$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/56/efb8ee-c5c4-4467-a0cc-88a3c41faee2/1/q4xsWLYH_yOucXWmFoLHVIDx4hQ.mft File: q4xsWLYH_yOucXWmFoLHVIDx4hQ.mft (raw, json) Hash identifier: uGSS3E6UhWevRrlsxqJ23tMPeRmLCym6i+Au2aLAbdw= Subject key identifier: B4:DF:8B:27:FB:ED:C5:05:2A:AC:54:35:3E:08:85:2D:B7:22:A2:0F Authority key identifier: AB:8C:6C:58:B6:07:FF:23:AE:71:75:A6:16:82:C7:54:80:F1:E2:14 Certificate issuer: /CN=ab8c6c58b607ff23ae7175a61682c75480f1e214 Certificate serial: 019933B738B4711AA5F5D67C13C3E81D3CAF Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/q4xsWLYH_yOucXWmFoLHVIDx4hQ.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/56/efb8ee-c5c4-4467-a0cc-88a3c41faee2/1/q4xsWLYH_yOucXWmFoLHVIDx4hQ.mft Manifest number: 1388 Signing time: Wed 10 Sep 2025 13:01:09 +0000 Manifest this update: Wed 10 Sep 2025 13:01:09 +0000 Manifest next update: Thu 11 Sep 2025 13:01:09 +0000 Files and hashes: 1: Ay4048oOGOLd8W5gLDDEAyTF8CE.roa (hash: NXsQAFwkRa/GC3TqDmqhOZeN3qNn6FtRxq658PxTeSo=) 2: EbvXq4EM8hAgSkGiFLRqaY-G0EU.roa (hash: zajtrIP7Ewp9NW7IyVXFEVPjCtiQ0d/m581bkbpxnPI=) 3: FDdC23f-QMX8x6wvwKf2MaftED4.roa (hash: h9m2qsiGkrW+4l59GNkStG6h59aEcnuwE/KLJqr7Cgk=) 4: FHjjaCL7QaSxR7Yf_uDdz3cQhuA.roa (hash: Brv6WLVF3QRBSayqPg/J2H5JWwF8VVYLp0UA1sg3bSA=) 5: GanbvvtqSZENbmIdtfbYun4fuOo.roa (hash: a9IMBYKg4BFPWfGPrEQ1nIFRtJtRWqf5txg0Sr68Odk=) 6: HeWtxOQwTN1uf0xfcq_bZw71XkA.roa (hash: Q3cAdwW00NmkMkDNixCTZhHEBzWnPkDYpvdoFVzzSP4=) 7: LPXBlOJ83SUZetduCUkP3lDmZb8.roa (hash: Xahh/YPbtY5jZR0nw8MkUj4SXBdb+qHLE/N+aHg/zLg=) 8: MBaWylrBVCifHO75NhqX3hwA3gI.roa (hash: rBGbEwve3PVfVzEgeSB6FNde2V4Ej5oriQNU2JdSej4=) 9: TNZjVfkoPHNGWuPROUhTApW2tS4.roa (hash: HeS2ECV8xSlPFS6ZfzpvaJlw7gUvm2q+HDJoDgc0tag=) 10: VEkecCYWX-3eJbHzfXRPqIguSrU.roa (hash: y+HxKa51lXccWcF8YAwZEEpBtkvi4YQc9qp84HUBYjU=) 11: bJOubptyDCUoksZUBTEQqGVmM9c.roa (hash: 5AtXcXlAprhgr08DWqOvaQo1UWB8kRpiaZt7z80DD44=) 12: gY7ZGvPzoH-CX9GeUSTzaqQXovY.roa (hash: 2Y8QhFV1RfXgwz+9zPSSImXIf02O6QwrVpawBy0GOpo=) 13: j5_CqMmkt1DG3j-liA9ojTF-2zk.roa (hash: 9/Skv7dfWWCpzLOyfdQVA/mAMx0mIp9bCVvdrEzkMLY=) 14: ktsWW1aNW0Ka2r1y8DatRgdAjnQ.roa (hash: B9kQb2mez0Ho2ienkmxwkosyQ4vYDt/9bZEi638La00=) 15: pWYX2715Q-5BkbFDg0Sh9v9WvPs.roa (hash: TgnvC3W5sZgU6RXpmwyf5MNyrmOzs/Lefze2pwDj6yc=) 16: pdqJCRLiJ7NUW64tDbwue3bHfpU.roa (hash: ljeRCKKswXVLuB5MoRwzN0UCpzG2Fbx/CHdpqjKSohM=) 17: q4xsWLYH_yOucXWmFoLHVIDx4hQ.crl (hash: iPBdhX+yQW+fmQGViDjBWGHx2DqhXpcsrWFVOi7oV+8=) 18: tuLu-KxTyWECQsa7jsPHvbBC7-c.roa (hash: sICitbN0hdJLsCXmDSmpQhmRlzSQyxGdXNXHPCYmLv0=) Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/56/efb8ee-c5c4-4467-a0cc-88a3c41faee2/1/q4xsWLYH_yOucXWmFoLHVIDx4hQ.crl rsync://rpki.ripe.net/repository/DEFAULT/56/efb8ee-c5c4-4467-a0cc-88a3c41faee2/1/q4xsWLYH_yOucXWmFoLHVIDx4hQ.mft rsync://rpki.ripe.net/repository/DEFAULT/q4xsWLYH_yOucXWmFoLHVIDx4hQ.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Thu 11 Sep 2025 11:00:33 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:99:33:b7:38:b4:71:1a:a5:f5:d6:7c:13:c3:e8:1d:3c:af Signature Algorithm: sha256WithRSAEncryption Issuer: CN=ab8c6c58b607ff23ae7175a61682c75480f1e214 Validity Not Before: Sep 10 13:01:09 2025 GMT Not After : Sep 11 13:01:09 2025 GMT Subject: CN=b4df8b27fbedc5052aac54353e08852db722a20f Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:c7:3c:61:f0:86:10:d6:4f:3a:2b:88:60:b1:d5: 0a:3b:0a:2f:67:89:c4:8c:f7:53:fd:cf:9d:5b:5b: 07:77:a3:b2:41:d1:87:52:5f:ad:a5:c7:99:aa:96: ec:f2:e1:52:51:be:4e:3d:27:78:44:3f:d7:8d:30: aa:72:21:b6:c4:6d:b2:1b:75:f8:c7:b6:e7:8e:39: 0a:8d:6d:5c:8b:70:6d:f7:d8:0d:4f:eb:33:fc:35: ce:b4:11:5a:15:90:fa:06:39:48:3d:5a:f3:4d:a5: 31:8f:70:d6:6e:fa:0f:36:7c:e2:29:41:36:15:49: a7:59:f0:e3:77:c2:f9:38:f0:a5:7e:72:ba:f6:42: d1:13:d3:72:ac:ac:dc:cf:2a:90:60:60:c8:08:aa: af:36:89:11:9c:48:12:d4:f6:d0:78:66:c0:d2:7c: 72:b9:fc:86:9d:aa:38:95:df:1d:da:7d:bd:4f:22: 47:13:63:5f:3d:92:b9:89:12:84:a4:02:9a:02:69: 6c:80:1e:d0:c9:e2:b0:a4:80:97:9c:21:32:de:ec: 99:ef:e7:c5:45:4c:8a:9f:b3:8e:1f:eb:08:39:92: 61:2b:11:9a:c8:3d:b3:f3:64:7c:1c:9e:73:e1:a5: 5f:6d:44:96:5b:5d:3a:2c:aa:81:e6:ed:3a:80:3a: cd:15 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: B4:DF:8B:27:FB:ED:C5:05:2A:AC:54:35:3E:08:85:2D:B7:22:A2:0F X509v3 Authority Key Identifier: keyid:AB:8C:6C:58:B6:07:FF:23:AE:71:75:A6:16:82:C7:54:80:F1:E2:14 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/q4xsWLYH_yOucXWmFoLHVIDx4hQ.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/56/efb8ee-c5c4-4467-a0cc-88a3c41faee2/1/q4xsWLYH_yOucXWmFoLHVIDx4hQ.mft X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/56/efb8ee-c5c4-4467-a0cc-88a3c41faee2/1/q4xsWLYH_yOucXWmFoLHVIDx4hQ.