$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/47/bc7078-1ee4-42f1-bc34-1d21d1bce3fe/1/I0tUsRmns-_xUwhbcxVQfNhROg8.mft File: I0tUsRmns-_xUwhbcxVQfNhROg8.mft (raw, json) Hash identifier: BmL7WvEcd0Z7Ky1pqgTcoFR8Cl4YvmGfkaUm7CXQh/U= Subject key identifier: 96:35:25:B2:AF:1F:73:42:BB:F6:10:2E:84:24:C9:02:A8:24:4D:7E Authority key identifier: 23:4B:54:B1:19:A7:B3:EF:F1:53:08:5B:73:15:50:7C:D8:51:3A:0F Certificate issuer: /CN=234b54b119a7b3eff153085b7315507cd8513a0f Certificate serial: 0199239FD77F9AA2340A9903C3B4548A429C Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/I0tUsRmns-_xUwhbcxVQfNhROg8.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/47/bc7078-1ee4-42f1-bc34-1d21d1bce3fe/1/I0tUsRmns-_xUwhbcxVQfNhROg8.mft Manifest number: 0CB2 Signing time: Sun 07 Sep 2025 10:01:41 +0000 Manifest this update: Sun 07 Sep 2025 10:01:41 +0000 Manifest next update: Mon 08 Sep 2025 10:01:41 +0000 Files and hashes: 1: 2tV1T5SBsSkKar1qXX5FYlQ_B9Q.roa (hash: mGLI3Jd52qgMG50087Vl0ag+Rgi85Yfd8348tK3nJlQ=) 2: 9CjEL92KVQbBIKjAH6PWgI9d9kA.roa (hash: CxlINazLO+svbCxijVW6/kRGdkNG420xQ9K3jp5I7bo=) 3: 9Q-K0yA0D9jdkGXn7ifhVh2hLe4.roa (hash: BhOE66QanPWqjjysyWqBU6hcSToV2kkgkpmWedK9Plo=) 4: BKpPZ6YhMA786wWelQvZ2FdIeg0.roa (hash: CY94cVx1ALq/cp1lEiwu3JzO7Vk53LXHozpiwU2ifHA=) 5: Gg5xBTPmG5wIfgvjDfofedqUN2I.roa (hash: 44BexOUoVzM2f1vahHLSGVHdqnL6HKMPG3ed5PmM4sw=) 6: I0tUsRmns-_xUwhbcxVQfNhROg8.crl (hash: 1SIP8PJzf2/42wJPJFSay4A0C4gI5hIha+jF0HiwhnQ=) 7: KfWHlYFQnzVI2dPuoiLZqsly00A.roa (hash: hXW7e+AyYxT2PE5t8wRUT3atz/+WaH8gt4XQgdBp/mU=) 8: LtctFlc4GRCf3PIlxO5Sz70Upcc.roa (hash: 9oaNZGvrfQP+yRIBwwcg5U7jui8/sOP7Dz6ZLTuPIgM=) 9: LxwAd59gPAFiSwQsp6U5bWHTUIA.roa (hash: sV/jv6UM3eB6Fepo8zmoDeIxV8A3Cp94EBt2zbiu7+M=) 10: M73NPvrSZwGhIOTA9SbUvHl1x90.roa (hash: ijksxiMRPCxOAqaVav7odzv/IiE5tQUZQM4rRqWGT00=) 11: P4Ngmm4fscIJdjrtcZXwEWC6af0.roa (hash: Dgr4uE36WEf5Xw9kH8tw5qMQ+ewLeqeUvdPupgorbKg=) 12: gspg21PC-Bi6SGHc2DwZhP3SxPE.roa (hash: za152yl/mt+IWnj6LxRFIHIPMleLO2z2bWoNpUAX6js=) 13: nppvTips8XGcmj9VgC_a0xkLzT8.roa (hash: +FXbEH/4T1tplmkgWcOzmoIVkqvQhGApNb34NJo2CWU=) 14: o99Nup4psTKMh8kJYocwkh14uKQ.roa (hash: lhz5Qy+hcNJDmky6RtlI26JguzX0YUJj3nMqDKA0YLM=) 15: y9rvtnyXZQSaHcISGufCbgd9oMg.roa (hash: YtKgQZ+a37E4WaxSPAYmpHW8Z8QKRoCD8fhZcaauCRA=) Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/47/bc7078-1ee4-42f1-bc34-1d21d1bce3fe/1/I0tUsRmns-_xUwhbcxVQfNhROg8.crl rsync://rpki.ripe.net/repository/DEFAULT/47/bc7078-1ee4-42f1-bc34-1d21d1bce3fe/1/I0tUsRmns-_xUwhbcxVQfNhROg8.mft rsync://rpki.ripe.net/repository/DEFAULT/I0tUsRmns-_xUwhbcxVQfNhROg8.