$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/7e/ce6ccb-25cf-4917-b3cd-3056af9a335e/1/q8jb5SCDrTNcnx_eYBbsi0kpMUA.mft File: q8jb5SCDrTNcnx_eYBbsi0kpMUA.mft (raw, json) Hash identifier: 6PrvHpGx+0V6chse8kNEBCIqCkGblCkSvqGp4YWYV0U= Subject key identifier: 42:42:9F:56:1C:7E:CA:57:B8:D8:1B:F9:FB:BB:6D:54:45:94:AE:75 Authority key identifier: AB:C8:DB:E5:20:83:AD:33:5C:9F:1F:DE:60:16:EC:8B:49:29:31:40 Certificate issuer: /CN=abc8dbe52083ad335c9f1fde6016ec8b49293140 Certificate serial: 019931FF6DAE702EFC344905EA0342328AA2 Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/q8jb5SCDrTNcnx_eYBbsi0kpMUA.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/7e/ce6ccb-25cf-4917-b3cd-3056af9a335e/1/q8jb5SCDrTNcnx_eYBbsi0kpMUA.mft Manifest number: 16CD Signing time: Wed 10 Sep 2025 05:00:47 +0000 Manifest this update: Wed 10 Sep 2025 05:00:47 +0000 Manifest next update: Thu 11 Sep 2025 05:00:47 +0000 Files and hashes: 1: 3rSRd0RZU7FekSH23KpB4AjQvCA.roa (hash: dHJ5VK5jy4AG5zWMS9JzXCYfEPP9KtWlYIJ17BPZ8p4=) 2: 79SKiAPGItgSBiSdHsbiPNmxzdA.roa (hash: bp4Hzk1UysrE74qZJaWtC8IolTv/126MWUfJ4dgAP+w=) 3: 8CD_BDNohDu7BFPue0FAVtqeSKE.roa (hash: MBbBcYx0OZxz+xXv93fCUqPEHeogAGDOWRTI0SELjnU=) 4: DLGzg4PXXfMLLz9uU9Jb8GzjTYQ.roa (hash: UyDgyJqrwARZHVBt5A9PQUxwD+TJu3qnXyFQy1aEp9I=) 5: FmNEfzs-SRSfbomfiiNIeqQS1sk.roa (hash: DZqchwYxSvfrNSJm9BmQA3cTvM8eHMT7t5woC6TuhyE=) 6: Qdu0d9QLtNBsD5iH6QjOkHOjfR0.roa (hash: WIh4dCuUbUKwr5ezCX9dxWL5StxMpA6ugd95qMzqKA4=) 7: U3lA_e0y8319DjoZ7X8Ks2r2M7w.roa (hash: fqverKbNHsV3jVuR9y0WWha056JePZs0l3+H4zjSxfA=) 8: W4bkJ6IHGpMDnc-eERRMgLecaRY.roa (hash: f8DGWIOVKEtO1y7kX/yc0GrbmCyQ2M3bGkc6cPKnJfo=) 9: XWgY9IE5WPWEYKpZb_DdJSKgmNk.roa (hash: RjaBA1nT0ZNCp2uF/Bf1faWMk5+nUdGucIKvPd+4FJg=) 10: afCUdciEL8e1tl5gYWrtb0HNTsk.roa (hash: 5NoCDBuBZUGC39cg06n8OGy1uzMRcXZWmjT1H17s8qs=) 11: eeDfIlNHz-MS84Jn8ZaBvfv9TTY.roa (hash: Nuu5BDy0CuOnKoHwa87Nw4BNQ/P69UXEmPo5SaswqxY=) 12: ic4TzeBOLx46VAxZ0kBOyLnL-aA.roa (hash: o/eumNvuz+9CmmVOqXWqv98TZutXQn/8mhjgfl+DMUM=) 13: jEkIkDjyHf0Y5CHlkh_SAYrLMi8.roa (hash: nK+7va5r0DKn11vhjaj1KeeLmtO5MjFetghK5DI3nyo=) 14: k1o7H-5eEgCdvmr2Au7FXonmUIc.roa (hash: cPZnlWd1NF/fLPFMgOLyjHXmXf8GfrHrU0SBnmHDHvY=) 15: lSOxZN--Nv76VTwU3O8Fys07u2M.roa (hash: KF0YUVuZrHgrWuxvGjcknBz1cOoRQsrm28h1CM9VPOI=) 16: oRojqrF2upd4qpGF9qwuvKkB85M.roa (hash: rI1ZvEDD5nBz4EJV2sl7C1HlZDCYTwKf5IAxKcbibxk=) 17: q8jb5SCDrTNcnx_eYBbsi0kpMUA.crl (hash: 3RyeIy/oF3Yi7JWu8tfM0Yfe9Ok6gvEYelT/yi8rb4w=) 18: rbJzreDbHp60Zc3UJ6AODADth8g.roa (hash: BpjTDuP8RPY+luxryeSysWVMte9pS4i/E17bDx01jBk=) 19: rq4z53nTY235oXOYEJGf8J9hSBk.roa (hash: ALoDf8xPedv7a4y1Cobi6nNzEhORdIhw3weFRomPawE=) 20: wWbDK40S4dgNgIeoUbg-t_w6Qx0.roa (hash: SQUX4nOmlr/84KlBRvNtQfHH9k/9TOfWpMlz56zCIZQ=) Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/7e/ce6ccb-25cf-4917-b3cd-3056af9a335e/1/q8jb5SCDrTNcnx_eYBbsi0kpMUA.crl rsync://rpki.ripe.net/repository/DEFAULT/7e/ce6ccb-25cf-4917-b3cd-3056af9a335e/1/q8jb5SCDrTNcnx_eYBbsi0kpMUA.mft rsync://rpki.ripe.net/repository/DEFAULT/q8jb5SCDrTNcnx_eYBbsi0kpMUA.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Wed 10 Sep 2025 21:45:22 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:99:31:ff:6d:ae:70:2e:fc:34:49:05:ea:03:42:32:8a:a2 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=abc8dbe52083ad335c9f1fde6016ec8b49293140 Validity Not Before: Sep 10 05:00:47 2025 GMT Not After : Sep 11 05:00:47 2025 GMT Subject: CN=42429f561c7eca57b8d81bf9fbbb6d544594ae75 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:b6:69:76:56:d6:96:a9:4b:57:86:6f:87:57:b9: ed:42:74:10:43:61:fe:4c:9e:c2:5c:e8:63:aa:2f: 3e:41:d6:95:79:ad:aa:92:7a:5d:01:b1:a6:61:04: fb:fa:c5:70:73:77:18:a1:e0:f1:7f:83:e1:84:81: 2c:0e:db:8b:7d:99:54:16:89:97:91:fa:ba:d1:4a: 7b:2e:46:67:d1:14:d4:aa:6e:38:fc:e9:7c:c2:05: ec:fb:d1:b9:ca:7d:b8:85:ce:35:3a:56:ec:73:37: 4e:7f:81:9b:a5:e0:8e:8f:57:c2:80:37:2f:ed:9c: f8:39:43:e7:4d:a0:be:82:4b:e0:62:fe:26:37:bf: 98:74:e5:67:ad:22:44:e4:3c:29:3c:95:2c:ee:87: 4d:17:a4:e1:c0:3a:27:32:5a:da:5d:e2:6b:85:8e: e2:1d:93:c4:32:eb:d1:1f:a2:d8:3b:8b:3f:3e:b9: 7b:52:77:b6:ee:c9:12:56:f2:f2:15:ee:a5:37:bc: fc:51:49:d6:da:65:58:f8:64:c9:83:21:4d:21:c3: 70:68:08:6e:b3:bf:df:18:75:ba:01:a2:8d:09:95: ee:e2:00:2d:e8:19:93:60:ee:55:d7:ac:90:92:f8: 9c:b8:c1:ac:59:fb:82:a9:de:56:80:a4:fb:fa:10: c7:03 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 42:42:9F:56:1C:7E:CA:57:B8:D8:1B:F9:FB:BB:6D:54:45:94:AE:75 X509v3 Authority Key Identifier: keyid:AB:C8:DB:E5:20:83:AD:33:5C:9F:1F:DE:60:16:EC:8B:49:29:31:40 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/q8jb5SCDrTNcnx_eYBbsi0kpMUA.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/7e/ce6ccb-25cf-4917-b3cd-3056af9a335e/1/q8jb5SCDrTNcnx_eYBbsi0kpMUA.mft X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/7e/ce6ccb-25cf-4917-b3cd-3056af9a335e/1/q8jb5SCDrTNcnx_eYBbsi0kpMUA.