl--QOCgSYvZE.roa (hash: c2O3pbkk6z+NjOLR47vzvdpTF+ZJKIik+rzOAO3mk2Y=) 8: bR8kj_c2TPqFFFMT255K3OTqBTI.roa (hash: mIG3JTVdQTlKmcdrQlCtE5KtfNee8F1irJglkfAd6/0=) 9: e_JO57HIUgxnL2zZw_SZRKtvz2k.roa (hash: kYzJL9upOKUtQTqnQ+rXijBf3P483K+T+FEi6SAaLE0=) 10: qkn09gGw9_pYS22v_SrDemeIoJI.roa (hash: OSIoNd4NerHm/MUfEqmcXlQFZ/K6gwLw7wnqNHc3YTQ=) Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/1c/b20d83-612c-4b62-97a3-1a5e5f191bfa/1/MH2IfALgfJ5HTR-OIQScqmzj-9M.crl rsync://rpki.ripe.net/repository/DEFAULT/1c/b20d83-612c-4b62-97a3-1a5e5f191bfa/1/MH2IfALgfJ5HTR-OIQScqmzj-9M.mft rsync://rpki.ripe.net/repository/DEFAULT/MH2IfALgfJ5HTR-OIQScqmzj-9M.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Wed 17 Sep 2025 23:01:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:99:54:c2:8d:c8:e7:d9:40:ed:28:b4:a8:01:e7:ff:dd:00 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=307d887c02e07c9e474d1f8e21049caa6ce3fbd3 Validity Not Before: Sep 16 23:01:00 2025 GMT Not After : Sep 17 23:01:00 2025 GMT Subject: CN=601fe86df63a77601d0af983ed7a18b3df633f10 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:c6:fc:cc:d7:1f:a7:a1:12:f3:d9:ac:d4:5c:5f: aa:77:95:39:93:53:ee:84:03:d0:b6:c4:81:34:2e: 3f:9d:8a:71:55:dd:aa:7f:d4:62:68:2c:aa:15:82: f4:5f:20:05:d1:c6:5a:a6:09:1d:21:dd:ae:77:5f: 14:4b:01:47:ef:40:14:d1:56:44:d2:05:53:cc:92: 72:70:b6:83:39:7c:73:6c:b5:26:06:a8:a3:61:b7: 95:e4:0d:1e:b8:f1:f9:bb:1e:a3:fb:ad:dd:ca:5e: 4d:38:dc:b4:dd:0b:8b:49:18:c7:39:6f:20:89:3a: 50:ea:d8:68:f9:77:96:73:85:17:21:22:a2:40:b8: de:f8:32:f1:1b:b8:04:c2:35:1e:be:d6:5c:71:87: 9d:85:6a:30:ad:02:96:83:f5:df:35:21:ce:5f:97: 8f:00:d7:b2:81:92:91:72:ea:f5:08:eb:ad:89:66: d5:6b:e3:d0:02:f8:75:41:52:25:0f:ec:f5:ca:19: 40:19:fa:8a:20:a0:0c:ab:c0:e8:7c:de:43:5e:33: 1e:6c:9b:ac:01:1b:c7:82:96:5c:ac:44:0c:74:d6: 68:2c:2c:01:18:17:c4:1c:3a:22:08:3c:2a:79:d8: 60:77:07:dd:da:fc:9a:d8:da:6f:bc:5e:a4:63:cb: f3:fb Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 60:1F:E8:6D:F6:3A:77:60:1D:0A:F9:83:ED:7A:18:B3:DF:63:3F:10 X509v3 Authority Key Identifier: keyid:30:7D:88:7C:02:E0:7C:9E:47:4D:1F:8E:21:04:9C:AA:6C:E3:FB:D3 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/MH2IfALgfJ5HTR-OIQScqmzj-9M.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/1c/b20d83-612c-4b62-97a3-1a5e5f191bfa/1/MH2IfALgfJ5HTR-OIQScqmzj-9M.mft X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/1c/b20d83-612c-4b62-97a3-1a5e5f191bfa/1/MH2IfALgfJ5HTR-OIQScqmzj-9M.