$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/34/41c321-347e-4c3e-affd-e2b527728e96/1/P-3YXB7Mtf9LqTARenMpCZwP8us.mft File: P-3YXB7Mtf9LqTARenMpCZwP8us.mft (raw, json) Hash identifier: OUz+EAjGo4PU2v/MSuroaNsxXQDdFf0ru4jWSLBDGQo= Subject key identifier: B2:82:A6:28:01:C8:B0:CA:BD:04:D0:64:86:13:67:76:BD:B2:9C:C2 Authority key identifier: 3F:ED:D8:5C:1E:CC:B5:FF:4B:A9:30:11:7A:73:29:09:9C:0F:F2:EB Certificate issuer: /CN=3fedd85c1eccb5ff4ba930117a7329099c0ff2eb Certificate serial: 019926D76D29FF6183DBA1CC786A6805390A Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/P-3YXB7Mtf9LqTARenMpCZwP8us.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/34/41c321-347e-4c3e-affd-e2b527728e96/1/P-3YXB7Mtf9LqTARenMpCZwP8us.mft Manifest number: 1699 Signing time: Mon 08 Sep 2025 01:01:16 +0000 Manifest this update: Mon 08 Sep 2025 01:01:16 +0000 Manifest next update: Tue 09 Sep 2025 01:01:16 +0000 Files and hashes: 1: 4SyAKG9FRt1gAFJy5VgH5PwxTRA.roa (hash: jTSIiH7dSb5EybAsEY+n22bAiKvGllq/AuPJ12+ncpM=) 2: BPvvMmPw0v2RXdpWWHfCuRUXY28.roa (hash: xZBsJjBvf0lTF+79AIT0zRbookilcef0qHIZ5VPCKjo=) 3: BZv8sGCcNALUX5pRivC_EjiidAY.roa (hash: h2vpw3fwMWMbbCOrxK6C72hr7+aeGxdeLm1OT0QOTJY=) 4: DGiTictajwWlIqV1Y3gB4SABHrM.roa (hash: Id5c1uksWgHuNXSqMulTJtxTXfw1/TAJk3AEd7b9YRQ=) 5: Mk65rzu_RkrceH34hYZR24Obsg0.roa (hash: rTzdbjg2prHl5GqIGFCWtd1Ib91ETCuwTrOfSPbAKbI=) 6: P-3YXB7Mtf9LqTARenMpCZwP8us.crl (hash: /kE38E4nYUoy+tid9fclAHxz93cSibY6NdTi5Zy7d8I=) 7: Q7Kremg5Fgj0SfkKKXdi8FJc68I.roa (hash: wwhqLnVWip/tEomt2waPsqqsK0Xf41SfYznp1QkJ0BM=) 8: VB2zjyzRbVcAI7qwybUzZhlXV-U.roa (hash: cbrJc/4RT0HiKhNiv2HtCVB5MjAEHV6aPZtCJF7/HaM=) 9: fScTC-RTAL4AeGIUFDXeFWgxNOU.roa (hash: LpQDvJVc9hMoS+6x9uoQSz8d+i8pdM/6GrU1p5QPkoU=) 10: gjV1b6nl-2sIdV0OViEWc13VOgw.roa (hash: YJxg+E5odCH0e5CDjaGL8I+42oC/IlpXfOKgoo/xCo4=) 11: i_vdOGwxPt-bikrKCsCq4vU6o1Y.roa (hash: Oi88txSdII7ssSiwm/zvR3/xE/bpdarLSDiFGBrNlqs=) 12: jLM5t3eg01fijHX5BZDxTUjpEGU.roa (hash: zlqEOh5qlKElj+/BR3gY6unzfRt8ygL6XM3lywwcPBU=) 13: jt3cdzogC_GhOHVIdQu1LfkbDrM.roa (hash: 4TbqHgl6LIIhOvKU0Ma8NpMAoh5pYOvW9g1cZnc89eY=) 14: mv1h37MzImfXhXtotGH2l6nUD-c.roa (hash: jma1UU++sReZAO/OYU5m4FrNNXuoRuTByWXR/ZHh5qk=) 15: pPSUgW-kch1wzV-mL74GjoJRYas.roa (hash: 14IsY2Pcu5B3SjJ5ycOJDXddH4w35As15arfEbi1nXc=) 16: sVq7ykDogd7cCsDF--hBK9DnjT4.roa (hash: yntzoQcvzBrX+tVilVNDQYJnh1oAW90RlNAXUQi35Kc=) 17: