$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/3c/e5a892-23f5-49fa-b6a9-a65233b3e975/1/cu0vu3IT-_Mq1MCH-LCyLOzvT-o.mft File: cu0vu3IT-_Mq1MCH-LCyLOzvT-o.mft (raw, json) Hash identifier: 4oAH73ow2tpI26eMEGKgRmdwRT4OTSI+mJdUh0kEIlE= Subject key identifier: DC:50:6C:57:1B:86:E6:6A:CB:F1:35:85:C5:66:0C:30:A6:15:6C:07 Authority key identifier: 72:ED:2F:BB:72:13:FB:F3:2A:D4:C0:87:F8:B0:B2:2C:EC:EF:4F:EA Certificate issuer: /CN=72ed2fbb7213fbf32ad4c087f8b0b22cecef4fea Certificate serial: 019933EEA4C4FEA1EA70710A8BD9AC46FF42 Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/cu0vu3IT-_Mq1MCH-LCyLOzvT-o.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/3c/e5a892-23f5-49fa-b6a9-a65233b3e975/1/cu0vu3IT-_Mq1MCH-LCyLOzvT-o.mft Manifest number: 1680 Signing time: Wed 10 Sep 2025 14:01:41 +0000 Manifest this update: Wed 10 Sep 2025 14:01:41 +0000 Manifest next update: Thu 11 Sep 2025 14:01:41 +0000 Files and hashes: 1: 6QFd9IdVpCQmItNCPxRFCrp9nKQ.roa (hash: bGmgyU+MRUomnlmMA4u5BiNJcGHkzxHgj+I3pHeo+G0=) 2: 7dsX1_uj3CI2OL3ZR-YysHvbwJk.roa (hash: /UJ2jaPIsh9LABzhutyiOz6tqO3pebNJplX7fsJ15q4=) 3: 9x0cjGr7YULmSfzI3dcYG9w_06I.roa (hash: nZkDj/8oM/37FYrz8May17dhFjnT3DNeVQBgn2oaZf0=) 4: EBjZlhPdImN_fmswrc4n1qFbaJc.roa (hash: tUvTqcEJd5jRcaH6HCXAi4EQUm+eSxMyHWyd2ocWiV8=) 5: GNcbaUuI19-wbs7GLcE1lajDv-k.roa (hash: JkYHzX+XVOiUvpRyMV+wrBz6xce9nKA7hPNlot5aQZ4=) 6: PX0DpkBl9yg1gQzNf2fXaFsswv8.roa (hash: fegY3SzHduBrH8eO5Wo9IcX0cjRfR9p14sX7mhpiZ8U=) 7: SHXtPV4kgZiSMLrfaQNfttE3YEg.roa (hash: vCULHOU0pm0NUpWsnrVNz86sxtEUOZpw65hpej3MIxs=) 8: TEHPMPoZisl9vOiLWV_tB3SmWaI.roa (hash: /q8DB82i9XChVszHx+lvwBEwJCoXbxAKUBSDji6t9Ek=) 9: VAwOmXBu3_hb-94kaLmxAE_i7pI.roa (hash: IZvIAsZ3NFMGzz4y4fdnumBCA9Bj3yp20yIaQmXg3Fo=) 10: YTPIeKA6vN8bBsCmmqzk6w3bpmU.roa (hash: Mo6Tf23Yod2O05O4042OzPfIL4jXB8/HVLdp8MJUwtk=) 11: YrZdH5pglRx66b5p9JGRz_SyZts.roa (hash: mhtrEJveZQw15THeEWaXosd9inWt6asg5tmlg7bP8KA=) 12: cu0vu3IT-_Mq1MCH-LCyLOzvT-o.crl (hash: zGSD/VgBPPN4faXfZMuASscpEcsw4ohNjYolhyJVzh0=) 13: k34T0BOxtuolFGK7D9gfPSVqjyg.roa (hash: zRGBGpZvNTWiV1L4FpZxoKUzkhe3V2xnMgLC1QF7Yns=) 14: p9yFoBCMLxcx2kyLnzIglbUZt8Q.roa (hash: fbxtSkZt340A9KV6V1MZj2gG37RK0K88NQoLtoEEGa0=) 15: rm3UHUFplAChrToLa297UrTCIuo.roa (hash: HHiyje/4Xaq3L0LGhP0VYLYtVuy3S8HWVlC7cJ7pBgA=) 16: yKPpEfXuR3hgVnHrW-SosrWvchI.roa (hash: JRlziFyrSVh96Xmb3+ZOE6HFj6jm/zMUIwmBAAhdoq8=) Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/3c/e5a892-23f5-49fa-b6a9-a65233b3e975/1/cu0vu3IT-_Mq1MCH-LCyLOzvT-o.crl rsync://rpki.ripe.net/repository/DEFAULT/3c/e5a892-23f5-49fa-b6a9-a65233b3e975/1/cu0vu3IT-_Mq1MCH-LCyLOzvT-o.mft rsync://rpki.ripe.net/repository/DEFAULT/cu0vu3IT-_Mq1MCH-LCyLOzvT-o.