$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/4f/9437a2-07e6-4e6a-aa3f-965d6d603bfa/1/1-CVUqFakIrBhrmTFd2MPkdQIzUo.mft File: 1-CVUqFakIrBhrmTFd2MPkdQIzUo.mft (raw, json) Hash identifier: xNAgX0oENj4ZhHTchl/ugj9D3uzxhF9057HZlKI6hcE= Subject key identifier: C3:8B:24:D9:82:4E:52:F3:96:89:26:DA:C6:AF:0E:D6:DF:4C:E4:99 Authority key identifier: F8:25:54:A8:56:A4:22:B0:61:AE:64:C5:77:63:0F:91:D4:08:CD:4A Certificate issuer: /CN=f82554a856a422b061ae64c577630f91d408cd4a Certificate serial: 019931FF0EC0365597F329BF3ED61F19CB1D Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/1-CVUqFakIrBhrmTFd2MPkdQIzUo.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/4f/9437a2-07e6-4e6a-aa3f-965d6d603bfa/1/1-CVUqFakIrBhrmTFd2MPkdQIzUo.mft Manifest number: 167E Signing time: Wed 10 Sep 2025 05:00:22 +0000 Manifest this update: Wed 10 Sep 2025 05:00:22 +0000 Manifest next update: Thu 11 Sep 2025 05:00:22 +0000 Files and hashes: 1: 1-CVUqFakIrBhrmTFd2MPkdQIzUo.crl (hash: hoa7OVuh68Y/GubXI7OvWLYFwH5+gDS4x2PHUihPZNc=) 2: 8yyknMa8Qa7eji2_-25NgjHMwAs.roa (hash: 6EA1L4yNjiFkAAM6t2iZAA7ze8SV3lMCUhKNPg3vBUQ=) 3: 9QjCjG8fGXKK3KT9GGHW6MAVJzE.roa (hash: fSpz8n2jWyy0I2DDmxohRpaljlrP9nL5ZtLGzLKYuXU=) 4: H7En3yY1mH2yRYS167HpwA6AL5Q.roa (hash: FPJfC/52NavOyoGt4vZ9gio4MoEgpYKiZrTtURDieXE=) 5: K4UoliAJDnPT2oq72AyXanTYwdo.roa (hash: +5dNWwnlyTnn33FOhd8BsjDiWGBw/K7XK9sbIa7ROKQ=) 6: WjTYhnjd8JZNKcEGGyvScBW7ujg.roa (hash: xm9/rrII6hlVm8eUope1QTZ7F33LVLrGkQUEXzf0iIk=) 7: aWWA3-Hs7ng_GCTHIDmwQ5Rjbdg.roa (hash: isC8RltnKP3pjrz7ZvAls/aB0WZTll6Skvt9xKP3UkI=) 8: fPjaiW_RQVaw1K0jco_QmLpGo5s.roa (hash: agQGyFSnSoUI1Vx0MTRN/i+hHcE0hyBre8ShGUX7keA=) 9: sERIvqHcZj2yU32m6o5QSyQReME.roa (hash: cfxbkVfwNX0hfImDTJjGC48Jbi/ZuYY11AKoePEqH8k=) 10: zTLxL4slk5kZQfWpH_PY-TD7nNM.roa (hash: tzDHOIgeKhCjAOTBNpSwMn6WduYNfsmvzrDJbeHe5/Y=) Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/4f/9437a2-07e6-4e6a-aa3f-965d6d603bfa/1/1-CVUqFakIrBhrmTFd2MPkdQIzUo.crl rsync://rpki.ripe.net/repository/DEFAULT/4f/9437a2-07e6-4e6a-aa3f-965d6d603bfa/1/1-CVUqFakIrBhrmTFd2MPkdQIzUo.mft rsync://rpki.ripe.net/repository/DEFAULT/1-CVUqFakIrBhrmTFd2MPkdQIzUo.