yUsdU2ULQpT4CaBLrnJG--v6B4k.roa (hash: nFPDGUe2wiSsXpmHy1xpSDCHB5E3thvkbalz4PA2+qg=) Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/34/41c321-347e-4c3e-affd-e2b527728e96/1/P-3YXB7Mtf9LqTARenMpCZwP8us.crl rsync://rpki.ripe.net/repository/DEFAULT/34/41c321-347e-4c3e-affd-e2b527728e96/1/P-3YXB7Mtf9LqTARenMpCZwP8us.mft rsync://rpki.ripe.net/repository/DEFAULT/P-3YXB7Mtf9LqTARenMpCZwP8us.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Tue 09 Sep 2025 01:00:23 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:99:26:d7:6d:29:ff:61:83:db:a1:cc:78:6a:68:05:39:0a Signature Algorithm: sha256WithRSAEncryption Issuer: CN=3fedd85c1eccb5ff4ba930117a7329099c0ff2eb Validity Not Before: Sep 8 01:01:16 2025 GMT Not After : Sep 9 01:01:16 2025 GMT Subject: CN=b282a62801c8b0cabd04d06486136776bdb29cc2 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:9e:ce:d2:6b:93:ab:60:9b:79:de:05:ec:7c:7b: 0c:bf:a1:68:8b:71:7a:9f:90:17:84:9d:67:dd:c6: 6d:9c:b8:94:f5:46:67:4e:26:9a:d5:64:cc:99:82: c4:c6:69:a5:f6:8d:7e:32:36:1c:b2:6b:11:b5:53: 04:d7:4e:06:a1:f2:9e:41:a7:4f:2f:e6:f2:fa:8f: 79:af:ee:dd:ca:7d:be:77:24:17:05:18:2b:5b:97: 16:03:40:36:0e:ea:40:c3:3c:2f:48:f4:c5:f7:b2: c9:48:4a:40:d5:28:f6:ee:0e:01:2b:8f:95:82:5d: 17:80:6b:9d:d1:99:1b:64:00:c7:ba:cb:ee:09:3d: 2e:5d:2d:57:5a:af:cd:d8:e2:a5:f9:3e:a2:29:dd: c3:4f:e2:7c:9d:b9:1f:78:e8:9a:74:1a:bb:6a:c6: c5:c4:f3:4a:2d:e5:bf:47:f0:0d:5c:f6:06:64:ca: eb:66:7b:e2:5b:e3:32:b3:20:c5:0e:ca:58:07:e7: 09:88:7d:30:aa:df:2c:38:f5:a9:dc:de:31:2e:2f: 2d:bc:73:37:9f:90:7f:47:54:65:01:72:77:22:af: e7:3d:2c:74:f0:66:f1:cf:b2:47:3e:b2:02:99:04: 31:80:55:bf:5f:49:4a:5b:6c:19:72:13:b6:9e:59: f0:cf Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: B2:82:A6:28:01:C8:B0:CA:BD:04:D0:64:86:13:67:76:BD:B2:9C:C2 X509v3 Authority Key Identifier: keyid:3F:ED:D8:5C:1E:CC:B5:FF:4B:A9:30:11:7A:73:29:09:9C:0F:F2:EB X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/P-3YXB7Mtf9LqTARenMpCZwP8us.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/34/41c321-347e-4c3e-affd-e2b527728e96/1/P-3YXB7Mtf9LqTARenMpCZwP8us.mft X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/34/41c321-347e-4c3e-affd-e2b527728e96/1/P-3YXB7Mtf9LqTARenMpCZwP8us.