$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/34/d90c6f-6576-46b9-8313-6cbff3c4da01/1/O0duEuiYflswLNwkvdnbP-g8hEk.mft File: O0duEuiYflswLNwkvdnbP-g8hEk.mft (raw, json) Hash identifier: 6kketm8P3NbboKnrArUzOPZ1PYW0DMeTiR83SP9PZ0A= Subject key identifier: CE:64:45:8B:B8:0E:F7:D9:8A:ED:DE:39:F3:98:3E:3C:01:2C:BE:1C Authority key identifier: 3B:47:6E:12:E8:98:7E:5B:30:2C:DC:24:BD:D9:DB:3F:E8:3C:84:49 Certificate issuer: /CN=3b476e12e8987e5b302cdc24bdd9db3fe83c8449 Certificate serial: 01991E78BE65AF1464E71EFF977C6E795A57 Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/O0duEuiYflswLNwkvdnbP-g8hEk.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/34/d90c6f-6576-46b9-8313-6cbff3c4da01/1/O0duEuiYflswLNwkvdnbP-g8hEk.mft Manifest number: 186C Signing time: Sat 06 Sep 2025 10:00:53 +0000 Manifest this update: Sat 06 Sep 2025 10:00:53 +0000 Manifest next update: Sun 07 Sep 2025 10:00:53 +0000 Files and hashes: 1: 4vgCB29E8qksUTRT80hibqkfyyc.roa (hash: jmfyWEEY9JnvGnTw4OogSC5Brt6r5w8K86EHD/wwf9A=) 2: 526untxz-mzv2dHnFDXL_1ptt60.roa (hash: eTZ7gYAJgAUW5KmvOus9/SXIOPMjtfVvCRByFZ9gVg0=) 3: 7AXFe4yxIHvF0jtzsP_F-wLpTyo.roa (hash: fz447Zdcr7iuvJ9YqYhhlssvYnd7PF5Z4bBFuoyFksI=) 4: C-8-iMMsxJ6tnwl9OBqOWIwbNsU.roa (hash: pdyDDn72ivSi04YeLJDn/Rf+owjmwql5RY6I2jPWQjI=) 5: Cz5IOaLfZShikRrc5qEp3L0_dDE.roa (hash: yJQIMc4u5I3PxM3zxWJYXZyrXzNKlBnDlO54oa7k+I4=) 6: DxgEUmzhCfbLGW1VYUfMpFa37nw.roa (hash: aTiJxBWDUefv6IrHKfkDtn+24ct4bHV07inB3EBckiI=) 7: FmAKBKd-PdNqMEGk2uZifaqmnrE.roa (hash: BK0SX5WkOOtWNPjitJ2TK5CAHUK5xcu0+wg05UjWy1g=) 8: GMnz3z9nrgbgP0ppZKUjHaDtXyE.roa (hash: LxAEvoJTMfyFREvhgYObD8aUTHjiu1gGB5tCs2IQyFI=) 9: GXy-YScDdlVSOjaigEKgJ51XCY8.roa (hash: Y3LR/iT+9EdXx7rq4pgAup8VPeSq/ZLbP9lE7Caoknc=) 10: KfRroo9-BNURF9yUWR1WlHgU1ig.roa (hash: d0EUN/5YCOmmW4SmyztOjubnx+pkCFBWNsBncoAozSc=) 11: NBdPQa-wvhCcNUR62UijOKmqLb4.roa (hash: FBuWOoWqS3kDovQ4RTLJifcKo3Lt+KtJgveTvXA1/PY=) 12: O0duEuiYflswLNwkvdnbP-g8hEk.crl (hash: KJK8yiHRco0BKZHrOkENsXtZnP6CDB2TZ8lVB+/kjh8=) 13: ONvCFUby9FQsaJnAxo4Axtdte3w.roa (hash: Ifw+sRLVQyRVbH8IoOOspPffjTFu/L5Tp5Iujz6vsEg=) 14: PqyNHcmLJdPWxXV1ritb4BmJxi4.roa (hash: 3vlH477/W9mn8TAvOvuTdFa84/v39cjh6RY9RiJ8GGQ=) 15: RPtIr4SyxST2FhDUlfIaVDvDv30.roa (hash: GtTmqq9ciOzu0ubmXjSZndWCRadfRgXNWiYJpFrJC5s=) 16: SYJLObrmnLX0qSjqWy4fjvI4wfg.roa (hash: 8EEWLPfT56iygA2pm9gSd1ZbNAm6vIegZGKTF/BcW2k=) 17: W4gGQid-BJ2ydE-GfarPQD0BXHk.roa (hash: AIulnkFQm6EME0MTgDdsXVMYUQiBqZHjvvdiEh/TZmw=) 18: W6vAzbeYVqv1NulDzaonbbDB8SY.roa (hash: vuX+ehs+1SZ9H4PJ6tewuaRUyccY/gCN0nnCPhhuuuM=) 19: Xf3YKxRqkeL7M00W8PeVBpyDwo4.roa (hash: l1kq88C+6MsbDoI9xmNG80iyS2+gmcx5dOr77F5QPn4=) 20: Y2m9dQZRR5IryF_5Zz3iwenilus.roa (hash: Jz9GiZ+cQjwgpfumcixZsPRulTmHrskYTNVB0A9hwMs=) 21: aRKgFuNEew699NwvZOmMVRESxJw.roa (hash: BbnnNcBf5b80ecOVIfxt6czSFR5JGmFsnVDqmj8IYKc=) 22: bIscYSktyuSdXA8uuitNFV9EUno.roa (hash: w2B+jU39CkMFN16wFNwH+8WwrfFPrjamkhdn7et9g8s=) 23: ct-xQNtbnrCInzUNrLB_xtyvKaM.roa (hash: XhwI8n2e/SNqNOvS5qJ+4/Tm7U/1thsXi50GuuWG6fI=) 24: d0QPUb9bw255FbDfGbVwKoJI6bE.roa (hash: jrR/WoS1SZ3m1OaPCDPsHF9pj1zBDeNV31JSvSAQwFQ=) 25: ejUJhdQv_gD6oiLYrzclBYzyLOY.roa (hash: GfeTAbqceyfp5+2gyCSPrzyUUUuMpH7hOe6M0SAay2Y=) 26: nei3AaGClDiyy_EfGYw9mDGViqc.roa (hash: qXKOsUvJTZ9r5zNLO+LyECtFcWGid4ruKizdlfVXjdw=) 27: oMVUugxzWQV8CTV8CsCSyXRaVrM.roa (hash: pMKFMHKU1JhFpXnjr6tLo7AocNPXia8Qa3GSVsF74/E=) 28: oWQjZS65WCcLUp_rizKZHEXxja8.roa (hash: ppbU5PBHwS7A+yU9U50SRApQ+OcnfPk2nBS7g+bHUiE=) 29: ovN5lUMOvyCsibLtwBKiWDDh40I.roa (hash: f6I9E5d7T5P531FSrBYPOYl6Rjn2XCvJvM8XhJXm6Vs=) 30: sIaFicGSLfWywofV-flOlj4BbEs.roa (hash: T3ig9ILGk20fQZ8i8xMsdIL3W6kPVu5G2DRrIA6L3QI=) 31: tGvaJqw-BkYv98JxwuYhGJMirKI.roa (hash: n1mCBZS2+2xEitKl9orN+eHu3AcNiwq8Xb6c6Ko5sAc=) 32: yEUQ_aJkjJZT7FqCL5XucJyCbH4.roa (hash: UhItDph40P0qmr9fzzHpHPa0fBJT60AEwUYsGPaQGNQ=) Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/34/d90c6f-6576-46b9-8313-6cbff3c4da01/1/O0duEuiYflswLNwkvdnbP-g8hEk.crl rsync://rpki.ripe.net/repository/DEFAULT/34/d90c6f-6576-46b9-8313-6cbff3c4da01/1/O0duEuiYflswLNwkvdnbP-g8hEk.mft rsync://rpki.ripe.net/repository/DEFAULT/O0duEuiYflswLNwkvdnbP-g8hEk.