$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/4a/768fdb-d1b5-4bef-bcbd-4924fa000b7c/1/pjvMbSX3R2-7PsM_bbw-nurZIhI.mft File: pjvMbSX3R2-7PsM_bbw-nurZIhI.mft (raw, json) Hash identifier: EpM4jUmMXNVhhdKhAssuzLq7281CtFCVv3a0LtykIyw= Subject key identifier: 7E:86:F1:AC:5A:05:36:FF:BA:23:08:2F:EF:9B:F7:45:4C:16:D0:5E Authority key identifier: A6:3B:CC:6D:25:F7:47:6F:BB:3E:C3:3F:6D:BC:3E:9E:EA:D9:22:12 Certificate issuer: /CN=a63bcc6d25f7476fbb3ec33f6dbc3e9eead92212 Certificate serial: 0199319148B787B40C67C38604C12BC33FB3 Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/pjvMbSX3R2-7PsM_bbw-nurZIhI.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/4a/768fdb-d1b5-4bef-bcbd-4924fa000b7c/1/pjvMbSX3R2-7PsM_bbw-nurZIhI.mft Manifest number: 09DD Signing time: Wed 10 Sep 2025 03:00:28 +0000 Manifest this update: Wed 10 Sep 2025 03:00:28 +0000 Manifest next update: Thu 11 Sep 2025 03:00:28 +0000 Files and hashes: 1: 5NFcVQOlS2SfRA9_dseHho-9-mc.roa (hash: swfI8aXvx2sxn3YOzxRnlDU7qvwOILHJAwX26Y3ztqI=) 2: 719PZLmeHqbujtRsKmvo5771XIo.roa (hash: bsKRuhzJIveVWiHQvKvv+dLt6oNf3d66tNY6ht9/C3A=) 3: 8WUQrdzKsEZUNzZ9k3E9ajfkd5s.roa (hash: Ixz0hSpVqJJ/oAfsncTGxOv3fHWBSaH9gBGjqTv8vpQ=) 4: FHXWFrj4nreKJjXTfDKCc6Y16Is.roa (hash: PfuW04ELrwKUUeQD8qGy+/BFhBo8C5J05OWPOUMFx5w=) 5: Ho4pDAaaconFe5cZ7ygze1a44Xo.roa (hash: 1pC6hpICFpbgfqlZn7adq2AVfLKO5t0AC5KWofkjFSE=) 6: Kd5CFoG07kPDgqUGQpHj24zQka8.roa (hash: +2s4BraFjLJP4x9hMH6DgHfMWVkWCLxuz2cF8ghToGs=) 7: NYJYw1BTKJV56akoY5ZQRJna-MA.roa (hash: brwHoHz9mi1vg8NUkbqZqqePDdu1Ej44xmauCwQ9Qac=) 8: TLEdQvZiEPlpX35O8B6oknJfuyE.roa (hash: AdjCtV/JftiFEQtyk78ssQUWpqAhZBfMUWjoyo3BngI=) 9: fBfhsJw2d6Op2y70b533dv-T4j4.roa (hash: B8cZmEngTY2Ne9QwtzyJ6aeIrWSAdYH7Des5rTXKgP4=) 10: pjvMbSX3R2-7PsM_bbw-nurZIhI.crl (hash: mPrE2HJqBqdat1NfWMYHulfr38uSy5nLS7OrK9CT77s=) 11: uzCcDcPqkWrGFz7q_0sMbXIRiQA.roa (hash: XztjghSYsO4GwCxnw/HrejTj+w0m+GVsvlYdS7s4Yhw=) Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/4a/768fdb-d1b5-4bef-bcbd-4924fa000b7c/1/pjvMbSX3R2-7PsM_bbw-nurZIhI.crl rsync://rpki.ripe.net/repository/DEFAULT/4a/768fdb-d1b5-4bef-bcbd-4924fa000b7c/1/pjvMbSX3R2-7PsM_bbw-nurZIhI.mft rsync://rpki.ripe.net/repository/DEFAULT/pjvMbSX3R2-7PsM_bbw-nurZIhI.