$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/85/ede94e-ba2a-41ee-b12c-e0534e23859b/1/5llvGxY8qwxFqE7rEyYbZfGiKWI.mft File: 5llvGxY8qwxFqE7rEyYbZfGiKWI.mft (raw, json) Hash identifier: muLuwI63flxwwGpX6ZeIEfpjj5sKbHZIuf7woCkZQbA= Subject key identifier: 5A:A2:00:C4:A5:18:63:B3:E5:E6:CD:36:2F:67:74:09:C8:63:8A:B7 Authority key identifier: E6:59:6F:1B:16:3C:AB:0C:45:A8:4E:EB:13:26:1B:65:F1:A2:29:62 Certificate issuer: /CN=e6596f1b163cab0c45a84eeb13261b65f1a22962 Certificate serial: 01993500375DD815B5A27CBAA4AD654FDE66 Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/5llvGxY8qwxFqE7rEyYbZfGiKWI.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/85/ede94e-ba2a-41ee-b12c-e0534e23859b/1/5llvGxY8qwxFqE7rEyYbZfGiKWI.mft Manifest number: 168E Signing time: Wed 10 Sep 2025 19:00:30 +0000 Manifest this update: Wed 10 Sep 2025 19:00:30 +0000 Manifest next update: Thu 11 Sep 2025 19:00:30 +0000 Files and hashes: 1: 5llvGxY8qwxFqE7rEyYbZfGiKWI.crl (hash: qGlIZ8hGEZaKPyK8mTn2j1UnByvu/IkqrpcHIXjhvFg=) 2: EPrKtO_Wui_AIcoB1IjnBBpjTA0.roa (hash: Ns7k+bsMT28IYTUvIKM9gdNIwjEuXm0xT0/L3x28CpU=) 3: GSrzoMsqdrffXvz8XfRbb06cdoU.roa (hash: qO16W1LJUB1Sf5kzJO7kSt5JrIHbHWcZRaQOTtkSO+c=) 4: UY47b1nKTBymo-_2aL9oMC7vX38.roa (hash: bK73SZPBKj3iAjuEKmNGnIADIWNE9D/9YsMH7QmUlZ0=) 5: c9pIRKumzJnPv6L0_0S99z5-7Pw.roa (hash: JszoDngQwRDEsojUMs8/qjNo60rDhfYCdak0Z9nn2Bg=) 6: ffZavXQaQNIwwKVW84vxnOTS_2k.roa (hash: oA0RmBJXJ8Iaj/uIUokVdX89kZuQ0WJjVTCDBbmztv8=) 7: g7knCJ57jgLAS24rI4X3btb-M4c.roa (hash: 3UFtXY+vf3X8W6kWA8FvJJwhkGk4KqYw38fo24s58Sk=) 8: gFreThJqNlHPvyHQ79dnfJgTPWo.roa (hash: L3hMFyzcKxYUiA62qUifu4SJz3107QolnvNpa2edIOo=) 9: iwjx0AhvwxAf6vZnR0V70CNSj3k.roa (hash: s4vyo2AL6KEF6yGbsgdcSILxp1qahFdr2Um6ni3Nsz4=) 10: qZ2rbeeUwV9WnVFloyx-2WLLaic.roa (hash: PyKdiPPGb3idbj43k0xja1+Mj7fQbqPrKGkBwHfZq1c=) 11: tCNgCc7S1ewGtgMhWiXaNGTqwZ8.roa (hash: 0ar853JOpvsnmzIOleciC89u2nN3g3yWX8hEwIiz39U=) Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/85/ede94e-ba2a-41ee-b12c-e0534e23859b/1/5llvGxY8qwxFqE7rEyYbZfGiKWI.crl rsync://rpki.ripe.net/repository/DEFAULT/85/ede94e-ba2a-41ee-b12c-e0534e23859b/1/5llvGxY8qwxFqE7rEyYbZfGiKWI.mft rsync://rpki.ripe.net/repository/DEFAULT/5llvGxY8qwxFqE7rEyYbZfGiKWI.