$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/8b/f07f8d-9df0-49c6-b2f0-aa9d691811e7/1/h3itgWjgnPktTgSYJX-OnOq_BpI.mft File: h3itgWjgnPktTgSYJX-OnOq_BpI.mft (raw, json) Hash identifier: rJexGbJf2gFyuKY9AkCSP7R+ugHRkXaLse/r29Dwcvo= Subject key identifier: 66:7E:E7:9E:7B:28:4B:1D:4B:94:A9:FE:54:4D:CB:9E:9E:6B:9F:15 Authority key identifier: 87:78:AD:81:68:E0:9C:F9:2D:4E:04:98:25:7F:8E:9C:EA:BF:06:92 Certificate issuer: /CN=8778ad8168e09cf92d4e0498257f8e9ceabf0692 Certificate serial: 01992B584D20D0A84187AE7ED33F6FA350D8 Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/h3itgWjgnPktTgSYJX-OnOq_BpI.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/8b/f07f8d-9df0-49c6-b2f0-aa9d691811e7/1/h3itgWjgnPktTgSYJX-OnOq_BpI.mft Manifest number: 1693 Signing time: Mon 08 Sep 2025 22:00:30 +0000 Manifest this update: Mon 08 Sep 2025 22:00:30 +0000 Manifest next update: Tue 09 Sep 2025 22:00:30 +0000 Files and hashes: 1: 3VQFHIG_0NRiYGSMTzNDYelPmMs.roa (hash: T8N7lYcGBn0m7uBQBcevnqsWbvysQD6cxVHO1RDwUvg=) 2: 41kwTSa8H9b9pjrkUzwf85FQ470.roa (hash: 6DgsyUX2uyntOPFl8yDMIgTXXXs0mzyQ219673BzCzU=) 3: CdQNI5gcW0_1cf24cLvP-tL_omw.roa (hash: fyArCRfx7SbzhmzmpSevkzJflw0c7SkqK2TimwbjqzM=) 4: RXJMzhMtehSuCCi6uqljNw1_L-s.roa (hash: Xot9S/JUju+/cZl9baS7ZUR4Rh18U5S5qk4hiX6txpg=) 5: TpqMtUwJukfz53BZIUdbM-kP9dU.roa (hash: sJ+1FquCHUKBx1oFow8K9ca95AgoJ61IjnusPLlcDN8=) 6: WEKuOaRTTX2rTln9asflqP9Y2Os.roa (hash: EcqtEEKcbvmbmPvboEcXGauHM+e7HHmS4JSP0Le2t4o=) 7: XmOvv05xULfAWuDqrX7juNO-0qI.roa (hash: eJeMTOSpJLyqSZNQmSL2OZUvlINOSkmPnV9aTneLjHg=) 8: Xzib8AfEYqY2cHmuuM-ww_w5sW0.roa (hash: 6XHRFIs5VNl1aw2+x8Rz4IQniQIfYw9CyiplPPtk5bE=) 9: aMv6gEqWxpGKwwWm6t5nV_iaM3Q.roa (hash: +a48j1hsLG2vzEIY2MRVBswlr1+jm51V+Dk+4EhL/9Y=) 10: h3itgWjgnPktTgSYJX-OnOq_BpI.crl (hash: 8snl8sm88uTtvAVx3Gw7vQUkUnRCbQD5j08rTV1Qr3o=) 11: jF6aKXBNyHTawjaz9GVexS6_Vps.roa (hash: FiDTfOMoZak8gOhtJT/8yhL0tIdZjUn13AvzOxfMN0E=) 12: s6XbpS6zvG-OGcqP78qsGOOoOlQ.roa (hash: vai/46FuXyssCtnAk+MIcYY2mUqRBxwISqAf2lFmzsg=) 13: vsuobB7Q7M7H0d2b7icsBX46rF8.roa (hash: 7WzZ613I/LXa4Zefx9tEqY2ZhSRre3hj1QC98fA5RuY=) 14: xP11eIeQX9x-FJdxDPaYbALauGA.roa (hash: X/B/3lK+XxCa5BQgDlvPLTFtIiO9rYw/6L5OCGSXKQE=) 15: xT7aM3kUy4b46Qb4CAkkSam9t5g.roa (hash: Rfd0mKt9HyiAqh5+s2geHZ1SUFHa0fSNkwoTUgmAYpI=) Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/8b/f07f8d-9df0-49c6-b2f0-aa9d691811e7/1/h3itgWjgnPktTgSYJX-OnOq_BpI.crl rsync://rpki.ripe.net/repository/DEFAULT/8b/f07f8d-9df0-49c6-b2f0-aa9d691811e7/1/h3itgWjgnPktTgSYJX-OnOq_BpI.mft rsync://rpki.ripe.net/repository/DEFAULT/h3itgWjgnPktTgSYJX-OnOq_BpI.