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Sun 07 Sep 2025 10:00:53 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:99:1e:78:be:65:af:14:64:e7:1e:ff:97:7c:6e:79:5a:57 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=3b476e12e8987e5b302cdc24bdd9db3fe83c8449 Validity Not Before: Sep 6 10:00:53 2025 GMT Not After : Sep 7 10:00:53 2025 GMT Subject: CN=ce64458bb80ef7d98aedde39f3983e3c012cbe1c Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:b5:62:84:8c:67:f6:38:d0:20:e2:65:80:e2:94: c2:02:f8:c6:b9:30:5d:71:8a:da:bd:8a:08:1a:7b: 2b:7f:72:3a:cb:04:b8:16:93:e5:3f:c1:26:75:03: f8:4b:71:b0:ac:ee:ee:1a:29:3f:e1:d1:ec:24:ac: 60:9a:49:76:ee:b8:35:98:4e:24:cb:97:ee:55:ef: 9f:8f:0e:9c:74:0e:4b:28:89:28:98:5b:93:cd:0a: 82:ea:5a:44:63:2a:82:17:8c:c9:5e:84:3b:91:44: 75:ee:e6:39:99:0d:a9:16:63:a8:0c:e8:46:a0:a1: 5b:a8:c8:9b:95:a2:1b:22:cd:68:89:e9:90:ba:38: 3a:61:4a:73:a7:4e:17:5e:2a:e7:9f:85:92:54:71: b1:78:4f:8a:c7:c0:08:da:af:5c:ed:48:69:7c:dc: 97:fb:84:29:bc:05:76:24:48:4d:b1:37:90:e3:37: 90:89:e5:6e:36:9e:ef:8f:1b:3f:0c:ee:09:30:a3: c1:a3:3c:2e:80:a4:4f:8e:70:9a:a4:8b:a5:40:e6: 36:86:a9:7d:e7:f9:73:0c:2f:34:1d:0a:25:f6:87: d9:a8:bd:9d:9d:9a:ca:87:5f:49:46:5d:0c:d2:42: 52:85:c4:3d:e8:28:05:50:9c:94:b3:d6:07:33:6f: f1:97 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: CE:64:45:8B:B8:0E:F7:D9:8A:ED:DE:39:F3:98:3E:3C:01:2C:BE:1C X509v3 Authority Key Identifier: keyid:3B:47:6E:12:E8:98:7E:5B:30:2C:DC:24:BD:D9:DB:3F:E8:3C:84:49 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/O0duEuiYflswLNwkvdnbP-g8hEk.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/34/d90c6f-6576-46b9-8313-6cbff3c4da01/1/O0duEuiYflswLNwkvdnbP-g8hEk.mft X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/34/d90c6f-6576-46b9-8313-6cbff3c4da01/1/O0duEuiYflswLNwkvdnbP-g8hEk.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 45:d5:9f:57:9c:08:75:a7:38:77:60:fd:5b:64:d0:c7:5e:3b: 7e:c8:1d:81:9c:90:7e:02:c1:ab:16:b3:24:bf:f1:ba:f8:62: 57:0f:a4:e5:df:74:b8:68:55:6f:e0:bb:f3:cc:e5:6c:9d:5b: 68:b7:1e:a1:c5:6f:39:92:c1:51:6b:d2:39:87:23:89:63:c6: 4d:16:0f:79:a8:14:4b:e5:6f:2d:90:86:86:aa:32:24:78:50: d5:83:67:2f:f3:68:ee:c2:ed:73:4e:a4:d9:a0:5c:6f:f0:97: ac:ae:32:df:b0:1f:43:c2:cc:ca:65:5a:8e:b8:ff:85:e2:e9: ec:22:0c:b3:91:ab:aa:48:ce:fa:3f:cb:17:38:aa:f9:1a:82: 83:dd:1f:06:e5:05:7a:10:fb:81:0d:8f:1a:4c:41:a0:14:ec: c4:e4:d0:4e:aa:62:4f:e5:87:49:46:29:4e:af:d0:f7:cb:80: f8:e1:2c:1e:16:f0:23:0b:80:ba:02:5a:45:bc:56:3b:f2:fc: 07:9a:cc:32:e2:0c:f0:19:94:ba:65:5a:f3:df:12:99:2c:e0: bc:42:3f:f8:7b:40:00:5a:af:a7:7d:37:17:06:bf:6a:bb:a7: fe:41:7c:40:d6:16:dd:6d:f9:88:cb:00:d5:da:d0:fc:52:32: 40:e0:e2:1d -----BEGIN CERTIFICATE----- MIIFFjCCA/6gAwIBAgISAZkeeL5lrxRk5x7/l3xueVpXMA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKDNiNDc2ZTEyZTg5ODdlNWIzMDJjZGMyNGJkZDlkYjNmZTgz Yzg0NDkwHhcNMjUwOTA2MTAwMDUzWhcNMjUwOTA3MTAwMDUzWjAzMTEwLwYDVQQD EyhjZTY0NDU4YmI4MGVmN2Q5OGFlZGRlMzlmMzk4M2UzYzAxMmNiZTFjMIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAtWKEjGf2ONAg4mWA4pTCAvjGuTBd cYravYoIGnsrf3I6ywS4FpPlP8EmdQP4S3GwrO7uGik/4dHsJKxgmkl27rg1mE4k y5fuVe+fjw6cdA5LKIkomFuTzQqC6lpEYyqCF4zJXoQ7kUR17uY5mQ2pFmOoDOhG oKFbqMiblaIbIs1oiemQujg6YUpzp04XXirnn4WSVHGxeE+Kx8AI2q9c7UhpfNyX +4QpvAV2JEhNsTeQ4zeQieVuNp7vjxs/DO4JMKPBozwugKRPjnCapIulQOY2hql9 5/lzDC80HQol9ofZqL2dnZrKh19JRl0M0kJShcQ96CgFUJyUs9YHM2/xlwIDAQAB o4ICIjCCAh4wHQYDVR0OBBYEFM5kRYu4DvfZiu3eOfOYPjwBLL4cMB8GA1UdIwQY MBaAFDtHbhLomH5bMCzcJL3Z2z/oPIRJMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvTzBkdUV1aVlmbHN3TE53a3ZkbmJQLWc4aEVrLmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC8zNC9kOTBjNmYtNjU3Ni00NmI5LTgzMTMt NmNiZmYzYzRkYTAxLzEvTzBkdUV1aVlmbHN3TE53a3ZkbmJQLWc4aEVrLm1mdDCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC8zNC9kOTBjNmYtNjU3Ni00NmI5LTgzMTMtNmNiZmYzYzRkYTAx LzEvTzBkdUV1aVlmbHN3TE53a3ZkbmJQLWc4aEVrLmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEARdWfV5wI dac4d2D9W2TQx147fsgdgZyQfgLBqxazJL/xuvhiVw+k5d90uGhVb+C788zlbJ1b aLceocVvOZLBUWvSOYcjiWPGTRYPeagUS+VvLZCGhqoyJHhQ1YNnL/No7sLtc06k 2aBcb/CXrK4y37AfQ8LMymVajrj/heLp7CIMs5GrqkjO+j/LFziq+RqCg90fBuUF ehD7gQ2PGkxBoBTsxOTQTqpiT+WHSUYpTq/Q98uA+OEsHhbwIwuAugJaRbxWO/L8 B5rMMuIM8BmUumVa898SmSzgvEI/+HtAAFqvp303Fwa/arun/kF8QNYW3W35iMsA 1drQ/FIyQODiHQ== -----END CERTIFICATE-----Generated at Sat Sep 6 14:36:07 2025 by rpki-client