$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/62/aea36d-babf-4474-a78b-6a4ecaf8b3b1/1/dGNlNVtmVWSiEMNYxooBF7f765o.mft File: dGNlNVtmVWSiEMNYxooBF7f765o.mft (raw, json) Hash identifier: jAgExoZScIlYeOzCiR3XWn8kE8iaX4EiVCuC1RKT/FA= Subject key identifier: 38:94:E6:97:B2:77:7E:E3:2E:F7:F4:59:65:D5:95:19:5F:2F:99:4C Authority key identifier: 74:63:65:35:5B:66:55:64:A2:10:C3:58:C6:8A:01:17:B7:FB:EB:9A Certificate issuer: /CN=746365355b665564a210c358c68a0117b7fbeb9a Certificate serial: 01992E23B7CDA35CC1A6CEB0405D5708F0F4 Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/dGNlNVtmVWSiEMNYxooBF7f765o.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/62/aea36d-babf-4474-a78b-6a4ecaf8b3b1/1/dGNlNVtmVWSiEMNYxooBF7f765o.mft Manifest number: 16E3 Signing time: Tue 09 Sep 2025 11:01:56 +0000 Manifest this update: Tue 09 Sep 2025 11:01:56 +0000 Manifest next update: Wed 10 Sep 2025 11:01:56 +0000 Files and hashes: 1: 0Z8yTYlKjkqvKh6kY-kM6OXYfz8.roa (hash: fwm0Gtt1RFKV50/Ms+CgVe/rwlPJ9Q3VLzTFIW1v2aw=) 2: 4AhKQoLmAk1YQIBQspZfyfaiu0s.roa (hash: 1kEaOXNNkPEAuTvrZqrQmCGg/Uu08f1ofkHwiva1rBk=) 3: 4VJyAeGVgAs2ysdZRw_rlOWdRTY.roa (hash: Xd7f6Is8VkQ7huxtuAE7hUXnUe/NIXlF2TbPODpbZHk=) 4: 8xmePB-pGcDcrQ-prX4UP_SBy78.roa (hash: OO9rzem914ccJuV3c6Pdstzz47bnogLMsoJtrFTJhQo=) 5: 9nwJkf06ywYV97ycnHX8xephiLw.roa (hash: E/N+tJSxegWf0b+66cYXz6Gw0s8y/7JfEZqjs9iWYvA=) 6: G1nDGEYcV0zuKzKuOXzDx75r3GI.roa (hash: 41u/KL+MWJdDf84HJGznj8QmpQB0mJMrGBzkwlxjtIc=) 7: HtGtnD1WG-uR4lNZ5h-A8-pjUrU.roa (hash: JiGHlI4PQlUWbSzc2TBFb2wXm1bs25OSgaV13SVkmqE=) 8: JPWgfoIicBY7uqLCE-abW2DSU0c.roa (hash: A927JecYLMujCKzkMKtyVfZVMSoezFJjSy/bYsYd8SE=) 9: Kvx3aMKyyHxozL3U3ap2oLWDca0.roa (hash: Zz8Vm/BEn2VlT/RjADj2XxnM/3K7+ZuLbhNPkP9kcOQ=) 10: M7UMw75zEMferpyTZliqTtxFYGw.roa (hash: bhGEILsyYzSvD2gGTZix+BRHPPr9Z15A13HndBQFJh0=) 11: TQNP6hoAf66GZWfHy5k78DAiiCU.roa (hash: uABddS+djXpmQc7iz2KFGbyJ5oeYnTC/ey9Ec918mow=) 12: UMHCyN1PhpnvoYUbs1CT_48YLGk.roa (hash: i765qk64qL4Uog5FTQxpy5y2jivRwNCYq0ub5NcQaLk=) 13: V51fQsmdOucWQLFJANFvs_Ma2i0.roa (hash: mhzDbXcVW4r5ZjsZqcqDKjjyLnY5MIVjnfy6m1yWpyc=) 14: V5HLYQX7OEpLFK_MH5_sUYR0JBQ.roa (hash: 6cm5gNEppEG5XD2KabFv9dmbCHQEnB7rCQFwcW30ZWM=) 