$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/24/b51a85-f99f-423f-9fae-dd294c378f6c/1/2MYKDS1wqTN9C9pW0a1ZasH2nNo.mft File: 2MYKDS1wqTN9C9pW0a1ZasH2nNo.mft (raw, json) Hash identifier: 5DpXIAZkNPrJt0wYpa0XA5LnNkjtM8TRzk2GTOxsw8I= Subject key identifier: 55:7E:0E:F9:72:74:AF:BA:47:8A:77:3A:7D:F9:48:8B:ED:BA:A6:30 Authority key identifier: D8:C6:0A:0D:2D:70:A9:33:7D:0B:DA:56:D1:AD:59:6A:C1:F6:9C:DA Certificate issuer: /CN=d8c60a0d2d70a9337d0bda56d1ad596ac1f69cda Certificate serial: 0199172D6DA0755DD23A4DECBDD9FD2D7E95 Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/2MYKDS1wqTN9C9pW0a1ZasH2nNo.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/24/b51a85-f99f-423f-9fae-dd294c378f6c/1/2MYKDS1wqTN9C9pW0a1ZasH2nNo.mft Manifest number: 1078 Signing time: Fri 05 Sep 2025 00:01:17 +0000 Manifest this update: Fri 05 Sep 2025 00:01:17 +0000 Manifest next update: Sat 06 Sep 2025 00:01:17 +0000 Files and hashes: 1: 1sKE36lDWeWUjMSloo6n26lQvxE.roa (hash: 0YFmLsRRla2daPn9GavHfi/iWCjcjVBR51fAM/YzUPA=) 2: 2MYKDS1wqTN9C9pW0a1ZasH2nNo.crl (hash: nTCXi8TTbPvFJEazOWmgB1qKGLc9LOMxR8lfaUhl27s=) 3: 7KfLp6tWihAhdW_ZCJGaxH-KxhA.roa (hash: TNNFwSmMyWVi4jN+jvMQ3wmmO3p3q2BXU7y9CZpeBFo=) 4: 8GeGNNzjzZvJIEAAhJi9tW2bbrA.roa (hash: Eto9TySCaxnkkdyIGeX6PMXh8s89OGTNecNbv02FHmY=) 5: BinZKeyg5gKkO8gwYJ0Ze8CeRxs.roa (hash: y9nENbUlBNsJYj+Cw11EQBzVD35m8OwMSWBUyRfdWao=) 6: CWwZKtjic8hgoUqW8Q2C2AbAOcg.roa (hash: kwrireSUCM8B5X7b/jFwe6owVISrGhqj47+KxFuhlXE=) 7: JS3mwrKoM_bu1YlMg44SqBJyzi4.roa (hash: FctYPf15GQv8egu27KZUZZfAkIishBp5/PDkotJF9Wg=) 8: ZH0QvaHOPvJPYEbUbSGF-chYfuI.roa (hash: GNpLUKAR49JusHGuTxHkn0FssgkY3qDBV+p8eW6v2dA=) 9: biowetcg3ehch8_ZT-Bjgdr3xVQ.roa (hash: +3UkGpMA2we3DWKym0QAg124Kd/FTF+tUn4YLgIyHpE=) 10: gmGmlBXuT4XMadwFIMM_Ru7A8rY.roa (hash: C02/amx+lTSpWSc0IFfRlXGRMUsC7V5LK9TrUNGhpXk=) 11: j0duG-Ijddau9Fj9XQZGhj9d5E0.roa (hash: jAtA5pws2q4wQ+M2hNZZyClsEg5rjHmu2VOiOpDAE88=) 12: mP8Qz54E01SquciLEGB10XN2R-M.roa (hash: TdXFl7ZveLTgT4OrOlqkJ84pFNT0T+LUDZ5933YP0mE=) 13: suXcRzS6-_4AE_w0ZJlYPW8wMRM.roa (hash: +PBYO+10etR0ZMMQ1FwMVF/GjPtirIZFSfWGb9cD2rU=) 14: yRlATHfw4VPtk07WpZ6YJCL0ujk.roa (hash: qFhl3+M+zqPL0w/p5+UX5EFi+fLod6eaZpO9ZGTbXcw=) 15: yVFu2BG-2jPO42o54RBasvcduFQ.roa (hash: 6xPh274P2CTFpVhbpm7wdZ5x4IvYPBNr1EUV4XIfsgM=) Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/24/b51a85-f99f-423f-9fae-dd294c378f6c/1/2MYKDS1wqTN9C9pW0a1ZasH2nNo.crl rsync://rpki.ripe.net/repository/DEFAULT/24/b51a85-f99f-423f-9fae-dd294c378f6c/1/2MYKDS1wqTN9C9pW0a1ZasH2nNo.mft rsync://rpki.ripe.net/repository/DEFAULT/2MYKDS1wqTN9C9pW0a1ZasH2nNo.