$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/4b/f25d7c-6677-4fdb-898e-ee7465754ff6/1/EaAQ-HoEm24hq-2bQJg7BPPxx-g.mft File: EaAQ-HoEm24hq-2bQJg7BPPxx-g.mft (raw, json) Hash identifier: Y1DoN7Q6N4FrSEx03clPr5zCw5OsLrcedzIiACo53ro= Subject key identifier: D0:5A:2A:82:85:23:BC:CE:20:48:6C:BD:52:17:30:8B:30:E2:64:82 Authority key identifier: 11:A0:10:F8:7A:04:9B:6E:21:AB:ED:9B:40:98:3B:04:F3:F1:C7:E8 Certificate issuer: /CN=11a010f87a049b6e21abed9b40983b04f3f1c7e8 Certificate serial: 019919BFCF5B818A8B1032D81312F54F9635 Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/EaAQ-HoEm24hq-2bQJg7BPPxx-g.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/4b/f25d7c-6677-4fdb-898e-ee7465754ff6/1/EaAQ-HoEm24hq-2bQJg7BPPxx-g.mft Manifest number: 16E8 Signing time: Fri 05 Sep 2025 12:00:24 +0000 Manifest this update: Fri 05 Sep 2025 12:00:24 +0000 Manifest next update: Sat 06 Sep 2025 12:00:24 +0000 Files and hashes: 1: 0a-KrfdskF1P1eak9gMq_rpHwLQ.roa (hash: 1r6R/eLHp6yqNJSUm5rRHogfjj+timL04ipzPj2uofE=) 2: 1-RLao_ler7InLwc0LH0fTne84LQ.roa (hash: r89n4jdr3oXEge5Q7CikO0pUbmaXxHDSB7JHztOVLn8=) 3: 1-z0xCJwtZ7oNjVyEZRiUl707L_U.roa (hash: kH96KZu4zVwqWimn8lprbltf+L6jN14xGOOzu5+uka8=) 4: 3L3xDarJu5Fz4sXBw4PnJpUrKg8.roa (hash: mYOTUrTGScHJ9ebv2B+CxOPHDS6vmmMB/iTWFsSubac=) 5: 4CU6pYnLKkVawgc84xMcvdiOfc0.roa (hash: I1uFfuY4QPVPp8rBpUvi3C1YmHjHktusOlU6fhj2vVY=) 6: 6lCcCiAG_a6sOfmRZ6qeYO15iGs.roa (hash: BFQuhQiCrduZkmNzpLq32WMBJG9sF3KBeOMWP2TxRSA=) 7: 8HMlEMu_BSHgTuVZxYXkPOUH-XA.roa (hash: nzR0epdeX2+WJtESwgq5prAKeUM2fNXd9Y9hluvNjBg=) 8: 8WOfV91hbQYdAjxlTShs8uS2qZo.roa (hash: qdOgiq3j/uyZoQiWebZOCQ+/u3LpOi/JdsIzY2Q5Yjw=) 9: 9ESkLgmI35QN5TpIx_GPZS8Vxio.roa (hash: hdpw919IzbN2ZFHFKuU/1SNfD9sbyLis5zeOuTdE5D4=) 10: EU4QWvJeKnbJ2gVJ_l-zXW58tiI.roa (hash: 2GTsiEN1pVkfT8wxoGUw+kBia4yRrXQI1p3cFmoAfU0=) 11: EaAQ-HoEm24hq-2bQJg7BPPxx-g.crl (hash: MBQzl8FWDQAZctXFDZVW8R6Tzm8E4ejxJ5fRZabgTxY=) 12: JY0sVxRmdyc5WAgUY19lxnxmM4I.roa (hash: 86gvkJrlTS8XF8/W3CjtN+tW5tBzNGMNDhj7XFXK96U=) 13: NK_WPhYvDc3eEpYFCQ9ge52GMvk.roa (hash: 1fbP+50M9LhkCXd17Y2+Euhe18E6Q+JHRhqDIhYbeMs=) 