$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/4b/f8a5d1-260a-46a4-a8e4-283fe54a6f2f/1/pM6WQKPvL-oZN0rY-Z9CPXqnx2s.mft File: pM6WQKPvL-oZN0rY-Z9CPXqnx2s.mft (raw, json) Hash identifier: j9bsu7oR3mRcfkg2uitYsiB8tQG6jDUtC499EMwWYt4= Subject key identifier: 6C:EB:2D:5D:A9:C2:BD:46:62:60:B1:57:FA:50:DE:6C:92:1C:AB:53 Authority key identifier: A4:CE:96:40:A3:EF:2F:EA:19:37:4A:D8:F9:9F:42:3D:7A:A7:C7:6B Certificate issuer: /CN=a4ce9640a3ef2fea19374ad8f99f423d7aa7c76b Certificate serial: 01991EAFC626C12FF582AA1077C56693DCA2 Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/pM6WQKPvL-oZN0rY-Z9CPXqnx2s.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/4b/f8a5d1-260a-46a4-a8e4-283fe54a6f2f/1/pM6WQKPvL-oZN0rY-Z9CPXqnx2s.mft Manifest number: 1349 Signing time: Sat 06 Sep 2025 11:00:59 +0000 Manifest this update: Sat 06 Sep 2025 11:00:59 +0000 Manifest next update: Sun 07 Sep 2025 11:00:59 +0000 Files and hashes: 1: 3MQ1Zm2jB8qgOjCAc_a0v-3nM_o.roa (hash: T4pVm2mU2N5el1g2HcnlglhN57e23NLVS7ny7NzSBL0=) 2: 4SEUaFHVUAL3abRJwnhpLcw21dk.roa (hash: Nz767QGxnFH79p/BW/8MOsNM3RviNN1Kvy4GgZgMyGs=) 3: FCFfx3p7hHCFHlKPZobVJyLJ5MI.roa (hash: 6JV0xEEqdwivRbZdMI4zo4Wpa9PWQK4gKoasAD6odWU=) 4: IYmUJK1vApyWT119wps-ukf2n9E.roa (hash: w1dWdBHD/FLi3tR98pk3iJlbhc1nR22X1Pwn/kqhO/0=) 5: KcuMI0SBvL5BPuYJm6BH3vJKAQ0.roa (hash: s0e2eWUrZQW14pJCqfjgMZ+ViTFNuU9345bizVg0sKY=) 6: MSrSUIwYGP5OzMFaA9dwr3mO4jY.roa (hash: OHzV5kP6uhO1eFoIB7t+WKfJjHs90j+a/iXQqOXuv30=) 7: N7C2a3H5ML3ydyNI5IDIoJ6m-6U.roa (hash: FJm0Nzs6ME/1+LojcQZMLdUu/cBqlxKE16Bs75fFFLw=) 8: Nf1rHETWcCnhWhR_uM_9B2P3jb8.roa (hash: pBdKIUwSvvQqLJChVbTbSEDRXa+Ll262+ax9ivbZD0o=) 9: OFTgwkdKspRJ_TvSv6vgx_ckdLQ.roa (hash: b7UPAbBCKcuRworqLaxy25e9Gx9nfc4PaZocWvp2h84=) 10: RzvDJbgMFFQ3RXZZowAtkGpvaYQ.roa (hash: pXgfU5zLGpdaPENK8y9IOVL5xtiIt9Fk8RRzx12JQUw=) 11: WToItz8al9Sw1IRtEOUm1ku1TzY.roa (hash: cD3Nf3okXGtPiYuFOkPnzfMJHgIYmW52aVmaOwxOEN0=) 12: dcAEUZ_ghRVpaUYo3WWA9zUPe9U.roa (hash: AsvsdGamYH2cSArWOQT5cvLOD/2t8gp5MEnt/aWjLII=) 13: m-VIT0LjtD9EzoMprh8uOjUFAXU.roa (hash: uPdvifi2Mse38dnV2nTzHEKQ8cRZMoEcUuAqy+pbA4Y=) 14: mIeBpS2n4kCr0BZmoszWNjvAQck.roa (hash: sgSJy89RWLefTDlUw+TWGE3cezazErlzXNR2nAjs6uU=) 15: pM6WQKPvL-oZN0rY-Z9CPXqnx2s.crl (hash: R8iJhzhX6F64fc2XpCNH0aWz8hTK4hoF6XwolNJ8KKc=) 16: sVCQlL9zy4ci5k4im_qh1UgQSao.roa (hash: tXiv/i4AXQDYnVQqrjLO82vwz0zcYS5lORUFrc1ytqg=) Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/4b/f8a5d1-260a-46a4-a8e4-283fe54a6f2f/1/pM6WQKPvL-oZN0rY-Z9CPXqnx2s.crl rsync://rpki.ripe.net/repository/DEFAULT/4b/f8a5d1-260a-46a4-a8e4-283fe54a6f2f/1/pM6WQKPvL-oZN0rY-Z9CPXqnx2s.mft rsync://rpki.ripe.net/repository/DEFAULT/pM6WQKPvL-oZN0rY-Z9CPXqnx2s.