$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/51/db26ba-754d-4118-be31-4b6c1cf9fe4f/1/3FxTLzzV4R4Z_rGWVdTxmSbwICA.mft File: 3FxTLzzV4R4Z_rGWVdTxmSbwICA.mft (raw, json) Hash identifier: De0PO6DB0hWzduXiFTcjQSCond/mWgkoERck/5Qm6SU= Subject key identifier: 7A:A8:AD:3D:A9:F4:EF:FE:1D:1E:A7:AE:05:07:BA:6F:CA:A4:CF:6D Authority key identifier: DC:5C:53:2F:3C:D5:E1:1E:19:FE:B1:96:55:D4:F1:99:26:F0:20:20 Certificate issuer: /CN=dc5c532f3cd5e11e19feb19655d4f19926f02020 Certificate serial: 019950AF1A6C8B8323CB21DECBAFEF9127F2 Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/3FxTLzzV4R4Z_rGWVdTxmSbwICA.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/51/db26ba-754d-4118-be31-4b6c1cf9fe4f/1/3FxTLzzV4R4Z_rGWVdTxmSbwICA.mft Manifest number: 04B4 Signing time: Tue 16 Sep 2025 04:01:16 +0000 Manifest this update: Tue 16 Sep 2025 04:01:16 +0000 Manifest next update: Wed 17 Sep 2025 04:01:16 +0000 Files and hashes: 1: 1-WZZnjR8DlZqLUibcRUcYzm0QDU.roa (hash: /lrkBjM9dGMr6D7JGPVc5syjsFBtCzanEGLfhb4dKM0=) 2: 3FxTLzzV4R4Z_rGWVdTxmSbwICA.crl (hash: 3fKOTdhoTDXog+RPUOCsx+5LBT0dBl+jM5vDAztUIJI=) 3: 3jZyUpaNiuxwzYQ21tChGVq7yOY.roa (hash: rlRJ/UNIhVQKGyw4Wr/cDFs+VO81jRk6SUephZD3g4o=) 4: 5khyx2A9d0Q0e3huYGosj5KCOlo.roa (hash: m/iIxHfeWDlWWpGAIqzgFb7iOcTekZb0i9Y2aBX+dy4=) 5: 7cUCY2EysYK09Y_F1tsMsp_B8MU.roa (hash: el4sZWuoJZOOcj14KO5Yq16IPPIz+c0KckgEteIx4YM=) 6: ILbeank0F3xhLsgBl0NZfpBZFig.roa (hash: 8RlSwtQK5lhGbhOtyX4cacpgfYuG3exGirW2aa5+FLI=) 7: KBQWtgPCMeq_IbONzoF64FnlzwE.roa (hash: EZ3seNeYjAQFpAfGwhXlV+Wya2vQO7lfYcVB84EkqA4=) 8: PBiom43THD1F1SBGVmDFN9WwnMo.roa (hash: EVRLL8Mxobz8XRwc26H2JAHWkuwMiYakvll8d/79CJQ=) 9: TnqWiZSrJP5FZLgDlXk-iaFi5k8.roa (hash: 8gjKeaSL9Im1mKl/CKczQDSLzI2OEBo3YD5qQoY5RT0=) 10: VXGu7cRy3TUPyfgbIf2vopAF1Lc.roa (hash: 40vRMPsPFPCFnDUP/ikEgH9v+gi1iVOQkLoxtLSkOqE=) 11: ZaSQVTZm2f4ebc71HIkhrpqqsuk.roa (hash: X8/L0T6q0bM6s++7u2MQIu4RlHWQNdJcKAvE7bH3VP4=) 12: jldP_NkgEKrLmFaYQtB6TuhGzRs.roa (hash: Cz3xmiLxKccg4wAv608JqhvYxIHIutFBcyhT8Ond0Zs=) 13: oQk2rT9-TmTMiTawX34MBI0QTrc.roa (hash: 6J7fvMBzz5wnq8Q655iOLvmHY5jKT0LznvTL3IrQ8Xw=) 14: unsmmkYBpbXrCubGO7XS6N7I7QM.roa (hash: /TaQOoUPP+hWic0pvVLJBHflkZLzIc8T4AFkDEL7yKk=) 15: w9Z-5nLehvUlBeOI2h5dSoEBLSw.roa (hash: dyC69X2s5yoLrmCLq7pBQHExLj0vbp1A/uwW5wlqEug=) Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/51/db26ba-754d-4118-be31-4b6c1cf9fe4f/1/3FxTLzzV4R4Z_rGWVdTxmSbwICA.crl rsync://rpki.ripe.net/repository/DEFAULT/51/db26ba-754d-4118-be31-4b6c1cf9fe4f/1/3FxTLzzV4R4Z_rGWVdTxmSbwICA.mft rsync://rpki.ripe.net/repository/DEFAULT/3FxTLzzV4R4Z_rGWVdTxmSbwICA.