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Thu 11 Sep 2025 02:00:22 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:99:31:ff:0e:c0:36:55:97:f3:29:bf:3e:d6:1f:19:cb:1d Signature Algorithm: sha256WithRSAEncryption Issuer: CN=f82554a856a422b061ae64c577630f91d408cd4a Validity Not Before: Sep 10 05:00:22 2025 GMT Not After : Sep 11 05:00:22 2025 GMT Subject: CN=c38b24d9824e52f3968926dac6af0ed6df4ce499 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:ba:74:d4:21:bd:a7:41:33:0f:96:a5:3b:0d:b8: 80:49:bc:f5:8d:a3:80:1a:b4:21:b2:fe:59:16:54: 4b:20:c9:ee:ca:88:0b:52:ad:9d:ae:2d:1a:aa:2c: 26:c7:ff:ac:64:0b:fd:a8:43:65:f0:f1:9a:10:af: 99:32:7f:64:47:54:04:cc:f2:9c:f6:17:c4:da:c7: 32:cb:bf:d6:18:d4:10:81:af:e7:1f:0d:57:d2:37: b6:c7:89:d5:4d:51:88:62:47:6d:cb:1f:76:ce:8e: 39:0b:7b:d7:bf:12:7d:84:9b:7e:3e:68:ac:a0:48: 7c:20:87:b8:f0:f0:5b:d5:0a:65:a2:06:91:a4:ef: 7f:de:3d:0b:22:37:b1:fa:86:80:20:eb:9e:14:0c: 52:4c:5e:cf:98:ae:89:77:3d:48:c0:f3:1f:98:65: ef:c5:9a:e0:d6:ba:43:fa:c9:61:0c:92:43:ae:4a: 9d:7e:b3:1a:d2:9f:3e:95:d7:63:13:a9:7b:6b:fb: 28:5b:77:14:18:a0:b7:e7:19:fe:4c:00:9b:b5:ee: 37:60:c1:47:c9:9c:eb:73:5f:ce:01:b0:a0:b0:03: 0f:05:a2:ca:92:0b:6e:a9:4d:e8:d7:8f:bd:0b:4d: 8f:18:e2:29:f3:f1:bd:d0:6d:2a:4f:e6:93:67:7e: f7:87 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: C3:8B:24:D9:82:4E:52:F3:96:89:26:DA:C6:AF:0E:D6:DF:4C:E4:99 X509v3 Authority Key Identifier: keyid:F8:25:54:A8:56:A4:22:B0:61:AE:64:C5:77:63:0F:91:D4:08:CD:4A X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/1-CVUqFakIrBhrmTFd2MPkdQIzUo.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/4f/9437a2-07e6-4e6a-aa3f-965d6d603bfa/1/1-CVUqFakIrBhrmTFd2MPkdQIzUo.mft X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/4f/9437a2-07e6-4e6a-aa3f-965d6d603bfa/1/1-CVUqFakIrBhrmTFd2MPkdQIzUo.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption a0:c4:6b:d7:28:25:63:32:46:e4:0f:c7:85:cb:b6:d2:59:91: c8:dd:bb:51:3f:62:b1:7c:2e:af:b1:f7:3c:03:32:9f:5e:b1: 43:68:7a:9b:d0:34:74:c5:4f:ad:af:8e:46:e2:ca:82:7a:0b: d6:cf:b1:f1:36:85:20:e5:79:90:86:df:5a:ce:23:f4:5a:41: 10:59:ba:c5:06:3c:a2:94:f4:04:1d:0b:31:64:4f:44:8d:ba: ce:d5:c8:c8:60:03:6b:3d:62:e1:34:02:6f:ae:ef:8f:99:ff: 26:74:a8:67:e5:2a:6d:ab:0b:91:29:34:c9:eb:1a:81:91:5e: 36:b7:5c:08:b9:3f:30:62:7c:d6:4a:70:05:9b:67:75:9d:66: 