$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/30/c22dc9-c7ba-4156-a79c-15e90bf87fab/1/4N7hsGuiSmdiE_l2pLUMEp3LK3M.mft File: 4N7hsGuiSmdiE_l2pLUMEp3LK3M.mft (raw, json) Hash identifier: 1Aa9Q0fZQMHi3FeSlZWeRdjrrKJ3+IDYCOsTQAv1TSM= Subject key identifier: 73:A8:2B:03:DA:B0:18:1C:F0:BF:3E:85:DA:5F:03:C0:6A:50:17:67 Authority key identifier: E0:DE:E1:B0:6B:A2:4A:67:62:13:F9:76:A4:B5:0C:12:9D:CB:2B:73 Certificate issuer: /CN=e0dee1b06ba24a676213f976a4b50c129dcb2b73 Certificate serial: 0199331201E3CB3765A2B21C2F65E3C8E14E Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/4N7hsGuiSmdiE_l2pLUMEp3LK3M.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/30/c22dc9-c7ba-4156-a79c-15e90bf87fab/1/4N7hsGuiSmdiE_l2pLUMEp3LK3M.mft Manifest number: 16A9 Signing time: Wed 10 Sep 2025 10:00:42 +0000 Manifest this update: Wed 10 Sep 2025 10:00:42 +0000 Manifest next update: Thu 11 Sep 2025 10:00:42 +0000 Files and hashes: 1: 1-KQ3lCQc8t0kQtkE6-_iQqUbP9Q.roa (hash: gNrv97avvDkank7EdDvcD5kAcTLpL7MBGtGaNujTfjw=) 2: 1-ZowhWdJlnO1J6ckMiCzFpO4NqA.roa (hash: YFDJetm10wMx3y43nkOzbjWKZjU+niDmUY27/YG6EhM=) 3: 4N7hsGuiSmdiE_l2pLUMEp3LK3M.crl (hash: waVlyFNYtYfIz+KWvAVmzCaJ7gmPFwSLZj4/yZJTqt8=) 4: DFMQmamXY8KP4-va7usbXjlGlEo.roa (hash: fx5UdUFk/K5Ywascggz+vk7SyrVRgrnQmsBsJAgWyoY=) 5: P54Qz9AI09JDOlqysqt799AeQRI.roa (hash: nIDEtW0TBUZxo5dIDtHdP7iLVF2Wse6E2BuTqfPasv8=) 6: Y4y_3m4POfZlVUhwqm0uVd4P9vQ.roa (hash: dZrOM2p3noTvf6KyFY1PrTf2FDGKF1aorRCqRis2DzA=) 7: _dP89dJHE-YZKAUIAMAKH5hCybo.roa (hash: RwLTyGyMw54nCLsLFUIuCCv0sJSfUYZ8s2qq98bQOs0=) 8: baI3T-QVvPK6b76nYUCZm85ZrSs.roa (hash: JldtWM10Ffd/1qvivADvuf6lNYl9UTodEd29bMMwfcg=) 9: eAV-d8BbWJ1sJQuFdRvhLNIzJUA.roa (hash: T3JT9dws49hGRBqX3Lqw/F5GMKuYnFZbEjUfdpuIhGs=) 10: h4oHF6R3uhLn9C5VN0t5w_HOGdk.roa (hash: l8RvUuXjd9Sh+5mA5Uw84faFr4xIw6LnpFGoAgtXpUY=) 11: r2_uEzNLhBHjD8nrsm_28O-I61I.roa (hash: MQGSyx9ipk0r/WYHwP9ZlzljWRWQN1rdWtX2fCTKqeI=) Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/30/c22dc9-c7ba-4156-a79c-15e90bf87fab/1/4N7hsGuiSmdiE_l2pLUMEp3LK3M.crl rsync://rpki.ripe.net/repository/DEFAULT/30/c22dc9-c7ba-4156-a79c-15e90bf87fab/1/4N7hsGuiSmdiE_l2pLUMEp3LK3M.mft rsync://rpki.ripe.net/repository/DEFAULT/4N7hsGuiSmdiE_l2pLUMEp3LK3M.