$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/35/5ecfc2-da70-4333-8f96-5b87825c07ee/1/RFbBTNhyT5qQlie5TgBs9p0SMHs.mft File: RFbBTNhyT5qQlie5TgBs9p0SMHs.mft (raw, json) Hash identifier: Cjcc9qrWr5wpKP8jBJ7xdFGc+3sJUtGTH1o5YOj0aqY= Subject key identifier: 0B:C6:F7:36:4F:BF:49:7D:A9:29:13:E6:A0:AC:C2:4E:73:AD:09:9F Authority key identifier: 44:56:C1:4C:D8:72:4F:9A:90:96:27:B9:4E:00:6C:F6:9D:12:30:7B Certificate issuer: /CN=4456c14cd8724f9a909627b94e006cf69d12307b Certificate serial: 019922FA8C62B97C8A6B7BBCAA277A9F3F6C Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/RFbBTNhyT5qQlie5TgBs9p0SMHs.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/35/5ecfc2-da70-4333-8f96-5b87825c07ee/1/RFbBTNhyT5qQlie5TgBs9p0SMHs.mft Manifest number: 1070 Signing time: Sun 07 Sep 2025 07:01:09 +0000 Manifest this update: Sun 07 Sep 2025 07:01:09 +0000 Manifest next update: Mon 08 Sep 2025 07:01:09 +0000 Files and hashes: 1: 1-zO_X8m4H1rJu5YxrTfq1_LtFUw.roa (hash: 8XULk9NSCsk6wJTdGSnM5MpRbtNCX8jvKKx3+n/QI24=) 2: 3vuXYmLO804YeH7WzpNylqDzYzk.roa (hash: pZmQFxF+w/pjKco0VNoAljDoLP/ZSq7cNuWVMp1z4Eo=) 3: Ajg1evwXtbOwH8JbxtFbskFgAik.roa (hash: iHM/YIdefBXDCl4eoKU+a8Pl/9qUhEUpDTRYLpSYF+k=) 4: BzIUJhUJbKG8FJ3ZDsR0CAFvEys.roa (hash: Wo3BYY5cyZkRMqsE1puPM7lM2g8GnmQ0M7pog+XPkLo=) 5: RFbBTNhyT5qQlie5TgBs9p0SMHs.crl (hash: L3aj/ZjJrvOYZo3pZlLmZog5JWp34bIoBI858DXsXXk=) 6: UVZ_NscLyZYnklyWu4g7GIfa1oM.roa (hash: jFFoigem/kuKPimaajmhyzdiIKnD2doVuHNr/yPgD9o=) 7: iVv9ozH_svAyWCz87404M3b3dOg.roa (hash: B5ikMCrUQ9bNfvmS1tqxZLEZ9Uh8pGPtdisM2zHNixE=) 8: mda8QR5F8LzXtT2rD8haKXFSDdc.roa (hash: i4agz+Z11Iqdd1bLYvYpwwEMIFhIlz9hmUQ0CUO9HLY=) 9: phMHUXGvPxn2DLT5p1ejhNrhbjU.roa (hash: I3f7lI5Gs9gMy8wigPhFWkKF/LTaX3B+WQTJbC+AJvo=) 10: rSBf7m4QN8B8IdOa1QZkuz2yGzo.roa (hash: HK04u30OvyiqU+SoQ1bUDIZ6GpYsXVoMPcjWlJuPm+o=) Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/35/5ecfc2-da70-4333-8f96-5b87825c07ee/1/RFbBTNhyT5qQlie5TgBs9p0SMHs.crl rsync://rpki.ripe.net/repository/DEFAULT/35/5ecfc2-da70-4333-8f96-5b87825c07ee/1/RFbBTNhyT5qQlie5TgBs9p0SMHs.mft rsync://rpki.ripe.net/repository/DEFAULT/RFbBTNhyT5qQlie5TgBs9p0SMHs.