$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/59/86297a-d219-4567-9171-421e6bc7e2e8/1/4tW7QBGA5V9cFl1HkI3_T-KaDYY.mft File: 4tW7QBGA5V9cFl1HkI3_T-KaDYY.mft (raw, json) Hash identifier: wmNd2GiozTNs73P6XizzvGyF/DJhtelwHWv+LTTHsP4= Subject key identifier: 8D:FB:D3:D2:01:D3:4B:FA:66:30:BD:65:7B:46:07:99:4A:C4:C2:FF Authority key identifier: E2:D5:BB:40:11:80:E5:5F:5C:16:5D:47:90:8D:FF:4F:E2:9A:0D:86 Certificate issuer: /CN=e2d5bb401180e55f5c165d47908dff4fe29a0d86 Certificate serial: 01992D47428138B21C83C4A3CEF6737BC794 Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/4tW7QBGA5V9cFl1HkI3_T-KaDYY.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/59/86297a-d219-4567-9171-421e6bc7e2e8/1/4tW7QBGA5V9cFl1HkI3_T-KaDYY.mft Manifest number: 0A3F Signing time: Tue 09 Sep 2025 07:01:08 +0000 Manifest this update: Tue 09 Sep 2025 07:01:08 +0000 Manifest next update: Wed 10 Sep 2025 07:01:08 +0000 Files and hashes: 1: 4tW7QBGA5V9cFl1HkI3_T-KaDYY.crl (hash: ia7FdJF+OHYXmW9VCR6YJs+9FnvPRHMsv3CaC4WkbyI=) 2: 5DnR59g0uDhlCeBnwu0_1-KUFeg.roa (hash: jAnqTMpaItG0GhBN/hjRVmkf1KAEsae1ohPc+vQL06Q=) 3: 8PxMQW8r6gNYx6cR3PMs2yrl5ew.roa (hash: GqHXtanVRqdO2QW4vR+6/WyxTi1dfx0DVX7E+ZRdtvU=) 4: DamwXsWqw-pNiIY7Y9gzUoz46SI.roa (hash: 1+3IDizWDcTViB++VKv1xbkAGlHPeiHczREvYVy1BEk=) 5: Dt-A1UKjqPAgnYkiz5oOF3KPif4.roa (hash: jW2Q0BDw92rsfiM8k0/wQ6GD7kmaBburgq62TnGU9aA=) 6: Kn_2eJGh3EcHDuB-OJ8l3E2w8hE.roa (hash: kQ83aGfbv2Iq481MBuTu7pjTHv3tFZPurvWLoY3PlVA=) 7: LAI14FhpOzU-rcfdJ6U9PG061Ec.roa (hash: avAt1L3mlV+2vo4CiZ8YrFs2RggnJV+Qj20+5tYBmII=) 8: LbrW0uU2svuMgCfEegCflkeiJNI.roa (hash: xicAKV+b+Rrkk93cgla0jRgvKkmUQRZcuO0wo+Vll1I=) 9: NH99_Parr6i87GqyKHm971OOvUA.roa (hash: ejRR3IxtFm+BdQE6JvQ7L16gCRkI9epYBVSx8aKoP8A=) 10: OOSnnzJCzwuc2Oreq9KoON2OJy4.roa (hash: 8ZWXugZrnN7Xp4F6Xn87sRk2TjB10Ze3ouSEvaxFbzM=) 11: Q820-mh3gTLx3r5yd43BKUrxxh8.roa (hash: koyxE8n/nkkyiE6UfVNmxydTa2BJ9VFKJe/4B3gcMPg=) 12: QRvqjOpbm1bsYYXVNYJCdsL2K9c.roa (hash: gbsaPykuhKfA/rXSneeYnuzsVzL0kGuorXD/sYaSjK8=) 13: STuoLQHHZBzK_Ldaz7xkxpSaBqY.roa (hash: ZzI62CUIffeXt6hPl33Fk7eNbx5SV7+e0g7j7C8NgSI=) 14: dPORcLPPy7vGPpK7YO0ZCdg3SLc.roa (hash: M8CeF8WcmPBFysMRz6rWQ9roOEfHfMbz/n6BV0QqyTM=) 15: ea2ONoTt3SySSjctEUa2mvxPlk0.roa (hash: aHDpbhU3poNDj7sgG29oLTuaOz779tw43LjPP8jq2GU=) 16: gPbim5HyI5_coGPfod5GORXHFJM.roa (hash: WqgzuFgOy6ZgR1XpLM/1W9uFliVDMHByx6+nWg3yG7Q=) 17: hV1kQUu8Pdq1hwLjpsPqwMqfj_U.roa (hash: N1eliwWO7Qtxwve5drBayNA7B9DMRJgSbxRNUu9dsfY=) 18: o1MTa_u6ng7YChqgqqMpF_EDHDo.roa (hash: medB94fc43SFhZiIXkS8L2CLIYdmUFnxbXmgm5u0RKM=) 19: pA-Fq_J6A5SNZJF98Uix7eSPlIg.roa (hash: 7lwAf6YG9+AyLk5HAGkoZYURCw6qLQhN2f3/kdNJO0w=) 20: v5F31cV6XBvE5243s4oHQBqQQDM.roa (hash: +2WzyiNTSNMZQ/+SFfQYAFWtFS/6Ce5PKrWiHjJlqng=) 21: xbbY79UbNbRYIgyXeBU4cy_zCmI.roa (hash: c0Ac2LrLggmLnLPt492ZZRPubOLwoYV4rcik5rRDaO0=) 22: zw1raLzJkOzuLdWVP5BWRU84p2o.roa (hash: XIzDwzNdh9cyZCy+DakAR8zEkFIdZM7IKTxs2TBKsWM=) Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/59/86297a-d219-4567-9171-421e6bc7e2e8/1/4tW7QBGA5V9cFl1HkI3_T-KaDYY.crl rsync://rpki.ripe.net/repository/DEFAULT/59/86297a-d219-4567-9171-421e6bc7e2e8/1/4tW7QBGA5V9cFl1HkI3_T-KaDYY.mft rsync://rpki.ripe.net/repository/DEFAULT/4tW7QBGA5V9cFl1HkI3_T-KaDYY.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Tue 09 Sep 2025 23:00:23 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:99:2d:47:42:81:38:b2:1c:83:c4:a3:ce:f6:73:7b:c7:94 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=e2d5bb401180e55f5c165d47908dff4fe29a0d86 Validity Not Before: Sep 9 07:01:08 2025 GMT Not After : Sep 10 07:01:08 2025 GMT Subject: CN=8dfbd3d201d34bfa6630bd657b4607994ac4c2ff Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:c8:97:d0:cc:36:7e:09:d6:41:12:fb:2c:fd:3f: 8d:8f:6c:15:a7:75:87:84:c8:80:b2:cc:58:bb:50: 61:47:2b:ef:4f:2d:fa:c5:6b:62:bb:51:b2:4d:ef: 0d:91:54:92:4d:2f:e2:f2:f5:8f:fa:3d:dd:fd:91: 2a:15:4a:92:6b:7d:06:0d:56:9e:b3:7c:27:ff:ea: ca:df:41:5a:f6:0a:76:6a:7d:17:8a:e2:a2:1d:ff: b1:28:00:a7:7a:0f:83:b5:c1:eb:28:2d:6e:5d:a2: 2f:9d:a0:60:91:8c:8b:79:e5:d0:64:f3:25:08:22: ba:1c:77:19:67:ff:88:4b:c4:98:0e:e7:cc:40:88: 42:5b:21:6b:4b:bb:a2:58:ad:7a:65:3b:91:b9:95: 4b:95:3b:4f:6b:84:4c:91:5b:23:a2:90:43:49:b8: 76:b7:46:a4:45:24:78:f0:68:f6:dd:f8:6f:c1:57: 7b:7a:75:99:1e:d7:15:e9:68:f1:3c:53:ca:48:c2: c9:75:bd:81:27:1f:e3:c9:01:7e:61:0e:d3:47:4e: f8:44:d4:33:9c:77:c9:40:c8:62:d4:99:54:b0:1f: 50:11:ea:b7:f9:e0:b0:6d:fb:8e:bf:88:12:13:66: 46:57:5b:d9:54:fd:88:c9:6b:fe:31:ab:ff:1f:07: 8c:75 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 8D:FB:D3:D2:01:D3:4B:FA:66:30:BD:65:7B:46:07:99:4A:C4:C2:FF X509v3 Authority Key Identifier: keyid:E2:D5:BB:40:11:80:E5:5F:5C:16:5D:47:90:8D:FF:4F:E2:9A:0D:86 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/4tW7QBGA5V9cFl1HkI3_T-KaDYY.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/59/86297a-d219-4567-9171-421e6bc7e2e8/1/4tW7QBGA5V9cFl1HkI3_T-KaDYY.mft X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/59/86297a-d219-4567-9171-421e6bc7e2e8/1/4tW7QBGA5V9cFl1HkI3_T-KaDYY.