$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/80/4984df-6db2-4e0a-91f8-bf05acc82bd1/1/CoH-kFn2ggvBitWALy8fynfSVLc.mft File: CoH-kFn2ggvBitWALy8fynfSVLc.mft (raw, json) Hash identifier: 5mpuEzS+5n30d1G16uIgzxPlh/WRtfFG3VFZqcf3JNQ= Subject key identifier: D0:88:C1:DA:16:66:54:EC:3E:BA:D6:12:97:C6:73:CA:E4:CD:0C:75 Authority key identifier: 0A:81:FE:90:59:F6:82:0B:C1:8A:D5:80:2F:2F:1F:CA:77:D2:54:B7 Certificate issuer: /CN=0a81fe9059f6820bc18ad5802f2f1fca77d254b7 Certificate serial: 019923D62A9FC4DA3476744C31F7003D5A7A Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/CoH-kFn2ggvBitWALy8fynfSVLc.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/80/4984df-6db2-4e0a-91f8-bf05acc82bd1/1/CoH-kFn2ggvBitWALy8fynfSVLc.mft Manifest number: 09D3 Signing time: Sun 07 Sep 2025 11:01:02 +0000 Manifest this update: Sun 07 Sep 2025 11:01:02 +0000 Manifest next update: Mon 08 Sep 2025 11:01:02 +0000 Files and hashes: 1: 31z7eSu8--35kebgOlCIABBeVf8.roa (hash: Bo6lIvIlV0RX6xhodzhO7tuvgscKOLMBcfTJSKlUYZw=) 2: 7pPLJaN3OTQBK8i-P4GOQNKJPho.roa (hash: HpLQLLrJKx/bS+zdiKUm5TCX+jRSuh5jVP1YSt/MOZY=) 3: CoH-kFn2ggvBitWALy8fynfSVLc.crl (hash: PWxl86HWqCj47xNu0QPVllqSHv3DQ4snBnWtW2az5TI=) 4: EacbpO8P-LkG-h50-C35fVYJXyI.roa (hash: btUaf5jDz02025fLzDlihBUOmr88cX2MxuDiHPb5dc4=) 5: FstRBv2kO53NDHW81Q9Mg07SWg4.roa (hash: +uStvYqgj5hn3d6BL0rwAnmTzIsGb1x7W+G4jAHTkdA=) 6: Gf8Y2t4y9XW51teYl9-IOJM-QkE.roa (hash: JzLxoz0gWXWBbhQLZinkEP2bb0OKmAdUFJyyBJ71KUI=) 7: N0ylFt5LVYNjTI-_TsSgO84trzU.roa (hash: FGN5RCpPLee+DVEx92LqF5VUyDDoLbxxrafkYHnOVZg=) 8: PEEbtcraLxJZAPZLAW5H_KDLDwQ.roa (hash: wU0HPJ884+fnbW1G1BaCynti9gWD3Sn+0YrIsJUp3ns=) 9: hLdZE5q1FOXSO44ZofCjRXN9z7I.roa (hash: CmOCZv7BugezIWG5ZPHeIaee5S3CP9UP9zRJfwRzazg=) 10: i1bI7bZVKfcJ9vCnWPYEzcCSqOc.roa (hash: I9SME80ARJLDqvqmW5BBXCvNlxHc4Su4PKuf6AZPdG4=) 11: n_d7GjbZ9YbYK045nkHL_lX76pM.roa (hash: L6McSAJwh8T7ZY3ArgurepjkJRDGFkS06sAchDylLyc=) 12: pW-Kl5UPWqu6KG3_J4t1h52HuR0.roa (hash: 0HOBimxzzdToQy38vYlAJbGZVaBtPNrg0qioOLxF/+Q=) 13: tlqKEYYvFMWYK-JPntFn1nyKI1U.roa (hash: /wIoPxgkbhHCyNQ8NB2J0bNqG5fb1wxitY8EONuXMt0=) 14: yFPiywRMEHaITt3TRPzJux8bzAU.roa (hash: WnTskmfJ1KLR7sA0SYoAyMqXx6u45IJAhh3f7ztydOk=) Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/80/4984df-6db2-4e0a-91f8-bf05acc82bd1/1/CoH-kFn2ggvBitWALy8fynfSVLc.crl rsync://rpki.ripe.net/repository/DEFAULT/80/4984df-6db2-4e0a-91f8-bf05acc82bd1/1/CoH-kFn2ggvBitWALy8fynfSVLc.mft rsync://rpki.ripe.net/repository/DEFAULT/CoH-kFn2ggvBitWALy8fynfSVLc.