$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/5b/4abf3f-158f-4f62-a9eb-ddf567eded03/1/jRrIPuOj-WjWatL99GFue7Hk0dc.mft File: jRrIPuOj-WjWatL99GFue7Hk0dc.mft (raw, json) Hash identifier: YOSE0tlQsVBrK7pblKu1L2f/HuY6PkzbXYut0CFg/90= Subject key identifier: 10:76:05:79:83:8B:10:72:83:14:E5:DE:4B:CB:81:DE:22:AA:FC:33 Authority key identifier: 8D:1A:C8:3E:E3:A3:F9:68:D6:6A:D2:FD:F4:61:6E:7B:B1:E4:D1:D7 Certificate issuer: /CN=8d1ac83ee3a3f968d66ad2fdf4616e7bb1e4d1d7 Certificate serial: 01992631FE90D423D259A399804E98CC4527 Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/jRrIPuOj-WjWatL99GFue7Hk0dc.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/5b/4abf3f-158f-4f62-a9eb-ddf567eded03/1/jRrIPuOj-WjWatL99GFue7Hk0dc.mft Manifest number: 0C01 Signing time: Sun 07 Sep 2025 22:00:34 +0000 Manifest this update: Sun 07 Sep 2025 22:00:34 +0000 Manifest next update: Mon 08 Sep 2025 22:00:34 +0000 Files and hashes: 1: 0hcYkFvLnPnX3tJPZIl-Uhot1i0.roa (hash: 6/eHz/J+k5SuDY5b5eslxHZpd3P/l7+bfENiu84Xo/Y=) 2: 5Xz9E7C6BAcx16iIMjwvM4HlgAw.roa (hash: O79+vzMdI2uDnbGewEwtLl1GFqHouBivbXJnQ4WHjFs=) 3: A3vCnLdcCAHsjG0TKS7PepEiSRQ.roa (hash: 8/8TxF0wXw7stYTcBeXGRpf0HZpKR5xHMrhdKNPhjb4=) 4: Eb3nQCsubyrRRwgtef25b2tcJbQ.roa (hash: sgX7PEOSSTdMVUw2kIAqvpDSoV+TN56cGW37Ykizvek=) 5: FQFiaH-Uhznyo9tuv-39hg1SgIc.roa (hash: AaAgvoQWwsBdEDlzs9JJLKseENMJxUCvDZ1+feCaadI=) 6: HIBKVvtinhweoi9ybbfYokGtkjg.roa (hash: khv1qHXammr1ZO8qVWulyea62D34wTqiuoPZd9ngssM=) 7: JjM1scO0M1VRz2BqKO1r_ZLa970.roa (hash: jE4M6onTNWLyp2LT8jDW1lcK5SlJ5FLJoUcPkAM9kEQ=) 8: JtkTsuHPsoBKn0hRChOrC4JXTN4.roa (hash: M9uGhnRBSZAnmB8BCT/jdRx465I3Ctf37Vtgm+Jt4nc=) 9: LNIAH1MylX8WQQ-W8xfPHTlOsW0.roa (hash: GFXXpakvt3mJ4yGbBFawI3+WVF7sKNF14A1lgtziIek=) 10: Lxv8RdYN9P2vj1nZyAjFF9lNkU8.roa (hash: xMtpILHpW8icGyga3EnNkKUNmrRxGITTuJWIIZqDxDI=) 11: MudRzNeUk2R859eEP09GJeDExf0.roa (hash: 2o3NbfW7AkgEJtAc91HUgnIB/5KesUMTjVvuVU09fp4=) 12: RTZYU-7DG4fUoipBd0qSh8BirjI.roa (hash: 3eo6AFVTXAYcIIpYV9OFjF0R4DRTO3nfrXKCxpb3Q8c=) 13: XO5629FFpWYFF8ZRrD5XKcMM2vo.roa (hash: wKy5dCiE9pBzbJNPaAeHBHoxO/6aKqqjDAe2f2qYl60=) 14: gwSC7EAy3C72kqaOxsQmMkrjxyA.roa (hash: oVgyYlrKyPjekvA+50Kp0/QR+pQendS8nmEKcr8YBXw=) 15: jRrIPuOj-WjWatL99GFue7Hk0dc.crl (hash: I4JiPsMt464AiU7MrPiZZKBEPcjMwduJkXLUxE/TNHY=) 16: koWcD6_YJsplq6MpdAuoeyxurzM.roa (hash: 2bTDDvlz5M3JHeYmPpa6SlfroaAlw505uc1zw7/pXCU=) 17: lO8z4PUnAAW_FQZ30LG2G_SaC34.roa (hash: TP4CK9avYURoeZBLUriM0sZhHgj7m8xB680P8/Q/778=) 18: