$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/57/3b51b8-10c6-438b-a120-15f13e3f7d85/1/2Cy0PKPAxXgWzuNgR40M-IIgf9I.mft File: 2Cy0PKPAxXgWzuNgR40M-IIgf9I.mft (raw, json) Hash identifier: mfhSIuul1J4yu2/I2eZDjgigKlFJplbTMhzd/KkuOjU= Subject key identifier: 9A:42:97:6C:E3:F1:0A:66:01:F6:84:43:F5:15:0F:5B:89:21:4A:6F Authority key identifier: D8:2C:B4:3C:A3:C0:C5:78:16:CE:E3:60:47:8D:0C:F8:82:20:7F:D2 Certificate issuer: /CN=d82cb43ca3c0c57816cee360478d0cf882207fd2 Certificate serial: 01993047FF923A67B9C0E604612A07935D24 Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/2Cy0PKPAxXgWzuNgR40M-IIgf9I.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/57/3b51b8-10c6-438b-a120-15f13e3f7d85/1/2Cy0PKPAxXgWzuNgR40M-IIgf9I.mft Manifest number: 052A Signing time: Tue 09 Sep 2025 21:00:48 +0000 Manifest this update: Tue 09 Sep 2025 21:00:48 +0000 Manifest next update: Wed 10 Sep 2025 21:00:48 +0000 Files and hashes: 1: 2Cy0PKPAxXgWzuNgR40M-IIgf9I.crl (hash: k3eqOsFyjFyFc/uVhhbBeE2L7C4o2XuS2BihCpMWFjk=) 2: 3NKK36OzbyCVvAW6QnBXCk0vC-E.roa (hash: gHjjORGkqgV1v9V5gvG+Gu8C2uJp9VohURGk9hhqXCY=) 3: DWnysDNu_v7yNNJ1aIjDqps-5LM.roa (hash: JPD53SzaSyMUMEmsWnAbUrfvGclz72WlfPM6q3RIsCk=) 4: RaE5smqHwTpdBVtd89_5CUvQKsE.roa (hash: UtehD4VO0l8o+LKAy2Z/geys1UM7QHPafm/iIQaT0/U=) 5: SOWcqaYhZ7YX4OOHhJe96In9itw.roa (hash: UaSEArJ4Ty/99oB9k6ZnmXrGKJLGr0L+yE1xo+K6dEg=) 6: f7lR2qdNzNhMHZctwhySnx52rh8.roa (hash: uc/3dtcmzwA7XSJMfP+6pPiS8XT6tGwBC3iJr2Zlmhg=) 7: kcbMP36K9zR3OAqVvtstfD6Qc1E.roa (hash: kKzo7D93m1wQVJ52FPItkIqrFxN6fMh/dyqt/5KaXWw=) 8: ksCUkPPXGRQEiQCKOl3Wp67HpYk.roa (hash: Fa0gD5gnN233i5uopk4/0YW9tKdVwYrJaJzPk4e1vT4=) 9: p8WEIwXo7Clnw_lkUVuyGNIeOvM.roa (hash: Ur1mz6OTaNWSYai5Ah9bPYej/Ck8pv/XZW+9ZEpR3q8=) 10: qJyacpBlbWQwXSv5l4Lxk3gU7sA.roa (hash: A2lDMN5zFwbdpcFJxDl5a8uW8CFGyTpmaP19LpWfeHE=) 11: r9xTyNget5zcXlE9TLs7M3SNT04.roa (hash: AESrTW2Rp0Ova6EIN8mRWsiWri5RUSzYkj7e2h2UwnM=) 12: wBcaC1_PamN7lirmMN3fzCp6jH4.roa (hash: G/3j6WArnTAj7/DCB5dCgU40hqdUmgoP9O96RyuFd1M=) 13: wWRwvyrn-LAOgtkAhCo3MlchYWQ.roa (hash: Uba3h/vRuJ26W0MxcGsxkEurmXFyfeD+ONZVIUG7QEM=) 14: xQ1rwm6oO8jHA9kZhQvVDEfMToU.roa (hash: rR/azYUh2GUL8HTdYkb3GDWX8S5vRgxNHhornEovZ9o=) Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/57/3b51b8-10c6-438b-a120-15f13e3f7d85/1/2Cy0PKPAxXgWzuNgR40M-IIgf9I.crl rsync://rpki.ripe.net/repository/DEFAULT/57/3b51b8-10c6-438b-a120-15f13e3f7d85/1/2Cy0PKPAxXgWzuNgR40M-IIgf9I.mft rsync://rpki.ripe.net/repository/DEFAULT/2Cy0PKPAxXgWzuNgR40M-IIgf9I.