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Thu 11 Sep 2025 19:00:30 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:99:35:00:37:5d:d8:15:b5:a2:7c:ba:a4:ad:65:4f:de:66 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=e6596f1b163cab0c45a84eeb13261b65f1a22962 Validity Not Before: Sep 10 19:00:30 2025 GMT Not After : Sep 11 19:00:30 2025 GMT Subject: CN=5aa200c4a51863b3e5e6cd362f677409c8638ab7 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:bc:a5:66:5d:6d:b0:89:e9:9f:62:72:6f:cf:04: e0:6d:90:98:f5:94:3f:f9:bb:1a:6d:82:31:59:7b: 30:ab:97:1a:a9:0c:3f:f6:9a:23:8f:fb:61:1a:27: 5f:5e:99:47:da:9f:af:7b:48:be:33:b3:61:28:e9: ae:79:b5:b8:81:36:ce:aa:81:a1:ba:25:a2:77:c4: ab:db:74:2f:da:cf:55:c0:4f:af:ec:74:4d:ca:9d: 5c:d9:98:98:7a:c4:a5:e0:57:b4:4f:88:8f:df:9a: 23:c7:61:1d:a2:e3:cf:f6:80:07:be:ee:cc:0c:e3: d1:9d:6d:9d:7e:d9:8f:aa:42:39:bc:ca:0c:ac:05: 82:ae:42:af:f6:2b:3c:4d:80:f7:7e:aa:47:31:c0: d3:72:9e:54:06:cc:38:3f:b0:65:e1:66:7a:65:1d: f0:5d:80:0b:45:1a:06:20:f0:6e:bc:bc:fa:3f:5f: 9a:2d:85:98:86:e1:a0:34:be:34:0d:17:8a:16:2e: 54:0f:a0:18:94:dd:23:24:46:1b:26:75:66:4d:74: 45:9e:c8:c2:29:d7:af:61:5e:6f:78:81:cc:2e:c9: 61:d3:fa:98:42:50:c7:9a:d7:cd:cb:e3:94:c3:00: 16:d9:1b:31:7d:1e:07:a1:6c:de:90:24:78:76:9d: f0:f1 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 5A:A2:00:C4:A5:18:63:B3:E5:E6:CD:36:2F:67:74:09:C8:63:8A:B7 X509v3 Authority Key Identifier: keyid:E6:59:6F:1B:16:3C:AB:0C:45:A8:4E:EB:13:26:1B:65:F1:A2:29:62 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/5llvGxY8qwxFqE7rEyYbZfGiKWI.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/85/ede94e-ba2a-41ee-b12c-e0534e23859b/1/5llvGxY8qwxFqE7rEyYbZfGiKWI.mft X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/85/ede94e-ba2a-41ee-b12c-e0534e23859b/1/5llvGxY8qwxFqE7rEyYbZfGiKWI.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 49:31:29:24:18:df:47:90:48:29:08:a8:90:d1:5d:f3:86:72: da:8f:1e:ae:ac:ff:3e:93:6f:d6:81:14:05:11:c6:37:35:2a: 6c:e6:97:c8:37:50:ff:da:a7:b5:05:67:4e:11:db:1c:06:e7: d0:f8:36:f5:94:1d:81:67:1b:ad:14:0a:f7:c8:0a:81:52:ff: 35:dd:14:d3:8a:15:56:5a:55:3f:f0:16:c0:5c:c3:c2:a3:59: c1:a4:67:00:88:53:67:99:04:bc:81:2f:d9:ac:c2:90:fb:3b: a3:64:00:e5:33:ec:57:4a:0e:0a:af:24:55:c0:8f:a1:5e:71: 54:a5:7e:bc:74:0a:9b:67:24:5d:70:1f:d8:86:11:20:7b:8a: 46:29:a4:52:84:a7:f3:bd:e2:ff:26:ed:a3:c8:74:24:73:c0: 79:92:39:6c:12:33:bf:64:11:85:4f:a3:77:84:b4:37:ad:3f: 24:bd:29:cf:57:36:f0:80:48:6e:67:35:35:10:4e:23:38:bf: cb:a3:90:e6:41:84:17:b1:bb:a6:b1:80:5b:ef:7a:0e:71:cd: ed:94:24:1b:a0:a0:22:fe:05:a9:c6:3a:db:51:de:cb:24:64: c1:e9:87:a6:19:88:94:38:9b:2b:f7:02:1c:18:a6:1f:40:d5: 19:8e:cd:08 -----BEGIN CERTIFICATE----- MIIFFjCCA/6gAwIBAgISAZk1ADdd2BW1ony6pK1lT95mMA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKGU2NTk2ZjFiMTYzY2FiMGM0NWE4NGVlYjEzMjYxYjY1ZjFh MjI5NjIwHhcNMjUwOTEwMTkwMDMwWhcNMjUwOTExMTkwMDMwWjAzMTEwLwYDVQQD Eyg1YWEyMDBjNGE1MTg2M2IzZTVlNmNkMzYyZjY3NzQwOWM4NjM4YWI3MIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAvKVmXW2wiemfYnJvzwTgbZCY9ZQ/ +bsabYIxWXswq5caqQw/9pojj/thGidfXplH2p+ve0i+M7NhKOmuebW4gTbOqoGh uiWid8Sr23Qv2s9VwE+v7HRNyp1c2ZiYesSl4Fe0T4iP35ojx2EdouPP9oAHvu7M DOPRnW2dftmPqkI5vMoMrAWCrkKv9is8TYD3fqpHMcDTcp5UBsw4P7Bl4WZ6ZR3w XYALRRoGIPBuvLz6P1+aLYWYhuGgNL40DReKFi5UD6AYlN0jJEYbJnVmTXRFnsjC KdevYV5veIHMLslh0/qYQlDHmtfNy+OUwwAW2RsxfR4HoWzekCR4dp3w8QIDAQAB o4ICIjCCAh4wHQYDVR0OBBYEFFqiAMSlGGOz5ebNNi9ndAnIY4q3MB8GA1UdIwQY MBaAFOZZbxsWPKsMRahO6xMmG2XxoiliMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvNWxsdkd4WThxd3hGcUU3ckV5WWJaZkdpS1dJLmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC84NS9lZGU5NGUtYmEyYS00MWVlLWIxMmMt ZTA1MzRlMjM4NTliLzEvNWxsdkd4WThxd3hGcUU3ckV5WWJaZkdpS1dJLm1mdDCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC84NS9lZGU5NGUtYmEyYS00MWVlLWIxMmMtZTA1MzRlMjM4NTli LzEvNWxsdkd4WThxd3hGcUU3ckV5WWJaZkdpS1dJLmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEASTEpJBjf R5BIKQiokNFd84Zy2o8erqz/PpNv1oEUBRHGNzUqbOaXyDdQ/9qntQVnThHbHAbn 0Pg29ZQdgWcbrRQK98gKgVL/Nd0U04oVVlpVP/AWwFzDwqNZwaRnAIhTZ5kEvIEv 2azCkPs7o2QA5TPsV0oOCq8kVcCPoV5xVKV+vHQKm2ckXXAf2IYRIHuKRimkUoSn 873i/ybto8h0JHPAeZI5bBIzv2QRhU+jd4S0N60/JL0pz1c28IBIbmc1NRBOIzi/ y6OQ5kGEF7G7prGAW+96DnHN7ZQkG6CgIv4FqcY621HeyyRkwemHphmIlDibK/cC HBimH0DVGY7NCA== -----END CERTIFICATE-----Generated at Thu Sep 11 04:09:53 2025 by rpki-client