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 6b:18:f4:96:80:1e:b7:47:e4:c2:b8:c2:3e:57:11:f3:41:c3: 91:9a:ed:5b:6a:2f:04:d5:2e:83:21:65:e7:02:a1:f7:40:68: f6:ef:3c:d9:f9:0f:a2:9c:c8:54:5f:fe:fe:04:1d:df:62:0a: 9d:e7:98:9f:0b:4d:36:6e:b9:8b:a5:5c:1e:e1:26:f5:e8:3c: 3c:94:7b:3e:82:39:95:37:fc:c6:c8:5b:f0:8d:06:d9:85:60: 8b:cf:28:41:35:69:6e:4e:2a:58:0b:e8:e2:a5:db:1a:3e:26: 7b:30:84:ba:20:52:23:08:c8:ba:96:e1:2e:2e:cc:b4:d7:be: 3d:34:a8:aa:47:9f:1a:be:ab:c8:75:e7:33:3d:1c:3a:ab:5e: fe:89:cd:f3:8a:8c:bd:a4:6f:0b:bd:46:9a:bc:3b:80:0d:c2: 48:ea:3f:0d:ee:88:e0:6e:84:83:c1:f7:c0:39:f7:db:3b:b1: 25:e0:50:4b:b4:c2:8d:69:8c:f2:51:fc:c8:0c:dd:a8:82:e2: 1a:dc:01:83:88:92:62:96:23:3a:b7:c9:4f:31:e2:eb:18:3a: 20:56:b4:59:bf:fe:68:89:c0:01:53:55:94:1e:b5:77:5a:8c: 27:a2:ee:f1:10:f3:d3:93:81:d7:5d:ce:66:2d:60:22:09:c6: eb:ef:22:b9 -----BEGIN CERTIFICATE----- MIIFFjCCA/6gAwIBAgISAZkm120p/2GD26HMeGpoBTkKMA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKDNmZWRkODVjMWVjY2I1ZmY0YmE5MzAxMTdhNzMyOTA5OWMw ZmYyZWIwHhcNMjUwOTA4MDEwMTE2WhcNMjUwOTA5MDEwMTE2WjAzMTEwLwYDVQQD EyhiMjgyYTYyODAxYzhiMGNhYmQwNGQwNjQ4NjEzNjc3NmJkYjI5Y2MyMIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAns7Sa5OrYJt53gXsfHsMv6Foi3F6 n5AXhJ1n3cZtnLiU9UZnTiaa1WTMmYLExmml9o1+MjYcsmsRtVME104GofKeQadP L+by+o95r+7dyn2+dyQXBRgrW5cWA0A2DupAwzwvSPTF97LJSEpA1Sj27g4BK4+V gl0XgGud0ZkbZADHusvuCT0uXS1XWq/N2OKl+T6iKd3DT+J8nbkfeOiadBq7asbF xPNKLeW/R/ANXPYGZMrrZnviW+MysyDFDspYB+cJiH0wqt8sOPWp3N4xLi8tvHM3 n5B/R1RlAXJ3Iq/nPSx08Gbxz7JHPrICmQQxgFW/X0lKW2wZchO2nlnwzwIDAQAB o4ICIjCCAh4wHQYDVR0OBBYEFLKCpigByLDKvQTQZIYTZ3a9spzCMB8GA1UdIwQY MBaAFD/t2FwezLX/S6kwEXpzKQmcD/LrMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvUC0zWVhCN010ZjlMcVRBUmVuTXBDWndQOHVzLmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC8zNC80MWMzMjEtMzQ3ZS00YzNlLWFmZmQt ZTJiNTI3NzI4ZTk2LzEvUC0zWVhCN010ZjlMcVRBUmVuTXBDWndQOHVzLm1mdDCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC8zNC80MWMzMjEtMzQ3ZS00YzNlLWFmZmQtZTJiNTI3NzI4ZTk2 LzEvUC0zWVhCN010ZjlMcVRBUmVuTXBDWndQOHVzLmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAaxj0loAe t0fkwrjCPlcR80HDkZrtW2ovBNUugyFl5wKh90Bo9u882fkPopzIVF/+/gQd32IK neeYnwtNNm65i6VcHuEm9eg8PJR7PoI5lTf8xshb8I0G2YVgi88oQTVpbk4qWAvo 4qXbGj4mezCEuiBSIwjIupbhLi7MtNe+PTSoqkefGr6ryHXnMz0cOqte/onN84qM vaRvC71Gmrw7gA3CSOo/De6I4G6Eg8H3wDn32zuxJeBQS7TCjWmM8lH8yAzdqILi GtwBg4iSYpYjOrfJTzHi6xg6IFa0Wb/+aInAAVNVlB61d1qMJ6Lu8RDz05OB113O Zi1gIgnG6+8iuQ== -----END CERTIFICATE-----Generated at Mon Sep 8 10:25:20 2025 by rpki-client