$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/4f/53a947-fd03-4014-9827-c5d8950818ec/1/_0TbrKVtrDGUAfaKUNkX9UJGEa0.mft File: _0TbrKVtrDGUAfaKUNkX9UJGEa0.mft (raw, json) Hash identifier: ndKWbQOOvC7/wPHV0yAPSHm+6MjtWej5qnZXKYqysHM= Subject key identifier: 1C:1A:CC:F4:9B:5A:F0:F8:D3:60:A7:0C:79:B3:65:B8:D2:AB:02:29 Authority key identifier: FF:44:DB:AC:A5:6D:AC:31:94:01:F6:8A:50:D9:17:F5:42:46:11:AD Certificate issuer: /CN=ff44dbaca56dac319401f68a50d917f5424611ad Certificate serial: 019924B1B22F134205DCCDEAC13480344CC3 Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/_0TbrKVtrDGUAfaKUNkX9UJGEa0.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/4f/53a947-fd03-4014-9827-c5d8950818ec/1/_0TbrKVtrDGUAfaKUNkX9UJGEa0.mft Manifest number: 0E84 Signing time: Sun 07 Sep 2025 15:00:49 +0000 Manifest this update: Sun 07 Sep 2025 15:00:49 +0000 Manifest next update: Mon 08 Sep 2025 15:00:49 +0000 Files and hashes: 1: 1-cpyjHU8WHBS-JnYyweRG_JlxsQ.roa (hash: Bc2YUgBN1eHG7yUrAAjgkxLZbgg1NrbTbKbM93kzdXo=) 2: 23cjywgox101LeW5GrrQWi4IHG0.roa (hash: uYyFedbey5ChPUlaasPp5Y63DNZ1EjHPXUKggcmyWcA=) 3: 2nquZxIjKuCQeOgojOXW1X_s_QM.roa (hash: jFRO0lP11v/Hnir4mOKoo6txSwXFruzZ7RBet4hmmmk=) 4: QQQnQcpvGBf2C-BzCpjUlxD_kV0.roa (hash: 3oCmUMut8zjGqT5v8Ibyl5GG5ZNBsCX2Q1FPnCYPFwc=) 5: _0TbrKVtrDGUAfaKUNkX9UJGEa0.crl (hash: cCX5zimgCAPslZjkFWF7Mfwkh6HvThoYpFLfzz+q2So=) 6: gIx-NvwmPwDjbwzrImEaevKFMi8.roa (hash: qVqkRd3AaQOFICZgsJ5zunJ8w7waJ2c1Sms4AJtjCl4=) 7: qWecP1fjBHk_xiZL6w3FMxqmMFs.roa (hash: H6nLoMO+CEX9wLJPNIjsGgGm6hrsOhinY+8mLTIndRM=) 8: rQGjF7CS3G8ySkkrwz5hQvGaUtk.roa (hash: UmfdL/yMHB7LypaEgd2ulm2mGfbyrt6kIxKgT/oReek=) 9: wvlIJaBXdAerQ4c5dRBxRunJgjQ.roa (hash: JyQWbotgOXPXDAJ2gTdNj+PiW7DZmyYe59ktU38Qs6o=) 10: zwQeVe6KjT7mK7CzDjhb-oUfUeY.roa (hash: RDrcDVJwzADiTPiX9sXWISoKDjj7Zx0CdydUNeF8j6Q=) Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/4f/53a947-fd03-4014-9827-c5d8950818ec/1/_0TbrKVtrDGUAfaKUNkX9UJGEa0.crl rsync://rpki.ripe.net/repository/DEFAULT/4f/53a947-fd03-4014-9827-c5d8950818ec/1/_0TbrKVtrDGUAfaKUNkX9UJGEa0.mft rsync://rpki.ripe.net/repository/DEFAULT/_0TbrKVtrDGUAfaKUNkX9UJGEa0.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Mon 08 Sep 2025 15:00:49 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:99:24:b1:b2:2f:13:42:05:dc:cd:ea:c1:34:80:34:4c:c3 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=ff44dbaca56dac319401f68a50d917f5424611ad Validity Not Before: Sep 7 15:00:49 2025 GMT Not After : Sep 8 15:00:49 2025 GMT Subject: CN=1c1accf49b5af0f8d360a70c79b365b8d2ab0229 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:f0:9c:f7:21:c6:af:4f:55:13:ca:e6:3b:17:36: cc:e7:95:e8:20:d7:56:ca:98:a4:4d:3b:e7:c0:c7: 4b:67:02:d2:03:b1:9a:10:c1:70:62:9d:c5:91:c2: 25:72:b0:be:c0:a7:6b:67:c2:68:8b:29:bd:d4:36: 01:2d:6a:66:cc:16:3f:6e:37:99:55:db:3a:bc:44: 50:9c:06:36:73:86:9a:43:bc:8b:2c:f4:56:fb:ce: 87:cb:f2:48:89:fd:b3:06:64:8b:7c:53:ba:4b:6d: 59:15:ea:66:27:c0:8a:71:46:46:0a:bc:e4:d0:b6: 0f:80:98:4e:66:7f:e6:14:fa:3a:6d:ef:ff:41:cf: ea:93:5d:bc:e9:aa:6a:af:29:e4:cd:ea:75:78:d4: f5:52:65:47:d4:79:fa:ac:5c:3d:77:25:2b:0e:6c: 0d:c2:e8:ab:ef:d8:18:b2:62:59:84:84:a0:e3:c7: e5:be:90:b9:63:01:c8:41:e7:ec:ed:32:c7:05:06: f4:12:e7:3c:a8:a9:9f:63:0c:0c:d1:f0:46:9d:5a: 63:5e:18:1e:cc:0d:03:12:cf:91:4a:01:8f:60:27: e7:8b:b7:e0:06:cf:92:c7:a3:04:cb:19:83:90:0f: e6:61:78:26:ad:2a:49:06:f7:29:a6:ea:ea:e8:13: e4:67 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 1C:1A:CC:F4:9B:5A:F0:F8:D3:60:A7:0C:79:B3:65:B8:D2:AB:02:29 X509v3 Authority Key Identifier: keyid:FF:44:DB:AC:A5:6D:AC:31:94:01:F6:8A:50:D9:17:F5:42:46:11:AD X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/_0TbrKVtrDGUAfaKUNkX9UJGEa0.