ptIzMM5pGR32qdt6NWym3eUNiak.roa (hash: bSsM8QyZGEjlRqx/UPAoekl3qkyD03EUapHU3WIbdX4=) 19: tUIacj6VOPH10m5Y6XUJyWIow6U.roa (hash: 9uc/yuqmiqky5HfjpLsVrt/99q8zfLW5nmttPUpS6nU=) 20: tesrxSIX8wDOD0usavdzlelTyC8.roa (hash: 2mw6qDJEVPvk2SB5Frfa2IZ+DHf6Rgtla+C91qwtmwA=) Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/5b/4abf3f-158f-4f62-a9eb-ddf567eded03/1/jRrIPuOj-WjWatL99GFue7Hk0dc.crl rsync://rpki.ripe.net/repository/DEFAULT/5b/4abf3f-158f-4f62-a9eb-ddf567eded03/1/jRrIPuOj-WjWatL99GFue7Hk0dc.mft rsync://rpki.ripe.net/repository/DEFAULT/jRrIPuOj-WjWatL99GFue7Hk0dc.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Mon 08 Sep 2025 16:00:23 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:99:26:31:fe:90:d4:23:d2:59:a3:99:80:4e:98:cc:45:27 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=8d1ac83ee3a3f968d66ad2fdf4616e7bb1e4d1d7 Validity Not Before: Sep 7 22:00:34 2025 GMT Not After : Sep 8 22:00:34 2025 GMT Subject: CN=10760579838b10728314e5de4bcb81de22aafc33 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:9d:39:2a:f8:6c:58:df:18:f1:7d:a8:47:95:72: a8:3b:b0:46:6d:84:ee:a1:15:94:85:8f:c6:dd:4e: 4a:35:c9:2d:e2:bd:29:7d:bb:82:6a:60:de:0e:8f: 0e:e5:5d:61:53:b9:d4:43:0f:60:30:f4:d9:25:4d: ed:97:05:98:9d:d5:be:b8:e1:d6:47:30:6f:b7:2a: b3:4f:bc:0c:66:ab:9f:df:46:af:83:b4:89:b1:ee: 1b:c8:ae:42:fd:78:76:a5:75:e8:26:5d:47:6b:8f: 89:bb:1a:e3:31:37:62:7b:bf:7a:03:0c:d2:9b:61: c9:1e:8e:a4:5d:3c:c4:9a:16:be:e5:11:80:22:e4: b2:e3:f3:3b:0b:34:b8:ea:8c:5a:37:c8:c3:78:b9: 30:67:6d:3c:6f:8f:8b:28:a3:c7:fb:2b:bf:64:80: f2:4e:eb:4b:b7:7a:8b:b2:c7:fe:5a:92:b1:c8:0d: 43:21:f2:7c:e0:1e:fa:93:e8:de:fa:db:37:46:f6: 91:3c:d3:59:4c:f6:85:c9:95:cd:d2:a2:0f:dc:da: 43:bb:b1:d9:94:5a:96:05:77:3d:17:65:db:e0:bc: ff:0c:eb:2e:8d:28:a9:f5:e1:45:c5:3e:d0:82:d1: c3:02:34:33:03:d6:ed:04:87:b1:23:fb:30:22:0f: 4f:8d Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 10:76:05:79:83:8B:10:72:83:14:E5:DE:4B:CB:81:DE:22:AA:FC:33 X509v3 Authority Key Identifier: keyid:8D:1A:C8:3E:E3:A3:F9:68:D6:6A:D2:FD:F4:61:6E:7B:B1:E4:D1:D7 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/jRrIPuOj-WjWatL99GFue7Hk0dc.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/5b/4abf3f-158f-4f62-a9eb-ddf567eded03/1/jRrIPuOj-WjWatL99GFue7Hk0dc.mft X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/5b/4abf3f-158f-4f62-a9eb-ddf567eded03/1/jRrIPuOj-WjWatL99GFue7Hk0dc.