$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/56/f560e1-7840-4951-ab78-5001539d7185/1/i0eqCfLGEPb0S051wc2dzTiE5V0.mft File: i0eqCfLGEPb0S051wc2dzTiE5V0.mft (raw, json) Hash identifier: GbcMA7w/P1LMEsW3wXZPk7doSV9J9KcSBn5FY/BxGhQ= Subject key identifier: 2F:D2:45:36:CE:F8:60:14:5C:6D:85:99:31:DA:B3:3A:85:7F:05:CF Authority key identifier: 8B:47:AA:09:F2:C6:10:F6:F4:4B:4E:75:C1:CD:9D:CD:38:84:E5:5D Certificate issuer: /CN=8b47aa09f2c610f6f44b4e75c1cd9dcd3884e55d Certificate serial: 01993424B28B621ABB9AE29852DD30480849 Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/i0eqCfLGEPb0S051wc2dzTiE5V0.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/56/f560e1-7840-4951-ab78-5001539d7185/1/i0eqCfLGEPb0S051wc2dzTiE5V0.mft Manifest number: 06DA Signing time: Wed 10 Sep 2025 15:00:44 +0000 Manifest this update: Wed 10 Sep 2025 15:00:44 +0000 Manifest next update: Thu 11 Sep 2025 15:00:44 +0000 Files and hashes: 1: 1N4Y-cxz_J8zvyVIPn4xaQ56W2I.roa (hash: LqNoYMeIHUvi7e8ZqSiPD8gSQPNLvRqFi/MU8NW82NY=) 2: 59PndGiGSGsbZj2RG0Ycf2mhgxQ.roa (hash: 4mRCrakJ34q1MdXD9vBIYWH6H5pZIK2v8drs+brvjAI=) 3: 6WgYdehy91JaGiXTQ4-mtet9hKA.roa (hash: k18cYqD3ZZMZ5W+a0Kjw8aqcJhfy210LAE8xFma2X2Y=) 4: 8WJg0FCb2fzG2APxfD0StVJRyKc.roa (hash: arSq4+uVAQechawGJq1Vs4dcHHn6a2tT+IBa0xaymvM=) 5: 92bun2tsOlqTzcyAib4vRWOWAJI.roa (hash: qog6NgchB+Qp5J4zX/jN9xXAIWVyWEQCgqHENX4xl4I=) 6: TI__S_5wBSs76T2sPdddnNR3NI4.roa (hash: 1cgm9AfaKeKcFrBAUFYpRgSienV4cq0Pog28Pn4vsBo=) 7: _ITSv8iuWxYF6Xi3_Ud63eugcVA.roa (hash: e1oaUiU/1FwcsXzZfTfjISFOH22WsphA6YVaiUR+Z3Y=) 8: clWNFKcGPCSVI8IczoLVlzymSwE.roa (hash: kwC3djRgAXxGmhjo7j0gZC7YajpIcaKz89NjkpuMd6c=) 9: d_GmJYSiWtstngRCp4D-3Nytktc.roa (hash: b5QdQbGkypzupkHkl6NURfR0Tou888+YLeKDY72J/ww=) 10: i0eqCfLGEPb0S051wc2dzTiE5V0.crl (hash: GpJn7SZwalvOLod3Q1fR0bEEcvuveCxGP76x1Gj0hx4=) 11: vyRqPubr78kinBziiMEaPG49ruw.roa (hash: 9bi61mv9b1sVW+H/ztvpnoQsGJ5Kou6WnHLuM2n1U7U=) 12: xCwC0ruPjNW76bEQ25__qiX8bTI.roa (hash: /PNuMEC0HX9r4nNg0Hwe56qDotvTcrptdJE+VRq+wv0=) Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/56/f560e1-7840-4951-ab78-5001539d7185/1/i0eqCfLGEPb0S051wc2dzTiE5V0.crl rsync://rpki.ripe.net/repository/DEFAULT/56/f560e1-7840-4951-ab78-5001539d7185/1/i0eqCfLGEPb0S051wc2dzTiE5V0.mft rsync://rpki.ripe.net/repository/DEFAULT/i0eqCfLGEPb0S051wc2dzTiE5V0.