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Wed 10 Sep 2025 21:00:48 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:99:30:47:ff:92:3a:67:b9:c0:e6:04:61:2a:07:93:5d:24 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=d82cb43ca3c0c57816cee360478d0cf882207fd2 Validity Not Before: Sep 9 21:00:48 2025 GMT Not After : Sep 10 21:00:48 2025 GMT Subject: CN=9a42976ce3f10a6601f68443f5150f5b89214a6f Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:c5:9e:d7:1c:26:1e:fe:84:cf:7a:5e:25:ce:a8: 77:1f:92:57:49:6d:17:85:97:f6:51:d6:58:6d:03: dc:38:8e:c5:66:e6:c8:e3:95:80:d2:3f:03:a7:db: ce:43:be:b9:ba:bd:79:e2:03:67:e5:47:a3:50:be: bc:9c:63:75:1c:5d:c4:06:d2:28:ea:c5:cf:98:f6: c5:f6:b7:5f:3d:f0:9d:bf:0b:ce:d9:42:d6:53:c0: fe:20:19:f3:4a:6f:76:83:eb:90:80:d8:12:16:eb: 37:a2:72:be:2b:53:4d:f7:d1:a0:b4:cd:03:50:42: 2d:9e:cb:9e:fd:37:0e:f9:30:40:12:57:cd:56:73: 84:a9:63:06:57:d5:d5:90:5c:07:bd:0a:8f:c7:c9: b4:6a:05:f2:ad:4b:a7:97:1e:5a:ae:d1:10:77:cc: c9:86:0c:96:ae:ac:6d:f5:26:9e:27:ee:72:fa:8a: e2:9e:d9:8a:d2:68:08:16:66:f6:70:81:c0:53:20: 1b:91:2c:a6:78:2e:96:94:1b:a6:74:72:7b:a6:aa: 63:03:9b:ce:db:84:84:a7:fc:f1:07:92:91:49:7b: 60:b1:51:34:5d:33:2e:18:2b:85:6d:e8:da:35:02: c1:15:31:ef:b1:2e:13:e2:1a:ab:44:01:3b:3e:f1: fb:67 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 9A:42:97:6C:E3:F1:0A:66:01:F6:84:43:F5:15:0F:5B:89:21:4A:6F X509v3 Authority Key Identifier: keyid:D8:2C:B4:3C:A3:C0:C5:78:16:CE:E3:60:47:8D:0C:F8:82:20:7F:D2 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/2Cy0PKPAxXgWzuNgR40M-IIgf9I.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/57/3b51b8-10c6-438b-a120-15f13e3f7d85/1/2Cy0PKPAxXgWzuNgR40M-IIgf9I.mft X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/57/3b51b8-10c6-438b-a120-15f13e3f7d85/1/2Cy0PKPAxXgWzuNgR40M-IIgf9I.