0c:11:13:40:79:a8:20:6f:3c:2a:e7:b8:ce:b5:a0:e4:72:a5: ca:1d:e5:f1:ef:16:6f:56:7e:ed:f6:29:c7:af:93:e0:dc:20: d7:04:c1:a9:64:84:45:c7:a1:31:2b:5c:dc:b6:9a:b3:53:d7: 4a:01:07:2f:25:37:22:e4:3f:e8:a5:5f:5c:9b:83:b7:58:86: 00:de:c6:43:20:b0:1e:b3:1f:05:bc:ce:a4:0f:73:fd:cf:d9: 73:3e:e9:3a:85:05:1e:9d:9c:4a:1b:d5:bf:c2:f0:9b:56:dc: 01:33:9a:3d -----BEGIN CERTIFICATE----- MIIFGTCCBAGgAwIBAgISAZkx/w7ANlWX8ym/PtYfGcsdMA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKGY4MjU1NGE4NTZhNDIyYjA2MWFlNjRjNTc3NjMwZjkxZDQw OGNkNGEwHhcNMjUwOTEwMDUwMDIyWhcNMjUwOTExMDUwMDIyWjAzMTEwLwYDVQQD EyhjMzhiMjRkOTgyNGU1MmYzOTY4OTI2ZGFjNmFmMGVkNmRmNGNlNDk5MIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAunTUIb2nQTMPlqU7DbiASbz1jaOA GrQhsv5ZFlRLIMnuyogLUq2dri0aqiwmx/+sZAv9qENl8PGaEK+ZMn9kR1QEzPKc 9hfE2scyy7/WGNQQga/nHw1X0je2x4nVTVGIYkdtyx92zo45C3vXvxJ9hJt+Pmis oEh8IIe48PBb1QplogaRpO9/3j0LIjex+oaAIOueFAxSTF7PmK6Jdz1IwPMfmGXv xZrg1rpD+slhDJJDrkqdfrMa0p8+lddjE6l7a/soW3cUGKC35xn+TACbte43YMFH yZzrc1/OAbCgsAMPBaLKkgtuqU3o14+9C02PGOIp8/G90G0qT+aTZ373hwIDAQAB o4ICJTCCAiEwHQYDVR0OBBYEFMOLJNmCTlLzlokm2savDtbfTOSZMB8GA1UdIwQY MBaAFPglVKhWpCKwYa5kxXdjD5HUCM1KMA4GA1UdDwEB/wQEAwIHgDBlBggrBgEF BQcBAQRZMFcwVQYIKwYBBQUHMAKGSXJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvMS1DVlVxRmFrSXJCaHJtVEZkMk1Qa2RRSXpVby5jZXIw gY4GCCsGAQUFBwELBIGBMH8wfQYIKwYBBQUHMAuGcXJzeW5jOi8vcnBraS5yaXBl Lm5ldC9yZXBvc2l0b3J5L0RFRkFVTFQvNGYvOTQzN2EyLTA3ZTYtNGU2YS1hYTNm LTk2NWQ2ZDYwM2JmYS8xLzEtQ1ZVcUZha0lyQmhybVRGZDJNUGtkUUl6VW8ubWZ0 MIGCBgNVHR8EezB5MHegdaBzhnFyc3luYzovL3Jwa2kucmlwZS5uZXQvcmVwb3Np dG9yeS9ERUZBVUxULzRmLzk0MzdhMi0wN2U2LTRlNmEtYWEzZi05NjVkNmQ2MDNi ZmEvMS8xLUNWVXFGYWtJckJocm1URmQyTVBrZFFJelVvLmNybDAYBgNVHSABAf8E DjAMMAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgAC BQAwFQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAoMRr 1yglYzJG5A/Hhcu20lmRyN27UT9isXwur7H3PAMyn16xQ2h6m9A0dMVPra+ORuLK gnoL1s+x8TaFIOV5kIbfWs4j9FpBEFm6xQY8opT0BB0LMWRPRI26ztXIyGADaz1i 4TQCb67vj5n/JnSoZ+UqbasLkSk0yesagZFeNrdcCLk/MGJ81kpwBZtndZ1mDBET QHmoIG88Kue4zrWg5HKlyh3l8e8Wb1Z+7fYpx6+T4Nwg1wTBqWSERcehMStc3Laa s1PXSgEHLyU3IuQ/6KVfXJuDt1iGAN7GQyCwHrMfBbzOpA9z/c/Zcz7pOoUFHp2c ShvVv8Lwm1bcATOaPQ== -----END CERTIFICATE-----Generated at Wed Sep 10 12:47:22 2025 by rpki-client