14: NauuGUSZn-SgPXuLy6E5pAV66N0.roa (hash: dn6a8tKxIadhVZxQhBzsKgyugbJ2THkUTfOT2uFIVqs=) 15: PICG-s3Q4YZkop6Z75tQ1uqUjjc.roa (hash: RYwj25TTRgCRFd7rjmY1yuMhB2tlpTJT7SA0DAX0bR8=) 16: PyyzXUdlmoA9Bk7oa0uF75YdupI.roa (hash: KrKiurvSNPj8UgpNpGVtpzLAre3QiNcGoEwUhT8E1Zw=) 17: RRHkc1lOsJ0WrMbiCvf9G3l9Ja4.roa (hash: fpJ4KH8CMslY9U5qvXp1614yNP772K6f37C+wQxE5Ec=) 18: S_3Ac8fpJNmr4_Jqg37fnSZrQTA.roa (hash: kXDSSLoM6qJEx5/HbAZQ1hKhZOVmnkuIzLWPNIFvHc8=) 19: WGVFdHdOhrZ6oEGNKaADeEDXEkc.roa (hash: upyn2YAU1bBK3yksfLZUYvn/2Yyr6nO1tneR3QTm/D0=) 20: WNxwGRqjvkzEEIFtJUKhx8EpDnA.roa (hash: NuJcsLFQveWA7JrekR32MafYf69Fr1QL8arEGvczy7k=) 21: WdrQA2XxuRSob5fch_vmulfj1p4.roa (hash: eriXlUX2rEIxDuWxy0Sj12+EAh+KHElo42nsQ2xL4P8=) 22: YshAp7kvzSEqzUAJqYQaXPlimXM.roa (hash: 9wAijCHBf70P9HVKz7vJxcgO3NSgfGywCSLu5rKQFcc=) 23: cvu6AF9AbPQ5N7Uqaphvk_JniE0.roa (hash: IBo2+GfVZ1wUI21/57/jiuNuhDw/yLxaNs96bhzy1Eo=) 24: dcujdY7nZpLDRD7umvphEez-qpw.roa (hash: DCDyLYPDKXFLZDtPjhfGEgVVy0YwKX5izGR8g7lqUrY=) 25: gg8zzgS55uq5P6kGkuaJFoKcCTA.roa (hash: nEDs7oqRrIVyofxdHlPaduwYU8FU0iwSUVYcN9fZIC8=) 26: p7JIV6hAP8Iqcna1OjzOq4_7YRE.roa (hash: BJrzKoW9PKHRZxoa3GctY7R2lGv3C7NaVaECKpXws6k=) 27: pHrarVnk95oQe2hI0xpt7DgCX4I.roa (hash: sJ3eEhOn7jQjhfcoZ42EdbEeYJY/zzcWxgg/rji7kDE=) 28: pxErwoucWB8yQbaQqe1v45Sxb10.roa (hash: 8JG+D2s4aIAKcUNnH/GZ789KXpymk/hO3QsT835m9zk=) 29: ul3uv5hec5ukIf7FCGeau4nCEHc.roa (hash: pc0UTa1zNFc4D1XbCiXp6Zxm7lOslpwK+C/ygH0+nGg=) 30: x9hv5VI53E9lfmCoCZYbXA2hByU.roa (hash: /EpYHmEUvDFytn2JV2b/puVDndIWdyEA5WbCaF8KMCM=) 31: ys8EEYV9duz4vQMnV4A63KTELEI.roa (hash: Mzw/QCxXFE0BItwPGjx2i5l7tZTi3Kn7VnGnniz1APM=) Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/4b/f25d7c-6677-4fdb-898e-ee7465754ff6/1/EaAQ-HoEm24hq-2bQJg7BPPxx-g.crl rsync://rpki.ripe.net/repository/DEFAULT/4b/f25d7c-6677-4fdb-898e-ee7465754ff6/1/EaAQ-HoEm24hq-2bQJg7BPPxx-g.mft rsync://rpki.ripe.net/repository/DEFAULT/EaAQ-HoEm24hq-2bQJg7BPPxx-g.