$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/3a/7cecc7-f63d-43fc-b219-3955959eaf81/1/RY0S8JUFPDWHa4i0doXWQ1Qh_PI.mft File: RY0S8JUFPDWHa4i0doXWQ1Qh_PI.mft (raw, json) Hash identifier: vfodDTZXxlY/5+HEfnVdByNuw4tK07WqQP1yirqz/TE= Subject key identifier: D6:AF:57:8D:C9:E7:6E:BA:A5:49:81:A2:73:73:32:7F:4E:D7:5A:3C Authority key identifier: 45:8D:12:F0:95:05:3C:35:87:6B:88:B4:76:85:D6:43:54:21:FC:F2 Certificate issuer: /CN=458d12f095053c35876b88b47685d6435421fcf2 Certificate serial: 019922FA1267758788E6722D616F8C7EC385 Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/RY0S8JUFPDWHa4i0doXWQ1Qh_PI.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/3a/7cecc7-f63d-43fc-b219-3955959eaf81/1/RY0S8JUFPDWHa4i0doXWQ1Qh_PI.mft Manifest number: 167F Signing time: Sun 07 Sep 2025 07:00:38 +0000 Manifest this update: Sun 07 Sep 2025 07:00:38 +0000 Manifest next update: Mon 08 Sep 2025 07:00:38 +0000 Files and hashes: 1: 0bSG1GbQSr3JP2M9BW2A6zWEmWQ.roa (hash: m8/KEzPrRo4PqG3DFfILeyvmSqlK6Zrphut5P8ccG8c=) 2: 9lwL98-HDVBrZzYLRCpSdOAFXpo.roa (hash: Za/9eX9VNb3FiSxJk6MAE/CpFGWxRO5mjghE1elRivc=) 3: B0iUIhkwv2ZZdyXRyu9yUh7Z61o.roa (hash: F6O6OkDRyyyGqFimHsLztSYsh0AUNFPNkRW3jSPwvEw=) 4: I1EoUAseUd3MHO-sI_txqICBiwc.roa (hash: khM+HdjIw9WozXCqEk/wtCOtMrpNfxWXErjSXn8BT5M=) 5: KQ7nGqqdl8DwDw35UdDbOJPZhfY.roa (hash: 8pIf1gsysAeCO62ayw5k2bU+b1g8t0mrR6+zNCtTibQ=) 6: LS_oKjOyENRZwn9y786G7x_fDEc.roa (hash: qwrjawF9Z67WE+ivjm8mPIl3xqaLReHxca9+SNnwKPE=) 7: Pvub5ztTS47f0XG6tBZE9ngX8Rw.roa (hash: euQ5dqT6xwCfoTsPu9P7kfQ9UGdbPzkkEJWSyFwCBTw=) 8: RY0S8JUFPDWHa4i0doXWQ1Qh_PI.crl (hash: 3sA3t0BZ82B/sH5xkGPW4To+F3uszyCm13hb0oyqJ7I=) 9: lqxGizsVmZbvi7xpd3yzs2I4ILw.roa (hash: aTi4SECMvkjegR9/FyzL9HTmeGkM0AsiVgyipWCsYrY=) 10: sFnlwbiQ75y8_114DKwn3kP_iWc.roa (hash: dkHr9wKemXLLSQfaJK2+kCvWwELtA6u+nMBynz2rXgQ=) Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/3a/7cecc7-f63d-43fc-b219-3955959eaf81/1/RY0S8JUFPDWHa4i0doXWQ1Qh_PI.crl rsync://rpki.ripe.net/repository/DEFAULT/3a/7cecc7-f63d-43fc-b219-3955959eaf81/1/RY0S8JUFPDWHa4i0doXWQ1Qh_PI.mft rsync://rpki.ripe.net/repository/DEFAULT/RY0S8JUFPDWHa4i0doXWQ1Qh_PI.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Mon 08 Sep 2025 07:00:23 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:99:22:fa:12:67:75:87:88:e6:72:2d:61:6f:8c:7e:c3:85 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=458d12f095053c35876b88b47685d6435421fcf2 Validity Not Before: Sep 7 07:00:38 2025 GMT Not After : Sep 8 07:00:38 2025 GMT Subject: CN=d6af578dc9e76ebaa54981a27373327f4ed75a3c Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:c4:ae:37:70:be:b8:e0:5c:3c:d5:44:ff:5a:1d: 4f:50:2e:42:a6:35:43:0b:96:b9:d2:09:f3:c4:c0: 5f:c8:2d:f6:d2:10:aa:a8:42:f3:f5:72:93:bf:cd: 39:c5:8d:18:d9:04:90:3c:f7:88:dc:01:de:5f:3d: b6:3d:c2:49:77:0b:e1:a3:bd:be:f7:6a:4e:54:0d: 19:87:3f:8d:19:ac:fa:2c:b0:d9:75:87:2e:3a:3c: 85:fc:a9:a9:27:e4:e7:c5:57:4f:8f:ed:6d:1a:6f: 16:c6:93:17:3a:d2:03:bd:a8:c8:3d:f9:54:7e:20: 83:93:89:cd:1a:f9:19:bd:43:76:61:ca:47:58:1b: 1e:3f:5e:59:d8:b0:8a:1b:84:d1:22:32:ef:73:ba: 40:9f:e4:69:7e:a8:c0:64:33:b2:c3:17:d1:4e:cb: f7:56:19:e0:27:cd:a9:3a:03:02:bd:d7:24:d8:1d: da:e2:62:83:38:39:46:3d:c9:82:62:1c:b2:6c:46: d8:c2:6f:a4:97:9b:b2:ae:e5:b3:be:d0:09:c5:ba: 4b:bd:90:e5:13:64:c3:cc:7a:dd:ed:ec:f8:c3:f0: 26:e1:5a:4b:2c:2e:eb:65:af:ff:0b:f4:ae:f9:f9: 53:21:c2:56:f4:88:a6:eb:d9:d5:9c:3f:90:2f:98: 61:f5 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: D6:AF:57:8D:C9:E7:6E:BA:A5:49:81:A2:73:73:32:7F:4E:D7:5A:3C X509v3 Authority Key Identifier: keyid:45:8D:12:F0:95:05:3C:35:87:6B:88:B4:76:85:D6:43:54:21:FC:F2 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/RY0S8JUFPDWHa4i0doXWQ1Qh_PI.