$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/32/153788-14b7-4551-9ade-6aea9057c800/1/rrZuxejyQF9vjUhuc_uCuN4N7g8.mft File: rrZuxejyQF9vjUhuc_uCuN4N7g8.mft (raw, json) Hash identifier: Ok2RlPXaSMcFNpvb1gCCqZ5Tar8jQ4JCst9b0Fv0jZQ= Subject key identifier: 21:04:23:9B:C6:8D:58:36:25:78:40:F4:C1:3E:E8:FA:40:4F:51:34 Authority key identifier: AE:B6:6E:C5:E8:F2:40:5F:6F:8D:48:6E:73:FB:82:B8:DE:0D:EE:0F Certificate issuer: /CN=aeb66ec5e8f2405f6f8d486e73fb82b8de0dee0f Certificate serial: 0199589F7E0C9B89A48B157F845F88E2E2B9 Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/rrZuxejyQF9vjUhuc_uCuN4N7g8.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/32/153788-14b7-4551-9ade-6aea9057c800/1/rrZuxejyQF9vjUhuc_uCuN4N7g8.mft Manifest number: 1691 Signing time: Wed 17 Sep 2025 17:01:11 +0000 Manifest this update: Wed 17 Sep 2025 17:01:11 +0000 Manifest next update: Thu 18 Sep 2025 17:01:11 +0000 Files and hashes: 1: 0xAeo2a2iLttbU-9qLwxhP3W5ss.roa (hash: KCgM9KWWYMbjy0SQJWIlI1gevbRgwTSQjmHIQMhZOFo=) 2: 1GGtyTPgPlDy6MPQ5o0gS_2Q9UM.roa (hash: gOi5uzaamNISRfWC/jzX0CQnB58FX9BTQozvqpu683k=) 3: 1VO0RuZDCw_d3nrvSLXPJBFpELM.roa (hash: RVMlSLh90fckV0ULVrxGXrllRUKBMW1qpE2aUDAMp18=) 4: MHaB6YDK7hMFt-_1LMKEcRnolXY.roa (hash: HMU04XiVIqiavwZxk6eCzMS/VCWuh3NjcyT+luDuzS0=) 5: XFEEccbEsmiETxVTXsuQHob0Ig8.roa (hash: gNVdhv6luqDbEY/yZdldKTkFqgtu7cFYTeubRvuYlMs=) 6: XYvBe2DkMF52qzkhOJvtRBiIQio.roa (hash: vc4GpSOFPSWnmLVNnXKMqCyW7C32uripWcLl8WvCvmE=) 7: cgoioMwhBMFnR_o18uz7lh61zXU.roa (hash: muq8Pq9FVp8y13ZY1OD1P/qR19HpxP198AkqSx2L6EM=) 8: rrZuxejyQF9vjUhuc_uCuN4N7g8.crl (hash: ZqMNRFuuFQbxySBy6TlwI58CgbP7Cse7VvesTWcCD18=) 9: s1oFGEPvL8IMjYASLXkMEl3bONc.roa (hash: ID8ZOvyObfK0KrvTgF7I419RUO3QA/UAdGzXegtjwU0=) 10: upooLs-mDkOyiBT2fNGHj5cQ7E4.roa (hash: cglav+FWNX7UNTqPwwJsYgYuI7r/rTbr7vfv4F0chKo=) 11: vVMu6Hcqt_WNniCkUUd49xRBXDg.roa (hash: PFqhmo3voRuIoBNZ1c/3YzTjWO4jWVlUC05kdiWQzXU=) 12: vzw_vkrK3T6hMf3CfVO_XMRDNQY.roa (hash: TyRzYsx0I5A5DgLqk0b56yUe558XEXu6adROBLfEbBY=) Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/32/153788-14b7-4551-9ade-6aea9057c800/1/rrZuxejyQF9vjUhuc_uCuN4N7g8.crl rsync://rpki.ripe.net/repository/DEFAULT/32/153788-14b7-4551-9ade-6aea9057c800/1/rrZuxejyQF9vjUhuc_uCuN4N7g8.mft rsync://rpki.ripe.net/repository/DEFAULT/rrZuxejyQF9vjUhuc_uCuN4N7g8.