$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/5f/956db9-c8f7-4b9f-a56e-bc6db7248add/1/cPmxat8v0xmIhZkitEV0gd1-70A.mft File: cPmxat8v0xmIhZkitEV0gd1-70A.mft (raw, json) Hash identifier: Z9kGci4++MTQoTuZFG/il3YB5AQ1QtQ+viXxTubcEDw= Subject key identifier: 60:34:78:B6:EB:89:3D:71:03:AF:89:20:98:00:FD:0A:7F:89:F1:40 Authority key identifier: 70:F9:B1:6A:DF:2F:D3:19:88:85:99:22:B4:45:74:81:DD:7E:EF:40 Certificate issuer: /CN=70f9b16adf2fd31988859922b4457481dd7eef40 Certificate serial: 01991B09678FFA65A89DAE58E2DF113A250B Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/cPmxat8v0xmIhZkitEV0gd1-70A.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/5f/956db9-c8f7-4b9f-a56e-bc6db7248add/1/cPmxat8v0xmIhZkitEV0gd1-70A.mft Manifest number: 1409 Signing time: Fri 05 Sep 2025 18:00:25 +0000 Manifest this update: Fri 05 Sep 2025 18:00:25 +0000 Manifest next update: Sat 06 Sep 2025 18:00:25 +0000 Files and hashes: 1: 5WpWrypca4XGx0ISHtuZYRT_cno.roa (hash: R8ZoU8UZw1Z3gy7t3IJTFumdlDzgJjWSubPKAJkbvV0=) 2: 6Tq_leUsVpFgI85zp_wIyChN4WA.roa (hash: //rXy+p6IdrQ6jHZrRlFQGf563PHiLpmYBPTnbSHBxk=) 3: 8-icgNG9YFfARW17qjTdCn9yD80.roa (hash: vebs5VRK2d7EVc4VYZnrKXN0FKJQS1X4sYhCt1gzy4o=) 4: ElpdsCAHWnrspf_BQqwQgScgsBo.roa (hash: qGJ7OM5aBe7dvyjzLtp4kDohE2tNL4nfvnY6+uLyiBw=) 5: GMWgFQwd8nrIkV51lAwKwBtEBhI.roa (hash: +zDKOCeZ+E87qba/A9Qx+V3SrLOM1wpx9qfe7qe53g8=) 6: JOBERo-vgg6dldBoWViTCfV7X-A.roa (hash: ce+d5taUPY+G9x5sjcA70ndAe38v7dhbZx0JrAG/CD4=) 7: MOJ_MmqJwKp741jgBgm-pEatlmQ.roa (hash: dE0c0TKslQoRPrRp1veDilwlhsqiEDf1BmfdfrJ1QGU=) 8: T1V76bxlhezLMl4Tzlvgqgk0pcg.roa (hash: Hk9kWyBSS3VZQ3ORtc2F2qsaXDclUxsqlus/HDJzLds=) 9: Z5phhVwVfpK6dkc5C1-vYmhcYUU.roa (hash: iIyIPk2NBxkdVR06TYJeH+vh01QOalQb+F2tpumtM+w=) 10: cPmxat8v0xmIhZkitEV0gd1-70A.crl (hash: FD8hpzK/ptFLe8psbWAK0NGdfnfiTW11/xwR553dULI=) 11: ezMLdhISIqr2PAqGoulAf-qQ6FY.roa (hash: MoVmtNQ9G0A/NJidABkGuBmF42AfIIukbBtAhp8lY68=) 12: fC3AtSHj4uWnRNCJOJWyffnxb_c.roa (hash: k4yZxxd7Kbg9gUH1VtnIM62vxLC45Jz4VtvfU0eH3rQ=) 13: mA4IEAHXR0LDJS0AO7AgvdyymfA.roa (hash: B62czMPy2pKQJ5FL2R2C5ZUZdywtpL+Cj+O5hZ16Rv4=) 14: q56DpE6SjT4lDV119A67V9CrQMI.roa (hash: sEJe90A/qwDILaO38ksc6uM3fs95yXl9fIcKPIheClI=) 15: qQMnV_AHkaoypfzXBStNqOIC8i4.roa (hash: 8/gHPP6AgbL3NuW+OG2JLB+jSLFsV5WrdZq7Of0LMpg=) 16: t-GC4kGf7lvSnOYAiTpgmlkKEL4.roa (hash: 9rNbslHDQxGg0Ew50MQa2Fk3HC4+vs4VNNeusuZLYr8=) Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/5f/956db9-c8f7-4b9f-a56e-bc6db7248add/1/cPmxat8v0xmIhZkitEV0gd1-70A.crl rsync://rpki.ripe.net/repository/DEFAULT/5f/956db9-c8f7-4b9f-a56e-bc6db7248add/1/cPmxat8v0xmIhZkitEV0gd1-70A.mft rsync://rpki.ripe.net/repository/DEFAULT/cPmxat8v0xmIhZkitEV0gd1-70A.