$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/4a/8b1fac-5a21-4848-a66a-10bb4579d528/1/CnMngF3yD7XB1vTokHR0PK6ySvc.mft File: CnMngF3yD7XB1vTokHR0PK6ySvc.mft (raw, json) Hash identifier: 987F/R79+sJMLxWj+7wCMfh9bZC9W1D8M7Qf6Vr62Jg= Subject key identifier: 29:36:D1:F9:DB:F8:E6:93:C6:0C:40:74:F1:19:61:D1:3A:69:B8:9F Authority key identifier: 0A:73:27:80:5D:F2:0F:B5:C1:D6:F4:E8:90:74:74:3C:AE:B2:4A:F7 Certificate issuer: /CN=0a7327805df20fb5c1d6f4e89074743caeb24af7 Certificate serial: 0199375CB21A693FBC9522412F6466D88AD1 Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/CnMngF3yD7XB1vTokHR0PK6ySvc.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/4a/8b1fac-5a21-4848-a66a-10bb4579d528/1/CnMngF3yD7XB1vTokHR0PK6ySvc.mft Manifest number: 1691 Signing time: Thu 11 Sep 2025 06:00:45 +0000 Manifest this update: Thu 11 Sep 2025 06:00:45 +0000 Manifest next update: Fri 12 Sep 2025 06:00:45 +0000 Files and hashes: 1: AU3u1VuwQfZckeT14fdrTId0G1k.roa (hash: VL9lGqOz9NbiJezJsH1muW4OGo8/usp9uiYXSnWyMI4=) 2: AXI0xi2qyLNJTikoPIbIYoXGSqM.roa (hash: J6dTdi70cC+Xgn0MoRDsaTnvDGyEQm26GOPrxZ/rg18=) 3: CQxWaB1OicMMrqXCoQ0fopCoxdU.roa (hash: WjfHWnkqbfHKaqxUShNyRq++rhQwjg3tNVjy17YQNc4=) 4: CnMngF3yD7XB1vTokHR0PK6ySvc.crl (hash: I3vZRxeLISfOC6+emkRHh/upUoOblGHNshc4ZO1EgMw=) 5: D79_joXGPOWpWr93YY0Y2guGopg.roa (hash: 0cVbgcQor7L9mYV+oSvm/P1YAy/Mh97VSOZWkl7idYY=) 6: GopMrpyToOz7hTEn02tSlWTChNc.roa (hash: PWyNZm9NNDQb4vDrYexwTILfoeBvuqO0/ZesnD+rBMg=) 7: QY3FsKWsHL7VlMduaclRNJ3pt_U.roa (hash: H5vPCo3lKDFJhLJsXdyGxkbSr+CZKxnZxfEUf2naVGc=) 8: Zla6xxqlwjD5HGAN16Pzo29Tijg.roa (hash: XT7/Z4sfo6kElFtdLFq3BhRYhs4vxj89ZfDzgHu8Ge4=) 9: hnMtsx259zWb5DPTAskFt19vieA.roa (hash: IS/K0LmABWhq/hUi5ijfbnkS8QGQcUBWRW0f7gTisD4=) 10: ydOhopDpEgxJrzwZy5o2ywKpW8w.roa (hash: cGNA9jtDwM6OD4vlqV4K4uD26uy/JQnhTPG3oY/YMmA=) Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/4a/8b1fac-5a21-4848-a66a-10bb4579d528/1/CnMngF3yD7XB1vTokHR0PK6ySvc.crl rsync://rpki.ripe.net/repository/DEFAULT/4a/8b1fac-5a21-4848-a66a-10bb4579d528/1/CnMngF3yD7XB1vTokHR0PK6ySvc.mft rsync://rpki.ripe.net/repository/DEFAULT/CnMngF3yD7XB1vTokHR0PK6ySvc.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Fri 12 Sep 2025 05:00:15 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:99:37:5c:b2:1a:69:3f:bc:95:22:41:2f:64:66:d8:8a:d1 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=0a7327805df20fb5c1d6f4e89074743caeb24af7 Validity Not Before: Sep 11 06:00:45 2025 GMT Not After : Sep 12 06:00:45 2025 GMT Subject: CN=2936d1f9dbf8e693c60c4074f11961d13a69b89f Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:92:ce:f1:49:28:cb:c8:6b:7f:35:86:cb:6b:6b: 46:b4:61:24:00:68:12:b5:49:19:cf:37:76:42:bb: cc:59:03:00:4b:8b:fd:59:b0:0c:6c:d7:87:1e:14: b6:02:65:96:6c:7a:c0:b2:38:58:d3:c4:e6:2c:b0: 06:4c:3a:24:f1:b6:67:cd:0f:b9:41:b2:eb:64:da: 54:27:65:cd:c5:e6:71:6f:7a:45:95:34:49:cf:de: 51:c6:cd:27:89:49:f0:91:e7:0f:18:8d:dc:26:b0: fa:0a:4f:04:52:77:1e:f5:f5:87:91:58:79:78:8b: db:a9:33:e5:69:88:30:83:b2:ad:3e:cd:7f:ce:26: 5f:d5:4c:2d:32:b3:19:30:72:30:15:2e:ad:e6:47: f1:65:52:6d:fa:f9:78:d7:c1:19:22:d1:d3:dc:a1: 0b:84:93:a3:60:0a:88:aa:1d:50:66:86:78:b6:db: e9:c9:b7:ce:e2:2f:87:88:2b:db:47:8b:ee:ae:17: ec:c0:06:e0:10:ec:85:95:03:df:00:6b:57:d4:d0: 35:3f:26:80:8c:14:b3:ef:9d:44:c5:c6:fb:96:1b: 0e:47:10:79:4b:b7:0d:b8:cd:8b:64:b0:17:e5:e9: 79:66:17:f3:12:54:4f:4e:54:fe:46:c2:8c:0c:e0: d3:21 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 29:36:D1:F9:DB:F8:E6:93:C6:0C:40:74:F1:19:61:D1:3A:69:B8:9F X509v3 Authority Key Identifier: keyid:0A:73:27:80:5D:F2:0F:B5:C1:D6:F4:E8:90:74:74:3C:AE:B2:4A:F7 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/CnMngF3yD7XB1vTokHR0PK6ySvc.