$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/4e/822400-3248-4702-b29b-a1b7ceefa16c/1/1-GUbEZTxLpjnDT2njv5N0kZ81CM.mft File: 1-GUbEZTxLpjnDT2njv5N0kZ81CM.mft (raw, json) Hash identifier: texm3DLpVv4wSO9UXfggu2VmVlUT4AFzSXKeRJwqv3o= Subject key identifier: 03:E1:0D:B6:F2:ED:5E:73:5A:86:37:03:4D:62:65:E5:AD:5C:C7:63 Authority key identifier: F8:65:1B:11:94:F1:2E:98:E7:0D:3D:A7:8E:FE:4D:D2:46:7C:D4:23 Certificate issuer: /CN=f8651b1194f12e98e70d3da78efe4dd2467cd423 Certificate serial: 01992C34643EAA33C6B3D7DA48FAB9E65672 Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/1-GUbEZTxLpjnDT2njv5N0kZ81CM.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/4e/822400-3248-4702-b29b-a1b7ceefa16c/1/1-GUbEZTxLpjnDT2njv5N0kZ81CM.mft Manifest number: 16A0 Signing time: Tue 09 Sep 2025 02:00:54 +0000 Manifest this update: Tue 09 Sep 2025 02:00:54 +0000 Manifest next update: Wed 10 Sep 2025 02:00:54 +0000 Files and hashes: 1: 1-GUbEZTxLpjnDT2njv5N0kZ81CM.crl (hash: Ox8gIX5Kh1ovUSLMe1ELdyqzsP2Ahr3WAfLmEqKv91c=) 2: 3hqHxrvg3mzouwJIaLoLL_1aNOk.roa (hash: drAUMdvTeG+q3QoTZVXvlX6+e/XeTGI2FRMHejM5978=) 3: IvUzmjfbrcAfjWuG5bEXnsKARX0.roa (hash: n6VtpGGacFVSIXviiCkhoox8/pF8W1r+IL34+q5ydvQ=) 4: ULPXRm8In0iucltCiTjO30AS1C0.roa (hash: 97n1pECWSKGJxeSXP3tl/iwpgFcjm2jvqPMD3YywHEo=) 5: UYDoB3x60CZ0QlNGESbwAlWd428.roa (hash: TFnakiXJIH+PyATRJlNHqXCNQvSIEl+DgNHmhyYXVOo=) 6: UdGuE2Gyay0X3Zt4q22vWPkwoSY.roa (hash: nlcyfBPqkJaOzfcIWqCIaFS2zyTBpHfF2/864QcqW28=) 7: VQZVlZqkH9S0x1DXirk8cG7IBS0.roa (hash: h1xoMHU3zfRgAJSFC+W5JQaCDJcd5C2MzoJ2iAIlLk0=) 8: Wt480qXVmMwEOAd2PwO3BIY-yQ8.roa (hash: ZoHaxK2Mo9GKYjgUd0e4MjoyY0dURGfiyktgIwjh6+8=) 9: _JxuUmQNn1m3KtCimjG9Vgr7i_M.roa (hash: hJQU6rbuZYGS1pkrfUwG7QwSC6DVL5unzpcEQ2Wukds=) 10: hkpjjAx2DE4nxJX8muiagvMf5-U.roa (hash: mjZ4UF9NabA85FX7we/nz5hALtUkEeudaC8FfNN02Rw=) 11: meb9WVVNYbUZtDoy7aw2n1DbXn0.roa (hash: A50uxX8uLtTa/WN+Skz9Umq+gxTofH2FJfLXImSmNB8=) 12: rY3YaEfNR8aK_Auk0z3q4MtQKGY.roa (hash: n8nvB0B+rc4j1I8LugdLmK4QQWr+nH8/CQl43jdxd20=) 13: y5m_rHh94hm7s_roT6tgjV0bYFM.roa (hash: 4v/VMYzi1Xi6KW+Q8k5KPuzBpu8zE8jLazu2ptlLL50=) Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/4e/822400-3248-4702-b29b-a1b7ceefa16c/1/1-GUbEZTxLpjnDT2njv5N0kZ81CM.crl rsync://rpki.ripe.net/repository/DEFAULT/4e/822400-3248-4702-b29b-a1b7ceefa16c/1/1-GUbEZTxLpjnDT2njv5N0kZ81CM.mft rsync://rpki.ripe.net/repository/DEFAULT/1-GUbEZTxLpjnDT2njv5N0kZ81CM.