$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/90/9d9192-273c-4ca9-b2ba-fa9cb51cd0f1/1/ayM9dVCLToXMz0Q0mny3AxmNHSY.mft File: ayM9dVCLToXMz0Q0mny3AxmNHSY.mft (raw, json) Hash identifier: rSgc5z7kh/D1b+28PSkCI17Jse/hjDtmlwFeaBjnzxc= Subject key identifier: DC:29:2A:C4:5E:96:FB:C2:C4:47:CD:16:6E:C1:63:60:39:8B:93:5B Authority key identifier: 6B:23:3D:75:50:8B:4E:85:CC:CF:44:34:9A:7C:B7:03:19:8D:1D:26 Certificate issuer: /CN=6b233d75508b4e85cccf44349a7cb703198d1d26 Certificate serial: 01991C1C7D27A16CF42CB921843A1E32A75B Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/ayM9dVCLToXMz0Q0mny3AxmNHSY.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/90/9d9192-273c-4ca9-b2ba-fa9cb51cd0f1/1/ayM9dVCLToXMz0Q0mny3AxmNHSY.mft Manifest number: 13D5 Signing time: Fri 05 Sep 2025 23:00:53 +0000 Manifest this update: Fri 05 Sep 2025 23:00:53 +0000 Manifest next update: Sat 06 Sep 2025 23:00:53 +0000 Files and hashes: 1: 2cIKXah99bs326V7_K2_ATU1wCc.roa (hash: 8U7vy7F8tH1dtIEl5RJoquiwlVH7Dw2C2urkmS/8Z1s=) 2: 3Q5YOz_BI10ve__t3IetYuqaGUA.roa (hash: ZILL1qGL3E11+bnE750yzGJ+LQfFTIO6h5xfluweBiQ=) 3: AjBp57cbFRBUIwIaXhNlUU4xc9Y.roa (hash: ZV9AX+FvWa4YVP0u/DD5byIthcNtHTveftQNUrL/KbI=) 4: CDcE_vqm19Y_w1U_nUrldF-Ugs0.roa (hash: xI3BVyx2LWN6Xd4vh4ettZDFc5P8efBg+uxBmnTHoxk=) 5: MWVrNJSe74q7kEhW6qS8QXcSrrc.roa (hash: SMPMCny2Jv5HoImrcf2XEmoMCaHU3khczb0z6CCQ9uc=) 6: ONBLhs2q3EPNBcKzjuUXI9NfDXk.roa (hash: 02TEqjTXH1kKdBwPOe/Fj5S0NZ7Hp7pCF4TDcYi4oGk=) 7: ZkxRUMGE9CQRvySfgcJj3kHytZg.roa (hash: UKRx7jBVZPPDl6SgbH7t7Qygyz8pBsSIfl7nu9h+mgg=) 8: aB6sxL1ZlKSQNpa4jL29xIkPi_I.roa (hash: zA0AFONbK9br9fZoJVU4SW6cugn1tuIJBYSB1Nl3/G8=) 9: ayM9dVCLToXMz0Q0mny3AxmNHSY.crl (hash: zyIRDB4oItYFlezgpqX1sOpcDsmWodmgPHeWH9zPZEY=) 10: fZeNbyH5ujZlgqfP9AgorOMXohA.roa (hash: Dn0aZqCRGKt2adMmUTTsiPmw4Pp+E7zhFHoCHO312UY=) 11: fb3lzsKRuT3DqmRVbbR-BGF4wXU.roa (hash: pxuBhHoXzqbakdVTx6L5TNOxX98HDl41yiAFcXSWT3Q=) 12: hEZZKQJ28Km_5UhH3cpxvYkLLZU.roa (hash: +vaYxbzQEi6M9mf3DyKNxFAOI6eLzddsZf7cVFe2WCE=) 13: hUM0lQ0ODj8Qil7w4D2sZvQVB4w.roa (hash: 8bKnMQhqygeFZmPwESYE+kESImBLAc2qmeTscpnWZ2s=) 14: hZs6PbiV1FHRQvgoNjIWkApb1x4.roa (hash: slbvJPVch+dH2HvE/UBBZulZ2jCavWoY4Ccie6OcAiU=) 15: itqdYmGsrfepmyYSKCd1c5R77js.roa (hash: W2/G8eoM3IFmeLBvMWU5XzC6g/z37f1zNFuZs/37yXE=) 16: lUA4Psv--QayOhT_SsZZvDZxilM.roa (hash: YGf2R2IX409XBgVvc7ca6dAQRj+o7jLte4H3tVm4ZpY=) 17: nPdGgeG-9wHMZBn1oHFY2TrIyd4.roa (hash: ixNDdEbsReVkHb4nZt1NyyQNAMSP0+ayTT4IyJE76/4=) 18: np9eNjgoLA0jYeMYnFqjApZ6K1s.roa (hash: rFv0HF9ou+nHz2ggvRQ0cKKf/+Wgihlq0XkCRw5GtV4=) 19: u5pfngYD-0MqXeQ11DbdTP8EwmU.roa (hash: xtu5m2bHnGuokc2D/B489MeQCUa3PeUYpTlbCBj8908=) Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/90/9d9192-273c-4ca9-b2ba-fa9cb51cd0f1/1/ayM9dVCLToXMz0Q0mny3AxmNHSY.crl rsync://rpki.ripe.net/repository/DEFAULT/90/9d9192-273c-4ca9-b2ba-fa9cb51cd0f1/1/ayM9dVCLToXMz0Q0mny3AxmNHSY.mft rsync://rpki.ripe.net/repository/DEFAULT/ayM9dVCLToXMz0Q0mny3AxmNHSY.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Sat 06 Sep 2025 23:00:53 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:99:1c:1c:7d:27:a1:6c:f4:2c:b9:21:84:3a:1e:32:a7:5b Signature Algorithm: sha256WithRSAEncryption Issuer: CN=6b233d75508b4e85cccf44349a7cb703198d1d26 Validity Not Before: Sep 5 23:00:53 2025 GMT Not After : Sep 6 23:00:53 2025 GMT Subject: CN=dc292ac45e96fbc2c447cd166ec16360398b935b Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:bc:ab:b7:44:48:8b:90:85:48:bf:b2:8e:8b:41: b7:26:ce:02:38:a0:01:0f:9c:08:8b:85:7d:95:7d: be:29:aa:e5:e1:5f:53:57:7a:9e:27:23:fe:68:b5: 6b:00:1e:3e:0a:61:6c:07:0b:ca:8e:f8:d6:03:77: 7f:c5:c2:6d:b4:25:32:10:c9:54:d8:59:26:14:f0: 5d:9d:58:c3:7b:37:96:94:62:e3:17:1d:f6:fe:8e: e3:23:5b:c5:48:da:c8:19:4c:fb:3e:cf:78:e3:09: 4a:d1:5f:fc:3d:8b:3f:12:3c:c8:e0:f4:dc:5c:2f: c3:0f:0f:04:cd:98:29:b3:5b:b8:9a:5f:40:f1:f3: 6c:3c:f4:94:e3:2d:e3:2c:b2:92:40:0e:43:52:cf: 02:5e:96:bc:cd:09:f8:a8:18:52:25:22:88:ee:25: 42:79:8a:da:24:ce:1c:ea:3c:26:57:9b:43:15:d8: a7:1e:cc:fb:61:4c:13:62:09:71:25:3f:df:49:01: fa:09:0b:1e:3d:3c:80:f1:99:e1:76:d9:5f:09:f7: b0:c8:eb:06:bc:c4:ed:84:31:2a:12:56:8e:45:84: 50:7a:8b:c9:4e:9a:6a:69:04:cd:bc:db:2a:c1:8b: 4b:94:f0:0d:d0:7a:f8:af:3d:89:68:e0:4c:46:49: 07:03 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: DC:29:2A:C4:5E:96:FB:C2:C4:47:CD:16:6E:C1:63:60:39:8B:93:5B X509v3 Authority Key Identifier: keyid:6B:23:3D:75:50:8B:4E:85:CC:CF:44:34:9A:7C:B7:03:19:8D:1D:26 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/ayM9dVCLToXMz0Q0mny3AxmNHSY.