$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/75/9118e2-ae74-4c24-a775-32aa6731c291/1/ORnyrZFYS6_wRnRHusj7l40fndM.mft File: ORnyrZFYS6_wRnRHusj7l40fndM.mft (raw, json) Hash identifier: ewedpq7X/bVCE+HwSyCIBefyoEdwwP0aUuxP3WT3+D4= Subject key identifier: FB:DE:41:D5:9F:44:74:C7:E7:8D:5F:18:0A:8C:8A:D2:92:04:37:67 Authority key identifier: 39:19:F2:AD:91:58:4B:AF:F0:46:74:47:BA:C8:FB:97:8D:1F:9D:D3 Certificate issuer: /CN=3919f2ad91584baff0467447bac8fb978d1f9dd3 Certificate serial: 01992DECC54FC1F576A153DC879EE808720F Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/ORnyrZFYS6_wRnRHusj7l40fndM.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/75/9118e2-ae74-4c24-a775-32aa6731c291/1/ORnyrZFYS6_wRnRHusj7l40fndM.mft Manifest number: 169D Signing time: Tue 09 Sep 2025 10:01:55 +0000 Manifest this update: Tue 09 Sep 2025 10:01:55 +0000 Manifest next update: Wed 10 Sep 2025 10:01:55 +0000 Files and hashes: 1: 3Xkfgsy5F0IowNcy1PedAB3Q6w0.roa (hash: iyJL5cuUJjZvE75tBtKfcWvyK2dmPiVKM7BX3wZGQos=) 2: 4EDvDSCIPe0YYvYx7Str0IpAPeM.roa (hash: A9xeZgyOfSqqIMRvaPEIhp5b1RhtdrlitB+v147UkT4=) 3: 5pue0s9j8lhdVuO6m6E92d4GwDU.roa (hash: CSkd5pFYexGISl0uc2qVJpocMMmmGw3Zguf0ypv5Owk=) 4: M5hYRJhvdGCKvhvMAGC4jWTJSXA.roa (hash: VGkxa4pTyEqZCbbcRS6HnlUuOo2QmctHYBT+vvYYBDg=) 5: ORnyrZFYS6_wRnRHusj7l40fndM.crl (hash: P3dOlO+tD0idRZkoLc+rMsuYz+KAhsjM2/nVaKAdf0E=) 6: WBerlCoyvzWnSx7AM9uVxy9XUro.roa (hash: FyOYZU8Lcu6m3tCIEh8spxjddiJiAmITHkAJjSq/GW0=) 7: fwV1k52lO0Kl8PKqz6r0ivt-Ecw.roa (hash: wA10+gQDMIvjO6vwOkogAfMa2WdHrOFvQ0AHKy4MA4g=) 8: hWosbOoApl7V_Bhpe5UlA20sERA.roa (hash: PkJmNJ/LtXuQwtW6f6gFggLl9YMZJgAspupTTJw2DD0=) 9: m-oD5AGGiKc-qI8F9BHOsqfUhwQ.roa (hash: ZivLa2r1rkIhgA7nnzvSrie3rkSLQvNS6UhWQpi2o50=) 10: r4CnQQx_zbdBDGpIsGGdqEuowRg.roa (hash: Cf3KdUglzAXq3AND0kUcTnVm0D52NG4w3f87gIFdSQg=) 11: uot90FkBP8Y3Y-x6-7brjjoB-rU.roa (hash: 0JXXSAl/uFfrD7KxeCsCoDWgeiNKlIuga4IDFWQXH2c=) Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/75/9118e2-ae74-4c24-a775-32aa6731c291/1/ORnyrZFYS6_wRnRHusj7l40fndM.crl rsync://rpki.ripe.net/repository/DEFAULT/75/9118e2-ae74-4c24-a775-32aa6731c291/1/ORnyrZFYS6_wRnRHusj7l40fndM.mft rsync://rpki.ripe.net/repository/DEFAULT/ORnyrZFYS6_wRnRHusj7l40fndM.