$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/30/173173-819f-4bc9-92d8-78791c9356a3/1/Eb-ilh-g4LBwQSk93Aw2k6ngojg.mft File: Eb-ilh-g4LBwQSk93Aw2k6ngojg.mft (raw, json) Hash identifier: SYfGjAmeHU579ey+vvCuwipHyXmVVS20YORgEEYvGxQ= Subject key identifier: 3C:05:95:F5:B4:6C:02:48:78:3C:6E:58:C7:44:BE:24:33:5C:B2:01 Authority key identifier: 11:BF:A2:96:1F:A0:E0:B0:70:41:29:3D:DC:0C:36:93:A9:E0:A2:38 Certificate issuer: /CN=11bfa2961fa0e0b07041293ddc0c3693a9e0a238 Certificate serial: 01993123E1C04B496834A982BE7DB8E1938B Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/Eb-ilh-g4LBwQSk93Aw2k6ngojg.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/30/173173-819f-4bc9-92d8-78791c9356a3/1/Eb-ilh-g4LBwQSk93Aw2k6ngojg.mft Manifest number: 167E Signing time: Wed 10 Sep 2025 01:00:59 +0000 Manifest this update: Wed 10 Sep 2025 01:00:59 +0000 Manifest next update: Thu 11 Sep 2025 01:00:59 +0000 Files and hashes: 1: 5G5BM-esfF_6C_xQG_XyVMwxyOE.roa (hash: DTEsWku/je4v/TwdVnousshkC1Z9Nk6/Nslvyo2EP34=) 2: Eb-ilh-g4LBwQSk93Aw2k6ngojg.crl (hash: TY0zcC4X8fyTRSAHPzmOoYHPJapUzGDHviutgSRO9AI=) 3: TETu_fLUe48vZB1pOjmaY0SlQQA.roa (hash: gDCE6MhOeAd0nfmLm0m4CAZB11EUzJkcQQpOLfihn0E=) 4: VngaLO49HwnzixCSQrMS5QePJOo.roa (hash: SORIRInRNS+ArP5XpLLGilyF1yJehSCjMcuXLbTFsfc=) 5: YSDMeB2OTSIw6d7x_-ya3YNBb4I.roa (hash: 5DEymavmL/Oqd88L6GTzb0QEXTGCoR8MdiyKdDZSrJI=) 6: drdL02MmNzHMMHIF4yacPWU2kg0.roa (hash: KhAY+4DUpLSPm7dfV38gtwL9yM7jnqqyzPFAlnLXewY=) 7: fTBhrrSBbBFDDDSeRz_t6BtiuYI.roa (hash: jsgnIPPUhjpCdO1fNL/ROC4wGawaLCPOPIUu0X3J2DY=) 8: qS-QZXFJVFLsxStfDN8QKYsFoWA.roa (hash: ub+puMkCknG+9jJcf4x1TFPFmm3wndXxu70WFu0aS+k=) 9: tCyUX7lLcCHL4Eg9b-YCZ8hKq84.roa (hash: ZHN59gKlvLQCayzjjY8TreGgGDaR4N6wRPXQfVrVtuk=) 10: vBseKRkIdbzZO1ddn-ofvdi2GJA.roa (hash: ND3FeKVlWj+XXYRRpKXvYZfwYIWF0c8k6ow+131ixZM=) Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/30/173173-819f-4bc9-92d8-78791c9356a3/1/Eb-ilh-g4LBwQSk93Aw2k6ngojg.crl rsync://rpki.ripe.net/repository/DEFAULT/30/173173-819f-4bc9-92d8-78791c9356a3/1/Eb-ilh-g4LBwQSk93Aw2k6ngojg.mft rsync://rpki.ripe.net/repository/DEFAULT/Eb-ilh-g4LBwQSk93Aw2k6ngojg.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Wed 10 Sep 2025 21:45:22 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:99:31:23:e1:c0:4b:49:68:34:a9:82:be:7d:b8:e1:93:8b Signature Algorithm: sha256WithRSAEncryption Issuer: CN=11bfa2961fa0e0b07041293ddc0c3693a9e0a238 Validity Not Before: Sep 10 01:00:59 2025 GMT Not After : Sep 11 01:00:59 2025 GMT Subject: CN=3c0595f5b46c0248783c6e58c744be24335cb201 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:8a:cb:84:23:8d:52:bf:8a:c7:dd:71:32:57:dd: 9b:ad:01:2d:c0:92:4a:e8:76:8e:d4:04:06:14:80: 48:5b:f6:2e:fb:82:86:9d:ec:61:64:89:cf:d2:30: 54:88:29:92:c4:64:af:71:c3:0e:4f:43:83:f2:79: 93:c2:88:4c:db:d7:84:8c:73:8a:67:a4:b2:31:c2: 14:bf:d4:f9:3b:71:70:57:59:29:c9:47:97:b2:13: 87:59:e8:fc:98:6f:87:50:10:7a:42:ea:5b:a5:71: 63:3d:37:97:54:08:e4:28:75:25:e3:5d:79:d4:6e: 5c:e9:e2:c2:f6:33:4f:1e:f6:76:2c:85:a8:54:ab: 53:5b:53:87:0a:07:18:3f:0f:e9:4d:e9:12:47:db: cd:e6:1f:81:ae:a0:28:c8:86:cb:a3:a6:8c:7a:6e: 8c:55:e1:3c:e9:77:40:f3:f9:05:20:94:99:df:1a: b4:e4:78:87:c8:ea:a3:df:c6:a5:1d:6b:a7:82:cf: f6:3c:7f:4c:cd:a9:1a:36:e6:e8:5d:b4:43:d0:8a: 69:c7:d6:0a:9d:72:93:ad:5c:b9:ed:9e:39:4c:e6: 1c:23:d0:7e:da:fd:d5:ea:17:18:ea:59:d8:bb:d5: d0:49:85:45:30:8c:0c:2d:38:3a:ca:d5:41:e7:53: 67:bd Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 3C:05:95:F5:B4:6C:02:48:78:3C:6E:58:C7:44:BE:24:33:5C:B2:01 X509v3 Authority Key Identifier: keyid:11:BF:A2:96:1F:A0:E0:B0:70:41:29:3D:DC:0C:36:93:A9:E0:A2:38 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/Eb-ilh-g4LBwQSk93Aw2k6ngojg.