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Thu 11 Sep 2025 10:00:42 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:99:33:12:01:e3:cb:37:65:a2:b2:1c:2f:65:e3:c8:e1:4e Signature Algorithm: sha256WithRSAEncryption Issuer: CN=e0dee1b06ba24a676213f976a4b50c129dcb2b73 Validity Not Before: Sep 10 10:00:42 2025 GMT Not After : Sep 11 10:00:42 2025 GMT Subject: CN=73a82b03dab0181cf0bf3e85da5f03c06a501767 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:c3:d0:74:0f:66:a6:fc:3c:bb:f2:28:63:ce:b5: 65:1b:e3:bb:36:56:d2:37:85:f1:e7:3e:3b:5d:a6: eb:9e:b0:01:46:cd:8b:e9:ef:57:d2:16:ed:3e:35: ca:33:d4:c6:d4:2e:18:ce:d2:5a:ab:4c:58:76:89: f1:d4:81:9a:65:6e:03:49:b7:5a:0f:18:f5:09:e0: 90:f3:20:8a:dc:3a:1c:4c:df:72:79:f4:9e:55:97: 55:6b:36:60:cf:20:81:5e:d8:32:3b:80:c8:c2:2c: 1b:ac:56:1b:4d:77:bf:c5:1b:e2:d2:4e:46:ee:b0: f3:d2:14:87:30:d8:74:e9:8e:16:75:67:50:4c:73: 23:5f:7a:0d:b8:d4:dc:a4:0c:c5:e9:b9:54:52:4d: 4e:97:37:90:98:2a:d1:7d:dc:04:cd:80:e6:32:1c: 0c:d0:ed:8a:15:8f:fd:d6:9a:81:a5:64:1d:e9:25: bd:5f:b9:fa:97:f7:f6:b6:f8:d8:81:3d:d6:eb:9e: eb:c0:84:a7:9a:2c:b6:0d:3e:bb:dc:5f:22:c6:9c: 91:93:7e:68:8c:50:3e:83:60:27:77:f6:36:71:ac: a6:33:04:c1:1c:f3:fa:ce:ea:f1:f8:59:b1:82:12: ac:94:34:0e:54:28:c1:cb:48:48:8c:e5:f3:34:34: 33:1d Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 73:A8:2B:03:DA:B0:18:1C:F0:BF:3E:85:DA:5F:03:C0:6A:50:17:67 X509v3 Authority Key Identifier: keyid:E0:DE:E1:B0:6B:A2:4A:67:62:13:F9:76:A4:B5:0C:12:9D:CB:2B:73 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/4N7hsGuiSmdiE_l2pLUMEp3LK3M.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/30/c22dc9-c7ba-4156-a79c-15e90bf87fab/1/4N7hsGuiSmdiE_l2pLUMEp3LK3M.mft X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/30/c22dc9-c7ba-4156-a79c-15e90bf87fab/1/4N7hsGuiSmdiE_l2pLUMEp3LK3M.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 89:22:da:9e:21:74:4f:4f:12:64:d9:61:c7:bb:dc:b6:b8:d7: 82:13:3c:b6:60:81:c7:8b:e1:f6:19:e1:b1:40:cf:59:74:bc: e9:72:4b:6c:5e:96:cb:2f:17:e3:b7:e2:b2:30:10:47:e8:a4: 15:7b:cc:9e:c6:60:f0:f8:c7:5a:bb:fe:df:72:f8:41:36:c6: 20:57:0a:ed:c9:5f:a6:c5:e4:c5:83:10:f9:1a:4a:df:f4:4d: 