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/3a/7cecc7-f63d-43fc-b219-3955959eaf81/1/RY0S8JUFPDWHa4i0doXWQ1Qh_PI.mft X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/3a/7cecc7-f63d-43fc-b219-3955959eaf81/1/RY0S8JUFPDWHa4i0doXWQ1Qh_PI.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 1f:eb:f1:e7:28:66:ba:0b:9d:a7:df:af:3a:94:18:27:61:dd: 7e:93:a5:fe:a9:b7:e8:0e:c3:66:93:00:4c:00:d7:e9:4f:90: 9f:72:c6:ed:d1:4a:e6:a0:3f:fb:be:0a:89:36:35:0d:83:10: b6:c0:c2:9d:9d:b1:76:41:13:19:61:9d:be:80:35:c6:cf:23: 32:ce:40:de:25:e4:68:50:92:33:32:79:e8:44:72:d8:25:d1: 94:dc:7e:0f:4c:9e:ef:19:4e:bb:e1:db:c9:cd:38:ba:e2:96: 5c:4f:07:1f:49:9b:75:3d:b3:30:eb:0e:82:72:2a:de:4d:a0: 73:d8:f5:0d:4f:f4:28:e5:a7:e5:45:de:82:63:02:7b:16:52: 80:09:1f:ad:60:25:9c:b0:df:9a:03:0b:e7:4e:22:b0:81:85: a9:f6:5d:13:53:61:dc:b9:28:f5:85:41:25:79:78:43:67:33: cf:6d:4d:0b:dc:67:43:64:89:f3:48:5c:78:bf:52:ab:db:59: d2:2a:c7:5d:bc:1f:ff:a9:60:0a:bb:59:b2:7f:4e:34:fd:5d: 58:9a:7c:d4:2b:64:9e:bb:e8:ac:24:d3:89:91:ff:56:71:ea: b2:4d:cf:a5:41:be:82:46:93:33:53:85:ca:18:c5:2d:d5:61: d8:6f:9f:80 -----BEGIN CERTIFICATE----- MIIFFjCCA/6gAwIBAgISAZki+hJndYeI5nItYW+MfsOFMA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKDQ1OGQxMmYwOTUwNTNjMzU4NzZiODhiNDc2ODVkNjQzNTQy MWZjZjIwHhcNMjUwOTA3MDcwMDM4WhcNMjUwOTA4MDcwMDM4WjAzMTEwLwYDVQQD EyhkNmFmNTc4ZGM5ZTc2ZWJhYTU0OTgxYTI3MzczMzI3ZjRlZDc1YTNjMIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAxK43cL644Fw81UT/Wh1PUC5CpjVD C5a50gnzxMBfyC320hCqqELz9XKTv805xY0Y2QSQPPeI3AHeXz22PcJJdwvho72+ 92pOVA0Zhz+NGaz6LLDZdYcuOjyF/KmpJ+TnxVdPj+1tGm8WxpMXOtIDvajIPflU fiCDk4nNGvkZvUN2YcpHWBseP15Z2LCKG4TRIjLvc7pAn+RpfqjAZDOywxfRTsv3 VhngJ82pOgMCvdck2B3a4mKDODlGPcmCYhyybEbYwm+kl5uyruWzvtAJxbpLvZDl E2TDzHrd7ez4w/Am4VpLLC7rZa//C/Su+flTIcJW9Iim69nVnD+QL5hh9QIDAQAB o4ICIjCCAh4wHQYDVR0OBBYEFNavV43J5266pUmBonNzMn9O11o8MB8GA1UdIwQY MBaAFEWNEvCVBTw1h2uItHaF1kNUIfzyMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvUlkwUzhKVUZQRFdIYTRpMGRvWFdRMVFoX1BJLmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC8zYS83Y2VjYzctZjYzZC00M2ZjLWIyMTkt Mzk1NTk1OWVhZjgxLzEvUlkwUzhKVUZQRFdIYTRpMGRvWFdRMVFoX1BJLm1mdDCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC8zYS83Y2VjYzctZjYzZC00M2ZjLWIyMTktMzk1NTk1OWVhZjgx LzEvUlkwUzhKVUZQRFdIYTRpMGRvWFdRMVFoX1BJLmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAH+vx5yhm ugudp9+vOpQYJ2HdfpOl/qm36A7DZpMATADX6U+Qn3LG7dFK5qA/+74KiTY1DYMQ tsDCnZ2xdkETGWGdvoA1xs8jMs5A3iXkaFCSMzJ56ERy2CXRlNx+D0ye7xlOu+Hb yc04uuKWXE8HH0mbdT2zMOsOgnIq3k2gc9j1DU/0KOWn5UXegmMCexZSgAkfrWAl nLDfmgML504isIGFqfZdE1Nh3Lko9YVBJXl4Q2czz21NC9xnQ2SJ80hceL9Sq9tZ 0irHXbwf/6lgCrtZsn9ONP1dWJp81CtknrvorCTTiZH/VnHqsk3PpUG+gkaTM1OF yhjFLdVh2G+fgA== -----END CERTIFICATE-----Generated at Sun Sep 7 13:49:22 2025 by rpki-client