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Tue 09 Sep 2025 22:00:30 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:99:2b:58:4d:20:d0:a8:41:87:ae:7e:d3:3f:6f:a3:50:d8 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=8778ad8168e09cf92d4e0498257f8e9ceabf0692 Validity Not Before: Sep 8 22:00:30 2025 GMT Not After : Sep 9 22:00:30 2025 GMT Subject: CN=667ee79e7b284b1d4b94a9fe544dcb9e9e6b9f15 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:c9:1f:4d:58:c5:37:50:2a:b2:39:5e:96:de:f5: 73:d7:40:a7:5c:6d:2c:ba:0c:5f:3c:8d:6f:6d:63: 62:08:17:c3:3e:ee:cf:72:8a:cc:29:81:08:ae:06: 3d:c7:dc:ae:7d:7f:0f:c1:83:ed:6a:01:bd:cf:06: 3d:67:05:85:28:e7:54:7e:c6:51:be:f0:56:41:f4: 7b:24:aa:21:77:fa:3f:a5:96:25:13:12:0e:f6:5d: df:79:f4:0a:ce:05:bc:68:b2:6b:f5:dd:9f:76:39: fd:b6:d3:f3:ec:9d:d1:7e:72:2d:9a:ca:06:6e:63: 70:bd:9c:e8:37:97:bc:4b:95:b4:08:33:41:f3:50: ef:17:99:6b:40:af:a5:2d:f6:15:9d:c7:27:11:e8: 5c:3e:d5:68:ab:ad:b6:b7:1e:55:f1:24:27:c3:bf: a0:c0:16:07:cb:bb:35:d0:85:58:74:f0:a8:49:21: b4:cb:d4:c2:28:7c:e5:b2:68:37:81:3e:b3:4a:f9: 6d:0a:6a:d1:95:4b:55:de:d4:d3:41:8b:a5:50:80: 48:41:c4:74:be:6c:de:52:d9:7d:d1:ca:15:17:a1: 97:71:1e:54:77:de:19:72:30:85:56:20:08:0f:7d: e6:04:52:7f:a9:1b:0e:e3:3e:57:1b:94:0d:04:6b: cd:8b Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 66:7E:E7:9E:7B:28:4B:1D:4B:94:A9:FE:54:4D:CB:9E:9E:6B:9F:15 X509v3 Authority Key Identifier: keyid:87:78:AD:81:68:E0:9C:F9:2D:4E:04:98:25:7F:8E:9C:EA:BF:06:92 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/h3itgWjgnPktTgSYJX-OnOq_BpI.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/8b/f07f8d-9df0-49c6-b2f0-aa9d691811e7/1/h3itgWjgnPktTgSYJX-OnOq_BpI.mft X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/8b/f07f8d-9df0-49c6-b2f0-aa9d691811e7/1/h3itgWjgnPktTgSYJX-OnOq_BpI.