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Thu 18 Sep 2025 17:01:11 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:99:58:9f:7e:0c:9b:89:a4:8b:15:7f:84:5f:88:e2:e2:b9 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=aeb66ec5e8f2405f6f8d486e73fb82b8de0dee0f Validity Not Before: Sep 17 17:01:11 2025 GMT Not After : Sep 18 17:01:11 2025 GMT Subject: CN=2104239bc68d5836257840f4c13ee8fa404f5134 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:ba:ae:d4:b3:55:0b:cd:0e:7e:bf:cf:de:67:80: a9:0d:43:f6:f3:d8:e8:c7:15:38:01:1f:62:c0:3b: bb:24:ee:21:e9:1c:3d:b8:8e:09:ea:e4:dd:67:64: aa:dd:98:95:34:4a:40:b0:4e:38:a4:f3:70:cc:37: a5:da:05:27:5b:f3:0e:89:21:38:d3:6c:0f:a6:cd: 12:7d:33:de:99:49:6d:d5:7f:03:6e:e9:0a:c0:18: 34:da:52:29:e8:e8:8b:b7:28:2a:39:72:7a:53:2b: 0b:0e:cf:96:c9:ca:57:03:5d:26:54:af:26:7c:0e: ce:87:b5:df:79:9f:28:52:e0:a8:8e:b3:6f:5a:35: 2e:c0:c3:30:ac:8c:5b:7d:fa:25:8a:d8:5a:35:b4: ab:b1:0b:eb:4f:56:a5:83:64:53:16:dd:38:20:b2: 42:d1:c6:11:d3:8b:73:cc:b6:e8:d0:13:c0:42:d3: 66:78:83:09:6e:7b:0b:94:4a:79:b4:47:4d:0d:9b: 0e:e8:38:0d:c2:f7:cc:cb:28:9e:c0:cf:99:1c:86: 3d:47:f5:44:cd:05:8c:9b:a2:89:5a:50:37:b6:3e: 5e:92:b8:15:37:73:02:15:be:3a:b8:5e:5b:36:3f: c3:67:05:f2:56:11:29:03:f8:90:f1:d4:ef:2d:d8: a3:7f Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 21:04:23:9B:C6:8D:58:36:25:78:40:F4:C1:3E:E8:FA:40:4F:51:34 X509v3 Authority Key Identifier: keyid:AE:B6:6E:C5:E8:F2:40:5F:6F:8D:48:6E:73:FB:82:B8:DE:0D:EE:0F X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/rrZuxejyQF9vjUhuc_uCuN4N7g8.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/32/153788-14b7-4551-9ade-6aea9057c800/1/rrZuxejyQF9vjUhuc_uCuN4N7g8.mft X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/32/153788-14b7-4551-9ade-6aea9057c800/1/rrZuxejyQF9vjUhuc_uCuN4N7g8.