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Sun 07 Sep 2025 11:00:59 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:99:1e:af:c6:26:c1:2f:f5:82:aa:10:77:c5:66:93:dc:a2 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=a4ce9640a3ef2fea19374ad8f99f423d7aa7c76b Validity Not Before: Sep 6 11:00:59 2025 GMT Not After : Sep 7 11:00:59 2025 GMT Subject: CN=6ceb2d5da9c2bd466260b157fa50de6c921cab53 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:ac:9b:a8:b5:b5:04:39:bb:ea:70:24:8b:e0:3c: 40:03:70:ff:df:39:76:a9:9d:26:64:eb:15:20:b9: 2b:25:b2:95:a5:9b:c8:4b:7a:35:ac:07:df:70:d9: f5:fc:71:fe:20:37:82:c0:cf:57:4c:10:fb:ae:c3: c7:36:6c:c9:40:54:31:36:ad:e4:3d:c2:68:d1:74: f8:34:97:59:f2:df:46:29:b4:87:15:e6:5d:59:4d: 95:5a:88:36:b8:ee:99:25:72:84:6f:9c:49:f1:4c: 38:c6:99:e1:6c:8f:a1:b3:39:3f:80:56:17:7f:cd: ea:d3:5f:0c:58:37:d8:0e:d4:be:87:29:a4:36:0e: 41:6a:99:46:00:bf:3f:e5:8a:9d:2c:cc:da:e4:23: 93:6c:78:b8:53:5d:3a:87:a2:28:11:d2:ad:5d:24: 5b:d2:9f:e0:6b:a9:01:6c:f6:5c:72:0a:4f:ad:c2: 25:b9:f2:85:ec:36:65:c7:61:3c:12:bd:a2:5d:37: d3:e9:8a:cc:0c:61:85:b2:82:db:33:6c:cf:07:f6: 93:e0:a4:7f:c3:55:71:34:ec:e3:0f:a3:b4:7d:8d: 5c:5d:c5:e6:58:f5:71:00:97:79:53:3a:9f:3f:ca: 06:31:26:eb:d8:3f:ba:12:03:6f:70:7c:a0:22:86: f1:d1 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 6C:EB:2D:5D:A9:C2:BD:46:62:60:B1:57:FA:50:DE:6C:92:1C:AB:53 X509v3 Authority Key Identifier: keyid:A4:CE:96:40:A3:EF:2F:EA:19:37:4A:D8:F9:9F:42:3D:7A:A7:C7:6B X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/pM6WQKPvL-oZN0rY-Z9CPXqnx2s.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/4b/f8a5d1-260a-46a4-a8e4-283fe54a6f2f/1/pM6WQKPvL-oZN0rY-Z9CPXqnx2s.mft X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/4b/f8a5d1-260a-46a4-a8e4-283fe54a6f2f/1/pM6WQKPvL-oZN0rY-Z9CPXqnx2s.