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Mon 08 Sep 2025 11:01:02 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:99:23:d6:2a:9f:c4:da:34:76:74:4c:31:f7:00:3d:5a:7a Signature Algorithm: sha256WithRSAEncryption Issuer: CN=0a81fe9059f6820bc18ad5802f2f1fca77d254b7 Validity Not Before: Sep 7 11:01:02 2025 GMT Not After : Sep 8 11:01:02 2025 GMT Subject: CN=d088c1da166654ec3ebad61297c673cae4cd0c75 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:d3:23:8c:d0:19:05:f1:67:2d:f1:ac:16:c9:b7: 9c:f8:a0:e6:5a:1f:91:bb:bd:01:dd:18:03:ea:43: 1a:47:b7:ce:bc:ee:ba:30:36:6a:2d:4e:4e:7d:37: 33:72:6d:11:37:05:45:3d:dd:53:9c:aa:26:c8:e9: 4e:d2:9d:7d:24:4c:35:d0:47:ba:9d:08:cd:05:34: b5:b4:4c:47:1b:ea:94:f4:46:43:83:18:33:45:e2: 5c:f8:9d:84:62:b9:84:4a:f4:44:e1:86:e7:f5:e3: 51:77:0c:3e:ea:e3:01:cc:7d:63:00:ca:83:2b:25: 92:6e:05:84:23:0b:96:a7:d2:dd:76:50:ff:f8:28: 60:89:25:47:fa:4a:5a:19:47:90:5c:4d:4b:b8:9b: 08:cd:89:78:5a:7e:30:d2:f3:ce:aa:e8:44:67:30: d1:1f:65:35:b8:61:d2:03:85:88:d6:46:4e:9c:39: 8c:0a:ab:1a:20:28:95:42:76:64:a3:14:45:4b:32: 5b:19:b4:b3:63:6f:af:01:8a:2e:c0:3f:b4:01:2e: 2a:ba:b4:ab:6e:17:ce:ca:76:a5:67:d1:47:8e:e1: 22:19:68:31:28:e0:8a:55:1c:da:28:f5:da:38:8f: 9c:cf:6b:55:da:66:27:26:90:cd:b9:91:81:d7:72: 17:7f Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: D0:88:C1:DA:16:66:54:EC:3E:BA:D6:12:97:C6:73:CA:E4:CD:0C:75 X509v3 Authority Key Identifier: keyid:0A:81:FE:90:59:F6:82:0B:C1:8A:D5:80:2F:2F:1F:CA:77:D2:54:B7 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/CoH-kFn2ggvBitWALy8fynfSVLc.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/80/4984df-6db2-4e0a-91f8-bf05acc82bd1/1/CoH-kFn2ggvBitWALy8fynfSVLc.mft X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/80/4984df-6db2-4e0a-91f8-bf05acc82bd1/1/CoH-kFn2ggvBitWALy8fynfSVLc.