$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/3a/abe134-0093-4652-9057-4f4c9b343e90/1/0d4STg-K2059lXbOrjJfZo3SJLE.mft File: 0d4STg-K2059lXbOrjJfZo3SJLE.mft (raw, json) Hash identifier: 6cbrMF5H/tZpuXnhCqxlcTbzx4coOIWitahaftEq470= Subject key identifier: A4:22:E1:38:04:4E:69:53:2D:D2:18:C4:0F:A1:CE:99:A3:0A:1B:C2 Authority key identifier: D1:DE:12:4E:0F:8A:DB:4E:7D:95:76:CE:AE:32:5F:66:8D:D2:24:B1 Certificate issuer: /CN=d1de124e0f8adb4e7d9576ceae325f668dd224b1 Certificate serial: 01991C536C4E75F32C7B3CA58691985E2898 Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/0d4STg-K2059lXbOrjJfZo3SJLE.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/3a/abe134-0093-4652-9057-4f4c9b343e90/1/0d4STg-K2059lXbOrjJfZo3SJLE.mft Manifest number: 118E Signing time: Sat 06 Sep 2025 00:00:53 +0000 Manifest this update: Sat 06 Sep 2025 00:00:53 +0000 Manifest next update: Sun 07 Sep 2025 00:00:53 +0000 Files and hashes: 1: 0d4STg-K2059lXbOrjJfZo3SJLE.crl (hash: pcEZ7vw9nSA3v8t8pY4vjoAAMPblBW5AVL77bQv/42E=) 2: 6caVUV-TGB9bU55p1ya71OWBwvg.roa (hash: c0tRExOUVeBF8+Pq6PhYarD4KHj6+N7f0p/w2jdUK80=) 3: GE6nRoMuniMWGyv11YMLRPKemVU.roa (hash: RaYbPvfO1sHreb2/JnG9Opl+09YsllUwocY3Ihxf+gE=) 4: NAlGVYpV8OEmdD2nIMiqn334k0M.roa (hash: XrkbVPgrR7sOnmYGzDR8m+MZN8NJUZRQwjZqOHkM5b8=) 5: TKBPQon04rYAhP4X9cU-tUEetrg.roa (hash: /AA2s0tS5WTloz8NFQB5jII0MJO7Q2yuaillrSQPLGw=) 6: dNqRqY6tmtgccI8cx_uJ4tWqiZA.roa (hash: g+K2hBhsL/swaozLRy4ek/JzzpG8kCplNhlD1lsyOeY=) 7: g8zmfO2HPSEN8YUDrAkY2r7Nlqw.roa (hash: uAg57JMTD8oD+ghOOtfACvdQoLeAHc5YjQ/CuCFoViY=) 8: hacEV-MoLT8z9KwMPWss3cGE7Ak.roa (hash: /ljDI2bMRna9vPYEiWkrDiOeR+IfW8BnSxXE9Vp7xXE=) 9: qnoXcobTtJZawYccy6q_j_ktEjQ.roa (hash: YgqRq2TALdrM9up57j8hrsz1UPh0HBnD1px4pxGN8rs=) 10: xiZp6eivWb7x_d9W-WC8kwhVWsI.roa (hash: GvxU73beqXLMBxGmaGGngexgQ65uQMfsvmeuizGIl8o=) 11: yv08EH90nRPgnJ4aLVioWHP74iI.roa (hash: wfa+cbtIfXj/VcabZ84otkiskAuSmrS6+55fqOkIL+o=) Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/3a/abe134-0093-4652-9057-4f4c9b343e90/1/0d4STg-K2059lXbOrjJfZo3SJLE.crl rsync://rpki.ripe.net/repository/DEFAULT/3a/abe134-0093-4652-9057-4f4c9b343e90/1/0d4STg-K2059lXbOrjJfZo3SJLE.mft rsync://rpki.ripe.net/repository/DEFAULT/0d4STg-K2059lXbOrjJfZo3SJLE.