$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/29/cc8f4a-4c02-404b-8d93-2cde65f3112a/1/h74JMJcJfERX_1qj5Yk8jBVDJhI.mft File: h74JMJcJfERX_1qj5Yk8jBVDJhI.mft (raw, json) Hash identifier: Nl1rRtJxLkDYyyUiaSCn/VQWcPvbKa/nYXVP32YZKhY= Subject key identifier: 05:0D:86:16:E1:8E:2D:CF:64:C7:94:BB:BF:98:37:4C:B8:BD:43:EA Authority key identifier: 87:BE:09:30:97:09:7C:44:57:FF:5A:A3:E5:89:3C:8C:15:43:26:12 Certificate issuer: /CN=87be093097097c4457ff5aa3e5893c8c15432612 Certificate serial: 01994E89EC5E50F28E0546BDCAE60D04770E Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/h74JMJcJfERX_1qj5Yk8jBVDJhI.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/29/cc8f4a-4c02-404b-8d93-2cde65f3112a/1/h74JMJcJfERX_1qj5Yk8jBVDJhI.mft Manifest number: 1318 Signing time: Mon 15 Sep 2025 18:01:25 +0000 Manifest this update: Mon 15 Sep 2025 18:01:25 +0000 Manifest next update: Tue 16 Sep 2025 18:01:25 +0000 Files and hashes: 1: 58EBygRjdS7517jE8ijFSPfVOH4.roa (hash: 7YP7WUOPsrK23qXejFg0a6c2K8s3GbzwWCeuhRLXrr4=) 2: 6gQb_YrXJIkOy1ffV5AywwaDFKA.roa (hash: YBUcx/W2YYWfTW+ZfLh5vpIiC6jkcxCKGBt0nojo2Ok=) 3: CjTW9-CUmuY1lxZ8OqndS2FXSrY.roa (hash: 9DQ0LnRbHYpMYq+dl7Z0Jfv0Jx2DrmotGXluT5sxbiI=) 4: UYD_ol6L79u8glgaI6wKUZit3aI.roa (hash: Gf9BtC+mpY9FQr0OFj9WV8BSFzyS8ChMq/mXIibBTC4=) 5: YxuPih3fAlXVoEE31gDs9iD2i1w.roa (hash: x8butTOJLg1TuADmdhNJfjqeOtty4tQbuYOKyeZNAJI=) 6: cgfWhp9nnNlIFwxwBmM9ufcXLT8.roa (hash: d9o/0tEnmxkRdMrExtvCAvZnhgV08vpjue2h9xSnd5M=) 7: h74JMJcJfERX_1qj5Yk8jBVDJhI.crl (hash: wUV/9mLoNIjPioNAp5oxWkrbx0aIt/vDOsijJ3LmqtE=) 8: jS9AN5oD9gr_onzGTzL8xf4_tCg.roa (hash: L5WRngdm8hXH1GtO9dblNyDW24uvtXBx7hO8Cv9i3R8=) 9: l73XbGk7c4j4MjyLCnCZ2AhSa5g.roa (hash: zN4KADzvP9RDaA1coLbTnlm7K8otMtISf3HRhyFdP4I=) 10: zDYhvUbelcRpqpslUbRSgUjh_fg.roa (hash: oMqhUHMRnzSTRY98vl61orkGgfrk9poSjKlRD++vvbQ=) Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/29/cc8f4a-4c02-404b-8d93-2cde65f3112a/1/h74JMJcJfERX_1qj5Yk8jBVDJhI.crl rsync://rpki.ripe.net/repository/DEFAULT/29/cc8f4a-4c02-404b-8d93-2cde65f3112a/1/h74JMJcJfERX_1qj5Yk8jBVDJhI.mft rsync://rpki.ripe.net/repository/DEFAULT/h74JMJcJfERX_1qj5Yk8jBVDJhI.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Tue 16 Sep 2025 13:46:11 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:99:4e:89:ec:5e:50:f2:8e:05:46:bd:ca:e6:0d:04:77:0e Signature Algorithm: sha256WithRSAEncryption Issuer: CN=87be093097097c4457ff5aa3e5893c8c15432612 Validity Not Before: Sep 15 18:01:25 2025 GMT Not After : Sep 16 18:01:25 2025 GMT Subject: CN=050d8616e18e2dcf64c794bbbf98374cb8bd43ea Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:c6:41:e1:f1:d3:96:9a:01:63:1d:7e:91:6f:b3: 16:f4:43:aa:16:dd:89:7e:15:69:01:2b:48:03:89: 36:eb:c6:15:0f:9f:6f:88:d6:ad:54:08:f7:27:ff: d8:4e:3d:02:a3:ab:29:a5:3f:56:5b:01:0f:62:bd: e1:8b:3e:68:73:1c:13:64:b6:d9:19:fa:b1:71:03: cb:0c:64:2f:4d:68:56:87:9e:22:e2:15:70:cb:a6: d4:f0:ce:4c:1d:35:c4:67:4b:3f:a0:9b:80:88:6c: 1d:b6:53:ac:69:5a:00:ce:27:2d:ac:ab:90:27:5d: 90:77:73:99:3f:47:c3:0d:f9:89:f2:b4:67:72:66: d4:a4:6a:64:6b:7f:08:2f:11:1b:95:f4:64:94:87: d7:f8:a0:94:bf:35:52:ec:40:b1:41:7b:06:5d:ff: a9:d2:c4:78:0a:1c:b8:f9:8b:3b:74:d3:d2:65:aa: d0:52:90:76:47:bb:f8:31:b8:c1:bb:2d:de:12:45: 20:59:d7:6b:a0:c1:81:46:14:48:87:0c:34:40:47: ab:e8:41:40:dc:ff:29:a0:72:f2:c7:d0:29:8d:bb: 9d:c4:ce:39:f5:67:87:87:85:70:3c:c3:8a:b2:75: ed:ad:f8:73:77:6f:53:22:1c:89:31:18:87:93:81: 2a:a1 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 05:0D:86:16:E1:8E:2D:CF:64:C7:94:BB:BF:98:37:4C:B8:BD:43:EA X509v3 Authority Key Identifier: keyid:87:BE:09:30:97:09:7C:44:57:FF:5A:A3:E5:89:3C:8C:15:43:26:12 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/h74JMJcJfERX_1qj5Yk8jBVDJhI.