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/30/173173-819f-4bc9-92d8-78791c9356a3/1/Eb-ilh-g4LBwQSk93Aw2k6ngojg.mft X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/30/173173-819f-4bc9-92d8-78791c9356a3/1/Eb-ilh-g4LBwQSk93Aw2k6ngojg.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 56:ae:51:dd:5e:0e:66:91:30:89:f9:97:49:74:09:b8:0a:2d: 17:58:5c:ba:13:77:07:14:2a:16:c6:a7:55:e2:a0:67:e1:bc: f4:97:d5:3f:87:bb:ee:ca:73:71:21:18:a3:08:aa:11:0c:d9: 3e:b1:f0:10:d5:7f:c8:12:14:a6:e7:33:56:85:3b:31:9b:5d: 59:51:3b:ae:a7:e2:1a:da:bd:ec:7d:15:df:cc:e7:65:c1:8c: 1e:ce:6c:d7:38:f8:ba:69:4e:8d:8f:be:80:97:a6:d6:bd:72: 2a:f3:2f:a1:98:c7:6e:33:f6:49:a4:ad:f2:d4:d1:ff:d6:62: cf:db:7f:2e:5e:b4:cc:f6:5f:e5:98:fb:ff:36:e9:c2:41:8b: 62:5c:8f:79:76:a7:5d:97:e2:83:26:59:02:56:8c:f7:b0:eb: 4c:fa:1b:79:a6:19:f1:4f:7e:7b:65:57:0f:de:fa:03:a7:27: 5f:87:a0:c6:ae:82:2e:64:7c:ff:8c:1b:45:c3:0b:e5:62:af: 87:72:2e:74:e5:3c:d9:47:1c:c6:41:9e:5f:f6:87:da:8c:98: 1c:c2:24:0a:30:7d:0c:e8:0e:db:e3:06:40:39:9f:bb:db:48: e9:89:42:19:7b:07:f9:74:02:b8:d2:b2:d7:35:cf:24:c7:09: 81:83:43:b4 -----BEGIN CERTIFICATE----- MIIFFjCCA/6gAwIBAgISAZkxI+HAS0loNKmCvn244ZOLMA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKDExYmZhMjk2MWZhMGUwYjA3MDQxMjkzZGRjMGMzNjkzYTll MGEyMzgwHhcNMjUwOTEwMDEwMDU5WhcNMjUwOTExMDEwMDU5WjAzMTEwLwYDVQQD EygzYzA1OTVmNWI0NmMwMjQ4NzgzYzZlNThjNzQ0YmUyNDMzNWNiMjAxMIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAisuEI41Sv4rH3XEyV92brQEtwJJK 6HaO1AQGFIBIW/Yu+4KGnexhZInP0jBUiCmSxGSvccMOT0OD8nmTwohM29eEjHOK Z6SyMcIUv9T5O3FwV1kpyUeXshOHWej8mG+HUBB6QupbpXFjPTeXVAjkKHUl4115 1G5c6eLC9jNPHvZ2LIWoVKtTW1OHCgcYPw/pTekSR9vN5h+BrqAoyIbLo6aMem6M VeE86XdA8/kFIJSZ3xq05HiHyOqj38alHWungs/2PH9MzakaNuboXbRD0Ippx9YK nXKTrVy57Z45TOYcI9B+2v3V6hcY6lnYu9XQSYVFMIwMLTg6ytVB51NnvQIDAQAB o4ICIjCCAh4wHQYDVR0OBBYEFDwFlfW0bAJIeDxuWMdEviQzXLIBMB8GA1UdIwQY MBaAFBG/opYfoOCwcEEpPdwMNpOp4KI4MA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvRWItaWxoLWc0TEJ3UVNrOTNBdzJrNm5nb2pnLmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC8zMC8xNzMxNzMtODE5Zi00YmM5LTkyZDgt Nzg3OTFjOTM1NmEzLzEvRWItaWxoLWc0TEJ3UVNrOTNBdzJrNm5nb2pnLm1mdDCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC8zMC8xNzMxNzMtODE5Zi00YmM5LTkyZDgtNzg3OTFjOTM1NmEz LzEvRWItaWxoLWc0TEJ3UVNrOTNBdzJrNm5nb2pnLmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAVq5R3V4O ZpEwifmXSXQJuAotF1hcuhN3BxQqFsanVeKgZ+G89JfVP4e77spzcSEYowiqEQzZ PrHwENV/yBIUpuczVoU7MZtdWVE7rqfiGtq97H0V38znZcGMHs5s1zj4umlOjY++ gJem1r1yKvMvoZjHbjP2SaSt8tTR/9Ziz9t/Ll60zPZf5Zj7/zbpwkGLYlyPeXan XZfigyZZAlaM97DrTPobeaYZ8U9+e2VXD976A6cnX4egxq6CLmR8/4wbRcML5WKv h3IudOU82UccxkGeX/aH2oyYHMIkCjB9DOgO2+MGQDmfu9tI6YlCGXsH+XQCuNKy 1zXPJMcJgYNDtA== -----END CERTIFICATE-----Generated at Wed Sep 10 04:51:53 2025 by rpki-client