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 9f:48:d9:a0:ce:53:bd:36:07:1f:27:f2:43:c4:17:11:fe:00: 9c:45:5d:1f:1b:28:f8:29:39:0a:29:29:02:5b:7d:e8:7a:b4: 50:a3:c1:ac:27:47:03:46:57:8b:1b:d6:4a:1f:0e:cc:65:a4: 7d:07:61:11:8f:21:62:a9:24:dc:a2:e2:24:9b:ac:6c:44:85: 02:aa:c9:7c:32:eb:75:99:b9:e3:b4:ed:11:ab:01:bc:1c:84: fb:e2:c3:c7:ea:df:54:bc:60:1b:86:86:a7:fc:fb:fa:eb:f6: 38:2c:94:88:61:4b:be:39:f8:83:13:9d:77:61:9c:ba:2a:88: b7:a4:cc:26:5a:f7:d2:21:c2:79:85:aa:d7:76:79:fe:d5:7b: 4e:f5:99:b0:a7:33:49:6f:5f:27:02:f3:8a:55:09:61:bc:d2: 79:02:e5:b8:3e:4c:fc:a6:d1:bd:90:33:bc:7e:50:c9:5b:84: 6e:8f:b9:03:2d:4e:61:cc:a8:8e:30:79:c1:3a:a1:dd:5f:c1: f7:e5:60:45:f2:d5:15:11:78:d4:e6:b5:8f:76:2d:66:cf:5b: 57:07:77:da:9b:2c:ea:36:6a:1d:a2:c6:e1:8f:73:67:87:71: 13:c3:e7:0f:6d:f7:95:cb:c1:6e:51:e9:40:53:14:01:71:4c: ba:29:83:2e -----BEGIN CERTIFICATE----- MIIFFjCCA/6gAwIBAgISAZlUwo3I59lA7Si0qAHn/90AMA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKDMwN2Q4ODdjMDJlMDdjOWU0NzRkMWY4ZTIxMDQ5Y2FhNmNl M2ZiZDMwHhcNMjUwOTE2MjMwMTAwWhcNMjUwOTE3MjMwMTAwWjAzMTEwLwYDVQQD Eyg2MDFmZTg2ZGY2M2E3NzYwMWQwYWY5ODNlZDdhMThiM2RmNjMzZjEwMIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAxvzM1x+noRLz2azUXF+qd5U5k1Pu hAPQtsSBNC4/nYpxVd2qf9RiaCyqFYL0XyAF0cZapgkdId2ud18USwFH70AU0VZE 0gVTzJJycLaDOXxzbLUmBqijYbeV5A0euPH5ux6j+63dyl5NONy03QuLSRjHOW8g iTpQ6tho+XeWc4UXISKiQLje+DLxG7gEwjUevtZccYedhWowrQKWg/XfNSHOX5eP ANeygZKRcur1COutiWbVa+PQAvh1QVIlD+z1yhlAGfqKIKAMq8DofN5DXjMebJus ARvHgpZcrEQMdNZoLCwBGBfEHDoiCDwqedhgdwfd2vya2NpvvF6kY8vz+wIDAQAB o4ICIjCCAh4wHQYDVR0OBBYEFGAf6G32OndgHQr5g+16GLPfYz8QMB8GA1UdIwQY MBaAFDB9iHwC4HyeR00fjiEEnKps4/vTMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvTUgySWZBTGdmSjVIVFItT0lRU2NxbXpqLTlNLmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC8xYy9iMjBkODMtNjEyYy00YjYyLTk3YTMt MWE1ZTVmMTkxYmZhLzEvTUgySWZBTGdmSjVIVFItT0lRU2NxbXpqLTlNLm1mdDCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC8xYy9iMjBkODMtNjEyYy00YjYyLTk3YTMtMWE1ZTVmMTkxYmZh LzEvTUgySWZBTGdmSjVIVFItT0lRU2NxbXpqLTlNLmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAn0jZoM5T vTYHHyfyQ8QXEf4AnEVdHxso+Ck5CikpAlt96Hq0UKPBrCdHA0ZXixvWSh8OzGWk fQdhEY8hYqkk3KLiJJusbESFAqrJfDLrdZm547TtEasBvByE++LDx+rfVLxgG4aG p/z7+uv2OCyUiGFLvjn4gxOdd2GcuiqIt6TMJlr30iHCeYWq13Z5/tV7TvWZsKcz SW9fJwLzilUJYbzSeQLluD5M/KbRvZAzvH5QyVuEbo+5Ay1OYcyojjB5wTqh3V/B 9+VgRfLVFRF41Oa1j3YtZs9bVwd32pss6jZqHaLG4Y9zZ4dxE8PnD233lcvBblHp QFMUAXFMuimDLg== -----END CERTIFICATE-----Generated at Wed Sep 17 08:55:10 2025 by rpki-client