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Sun 07 Sep 2025 00:00:53 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:99:1c:53:6c:4e:75:f3:2c:7b:3c:a5:86:91:98:5e:28:98 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=d1de124e0f8adb4e7d9576ceae325f668dd224b1 Validity Not Before: Sep 6 00:00:53 2025 GMT Not After : Sep 7 00:00:53 2025 GMT Subject: CN=a422e138044e69532dd218c40fa1ce99a30a1bc2 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:c5:29:cc:2c:cf:45:c1:4f:11:76:e3:43:95:e2: 48:55:54:b6:bc:e7:f4:79:b0:82:f7:5e:93:a0:52: 20:dc:94:1f:36:88:cc:74:f7:03:6d:0b:e2:36:4e: 58:24:fc:c4:ae:9f:f1:20:c6:3b:32:21:57:f2:e7: 32:8d:72:52:44:d1:fc:cd:57:60:e9:fd:2b:f6:8a: c5:4a:02:68:27:45:4b:67:96:3a:d4:74:a5:85:5e: 44:0c:fe:b1:f3:b1:e8:26:94:81:33:60:a6:8f:89: 7b:85:11:60:52:8b:94:90:54:c2:dd:17:7c:50:9f: 10:8b:c9:cb:05:ea:3d:5a:9a:be:5e:22:62:0f:a4: ee:ed:40:95:f8:ae:41:fa:66:01:82:af:f8:d9:fc: 99:2d:a1:3f:c0:99:2c:ce:f6:ab:af:0c:50:10:e8: 63:3f:d9:70:a5:8f:49:d9:e8:25:ac:89:e7:55:6e: d0:03:24:af:6a:3f:87:23:bb:5f:d9:02:b7:88:dc: 68:0d:fb:69:0f:a2:7f:d5:19:57:6e:75:d9:7e:7e: c1:09:9e:42:6e:56:8e:6a:25:5d:86:aa:e3:7d:31: 03:cd:25:cf:69:8a:12:a1:63:4e:e7:e0:0d:6f:3e: c6:ce:77:f9:58:44:b6:ca:58:ec:d1:fe:8d:54:26: 3d:d7 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: A4:22:E1:38:04:4E:69:53:2D:D2:18:C4:0F:A1:CE:99:A3:0A:1B:C2 X509v3 Authority Key Identifier: keyid:D1:DE:12:4E:0F:8A:DB:4E:7D:95:76:CE:AE:32:5F:66:8D:D2:24:B1 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/0d4STg-K2059lXbOrjJfZo3SJLE.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/3a/abe134-0093-4652-9057-4f4c9b343e90/1/0d4STg-K2059lXbOrjJfZo3SJLE.mft X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/3a/abe134-0093-4652-9057-4f4c9b343e90/1/0d4STg-K2059lXbOrjJfZo3SJLE.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 24:32:4a:41:cb:df:2b:9b:ca:07:c2:fc:64:18:33:87:0a:cf: 55:d4:35:57:a1:0c:d4:cd:72:18:b5:68:72:38:df:4a:7a:2d: a4:97:7e:4e:79:2b:cf:13:95:b3:69:eb:ea:94:8e:78:12:65: d0:60:f2:7d:cf:60:70:0c:20:1a:a6:42:06:5e:fc:cc:b7:72: 3d:27:80:8b:25:77:40:9c:dd:0f:39:3f:b2:4f:2e:fe:71:c7: b4:e3:2e:cf:27:c8:88:63:6f:db:c8:78:70:2d:66:3b:5b:34: d2:bc:6c:c0:79:84:2a:53:65:f6:c8:24:73:f8:4b:6e:96:32: 46:7f:1c:d7:aa:0a:6a:80:de:de:91:22:cf:63:a7:fc:b9:cd: ba:15:84:ea:51:90:79:ff:84:16:5a:47:a1:04:45:64:c8:95: 13:43:c2:6d:72:a7:23:02:6b:58:a3:d5:c0:4d:98:88:32:b8: 0e:16:61:26:29:3d:c1:97:da:31:3e:4e:fd:d9:1d:20:90:dc: aa:bf:e7:78:59:a5:e4:ad:59:8f:c9:49:75:0f:2e:77:a1:35: e1:c2:52:f8:2a:95:ea:2f:43:c3:96:9b:f7:74:8b:68:4f:28: fa:60:7c:6f:ec:1e:18:f2:3d:5a:ed:20:be:fb:6b:34:d6:a4: 7c:b7:54:93 -----BEGIN CERTIFICATE----- MIIFFjCCA/6gAwIBAgISAZkcU2xOdfMsezylhpGYXiiYMA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKGQxZGUxMjRlMGY4YWRiNGU3ZDk1NzZjZWFlMzI1ZjY2OGRk MjI0YjEwHhcNMjUwOTA2MDAwMDUzWhcNMjUwOTA3MDAwMDUzWjAzMTEwLwYDVQQD EyhhNDIyZTEzODA0NGU2OTUzMmRkMjE4YzQwZmExY2U5OWEzMGExYmMyMIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAxSnMLM9FwU8RduNDleJIVVS2vOf0 ebCC916ToFIg3JQfNojMdPcDbQviNk5YJPzErp/xIMY7MiFX8ucyjXJSRNH8zVdg 6f0r9orFSgJoJ0VLZ5Y61HSlhV5EDP6x87HoJpSBM2Cmj4l7hRFgUouUkFTC3Rd8 UJ8Qi8nLBeo9Wpq+XiJiD6Tu7UCV+K5B+mYBgq/42fyZLaE/wJkszvarrwxQEOhj P9lwpY9J2eglrInnVW7QAySvaj+HI7tf2QK3iNxoDftpD6J/1RlXbnXZfn7BCZ5C blaOaiVdhqrjfTEDzSXPaYoSoWNO5+ANbz7Gznf5WES2yljs0f6NVCY91wIDAQAB o4ICIjCCAh4wHQYDVR0OBBYEFKQi4TgETmlTLdIYxA+hzpmjChvCMB8GA1UdIwQY MBaAFNHeEk4PittOfZV2zq4yX2aN0iSxMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvMGQ0U1RnLUsyMDU5bFhiT3JqSmZabzNTSkxFLmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC8zYS9hYmUxMzQtMDA5My00NjUyLTkwNTct NGY0YzliMzQzZTkwLzEvMGQ0U1RnLUsyMDU5bFhiT3JqSmZabzNTSkxFLm1mdDCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC8zYS9hYmUxMzQtMDA5My00NjUyLTkwNTctNGY0YzliMzQzZTkw LzEvMGQ0U1RnLUsyMDU5bFhiT3JqSmZabzNTSkxFLmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAJDJKQcvf K5vKB8L8ZBgzhwrPVdQ1V6EM1M1yGLVocjjfSnotpJd+TnkrzxOVs2nr6pSOeBJl 0GDyfc9gcAwgGqZCBl78zLdyPSeAiyV3QJzdDzk/sk8u/nHHtOMuzyfIiGNv28h4 cC1mO1s00rxswHmEKlNl9sgkc/hLbpYyRn8c16oKaoDe3pEiz2On/LnNuhWE6lGQ ef+EFlpHoQRFZMiVE0PCbXKnIwJrWKPVwE2YiDK4DhZhJik9wZfaMT5O/dkdIJDc qr/neFml5K1Zj8lJdQ8ud6E14cJS+CqV6i9Dw5ab93SLaE8o+mB8b+weGPI9Wu0g vvtrNNakfLdUkw== -----END CERTIFICATE-----Generated at Sat Sep 6 06:02:05 2025 by rpki-client