$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/6e/98c4ee-2f59-45a7-adb6-74139591312e/1/pTmv66zomajuC7T4u0R1_iR6FSg.mft File: pTmv66zomajuC7T4u0R1_iR6FSg.mft (raw, json) Hash identifier: ZqWC6XINaijk9R9D0CpQFeunH/S9icIW9r0yNRe7aYU= Subject key identifier: BA:FF:61:CF:EE:BF:B7:AC:11:25:14:A5:05:9B:6F:A8:3D:4F:3E:69 Authority key identifier: A5:39:AF:EB:AC:E8:99:A8:EE:0B:B4:F8:BB:44:75:FE:24:7A:15:28 Certificate issuer: /CN=a539afebace899a8ee0bb4f8bb4475fe247a1528 Certificate serial: 01992E90E56682C330AC9E5EEF372D1E72FD Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/pTmv66zomajuC7T4u0R1_iR6FSg.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/6e/98c4ee-2f59-45a7-adb6-74139591312e/1/pTmv66zomajuC7T4u0R1_iR6FSg.mft Manifest number: 16CB Signing time: Tue 09 Sep 2025 13:01:11 +0000 Manifest this update: Tue 09 Sep 2025 13:01:11 +0000 Manifest next update: Wed 10 Sep 2025 13:01:11 +0000 Files and hashes: 1: 1-bk62IWKrSZzzdVcShXkFvqxkl0.roa (hash: Kl/dAts5LKa+SfBn4cKmh5vmLiAlVwqYIz2UeNCJ1iU=) 2: 4AWGZqxgdDbuinb8PgzycPgjQHo.roa (hash: 0MUhlNn3UwdUKa27OAF15oWX5cYNcmG6DsLUO/PP0pE=) 3: 8Z1U6oiaYILl5QFuSVlM1xZVAo0.roa (hash: Z0yQrMp3DnhS8bJWMvt8Fv7YgMbkZzaeLDljUW2aX8Y=) 4: 93oAKYvO6XYFsiZOJUeBk34alow.roa (hash: OMaRC1Me7Y5SHCHx/1b5M8xkqo0CIdN293P1j1+C9f0=) 5: 9jmR0jtKFtOeaqxxSmCi0f7Xflk.roa (hash: /UlnktLBtYlahSnqletcALvH8tmcRVU8Atc0U8lv3Og=) 6: GYXH5jrngs3vZAINFfgrNRwhj6Q.roa (hash: tndoIaicJ4OjxOJzM5171qBo/ET2G0zXyUo6a+02Cpg=) 7: JufXc30H2gDJ9htaoc5snhv9H4M.roa (hash: UDnCJVj9+FetwmXa7FA8iihb1eZHsYZtFmy1T9KSJ6w=) 8: KMe75VLXZokwL2kemGRZB7L6oN8.roa (hash: xlf6IO6a2AQYVmnqnu4hVw/U0VPvpTL4IwpI35qfYyw=) 9: ML7Lpx2n5IaRHvErxQ3F3mC9eoA.roa (hash: 7lh8IVxMzNOye7MoV2wQmo8+k8SIYxp7usLH9MCvefs=) 10: OYPY3gF3s1cp0YO06O3pINQLd6w.roa (hash: bcalgYqjszitJ2nTuJxpP+zc9mz/ySwIOlx3rr+xOrI=) 11: PnIUOaZTtm2gYot3Ty_z81HaxFg.roa (hash: iyty2fBHEEZGHeVBEkiIUxtySJJdOiac1gbSc8T8xHg=) 12: SoXV8K-5RRRRG3MNkK9ADRjUw68.roa (hash: piFPFAv4NTkQWPfJcDD5swhwQm6lgH8QwyqXPK5Cnuo=) 13: WjBimzywiq-8Yrfcs0lYstgI3ds.roa (hash: 4EfZBP66WNjm2OW7080n5DX6+5O4ByUCAqCUKZoTFJs=) 14: ZbRMfj9YfzPDdPWPOjDMA_pE5qY.roa (hash: /KAZcMzJGIdc2dYTw+AeY+8hxTs35s3WCjigCyXOcJQ=) 15: cn-oXj_T-RfCKsQxrw6E8Ys-CgQ.roa (hash: 3NJ5fBtNUF5n7GronNY2Bv83Oykj7G7TI/8gRlMpuMo=) 16: gDW3ab1PqB8HZ5e8A_qbKIWXK64.roa (hash: PQcff6BW0vltVudS5RZqj+SpgMTVSYVY9jCJhfcHTLA=) 17: pTmv66zomajuC7T4u0R1_iR6FSg.crl (hash: NQURwr6duxn7n5G4DU0OStkDPU1mq8k4GYEOpnddEPI=) 18: qz_R1TGXZbGqhqM3g1GKGHaKees.roa (hash: 