$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/83/7b1c55-ddd0-4281-8378-4dd04346abc3/1/OroRckcuqAJl0SmCln3gqLC8WQE.mft File: OroRckcuqAJl0SmCln3gqLC8WQE.mft (raw, json) Hash identifier: Yimk/XJ12xBO+/Bnmx1SlpJfv7tqgZo+JqjDhPUJunA= Subject key identifier: BE:6A:94:81:EB:BB:47:72:04:C1:6B:34:56:D6:C0:89:36:49:41:C8 Authority key identifier: 3A:BA:11:72:47:2E:A8:02:65:D1:29:82:96:7D:E0:A8:B0:BC:59:01 Certificate issuer: /CN=3aba1172472ea80265d12982967de0a8b0bc5901 Certificate serial: 019923D61A1E6DC1B6DCBEAA3A45C7609910 Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/OroRckcuqAJl0SmCln3gqLC8WQE.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/83/7b1c55-ddd0-4281-8378-4dd04346abc3/1/OroRckcuqAJl0SmCln3gqLC8WQE.mft Manifest number: 169E Signing time: Sun 07 Sep 2025 11:00:57 +0000 Manifest this update: Sun 07 Sep 2025 11:00:57 +0000 Manifest next update: Mon 08 Sep 2025 11:00:57 +0000 Files and hashes: 1: 0-9L8X5MQ2--6AbSQPUOK_Zwbgk.roa (hash: DYsqRIVrVbCBoJlV1gmiCzK3jIqCFwH4WAgRNXzIPK4=) 2: 5F-tkbkrsNzOsOj-9Cj0HyeCuUQ.roa (hash: m1SkmgPesDgE2aChBme8h9g68C9XstjL/ASh0G5sApQ=) 3: 6BTZ5AaOEQekUYjUxJjubDiWWfg.roa (hash: Eh6waq+vwtUrAUXpLnHirNMkZ/QKST4EehD+sMDaTTU=) 4: 71Dq_p3hxgANLwjWXIYIW1kQwvI.roa (hash: EHVmaPv30nypIUsJLb0qilX75ExyVaga+Rdz8msfOTg=) 5: 900joE2kII87-kVZQYJE9AVHaUE.roa (hash: 0o1fmx1wkON/yzQU3eDlgv0XvPCaxuqScr/6FHEDSAU=) 6: F7JXtoqYAnfTjuecjcOTuo1qCkw.roa (hash: OEFPqG5xW1fNzTGExyHBZVtQ+HvaVdHh6rDRxCBiNXc=) 7: FXMeaT7mqLaeoQKo6gjW0hUo-Kg.roa (hash: ai3NnXxTZaMRdq2X8gaZ6slmnlshdaCfmTM1E9B0TBc=) 8: IMZsLst-i3zLkfnvqryos4hVmUw.roa (hash: i5YfMzxIGSy0m8WqoPL2plr7dDe0Vlfs7aCvCgRQqk8=) 9: JIOTHuHxMtqBMx5mXgc6EZ3pd2k.roa (hash: DCxRs8r4ffmbTDh+ON4DjiCp8BK/u4NKeBfbW9CrT2I=) 10: LWbif0B1GjIE18I7vwELt-c9l-w.roa (hash: d8IrvYkKiZyuhb8k6fQb7RXqEUdNoQvoKy7SfXCWzdQ=) 11: Ln8QlB3P0RX7C0x_g97ovwG-MN4.roa (hash: 8wye3Q/ZQvQqLzNWOjfsPRuB58YYCzfOe1zTV5GvyPs=) 12: OroRckcuqAJl0SmCln3gqLC8WQE.crl (hash: mzCKlmVT1aPgbrkcIjJ3mb9w5x9CX14ip5oHD1Av33Q=) 13: RT2actreI4xxkte646TUz02XjFQ.roa (hash: Wy64shTeipgQtErWNwSOYTNCSt9UxR/a78WDAuspKQ4=) 14: V9Ig1pXUbN50LMFOuKXdZ5mkCig.roa (hash: y87CF5Ma433/41wTDv6chywUFnZfYbGNq95lOWwWnTA=) 15: dfVrorkgDXq-b3-QlttQA8sgW4w.roa (hash: 5H66iIzqCMGoksSoQLOuKiVcrRxOIQ4J1jOJkX6At50=) 16: hs3PS0PRyRLIwptbOrxYgVXbpUk.roa (hash: EMDVPaUHTTvlVBnvbCHPVNncgqYud935PafdYG6UmCo=) 17: kW066m9DXa5QVOUSyinFWrQGR_k.roa (hash: qDkdXP2dueHR9dJeUVzMjqaWnTwJkS158Rm7QFLdZvQ=) 18: ljrsKkBLXJvYvcdZuX8JWasQFe4.roa (hash: vBmx7C2e8PSmXtfZdupHaynZdSjLgLaFpSb8R62FCP0=) 19: mu7b1tGZ3fBLWT4iPiraLyQmVpw.roa (hash: Ly2x9jR74YwOV4U+ROUU4l7SCpCPjv3zvv96qJ1in/E=) 20: nPqUpg1aR7hnc6HTlLtA9BuMCTE.roa (hash: KwhXJO05kwAc7WcWDrPEDKsnvptXZGJFAiZEMHkerdU=) 21: nfdXz1IG7b_z6nn3ZM-dFbFrj0o.roa (hash: 16xUnfqni5W44fEXrAqCEswn3RFCkRKYxijUqdQX43o=) 22: nkeXVKF6zzQCYL4BHAHTb24meB8.roa (hash: pcIicCRvZsHCwkYq5WwVoVzOQXOI/E6R317Mea33uac=) 23: w5_xzg68siU1xwo2TRNx9ptuZUg.roa (hash: dz0710YGDAoK//WB0wD9yVfkTEtuo0ioNy/ODQjxKRM=) Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/83/7b1c55-ddd0-4281-8378-4dd04346abc3/1/OroRckcuqAJl0SmCln3gqLC8WQE.crl rsync://rpki.ripe.net/repository/DEFAULT/83/7b1c55-ddd0-4281-8378-4dd04346abc3/1/OroRckcuqAJl0SmCln3gqLC8WQE.mft rsync://rpki.ripe.net/repository/DEFAULT/OroRckcuqAJl0SmCln3gqLC8WQE.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Mon 08 Sep 2025 07:00:23 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:99:23:d6:1a:1e:6d:c1:b6:dc:be:aa:3a:45:c7:60:99:10 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=3aba1172472ea80265d12982967de0a8b0bc5901 Validity Not Before: Sep 7 11:00:57 2025 GMT Not After : Sep 8 11:00:57 2025 GMT Subject: CN=be6a9481ebbb477204c16b3456d6c089364941c8 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:99:f3:61:5a:5c:2c:7a:b7:43:04:92:f1:b8:df: 4b:30:32:6f:9e:ed:f7:ea:d4:39:cf:37:2c:95:e6: bb:ea:95:f9:1d:28:38:59:f8:2a:bd:ed:4e:ba:67: c6:38:2e:c0:b3:d7:5f:23:ec:4b:5f:4a:74:23:d5: fc:27:cd:61:fe:26:a6:ee:6c:6b:29:b5:c0:45:29: 9e:dd:9b:7a:32:66:3b:e5:4b:ab:61:7b:3b:44:2d: 36:90:63:01:4a:03:f3:8c:63:42:0d:3e:90:14:59: 7d:73:2e:a3:4e:0e:9d:f5:3c:04:5e:ac:62:52:a9: bd:03:23:7d:e2:eb:53:2d:58:44:3d:e2:f7:c4:0a: aa:bb:f8:be:2e:1b:a8:d9:d0:e4:b6:2e:6b:de:7c: 4a:31:e7:c1:21:6b:5d:7b:00:28:76:ec:24:a1:55: 46:b2:3d:5f:46:59:59:40:35:b3:c9:80:29:3f:e9: 3e:c5:ea:5a:ce:54:d7:18:73:05:5f:5c:18:a1:25: ab:8b:07:60:26:e6:90:22:03:ff:19:fd:ec:fc:d9: 3f:3a:a3:0b:4b:54:37:53:b1:77:52:b5:48:3e:22: 62:8d:81:5c:1f:93:9a:d8:c4:6e:fe:fe:89:05:9b: ed:99:05:fc:42:df:09:0f:de:e8:51:21:d7:ec:6c: 23:63 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: BE:6A:94:81:EB:BB:47:72:04:C1:6B:34:56:D6:C0:89:36:49:41:C8 X509v3 Authority Key Identifier: keyid:3A:BA:11:72:47:2E:A8:02:65:D1:29:82:96:7D:E0:A8:B0:BC:59:01 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/OroRckcuqAJl0SmCln3gqLC8WQE.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/83/7b1c55-ddd0-4281-8378-4dd04346abc3/1/OroRckcuqAJl0SmCln3gqLC8WQE.mft X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/83/7b1c55-ddd0-4281-8378-4dd04346abc3/1/OroRckcuqAJl0SmCln3gqLC8WQE.