$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/34/73195c-e663-498c-97db-af64f3fa2459/1/g_NrCt7my1UYdjtbyOqj1B8j6Tg.mft File: g_NrCt7my1UYdjtbyOqj1B8j6Tg.mft (raw, json) Hash identifier: r3Y43gMN87vgzuuSJoo9ogo5/5M/sLGO9HDLF9fiY7c= Subject key identifier: 8B:C1:C2:7B:97:AB:FD:A4:3B:8D:CA:45:A9:A9:F4:93:7E:D9:71:C0 Authority key identifier: 83:F3:6B:0A:DE:E6:CB:55:18:76:3B:5B:C8:EA:A3:D4:1F:23:E9:38 Certificate issuer: /CN=83f36b0adee6cb5518763b5bc8eaa3d41f23e938 Certificate serial: 0199500B3E28C09CD0F97A474F0BF86AA02E Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/g_NrCt7my1UYdjtbyOqj1B8j6Tg.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/34/73195c-e663-498c-97db-af64f3fa2459/1/g_NrCt7my1UYdjtbyOqj1B8j6Tg.mft Manifest number: 09F2 Signing time: Tue 16 Sep 2025 01:02:15 +0000 Manifest this update: Tue 16 Sep 2025 01:02:15 +0000 Manifest next update: Wed 17 Sep 2025 01:02:15 +0000 Files and hashes: 1: 0A7YmzuBMp3AnzV7uyObYfuJA-I.roa (hash: 7fXqAOKC5Q/vz61tqbSnvN/llglRyFYHrN6Bf9NPAuw=) 2: fg0q70bVoI7HDsFD4OzxGfbGsXs.roa (hash: O0o51/XaSgNiVnVW/1p1U3d6wUGPCY8T1Nsxw9qFmPo=) 3: fninY7dk4NBx5RTL5R_Wezr9T0s.roa (hash: SwOpz8NdRi+4j0eDktQnp/qAQ8UOrHFKwcilSnSB5hM=) 4: g_NrCt7my1UYdjtbyOqj1B8j6Tg.crl (hash: 89M0weWTWHrIqSKW4HtU8ObMOfzyiUPvLTEnsmtM6uk=) 5: iJx10D_iglakU4AeKeBDgEdcsVA.roa (hash: Dd6ao6PCLUT7Zm7DTtmPv5yg6OD7SudpnqLI9ibfBjM=) 6: jrbItzUNEH8rNuRKqj_moPSL76A.roa (hash: MddU7hBmFca6+WpltnhT8I5jhwwjpiy5HJwTYX9nENM=) 7: k3wReR7smqHRttYp_YytIIVUngE.roa (hash: yfFvsISgbeVw0q/ouZSyuznCXuWiBQ8OYRXG8uymDy8=) 8: ktAAidM8yuGSNSk_nWhJUqA9KEs.roa (hash: PukwcAGvFtblvafh80ccf3hyXxWAP6VQ8wyQlvDsA6s=) 9: oDYht5WNFMxT4sfzVWahtOBNgl8.roa (hash: 4hzDVibyG3EqU8r1GZL8mr4iVORi5bVTwiads+GorvI=) 10: zysZHwwZdHMoWgMUXdeFAHJvcPQ.roa (hash: JSFcJICikF4gq2JmcLqwfQ02lvaUo4SqU2srzhKJuS8=) Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/34/73195c-e663-498c-97db-af64f3fa2459/1/g_NrCt7my1UYdjtbyOqj1B8j6Tg.crl rsync://rpki.ripe.net/repository/DEFAULT/34/73195c-e663-498c-97db-af64f3fa2459/1/g_NrCt7my1UYdjtbyOqj1B8j6Tg.mft rsync://rpki.ripe.net/repository/DEFAULT/g_NrCt7my1UYdjtbyOqj1B8j6Tg.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Wed 17 Sep 2025 01:02:15 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:99:50:0b:3e:28:c0:9c:d0:f9:7a:47:4f:0b:f8:6a:a0:2e Signature Algorithm: sha256WithRSAEncryption Issuer: CN=83f36b0adee6cb5518763b5bc8eaa3d41f23e938 Validity Not Before: Sep 16 01:02:15 2025 GMT Not After : Sep 17 01:02:15 2025 GMT Subject: CN=8bc1c27b97abfda43b8dca45a9a9f4937ed971c0 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:a1:80:c5:3b:e6:07:96:25:55:37:b9:fe:55:f2: 71:f0:be:96:48:bd:56:43:82:7d:df:22:51:09:9e: d6:2f:05:a9:f9:41:39:3a:06:08:12:f3:45:56:95: cd:42:ab:d1:2c:83:5b:18:2c:b5:a9:80:1a:23:c2: fd:ac:be:a0:e7:e5:a5:99:3b:66:8d:df:3f:fa:53: a2:cb:54:94:53:95:42:09:af:39:6d:0d:ea:c8:d2: cc:05:32:15:b4:1b:de:8c:e9:f2:6f:b9:de:34:48: 12:5b:b1:bf:a0:54:15:3c:55:97:ac:89:4b:33:c3: b6:54:84:e3:69:b4:05:90:a1:b1:9c:66:e6:bf:6c: 0e:42:10:f7:41:e9:d1:1e:8f:0e:6e:94:9b:ab:bd: ef:d8:f7:2c:bc:aa:ca:91:26:44:15:d2:db:40:26: 5a:d2:5e:49:ae:23:84:61:b4:81:8f:f8:39:50:72: 2f:ac:3e:05:f0:70:ad:59:8c:15:2f:51:67:71:eb: bb:ab:96:06:71:8b:88:af:2d:e9:78:bb:ba:a7:02: 51:44:41:e8:84:dd:a3:8f:03:ae:5b:6c:a7:b8:78: 59:16:27:f9:8b:73:e6:57:95:c1:04:73:17:59:ed: 71:c3:95:38:34:cc:e4:bf:8a:b3:f9:0b:52:c3:a2: 3d:49 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 8B:C1:C2:7B:97:AB:FD:A4:3B:8D:CA:45:A9:A9:F4:93:7E:D9:71:C0 X509v3 Authority Key Identifier: keyid:83:F3:6B:0A:DE:E6:CB:55:18:76:3B:5B:C8:EA:A3:D4:1F:23:E9:38 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/g_NrCt7my1UYdjtbyOqj1B8j6Tg.