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Sat 06 Sep 2025 12:00:24 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:99:19:bf:cf:5b:81:8a:8b:10:32:d8:13:12:f5:4f:96:35 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=11a010f87a049b6e21abed9b40983b04f3f1c7e8 Validity Not Before: Sep 5 12:00:24 2025 GMT Not After : Sep 6 12:00:24 2025 GMT Subject: CN=d05a2a828523bcce20486cbd5217308b30e26482 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:ad:fd:01:ac:ef:a6:dd:46:6a:e4:ed:56:b9:80: 0a:6f:bd:7b:2c:64:48:65:06:b9:bf:43:2f:8b:34: 33:8d:1e:49:29:f1:ba:68:fa:15:74:cf:1d:88:4a: d7:4b:43:13:ac:cd:c6:0a:15:74:8d:4c:e2:40:ef: 1c:e9:3d:97:55:c6:c6:43:ed:d0:99:e9:e2:42:e5: 26:2e:c5:49:93:8c:55:42:64:70:b0:5e:25:5f:3d: dc:04:7a:82:e9:09:3e:4d:fd:bf:99:43:8e:16:29: 95:67:fb:32:5c:9c:67:ff:a0:0d:d5:bc:53:77:0c: 07:73:4e:56:43:e1:40:c7:e1:23:26:70:b1:03:d8: 50:9e:14:49:a0:84:9f:ee:a2:7a:db:57:b6:ff:f1: 6e:d9:16:0e:ba:15:1b:1a:91:03:53:ef:58:56:d1: 5b:99:4b:39:b9:b4:6f:ed:3b:3d:de:86:6a:c2:38: 2c:84:d0:ba:35:0e:7e:29:4e:df:32:3b:33:5c:55: 72:90:ce:8e:a7:f1:58:12:40:42:38:68:38:0e:da: 0b:24:6f:2f:c5:8b:83:eb:20:3d:de:a1:2c:0f:7d: f0:81:70:51:79:83:e2:50:2a:09:c0:3f:34:9c:55: ce:25:7f:da:48:3d:98:e9:54:0e:b4:a8:38:ef:b5: 4c:01 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: D0:5A:2A:82:85:23:BC:CE:20:48:6C:BD:52:17:30:8B:30:E2:64:82 X509v3 Authority Key Identifier: keyid:11:A0:10:F8:7A:04:9B:6E:21:AB:ED:9B:40:98:3B:04:F3:F1:C7:E8 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/EaAQ-HoEm24hq-2bQJg7BPPxx-g.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/4b/f25d7c-6677-4fdb-898e-ee7465754ff6/1/EaAQ-HoEm24hq-2bQJg7BPPxx-g.mft X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/4b/f25d7c-6677-4fdb-898e-ee7465754ff6/1/EaAQ-HoEm24hq-2bQJg7BPPxx-g.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 5d:3a:44:ba:a3:9a:13:56:44:88:66:a3:26:63:bc:27:20:92: fa:3f:65:27:e2:4c:db:98:37:e2:04:82:52:5e:81:83:f6:7f: 12:ea:d3:76:6b:89:6f:ec:a7:29:a8:c9:f1:44:04:44:7b:78: 57:7a:c2:c0:0c:80:ff:ae:6e:40:70:1b:f4:50:fb:c6:25:81: 9c:03:96:18:a1:9b:dd:60:f5:4d:6a:f1:45:93:2c:0b:d7:f3: 82:85:b3:48:11:49:aa:5e:18:29:01:97:29:01:29:63:bf:e4: e4:81:df:d8:a5:69:1f:49:ca:59:da:76:2e:86:eb:e3:b8:5c: 