15: WWDr2Um8NXXwWukbK6cj1BF3t7Q.roa (hash: KB4bFVPkGqmvCaRGbBdpA1si7s9CexKnU66M/mHt/0s=) 16: XZET7dFa5OoJqf73WGd1UHo9Trs.roa (hash: FbxqvpbDfsQRYaW0n//PgGX2T+UQY1wiBpKlSWUYJQg=) 17: dGNlNVtmVWSiEMNYxooBF7f765o.crl (hash: TsBSTjpVdS4e2KI4hURwqzs6cEenJXJoM/CvyhHGAYk=) 18: dc2g-kIH50S7LA2o26AVsv4LItA.roa (hash: anV8AfiZnJM+uW7z2xYGvooxLoCl6L/cGFCY34WgBTU=) 19: g3gXDyn1r3CKRtOkIamh9XiFNXQ.roa (hash: bsh/frVfpWjiiUA/IVdx5lj5UBB7HEuHeERH5RVXbJU=) 20: hbkDGu-27NQwuA34KKvsthuBpoc.roa (hash: gs4QclFDIW6OH3AQHoXwFFecYQ+OpwQ25vhb21IUnck=) 21: iHslhtFiuKaugZuIjgDSTM4F6Sk.roa (hash: 43DehRvyD4BSrfqUpPUdy+zsjmfPk1hQcSdYylB1zpo=) 22: jJYsZg4wnTyX9mV0JNA_riAb8aI.roa (hash: 2YSmon6Fik8vSjQAeDBGETPmH22iZ7Gu1aYziQraG2Q=) 23: jmqPtt5Ns_W-iBFLphm9TOPqcBk.roa (hash: Q0XLFkj7/QEzPnBRybOs7B/q1S4uk4+SdVBsy+OCL8U=) 24: kMJn1HheqQ9Rsacjsd3PZ6CXhTk.roa (hash: QHx3y/n5TxjTD6iBbFsTYJr5O+YrfK0OyTuVkyzqTiI=) 25: lkYJ-_nXwt_j8sYXcXEPI8XjVSs.roa (hash: H5A3LLoCNjemShwdfzZoOLg2oRcQfw/qyX1Up4Fug7w=) 26: m095Z-7KR0K5gXucbWhKiz12Uqg.roa (hash: pKKUCvxcyqiDYUVY3jhLgvu4uMJ7RTYnDW2HPLpWkkY=) 27: nMVuUhhQLd_p2MmIFg0uk6oN0DA.roa (hash: VPC3QfM3Xk9o/TFr02RnouDa7yDlwB8VvuZ6tJbURMA=) 28: nyslHXPfyz0FM3udFOE-7tndyMk.roa (hash: gPoCAQJEwCTv4wbyGKoKpT/fwNV2im1/jc8HR0EwRAo=) 29: oEbBV7xx5_jwLtoklKva4-Dg2v8.roa (hash: i+aaCmiUXCVg0OPcM0SwO92pJsKLDZGoxx/fXdMrMgQ=) 30: oQY8Ggs-WHGozgLdlzn62PGvTmo.roa (hash: Rm3b27WZnppZmsClSvXbSesr4c+ogRwCEVrSLNbiwvA=) 31: r-97pPvj-RimUl1469wxiEjOXHw.roa (hash: BJihjsrYYxzSHh3xQ0PZJNW0AKvTbj8ZG/b/oUaGZaU=) 32: sTAcEeIlslVpuXMYkyeJBskGwEo.roa (hash: sDqLs0eEA0fKuxXHljiO7Zt9np/B1YWaKWKNaP6grbA=) 33: si-h3EMZPum7ZeFVKrM-JgEvS5s.roa (hash: e6RNF3nCZ80GPAqffnrYJBWzKtbs1gbwLTkQ6jY31gw=) 34: t2bPxtc37O7_UaSx43VqFjBQeQ8.roa (hash: TQAVmYhnwd2Kv49WbSb4VDqVmwGOcSo0dPabg2IvysA=) 35: yTFqO5xiaIDSCJNJ_ZUqbKSypdQ.roa (hash: zRFFAOZDcEueQQ2liuDNq8EtejJKoUyry9Flbp6zROU=) Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/62/aea36d-babf-4474-a78b-6a4ecaf8b3b1/1/dGNlNVtmVWSiEMNYxooBF7f765o.crl rsync://rpki.ripe.net/repository/DEFAULT/62/aea36d-babf-4474-a78b-6a4ecaf8b3b1/1/dGNlNVtmVWSiEMNYxooBF7f765o.mft rsync://rpki.ripe.net/repository/DEFAULT/dGNlNVtmVWSiEMNYxooBF7f765o.