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Mon 08 Sep 2025 07:00:23 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:99:23:9f:d7:7f:9a:a2:34:0a:99:03:c3:b4:54:8a:42:9c Signature Algorithm: sha256WithRSAEncryption Issuer: CN=234b54b119a7b3eff153085b7315507cd8513a0f Validity Not Before: Sep 7 10:01:41 2025 GMT Not After : Sep 8 10:01:41 2025 GMT Subject: CN=963525b2af1f7342bbf6102e8424c902a8244d7e Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:c6:2b:c0:10:1e:75:c6:74:91:1e:75:ea:ab:43: 6a:b5:85:0b:51:40:5e:7d:8a:57:11:b7:2b:fb:f3: 41:e6:4a:e6:15:4c:b4:6b:94:cf:82:3a:b5:0a:3b: c5:b1:91:72:99:77:56:53:0d:3a:b1:ed:8b:95:b9: 27:7b:58:e5:9b:21:4d:95:d9:ff:2a:3b:1b:54:76: 99:46:be:3b:86:e9:b7:1a:9b:29:b4:cb:d9:8e:d5: 79:b2:59:e0:10:a1:49:c0:30:b4:e1:33:f0:41:3e: a8:0e:4f:d3:c6:5f:7d:f4:8a:ab:0f:56:78:cf:3e: 66:f4:4c:87:54:44:1c:c8:71:c0:ef:8c:2f:f5:e2: 37:4e:d0:cd:3b:1c:40:c2:e0:b9:29:fc:c4:f7:03: 63:3e:9e:7a:73:e1:4e:05:5c:ae:74:60:c4:8e:8b: d1:eb:93:0d:2d:e6:51:4e:a2:14:94:4f:2a:20:fb: 53:7c:7c:7b:a1:a7:fc:b6:25:76:93:c5:b1:28:de: 92:55:80:a9:00:a7:5e:65:16:c2:ba:cb:d0:26:97: 12:27:ec:75:e3:b7:20:cc:49:1c:8a:91:65:d2:4b: 7e:33:e4:0d:c8:9b:32:38:09:e7:2d:57:80:0b:90: 27:8c:6d:62:4e:8c:5e:12:54:9d:df:90:05:84:79: 11:01 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 96:35:25:B2:AF:1F:73:42:BB:F6:10:2E:84:24:C9:02:A8:24:4D:7E X509v3 Authority Key Identifier: keyid:23:4B:54:B1:19:A7:B3:EF:F1:53:08:5B:73:15:50:7C:D8:51:3A:0F X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/I0tUsRmns-_xUwhbcxVQfNhROg8.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/47/bc7078-1ee4-42f1-bc34-1d21d1bce3fe/1/I0tUsRmns-_xUwhbcxVQfNhROg8.mft X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/47/bc7078-1ee4-42f1-bc34-1d21d1bce3fe/1/I0tUsRmns-_xUwhbcxVQfNhROg8.