$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/22/dab420-0de3-4321-9c09-6b5f68522a7d/1/p-4YLZxDpc5waN_Zunqo7ZDl4Lo.mft File: p-4YLZxDpc5waN_Zunqo7ZDl4Lo.mft (raw, json) Hash identifier: i4CRvarf0InlxJlYRvXEL5nnnrVbzNy6RQC9VltZFME= Subject key identifier: F5:26:A5:F4:F7:D5:38:1A:A6:9B:25:5C:7F:F1:00:62:83:D5:CF:E7 Authority key identifier: A7:EE:18:2D:9C:43:A5:CE:70:68:DF:D9:BA:7A:A8:ED:90:E5:E0:BA Certificate issuer: /CN=a7ee182d9c43a5ce7068dfd9ba7aa8ed90e5e0ba Certificate serial: 0199277C6FBF32C03061567BF3918892120D Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/p-4YLZxDpc5waN_Zunqo7ZDl4Lo.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/22/dab420-0de3-4321-9c09-6b5f68522a7d/1/p-4YLZxDpc5waN_Zunqo7ZDl4Lo.mft Manifest number: 168D Signing time: Mon 08 Sep 2025 04:01:30 +0000 Manifest this update: Mon 08 Sep 2025 04:01:30 +0000 Manifest next update: Tue 09 Sep 2025 04:01:30 +0000 Files and hashes: 1: 6VFvznM1ivuDVDr2-zJ8Rc9HL4c.roa (hash: YFFcoS2pkj0ppsY1suyM7N1UBbz37UF87GS5rHAetLM=) 2: HG0sxwCI7w4fkh8VU0N2fcVMuLU.roa (hash: 1EixzIypMSg7Afd2h1TllH/pBszhQ8LEEsFtCe9BNAQ=) 3: SF9inl-Z2UBEp7L7rHoMTP2o47I.roa (hash: OJPpBVtZqLTjhkxtA0o0cIzlBYqPE/6vDiaXNk1Wf6s=) 4: YkO14vUX3HHLD5m73eeF94u-z9Y.roa (hash: myJ7UTUt7mcT9gjy0mgRP7jrD85IU3fMUws/RpMjTT4=) 5: bTtf1_C9R2Bt4xdvshIG3OCVSD0.roa (hash: Z47R6cDRJGZAaj0MeG+895zHqKHcV33MIM2W9d4hC9E=) 6: c-pova8C1uulibxroeJZUgkQnv8.roa (hash: OvhwnSV+pVkr5UA9RfkEZJQ3n/9Mm7Ihqgy3rKhknz8=) 7: cdiLy2n18Y-vOIkFViZGUd7RsKM.roa (hash: /+RvQbcmllMNKfEXhyM/QGFxvrK6kosbr0fHB6H8FyU=) 8: dVPbIRfsnF_eS0blJ9Y7zNoUs7k.roa (hash: ShygWBXCmOMXv5YpTJlMJ5UYglgVh9DDoGkuss6YEGo=) 9: obNE3NdMVlCy0XPf9mK-g4oa9eg.roa (hash: 7NjsanTWQOoFeSktyUJvcMuLG2S6+z5IgmOffiI6238=) 10: p-4YLZxDpc5waN_Zunqo7ZDl4Lo.crl (hash: YpBkEr+Q/EiRV+2KvqgboVfn7JQw1J/xytctcegkXpw=) 11: un7p1oX6IuixEnJw52S1lgp4k0A.roa (hash: zhKv5DC0Mh83opPQLWP9MGfrzkdDgqEhOQ8/1xd2cZA=) 12: vXPdTshBqnn4ghgMByB7XXaLYRA.roa (hash: f07bhqR7ZOptfaHvf20BCw3ge0IxK37mw/76h6jHsI0=) Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/22/dab420-0de3-4321-9c09-6b5f68522a7d/1/p-4YLZxDpc5waN_Zunqo7ZDl4Lo.crl rsync://rpki.ripe.net/repository/DEFAULT/22/dab420-0de3-4321-9c09-6b5f68522a7d/1/p-4YLZxDpc5waN_Zunqo7ZDl4Lo.mft rsync://rpki.ripe.net/repository/DEFAULT/p-4YLZxDpc5waN_Zunqo7ZDl4Lo.