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Sat 06 Sep 2025 00:01:17 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:99:17:2d:6d:a0:75:5d:d2:3a:4d:ec:bd:d9:fd:2d:7e:95 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=d8c60a0d2d70a9337d0bda56d1ad596ac1f69cda Validity Not Before: Sep 5 00:01:17 2025 GMT Not After : Sep 6 00:01:17 2025 GMT Subject: CN=557e0ef97274afba478a773a7df9488bedbaa630 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:b7:40:7c:dd:9e:77:bf:3d:64:13:65:c3:2e:4d: 4d:eb:72:53:e4:5f:92:51:69:80:c6:bf:26:0a:b2: dc:1e:91:4c:0a:88:ff:10:9e:4f:60:69:c1:04:a0: c7:1f:d4:74:a6:12:76:4c:9b:14:6c:e9:33:61:37: fc:9a:fd:0e:c6:82:f0:20:ea:be:04:ee:38:f4:4a: 93:63:fa:bd:62:09:9e:90:cf:b9:bd:69:00:a8:22: 32:57:c9:7b:02:2e:fb:cf:20:82:9a:f3:65:2a:12: 60:60:0b:f6:69:1c:7d:42:d8:4e:08:0b:51:83:46: 8d:b5:a2:20:c0:e4:c4:c5:52:f0:c0:31:1e:65:7c: a2:39:09:26:4c:ff:ed:e5:59:32:b6:ce:94:31:de: 5b:b3:35:25:58:f6:41:50:bb:0e:29:fc:d9:09:db: 24:14:cc:86:c7:4a:e9:e6:a5:5f:0a:55:ac:a1:d2: 80:b8:c5:03:6e:7e:4d:64:e5:39:71:26:7f:0b:1f: 58:4b:c3:c5:ba:10:ca:3e:e6:b9:23:3d:71:4e:c7: 7a:61:c0:96:35:6b:3f:d3:af:9f:92:04:1e:08:6f: b1:07:79:26:7f:09:cf:db:90:80:e7:7c:69:24:86: 35:28:e6:ab:53:3e:cb:d1:3a:0b:92:f1:00:55:c0: 4c:03 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 55:7E:0E:F9:72:74:AF:BA:47:8A:77:3A:7D:F9:48:8B:ED:BA:A6:30 X509v3 Authority Key Identifier: keyid:D8:C6:0A:0D:2D:70:A9:33:7D:0B:DA:56:D1:AD:59:6A:C1:F6:9C:DA X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/2MYKDS1wqTN9C9pW0a1ZasH2nNo.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/24/b51a85-f99f-423f-9fae-dd294c378f6c/1/2MYKDS1wqTN9C9pW0a1ZasH2nNo.mft X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/24/b51a85-f99f-423f-9fae-dd294c378f6c/1/2MYKDS1wqTN9C9pW0a1ZasH2nNo.