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Thu 11 Sep 2025 02:00:22 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:99:31:91:48:b7:87:b4:0c:67:c3:86:04:c1:2b:c3:3f:b3 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=a63bcc6d25f7476fbb3ec33f6dbc3e9eead92212 Validity Not Before: Sep 10 03:00:28 2025 GMT Not After : Sep 11 03:00:28 2025 GMT Subject: CN=7e86f1ac5a0536ffba23082fef9bf7454c16d05e Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:97:64:f3:4b:2b:0b:36:52:4b:bc:4d:15:d4:1e: b1:33:eb:7d:c3:68:83:23:7c:7c:ba:43:b6:77:a4: d8:41:cd:55:f8:15:bc:49:77:cd:09:6b:70:37:10: a7:ef:08:94:e3:0c:2c:b5:ca:77:1b:6d:9f:1a:93: e8:ff:56:16:e4:1f:b5:36:bc:35:44:dc:24:23:42: fe:50:e2:70:19:5f:b6:b7:fd:2a:ba:9d:c7:11:78: b7:a8:a8:6b:aa:18:24:f8:b8:73:b1:e9:02:58:35: b7:bc:6e:11:98:d5:8b:e2:7a:a7:56:43:38:07:5a: 62:4c:6a:e9:57:d4:c1:cb:09:41:f6:59:2a:a4:61: 62:a8:33:42:47:1b:2b:f7:63:3c:22:17:16:0a:77: f3:0a:9b:52:67:6f:24:f6:04:dc:93:6c:ac:07:5e: 01:8f:fa:ac:41:90:1d:c8:37:89:3c:da:b1:16:45: bf:1c:c6:af:8e:c3:97:1a:18:71:69:c3:34:d5:e3: c8:2d:71:bf:78:9e:9d:9b:d2:f7:d1:9e:7e:8d:7a: de:44:29:3a:ad:43:72:48:28:74:4f:a8:28:7d:4d: 28:97:61:8e:af:e2:4d:87:ab:12:e9:bc:1e:73:f1: 0e:46:29:86:b7:e7:3d:18:a4:52:fd:6a:42:67:0b: 54:dd Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 7E:86:F1:AC:5A:05:36:FF:BA:23:08:2F:EF:9B:F7:45:4C:16:D0:5E X509v3 Authority Key Identifier: keyid:A6:3B:CC:6D:25:F7:47:6F:BB:3E:C3:3F:6D:BC:3E:9E:EA:D9:22:12 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/pjvMbSX3R2-7PsM_bbw-nurZIhI.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/4a/768fdb-d1b5-4bef-bcbd-4924fa000b7c/1/pjvMbSX3R2-7PsM_bbw-nurZIhI.mft X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/4a/768fdb-d1b5-4bef-bcbd-4924fa000b7c/1/pjvMbSX3R2-7PsM_bbw-nurZIhI.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 44:9f:72:b0:22:76:0d:25:33:08:a7:55:2c:76:2d:bd:83:70: 80:e2:72:ad:61:c4:5e:a4:3a:f8:31:6e:1b:c5:ff:1d:6e:c2: b0:0a:90:14:49:fa:75:fe:a6:0e:ad:67:6c:8b:86:c9:36:14: bc:a4:36:e7:9d:15:78:a2:1c:2f:9d:8a:86:06:d4:ed:ce:f8: 78:4a:5b:78:8d:20:bd:31:40:fb:0b:a9:68:cf:51:73:dc:20: 