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 15:f3:01:7d:9c:ef:d8:74:d1:6b:41:f0:6c:ba:a6:38:f9:af: b7:78:5f:3c:b0:a8:8b:df:c0:a0:ec:63:03:05:64:3c:76:b2: df:85:84:dc:23:90:1b:39:ac:b2:12:e0:e7:d1:35:bf:55:58: 13:81:2c:f5:9b:8b:98:3a:e4:4f:24:49:45:55:0c:8b:84:37: f1:78:3c:c3:ae:1d:88:83:51:82:84:07:78:f2:40:3b:4e:cd: 22:00:19:69:2c:9f:1f:92:e8:f8:68:f7:19:54:2e:b7:06:75: a9:c3:a8:f2:80:d0:71:99:1d:ac:4f:49:5f:7f:97:74:9c:76: 91:79:09:97:02:f6:28:06:ac:71:e0:c7:94:7c:e3:b9:2a:71: d7:55:cb:0f:40:4d:ef:c2:57:81:f6:d7:a6:5d:f8:21:43:7f: ef:00:b1:2b:4c:c4:8f:08:0b:70:9c:bf:b3:24:6e:f0:ab:35: 4d:36:1e:ee:a2:37:68:2e:b2:88:c7:da:e0:7b:a2:3d:d3:3b: 73:2b:03:66:ed:1a:59:f2:06:0e:92:96:fb:dc:f8:86:87:70: a4:91:9a:3a:23:f7:7a:3d:53:d1:6d:63:d2:f0:82:ac:05:2f: 85:be:1b:18:9e:44:c8:94:21:98:86:83:5e:bc:60:f1:e9:85: d8:b7:61:35 -----BEGIN CERTIFICATE----- MIIFFjCCA/6gAwIBAgISAZkj1iqfxNo0dnRMMfcAPVp6MA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKDBhODFmZTkwNTlmNjgyMGJjMThhZDU4MDJmMmYxZmNhNzdk MjU0YjcwHhcNMjUwOTA3MTEwMTAyWhcNMjUwOTA4MTEwMTAyWjAzMTEwLwYDVQQD EyhkMDg4YzFkYTE2NjY1NGVjM2ViYWQ2MTI5N2M2NzNjYWU0Y2QwYzc1MIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEA0yOM0BkF8Wct8awWybec+KDmWh+R u70B3RgD6kMaR7fOvO66MDZqLU5OfTczcm0RNwVFPd1TnKomyOlO0p19JEw10Ee6 nQjNBTS1tExHG+qU9EZDgxgzReJc+J2EYrmESvRE4Ybn9eNRdww+6uMBzH1jAMqD KyWSbgWEIwuWp9LddlD/+ChgiSVH+kpaGUeQXE1LuJsIzYl4Wn4w0vPOquhEZzDR H2U1uGHSA4WI1kZOnDmMCqsaICiVQnZkoxRFSzJbGbSzY2+vAYouwD+0AS4qurSr bhfOynalZ9FHjuEiGWgxKOCKVRzaKPXaOI+cz2tV2mYnJpDNuZGB13IXfwIDAQAB o4ICIjCCAh4wHQYDVR0OBBYEFNCIwdoWZlTsPrrWEpfGc8rkzQx1MB8GA1UdIwQY MBaAFAqB/pBZ9oILwYrVgC8vH8p30lS3MA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvQ29ILWtGbjJnZ3ZCaXRXQUx5OGZ5bmZTVkxjLmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC84MC80OTg0ZGYtNmRiMi00ZTBhLTkxZjgt YmYwNWFjYzgyYmQxLzEvQ29ILWtGbjJnZ3ZCaXRXQUx5OGZ5bmZTVkxjLm1mdDCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC84MC80OTg0ZGYtNmRiMi00ZTBhLTkxZjgtYmYwNWFjYzgyYmQx LzEvQ29ILWtGbjJnZ3ZCaXRXQUx5OGZ5bmZTVkxjLmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAFfMBfZzv 2HTRa0HwbLqmOPmvt3hfPLCoi9/AoOxjAwVkPHay34WE3COQGzmsshLg59E1v1VY E4Es9ZuLmDrkTyRJRVUMi4Q38Xg8w64diINRgoQHePJAO07NIgAZaSyfH5Lo+Gj3 GVQutwZ1qcOo8oDQcZkdrE9JX3+XdJx2kXkJlwL2KAasceDHlHzjuSpx11XLD0BN 78JXgfbXpl34IUN/7wCxK0zEjwgLcJy/syRu8Ks1TTYe7qI3aC6yiMfa4HuiPdM7 cysDZu0aWfIGDpKW+9z4hodwpJGaOiP3ej1T0W1j0vCCrAUvhb4bGJ5EyJQhmIaD Xrxg8emF2LdhNQ== -----END CERTIFICATE-----Generated at Sun Sep 7 17:12:01 2025 by rpki-client