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Wed 10 Sep 2025 02:00:54 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:99:2c:34:64:3e:aa:33:c6:b3:d7:da:48:fa:b9:e6:56:72 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=f8651b1194f12e98e70d3da78efe4dd2467cd423 Validity Not Before: Sep 9 02:00:54 2025 GMT Not After : Sep 10 02:00:54 2025 GMT Subject: CN=03e10db6f2ed5e735a8637034d6265e5ad5cc763 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:c1:7e:18:11:e5:25:d9:10:e1:e8:6e:33:e6:0f: 0e:93:b7:95:79:96:7e:b8:c8:c9:7f:5f:f2:ef:88: 3f:f0:02:fa:8f:53:f6:9e:c8:67:12:bb:14:23:35: 9f:27:20:30:71:72:5e:b5:d2:ab:34:5b:8d:ea:9a: c3:63:89:65:4d:12:0f:ff:f5:9c:0d:61:c1:d2:00: ce:3a:e4:73:4f:1a:5c:be:86:34:a5:45:99:3a:7a: 75:f1:11:20:26:ab:32:70:dd:95:1f:85:58:ee:1d: 0e:61:60:ed:5c:20:62:fb:00:81:db:9a:91:12:34: 69:32:a2:b6:32:dc:45:82:99:d5:1a:00:f4:7d:a1: b8:ef:1e:5e:d1:bd:aa:4f:2d:32:04:2e:9d:19:05: b0:23:7f:2a:1e:70:b8:28:c1:e7:3d:61:8d:2f:37: 16:06:93:9c:8c:ad:27:15:8b:5f:90:fb:05:d8:b8: 54:e9:85:e2:89:c4:d1:2f:98:b6:b5:4d:61:60:c9: ec:bd:f0:61:7a:a7:ce:59:1d:6d:4b:4e:fd:db:e5: 3a:0f:3e:49:ae:61:94:dc:19:cf:88:6f:9b:7a:1f: 48:a4:5b:33:ff:7a:b7:57:e8:2c:01:57:b4:6e:a5: 5d:89:81:39:e1:36:43:b6:26:70:d7:f6:67:d3:ac: 5c:e3 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 03:E1:0D:B6:F2:ED:5E:73:5A:86:37:03:4D:62:65:E5:AD:5C:C7:63 X509v3 Authority Key Identifier: keyid:F8:65:1B:11:94:F1:2E:98:E7:0D:3D:A7:8E:FE:4D:D2:46:7C:D4:23 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/1-GUbEZTxLpjnDT2njv5N0kZ81CM.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/4e/822400-3248-4702-b29b-a1b7ceefa16c/1/1-GUbEZTxLpjnDT2njv5N0kZ81CM.mft X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/4e/822400-3248-4702-b29b-a1b7ceefa16c/1/1-GUbEZTxLpjnDT2njv5N0kZ81CM.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 49:4f:b4:c8:48:2a:3d:34:e0:2e:55:45:02:75:7b:67:d6:1d: ee:5a:fa:26:44:93:32:7d:77:2e:df:2d:11:f9:6d:5b:8a:5c: b7:66:d8:04:4d:a2:a9:86:8f:7e:76:da:81:64:06:3d:e6:8b: 5f:be:c9:c8:66:fc:24:54:37:87:14:43:8a:51:91:08:14:94: 2c:f5:e6:5a:25:49:7b:87:0c:63:0f:57:8a:bc:05:90:6a:94: 64:3b:92:82:7e:ae:9e:3f:20:c9:0b:01:f8:5e:6b:dd:56:ca: a6:1e:02:95:e6:af:77:9f:88:01:54:e3:44:ca:74:dc:87:c4: 