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Tue 09 Sep 2025 04:01:30 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:99:27:7c:6f:bf:32:c0:30:61:56:7b:f3:91:88:92:12:0d Signature Algorithm: sha256WithRSAEncryption Issuer: CN=a7ee182d9c43a5ce7068dfd9ba7aa8ed90e5e0ba Validity Not Before: Sep 8 04:01:30 2025 GMT Not After : Sep 9 04:01:30 2025 GMT Subject: CN=f526a5f4f7d5381aa69b255c7ff1006283d5cfe7 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:9a:6a:29:8f:ac:e6:00:01:41:6f:40:a3:68:2e: 85:61:bf:82:80:02:3f:6f:54:ff:77:a4:a0:67:7b: 7b:9f:88:6d:3e:50:d4:79:78:cd:39:4a:59:1e:11: 3a:ed:f5:0b:be:d8:1f:2f:e9:16:45:bd:07:45:3a: 83:bb:04:5e:0a:87:5c:53:c4:61:72:b1:c6:4b:7a: 73:92:58:3a:47:1f:99:3b:09:5b:fa:52:e1:94:28: f0:31:bd:4e:ea:00:b2:61:77:d6:a9:dd:dd:79:dd: e1:88:e5:4c:08:fd:bf:c4:50:75:ca:8a:1e:f2:f1: 13:0e:3c:30:ec:fb:c2:11:e5:7c:d0:21:6c:d6:8c: c1:c4:a1:a8:18:cf:3a:58:e1:a5:d6:b1:79:5d:9f: aa:78:dd:35:c3:65:97:8a:52:4c:9d:a9:e9:90:9f: ab:3e:5d:62:48:37:40:40:4f:11:82:44:e9:f8:a7: b9:63:6f:af:3b:b8:88:fe:e5:3d:9e:07:3a:ba:03: 1d:34:fe:fd:56:b3:2d:c6:f7:59:02:b6:7d:ab:9a: 74:d9:9a:03:2a:df:0e:8d:11:7f:d4:5f:40:57:9a: b0:26:a6:47:e4:4b:ed:b0:9f:ff:5e:6a:01:50:b7: da:e1:60:d6:7d:51:4e:af:7d:1d:b6:e3:11:96:e8: 9a:bd Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: F5:26:A5:F4:F7:D5:38:1A:A6:9B:25:5C:7F:F1:00:62:83:D5:CF:E7 X509v3 Authority Key Identifier: keyid:A7:EE:18:2D:9C:43:A5:CE:70:68:DF:D9:BA:7A:A8:ED:90:E5:E0:BA X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/p-4YLZxDpc5waN_Zunqo7ZDl4Lo.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/22/dab420-0de3-4321-9c09-6b5f68522a7d/1/p-4YLZxDpc5waN_Zunqo7ZDl4Lo.mft X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/22/dab420-0de3-4321-9c09-6b5f68522a7d/1/p-4YLZxDpc5waN_Zunqo7ZDl4Lo.