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Thu 11 Sep 2025 11:00:33 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:99:34:24:b2:8b:62:1a:bb:9a:e2:98:52:dd:30:48:08:49 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=8b47aa09f2c610f6f44b4e75c1cd9dcd3884e55d Validity Not Before: Sep 10 15:00:44 2025 GMT Not After : Sep 11 15:00:44 2025 GMT Subject: CN=2fd24536cef860145c6d859931dab33a857f05cf Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:b2:95:b6:1f:8d:3c:f9:4b:41:21:8f:6e:5f:e5: 4a:af:4e:0d:63:ea:b3:d1:cf:3c:84:9f:54:c3:1e: e5:6c:2d:e4:64:aa:a5:f7:83:be:68:6b:4e:21:6a: c5:2f:a3:21:35:2b:6a:aa:34:72:1e:86:27:76:ea: 43:8d:3d:a4:dc:66:36:6b:9e:0b:35:ee:d1:c7:8a: d4:37:2e:50:2c:ae:5d:08:f0:76:04:b0:d9:73:ba: ac:2c:dd:a2:08:16:56:9b:46:aa:f5:c2:85:f9:ab: 1c:e8:a3:fd:e5:fe:4c:4b:6b:0a:f2:ad:7e:17:65: 02:f1:25:74:01:6c:ca:f8:21:07:0b:ac:01:9a:50: bb:ba:9f:85:27:92:de:92:03:f9:ef:c8:62:cd:41: f4:0a:e7:49:f9:f8:7a:3e:ef:f1:84:93:43:e2:08: 14:8b:ba:49:69:e1:a5:35:e6:3c:56:96:14:ee:20: 0a:ed:0d:65:72:57:1b:3b:5e:87:ef:e5:52:a3:42: 60:14:5b:3d:c3:03:b8:d7:23:5b:5c:ab:e2:14:e0: 55:20:3f:e0:91:bb:e3:3c:cc:83:34:fc:d2:46:e1: 46:fd:10:ad:a8:53:57:2f:47:44:29:e1:02:cd:5e: 19:37:81:c7:80:66:67:7b:b0:1d:89:a8:99:72:cf: 6d:bb Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 2F:D2:45:36:CE:F8:60:14:5C:6D:85:99:31:DA:B3:3A:85:7F:05:CF X509v3 Authority Key Identifier: keyid:8B:47:AA:09:F2:C6:10:F6:F4:4B:4E:75:C1:CD:9D:CD:38:84:E5:5D X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/i0eqCfLGEPb0S051wc2dzTiE5V0.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/56/f560e1-7840-4951-ab78-5001539d7185/1/i0eqCfLGEPb0S051wc2dzTiE5V0.mft X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/56/f560e1-7840-4951-ab78-5001539d7185/1/i0eqCfLGEPb0S051wc2dzTiE5V0.