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Wed 10 Sep 2025 08:00:23 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:99:2e:23:b7:cd:a3:5c:c1:a6:ce:b0:40:5d:57:08:f0:f4 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=746365355b665564a210c358c68a0117b7fbeb9a Validity Not Before: Sep 9 11:01:56 2025 GMT Not After : Sep 10 11:01:56 2025 GMT Subject: CN=3894e697b2777ee32ef7f45965d595195f2f994c Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:df:70:a9:fd:d5:9a:9c:53:1f:d2:42:61:d4:24: df:42:f6:d6:8e:5f:b3:22:39:bf:df:c1:8e:04:e9: 35:2b:f5:30:7e:c1:f9:ad:d4:12:ce:3f:3e:70:d4: e5:24:59:6b:e7:9f:77:65:22:14:50:9e:d6:a6:a2: 92:ff:9c:2a:b2:a1:47:80:20:2a:dc:18:08:ff:02: 38:19:b9:d0:74:0d:dd:bc:6b:43:11:2b:ad:ec:5d: 75:be:43:06:15:4d:ee:87:0c:18:3b:bc:55:ea:6e: e2:6b:e5:35:d8:f9:64:c0:cd:8b:3d:0a:5d:b7:d6: 03:54:1f:e1:2f:bc:70:ef:af:38:b4:c3:ac:1b:e5: b7:37:76:05:9c:a2:3d:c0:9e:a3:c3:16:76:d3:b9: c2:f2:7b:7e:fa:29:86:d4:ec:91:70:80:6a:37:13: 4e:38:2c:c9:de:98:af:2e:f1:14:20:21:f2:67:bd: 73:8b:fe:08:2a:ff:a3:23:2b:5c:e1:59:45:71:3e: 56:49:8c:90:b6:bd:3a:01:06:29:d0:f2:57:00:10: 54:69:2a:c1:54:24:22:c7:cb:45:c2:b8:e3:33:9c: 35:b6:1b:f2:2e:d0:c7:ab:d3:f4:aa:47:6d:b6:88: d4:4c:b5:7a:09:de:69:1b:58:5b:b6:33:a5:65:56: 1b:b3 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 38:94:E6:97:B2:77:7E:E3:2E:F7:F4:59:65:D5:95:19:5F:2F:99:4C X509v3 Authority Key Identifier: keyid:74:63:65:35:5B:66:55:64:A2:10:C3:58:C6:8A:01:17:B7:FB:EB:9A X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/dGNlNVtmVWSiEMNYxooBF7f765o.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/62/aea36d-babf-4474-a78b-6a4ecaf8b3b1/1/dGNlNVtmVWSiEMNYxooBF7f765o.mft X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/62/aea36d-babf-4474-a78b-6a4ecaf8b3b1/1/dGNlNVtmVWSiEMNYxooBF7f765o.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption bf:b2:80:07:22:3b:d5:9e:e3:16:3f:8a:1d:0b:39:c0:e7:d5: e2:ff:df:6b:47:2c:aa:75:da:09:10:11:6a:30:55:9e:55:ab: bb:4d:fe:17:e2:fe:a5:dc:85:46:71:d7:56:a4:0c:d5:cd:e7: 63:00:4b:08:30:d3:d3:ef:5a:8c:ec:e5:6b:a6:92:7e:8d:54: d1:f6:fb:f4:40:52:2e:1b:88:54:ae:87:f0:4f:8d:6b:95:98: 