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 75:20:d9:1c:1e:aa:7f:22:39:3b:cc:58:1f:00:ef:d1:a4:61: e9:7a:c2:d3:b2:2a:9a:e7:e2:b4:84:06:18:df:f5:cf:8c:69: f3:3b:d8:12:80:21:fc:6e:41:31:6d:d2:4c:b2:57:f0:18:0b: 8a:17:a3:65:c9:62:09:ee:c2:bf:9a:b2:d9:d7:f7:90:9e:37: d1:ba:56:45:34:9b:04:ca:9f:36:b5:68:8f:69:95:60:5d:24: 8a:e9:1c:34:a7:65:8c:2c:35:91:47:a8:eb:63:8e:43:09:cf: 49:07:12:83:ed:8d:1b:d8:87:f2:51:54:0f:6a:57:77:a1:d2: 68:08:a4:ba:ef:b4:ff:7d:ea:61:19:1e:3e:7d:c2:b1:33:ee: 83:7a:90:51:f2:97:c7:c0:18:d0:38:8e:ea:30:f3:60:5e:81: 50:6f:c3:bf:39:65:8d:e5:84:cc:00:73:84:64:82:4c:79:40: 65:66:6d:bf:23:40:ac:1a:9c:13:80:0e:7b:e8:d4:db:a2:e2: 7e:79:d5:96:b6:00:6e:00:34:b4:67:69:84:0e:10:46:58:43: 1f:a8:db:41:d1:8a:2c:59:e2:24:a2:28:ff:e9:8e:56:1e:38: 03:dd:aa:29:ac:88:63:36:1c:78:a5:2b:27:34:d8:a9:ad:01: 51:0b:da:6b -----BEGIN CERTIFICATE----- MIIFFjCCA/6gAwIBAgISAZkXLW2gdV3SOk3svdn9LX6VMA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKGQ4YzYwYTBkMmQ3MGE5MzM3ZDBiZGE1NmQxYWQ1OTZhYzFm NjljZGEwHhcNMjUwOTA1MDAwMTE3WhcNMjUwOTA2MDAwMTE3WjAzMTEwLwYDVQQD Eyg1NTdlMGVmOTcyNzRhZmJhNDc4YTc3M2E3ZGY5NDg4YmVkYmFhNjMwMIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAt0B83Z53vz1kE2XDLk1N63JT5F+S UWmAxr8mCrLcHpFMCoj/EJ5PYGnBBKDHH9R0phJ2TJsUbOkzYTf8mv0OxoLwIOq+ BO449EqTY/q9YgmekM+5vWkAqCIyV8l7Ai77zyCCmvNlKhJgYAv2aRx9QthOCAtR g0aNtaIgwOTExVLwwDEeZXyiOQkmTP/t5Vkyts6UMd5bszUlWPZBULsOKfzZCdsk FMyGx0rp5qVfClWsodKAuMUDbn5NZOU5cSZ/Cx9YS8PFuhDKPua5Iz1xTsd6YcCW NWs/06+fkgQeCG+xB3kmfwnP25CA53xpJIY1KOarUz7L0ToLkvEAVcBMAwIDAQAB o4ICIjCCAh4wHQYDVR0OBBYEFFV+DvlydK+6R4p3On35SIvtuqYwMB8GA1UdIwQY MBaAFNjGCg0tcKkzfQvaVtGtWWrB9pzaMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvMk1ZS0RTMXdxVE45QzlwVzBhMVphc0gybk5vLmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC8yNC9iNTFhODUtZjk5Zi00MjNmLTlmYWUt ZGQyOTRjMzc4ZjZjLzEvMk1ZS0RTMXdxVE45QzlwVzBhMVphc0gybk5vLm1mdDCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC8yNC9iNTFhODUtZjk5Zi00MjNmLTlmYWUtZGQyOTRjMzc4ZjZj LzEvMk1ZS0RTMXdxVE45QzlwVzBhMVphc0gybk5vLmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAdSDZHB6q fyI5O8xYHwDv0aRh6XrC07IqmufitIQGGN/1z4xp8zvYEoAh/G5BMW3STLJX8BgL ihejZcliCe7Cv5qy2df3kJ430bpWRTSbBMqfNrVoj2mVYF0kiukcNKdljCw1kUeo 62OOQwnPSQcSg+2NG9iH8lFUD2pXd6HSaAikuu+0/33qYRkePn3CsTPug3qQUfKX x8AY0DiO6jDzYF6BUG/DvzlljeWEzABzhGSCTHlAZWZtvyNArBqcE4AOe+jU26Li fnnVlrYAbgA0tGdphA4QRlhDH6jbQdGKLFniJKIo/+mOVh44A92qKayIYzYceKUr JzTYqa0BUQvaaw== -----END CERTIFICATE-----Generated at Fri Sep 5 09:56:00 2025 by rpki-client