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Mon 08 Sep 2025 05:00:23 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:99:22:fa:8c:62:b9:7c:8a:6b:7b:bc:aa:27:7a:9f:3f:6c Signature Algorithm: sha256WithRSAEncryption Issuer: CN=4456c14cd8724f9a909627b94e006cf69d12307b Validity Not Before: Sep 7 07:01:09 2025 GMT Not After : Sep 8 07:01:09 2025 GMT Subject: CN=0bc6f7364fbf497da92913e6a0acc24e73ad099f Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:ab:82:31:d8:d9:f6:15:50:7d:f8:0e:e5:64:e2: c8:87:b4:65:68:90:db:7a:1a:d3:7f:f4:f6:c5:55: 2c:4d:f0:32:10:d8:b2:b9:16:ee:2c:ec:ae:b9:2b: 70:e8:83:f6:55:e4:9a:03:9d:46:89:18:cc:16:5d: d6:48:52:21:e3:23:6c:b9:a7:34:a6:a1:7d:c2:1b: 3d:b6:34:ff:10:af:01:e4:d2:d1:8a:0d:02:03:d2: 6b:d0:0a:77:dd:db:4b:ab:1a:a4:1d:83:68:bf:91: 18:62:c4:77:f6:26:1e:e8:57:c2:40:d3:a2:db:fa: 1a:a1:3a:88:c6:79:93:bd:64:9b:4f:c0:41:c4:6b: f8:71:4d:5f:f6:c3:ce:f4:a7:e9:aa:82:6d:d7:16: 03:04:74:b5:5a:d0:4e:9f:bb:27:a1:6b:7f:d7:9a: 7f:53:6b:d8:5d:2e:ca:0b:33:3a:03:ff:71:50:8e: 9b:01:43:f1:ae:8f:03:77:25:33:53:60:04:22:cc: 86:d1:58:23:c6:be:c9:d0:97:25:36:ae:18:00:65: 0f:26:62:68:3f:de:5c:f2:a2:17:f2:5e:39:cf:cb: 6d:2f:31:c2:6f:a8:7f:70:2f:b5:85:a6:45:3a:af: 9a:a4:3e:59:17:d9:a3:0f:da:0e:b9:06:a4:8f:a8: 2c:e3 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 0B:C6:F7:36:4F:BF:49:7D:A9:29:13:E6:A0:AC:C2:4E:73:AD:09:9F X509v3 Authority Key Identifier: keyid:44:56:C1:4C:D8:72:4F:9A:90:96:27:B9:4E:00:6C:F6:9D:12:30:7B X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/RFbBTNhyT5qQlie5TgBs9p0SMHs.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/35/5ecfc2-da70-4333-8f96-5b87825c07ee/1/RFbBTNhyT5qQlie5TgBs9p0SMHs.mft X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/35/5ecfc2-da70-4333-8f96-5b87825c07ee/1/RFbBTNhyT5qQlie5TgBs9p0SMHs.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 7f:15:5d:ce:46:31:d0:f9:ae:92:60:33:c6:74:f4:94:f0:ee: f7:4e:73:4a:ba:20:fa:fb:98:78:0b:55:43:61:6f:2e:f0:52: 98:21:68:9a:cc:70:04:5f:f3:3d:08:dc:ee:fe:20:d2:fc:28: fc:20:4a:a0:8e:ec:dc:c3:61:21:33:b4:0f:2a:31:7e:34:7a: 8c:88:cd:d6:61:71:55:41:e5:0e:91:28:b8:b8:0d:80:9a:a4: 80:8a:e6:ae:3c:14:90:c0:25:46:f5:87:05:37:cc:69:a9:78: 