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/34/73195c-e663-498c-97db-af64f3fa2459/1/g_NrCt7my1UYdjtbyOqj1B8j6Tg.mft X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/34/73195c-e663-498c-97db-af64f3fa2459/1/g_NrCt7my1UYdjtbyOqj1B8j6Tg.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 16:4e:b7:b9:c3:6a:b1:a9:d7:a8:b0:9c:ad:5a:7f:2b:0c:71: 22:bf:a0:e7:b7:99:b6:15:da:05:57:2a:be:7f:1f:d6:75:da: 3c:3c:63:24:0e:63:35:57:03:cd:21:9b:ba:74:3b:d8:7f:98: fd:44:00:26:f2:a3:3d:ee:23:af:0c:6b:c2:48:08:66:49:2c: 54:f3:ee:89:5f:66:76:65:43:83:32:63:35:30:30:4f:77:c6: f1:e5:5c:b1:ee:63:85:16:5d:e6:c6:5d:12:ea:6b:f3:d7:ab: d7:69:aa:6c:b7:c7:49:da:1b:95:c9:a0:f0:85:0e:a3:56:10: 78:3f:a0:52:4d:8d:3f:22:67:b6:0f:59:75:c4:4d:a2:ac:01: f6:1b:84:92:49:36:10:90:e9:db:d4:99:86:8d:07:bf:fa:87: 5c:bf:81:cd:33:b8:0e:a8:f9:6b:4f:5e:42:74:b0:9a:94:18: 8b:38:d1:0e:cd:1f:79:f3:fc:22:6d:69:5b:ff:ce:1c:94:a4: 5f:ec:0f:40:de:c2:ef:c1:02:db:fa:eb:90:fa:69:a5:95:45: f1:96:0e:aa:42:47:2c:d8:f8:54:db:3f:18:1d:6d:1c:05:6a: fd:4b:46:c9:cd:ab:59:f0:89:07:36:58:3a:16:5e:ad:4c:1e: 3f:d6:2f:32 -----BEGIN CERTIFICATE----- MIIFFjCCA/6gAwIBAgISAZlQCz4owJzQ+XpHTwv4aqAuMA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKDgzZjM2YjBhZGVlNmNiNTUxODc2M2I1YmM4ZWFhM2Q0MWYy M2U5MzgwHhcNMjUwOTE2MDEwMjE1WhcNMjUwOTE3MDEwMjE1WjAzMTEwLwYDVQQD Eyg4YmMxYzI3Yjk3YWJmZGE0M2I4ZGNhNDVhOWE5ZjQ5MzdlZDk3MWMwMIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAoYDFO+YHliVVN7n+VfJx8L6WSL1W Q4J93yJRCZ7WLwWp+UE5OgYIEvNFVpXNQqvRLINbGCy1qYAaI8L9rL6g5+WlmTtm jd8/+lOiy1SUU5VCCa85bQ3qyNLMBTIVtBvejOnyb7neNEgSW7G/oFQVPFWXrIlL M8O2VITjabQFkKGxnGbmv2wOQhD3QenRHo8ObpSbq73v2PcsvKrKkSZEFdLbQCZa 0l5JriOEYbSBj/g5UHIvrD4F8HCtWYwVL1Fnceu7q5YGcYuIry3peLu6pwJRREHo hN2jjwOuW2ynuHhZFif5i3PmV5XBBHMXWe1xw5U4NMzkv4qz+QtSw6I9SQIDAQAB o4ICIjCCAh4wHQYDVR0OBBYEFIvBwnuXq/2kO43KRamp9JN+2XHAMB8GA1UdIwQY MBaAFIPzawre5stVGHY7W8jqo9QfI+k4MA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvZ19OckN0N215MVVZZGp0YnlPcWoxQjhqNlRnLmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC8zNC83MzE5NWMtZTY2My00OThjLTk3ZGIt YWY2NGYzZmEyNDU5LzEvZ19OckN0N215MVVZZGp0YnlPcWoxQjhqNlRnLm1mdDCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC8zNC83MzE5NWMtZTY2My00OThjLTk3ZGItYWY2NGYzZmEyNDU5 LzEvZ19OckN0N215MVVZZGp0YnlPcWoxQjhqNlRnLmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAFk63ucNq sanXqLCcrVp/KwxxIr+g57eZthXaBVcqvn8f1nXaPDxjJA5jNVcDzSGbunQ72H+Y /UQAJvKjPe4jrwxrwkgIZkksVPPuiV9mdmVDgzJjNTAwT3fG8eVcse5jhRZd5sZd Eupr89er12mqbLfHSdoblcmg8IUOo1YQeD+gUk2NPyJntg9ZdcRNoqwB9huEkkk2 EJDp29SZho0Hv/qHXL+BzTO4Dqj5a09eQnSwmpQYizjRDs0fefP8Im1pW//OHJSk X+wPQN7C78EC2/rrkPpppZVF8ZYOqkJHLNj4VNs/GB1tHAVq/UtGyc2rWfCJBzZY OhZerUweP9YvMg== -----END CERTIFICATE-----Generated at Tue Sep 16 10:55:24 2025 by rpki-client