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/4f/53a947-fd03-4014-9827-c5d8950818ec/1/_0TbrKVtrDGUAfaKUNkX9UJGEa0.mft X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/4f/53a947-fd03-4014-9827-c5d8950818ec/1/_0TbrKVtrDGUAfaKUNkX9UJGEa0.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 60:37:89:d2:f5:c8:fb:40:55:5f:fa:b1:fe:2b:78:cf:b4:01: 09:52:d9:db:51:f3:45:81:72:68:db:b4:71:cc:8f:9a:21:96: 96:ec:d3:fe:7e:e0:93:24:a2:8d:a2:8d:f9:3a:74:f3:14:41: f1:6f:f7:f8:e1:8b:f9:dd:48:d3:84:a0:39:14:e9:84:4f:cd: b6:0e:b8:06:2a:d1:24:88:50:25:05:dd:57:8d:0d:a9:5c:65: de:be:29:b9:54:c3:55:61:3a:ad:c8:3d:f7:cb:ab:67:77:73: f5:26:2d:8e:a6:fa:4e:16:fd:03:3a:8b:39:21:83:62:b1:55: dd:35:be:3c:93:ee:87:bd:fd:d3:57:bd:ed:4a:cd:08:be:70: 75:52:0b:16:65:63:67:83:df:ac:0b:04:af:37:76:70:2d:f1: 60:45:46:7e:17:e7:c9:04:fd:89:4d:3b:ff:e6:64:f7:31:91: 34:ea:6d:c7:2e:33:fa:f4:d3:96:8a:01:0c:6e:b4:bd:2b:a1: e4:a1:22:8e:b5:8d:b0:4a:e0:af:a2:19:09:41:89:0f:bc:80: 2c:f9:41:90:15:27:e7:67:57:04:0e:82:af:eb:65:e5:e3:d7: 8f:b5:79:4b:33:65:b4:60:b6:24:52:69:e4:15:64:03:ac:62: a4:02:45:50 -----BEGIN CERTIFICATE----- MIIFFjCCA/6gAwIBAgISAZkksbIvE0IF3M3qwTSANEzDMA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKGZmNDRkYmFjYTU2ZGFjMzE5NDAxZjY4YTUwZDkxN2Y1NDI0 NjExYWQwHhcNMjUwOTA3MTUwMDQ5WhcNMjUwOTA4MTUwMDQ5WjAzMTEwLwYDVQQD EygxYzFhY2NmNDliNWFmMGY4ZDM2MGE3MGM3OWIzNjViOGQyYWIwMjI5MIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEA8Jz3IcavT1UTyuY7FzbM55XoINdW ypikTTvnwMdLZwLSA7GaEMFwYp3FkcIlcrC+wKdrZ8Joiym91DYBLWpmzBY/bjeZ Vds6vERQnAY2c4aaQ7yLLPRW+86Hy/JIif2zBmSLfFO6S21ZFepmJ8CKcUZGCrzk 0LYPgJhOZn/mFPo6be//Qc/qk1286apqrynkzep1eNT1UmVH1Hn6rFw9dyUrDmwN wuir79gYsmJZhISg48flvpC5YwHIQefs7TLHBQb0Euc8qKmfYwwM0fBGnVpjXhge zA0DEs+RSgGPYCfni7fgBs+Sx6MEyxmDkA/mYXgmrSpJBvcppurq6BPkZwIDAQAB o4ICIjCCAh4wHQYDVR0OBBYEFBwazPSbWvD402CnDHmzZbjSqwIpMB8GA1UdIwQY MBaAFP9E26ylbawxlAH2ilDZF/VCRhGtMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvXzBUYnJLVnRyREdVQWZhS1VOa1g5VUpHRWEwLmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC80Zi81M2E5NDctZmQwMy00MDE0LTk4Mjct YzVkODk1MDgxOGVjLzEvXzBUYnJLVnRyREdVQWZhS1VOa1g5VUpHRWEwLm1mdDCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC80Zi81M2E5NDctZmQwMy00MDE0LTk4MjctYzVkODk1MDgxOGVj LzEvXzBUYnJLVnRyREdVQWZhS1VOa1g5VUpHRWEwLmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAYDeJ0vXI +0BVX/qx/it4z7QBCVLZ21HzRYFyaNu0ccyPmiGWluzT/n7gkySijaKN+Tp08xRB 8W/3+OGL+d1I04SgORTphE/Ntg64BirRJIhQJQXdV40NqVxl3r4puVTDVWE6rcg9 98urZ3dz9SYtjqb6Thb9AzqLOSGDYrFV3TW+PJPuh73901e97UrNCL5wdVILFmVj Z4PfrAsErzd2cC3xYEVGfhfnyQT9iU07/+Zk9zGRNOptxy4z+vTTlooBDG60vSuh 5KEijrWNsErgr6IZCUGJD7yALPlBkBUn52dXBA6Cr+tl5ePXj7V5SzNltGC2JFJp 5BVkA6xipAJFUA== -----END CERTIFICATE-----Generated at Mon Sep 8 00:11:21 2025 by rpki-client