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/29/cc8f4a-4c02-404b-8d93-2cde65f3112a/1/h74JMJcJfERX_1qj5Yk8jBVDJhI.mft X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/29/cc8f4a-4c02-404b-8d93-2cde65f3112a/1/h74JMJcJfERX_1qj5Yk8jBVDJhI.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 7c:29:d3:41:b9:f4:cc:db:5e:d8:9e:c6:46:f0:74:da:20:78: 76:62:23:c2:f2:cb:80:32:36:5b:7c:05:ff:af:31:a1:ad:be: 36:87:bf:56:ca:90:d8:c4:5a:41:93:e4:75:42:51:7d:e2:03: 14:3f:74:38:ff:38:96:fc:09:e9:9d:a1:a2:35:86:a0:50:77: 69:69:08:b2:34:39:f6:24:7a:0c:ad:6d:cc:93:fa:e6:78:e4: 60:8b:bb:c1:45:fc:29:df:b2:36:16:85:44:62:58:46:5d:ac: e0:46:6b:43:40:97:dd:20:ec:9c:83:9c:51:08:fd:18:27:7d: 3c:7b:2a:f8:63:7e:b3:b5:39:56:9d:45:af:90:2b:57:a9:b9: 4b:65:53:19:8c:e6:5f:cd:24:05:e1:22:ef:69:ee:3d:56:7b: 3b:96:c2:77:4e:00:de:80:1c:e3:ce:89:29:0d:70:30:92:34: e6:ed:81:cd:89:4f:2a:9f:b9:26:b9:c6:c5:42:3d:e5:3e:45: 34:90:71:91:55:b2:b8:39:bb:d7:77:9c:a1:67:92:43:bf:1e: 0b:8b:51:7b:67:be:62:21:15:4e:d2:9b:63:8f:93:d6:bc:ba: 2c:ac:6d:01:d1:a5:1e:5f:b9:84:59:03:d6:7f:88:ca:45:52: 7e:2c:56:3f -----BEGIN CERTIFICATE----- MIIFFjCCA/6gAwIBAgISAZlOiexeUPKOBUa9yuYNBHcOMA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKDg3YmUwOTMwOTcwOTdjNDQ1N2ZmNWFhM2U1ODkzYzhjMTU0 MzI2MTIwHhcNMjUwOTE1MTgwMTI1WhcNMjUwOTE2MTgwMTI1WjAzMTEwLwYDVQQD EygwNTBkODYxNmUxOGUyZGNmNjRjNzk0YmJiZjk4Mzc0Y2I4YmQ0M2VhMIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAxkHh8dOWmgFjHX6Rb7MW9EOqFt2J fhVpAStIA4k268YVD59viNatVAj3J//YTj0Co6sppT9WWwEPYr3hiz5ocxwTZLbZ GfqxcQPLDGQvTWhWh54i4hVwy6bU8M5MHTXEZ0s/oJuAiGwdtlOsaVoAzictrKuQ J12Qd3OZP0fDDfmJ8rRncmbUpGpka38ILxEblfRklIfX+KCUvzVS7ECxQXsGXf+p 0sR4Chy4+Ys7dNPSZarQUpB2R7v4MbjBuy3eEkUgWddroMGBRhRIhww0QEer6EFA 3P8poHLyx9ApjbudxM459WeHh4VwPMOKsnXtrfhzd29TIhyJMRiHk4EqoQIDAQAB o4ICIjCCAh4wHQYDVR0OBBYEFAUNhhbhji3PZMeUu7+YN0y4vUPqMB8GA1UdIwQY MBaAFIe+CTCXCXxEV/9ao+WJPIwVQyYSMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvaDc0Sk1KY0pmRVJYXzFxajVZazhqQlZESmhJLmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC8yOS9jYzhmNGEtNGMwMi00MDRiLThkOTMt MmNkZTY1ZjMxMTJhLzEvaDc0Sk1KY0pmRVJYXzFxajVZazhqQlZESmhJLm1mdDCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC8yOS9jYzhmNGEtNGMwMi00MDRiLThkOTMtMmNkZTY1ZjMxMTJh LzEvaDc0Sk1KY0pmRVJYXzFxajVZazhqQlZESmhJLmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAfCnTQbn0 zNte2J7GRvB02iB4dmIjwvLLgDI2W3wF/68xoa2+Noe/VsqQ2MRaQZPkdUJRfeID FD90OP84lvwJ6Z2hojWGoFB3aWkIsjQ59iR6DK1tzJP65njkYIu7wUX8Kd+yNhaF RGJYRl2s4EZrQ0CX3SDsnIOcUQj9GCd9PHsq+GN+s7U5Vp1Fr5ArV6m5S2VTGYzm X80kBeEi72nuPVZ7O5bCd04A3oAc486JKQ1wMJI05u2BzYlPKp+5JrnGxUI95T5F NJBxkVWyuDm713ecoWeSQ78eC4tRe2e+YiEVTtKbY4+T1ry6LKxtAdGlHl+5hFkD 1n+IykVSfixWPw== -----END CERTIFICATE-----Generated at Mon Sep 15 23:05:46 2025 by rpki-client