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption c9:d6:d6:aa:01:4c:37:dc:dd:73:17:23:2c:6b:da:ac:cc:d5: df:14:84:45:20:6e:5b:65:20:a6:56:b2:c0:64:4a:6e:96:dd: a4:49:f0:bb:37:03:13:aa:4e:47:7b:cd:42:fc:76:dd:29:c1: 1d:c6:9f:65:59:18:83:5f:c9:d8:ed:f1:d7:5b:a8:c1:2d:98: 55:ee:64:68:7f:7d:8e:99:f3:c8:db:3d:57:ba:71:40:76:e5: 90:0a:3e:ca:2f:63:e9:77:27:cd:75:3f:15:e9:de:bb:49:eb: 0f:c8:2b:8d:91:66:84:ac:bf:1e:7f:ab:65:1a:a9:b7:97:84: 16:b0:32:35:4c:33:23:14:14:e6:01:97:2a:06:34:13:b3:16: 90:ad:1a:73:a4:e9:7b:f8:0e:41:54:ab:70:6c:e2:65:42:fc: a8:12:b0:57:44:c5:3d:57:6e:4b:70:70:2d:de:f8:57:3a:b6: 2c:11:3f:14:f3:c1:47:86:3c:b5:d8:e3:8c:44:52:d3:39:3c: b4:c1:da:e6:11:85:a4:6f:f4:0a:bb:5e:e7:90:cc:9d:53:2a: a5:0f:85:86:a3:6b:dc:37:e4:04:9b:53:63:af:0a:bc:b9:28: f9:12:b1:ec:b5:17:83:4c:65:af:74:7e:17:57:db:c4:da:f0: 06:60:a0:2e -----BEGIN CERTIFICATE----- MIIFFjCCA/6gAwIBAgISAZkztzi0cRql9dZ8E8PoHTyvMA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKGFiOGM2YzU4YjYwN2ZmMjNhZTcxNzVhNjE2ODJjNzU0ODBm MWUyMTQwHhcNMjUwOTEwMTMwMTA5WhcNMjUwOTExMTMwMTA5WjAzMTEwLwYDVQQD EyhiNGRmOGIyN2ZiZWRjNTA1MmFhYzU0MzUzZTA4ODUyZGI3MjJhMjBmMIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAxzxh8IYQ1k86K4hgsdUKOwovZ4nE jPdT/c+dW1sHd6OyQdGHUl+tpceZqpbs8uFSUb5OPSd4RD/XjTCqciG2xG2yG3X4 x7bnjjkKjW1ci3Bt99gNT+sz/DXOtBFaFZD6BjlIPVrzTaUxj3DWbvoPNnziKUE2 FUmnWfDjd8L5OPClfnK69kLRE9NyrKzczyqQYGDICKqvNokRnEgS1PbQeGbA0nxy ufyGnao4ld8d2n29TyJHE2NfPZK5iRKEpAKaAmlsgB7QyeKwpICXnCEy3uyZ7+fF RUyKn7OOH+sIOZJhKxGayD2z82R8HJ5z4aVfbUSWW106LKqB5u06gDrNFQIDAQAB o4ICIjCCAh4wHQYDVR0OBBYEFLTfiyf77cUFKqxUNT4IhS23IqIPMB8GA1UdIwQY MBaAFKuMbFi2B/8jrnF1phaCx1SA8eIUMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvcTR4c1dMWUhfeU91Y1hXbUZvTEhWSUR4NGhRLmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC81Ni9lZmI4ZWUtYzVjNC00NDY3LWEwY2Mt ODhhM2M0MWZhZWUyLzEvcTR4c1dMWUhfeU91Y1hXbUZvTEhWSUR4NGhRLm1mdDCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC81Ni9lZmI4ZWUtYzVjNC00NDY3LWEwY2MtODhhM2M0MWZhZWUy LzEvcTR4c1dMWUhfeU91Y1hXbUZvTEhWSUR4NGhRLmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAydbWqgFM N9zdcxcjLGvarMzV3xSERSBuW2UgplaywGRKbpbdpEnwuzcDE6pOR3vNQvx23SnB HcafZVkYg1/J2O3x11uowS2YVe5kaH99jpnzyNs9V7pxQHblkAo+yi9j6XcnzXU/ Feneu0nrD8grjZFmhKy/Hn+rZRqpt5eEFrAyNUwzIxQU5gGXKgY0E7MWkK0ac6Tp e/gOQVSrcGziZUL8qBKwV0TFPVduS3BwLd74Vzq2LBE/FPPBR4Y8tdjjjERS0zk8 tMHa5hGFpG/0Crte55DMnVMqpQ+FhqNr3DfkBJtTY68KvLko+RKx7LUXg0xlr3R+ F1fbxNrwBmCgLg== -----END CERTIFICATE-----Generated at Wed Sep 10 14:48:05 2025 by rpki-client