$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/2a/e1ad7a-12e7-4fd0-b61e-d1a7772db076/1/FwZ5d-_RS8ifsNq6A7sPYA-7AYQ.mft File: FwZ5d-_RS8ifsNq6A7sPYA-7AYQ.mft (raw, json) Hash identifier: 0o6qM2q5w3jTnkzqVT62l9EouZTcgY1YQOxvirqV04s= Subject key identifier: EB:4D:66:57:37:0E:74:CE:DA:EF:85:9C:7E:E3:35:34:E6:28:EA:3C Authority key identifier: 17:06:79:77:EF:D1:4B:C8:9F:B0:DA:BA:03:BB:0F:60:0F:BB:01:84 Certificate issuer: /CN=17067977efd14bc89fb0daba03bb0f600fbb0184 Certificate serial: 019919F883F068AE44C304FBC93D424AB93E Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/FwZ5d-_RS8ifsNq6A7sPYA-7AYQ.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/2a/e1ad7a-12e7-4fd0-b61e-d1a7772db076/1/FwZ5d-_RS8ifsNq6A7sPYA-7AYQ.mft Manifest number: 1211 Signing time: Fri 05 Sep 2025 13:02:21 +0000 Manifest this update: Fri 05 Sep 2025 13:02:21 +0000 Manifest next update: Sat 06 Sep 2025 13:02:21 +0000 Files and hashes: 1: 2yO0ZDrHd8OJFuwn55d-HtQZzoc.roa (hash: TfV5gjjTMgj1xj0Upkt0peRpp3goSL2reEN8E3rsU9U=) 2: 65UW0bP330_sbiHmhn1GPke5-s0.roa (hash: 9frLX6TRDGO7w/2l84LcQ4FcvrGdeUXKebJFsxtBILI=) 3: 7jwxCTrpuBYCzl_mE2RCtp0REXI.roa (hash: +ypxyRmQFEVXeIrygXjJlGbbYxoSAkj90Kr5Ppz5cVM=) 4: 9-cNoUHfts0wQ_gvF0Ks-jvLNo8.roa (hash: 7JFrmTCKHutOWT6lIT9Dw7Z0P0VWT+jDVcU4+bfyDdY=) 5: Da21pS828C54GQ_yJKfeR-VgNvg.roa (hash: seVJR3ydsOQWSdKV1D2g8cTVT58k9esOBVVLIg0YE80=) 6: FM2IQt7d-4Rp8xS9GcEuVbbZTQY.roa (hash: 2RNY6t1SKoygJiGWODeZfSRgLVFzQXJJ5MLlWHcPa0A=) 7: FwZ5d-_RS8ifsNq6A7sPYA-7AYQ.crl (hash: O79dPA0HSIy/sxkJ1+bInvpP4GWK7bh8qKoQ7WM1Y8o=) 8: NQcuOOpONj3a9z3Dj-GLQbt0kDw.roa (hash: h+4HjzE0Tk7kU3sRXvD7Snt8R7jGw2sZzaJ0K3fjYVk=) 9: NSYavHGFkjW9fPOW1IOQ-kAXpiw.roa (hash: bIlwmcqM0xR+NaQTXsekU/G4W1PV6OipwVLIIvkpte8=) 10: Pqgs8GxJxd3RB-9nQ3zYGfd-UqQ.roa (hash: M6uYkLbVdZzoxMrzslJAyf+dKNKxxdwwoY8rXjymTu4=) 11: UzvoNIBCTayYuI6U30KDrmerNuU.roa (hash: ER4WPs+jwzqBTn7Puvn1t7r63jTe9VQjgZr+2QHU1CA=) 12: XGOuHgklPAXFF9PgAhcplLrpo5E.roa (hash: Pv9wp2//FIn+5bdveKZPF+ZeW5gxmAnJZ0pNFRghqZU=) 13: bZlGijfeNEl-x-IiS0Ky-q77tm0.roa (hash: f/M9aua04QSWccc2gLhyG05EM5mGGUqhQ3DOc0PuNJA=) 14: bZqocWZwcU5ZaTTgVW1c4s9fiMo.roa (hash: V7YCD7e4GhCq4YTEJi9oA8hOwYBama0jJDytOGcYv1s=) 15: b_BH8k9dkbRKJ0Ey58ItHR33E0o.roa (hash: fq+WuygPKpc2KtNCX59PHbTRL3jzzc5JcGmz5xkPFE4=) 16: cdQEhr1O999um7MubPp-AySW3SU.roa (hash: kCWL/fzpDob5h7QESa50Y8FlUEupbCUO8I1kcI0W7jU=) 17: cyBS3fAo042cEWYq-ULKBfWmEYM.roa (hash: lGLWllBey91le8GZeS3K6F+EddIaYMAhM6BNqVcxruc=) 18: dwbrpKdHneYwi6Da8KbDgkX0CFk.roa (hash: U/aZ7WuyrXf3NvUwErTGp+ud4TsEFtx0YqpNoC5JosA=) 19: fwVrtZ5ukpHJADRQ973fQLlwSq8.roa (hash: +fmmqMgZKKsqId3qofqToV4Cyb2Bc8ldGVtgwbDXlj8=) 20: xiRO9TKkYnG3F5XRPtGp8yJfGdk.roa (hash: jvkL9UNrV/XhDKwlKTr7+v9+oligHaLGnfb05Kn+v4s=) Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/2a/e1ad7a-12e7-4fd0-b61e-d1a7772db076/1/FwZ5d-_RS8ifsNq6A7sPYA-7AYQ.crl rsync://rpki.ripe.net/repository/DEFAULT/2a/e1ad7a-12e7-4fd0-b61e-d1a7772db076/1/FwZ5d-_RS8ifsNq6A7sPYA-7AYQ.mft rsync://rpki.ripe.net/repository/DEFAULT/FwZ5d-_RS8ifsNq6A7sPYA-7AYQ.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Sat 06 Sep 2025 10:00:24 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:99:19:f8:83:f0:68:ae:44:c3:04:fb:c9:3d:42:4a:b9:3e Signature Algorithm: sha256WithRSAEncryption Issuer: CN=17067977efd14bc89fb0daba03bb0f600fbb0184 Validity Not Before: Sep 5 13:02:21 2025 GMT Not After : Sep 6 13:02:21 2025 GMT Subject: CN=eb4d6657370e74cedaef859c7ee33534e628ea3c Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:ce:ad:4c:7f:bc:6b:c5:38:30:37:74:9d:65:64: 76:07:d0:36:09:2c:49:93:2e:d7:6c:3b:68:89:5b: d0:0b:37:c0:9b:1c:2f:10:05:9c:92:95:45:fb:96: e8:36:f3:24:a3:6a:5d:c9:b3:72:22:4b:fb:84:f2: 26:24:18:e0:25:4e:3f:48:38:fb:45:b0:1a:93:06: 9b:bb:aa:ee:ce:fe:98:38:26:59:f7:b1:52:11:9b: e1:9f:e5:30:44:59:a0:82:db:1d:e5:65:24:b3:22: 4a:78:31:7a:d0:e9:37:74:b4:0c:dc:d1:af:57:4a: 59:d2:6d:5c:21:7e:24:32:aa:54:a4:f0:92:de:47: 91:27:38:56:10:3c:81:0e:ec:a1:77:83:36:e3:3f: 35:54:60:00:85:06:e2:fc:56:a5:c0:06:17:4c:9f: b5:18:12:1d:65:6f:18:b5:0f:05:ab:b2:18:1f:53: f6:f4:65:b4:7e:39:cd:c3:7a:b6:ab:da:3a:a8:0d: ec:ee:ec:43:9b:44:bd:be:94:97:c4:a8:2d:8d:e0: 2d:72:fd:25:b7:d9:91:4f:a4:80:37:f9:46:ba:69: 1c:79:99:e2:23:a4:27:dd:1f:e1:9f:15:44:27:27: d1:35:87:2c:f1:16:07:06:6d:be:3f:a8:2f:0d:25: 81:cb Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: EB:4D:66:57:37:0E:74:CE:DA:EF:85:9C:7E:E3:35:34:E6:28:EA:3C X509v3 Authority Key Identifier: keyid:17:06:79:77:EF:D1:4B:C8:9F:B0:DA:BA:03:BB:0F:60:0F:BB:01:84 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/FwZ5d-_RS8ifsNq6A7sPYA-7AYQ.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/2a/e1ad7a-12e7-4fd0-b61e-d1a7772db076/1/FwZ5d-_RS8ifsNq6A7sPYA-7AYQ.mft X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/2a/e1ad7a-12e7-4fd0-b61e-d1a7772db076/1/FwZ5d-_RS8ifsNq6A7sPYA-7AYQ.