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 32:9f:08:d7:d5:0e:61:70:2e:5b:89:ef:d5:67:d1:79:f4:ec: a9:05:f3:d5:ec:c6:8d:3c:cd:da:fb:08:1f:7a:86:a0:aa:7c: cd:30:f3:c6:b3:f4:40:82:e2:45:82:96:e5:d3:10:67:c4:9b: 9a:69:e3:68:16:d2:e7:bc:2a:e7:a0:04:2b:72:24:6e:0d:f4: 82:08:74:e0:d9:7a:43:b4:41:bd:8c:88:ff:39:3f:8e:26:e0: b3:3f:1a:6a:a6:0f:c4:14:c5:c5:85:54:fc:25:63:b0:cf:ee: 71:d0:9c:3b:59:09:72:21:28:e8:4a:c1:a1:68:d5:7b:be:02: b1:ae:92:78:51:e9:2f:f8:6d:e7:5f:26:4b:79:f0:a5:8a:88: de:d8:80:c0:3e:bc:1a:3a:3d:06:1a:87:4c:30:63:79:78:21: 1f:36:1e:25:ac:38:4a:09:5a:d2:6e:e9:e5:d9:a9:3e:77:81: ea:fb:4b:0d:b5:dd:b2:1c:e6:55:97:17:6f:8c:9a:59:93:89: 03:fd:37:c8:81:71:52:41:c0:cb:41:45:90:3c:d1:f6:71:14: 32:7f:54:17:5b:37:3e:92:b9:69:5a:ae:a1:e7:ee:b4:2f:fc: 69:b6:ad:f7:53:e1:cb:68:55:2e:fb:33:6d:f7:75:24:74:54: a5:e0:e3:67 -----BEGIN CERTIFICATE----- MIIFFjCCA/6gAwIBAgISAZkx/22ucC78NEkF6gNCMoqiMA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKGFiYzhkYmU1MjA4M2FkMzM1YzlmMWZkZTYwMTZlYzhiNDky OTMxNDAwHhcNMjUwOTEwMDUwMDQ3WhcNMjUwOTExMDUwMDQ3WjAzMTEwLwYDVQQD Eyg0MjQyOWY1NjFjN2VjYTU3YjhkODFiZjlmYmJiNmQ1NDQ1OTRhZTc1MIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAtml2VtaWqUtXhm+HV7ntQnQQQ2H+ TJ7CXOhjqi8+QdaVea2qknpdAbGmYQT7+sVwc3cYoeDxf4PhhIEsDtuLfZlUFomX kfq60Up7LkZn0RTUqm44/Ol8wgXs+9G5yn24hc41OlbsczdOf4GbpeCOj1fCgDcv 7Zz4OUPnTaC+gkvgYv4mN7+YdOVnrSJE5DwpPJUs7odNF6ThwDonMlraXeJrhY7i HZPEMuvRH6LYO4s/Prl7Une27skSVvLyFe6lN7z8UUnW2mVY+GTJgyFNIcNwaAhu s7/fGHW6AaKNCZXu4gAt6BmTYO5V16yQkvicuMGsWfuCqd5WgKT7+hDHAwIDAQAB o4ICIjCCAh4wHQYDVR0OBBYEFEJCn1YcfspXuNgb+fu7bVRFlK51MB8GA1UdIwQY MBaAFKvI2+Ugg60zXJ8f3mAW7ItJKTFAMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvcThqYjVTQ0RyVE5jbnhfZVlCYnNpMGtwTVVBLmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC83ZS9jZTZjY2ItMjVjZi00OTE3LWIzY2Qt MzA1NmFmOWEzMzVlLzEvcThqYjVTQ0RyVE5jbnhfZVlCYnNpMGtwTVVBLm1mdDCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC83ZS9jZTZjY2ItMjVjZi00OTE3LWIzY2QtMzA1NmFmOWEzMzVl LzEvcThqYjVTQ0RyVE5jbnhfZVlCYnNpMGtwTVVBLmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAMp8I19UO YXAuW4nv1WfRefTsqQXz1ezGjTzN2vsIH3qGoKp8zTDzxrP0QILiRYKW5dMQZ8Sb mmnjaBbS57wq56AEK3Ikbg30ggh04Nl6Q7RBvYyI/zk/jibgsz8aaqYPxBTFxYVU /CVjsM/ucdCcO1kJciEo6ErBoWjVe74Csa6SeFHpL/ht518mS3nwpYqI3tiAwD68 Gjo9BhqHTDBjeXghHzYeJaw4Sgla0m7p5dmpPneB6vtLDbXdshzmVZcXb4yaWZOJ A/03yIFxUkHAy0FFkDzR9nEUMn9UF1s3PpK5aVquoefutC/8abat91Phy2hVLvsz bfd1JHRUpeDjZw== -----END CERTIFICATE-----Generated at Wed Sep 10 06:40:41 2025 by rpki-client