73:9a:2a:47:e9:75:4a:2b:e5:76:f3:4c:6b:12:ad:95:6f:8b: 7b:b1:11:4a:f5:1d:e4:85:e6:ef:1a:cc:ed:83:b3:bc:5b:f3: 08:9d:f7:a1:38:95:77:50:47:fb:92:37:76:29:4e:46:74:fa: a1:04:24:c1:06:70:52:41:d6:b2:ae:96:29:d8:2f:95:06:53: 59:cb:28:aa:b1:a4:10:0c:cf:32:e3:7e:74:b5:53:80:67:6f: 1a:55:6f:2c:8c:37:d1:a8:22:5a:9f:95:5d:f3:eb:ef:b6:94: 62:54:4f:a3:40:36:f1:0c:e4:68:0b:0e:14:09:4a:00:cd:25: f0:5a:6d:40 -----BEGIN CERTIFICATE----- MIIFGTCCBAGgAwIBAgISAZksNGQ+qjPGs9faSPq55lZyMA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKGY4NjUxYjExOTRmMTJlOThlNzBkM2RhNzhlZmU0ZGQyNDY3 Y2Q0MjMwHhcNMjUwOTA5MDIwMDU0WhcNMjUwOTEwMDIwMDU0WjAzMTEwLwYDVQQD EygwM2UxMGRiNmYyZWQ1ZTczNWE4NjM3MDM0ZDYyNjVlNWFkNWNjNzYzMIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAwX4YEeUl2RDh6G4z5g8Ok7eVeZZ+ uMjJf1/y74g/8AL6j1P2nshnErsUIzWfJyAwcXJetdKrNFuN6prDY4llTRIP//Wc DWHB0gDOOuRzTxpcvoY0pUWZOnp18REgJqsycN2VH4VY7h0OYWDtXCBi+wCB25qR EjRpMqK2MtxFgpnVGgD0faG47x5e0b2qTy0yBC6dGQWwI38qHnC4KMHnPWGNLzcW BpOcjK0nFYtfkPsF2LhU6YXiicTRL5i2tU1hYMnsvfBheqfOWR1tS0792+U6Dz5J rmGU3BnPiG+beh9IpFsz/3q3V+gsAVe0bqVdiYE54TZDtiZw1/Zn06xc4wIDAQAB o4ICJTCCAiEwHQYDVR0OBBYEFAPhDbby7V5zWoY3A01iZeWtXMdjMB8GA1UdIwQY MBaAFPhlGxGU8S6Y5w09p47+TdJGfNQjMA4GA1UdDwEB/wQEAwIHgDBlBggrBgEF BQcBAQRZMFcwVQYIKwYBBQUHMAKGSXJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvMS1HVWJFWlR4THBqbkRUMm5qdjVOMGtaODFDTS5jZXIw gY4GCCsGAQUFBwELBIGBMH8wfQYIKwYBBQUHMAuGcXJzeW5jOi8vcnBraS5yaXBl Lm5ldC9yZXBvc2l0b3J5L0RFRkFVTFQvNGUvODIyNDAwLTMyNDgtNDcwMi1iMjli LWExYjdjZWVmYTE2Yy8xLzEtR1ViRVpUeExwam5EVDJuanY1TjBrWjgxQ00ubWZ0 MIGCBgNVHR8EezB5MHegdaBzhnFyc3luYzovL3Jwa2kucmlwZS5uZXQvcmVwb3Np dG9yeS9ERUZBVUxULzRlLzgyMjQwMC0zMjQ4LTQ3MDItYjI5Yi1hMWI3Y2VlZmEx NmMvMS8xLUdVYkVaVHhMcGpuRFQybmp2NU4wa1o4MUNNLmNybDAYBgNVHSABAf8E DjAMMAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgAC BQAwFQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEASU+0 yEgqPTTgLlVFAnV7Z9Yd7lr6JkSTMn13Lt8tEfltW4pct2bYBE2iqYaPfnbagWQG PeaLX77JyGb8JFQ3hxRDilGRCBSULPXmWiVJe4cMYw9XirwFkGqUZDuSgn6unj8g yQsB+F5r3VbKph4Cleavd5+IAVTjRMp03IfEc5oqR+l1SivldvNMaxKtlW+Le7ER SvUd5IXm7xrM7YOzvFvzCJ33oTiVd1BH+5I3dilORnT6oQQkwQZwUkHWsq6WKdgv lQZTWcsoqrGkEAzPMuN+dLVTgGdvGlVvLIw30agiWp+VXfPr77aUYlRPo0A28Qzk aAsOFAlKAM0l8FptQA== -----END CERTIFICATE-----Generated at Tue Sep 9 11:20:10 2025 by rpki-client