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption ac:cc:b3:c9:53:68:24:54:15:7d:04:d5:d9:94:23:22:e8:48: 2c:e1:53:d6:95:d1:ee:62:31:38:d7:b9:dd:e3:3b:cd:f2:f0: a2:9f:ab:13:73:ab:ba:e6:bf:ef:ed:6c:98:12:28:99:44:4e: 7c:97:55:7b:8a:a2:ec:7c:26:90:88:7b:3f:f0:e4:21:df:8b: e9:e7:88:68:ba:e9:36:8e:10:cb:86:66:5c:26:b7:75:04:6f: 3f:f4:a2:0d:ba:88:33:34:ff:03:09:8c:4b:ec:fb:5b:71:fc: e5:fe:de:12:a7:15:ea:f2:94:9d:ce:5b:2a:28:e0:a7:b1:48: 7e:86:5a:5c:27:e9:88:3d:78:36:8c:eb:56:b4:69:85:1f:27: 2f:14:22:66:30:2f:4b:9d:d4:90:8d:da:8b:f8:e2:4c:0c:6f: 82:45:0d:3d:95:22:f7:7f:75:4d:3e:01:4b:e5:02:93:2f:7a: c8:ac:e4:1f:80:78:8f:ba:a2:c6:cd:5d:b7:95:ff:6c:84:23: 1b:44:93:24:c1:ce:c4:2a:8d:a0:ae:bf:6e:71:11:6f:11:ca: df:d8:90:31:ff:6a:8c:b1:b5:03:9f:76:47:8e:18:10:24:2f: 65:84:dd:5e:92:cf:d4:2a:7e:b3:6f:08:28:0b:85:ca:c5:27: c9:f4:26:84 -----BEGIN CERTIFICATE----- MIIFFjCCA/6gAwIBAgISAZkZ+IPwaK5EwwT7yT1CSrk+MA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKDE3MDY3OTc3ZWZkMTRiYzg5ZmIwZGFiYTAzYmIwZjYwMGZi YjAxODQwHhcNMjUwOTA1MTMwMjIxWhcNMjUwOTA2MTMwMjIxWjAzMTEwLwYDVQQD EyhlYjRkNjY1NzM3MGU3NGNlZGFlZjg1OWM3ZWUzMzUzNGU2MjhlYTNjMIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAzq1Mf7xrxTgwN3SdZWR2B9A2CSxJ ky7XbDtoiVvQCzfAmxwvEAWckpVF+5boNvMko2pdybNyIkv7hPImJBjgJU4/SDj7 RbAakwabu6ruzv6YOCZZ97FSEZvhn+UwRFmggtsd5WUksyJKeDF60Ok3dLQM3NGv V0pZ0m1cIX4kMqpUpPCS3keRJzhWEDyBDuyhd4M24z81VGAAhQbi/FalwAYXTJ+1 GBIdZW8YtQ8Fq7IYH1P29GW0fjnNw3q2q9o6qA3s7uxDm0S9vpSXxKgtjeAtcv0l t9mRT6SAN/lGumkceZniI6Qn3R/hnxVEJyfRNYcs8RYHBm2+P6gvDSWBywIDAQAB o4ICIjCCAh4wHQYDVR0OBBYEFOtNZlc3DnTO2u+FnH7jNTTmKOo8MB8GA1UdIwQY MBaAFBcGeXfv0UvIn7DaugO7D2APuwGEMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvRndaNWQtX1JTOGlmc05xNkE3c1BZQS03QVlRLmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC8yYS9lMWFkN2EtMTJlNy00ZmQwLWI2MWUt ZDFhNzc3MmRiMDc2LzEvRndaNWQtX1JTOGlmc05xNkE3c1BZQS03QVlRLm1mdDCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC8yYS9lMWFkN2EtMTJlNy00ZmQwLWI2MWUtZDFhNzc3MmRiMDc2 LzEvRndaNWQtX1JTOGlmc05xNkE3c1BZQS03QVlRLmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEArMyzyVNo JFQVfQTV2ZQjIuhILOFT1pXR7mIxONe53eM7zfLwop+rE3Oruua/7+1smBIomURO fJdVe4qi7HwmkIh7P/DkId+L6eeIaLrpNo4Qy4ZmXCa3dQRvP/SiDbqIMzT/AwmM S+z7W3H85f7eEqcV6vKUnc5bKijgp7FIfoZaXCfpiD14NozrVrRphR8nLxQiZjAv S53UkI3ai/jiTAxvgkUNPZUi9391TT4BS+UCky96yKzkH4B4j7qixs1dt5X/bIQj G0STJMHOxCqNoK6/bnERbxHK39iQMf9qjLG1A592R44YECQvZYTdXpLP1Cp+s28I KAuFysUnyfQmhA== -----END CERTIFICATE-----Generated at Fri Sep 5 20:00:07 2025 by rpki-client