$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/80/fb42ec-10b4-4dcf-bef0-2d143d7b853c/1/9fsy0iZrH5vOV8rJi8AkfyyRl_I.mft File: 9fsy0iZrH5vOV8rJi8AkfyyRl_I.mft (raw, json) Hash identifier: AT/Kf7TawBd4J5smoAjk7V4FuN3rY1GEYZHrAP7OCGY= Subject key identifier: EB:5E:DC:97:3F:FD:7C:35:8D:D1:7F:28:24:72:FA:C4:FE:E8:F8:F2 Authority key identifier: F5:FB:32:D2:26:6B:1F:9B:CE:57:CA:C9:8B:C0:24:7F:2C:91:97:F2 Certificate issuer: /CN=f5fb32d2266b1f9bce57cac98bc0247f2c9197f2 Certificate serial: 019918096F86039F3306BC61EB03770F5BAD Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/9fsy0iZrH5vOV8rJi8AkfyyRl_I.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/80/fb42ec-10b4-4dcf-bef0-2d143d7b853c/1/9fsy0iZrH5vOV8rJi8AkfyyRl_I.mft Manifest number: 1013 Signing time: Fri 05 Sep 2025 04:01:35 +0000 Manifest this update: Fri 05 Sep 2025 04:01:35 +0000 Manifest next update: Sat 06 Sep 2025 04:01:35 +0000 Files and hashes: 1: 7InXKoGXPyPmSkShdNo1bN5BHPE.roa (hash: p0vQNoVwsgdCf98zXzcil2JDwtIbKg4o52YVuAX43Qg=) 2: 9fsy0iZrH5vOV8rJi8AkfyyRl_I.crl (hash: ikrdkqRy5DtIY+ykkAZqIYmyK7j/IGlpI5MUDHCNg9U=) 3: G7eTk3jqB-BdA_Wy3K2E2YFtyTA.roa (hash: OtseOoY4gfu7tKjqn1wIwpg1/zv9XoIf0fx8DQ1CUfM=) 4: ISNHkwTdIse1R5eVAbZVrpNzf7I.roa (hash: aWcNBCaUk6iVQl/ljrkexa0tplOypXs9VyEvekzMA3M=) 5: L0ujmwzkJ6RRH45eugAjMYC2Zhg.roa (hash: ZYuGlloJDpR2SY2TTczc6v50q6dosW6j6YAj25G96Pg=) 6: LII7hRC3tP9UTUOEbD-OlE2YLz0.roa (hash: 2G0IT+KoXJQxpXp8HjaK3udKnKhR8XLas866IuV7Mj4=) 7: MGAJtndIL2Zkck_RVFiKK_Egp5c.roa (hash: 3Dl+p66+/Z3qtyr+Z1rkPfMp8vG5nBq1fl9w3qHRGM4=) 8: VTdQuPLguO6Ibw0Th9ypJCxyOf8.roa (hash: ipcRPToVDEN7EVH1AfqkAeCn3ymsz/f4y1+i87V66wQ=) 9: _nLYAZC-VddX97JjR5Q6LKKqBQ4.roa (hash: ndREz8aC1hd1w5pe58qePL+6kw9PyDSZ6Q1HeOlC7Rc=) 10: d1Mc0OsWnepemmVerPa7kdZl1N8.roa (hash: JRdvIEtlRj7j9yeTQYkXzcTmst5QyvuiftJaDhMJ8Og=) 11: gZtcQ4r6Woqv34G6dpT_HEC-DoY.roa (hash: FjGgXSzWLOa8xqz/zgnt2HT+YvKm/u5bq1IXo4VHelQ=) 12: k_9bhWj2JcQnyMq-FPfEv0otOUw.roa (hash: Zs3oxA2HTYXtiE5lUDi8OJy4SVF/+vQT5qkuzqaf+ew=) 13: o4_pEwPipmYi6C3PXNhpC7by3MA.roa (hash: HbprNAxeP8NoQY7jwdw1Rs3l1Tj/TI85puQfPIX124c=) 14: p5_bRG9M5kT8MStfkRHRT1v8cg0.roa (hash: ZjQG7VMMupt1nuY8BdmGWD7HOxruqtYbna7mlcKvAUo=) 15: qjxC3CMWMpiM1TpibiIWl8s1Se0.roa (hash: vL7m0foCqcx4qZwFUYV1ieilxVwO5UgoFDNdvDch1DE=) 16: t0gWV72zLQLExI3pDHKlUQNMCLg.roa (hash: sZqkeiCyvYuQZJfxR8h/KOL8f5qWehA/zicZawvNouA=) 17: wj2VxfuvQPp_y-B-S4cBoG4no9E.roa (hash: NUb/774hisZdKkcNsYbowzixlPdgcgSeN+DazRzxjeU=) 18: yKoxV-6M6xkebvfJ-LK1Pi2FfE4.roa (hash: BokFvMbsrr4nAc7qB6GIDJeX4FQmEPo1VOjQtgLqvj0=) Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/80/fb42ec-10b4-4dcf-bef0-2d143d7b853c/1/9fsy0iZrH5vOV8rJi8AkfyyRl_I.crl rsync://rpki.ripe.net/repository/DEFAULT/80/fb42ec-10b4-4dcf-bef0-2d143d7b853c/1/9fsy0iZrH5vOV8rJi8AkfyyRl_I.mft rsync://rpki.ripe.net/repository/DEFAULT/9fsy0iZrH5vOV8rJi8AkfyyRl_I.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Sat 06 Sep 2025 01:00:24 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:99:18:09:6f:86:03:9f:33:06:bc:61:eb:03:77:0f:5b:ad Signature Algorithm: sha256WithRSAEncryption Issuer: CN=f5fb32d2266b1f9bce57cac98bc0247f2c9197f2 Validity Not Before: Sep 5 04:01:35 2025 GMT Not After : Sep 6 04:01:35 2025 GMT Subject: CN=eb5edc973ffd7c358dd17f282472fac4fee8f8f2 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:a8:78:a5:5b:ce:8d:6c:6c:2f:7d:b0:f1:1e:a1: 7e:d2:84:3a:13:bb:2d:57:43:af:e4:2b:82:6f:18: 3d:19:da:f1:6e:31:19:31:b4:be:ea:0b:4c:93:d8: 08:76:16:49:71:45:b2:9d:27:e3:22:f6:00:f8:02: 7e:01:43:9a:bc:7e:54:0e:e5:a9:ff:0f:4e:a5:73: 19:d1:b8:ba:f1:24:39:42:50:25:9b:1f:af:85:00: 99:a2:eb:88:52:3d:e5:a6:3c:5c:e3:b5:8d:18:98: 01:3c:cb:c9:15:be:5a:e9:46:d7:b2:df:93:ea:e9: 2d:61:d9:a9:84:f6:46:f0:3b:9c:c7:81:34:81:fd: 6c:35:3b:99:15:4c:0d:b3:82:ae:16:c5:9d:91:03: 35:bf:fe:42:31:03:13:4f:eb:c8:21:be:42:82:9e: 67:0c:97:c4:4d:b2:3d:02:47:df:38:d8:88:fd:d3: e7:76:86:8e:d3:52:44:91:32:f4:78:2c:d8:99:b6: fb:05:b8:f0:9e:e1:85:cb:fa:d3:fe:64:72:73:e5: 12:e3:fb:c0:40:98:1d:d7:89:ce:29:af:7a:a6:50: 2a:6b:6e:cc:f1:49:34:9b:bc:63:9f:13:26:73:89: f5:0f:fd:a8:b8:ef:8b:42:85:17:4a:d7:06:94:e2: 76:93 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: EB:5E:DC:97:3F:FD:7C:35:8D:D1:7F:28:24:72:FA:C4:FE:E8:F8:F2 X509v3 Authority Key Identifier: keyid:F5:FB:32:D2:26:6B:1F:9B:CE:57:CA:C9:8B:C0:24:7F:2C:91:97:F2 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/9fsy0iZrH5vOV8rJi8AkfyyRl_I.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/80/fb42ec-10b4-4dcf-bef0-2d143d7b853c/1/9fsy0iZrH5vOV8rJi8AkfyyRl_I.mft X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/80/fb42ec-10b4-4dcf-bef0-2d143d7b853c/1/9fsy0iZrH5vOV8rJi8AkfyyRl_I.