$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/44/319d7c-7e76-4308-bc00-be5832d5f7aa/1/1-5hyRGEbUjBTZ0S2qJ8ETzL0Yuo.mft File: 1-5hyRGEbUjBTZ0S2qJ8ETzL0Yuo.mft (raw, json) Hash identifier: FiulF00pZkOzRS37pE3xAmdRT5nlbMMDjRfpEX1P3Sw= Subject key identifier: 43:F7:5E:07:53:70:88:08:A7:2E:43:96:F6:BE:D7:93:64:BF:AB:1C Authority key identifier: FB:98:72:44:61:1B:52:30:53:67:44:B6:A8:9F:04:4F:32:F4:62:EA Certificate issuer: /CN=fb987244611b5230536744b6a89f044f32f462ea Certificate serial: 01992C347A6781FF5CD1730BD5BFC0497CC4 Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/1-5hyRGEbUjBTZ0S2qJ8ETzL0Yuo.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/44/319d7c-7e76-4308-bc00-be5832d5f7aa/1/1-5hyRGEbUjBTZ0S2qJ8ETzL0Yuo.mft Manifest number: 1683 Signing time: Tue 09 Sep 2025 02:01:00 +0000 Manifest this update: Tue 09 Sep 2025 02:01:00 +0000 Manifest next update: Wed 10 Sep 2025 02:01:00 +0000 Files and hashes: 1: 0GQGYjFgeoe90j-QzubD6mrcJkk.roa (hash: cASoDwOCqQQo3HckgWr9Fm6RrFpE5g5vgsJJsPTF9PI=) 2: 1-5hyRGEbUjBTZ0S2qJ8ETzL0Yuo.crl (hash: rcYUxFa272iTgPZYKudjhx//2cIxqTWum7sQVsN8+pI=) 3: 5YsWNoJ_eVXnLQUmvRfRv35-ITo.roa (hash: +Wt4CaG2KBebUdy7DTYqNM4+qA+qSGjkIL8Uj7jYbKY=) 4: LkZMbp2aUa0yXxOxLWaqN5AS52o.roa (hash: o8vH7FtM5V/qTZoiT6aAxSseM4Yg902eHtLadTVcAzY=) 5: N5NvCVL9qwjYZWiGAgoiE3kpDsM.roa (hash: /XNE593x81Nv5d88KdthJ5cf11PusTGT9f+nPTiwsmQ=) 6: O2VeVpIY0NqqJs4saKQoTuFoA6I.roa (hash: eCU07QC/oP0X/AS+uAyqKGOShTlcgaS/MZcj5EXt1FQ=) 7: PmeI5MIhQ4wxSrPUPOIOQ9Ubvnk.roa (hash: W6jZRl9BSEjjkm486LLqed9ed+xxHLYMlqc3sRgCALQ=) 8: QJVbOLfuQimwnt2csTkB91gXkec.roa (hash: GkGvp1WsMKLXrnxKgO0ikQrOP7Rki9hxYkm+S7LbAS8=) 9: RTN7ctApkTYd2Og2JaBeJOrSDKw.roa (hash: PECp9vVhGIOoiVTK3bRnzPU+NWZIUXb57SnIExeKGko=) 10: ZFUmkI5Si20CHGaDBK-ZoNXIfEk.roa (hash: 4y56G8cf16t1jWavTqKOCy9B29Mw+jTHj1dGwOZOhA0=) 11: _28X1lMsvBxqScVY5HiVqqNdE4o.roa (hash: 1zLcZ1CwGAvvzQsYCPPfZSZE3xWE9xsMdQ0aDUZbc8g=) 12: cdmQ2_ODlCp8h7SlTaorYnidAuk.roa (hash: +IC730dtvUCM5X3ceJwMJA3N6qWFyePDz8c3aKLMcqE=) 13: gWN0YMhA97UPOTqYvOMM9zaPWRs.roa (hash: Hm5lPWw7bUXDdTOs1pfp1fHbk/bNa8PnxIySi1lfXPs=) 14: iY_9p9rfYCrq76s6mH8iLmqZ8G4.roa (hash: WZh8CFIJ4XBLsbT8NvOnixg7Xgopb12vdZ21KTVanqQ=) 15: jTMPeohgGOxcMFZVU8z0ehshce0.roa (hash: SyL8iMLhykQz8ANtvdKfK1EugykUZcu24olhfWQesXo=) 16: n7V7OXaDS-XvJc4UQc5MPqTFYmY.roa (hash: 0QBDYhcEfGTqjEJgSs+TOY3XMDZsBCVa117v4v2Y4iI=) 17: uEsfVd8NIzUxBoG774jECjWdTsY.roa (hash: lAehouSKcnB2amZVq4TUPtcrTxH5jfwC6dVK0vZrRgI=) 18: vlDfC43FHcefunPJngYR1WAZ7rA.roa (hash: az+OZ3tRKu13gj7aBFAWboRwowS41+dYdps7euT4uWg=) 19: w_D8ebnb3eRC6CWTSI4QXg7yIcA.roa (hash: cKSU2IKqf8A5+vV8g8UVVjc9ie4gyRlLREV+QT0zjV0=) Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/44/319d7c-7e76-4308-bc00-be5832d5f7aa/1/1-5hyRGEbUjBTZ0S2qJ8ETzL0Yuo.crl rsync://rpki.ripe.net/repository/DEFAULT/44/319d7c-7e76-4308-bc00-be5832d5f7aa/1/1-5hyRGEbUjBTZ0S2qJ8ETzL0Yuo.mft rsync://rpki.ripe.net/repository/DEFAULT/1-5hyRGEbUjBTZ0S2qJ8ETzL0Yuo.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Tue 09 Sep 2025 23:00:23 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:99:2c:34:7a:67:81:ff:5c:d1:73:0b:d5:bf:c0:49:7c:c4 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=fb987244611b5230536744b6a89f044f32f462ea Validity Not Before: Sep 9 02:01:00 2025 GMT Not After : Sep 10 02:01:00 2025 GMT Subject: CN=43f75e0753708808a72e4396f6bed79364bfab1c Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:e4:00:5b:80:a2:5a:50:73:6c:1e:be:b8:d0:41: e0:6f:23:12:76:56:61:3d:f0:e3:77:76:d2:43:a2: 04:90:c8:41:e4:2c:32:8d:af:c5:27:c9:99:ca:64: cd:eb:19:ac:c9:81:9f:69:7d:7d:a6:13:ac:4c:cf: 56:3d:c3:61:53:af:ef:31:80:da:eb:1a:cd:61:7a: 86:bb:ed:be:c6:c3:12:2f:ca:f2:49:2e:f9:ba:1e: 62:07:ef:a2:d1:63:76:41:cb:e5:19:60:ce:c9:8f: 28:e4:50:67:0d:96:eb:fe:1b:f9:7a:f6:e6:d9:cc: 7c:21:37:43:8c:3e:7d:29:a8:af:64:c1:59:24:5e: 72:c1:e3:49:39:41:65:07:61:a2:84:25:3f:29:5b: a7:4c:ea:8a:16:23:19:9f:7c:40:51:7e:f6:28:d7: 72:fa:d0:2d:0a:29:6d:2f:4b:b4:e9:93:3a:ca:f5: db:30:41:f0:49:bb:15:50:25:58:b0:67:fa:49:6b: e9:ab:a5:a8:b9:42:8d:3c:bf:57:1d:13:b5:2b:82: 18:8d:b0:82:be:95:b7:f4:e7:18:36:37:f3:0a:4c: 08:c1:62:af:66:43:48:54:df:d8:21:d3:c4:58:9e: ba:7a:1d:0e:5b:76:56:21:31:7f:27:bb:0e:8a:c4: 42:51 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 43:F7:5E:07:53:70:88:08:A7:2E:43:96:F6:BE:D7:93:64:BF:AB:1C X509v3 Authority Key Identifier: keyid:FB:98:72:44:61:1B:52:30:53:67:44:B6:A8:9F:04:4F:32:F4:62:EA X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/1-5hyRGEbUjBTZ0S2qJ8ETzL0Yuo.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/44/319d7c-7e76-4308-bc00-be5832d5f7aa/1/1-5hyRGEbUjBTZ0S2qJ8ETzL0Yuo.mft X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/44/319d7c-7e76-4308-bc00-be5832d5f7aa/1/1-5hyRGEbUjBTZ0S2qJ8ETzL0Yuo.