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 0d:3e:bd:75:c2:40:21:1a:06:00:7a:e0:bd:f2:ca:3e:c4:17: 6d:80:56:83:99:33:df:b5:70:2c:a6:d9:58:34:73:26:37:7a: 29:ac:35:05:6a:e4:50:13:7a:ba:d4:6c:d4:b4:70:27:8e:be: 2a:e4:6e:88:f8:cf:fb:59:5a:62:c8:f8:d5:dc:f8:25:84:cd: 39:89:1f:df:da:06:39:de:ec:a3:56:ff:05:52:31:88:60:68: c2:84:fd:65:0c:90:2f:1a:dd:28:14:fd:a3:bf:29:03:3f:4e: 74:f3:c5:20:6a:09:55:70:d4:77:c6:9b:b5:bf:60:83:f6:31: 65:d6:b8:a7:30:40:5c:63:d7:ec:69:e0:55:95:6a:4e:25:9b: 0b:c2:57:4a:d1:20:52:1b:44:30:5b:d5:dd:00:ca:9e:87:7b: 2e:28:61:82:90:8c:c4:8e:f3:8b:87:54:12:e5:84:dc:ce:c0: 05:e2:26:63:46:b6:34:32:2a:6a:0e:f5:7d:ac:cd:29:26:a7: 9b:26:f2:33:ee:94:7e:77:e2:19:d0:ce:9c:f2:25:79:10:b8: d7:55:70:ba:f3:be:a6:95:a4:2d:d9:25:69:fe:d6:3d:78:f7: b3:c1:a7:12:24:61:77:be:da:b8:e1:e1:f8:9f:2f:5c:41:d7: df:bb:1e:b2 -----BEGIN CERTIFICATE----- MIIFFjCCA/6gAwIBAgISAZk0JLKLYhq7muKYUt0wSAhJMA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKDhiNDdhYTA5ZjJjNjEwZjZmNDRiNGU3NWMxY2Q5ZGNkMzg4 NGU1NWQwHhcNMjUwOTEwMTUwMDQ0WhcNMjUwOTExMTUwMDQ0WjAzMTEwLwYDVQQD EygyZmQyNDUzNmNlZjg2MDE0NWM2ZDg1OTkzMWRhYjMzYTg1N2YwNWNmMIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAspW2H408+UtBIY9uX+VKr04NY+qz 0c88hJ9Uwx7lbC3kZKql94O+aGtOIWrFL6MhNStqqjRyHoYndupDjT2k3GY2a54L Ne7Rx4rUNy5QLK5dCPB2BLDZc7qsLN2iCBZWm0aq9cKF+asc6KP95f5MS2sK8q1+ F2UC8SV0AWzK+CEHC6wBmlC7up+FJ5LekgP578hizUH0CudJ+fh6Pu/xhJND4ggU i7pJaeGlNeY8VpYU7iAK7Q1lclcbO16H7+VSo0JgFFs9wwO41yNbXKviFOBVID/g kbvjPMyDNPzSRuFG/RCtqFNXL0dEKeECzV4ZN4HHgGZne7AdiaiZcs9tuwIDAQAB o4ICIjCCAh4wHQYDVR0OBBYEFC/SRTbO+GAUXG2FmTHaszqFfwXPMB8GA1UdIwQY MBaAFItHqgnyxhD29EtOdcHNnc04hOVdMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvaTBlcUNmTEdFUGIwUzA1MXdjMmR6VGlFNVYwLmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC81Ni9mNTYwZTEtNzg0MC00OTUxLWFiNzgt NTAwMTUzOWQ3MTg1LzEvaTBlcUNmTEdFUGIwUzA1MXdjMmR6VGlFNVYwLm1mdDCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC81Ni9mNTYwZTEtNzg0MC00OTUxLWFiNzgtNTAwMTUzOWQ3MTg1 LzEvaTBlcUNmTEdFUGIwUzA1MXdjMmR6VGlFNVYwLmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEADT69dcJA IRoGAHrgvfLKPsQXbYBWg5kz37VwLKbZWDRzJjd6Kaw1BWrkUBN6utRs1LRwJ46+ KuRuiPjP+1laYsj41dz4JYTNOYkf39oGOd7so1b/BVIxiGBowoT9ZQyQLxrdKBT9 o78pAz9OdPPFIGoJVXDUd8abtb9gg/YxZda4pzBAXGPX7GngVZVqTiWbC8JXStEg UhtEMFvV3QDKnod7LihhgpCMxI7zi4dUEuWE3M7ABeImY0a2NDIqag71fazNKSan mybyM+6UfnfiGdDOnPIleRC411VwuvO+ppWkLdklaf7WPXj3s8GnEiRhd77auOHh +J8vXEHX37sesg== -----END CERTIFICATE-----Generated at Wed Sep 10 21:09:59 2025 by rpki-client