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption a1:c0:e1:b8:6f:ca:c3:4c:53:7b:4a:5c:ac:66:81:5d:26:6a: 4c:d4:02:3b:2f:2f:f4:36:79:93:c6:4e:fc:b3:e7:fe:84:1e: 50:5d:30:ac:df:19:d2:95:e0:2c:16:84:91:48:6d:3c:82:0b: 9c:4b:69:bc:c9:1e:36:90:d1:33:a8:fa:f3:23:29:6c:ad:f2: 20:30:fe:79:b8:cd:04:30:79:06:8e:fc:38:2c:63:37:61:6f: 23:fb:6e:f8:34:d6:6a:8e:77:45:c5:cf:78:bb:65:9c:76:33: e9:fb:18:82:69:15:6c:3c:3e:3e:97:e6:22:fb:01:a4:54:05: 71:45:73:a6:fc:cb:1f:6a:41:a6:03:0e:17:d2:30:ea:c0:34: af:ff:67:aa:17:6b:db:ad:3e:47:32:bb:3f:ad:19:70:67:b7: 43:64:ed:22:ef:37:b9:be:bd:6d:46:34:21:17:73:ec:3a:fe: c6:23:eb:94:c2:fd:d6:a3:85:f0:d3:89:15:49:05:d8:03:22: 8d:f3:e0:0f:c5:a9:2f:c2:3e:2c:3f:bc:59:93:0a:7f:e2:fd: f7:37:b4:09:37:6b:12:65:de:f3:a4:82:5c:55:6c:0b:62:66: 38:d7:f9:fc:85:a9:88:70:df:0f:c7:86:97:40:5f:5c:d7:97: b5:9b:d2:db -----BEGIN CERTIFICATE----- MIIFFjCCA/6gAwIBAgISAZknfG+/MsAwYVZ785GIkhINMA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKGE3ZWUxODJkOWM0M2E1Y2U3MDY4ZGZkOWJhN2FhOGVkOTBl NWUwYmEwHhcNMjUwOTA4MDQwMTMwWhcNMjUwOTA5MDQwMTMwWjAzMTEwLwYDVQQD EyhmNTI2YTVmNGY3ZDUzODFhYTY5YjI1NWM3ZmYxMDA2MjgzZDVjZmU3MIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAmmopj6zmAAFBb0CjaC6FYb+CgAI/ b1T/d6SgZ3t7n4htPlDUeXjNOUpZHhE67fULvtgfL+kWRb0HRTqDuwReCodcU8Rh crHGS3pzklg6Rx+ZOwlb+lLhlCjwMb1O6gCyYXfWqd3ded3hiOVMCP2/xFB1yooe 8vETDjww7PvCEeV80CFs1ozBxKGoGM86WOGl1rF5XZ+qeN01w2WXilJMnanpkJ+r Pl1iSDdAQE8RgkTp+Ke5Y2+vO7iI/uU9ngc6ugMdNP79VrMtxvdZArZ9q5p02ZoD Kt8OjRF/1F9AV5qwJqZH5EvtsJ//XmoBULfa4WDWfVFOr30dtuMRluiavQIDAQAB o4ICIjCCAh4wHQYDVR0OBBYEFPUmpfT31TgappslXH/xAGKD1c/nMB8GA1UdIwQY MBaAFKfuGC2cQ6XOcGjf2bp6qO2Q5eC6MA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvcC00WUxaeERwYzV3YU5fWnVucW83WkRsNExvLmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC8yMi9kYWI0MjAtMGRlMy00MzIxLTljMDkt NmI1ZjY4NTIyYTdkLzEvcC00WUxaeERwYzV3YU5fWnVucW83WkRsNExvLm1mdDCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC8yMi9kYWI0MjAtMGRlMy00MzIxLTljMDktNmI1ZjY4NTIyYTdk LzEvcC00WUxaeERwYzV3YU5fWnVucW83WkRsNExvLmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAocDhuG/K w0xTe0pcrGaBXSZqTNQCOy8v9DZ5k8ZO/LPn/oQeUF0wrN8Z0pXgLBaEkUhtPIIL nEtpvMkeNpDRM6j68yMpbK3yIDD+ebjNBDB5Bo78OCxjN2FvI/tu+DTWao53RcXP eLtlnHYz6fsYgmkVbDw+PpfmIvsBpFQFcUVzpvzLH2pBpgMOF9Iw6sA0r/9nqhdr 260+RzK7P60ZcGe3Q2TtIu83ub69bUY0IRdz7Dr+xiPrlML91qOF8NOJFUkF2AMi jfPgD8WpL8I+LD+8WZMKf+L99ze0CTdrEmXe86SCXFVsC2JmONf5/IWpiHDfD8eG l0BfXNeXtZvS2w== -----END CERTIFICATE-----Generated at Mon Sep 8 13:32:20 2025 by rpki-client