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Wed 17 Sep 2025 04:01:16 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:99:50:af:1a:6c:8b:83:23:cb:21:de:cb:af:ef:91:27:f2 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=dc5c532f3cd5e11e19feb19655d4f19926f02020 Validity Not Before: Sep 16 04:01:16 2025 GMT Not After : Sep 17 04:01:16 2025 GMT Subject: CN=7aa8ad3da9f4effe1d1ea7ae0507ba6fcaa4cf6d Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:b3:e0:5a:cc:78:4f:5c:07:18:1e:af:b4:aa:78: cf:ca:d8:56:d3:bd:cf:fa:2e:b7:ce:05:90:3d:5f: 13:3c:9f:f1:9e:01:26:1a:a6:b4:4c:08:e2:85:74: 12:c1:4b:9c:3b:4d:34:63:23:30:1f:6e:d7:1a:6e: 78:ef:10:4d:57:da:7b:d7:5a:82:f3:8d:45:25:94: 0b:0a:c9:bc:38:65:8d:96:9b:91:ef:f2:82:90:1b: b0:65:ad:60:3a:25:9b:38:7b:65:df:c8:6f:1a:53: a5:37:53:48:d7:be:e1:7d:32:d0:fd:a0:f1:8d:52: f1:fa:43:1f:21:66:e9:f3:1a:6e:22:33:ef:5d:96: 0c:3d:a9:86:02:91:28:2f:b6:95:7f:18:81:9d:7b: b7:da:fd:f6:58:89:ef:e7:14:fa:af:01:1a:0a:3c: 62:81:f4:5a:ab:38:58:ce:9e:0b:2f:f3:c7:53:4b: 67:9e:d0:f8:95:e7:43:e6:8c:d1:7a:53:22:a9:be: 44:e3:22:71:9a:b3:79:f5:7b:a3:d3:16:2d:75:7f: 5b:43:8d:b3:fb:3a:65:01:6f:82:f1:0b:3a:43:57: dd:de:81:cb:94:9f:02:63:98:d8:a5:b2:c4:ab:6e: cb:27:75:95:52:a3:46:2a:24:48:e7:af:83:3a:df: ee:05 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 7A:A8:AD:3D:A9:F4:EF:FE:1D:1E:A7:AE:05:07:BA:6F:CA:A4:CF:6D X509v3 Authority Key Identifier: keyid:DC:5C:53:2F:3C:D5:E1:1E:19:FE:B1:96:55:D4:F1:99:26:F0:20:20 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/3FxTLzzV4R4Z_rGWVdTxmSbwICA.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/51/db26ba-754d-4118-be31-4b6c1cf9fe4f/1/3FxTLzzV4R4Z_rGWVdTxmSbwICA.mft X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/51/db26ba-754d-4118-be31-4b6c1cf9fe4f/1/3FxTLzzV4R4Z_rGWVdTxmSbwICA.