77:2c:c7:f7:04:98:6a:95:a0:98:d6:0b:a8:a9:ec:fb:48:d5: 5c:7c:5c:2b:6f:88:57:6a:f9:d4:16:7e:5d:2d:93:e1:48:04: b5:bc:85:50:6c:56:b0:a3:ed:4e:9f:2a:b8:95:ae:64:0b:17: 93:75:7b:bf:ef:43:e5:58:a6:85:4f:d4:3f:6b:93:41:aa:32: fa:44:47:44:cb:f1:38:ba:d3:4d:23:fb:40:d6:01:f6:b9:ec: 0c:9d:11:22:4a:a9:18:4a:62:44:a4:6f:4c:a1:83:7e:be:5a: 57:15:51:d2:5b:3c:9a:24:8e:95:fa:ed:c7:d0:09:ff:d9:cf: 46:f4:0e:a8:75:98:a0:5c:17:12:7c:1f:af:3e:3c:98:b2:31: 60:9b:d6:2f:36:aa:9f:55:af:86:4c:cd:08:33:c8:c5:0f:81: 72:31:1b:14 -----BEGIN CERTIFICATE----- MIIFFjCCA/6gAwIBAgISAZkzEgHjyzdlorIcL2XjyOFOMA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKGUwZGVlMWIwNmJhMjRhNjc2MjEzZjk3NmE0YjUwYzEyOWRj YjJiNzMwHhcNMjUwOTEwMTAwMDQyWhcNMjUwOTExMTAwMDQyWjAzMTEwLwYDVQQD Eyg3M2E4MmIwM2RhYjAxODFjZjBiZjNlODVkYTVmMDNjMDZhNTAxNzY3MIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAw9B0D2am/Dy78ihjzrVlG+O7NlbS N4Xx5z47XabrnrABRs2L6e9X0hbtPjXKM9TG1C4YztJaq0xYdonx1IGaZW4DSbda Dxj1CeCQ8yCK3DocTN9yefSeVZdVazZgzyCBXtgyO4DIwiwbrFYbTXe/xRvi0k5G 7rDz0hSHMNh06Y4WdWdQTHMjX3oNuNTcpAzF6blUUk1OlzeQmCrRfdwEzYDmMhwM 0O2KFY/91pqBpWQd6SW9X7n6l/f2tvjYgT3W657rwISnmiy2DT673F8ixpyRk35o jFA+g2And/Y2caymMwTBHPP6zurx+FmxghKslDQOVCjBy0hIjOXzNDQzHQIDAQAB o4ICIjCCAh4wHQYDVR0OBBYEFHOoKwPasBgc8L8+hdpfA8BqUBdnMB8GA1UdIwQY MBaAFODe4bBrokpnYhP5dqS1DBKdyytzMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvNE43aHNHdWlTbWRpRV9sMnBMVU1FcDNMSzNNLmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC8zMC9jMjJkYzktYzdiYS00MTU2LWE3OWMt MTVlOTBiZjg3ZmFiLzEvNE43aHNHdWlTbWRpRV9sMnBMVU1FcDNMSzNNLm1mdDCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC8zMC9jMjJkYzktYzdiYS00MTU2LWE3OWMtMTVlOTBiZjg3ZmFi LzEvNE43aHNHdWlTbWRpRV9sMnBMVU1FcDNMSzNNLmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAiSLaniF0 T08SZNlhx7vctrjXghM8tmCBx4vh9hnhsUDPWXS86XJLbF6Wyy8X47fisjAQR+ik FXvMnsZg8PjHWrv+33L4QTbGIFcK7clfpsXkxYMQ+RpK3/RNdyzH9wSYapWgmNYL qKns+0jVXHxcK2+IV2r51BZ+XS2T4UgEtbyFUGxWsKPtTp8quJWuZAsXk3V7v+9D 5VimhU/UP2uTQaoy+kRHRMvxOLrTTSP7QNYB9rnsDJ0RIkqpGEpiRKRvTKGDfr5a VxVR0ls8miSOlfrtx9AJ/9nPRvQOqHWYoFwXEnwfrz48mLIxYJvWLzaqn1WvhkzN CDPIxQ+BcjEbFA== -----END CERTIFICATE-----Generated at Wed Sep 10 15:33:41 2025 by rpki-client