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 3e:ea:d4:94:ea:cb:c3:3e:45:da:53:a6:32:7a:51:90:e2:97: 78:d0:1a:70:ad:fc:78:e7:cb:7a:31:f2:7d:59:2a:5c:db:bf: 7a:6c:1b:45:41:dd:b2:2f:03:50:74:a7:8c:4f:35:27:89:f0: e4:5d:b2:f5:d2:e3:6a:ff:be:a9:1d:7b:58:01:f3:8f:d0:4e: b5:3d:5c:1f:4c:f6:65:3c:19:f4:61:64:87:bc:ec:61:69:39: 65:94:e1:36:66:44:36:71:a4:a8:cb:99:91:68:45:db:dc:22: 3f:da:cf:3c:44:12:87:6a:06:d0:35:ed:4e:bc:d7:0b:23:55: 21:ee:5c:60:ba:c1:b9:00:28:8f:c5:44:78:36:62:11:ec:5f: 7c:48:60:19:55:44:bf:a2:35:53:ff:50:6c:1e:73:6a:d8:f0: cd:bb:1f:3d:89:92:c5:d1:fe:c5:a7:b1:72:1b:c8:d7:e8:f9: 19:24:b7:da:23:10:36:53:3e:73:f5:27:6d:97:c7:5b:32:c4: 85:52:9a:0b:6a:97:ee:c7:d5:d5:78:98:e1:19:71:a1:3d:8e: 15:76:68:fd:52:36:c9:d8:d2:9f:c3:8c:77:f5:50:38:00:a4: ac:e9:1c:96:30:8e:9d:59:4d:b4:a2:ea:6c:e5:47:1b:80:d9: 3c:df:cd:f0 -----BEGIN CERTIFICATE----- MIIFFjCCA/6gAwIBAgISAZkYCW+GA58zBrxh6wN3D1utMA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKGY1ZmIzMmQyMjY2YjFmOWJjZTU3Y2FjOThiYzAyNDdmMmM5 MTk3ZjIwHhcNMjUwOTA1MDQwMTM1WhcNMjUwOTA2MDQwMTM1WjAzMTEwLwYDVQQD EyhlYjVlZGM5NzNmZmQ3YzM1OGRkMTdmMjgyNDcyZmFjNGZlZThmOGYyMIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAqHilW86NbGwvfbDxHqF+0oQ6E7st V0Ov5CuCbxg9GdrxbjEZMbS+6gtMk9gIdhZJcUWynSfjIvYA+AJ+AUOavH5UDuWp /w9OpXMZ0bi68SQ5QlAlmx+vhQCZouuIUj3lpjxc47WNGJgBPMvJFb5a6UbXst+T 6uktYdmphPZG8Ducx4E0gf1sNTuZFUwNs4KuFsWdkQM1v/5CMQMTT+vIIb5Cgp5n DJfETbI9AkffONiI/dPndoaO01JEkTL0eCzYmbb7BbjwnuGFy/rT/mRyc+US4/vA QJgd14nOKa96plAqa27M8Uk0m7xjnxMmc4n1D/2ouO+LQoUXStcGlOJ2kwIDAQAB o4ICIjCCAh4wHQYDVR0OBBYEFOte3Jc//Xw1jdF/KCRy+sT+6PjyMB8GA1UdIwQY MBaAFPX7MtImax+bzlfKyYvAJH8skZfyMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvOWZzeTBpWnJINXZPVjhySmk4QWtmeXlSbF9JLmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC84MC9mYjQyZWMtMTBiNC00ZGNmLWJlZjAt MmQxNDNkN2I4NTNjLzEvOWZzeTBpWnJINXZPVjhySmk4QWtmeXlSbF9JLm1mdDCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC84MC9mYjQyZWMtMTBiNC00ZGNmLWJlZjAtMmQxNDNkN2I4NTNj LzEvOWZzeTBpWnJINXZPVjhySmk4QWtmeXlSbF9JLmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAPurUlOrL wz5F2lOmMnpRkOKXeNAacK38eOfLejHyfVkqXNu/emwbRUHdsi8DUHSnjE81J4nw 5F2y9dLjav++qR17WAHzj9BOtT1cH0z2ZTwZ9GFkh7zsYWk5ZZThNmZENnGkqMuZ kWhF29wiP9rPPEQSh2oG0DXtTrzXCyNVIe5cYLrBuQAoj8VEeDZiEexffEhgGVVE v6I1U/9QbB5zatjwzbsfPYmSxdH+xaexchvI1+j5GSS32iMQNlM+c/UnbZfHWzLE hVKaC2qX7sfV1XiY4RlxoT2OFXZo/VI2ydjSn8OMd/VQOACkrOkcljCOnVlNtKLq bOVHG4DZPN/N8A== -----END CERTIFICATE-----Generated at Fri Sep 5 10:06:51 2025 by rpki-client