78:84:94:da:35:c9:ff:e6:f6:08:61:12:78:1a:3c:0f:9a:96: 1e:a6:6e:12:7a:7e:3c:1a:2b:8d:7d:02:2c:ad:2f:84:d6:42: 71:2f:f3:ed:43:8e:2a:e4:a1:8b:47:74:33:3c:4f:66:d9:51: e6:a7:7a:02:07:87:5e:85:78:b5:52:b7:b6:73:2c:5c:d7:41: e5:42:a3:9a:2e:01:a9:5c:db:48:44:4c:f4:f9:a1:42:d2:af: dd:45:d8:3f:d1:0d:af:e2:55:3f:90:ea:d9:e7:87:e9:52:17: 35:6a:f4:6f:6e:42:3e:7f:a1:a4:08:ec:d7:76:99:f8:71:7a: 72:11:f7:17 -----BEGIN CERTIFICATE----- MIIFFjCCA/6gAwIBAgISAZkZv89bgYqLEDLYExL1T5Y1MA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKDExYTAxMGY4N2EwNDliNmUyMWFiZWQ5YjQwOTgzYjA0ZjNm MWM3ZTgwHhcNMjUwOTA1MTIwMDI0WhcNMjUwOTA2MTIwMDI0WjAzMTEwLwYDVQQD EyhkMDVhMmE4Mjg1MjNiY2NlMjA0ODZjYmQ1MjE3MzA4YjMwZTI2NDgyMIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEArf0BrO+m3UZq5O1WuYAKb717LGRI ZQa5v0MvizQzjR5JKfG6aPoVdM8diErXS0MTrM3GChV0jUziQO8c6T2XVcbGQ+3Q meniQuUmLsVJk4xVQmRwsF4lXz3cBHqC6Qk+Tf2/mUOOFimVZ/syXJxn/6AN1bxT dwwHc05WQ+FAx+EjJnCxA9hQnhRJoISf7qJ621e2//Fu2RYOuhUbGpEDU+9YVtFb mUs5ubRv7Ts93oZqwjgshNC6NQ5+KU7fMjszXFVykM6Op/FYEkBCOGg4DtoLJG8v xYuD6yA93qEsD33wgXBReYPiUCoJwD80nFXOJX/aSD2Y6VQOtKg477VMAQIDAQAB o4ICIjCCAh4wHQYDVR0OBBYEFNBaKoKFI7zOIEhsvVIXMIsw4mSCMB8GA1UdIwQY MBaAFBGgEPh6BJtuIavtm0CYOwTz8cfoMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvRWFBUS1Ib0VtMjRocS0yYlFKZzdCUFB4eC1nLmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC80Yi9mMjVkN2MtNjY3Ny00ZmRiLTg5OGUt ZWU3NDY1NzU0ZmY2LzEvRWFBUS1Ib0VtMjRocS0yYlFKZzdCUFB4eC1nLm1mdDCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC80Yi9mMjVkN2MtNjY3Ny00ZmRiLTg5OGUtZWU3NDY1NzU0ZmY2 LzEvRWFBUS1Ib0VtMjRocS0yYlFKZzdCUFB4eC1nLmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAXTpEuqOa E1ZEiGajJmO8JyCS+j9lJ+JM25g34gSCUl6Bg/Z/EurTdmuJb+ynKajJ8UQERHt4 V3rCwAyA/65uQHAb9FD7xiWBnAOWGKGb3WD1TWrxRZMsC9fzgoWzSBFJql4YKQGX KQEpY7/k5IHf2KVpH0nKWdp2Lobr47hceISU2jXJ/+b2CGESeBo8D5qWHqZuEnp+ PBorjX0CLK0vhNZCcS/z7UOOKuShi0d0MzxPZtlR5qd6AgeHXoV4tVK3tnMsXNdB 5UKjmi4BqVzbSERM9PmhQtKv3UXYP9ENr+JVP5Dq2eeH6VIXNWr0b25CPn+hpAjs 13aZ+HF6chH3Fw== -----END CERTIFICATE-----Generated at Fri Sep 5 20:19:09 2025 by rpki-client