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Thu 11 Sep 2025 14:01:41 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:99:33:ee:a4:c4:fe:a1:ea:70:71:0a:8b:d9:ac:46:ff:42 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=72ed2fbb7213fbf32ad4c087f8b0b22cecef4fea Validity Not Before: Sep 10 14:01:41 2025 GMT Not After : Sep 11 14:01:41 2025 GMT Subject: CN=dc506c571b86e66acbf13585c5660c30a6156c07 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:ae:26:0b:86:92:dc:18:80:fc:15:1e:7a:f5:c8: 17:a4:d6:9c:94:74:6c:4a:d7:c4:28:1f:ee:3a:00: 78:65:f7:dc:26:79:1e:a0:11:af:5e:93:93:67:36: 16:de:12:93:9e:5d:82:ff:a5:32:5b:ae:2b:ae:e9: 7a:29:87:6c:7a:f8:b9:a6:21:a2:3d:d6:db:78:b0: 54:bf:ca:d4:5f:7e:70:04:cc:ad:5f:9c:25:f4:ca: df:3b:f0:27:33:87:6c:f6:24:14:ee:0c:71:fe:65: 92:a4:ef:e3:fc:e0:3c:94:37:72:69:ec:51:c6:c5: de:4e:53:ab:6f:0e:34:ce:92:c9:87:c4:3a:20:1c: ef:65:ff:e7:0a:9a:58:43:ed:95:85:86:2b:16:cd: 54:61:3a:fe:41:76:8c:23:48:19:cf:23:f9:b7:51: 31:3f:45:9f:5c:67:51:c5:6c:bc:48:0e:4a:96:67: 13:5a:21:47:29:97:18:a1:d3:92:d0:09:5c:69:66: 70:69:36:2d:ed:75:9c:e5:4d:0f:ec:fe:e7:03:47: 6e:2a:12:a1:69:9c:f6:48:bd:f4:8c:c1:a4:2b:18: a1:b1:54:23:a5:f6:7e:34:bd:f2:9d:98:cc:43:a7: 44:84:d4:e3:5f:38:28:41:72:cd:63:f1:00:ee:b7: cf:3b Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: DC:50:6C:57:1B:86:E6:6A:CB:F1:35:85:C5:66:0C:30:A6:15:6C:07 X509v3 Authority Key Identifier: keyid:72:ED:2F:BB:72:13:FB:F3:2A:D4:C0:87:F8:B0:B2:2C:EC:EF:4F:EA X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/cu0vu3IT-_Mq1MCH-LCyLOzvT-o.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/3c/e5a892-23f5-49fa-b6a9-a65233b3e975/1/cu0vu3IT-_Mq1MCH-LCyLOzvT-o.mft X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/3c/e5a892-23f5-49fa-b6a9-a65233b3e975/1/cu0vu3IT-_Mq1MCH-LCyLOzvT-o.