15:b5:b3:94:50:01:00:6e:93:5e:97:48:cc:75:3b:5b:52:77: 36:5c:ec:ae:5d:5e:cb:20:8b:84:d0:38:06:5b:0d:a2:54:27: b7:c7:f1:95:3a:0f:95:04:a8:27:44:d2:2d:24:ea:ab:e8:d6: c1:06:35:8f:5e:45:82:66:89:3a:6c:b1:76:fa:1c:b8:f0:40: 54:0f:5b:ef:94:71:d9:28:73:f5:4b:44:de:aa:1c:67:07:b9: 49:76:82:76:0f:5d:97:ff:c5:73:7e:84:8b:ad:b5:06:e7:17: dd:10:68:d9:f9:14:12:c5:b4:49:c4:1e:77:c0:c9:48:5b:24: 5c:6b:ec:e0:c5:de:b3:52:76:08:5a:78:af:c4:30:df:03:25: ae:3a:0f:40:eb:ef:1a:8f:1c:9f:12:58:41:e1:f7:15:e1:c2: bc:f2:1c:01 -----BEGIN CERTIFICATE----- MIIFFjCCA/6gAwIBAgISAZkxkUi3h7QMZ8OGBMErwz+zMA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKGE2M2JjYzZkMjVmNzQ3NmZiYjNlYzMzZjZkYmMzZTllZWFk OTIyMTIwHhcNMjUwOTEwMDMwMDI4WhcNMjUwOTExMDMwMDI4WjAzMTEwLwYDVQQD Eyg3ZTg2ZjFhYzVhMDUzNmZmYmEyMzA4MmZlZjliZjc0NTRjMTZkMDVlMIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAl2TzSysLNlJLvE0V1B6xM+t9w2iD I3x8ukO2d6TYQc1V+BW8SXfNCWtwNxCn7wiU4wwstcp3G22fGpPo/1YW5B+1Nrw1 RNwkI0L+UOJwGV+2t/0qup3HEXi3qKhrqhgk+LhzsekCWDW3vG4RmNWL4nqnVkM4 B1piTGrpV9TBywlB9lkqpGFiqDNCRxsr92M8IhcWCnfzCptSZ28k9gTck2ysB14B j/qsQZAdyDeJPNqxFkW/HMavjsOXGhhxacM01ePILXG/eJ6dm9L30Z5+jXreRCk6 rUNySCh0T6gofU0ol2GOr+JNh6sS6bwec/EORimGt+c9GKRS/WpCZwtU3QIDAQAB o4ICIjCCAh4wHQYDVR0OBBYEFH6G8axaBTb/uiMIL++b90VMFtBeMB8GA1UdIwQY MBaAFKY7zG0l90dvuz7DP228Pp7q2SISMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvcGp2TWJTWDNSMi03UHNNX2Jidy1udXJaSWhJLmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC80YS83NjhmZGItZDFiNS00YmVmLWJjYmQt NDkyNGZhMDAwYjdjLzEvcGp2TWJTWDNSMi03UHNNX2Jidy1udXJaSWhJLm1mdDCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC80YS83NjhmZGItZDFiNS00YmVmLWJjYmQtNDkyNGZhMDAwYjdj LzEvcGp2TWJTWDNSMi03UHNNX2Jidy1udXJaSWhJLmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEARJ9ysCJ2 DSUzCKdVLHYtvYNwgOJyrWHEXqQ6+DFuG8X/HW7CsAqQFEn6df6mDq1nbIuGyTYU vKQ2550VeKIcL52KhgbU7c74eEpbeI0gvTFA+wupaM9Rc9wgFbWzlFABAG6TXpdI zHU7W1J3Nlzsrl1eyyCLhNA4BlsNolQnt8fxlToPlQSoJ0TSLSTqq+jWwQY1j15F gmaJOmyxdvocuPBAVA9b75Rx2Shz9UtE3qocZwe5SXaCdg9dl//Fc36Ei621BucX 3RBo2fkUEsW0ScQed8DJSFskXGvs4MXes1J2CFp4r8Qw3wMlrjoPQOvvGo8cnxJY QeH3FeHCvPIcAQ== -----END CERTIFICATE-----Generated at Wed Sep 10 11:39:21 2025 by rpki-client