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 90:4f:e5:da:b2:2a:19:fb:07:b0:72:df:f2:02:86:7b:5e:b3: 6f:f3:3a:f4:9e:e7:d0:59:76:6b:ca:3a:83:4e:9d:a0:4e:72: e5:50:69:6d:bd:7d:10:d9:f5:99:77:af:d1:c1:ce:10:14:71: 46:77:6d:73:2f:4a:92:73:c7:2c:90:b0:98:b7:cd:e7:ee:79: 3b:eb:7b:35:18:76:bb:3d:21:a6:6e:dc:06:85:d2:d4:51:42: b0:9c:e5:89:91:93:17:4b:cb:3c:7d:7d:27:89:e6:a7:87:30: d5:64:b4:ec:83:cf:47:f0:06:fd:2b:3d:6a:ac:32:b2:af:48: 62:76:15:e6:3d:5d:c4:2d:b0:cc:e8:56:28:58:23:3c:1d:8a: 15:23:72:15:58:1a:98:66:01:4b:57:e2:3f:b2:20:d5:a8:3c: 31:3e:6e:df:fd:cd:20:0e:08:70:9d:db:52:11:f4:75:9f:3f: 58:63:39:1f:bf:e9:96:64:53:1c:28:cd:4e:14:8e:8f:02:89: a4:da:ce:31:9c:63:ce:67:7f:a8:45:bb:b2:3a:30:5c:0b:8f: 9f:27:a8:7b:d0:14:1a:4e:2e:89:6f:dd:76:b5:b5:d8:c9:b8: d3:04:fd:c0:bf:40:f0:0c:e8:bf:1b:df:31:bf:e1:60:64:5e: 83:ba:e3:ee -----BEGIN CERTIFICATE----- MIIFFjCCA/6gAwIBAgISAZktR0KBOLIcg8SjzvZze8eUMA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKGUyZDViYjQwMTE4MGU1NWY1YzE2NWQ0NzkwOGRmZjRmZTI5 YTBkODYwHhcNMjUwOTA5MDcwMTA4WhcNMjUwOTEwMDcwMTA4WjAzMTEwLwYDVQQD Eyg4ZGZiZDNkMjAxZDM0YmZhNjYzMGJkNjU3YjQ2MDc5OTRhYzRjMmZmMIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAyJfQzDZ+CdZBEvss/T+Nj2wVp3WH hMiAssxYu1BhRyvvTy36xWtiu1GyTe8NkVSSTS/i8vWP+j3d/ZEqFUqSa30GDVae s3wn/+rK30Fa9gp2an0XiuKiHf+xKACneg+DtcHrKC1uXaIvnaBgkYyLeeXQZPMl CCK6HHcZZ/+IS8SYDufMQIhCWyFrS7uiWK16ZTuRuZVLlTtPa4RMkVsjopBDSbh2 t0akRSR48Gj23fhvwVd7enWZHtcV6WjxPFPKSMLJdb2BJx/jyQF+YQ7TR074RNQz nHfJQMhi1JlUsB9QEeq3+eCwbfuOv4gSE2ZGV1vZVP2IyWv+Mav/HweMdQIDAQAB o4ICIjCCAh4wHQYDVR0OBBYEFI3709IB00v6ZjC9ZXtGB5lKxML/MB8GA1UdIwQY MBaAFOLVu0ARgOVfXBZdR5CN/0/img2GMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvNHRXN1FCR0E1VjljRmwxSGtJM19ULUthRFlZLmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC81OS84NjI5N2EtZDIxOS00NTY3LTkxNzEt NDIxZTZiYzdlMmU4LzEvNHRXN1FCR0E1VjljRmwxSGtJM19ULUthRFlZLm1mdDCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC81OS84NjI5N2EtZDIxOS00NTY3LTkxNzEtNDIxZTZiYzdlMmU4 LzEvNHRXN1FCR0E1VjljRmwxSGtJM19ULUthRFlZLmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAkE/l2rIq GfsHsHLf8gKGe16zb/M69J7n0Fl2a8o6g06doE5y5VBpbb19ENn1mXev0cHOEBRx Rndtcy9KknPHLJCwmLfN5+55O+t7NRh2uz0hpm7cBoXS1FFCsJzliZGTF0vLPH19 J4nmp4cw1WS07IPPR/AG/Ss9aqwysq9IYnYV5j1dxC2wzOhWKFgjPB2KFSNyFVga mGYBS1fiP7Ig1ag8MT5u3/3NIA4IcJ3bUhH0dZ8/WGM5H7/plmRTHCjNThSOjwKJ pNrOMZxjzmd/qEW7sjowXAuPnyeoe9AUGk4uiW/ddrW12Mm40wT9wL9A8Azovxvf Mb/hYGReg7rj7g== -----END CERTIFICATE-----Generated at Tue Sep 9 08:36:05 2025 by rpki-client