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 9d:f4:7d:a8:83:ae:76:31:1a:dc:04:f0:ba:60:ea:8c:c7:9c: ba:29:c0:74:5d:f8:7c:89:29:94:4c:43:28:13:40:fa:6e:61: 22:ab:fd:8a:a2:ff:ae:ee:67:d3:d9:f4:d9:5b:0d:67:ed:ac: 7d:a9:8f:39:7f:84:4f:13:99:3b:33:e8:dd:1c:50:67:b7:d2: b6:72:e5:f1:dc:78:67:b1:4b:54:63:6b:c2:d6:b0:ae:71:b3: 06:cf:ea:f4:3c:99:b4:b7:5f:b6:28:1e:ad:b9:c2:69:e7:91: 0b:ad:d8:26:df:66:68:42:08:b5:6f:4a:44:bc:ae:71:7c:dc: 9a:7f:8b:66:38:78:37:c0:e0:17:7d:8b:cf:f0:cc:f9:93:4d: 83:c5:0a:73:6c:07:3e:d9:72:d6:19:e5:6b:e1:b5:3a:54:8c: 15:4c:47:dc:77:96:7d:36:a0:8e:5f:2b:cc:5f:c6:31:b0:f7: fe:5a:6f:31:a9:e9:23:52:67:e8:68:31:63:40:cb:32:c0:8f: ec:5a:15:c4:e1:35:08:88:4a:4f:5e:cf:11:60:5d:d7:4c:40: fb:93:2d:cc:ff:7b:05:cb:4e:1d:b3:2c:1f:af:5a:d4:8d:83: 6f:de:fd:68:fd:01:18:f3:b6:dc:e6:af:49:c3:70:e4:bf:14: 7e:3d:af:05 -----BEGIN CERTIFICATE----- MIIFFjCCA/6gAwIBAgISAZkz7qTE/qHqcHEKi9msRv9CMA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKDcyZWQyZmJiNzIxM2ZiZjMyYWQ0YzA4N2Y4YjBiMjJjZWNl ZjRmZWEwHhcNMjUwOTEwMTQwMTQxWhcNMjUwOTExMTQwMTQxWjAzMTEwLwYDVQQD EyhkYzUwNmM1NzFiODZlNjZhY2JmMTM1ODVjNTY2MGMzMGE2MTU2YzA3MIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAriYLhpLcGID8FR569cgXpNaclHRs StfEKB/uOgB4ZffcJnkeoBGvXpOTZzYW3hKTnl2C/6UyW64rrul6KYdsevi5piGi PdbbeLBUv8rUX35wBMytX5wl9MrfO/AnM4ds9iQU7gxx/mWSpO/j/OA8lDdyaexR xsXeTlOrbw40zpLJh8Q6IBzvZf/nCppYQ+2VhYYrFs1UYTr+QXaMI0gZzyP5t1Ex P0WfXGdRxWy8SA5KlmcTWiFHKZcYodOS0AlcaWZwaTYt7XWc5U0P7P7nA0duKhKh aZz2SL30jMGkKxihsVQjpfZ+NL3ynZjMQ6dEhNTjXzgoQXLNY/EA7rfPOwIDAQAB o4ICIjCCAh4wHQYDVR0OBBYEFNxQbFcbhuZqy/E1hcVmDDCmFWwHMB8GA1UdIwQY MBaAFHLtL7tyE/vzKtTAh/iwsizs70/qMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvY3UwdnUzSVQtX01xMU1DSC1MQ3lMT3p2VC1vLmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC8zYy9lNWE4OTItMjNmNS00OWZhLWI2YTkt YTY1MjMzYjNlOTc1LzEvY3UwdnUzSVQtX01xMU1DSC1MQ3lMT3p2VC1vLm1mdDCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC8zYy9lNWE4OTItMjNmNS00OWZhLWI2YTktYTY1MjMzYjNlOTc1 LzEvY3UwdnUzSVQtX01xMU1DSC1MQ3lMT3p2VC1vLmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAnfR9qIOu djEa3ATwumDqjMecuinAdF34fIkplExDKBNA+m5hIqv9iqL/ru5n09n02VsNZ+2s famPOX+ETxOZOzPo3RxQZ7fStnLl8dx4Z7FLVGNrwtawrnGzBs/q9DyZtLdftige rbnCaeeRC63YJt9maEIItW9KRLyucXzcmn+LZjh4N8DgF32Lz/DM+ZNNg8UKc2wH Ptly1hnla+G1OlSMFUxH3HeWfTagjl8rzF/GMbD3/lpvManpI1Jn6GgxY0DLMsCP 7FoVxOE1CIhKT17PEWBd10xA+5MtzP97BctOHbMsH69a1I2Db979aP0BGPO23Oav ScNw5L8Ufj2vBQ== -----END CERTIFICATE-----Generated at Wed Sep 10 23:33:16 2025 by rpki-client