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 28:a2:9d:1d:c4:c8:94:fb:8e:b4:e4:b3:a2:6a:5d:8a:43:12: ea:f8:ec:f2:44:b2:d6:cc:39:d6:73:69:d7:3f:c1:90:e1:c9: d5:0e:15:53:f3:63:2f:82:c3:5a:1e:bc:91:b5:21:65:b0:0d: 56:af:25:39:36:e4:d7:34:dc:fd:88:c7:e0:63:76:81:91:a2: e0:46:a9:77:74:82:d6:db:bd:58:9b:75:3d:45:0c:64:aa:9f: 1a:11:e2:98:dd:43:a6:9b:cb:d8:76:47:d5:e2:84:2a:bd:d1: ed:70:5a:61:32:04:c5:32:06:05:bc:93:83:29:e3:88:ac:9d: 74:1f:b4:62:78:e2:c4:e4:57:29:b0:c2:6d:0e:53:2b:f2:42: 27:8f:64:51:c9:d8:e3:7b:23:0a:3b:36:f4:5b:93:eb:d7:7a: ad:36:9a:90:bd:eb:86:34:3a:f5:c0:d9:c0:1f:3e:cb:7a:6d: 53:3c:e7:1e:ae:74:38:3f:6f:4d:68:07:14:72:b1:85:d3:bd: 24:29:a2:1c:07:fb:8c:e8:ef:9b:ec:e2:12:9a:1c:1e:ee:f3: 08:dd:26:c2:b2:e4:6d:6d:0b:dc:20:ed:fc:0b:37:44:ce:c7: 66:42:29:68:04:79:4c:bf:76:74:d6:b3:4c:28:32:e8:d7:be: 41:f1:77:4c -----BEGIN CERTIFICATE----- MIIFFjCCA/6gAwIBAgISAZker8YmwS/1gqoQd8Vmk9yiMA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKGE0Y2U5NjQwYTNlZjJmZWExOTM3NGFkOGY5OWY0MjNkN2Fh N2M3NmIwHhcNMjUwOTA2MTEwMDU5WhcNMjUwOTA3MTEwMDU5WjAzMTEwLwYDVQQD Eyg2Y2ViMmQ1ZGE5YzJiZDQ2NjI2MGIxNTdmYTUwZGU2YzkyMWNhYjUzMIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEArJuotbUEObvqcCSL4DxAA3D/3zl2 qZ0mZOsVILkrJbKVpZvIS3o1rAffcNn1/HH+IDeCwM9XTBD7rsPHNmzJQFQxNq3k PcJo0XT4NJdZ8t9GKbSHFeZdWU2VWog2uO6ZJXKEb5xJ8Uw4xpnhbI+hszk/gFYX f83q018MWDfYDtS+hymkNg5BaplGAL8/5YqdLMza5COTbHi4U106h6IoEdKtXSRb 0p/ga6kBbPZccgpPrcIlufKF7DZlx2E8Er2iXTfT6YrMDGGFsoLbM2zPB/aT4KR/ w1VxNOzjD6O0fY1cXcXmWPVxAJd5UzqfP8oGMSbr2D+6EgNvcHygIobx0QIDAQAB o4ICIjCCAh4wHQYDVR0OBBYEFGzrLV2pwr1GYmCxV/pQ3mySHKtTMB8GA1UdIwQY MBaAFKTOlkCj7y/qGTdK2PmfQj16p8drMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvcE02V1FLUHZMLW9aTjByWS1aOUNQWHFueDJzLmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC80Yi9mOGE1ZDEtMjYwYS00NmE0LWE4ZTQt MjgzZmU1NGE2ZjJmLzEvcE02V1FLUHZMLW9aTjByWS1aOUNQWHFueDJzLm1mdDCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC80Yi9mOGE1ZDEtMjYwYS00NmE0LWE4ZTQtMjgzZmU1NGE2ZjJm LzEvcE02V1FLUHZMLW9aTjByWS1aOUNQWHFueDJzLmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAKKKdHcTI lPuOtOSzompdikMS6vjs8kSy1sw51nNp1z/BkOHJ1Q4VU/NjL4LDWh68kbUhZbAN Vq8lOTbk1zTc/YjH4GN2gZGi4Eapd3SC1tu9WJt1PUUMZKqfGhHimN1DppvL2HZH 1eKEKr3R7XBaYTIExTIGBbyTgynjiKyddB+0YnjixORXKbDCbQ5TK/JCJ49kUcnY 43sjCjs29FuT69d6rTaakL3rhjQ69cDZwB8+y3ptUzznHq50OD9vTWgHFHKxhdO9 JCmiHAf7jOjvm+ziEpocHu7zCN0mwrLkbW0L3CDt/As3RM7HZkIpaAR5TL92dNaz TCgy6Ne+QfF3TA== -----END CERTIFICATE-----Generated at Sat Sep 6 16:40:12 2025 by rpki-client