43NOOm+JlcC5EDJuUoKJaXArhrxFvOp4ARvvoT/qKOs=) 19: u30uSL9wmmrrs1Xj770glr3MdDo.roa (hash: xtIgG9wchGphTb8JbvlmWsYrjnTKE4qCe5ydlOYINVQ=) 20: uBM8xkKDMiWlyAC9isOmm2koO64.roa (hash: /CyKvmM2YRRvwwcm5j+Yf26y64D4OTHxMMF86WDXsTE=) 21: vhaCW0twv6M6-2zpbCqh7ISIylE.roa (hash: UAEgEgdU1O1Fn/EwiOd9/xUaWf/QSUK/jq51sDBklgs=) 22: yruWR1NCtKhTA1Y0jkDGSQ7Li1w.roa (hash: id+/G1qp2RHEXBm9HXMHJDFpt7N+2QjmJYRceQeYf7s=) Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/6e/98c4ee-2f59-45a7-adb6-74139591312e/1/pTmv66zomajuC7T4u0R1_iR6FSg.crl rsync://rpki.ripe.net/repository/DEFAULT/6e/98c4ee-2f59-45a7-adb6-74139591312e/1/pTmv66zomajuC7T4u0R1_iR6FSg.mft rsync://rpki.ripe.net/repository/DEFAULT/pTmv66zomajuC7T4u0R1_iR6FSg.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Wed 10 Sep 2025 08:00:23 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:99:2e:90:e5:66:82:c3:30:ac:9e:5e:ef:37:2d:1e:72:fd Signature Algorithm: sha256WithRSAEncryption Issuer: CN=a539afebace899a8ee0bb4f8bb4475fe247a1528 Validity Not Before: Sep 9 13:01:11 2025 GMT Not After : Sep 10 13:01:11 2025 GMT Subject: CN=baff61cfeebfb7ac112514a5059b6fa83d4f3e69 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:c1:4f:72:08:a4:fa:f8:5b:c1:52:8d:37:9d:18: 62:66:e1:b1:d2:c8:8b:a3:63:96:16:4a:c5:f2:ee: 98:71:d2:37:60:48:76:f5:d2:e5:52:cd:34:7a:1c: d8:59:37:90:2d:af:04:da:94:21:e8:2e:26:06:83: 41:10:dd:26:5b:25:a5:2c:df:dc:6d:ae:4c:b0:d5: 7f:2f:1a:0a:60:21:f1:00:e6:5d:c5:c2:c4:44:c2: 61:45:04:d9:f3:f5:e6:e9:04:41:51:ad:54:83:fd: 25:52:06:ee:fe:92:0b:ae:1a:bd:2e:65:93:82:ed: 40:74:db:0f:41:81:37:04:84:45:2c:ed:ac:89:09: 99:96:7f:b5:b6:82:99:34:d5:34:75:44:72:a2:22: 3b:f9:1a:bf:d6:52:53:75:fc:01:d5:0b:77:a6:dc: 26:04:cb:b0:3d:5e:dc:3a:84:c0:d2:90:e5:9d:65: 28:4e:d1:fe:79:be:79:2c:e7:8e:49:4a:c5:fd:64: b0:22:10:33:78:83:d8:0f:87:de:e9:84:ca:cf:53: 8c:e2:fd:11:b8:54:68:e8:6a:47:2a:5e:fd:55:85: a8:fc:95:1d:82:29:fa:1c:5e:91:97:2a:a1:ab:65: 7f:82:90:78:f3:c7:54:3d:05:8f:a9:5a:38:24:11: f6:21 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: BA:FF:61:CF:EE:BF:B7:AC:11:25:14:A5:05:9B:6F:A8:3D:4F:3E:69 X509v3 Authority Key Identifier: keyid:A5:39:AF:EB:AC:E8:99:A8:EE:0B:B4:F8:BB:44:75:FE:24:7A:15:28 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/pTmv66zomajuC7T4u0R1_iR6FSg.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/6e/98c4ee-2f59-45a7-adb6-74139591312e/1/pTmv66zomajuC7T4u0R1_iR6FSg.mft X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/6e/98c4ee-2f59-45a7-adb6-74139591312e/1/pTmv66zomajuC7T4u0R1_iR6FSg.