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Sat 06 Sep 2025 17:17:23 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:99:1b:09:67:8f:fa:65:a8:9d:ae:58:e2:df:11:3a:25:0b Signature Algorithm: sha256WithRSAEncryption Issuer: CN=70f9b16adf2fd31988859922b4457481dd7eef40 Validity Not Before: Sep 5 18:00:25 2025 GMT Not After : Sep 6 18:00:25 2025 GMT Subject: CN=603478b6eb893d7103af89209800fd0a7f89f140 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:b3:2f:cc:95:fa:79:24:41:59:99:88:f8:cb:5d: 76:d2:e1:fc:91:a7:4d:b6:15:18:6d:b2:32:dc:39: 24:04:e9:38:4c:d0:ce:ab:e1:de:69:5f:8e:c6:86: de:6f:f3:b9:85:7f:37:b2:97:d8:21:3f:15:6f:60: 5a:13:86:4d:f6:b8:fa:f9:7f:5f:fa:05:6f:fa:31: 74:02:85:58:19:3e:6c:99:3b:04:c5:0d:ba:25:dd: 3e:c6:3f:43:92:48:1a:5d:a2:30:a8:44:94:45:7b: f9:f9:c5:c0:d9:88:df:46:89:4a:4b:e6:59:22:a5: 4d:a5:0c:13:81:e8:15:07:59:7d:0d:76:e6:c8:a2: d7:bc:a2:7c:15:9e:5a:ee:33:85:24:7d:b9:b9:40: 25:ed:93:56:05:59:35:8e:2e:3d:96:8d:23:3a:c2: 27:ca:7c:ff:03:c7:b8:64:94:75:24:dc:9a:b5:c4: 3b:b6:26:84:01:d0:9e:6d:e5:0e:c3:fc:eb:a7:c6: f6:6e:d0:10:e4:99:80:db:49:3e:f2:c0:8b:98:09: 30:a6:ef:83:5e:93:1d:c5:f8:b2:cc:40:7f:d6:74: 38:c5:75:cf:fb:f8:6a:a5:b9:af:1e:1c:a2:30:6b: f7:c6:94:18:f9:d0:1d:c4:a4:d1:35:ad:7f:7a:be: 41:d7 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 60:34:78:B6:EB:89:3D:71:03:AF:89:20:98:00:FD:0A:7F:89:F1:40 X509v3 Authority Key Identifier: keyid:70:F9:B1:6A:DF:2F:D3:19:88:85:99:22:B4:45:74:81:DD:7E:EF:40 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/cPmxat8v0xmIhZkitEV0gd1-70A.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/5f/956db9-c8f7-4b9f-a56e-bc6db7248add/1/cPmxat8v0xmIhZkitEV0gd1-70A.mft X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/5f/956db9-c8f7-4b9f-a56e-bc6db7248add/1/cPmxat8v0xmIhZkitEV0gd1-70A.