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 08:88:cd:24:f2:d6:cb:e0:80:55:7d:d3:bf:f5:37:02:8f:16: d8:7a:cf:cd:2a:0f:22:3c:e7:c4:93:ec:5d:f1:df:1d:75:c9: 7b:1f:45:10:21:e2:a7:cb:07:e6:26:20:71:ee:61:f7:f0:9d: 21:e2:6d:43:e6:77:5f:d1:71:f2:7e:c8:ed:ab:75:d1:c1:18: 47:42:db:11:ca:3c:dd:6c:33:8c:f4:aa:a1:22:77:8d:4a:bd: f6:ed:79:e5:95:f0:62:b0:4e:6c:f9:a0:cc:86:a8:20:af:d2: a9:78:99:09:1e:18:ca:97:da:29:4e:54:38:a5:b8:60:06:11: b9:40:ec:5e:4e:dc:70:2a:21:5d:52:1b:0a:4b:67:35:0a:7d: aa:c4:3c:32:18:4d:44:51:d8:a2:7e:66:6f:30:1e:a2:be:b9: c7:6c:e2:3a:53:a0:85:d2:54:a8:dc:8c:fb:ad:86:ca:98:fc: 4c:49:4b:13:92:b5:a8:0c:90:db:fd:81:22:3d:44:c2:bc:d6: 62:db:0b:b2:95:13:8e:5d:f0:51:b9:20:87:eb:0d:bf:30:35: 03:fb:d9:44:fc:2e:ec:d9:c8:03:04:83:31:c6:fa:38:39:ce: 2e:61:9b:30:44:78:e6:cc:11:d3:e2:d8:57:9b:78:e8:54:db: 06:53:4a:97 -----BEGIN CERTIFICATE----- MIIFFjCCA/6gAwIBAgISAZkrWE0g0KhBh65+0z9vo1DYMA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKDg3NzhhZDgxNjhlMDljZjkyZDRlMDQ5ODI1N2Y4ZTljZWFi ZjA2OTIwHhcNMjUwOTA4MjIwMDMwWhcNMjUwOTA5MjIwMDMwWjAzMTEwLwYDVQQD Eyg2NjdlZTc5ZTdiMjg0YjFkNGI5NGE5ZmU1NDRkY2I5ZTllNmI5ZjE1MIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAyR9NWMU3UCqyOV6W3vVz10CnXG0s ugxfPI1vbWNiCBfDPu7PcorMKYEIrgY9x9yufX8PwYPtagG9zwY9ZwWFKOdUfsZR vvBWQfR7JKohd/o/pZYlExIO9l3fefQKzgW8aLJr9d2fdjn9ttPz7J3RfnItmsoG bmNwvZzoN5e8S5W0CDNB81DvF5lrQK+lLfYVnccnEehcPtVoq622tx5V8SQnw7+g wBYHy7s10IVYdPCoSSG0y9TCKHzlsmg3gT6zSvltCmrRlUtV3tTTQYulUIBIQcR0 vmzeUtl90coVF6GXcR5Ud94ZcjCFViAID33mBFJ/qRsO4z5XG5QNBGvNiwIDAQAB o4ICIjCCAh4wHQYDVR0OBBYEFGZ+5557KEsdS5Sp/lRNy56ea58VMB8GA1UdIwQY MBaAFId4rYFo4Jz5LU4EmCV/jpzqvwaSMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvaDNpdGdXamduUGt0VGdTWUpYLU9uT3FfQnBJLmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC84Yi9mMDdmOGQtOWRmMC00OWM2LWIyZjAt YWE5ZDY5MTgxMWU3LzEvaDNpdGdXamduUGt0VGdTWUpYLU9uT3FfQnBJLm1mdDCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC84Yi9mMDdmOGQtOWRmMC00OWM2LWIyZjAtYWE5ZDY5MTgxMWU3 LzEvaDNpdGdXamduUGt0VGdTWUpYLU9uT3FfQnBJLmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEACIjNJPLW y+CAVX3Tv/U3Ao8W2HrPzSoPIjznxJPsXfHfHXXJex9FECHip8sH5iYgce5h9/Cd IeJtQ+Z3X9Fx8n7I7at10cEYR0LbEco83WwzjPSqoSJ3jUq99u155ZXwYrBObPmg zIaoIK/SqXiZCR4YypfaKU5UOKW4YAYRuUDsXk7ccCohXVIbCktnNQp9qsQ8MhhN RFHYon5mbzAeor65x2ziOlOghdJUqNyM+62Gypj8TElLE5K1qAyQ2/2BIj1EwrzW YtsLspUTjl3wUbkgh+sNvzA1A/vZRPwu7NnIAwSDMcb6ODnOLmGbMER45swR0+LY V5t46FTbBlNKlw== -----END CERTIFICATE-----Generated at Tue Sep 9 08:06:04 2025 by rpki-client