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Wed 10 Sep 2025 08:00:23 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:99:2d:ec:c5:4f:c1:f5:76:a1:53:dc:87:9e:e8:08:72:0f Signature Algorithm: sha256WithRSAEncryption Issuer: CN=3919f2ad91584baff0467447bac8fb978d1f9dd3 Validity Not Before: Sep 9 10:01:55 2025 GMT Not After : Sep 10 10:01:55 2025 GMT Subject: CN=fbde41d59f4474c7e78d5f180a8c8ad292043767 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:bd:cb:80:d1:e3:15:ea:05:5a:0f:02:de:79:46: c1:c5:87:cd:7d:56:ea:70:c8:c8:e5:5e:18:5a:ea: 0c:62:2d:34:50:35:e4:3d:c2:99:ee:83:47:ff:63: 9e:fb:e5:9d:21:96:4c:60:69:13:8b:4c:d3:bf:63: 8c:a4:1e:a0:c8:b9:6a:30:0d:de:c0:3d:96:05:51: c2:b9:de:5a:e8:67:c3:d0:04:70:62:a9:7e:47:76: fe:7a:cf:b6:9f:ef:0d:a1:3c:f0:0c:c1:34:69:69: 1c:2c:03:c7:a0:03:ea:7c:09:4f:4d:fc:66:5c:04: 27:0d:76:36:9f:e8:ed:a3:96:80:3c:82:95:c6:35: c1:db:48:a5:0f:05:f5:44:cc:f7:7f:9e:cb:f0:d2: 15:0b:bd:e9:01:b6:59:68:96:8a:dd:38:08:27:c2: bb:c8:0e:02:5e:3c:59:e6:c5:d4:1e:06:d6:f0:d3: 42:c9:24:0c:da:83:be:87:c6:1e:89:18:ad:49:67: 51:5d:5e:47:65:ac:5e:92:c8:51:6b:4f:19:ef:98: 9c:72:75:e6:1b:cd:ca:d8:dc:74:cb:af:20:4a:72: 86:56:8e:1d:a9:11:75:ef:31:83:09:92:6d:0e:85: fb:04:98:2a:9b:7f:44:dd:9c:cf:7b:2f:df:6e:32: 2b:71 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: FB:DE:41:D5:9F:44:74:C7:E7:8D:5F:18:0A:8C:8A:D2:92:04:37:67 X509v3 Authority Key Identifier: keyid:39:19:F2:AD:91:58:4B:AF:F0:46:74:47:BA:C8:FB:97:8D:1F:9D:D3 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/ORnyrZFYS6_wRnRHusj7l40fndM.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/75/9118e2-ae74-4c24-a775-32aa6731c291/1/ORnyrZFYS6_wRnRHusj7l40fndM.mft X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/75/9118e2-ae74-4c24-a775-32aa6731c291/1/ORnyrZFYS6_wRnRHusj7l40fndM.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 7d:07:34:0b:ff:a1:86:9d:50:2e:a1:43:bb:c9:b1:79:21:f7: 69:f0:05:c8:6a:cc:54:57:cb:d9:98:68:d3:2d:0a:05:bc:3f: 0c:24:8f:d1:c0:76:20:e7:97:8f:9b:2d:59:54:74:b7:52:3e: 2c:7a:2d:41:98:68:e4:ef:e1:d6:5f:09:05:92:4e:df:b9:3a: 93:01:b2:ed:6a:8a:15:e2:0e:4f:e9:46:32:33:61:21:cb:99: bf:17:26:d6:cb:f6:f0:7b:99:04:b2:2e:be:76:5e:01:76:ef: 23:39:be:43:c1:61:ad:ef:71:31:5e:63:65:94:aa:55:c1:17: f6:b5:18:b9:b6:b8:a7:a3:46:55:eb:8d:28:f3:21:70:47:f7: 5e:e6:e9:bf:ed:dc:cc:fe:b5:13:94:9e:ce:3f:3e:5d:d6:8e: 9b:2f:37:97:81:e4:39:b9:95:bb:0f:46:2e:a0:fc:73:5f:fe: a0:28:23:93:d6:13:3d:1e:e3:ac:19:83:32:54:e1:d2:d5:25: fd:51:b6:18:7f:9d:15:05:4f:14:d4:06:31:71:a8:10:a9:81: ca:89:7d:a1:2b:c2:98:6e:27:6f:4b:ad:c7:9f:61:89:1d:cb: 50:78:fb:c1:3b:cd:1d:b5:1e:f6:d5:a4:ce:38:21:59:d5:46: 1d:b3:12:32 -----BEGIN CERTIFICATE----- MIIFFjCCA/6gAwIBAgISAZkt7MVPwfV2oVPch57oCHIPMA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKDM5MTlmMmFkOTE1ODRiYWZmMDQ2NzQ0N2JhYzhmYjk3OGQx ZjlkZDMwHhcNMjUwOTA5MTAwMTU1WhcNMjUwOTEwMTAwMTU1WjAzMTEwLwYDVQQD EyhmYmRlNDFkNTlmNDQ3NGM3ZTc4ZDVmMTgwYThjOGFkMjkyMDQzNzY3MIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAvcuA0eMV6gVaDwLeeUbBxYfNfVbq cMjI5V4YWuoMYi00UDXkPcKZ7oNH/2Oe++WdIZZMYGkTi0zTv2OMpB6gyLlqMA3e wD2WBVHCud5a6GfD0ARwYql+R3b+es+2n+8NoTzwDME0aWkcLAPHoAPqfAlPTfxm XAQnDXY2n+jto5aAPIKVxjXB20ilDwX1RMz3f57L8NIVC73pAbZZaJaK3TgIJ8K7 yA4CXjxZ5sXUHgbW8NNCySQM2oO+h8YeiRitSWdRXV5HZaxekshRa08Z75iccnXm G83K2Nx0y68gSnKGVo4dqRF17zGDCZJtDoX7BJgqm39E3ZzPey/fbjIrcQIDAQAB o4ICIjCCAh4wHQYDVR0OBBYEFPveQdWfRHTH541fGAqMitKSBDdnMB8GA1UdIwQY MBaAFDkZ8q2RWEuv8EZ0R7rI+5eNH53TMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvT1JueXJaRllTNl93Um5SSHVzajdsNDBmbmRNLmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC83NS85MTE4ZTItYWU3NC00YzI0LWE3NzUt MzJhYTY3MzFjMjkxLzEvT1JueXJaRllTNl93Um5SSHVzajdsNDBmbmRNLm1mdDCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC83NS85MTE4ZTItYWU3NC00YzI0LWE3NzUtMzJhYTY3MzFjMjkx LzEvT1JueXJaRllTNl93Um5SSHVzajdsNDBmbmRNLmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAfQc0C/+h hp1QLqFDu8mxeSH3afAFyGrMVFfL2Zho0y0KBbw/DCSP0cB2IOeXj5stWVR0t1I+ LHotQZho5O/h1l8JBZJO37k6kwGy7WqKFeIOT+lGMjNhIcuZvxcm1sv28HuZBLIu vnZeAXbvIzm+Q8Fhre9xMV5jZZSqVcEX9rUYuba4p6NGVeuNKPMhcEf3Xubpv+3c zP61E5Sezj8+XdaOmy83l4HkObmVuw9GLqD8c1/+oCgjk9YTPR7jrBmDMlTh0tUl /VG2GH+dFQVPFNQGMXGoEKmByol9oSvCmG4nb0utx59hiR3LUHj7wTvNHbUe9tWk zjghWdVGHbMSMg== -----END CERTIFICATE-----Generated at Tue Sep 9 14:07:26 2025 by rpki-client