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 24:fe:43:53:a5:cb:e0:d1:2a:21:68:22:d9:54:95:05:fd:1e: b0:aa:1e:b1:21:93:97:7f:cd:80:96:55:42:50:78:23:28:fa: d1:02:5a:dc:c1:de:6c:e2:d0:26:ff:2e:52:08:70:b3:12:53: 67:8d:0e:8b:34:58:1f:e2:da:f9:e0:12:bf:34:f2:a8:b9:18: ce:22:01:a2:27:b2:7e:db:05:51:30:60:c4:1d:98:97:d8:5c: 36:a6:ca:21:27:99:ed:56:c2:75:00:06:02:80:3e:2a:3a:e8: 31:34:80:07:0b:07:10:b4:60:03:09:0f:b8:e4:40:5c:d8:ad: ea:3a:39:20:72:28:b9:0b:2b:57:9a:a5:0a:95:61:10:63:c7: 52:4e:24:63:c2:a4:2f:cf:99:80:07:a9:b5:d2:78:df:b1:fd: 11:e0:22:7e:60:67:76:d3:da:34:08:21:ef:0a:32:08:35:2a: 32:de:51:a8:8a:a4:aa:be:ca:42:f3:46:78:fe:4c:8c:53:2e: 48:01:cb:31:fa:c5:b6:1f:de:c7:d3:33:8f:76:f3:7f:cc:da: f4:12:30:a3:6d:13:a6:e7:34:91:f5:1f:1e:65:28:b5:1a:11: 9f:77:1a:07:6a:6b:1f:91:55:41:cf:35:6d:dd:c7:2b:9f:0d: 46:85:1f:3a -----BEGIN CERTIFICATE----- MIIFFjCCA/6gAwIBAgISAZlYn34Mm4mkixV/hF+I4uK5MA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKGFlYjY2ZWM1ZThmMjQwNWY2ZjhkNDg2ZTczZmI4MmI4ZGUw ZGVlMGYwHhcNMjUwOTE3MTcwMTExWhcNMjUwOTE4MTcwMTExWjAzMTEwLwYDVQQD EygyMTA0MjM5YmM2OGQ1ODM2MjU3ODQwZjRjMTNlZThmYTQwNGY1MTM0MIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAuq7Us1ULzQ5+v8/eZ4CpDUP289jo xxU4AR9iwDu7JO4h6Rw9uI4J6uTdZ2Sq3ZiVNEpAsE44pPNwzDel2gUnW/MOiSE4 02wPps0SfTPemUlt1X8DbukKwBg02lIp6OiLtygqOXJ6UysLDs+WycpXA10mVK8m fA7Oh7XfeZ8oUuCojrNvWjUuwMMwrIxbffolithaNbSrsQvrT1alg2RTFt04ILJC 0cYR04tzzLbo0BPAQtNmeIMJbnsLlEp5tEdNDZsO6DgNwvfMyyiewM+ZHIY9R/VE zQWMm6KJWlA3tj5ekrgVN3MCFb46uF5bNj/DZwXyVhEpA/iQ8dTvLdijfwIDAQAB o4ICIjCCAh4wHQYDVR0OBBYEFCEEI5vGjVg2JXhA9ME+6PpAT1E0MB8GA1UdIwQY MBaAFK62bsXo8kBfb41IbnP7grjeDe4PMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvcnJadXhlanlRRjl2alVodWNfdUN1TjRON2c4LmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC8zMi8xNTM3ODgtMTRiNy00NTUxLTlhZGUt NmFlYTkwNTdjODAwLzEvcnJadXhlanlRRjl2alVodWNfdUN1TjRON2c4Lm1mdDCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC8zMi8xNTM3ODgtMTRiNy00NTUxLTlhZGUtNmFlYTkwNTdjODAw LzEvcnJadXhlanlRRjl2alVodWNfdUN1TjRON2c4LmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAJP5DU6XL 4NEqIWgi2VSVBf0esKoesSGTl3/NgJZVQlB4Iyj60QJa3MHebOLQJv8uUghwsxJT Z40OizRYH+La+eASvzTyqLkYziIBoieyftsFUTBgxB2Yl9hcNqbKISeZ7VbCdQAG AoA+KjroMTSABwsHELRgAwkPuORAXNit6jo5IHIouQsrV5qlCpVhEGPHUk4kY8Kk L8+ZgAeptdJ437H9EeAifmBndtPaNAgh7woyCDUqMt5RqIqkqr7KQvNGeP5MjFMu SAHLMfrFth/ex9Mzj3bzf8za9BIwo20Tpuc0kfUfHmUotRoRn3caB2prH5FVQc81 bd3HK58NRoUfOg== -----END CERTIFICATE-----Generated at Thu Sep 18 02:07:52 2025 by rpki-client