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 99:c7:b1:3e:49:68:57:88:5f:c0:5b:b4:41:1e:58:00:23:b9: 34:67:b3:8f:39:7a:a2:77:66:90:39:ec:6d:72:90:4e:d3:96: 05:66:c9:00:82:0b:a4:80:2a:57:4f:1f:33:05:a4:a0:3c:de: a4:fe:94:4f:12:67:80:91:e1:9d:85:7d:28:db:36:c2:21:98: 4c:93:c9:29:6b:82:59:63:0d:fc:b8:e7:18:ec:a6:f6:1c:5c: 65:10:24:e9:29:fd:08:66:00:02:e2:ca:b9:eb:e1:8e:e4:32: 3b:54:c7:1e:3a:0b:d6:69:48:9b:5a:b9:57:5a:fc:58:05:b3: ba:40:3e:8e:c2:38:ce:3a:db:b8:6d:9e:bd:0d:bc:a9:6c:17: 4d:f7:76:db:8a:2e:a9:21:fd:8a:1b:c5:80:98:e1:8c:0a:2d: db:60:e9:5c:6f:1f:70:f9:92:f1:31:53:65:28:c8:72:a9:bc: cd:2a:ac:b3:e0:98:58:96:b9:29:4a:b6:a2:2c:75:64:b4:4b: 78:1d:7a:b0:18:9d:d2:d7:6c:67:05:06:cb:80:27:ce:6a:39: 7d:17:41:27:69:6f:84:93:6d:09:82:a7:36:48:e6:8e:68:dc: 75:c0:99:3a:fb:b4:a8:62:1c:b2:c5:bb:c4:f4:47:12:ea:03: aa:85:a8:7b -----BEGIN CERTIFICATE----- MIIFFjCCA/6gAwIBAgISAZlQrxpsi4MjyyHey6/vkSfyMA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKGRjNWM1MzJmM2NkNWUxMWUxOWZlYjE5NjU1ZDRmMTk5MjZm MDIwMjAwHhcNMjUwOTE2MDQwMTE2WhcNMjUwOTE3MDQwMTE2WjAzMTEwLwYDVQQD Eyg3YWE4YWQzZGE5ZjRlZmZlMWQxZWE3YWUwNTA3YmE2ZmNhYTRjZjZkMIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAs+BazHhPXAcYHq+0qnjPythW073P +i63zgWQPV8TPJ/xngEmGqa0TAjihXQSwUucO000YyMwH27XGm547xBNV9p711qC 841FJZQLCsm8OGWNlpuR7/KCkBuwZa1gOiWbOHtl38hvGlOlN1NI177hfTLQ/aDx jVLx+kMfIWbp8xpuIjPvXZYMPamGApEoL7aVfxiBnXu32v32WInv5xT6rwEaCjxi gfRaqzhYzp4LL/PHU0tnntD4ledD5ozRelMiqb5E4yJxmrN59Xuj0xYtdX9bQ42z +zplAW+C8Qs6Q1fd3oHLlJ8CY5jYpbLEq27LJ3WVUqNGKiRI56+DOt/uBQIDAQAB o4ICIjCCAh4wHQYDVR0OBBYEFHqorT2p9O/+HR6nrgUHum/KpM9tMB8GA1UdIwQY MBaAFNxcUy881eEeGf6xllXU8Zkm8CAgMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvM0Z4VEx6elY0UjRaX3JHV1ZkVHhtU2J3SUNBLmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC81MS9kYjI2YmEtNzU0ZC00MTE4LWJlMzEt NGI2YzFjZjlmZTRmLzEvM0Z4VEx6elY0UjRaX3JHV1ZkVHhtU2J3SUNBLm1mdDCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC81MS9kYjI2YmEtNzU0ZC00MTE4LWJlMzEtNGI2YzFjZjlmZTRm LzEvM0Z4VEx6elY0UjRaX3JHV1ZkVHhtU2J3SUNBLmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAmcexPklo V4hfwFu0QR5YACO5NGezjzl6ondmkDnsbXKQTtOWBWbJAIILpIAqV08fMwWkoDze pP6UTxJngJHhnYV9KNs2wiGYTJPJKWuCWWMN/LjnGOym9hxcZRAk6Sn9CGYAAuLK uevhjuQyO1THHjoL1mlIm1q5V1r8WAWzukA+jsI4zjrbuG2evQ28qWwXTfd224ou qSH9ihvFgJjhjAot22DpXG8fcPmS8TFTZSjIcqm8zSqss+CYWJa5KUq2oix1ZLRL eB16sBid0tdsZwUGy4Anzmo5fRdBJ2lvhJNtCYKnNkjmjmjcdcCZOvu0qGIcssW7 xPRHEuoDqoWoew== -----END CERTIFICATE-----Generated at Tue Sep 16 10:46:17 2025 by rpki-client