00:46:4a:ae:ad:17:17:5c:d1:ae:50:20:4d:af:8b:8a:63:09: f3:7e:83:cc:ac:34:75:cb:65:ec:41:ad:ff:c2:38:c5:3d:44: e7:9c:bd:4f:cd:0c:0f:5e:0c:2e:bc:6a:d2:fc:80:7e:0d:5f: 18:4d:25:a1:1f:1b:27:b0:38:3c:a9:19:95:6e:81:35:d7:c8: be:75:4d:09:f2:4d:23:b7:6d:5b:80:c8:e5:6f:94:43:39:c3: 4e:ee:e9:19:0e:5d:cc:02:0e:d7:0a:bd:e6:fc:66:73:24:6c: 62:26:78:e1:4e:d5:de:ba:7b:7b:dd:b1:2d:f7:71:aa:0e:52: d9:5b:4b:7b:31:f2:ba:1d:dc:29:18:03:96:17:d3:9b:64:cc: 5f:62:3c:0c -----BEGIN CERTIFICATE----- MIIFFjCCA/6gAwIBAgISAZki+oxiuXyKa3u8qid6nz9sMA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKDQ0NTZjMTRjZDg3MjRmOWE5MDk2MjdiOTRlMDA2Y2Y2OWQx MjMwN2IwHhcNMjUwOTA3MDcwMTA5WhcNMjUwOTA4MDcwMTA5WjAzMTEwLwYDVQQD EygwYmM2ZjczNjRmYmY0OTdkYTkyOTEzZTZhMGFjYzI0ZTczYWQwOTlmMIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAq4Ix2Nn2FVB9+A7lZOLIh7RlaJDb ehrTf/T2xVUsTfAyENiyuRbuLOyuuStw6IP2VeSaA51GiRjMFl3WSFIh4yNsuac0 pqF9whs9tjT/EK8B5NLRig0CA9Jr0Ap33dtLqxqkHYNov5EYYsR39iYe6FfCQNOi 2/oaoTqIxnmTvWSbT8BBxGv4cU1f9sPO9KfpqoJt1xYDBHS1WtBOn7snoWt/15p/ U2vYXS7KCzM6A/9xUI6bAUPxro8DdyUzU2AEIsyG0Vgjxr7J0JclNq4YAGUPJmJo P95c8qIX8l45z8ttLzHCb6h/cC+1haZFOq+apD5ZF9mjD9oOuQakj6gs4wIDAQAB o4ICIjCCAh4wHQYDVR0OBBYEFAvG9zZPv0l9qSkT5qCswk5zrQmfMB8GA1UdIwQY MBaAFERWwUzYck+akJYnuU4AbPadEjB7MA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvUkZiQlROaHlUNXFRbGllNVRnQnM5cDBTTUhzLmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC8zNS81ZWNmYzItZGE3MC00MzMzLThmOTYt NWI4NzgyNWMwN2VlLzEvUkZiQlROaHlUNXFRbGllNVRnQnM5cDBTTUhzLm1mdDCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC8zNS81ZWNmYzItZGE3MC00MzMzLThmOTYtNWI4NzgyNWMwN2Vl LzEvUkZiQlROaHlUNXFRbGllNVRnQnM5cDBTTUhzLmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAfxVdzkYx 0PmukmAzxnT0lPDu905zSrog+vuYeAtVQ2FvLvBSmCFomsxwBF/zPQjc7v4g0vwo /CBKoI7s3MNhITO0DyoxfjR6jIjN1mFxVUHlDpEouLgNgJqkgIrmrjwUkMAlRvWH BTfMaal4AEZKrq0XF1zRrlAgTa+LimMJ836DzKw0dctl7EGt/8I4xT1E55y9T80M D14MLrxq0vyAfg1fGE0loR8bJ7A4PKkZlW6BNdfIvnVNCfJNI7dtW4DI5W+UQznD Tu7pGQ5dzAIO1wq95vxmcyRsYiZ44U7V3rp7e92xLfdxqg5S2VtLezHyuh3cKRgD lhfTm2TMX2I8DA== -----END CERTIFICATE-----Generated at Sun Sep 7 10:11:57 2025 by rpki-client