7e:55:5e:69:33:c0:fc:21:64:98:55:2c:25:71:e4:32:55:6f: 2d:99:64:90:14:34:6f:7b:c8:87:a0:8f:f1:7d:e1:ee:7f:db: d1:da:51:e9:c2:f4:1f:27:52:ae:24:82:93:5e:72:0c:51:2e: 5b:6b:99:d8:67:64:1f:8f:d4:1a:b0:f8:be:39:f3:99:a5:d7: 69:35:91:5b:6d:64:60:48:40:ed:7d:9c:8b:7f:ac:5c:ce:1f: ab:4c:ad:fc:3c:9e:1c:ee:89:f7:52:33:44:37:9f:58:2b:db: fc:63:9d:3c:28:2d:77:ad:86:09:b2:db:53:e8:1d:40:43:e4: 8e:8c:df:93:8e:9c:12:19:38:db:4f:7a:78:00:cf:b7:08:25: 8d:67:3d:73:16:9d:1b:2f:fa:83:5a:54:95:ef:ea:3a:e9:5a: 2c:4c:cb:c1 -----BEGIN CERTIFICATE----- MIIFFjCCA/6gAwIBAgISAZkuI7fNo1zBps6wQF1XCPD0MA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKDc0NjM2NTM1NWI2NjU1NjRhMjEwYzM1OGM2OGEwMTE3Yjdm YmViOWEwHhcNMjUwOTA5MTEwMTU2WhcNMjUwOTEwMTEwMTU2WjAzMTEwLwYDVQQD EygzODk0ZTY5N2IyNzc3ZWUzMmVmN2Y0NTk2NWQ1OTUxOTVmMmY5OTRjMIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEA33Cp/dWanFMf0kJh1CTfQvbWjl+z Ijm/38GOBOk1K/UwfsH5rdQSzj8+cNTlJFlr5593ZSIUUJ7WpqKS/5wqsqFHgCAq 3BgI/wI4GbnQdA3dvGtDESut7F11vkMGFU3uhwwYO7xV6m7ia+U12PlkwM2LPQpd t9YDVB/hL7xw7684tMOsG+W3N3YFnKI9wJ6jwxZ207nC8nt++imG1OyRcIBqNxNO OCzJ3pivLvEUICHyZ71zi/4IKv+jIytc4VlFcT5WSYyQtr06AQYp0PJXABBUaSrB VCQix8tFwrjjM5w1thvyLtDHq9P0qkdttojUTLV6Cd5pG1hbtjOlZVYbswIDAQAB o4ICIjCCAh4wHQYDVR0OBBYEFDiU5peyd37jLvf0WWXVlRlfL5lMMB8GA1UdIwQY MBaAFHRjZTVbZlVkohDDWMaKARe3++uaMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvZEdObE5WdG1WV1NpRU1OWXhvb0JGN2Y3NjVvLmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC82Mi9hZWEzNmQtYmFiZi00NDc0LWE3OGIt NmE0ZWNhZjhiM2IxLzEvZEdObE5WdG1WV1NpRU1OWXhvb0JGN2Y3NjVvLm1mdDCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC82Mi9hZWEzNmQtYmFiZi00NDc0LWE3OGItNmE0ZWNhZjhiM2Ix LzEvZEdObE5WdG1WV1NpRU1OWXhvb0JGN2Y3NjVvLmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAv7KAByI7 1Z7jFj+KHQs5wOfV4v/fa0csqnXaCRARajBVnlWru03+F+L+pdyFRnHXVqQM1c3n YwBLCDDT0+9ajOzla6aSfo1U0fb79EBSLhuIVK6H8E+Na5WYflVeaTPA/CFkmFUs JXHkMlVvLZlkkBQ0b3vIh6CP8X3h7n/b0dpR6cL0HydSriSCk15yDFEuW2uZ2Gdk H4/UGrD4vjnzmaXXaTWRW21kYEhA7X2ci3+sXM4fq0yt/DyeHO6J91IzRDefWCvb /GOdPCgtd62GCbLbU+gdQEPkjozfk46cEhk42096eADPtwgljWc9cxadGy/6g1pU le/qOulaLEzLwQ== -----END CERTIFICATE-----Generated at Tue Sep 9 17:37:42 2025 by rpki-client