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 86:2e:b1:bc:cb:a2:19:51:66:1c:29:ed:2a:7e:77:63:da:7c: 9c:6f:d5:b7:aa:cc:a5:32:d9:36:29:2f:b9:42:45:b0:64:1b: e7:80:04:f6:fb:17:70:59:54:55:7c:59:5b:e4:aa:2a:81:fd: d3:3b:3f:ba:8a:4b:77:dc:c2:f4:6a:94:39:55:49:85:d6:57: 8d:58:aa:12:e5:32:f9:a1:99:e9:8a:2a:d8:59:91:d2:91:05: ba:f6:86:4e:e4:6b:64:05:da:31:07:4c:21:e6:69:e3:8a:cc: 8e:81:53:d2:9c:6c:96:3c:26:d2:0c:ad:72:a3:8c:f1:f1:93: 00:bf:84:cc:1a:2c:d5:a8:5a:8b:87:99:9a:6d:10:44:2f:db: 4a:79:4f:39:66:5a:e9:42:c0:39:70:1f:de:a3:59:cc:8f:07: cf:6b:24:01:41:1e:2e:3a:61:b7:6b:30:b4:2c:40:1f:6f:48: 0e:5a:89:3a:8a:40:71:cd:97:bd:52:80:07:d9:c4:03:35:9b: 7a:d4:12:b5:57:63:64:cd:f9:a0:12:ae:83:3e:cb:5a:97:ae: 39:aa:63:37:13:16:25:bc:d2:6b:66:a8:04:1a:ba:fe:a6:0b: e5:bf:a3:bc:1d:fa:f5:53:07:88:a7:93:f5:c3:e0:45:22:c3: ac:46:47:40 -----BEGIN CERTIFICATE----- MIIFGTCCBAGgAwIBAgISAZksNHpngf9c0XML1b/ASXzEMA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKGZiOTg3MjQ0NjExYjUyMzA1MzY3NDRiNmE4OWYwNDRmMzJm NDYyZWEwHhcNMjUwOTA5MDIwMTAwWhcNMjUwOTEwMDIwMTAwWjAzMTEwLwYDVQQD Eyg0M2Y3NWUwNzUzNzA4ODA4YTcyZTQzOTZmNmJlZDc5MzY0YmZhYjFjMIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEA5ABbgKJaUHNsHr640EHgbyMSdlZh PfDjd3bSQ6IEkMhB5Cwyja/FJ8mZymTN6xmsyYGfaX19phOsTM9WPcNhU6/vMYDa 6xrNYXqGu+2+xsMSL8rySS75uh5iB++i0WN2QcvlGWDOyY8o5FBnDZbr/hv5evbm 2cx8ITdDjD59KaivZMFZJF5yweNJOUFlB2GihCU/KVunTOqKFiMZn3xAUX72KNdy +tAtCiltL0u06ZM6yvXbMEHwSbsVUCVYsGf6SWvpq6WouUKNPL9XHRO1K4IYjbCC vpW39OcYNjfzCkwIwWKvZkNIVN/YIdPEWJ66eh0OW3ZWITF/J7sOisRCUQIDAQAB o4ICJTCCAiEwHQYDVR0OBBYEFEP3XgdTcIgIpy5Dlva+15Nkv6scMB8GA1UdIwQY MBaAFPuYckRhG1IwU2dEtqifBE8y9GLqMA4GA1UdDwEB/wQEAwIHgDBlBggrBgEF BQcBAQRZMFcwVQYIKwYBBQUHMAKGSXJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvMS01aHlSR0ViVWpCVFowUzJxSjhFVHpMMFl1by5jZXIw gY4GCCsGAQUFBwELBIGBMH8wfQYIKwYBBQUHMAuGcXJzeW5jOi8vcnBraS5yaXBl Lm5ldC9yZXBvc2l0b3J5L0RFRkFVTFQvNDQvMzE5ZDdjLTdlNzYtNDMwOC1iYzAw LWJlNTgzMmQ1ZjdhYS8xLzEtNWh5UkdFYlVqQlRaMFMycUo4RVR6TDBZdW8ubWZ0 MIGCBgNVHR8EezB5MHegdaBzhnFyc3luYzovL3Jwa2kucmlwZS5uZXQvcmVwb3Np dG9yeS9ERUZBVUxULzQ0LzMxOWQ3Yy03ZTc2LTQzMDgtYmMwMC1iZTU4MzJkNWY3 YWEvMS8xLTVoeVJHRWJVakJUWjBTMnFKOEVUekwwWXVvLmNybDAYBgNVHSABAf8E DjAMMAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgAC BQAwFQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAhi6x vMuiGVFmHCntKn53Y9p8nG/Vt6rMpTLZNikvuUJFsGQb54AE9vsXcFlUVXxZW+Sq KoH90zs/uopLd9zC9GqUOVVJhdZXjViqEuUy+aGZ6Yoq2FmR0pEFuvaGTuRrZAXa MQdMIeZp44rMjoFT0pxsljwm0gytcqOM8fGTAL+EzBos1ahai4eZmm0QRC/bSnlP OWZa6ULAOXAf3qNZzI8Hz2skAUEeLjpht2swtCxAH29IDlqJOopAcc2XvVKAB9nE AzWbetQStVdjZM35oBKugz7LWpeuOapjNxMWJbzSa2aoBBq6/qYL5b+jvB369VMH iKeT9cPgRSLDrEZHQA== -----END CERTIFICATE-----Generated at Tue Sep 9 07:30:27 2025 by rpki-client