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 75:b3:3b:a9:71:cc:a4:81:7a:ef:27:30:0c:18:d3:20:4d:9f: 77:77:db:00:90:ad:2c:e4:a9:b5:c7:e2:36:14:1e:7d:e4:97: 63:b3:23:1d:ec:e7:a5:f9:a5:63:c0:24:25:f5:97:69:ab:6f: 6d:f7:df:cc:80:ad:d5:76:e8:bd:3d:8f:6f:00:a3:f2:94:c3: 77:87:9a:ac:87:48:aa:2c:6f:9b:de:e3:56:f6:b3:9f:ba:f7: 1a:bc:82:27:c5:f7:91:ac:55:e9:27:8b:43:13:55:e0:a7:43: 1a:07:dc:d8:6a:64:70:08:ca:ca:33:1e:bf:a2:e0:77:ed:83: dd:3e:39:82:ea:bb:08:3f:d0:fe:a0:08:f1:9b:19:06:01:d2: 2f:76:02:f9:f3:72:75:df:a5:ed:18:40:44:9e:15:e8:79:5d: 6c:16:4a:6f:b7:fb:da:04:72:f8:ca:5b:00:82:d1:71:44:f7: 81:04:ec:27:d7:3a:0d:08:b9:e3:5b:3b:9b:69:d9:44:f0:89: 8c:93:74:dc:28:83:2a:67:a7:7e:0d:9d:fa:6c:2b:49:73:7c: bf:a5:72:de:e3:da:0d:a7:9e:56:33:8b:31:9e:99:b9:dd:a6: a7:c1:45:a6:cb:bd:c1:de:f2:84:3b:e1:59:44:32:bb:f9:cd: e6:a5:89:23 -----BEGIN CERTIFICATE----- MIIFFjCCA/6gAwIBAgISAZkmMf6Q1CPSWaOZgE6YzEUnMA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKDhkMWFjODNlZTNhM2Y5NjhkNjZhZDJmZGY0NjE2ZTdiYjFl NGQxZDcwHhcNMjUwOTA3MjIwMDM0WhcNMjUwOTA4MjIwMDM0WjAzMTEwLwYDVQQD EygxMDc2MDU3OTgzOGIxMDcyODMxNGU1ZGU0YmNiODFkZTIyYWFmYzMzMIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAnTkq+GxY3xjxfahHlXKoO7BGbYTu oRWUhY/G3U5KNckt4r0pfbuCamDeDo8O5V1hU7nUQw9gMPTZJU3tlwWYndW+uOHW RzBvtyqzT7wMZquf30avg7SJse4byK5C/Xh2pXXoJl1Ha4+JuxrjMTdie796AwzS m2HJHo6kXTzEmha+5RGAIuSy4/M7CzS46oxaN8jDeLkwZ208b4+LKKPH+yu/ZIDy TutLt3qLssf+WpKxyA1DIfJ84B76k+je+ts3RvaRPNNZTPaFyZXN0qIP3NpDu7HZ lFqWBXc9F2Xb4Lz/DOsujSip9eFFxT7QgtHDAjQzA9btBIexI/swIg9PjQIDAQAB o4ICIjCCAh4wHQYDVR0OBBYEFBB2BXmDixBygxTl3kvLgd4iqvwzMB8GA1UdIwQY MBaAFI0ayD7jo/lo1mrS/fRhbnux5NHXMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvalJySVB1T2otV2pXYXRMOTlHRnVlN0hrMGRjLmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC81Yi80YWJmM2YtMTU4Zi00ZjYyLWE5ZWIt ZGRmNTY3ZWRlZDAzLzEvalJySVB1T2otV2pXYXRMOTlHRnVlN0hrMGRjLm1mdDCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC81Yi80YWJmM2YtMTU4Zi00ZjYyLWE5ZWItZGRmNTY3ZWRlZDAz LzEvalJySVB1T2otV2pXYXRMOTlHRnVlN0hrMGRjLmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAdbM7qXHM pIF67ycwDBjTIE2fd3fbAJCtLOSptcfiNhQefeSXY7MjHeznpfmlY8AkJfWXaatv bfffzICt1XbovT2PbwCj8pTDd4earIdIqixvm97jVvazn7r3GryCJ8X3kaxV6SeL QxNV4KdDGgfc2GpkcAjKyjMev6Lgd+2D3T45guq7CD/Q/qAI8ZsZBgHSL3YC+fNy dd+l7RhARJ4V6HldbBZKb7f72gRy+MpbAILRcUT3gQTsJ9c6DQi541s7m2nZRPCJ jJN03CiDKmenfg2d+mwrSXN8v6Vy3uPaDaeeVjOLMZ6Zud2mp8FFpsu9wd7yhDvh WUQyu/nN5qWJIw== -----END CERTIFICATE-----Generated at Mon Sep 8 01:53:37 2025 by rpki-client