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 34:71:07:63:49:5a:b3:51:e8:24:4d:7e:9b:3a:df:9f:9a:32: 23:77:cd:72:4c:cb:c7:5e:7c:f0:48:5f:64:c6:61:34:a4:18: 07:32:ea:22:be:ca:99:58:42:d8:e1:92:03:63:27:d0:77:70: 9a:b3:56:73:fc:65:c0:86:c9:3e:8f:de:35:d4:13:90:8e:06: c6:8f:ab:7f:0f:85:d3:af:ee:82:30:83:1c:d2:e1:32:de:bd: c5:74:84:15:f0:d7:16:5b:c4:2d:34:77:e2:ef:16:78:49:01: be:b6:90:3a:69:23:b8:61:8c:d6:75:6f:ac:b0:ae:98:fe:c8: 24:fe:1e:51:dd:58:c6:2a:19:94:21:5d:2b:15:a1:3e:4b:2f: d7:1f:79:32:5f:47:f0:3a:f8:c6:ba:4c:56:91:83:99:a6:23: e5:2e:9c:ea:08:1b:f5:18:62:97:51:1c:9c:c2:87:3a:47:03: f6:c6:7b:8c:8d:60:42:96:87:1e:47:35:13:5a:b3:70:ed:47: 86:c1:f3:42:62:cc:5d:14:94:61:50:df:4e:a6:9d:b4:22:36: 38:45:02:fa:5c:af:4a:f2:4a:38:7d:b8:21:19:c7:43:c4:e0: 7c:d7:5d:7d:db:30:12:01:0a:80:f1:18:bd:c1:f3:d7:16:87: 9f:47:2b:8f -----BEGIN CERTIFICATE----- MIIFFjCCA/6gAwIBAgISAZkj1hoebcG23L6qOkXHYJkQMA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKDNhYmExMTcyNDcyZWE4MDI2NWQxMjk4Mjk2N2RlMGE4YjBi YzU5MDEwHhcNMjUwOTA3MTEwMDU3WhcNMjUwOTA4MTEwMDU3WjAzMTEwLwYDVQQD EyhiZTZhOTQ4MWViYmI0NzcyMDRjMTZiMzQ1NmQ2YzA4OTM2NDk0MWM4MIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAmfNhWlwserdDBJLxuN9LMDJvnu33 6tQ5zzcslea76pX5HSg4Wfgqve1OumfGOC7As9dfI+xLX0p0I9X8J81h/iam7mxr KbXARSme3Zt6MmY75UurYXs7RC02kGMBSgPzjGNCDT6QFFl9cy6jTg6d9TwEXqxi Uqm9AyN94utTLVhEPeL3xAqqu/i+Lhuo2dDkti5r3nxKMefBIWtdewAoduwkoVVG sj1fRllZQDWzyYApP+k+xepazlTXGHMFX1wYoSWriwdgJuaQIgP/Gf3s/Nk/OqML S1Q3U7F3UrVIPiJijYFcH5Oa2MRu/v6JBZvtmQX8Qt8JD97oUSHX7GwjYwIDAQAB o4ICIjCCAh4wHQYDVR0OBBYEFL5qlIHru0dyBMFrNFbWwIk2SUHIMB8GA1UdIwQY MBaAFDq6EXJHLqgCZdEpgpZ94KiwvFkBMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvT3JvUmNrY3VxQUpsMFNtQ2xuM2dxTEM4V1FFLmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC84My83YjFjNTUtZGRkMC00MjgxLTgzNzgt NGRkMDQzNDZhYmMzLzEvT3JvUmNrY3VxQUpsMFNtQ2xuM2dxTEM4V1FFLm1mdDCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC84My83YjFjNTUtZGRkMC00MjgxLTgzNzgtNGRkMDQzNDZhYmMz LzEvT3JvUmNrY3VxQUpsMFNtQ2xuM2dxTEM4V1FFLmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEANHEHY0la s1HoJE1+mzrfn5oyI3fNckzLx1588EhfZMZhNKQYBzLqIr7KmVhC2OGSA2Mn0Hdw mrNWc/xlwIbJPo/eNdQTkI4Gxo+rfw+F06/ugjCDHNLhMt69xXSEFfDXFlvELTR3 4u8WeEkBvraQOmkjuGGM1nVvrLCumP7IJP4eUd1YxioZlCFdKxWhPksv1x95Ml9H 8Dr4xrpMVpGDmaYj5S6c6ggb9Rhil1EcnMKHOkcD9sZ7jI1gQpaHHkc1E1qzcO1H hsHzQmLMXRSUYVDfTqadtCI2OEUC+lyvSvJKOH24IRnHQ8TgfNddfdswEgEKgPEY vcHz1xaHn0crjw== -----END CERTIFICATE-----Generated at Sun Sep 7 13:50:55 2025 by rpki-client