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 43:56:28:6f:ca:72:1b:0e:2b:c8:3a:32:c6:c6:95:71:b0:ae: e6:06:d8:e8:e4:4b:cc:49:5c:dc:9e:73:7a:35:3c:2f:08:bb: 00:0b:87:fb:8b:fa:c1:e1:3d:9c:37:df:c6:b3:2f:a5:28:96: 0f:76:75:70:cb:51:6e:cc:3d:e0:44:0d:00:4f:96:61:54:00: 7a:4b:30:bf:7c:74:4e:cf:ac:5e:45:75:f4:a7:38:f5:c1:f2: 4f:21:4c:00:94:df:7e:42:ad:a9:dc:e5:8b:ea:44:4e:06:a2: e9:11:11:60:44:65:6b:9f:8b:6c:e0:b0:9f:d8:4e:f3:3e:ea: 6d:82:4d:1d:c8:b5:58:85:41:bd:5a:7a:a1:93:6a:41:27:b2: 44:13:0e:c8:29:f3:63:c8:05:01:a6:97:2a:80:85:61:b3:7c: ee:9b:09:36:7f:8e:59:58:c8:b7:a9:40:50:fe:99:13:d5:f9: c8:1e:bd:8e:89:09:67:55:60:53:9a:80:37:89:54:de:4a:7a: 3b:e8:22:e6:7e:93:29:01:61:e4:ef:83:6b:85:1d:6c:e3:a3: b5:a3:90:5f:e0:9e:39:1d:0b:08:0e:9d:a2:cb:1a:bf:08:46: 96:fb:95:72:16:51:f6:a9:e9:2f:be:40:58:0c:ce:0d:63:8c: 8f:fc:32:19 -----BEGIN CERTIFICATE----- MIIFFjCCA/6gAwIBAgISAZkukOVmgsMwrJ5e7zctHnL9MA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKGE1MzlhZmViYWNlODk5YThlZTBiYjRmOGJiNDQ3NWZlMjQ3 YTE1MjgwHhcNMjUwOTA5MTMwMTExWhcNMjUwOTEwMTMwMTExWjAzMTEwLwYDVQQD EyhiYWZmNjFjZmVlYmZiN2FjMTEyNTE0YTUwNTliNmZhODNkNGYzZTY5MIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAwU9yCKT6+FvBUo03nRhiZuGx0siL o2OWFkrF8u6YcdI3YEh29dLlUs00ehzYWTeQLa8E2pQh6C4mBoNBEN0mWyWlLN/c ba5MsNV/LxoKYCHxAOZdxcLERMJhRQTZ8/Xm6QRBUa1Ug/0lUgbu/pILrhq9LmWT gu1AdNsPQYE3BIRFLO2siQmZln+1toKZNNU0dURyoiI7+Rq/1lJTdfwB1Qt3ptwm BMuwPV7cOoTA0pDlnWUoTtH+eb55LOeOSUrF/WSwIhAzeIPYD4fe6YTKz1OM4v0R uFRo6GpHKl79VYWo/JUdgin6HF6Rlyqhq2V/gpB488dUPQWPqVo4JBH2IQIDAQAB o4ICIjCCAh4wHQYDVR0OBBYEFLr/Yc/uv7esESUUpQWbb6g9Tz5pMB8GA1UdIwQY MBaAFKU5r+us6Jmo7gu0+LtEdf4kehUoMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvcFRtdjY2em9tYWp1QzdUNHUwUjFfaVI2RlNnLmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC82ZS85OGM0ZWUtMmY1OS00NWE3LWFkYjYt NzQxMzk1OTEzMTJlLzEvcFRtdjY2em9tYWp1QzdUNHUwUjFfaVI2RlNnLm1mdDCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC82ZS85OGM0ZWUtMmY1OS00NWE3LWFkYjYtNzQxMzk1OTEzMTJl LzEvcFRtdjY2em9tYWp1QzdUNHUwUjFfaVI2RlNnLmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAQ1Yob8py Gw4ryDoyxsaVcbCu5gbY6ORLzElc3J5zejU8Lwi7AAuH+4v6weE9nDffxrMvpSiW D3Z1cMtRbsw94EQNAE+WYVQAekswv3x0Ts+sXkV19Kc49cHyTyFMAJTffkKtqdzl i+pETgai6RERYERla5+LbOCwn9hO8z7qbYJNHci1WIVBvVp6oZNqQSeyRBMOyCnz Y8gFAaaXKoCFYbN87psJNn+OWVjIt6lAUP6ZE9X5yB69jokJZ1VgU5qAN4lU3kp6 O+gi5n6TKQFh5O+Da4UdbOOjtaOQX+CeOR0LCA6dossavwhGlvuVchZR9qnpL75A WAzODWOMj/wyGQ== -----END CERTIFICATE-----Generated at Tue Sep 9 18:23:37 2025 by rpki-client