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 55:4c:6e:46:3e:63:c7:9e:a6:3a:54:df:c6:1e:5d:ec:59:6d: a5:20:f9:53:18:18:60:12:4d:48:ee:b4:c1:c4:05:27:e2:e5: da:2a:28:55:a2:17:3c:c4:3d:5e:a9:56:21:e7:a7:e1:c9:87: a9:57:c1:f3:82:21:af:0e:7b:07:58:de:41:d8:e3:83:f9:32: b9:d0:4b:6c:23:b0:de:e7:fa:cf:75:ed:f5:f8:77:2b:3e:0e: be:c5:5a:87:0c:53:9b:47:14:a6:a7:4b:14:bc:07:3f:b9:b8: 03:f8:ce:25:1d:8b:a4:a2:18:b2:c0:bf:54:d9:f8:df:43:06: 4c:2a:49:71:a1:5c:4a:77:f1:42:b8:53:cc:a2:ba:07:2a:9e: f5:e5:5f:76:bd:f0:e2:ae:03:c1:05:a2:78:6e:05:1d:83:61: 3e:61:13:5f:6d:8b:b5:5b:29:79:c9:3f:8e:71:fa:f8:88:30: 25:b3:1a:97:ed:49:b6:0f:fb:47:19:07:58:d2:0b:6b:82:ea: 92:30:79:50:fa:b2:e5:84:da:28:e4:d2:6f:6b:d1:93:86:99: ac:9c:d9:ad:4f:43:11:b9:7c:9d:6e:63:e4:b2:cd:75:fc:eb: d7:f6:75:ce:7f:5b:75:3e:ce:f4:04:42:90:da:8b:fe:f0:31: 2d:d5:84:b6 -----BEGIN CERTIFICATE----- MIIFFjCCA/6gAwIBAgISAZkbCWeP+mWona5Y4t8ROiULMA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKDcwZjliMTZhZGYyZmQzMTk4ODg1OTkyMmI0NDU3NDgxZGQ3 ZWVmNDAwHhcNMjUwOTA1MTgwMDI1WhcNMjUwOTA2MTgwMDI1WjAzMTEwLwYDVQQD Eyg2MDM0NzhiNmViODkzZDcxMDNhZjg5MjA5ODAwZmQwYTdmODlmMTQwMIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAsy/Mlfp5JEFZmYj4y1120uH8kadN thUYbbIy3DkkBOk4TNDOq+HeaV+Oxobeb/O5hX83spfYIT8Vb2BaE4ZN9rj6+X9f +gVv+jF0AoVYGT5smTsExQ26Jd0+xj9DkkgaXaIwqESURXv5+cXA2YjfRolKS+ZZ IqVNpQwTgegVB1l9DXbmyKLXvKJ8FZ5a7jOFJH25uUAl7ZNWBVk1ji49lo0jOsIn ynz/A8e4ZJR1JNyatcQ7tiaEAdCebeUOw/zrp8b2btAQ5JmA20k+8sCLmAkwpu+D XpMdxfiyzEB/1nQ4xXXP+/hqpbmvHhyiMGv3xpQY+dAdxKTRNa1/er5B1wIDAQAB o4ICIjCCAh4wHQYDVR0OBBYEFGA0eLbriT1xA6+JIJgA/Qp/ifFAMB8GA1UdIwQY MBaAFHD5sWrfL9MZiIWZIrRFdIHdfu9AMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvY1BteGF0OHYweG1JaFpraXRFVjBnZDEtNzBBLmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC81Zi85NTZkYjktYzhmNy00YjlmLWE1NmUt YmM2ZGI3MjQ4YWRkLzEvY1BteGF0OHYweG1JaFpraXRFVjBnZDEtNzBBLm1mdDCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC81Zi85NTZkYjktYzhmNy00YjlmLWE1NmUtYmM2ZGI3MjQ4YWRk LzEvY1BteGF0OHYweG1JaFpraXRFVjBnZDEtNzBBLmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAVUxuRj5j x56mOlTfxh5d7FltpSD5UxgYYBJNSO60wcQFJ+Ll2iooVaIXPMQ9XqlWIeen4cmH qVfB84Ihrw57B1jeQdjjg/kyudBLbCOw3uf6z3Xt9fh3Kz4OvsVahwxTm0cUpqdL FLwHP7m4A/jOJR2LpKIYssC/VNn430MGTCpJcaFcSnfxQrhTzKK6Byqe9eVfdr3w 4q4DwQWieG4FHYNhPmETX22LtVspeck/jnH6+IgwJbMal+1Jtg/7RxkHWNILa4Lq kjB5UPqy5YTaKOTSb2vRk4aZrJzZrU9DEbl8nW5j5LLNdfzr1/Z1zn9bdT7O9ARC kNqL/vAxLdWEtg== -----END CERTIFICATE-----Generated at Sat Sep 6 01:43:43 2025 by rpki-client