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/4a/8b1fac-5a21-4848-a66a-10bb4579d528/1/CnMngF3yD7XB1vTokHR0PK6ySvc.mft X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/4a/8b1fac-5a21-4848-a66a-10bb4579d528/1/CnMngF3yD7XB1vTokHR0PK6ySvc.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption a3:16:36:91:47:39:93:54:3b:3f:02:ca:23:33:9c:8a:85:0c: 53:e3:56:d5:18:df:81:45:51:e9:18:d1:f0:cc:2c:48:94:47: 94:84:4c:9b:5b:fc:0d:97:ea:23:69:c9:e1:b9:c3:98:69:7e: 5d:4f:ef:40:f1:e3:f0:3e:c0:47:7e:95:2a:19:9b:d1:9f:49: e4:ca:17:c4:15:06:f2:06:7e:9a:ca:51:29:85:7c:4b:60:e9: e0:06:64:51:10:e4:a4:20:21:12:55:f4:c1:e5:d9:7d:8c:f2: b5:53:cf:eb:64:a0:0b:6c:fc:8f:06:91:fc:5a:4c:d5:df:4b: bb:6a:bc:de:eb:e1:13:c7:b4:ca:35:91:27:a0:e3:ba:ad:0a: f4:40:b5:0c:3e:53:32:8a:af:28:92:69:95:95:49:59:3e:69: a2:0e:be:bb:79:80:6a:8f:85:80:4f:30:d8:d0:0f:07:1b:b1: 79:ca:aa:51:49:4c:56:47:c7:36:14:56:79:7b:ac:89:79:10: 2c:83:b3:fc:bb:9b:08:93:a6:4c:ea:cc:cd:66:55:ec:01:eb: 9d:21:d0:51:27:99:85:f8:ff:3d:da:45:94:07:dd:3c:9a:95: 89:d4:3b:e6:22:00:e8:6f:70:dd:1a:49:5d:98:f6:41:e6:47: dc:d2:ee:31 -----BEGIN CERTIFICATE----- MIIFFjCCA/6gAwIBAgISAZk3XLIaaT+8lSJBL2Rm2IrRMA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKDBhNzMyNzgwNWRmMjBmYjVjMWQ2ZjRlODkwNzQ3NDNjYWVi MjRhZjcwHhcNMjUwOTExMDYwMDQ1WhcNMjUwOTEyMDYwMDQ1WjAzMTEwLwYDVQQD EygyOTM2ZDFmOWRiZjhlNjkzYzYwYzQwNzRmMTE5NjFkMTNhNjliODlmMIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAks7xSSjLyGt/NYbLa2tGtGEkAGgS tUkZzzd2QrvMWQMAS4v9WbAMbNeHHhS2AmWWbHrAsjhY08TmLLAGTDok8bZnzQ+5 QbLrZNpUJ2XNxeZxb3pFlTRJz95Rxs0niUnwkecPGI3cJrD6Ck8EUnce9fWHkVh5 eIvbqTPlaYgwg7KtPs1/ziZf1UwtMrMZMHIwFS6t5kfxZVJt+vl418EZItHT3KEL hJOjYAqIqh1QZoZ4ttvpybfO4i+HiCvbR4vurhfswAbgEOyFlQPfAGtX1NA1PyaA jBSz751Excb7lhsORxB5S7cNuM2LZLAX5el5ZhfzElRPTlT+RsKMDODTIQIDAQAB o4ICIjCCAh4wHQYDVR0OBBYEFCk20fnb+OaTxgxAdPEZYdE6abifMB8GA1UdIwQY MBaAFApzJ4Bd8g+1wdb06JB0dDyuskr3MA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvQ25NbmdGM3lEN1hCMXZUb2tIUjBQSzZ5U3ZjLmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC80YS84YjFmYWMtNWEyMS00ODQ4LWE2NmEt MTBiYjQ1NzlkNTI4LzEvQ25NbmdGM3lEN1hCMXZUb2tIUjBQSzZ5U3ZjLm1mdDCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC80YS84YjFmYWMtNWEyMS00ODQ4LWE2NmEtMTBiYjQ1NzlkNTI4 LzEvQ25NbmdGM3lEN1hCMXZUb2tIUjBQSzZ5U3ZjLmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAoxY2kUc5 k1Q7PwLKIzOcioUMU+NW1RjfgUVR6RjR8MwsSJRHlIRMm1v8DZfqI2nJ4bnDmGl+ XU/vQPHj8D7AR36VKhmb0Z9J5MoXxBUG8gZ+mspRKYV8S2Dp4AZkURDkpCAhElX0 weXZfYzytVPP62SgC2z8jwaR/FpM1d9Lu2q83uvhE8e0yjWRJ6Djuq0K9EC1DD5T MoqvKJJplZVJWT5pog6+u3mAao+FgE8w2NAPBxuxecqqUUlMVkfHNhRWeXusiXkQ LIOz/LubCJOmTOrMzWZV7AHrnSHQUSeZhfj/PdpFlAfdPJqVidQ75iIA6G9w3RpJ XZj2QeZH3NLuMQ== -----END CERTIFICATE-----Generated at Thu Sep 11 10:41:26 2025 by rpki-client