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 18:46:fc:76:72:d9:77:bc:8f:a8:29:ad:e7:9e:45:33:44:5d: 00:56:bc:3e:ad:33:e5:a9:6e:d5:ed:c2:90:9e:c5:de:13:cf: b4:a8:44:fd:1b:7a:67:4e:a6:16:32:8e:0c:f1:be:24:22:5f: 53:44:27:55:31:97:9c:e2:13:8d:c6:fc:83:8d:5f:6e:07:5b: 8d:fc:25:61:11:79:a2:ea:5a:30:d2:da:39:bd:14:6a:34:8a: 91:a5:36:fb:06:84:55:7f:7f:77:53:ad:10:1a:f6:fa:45:ff: 6c:de:b7:9f:50:64:34:04:5a:67:29:b4:1f:0d:5d:e5:44:7e: be:87:42:52:e1:71:17:51:2e:28:2e:8a:0d:9f:93:fe:1f:fd: 6a:1c:1b:21:39:20:e6:31:1f:76:2f:d9:e5:82:80:c1:d2:7c: 9b:df:09:07:54:61:1a:5b:ea:79:a8:a7:92:1e:c9:d7:98:79: 68:ff:da:95:41:92:02:f5:bb:41:12:7b:c4:80:d4:6c:e9:dd: 52:8a:e1:03:1e:2f:d4:d4:82:8f:db:ea:ca:5a:aa:d2:e7:ae: de:33:41:36:eb:69:da:0e:c1:a2:ab:ea:c0:4a:0c:32:97:b7: 65:f0:23:b0:e2:8b:5d:5a:28:6a:e2:fe:da:5c:44:11:6c:bb: 55:f0:a0:73 -----BEGIN CERTIFICATE----- MIIFFjCCA/6gAwIBAgISAZkjn9d/mqI0CpkDw7RUikKcMA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKDIzNGI1NGIxMTlhN2IzZWZmMTUzMDg1YjczMTU1MDdjZDg1 MTNhMGYwHhcNMjUwOTA3MTAwMTQxWhcNMjUwOTA4MTAwMTQxWjAzMTEwLwYDVQQD Eyg5NjM1MjViMmFmMWY3MzQyYmJmNjEwMmU4NDI0YzkwMmE4MjQ0ZDdlMIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAxivAEB51xnSRHnXqq0NqtYULUUBe fYpXEbcr+/NB5krmFUy0a5TPgjq1CjvFsZFymXdWUw06se2Llbkne1jlmyFNldn/ KjsbVHaZRr47hum3GpsptMvZjtV5slngEKFJwDC04TPwQT6oDk/Txl999IqrD1Z4 zz5m9EyHVEQcyHHA74wv9eI3TtDNOxxAwuC5KfzE9wNjPp56c+FOBVyudGDEjovR 65MNLeZRTqIUlE8qIPtTfHx7oaf8tiV2k8WxKN6SVYCpAKdeZRbCusvQJpcSJ+x1 47cgzEkcipFl0kt+M+QNyJsyOAnnLVeAC5AnjG1iToxeElSd35AFhHkRAQIDAQAB o4ICIjCCAh4wHQYDVR0OBBYEFJY1JbKvH3NCu/YQLoQkyQKoJE1+MB8GA1UdIwQY MBaAFCNLVLEZp7Pv8VMIW3MVUHzYUToPMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvSTB0VXNSbW5zLV94VXdoYmN4VlFmTmhST2c4LmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC80Ny9iYzcwNzgtMWVlNC00MmYxLWJjMzQt MWQyMWQxYmNlM2ZlLzEvSTB0VXNSbW5zLV94VXdoYmN4VlFmTmhST2c4Lm1mdDCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC80Ny9iYzcwNzgtMWVlNC00MmYxLWJjMzQtMWQyMWQxYmNlM2Zl LzEvSTB0VXNSbW5zLV94VXdoYmN4VlFmTmhST2c4LmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAGEb8dnLZ d7yPqCmt555FM0RdAFa8Pq0z5alu1e3CkJ7F3hPPtKhE/Rt6Z06mFjKODPG+JCJf U0QnVTGXnOITjcb8g41fbgdbjfwlYRF5oupaMNLaOb0UajSKkaU2+waEVX9/d1Ot EBr2+kX/bN63n1BkNARaZym0Hw1d5UR+vodCUuFxF1EuKC6KDZ+T/h/9ahwbITkg 5jEfdi/Z5YKAwdJ8m98JB1RhGlvqeainkh7J15h5aP/alUGSAvW7QRJ7xIDUbOnd UorhAx4v1NSCj9vqylqq0ueu3jNBNutp2g7BoqvqwEoMMpe3ZfAjsOKLXVooauL+ 2lxEEWy7VfCgcw== -----END CERTIFICATE-----Generated at Sun Sep 7 14:51:51 2025 by rpki-client