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 6b:65:e4:71:5d:45:59:ac:d6:c7:fc:50:33:93:c2:37:f1:21: 6c:75:f2:21:51:2b:96:c1:c7:19:ef:8b:6e:b1:da:36:03:47: 27:c8:aa:b4:41:62:8f:dc:9a:1c:37:dd:f2:21:93:15:32:75: 6b:08:a9:0f:9c:6d:4a:60:a8:c2:e9:aa:34:27:99:3b:e3:ea: 13:89:ff:54:6c:64:ef:b0:92:7a:fb:df:1b:1e:bb:de:09:7b: 93:dd:1f:6c:47:f8:57:31:dc:b6:5c:76:f0:a7:a9:6f:77:d4: c0:00:15:47:1d:4e:c3:84:bf:3f:16:b3:f4:04:c2:6e:e2:02: 43:d8:2f:98:16:07:bf:38:65:2b:1c:0c:63:97:f8:64:67:08: 68:f0:5b:af:2c:0e:a9:d4:76:87:e8:2f:4c:17:1e:b9:cd:8a: 44:a1:a9:dd:6f:42:fc:a0:3a:24:a0:0f:e2:11:30:6c:cd:c7: 43:1e:74:52:3d:6a:85:44:c3:11:4c:76:96:89:1e:f4:70:ab: ed:c5:d4:57:11:ab:09:c2:76:49:60:b7:03:4d:ab:c7:57:4a: 02:ee:a8:68:6d:67:2f:df:c2:e6:b5:fb:52:33:ed:a4:7a:4c: 6d:d7:9b:13:93:af:da:f7:e1:a1:21:46:08:33:56:50:e9:db: a8:04:b2:4e -----BEGIN CERTIFICATE----- MIIFFjCCA/6gAwIBAgISAZkwR/+SOme5wOYEYSoHk10kMA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKGQ4MmNiNDNjYTNjMGM1NzgxNmNlZTM2MDQ3OGQwY2Y4ODIy MDdmZDIwHhcNMjUwOTA5MjEwMDQ4WhcNMjUwOTEwMjEwMDQ4WjAzMTEwLwYDVQQD Eyg5YTQyOTc2Y2UzZjEwYTY2MDFmNjg0NDNmNTE1MGY1Yjg5MjE0YTZmMIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAxZ7XHCYe/oTPel4lzqh3H5JXSW0X hZf2UdZYbQPcOI7FZubI45WA0j8Dp9vOQ765ur154gNn5UejUL68nGN1HF3EBtIo 6sXPmPbF9rdfPfCdvwvO2ULWU8D+IBnzSm92g+uQgNgSFus3onK+K1NN99GgtM0D UEItnsue/TcO+TBAElfNVnOEqWMGV9XVkFwHvQqPx8m0agXyrUunlx5artEQd8zJ hgyWrqxt9SaeJ+5y+orintmK0mgIFmb2cIHAUyAbkSymeC6WlBumdHJ7pqpjA5vO 24SEp/zxB5KRSXtgsVE0XTMuGCuFbejaNQLBFTHvsS4T4hqrRAE7PvH7ZwIDAQAB o4ICIjCCAh4wHQYDVR0OBBYEFJpCl2zj8QpmAfaEQ/UVD1uJIUpvMB8GA1UdIwQY MBaAFNgstDyjwMV4Fs7jYEeNDPiCIH/SMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvMkN5MFBLUEF4WGdXenVOZ1I0ME0tSUlnZjlJLmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC81Ny8zYjUxYjgtMTBjNi00MzhiLWExMjAt MTVmMTNlM2Y3ZDg1LzEvMkN5MFBLUEF4WGdXenVOZ1I0ME0tSUlnZjlJLm1mdDCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC81Ny8zYjUxYjgtMTBjNi00MzhiLWExMjAtMTVmMTNlM2Y3ZDg1 LzEvMkN5MFBLUEF4WGdXenVOZ1I0ME0tSUlnZjlJLmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAa2XkcV1F WazWx/xQM5PCN/EhbHXyIVErlsHHGe+LbrHaNgNHJ8iqtEFij9yaHDfd8iGTFTJ1 awipD5xtSmCowumqNCeZO+PqE4n/VGxk77CSevvfGx673gl7k90fbEf4VzHctlx2 8Kepb3fUwAAVRx1Ow4S/Pxaz9ATCbuICQ9gvmBYHvzhlKxwMY5f4ZGcIaPBbrywO qdR2h+gvTBceuc2KRKGp3W9C/KA6JKAP4hEwbM3HQx50Uj1qhUTDEUx2loke9HCr 7cXUVxGrCcJ2SWC3A02rx1dKAu6oaG1nL9/C5rX7UjPtpHpMbdebE5Ov2vfhoSFG CDNWUOnbqASyTg== -----END CERTIFICATE-----Generated at Wed Sep 10 03:29:44 2025 by rpki-client