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/90/9d9192-273c-4ca9-b2ba-fa9cb51cd0f1/1/ayM9dVCLToXMz0Q0mny3AxmNHSY.mft X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/90/9d9192-273c-4ca9-b2ba-fa9cb51cd0f1/1/ayM9dVCLToXMz0Q0mny3AxmNHSY.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 7e:f7:37:b9:d2:40:e1:e8:ee:77:79:f4:bc:ad:b9:59:4b:14: 13:38:6d:ee:e8:3b:f8:eb:27:db:ed:ee:3f:f0:52:d4:6d:ed: 4d:d5:ee:ad:1a:6c:64:68:0b:1f:ee:4d:a0:2f:85:66:8e:30: 8d:dc:7e:e6:29:dc:38:d8:7e:8e:d2:f9:9a:f3:92:7b:21:e3: cd:cb:17:33:9c:2d:0c:ec:e7:0f:a0:6a:96:18:a7:8e:4d:77: 7b:54:a4:2a:20:c3:7d:9b:63:02:33:35:64:f2:0c:79:58:12: f3:3e:56:10:0f:24:ee:c8:2e:a2:b4:ad:09:58:ff:4b:b5:04: 51:4f:ec:30:ad:1f:70:b2:e1:4b:65:3b:14:01:25:aa:a5:ae: cb:e5:76:c3:e5:d0:7e:fa:4b:9b:0c:8e:14:78:8a:5e:c3:15: ae:40:17:e1:9b:20:be:10:8c:72:cd:86:8b:20:57:d0:d3:c8: f0:15:89:99:76:3b:9b:86:74:e8:2c:9c:fb:2c:85:0e:8f:92: ae:34:7c:b0:dc:43:6d:90:13:f4:11:fd:a5:bb:bf:b7:21:a7: 6c:29:71:10:97:36:40:ef:14:90:23:f4:8d:1b:e8:0d:5f:a5: 01:c8:27:d7:36:03:b4:46:21:ba:4b:60:cf:f7:2a:93:ef:5f: 17:7a:7c:35 -----BEGIN CERTIFICATE----- MIIFFjCCA/6gAwIBAgISAZkcHH0noWz0LLkhhDoeMqdbMA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKDZiMjMzZDc1NTA4YjRlODVjY2NmNDQzNDlhN2NiNzAzMTk4 ZDFkMjYwHhcNMjUwOTA1MjMwMDUzWhcNMjUwOTA2MjMwMDUzWjAzMTEwLwYDVQQD EyhkYzI5MmFjNDVlOTZmYmMyYzQ0N2NkMTY2ZWMxNjM2MDM5OGI5MzViMIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAvKu3REiLkIVIv7KOi0G3Js4COKAB D5wIi4V9lX2+Karl4V9TV3qeJyP+aLVrAB4+CmFsBwvKjvjWA3d/xcJttCUyEMlU 2FkmFPBdnVjDezeWlGLjFx32/o7jI1vFSNrIGUz7Ps944wlK0V/8PYs/EjzI4PTc XC/DDw8EzZgps1u4ml9A8fNsPPSU4y3jLLKSQA5DUs8CXpa8zQn4qBhSJSKI7iVC eYraJM4c6jwmV5tDFdinHsz7YUwTYglxJT/fSQH6CQsePTyA8ZnhdtlfCfewyOsG vMTthDEqElaORYRQeovJTppqaQTNvNsqwYtLlPAN0Hr4rz2JaOBMRkkHAwIDAQAB o4ICIjCCAh4wHQYDVR0OBBYEFNwpKsRelvvCxEfNFm7BY2A5i5NbMB8GA1UdIwQY MBaAFGsjPXVQi06FzM9ENJp8twMZjR0mMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvYXlNOWRWQ0xUb1hNejBRMG1ueTNBeG1OSFNZLmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC85MC85ZDkxOTItMjczYy00Y2E5LWIyYmEt ZmE5Y2I1MWNkMGYxLzEvYXlNOWRWQ0xUb1hNejBRMG1ueTNBeG1OSFNZLm1mdDCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC85MC85ZDkxOTItMjczYy00Y2E5LWIyYmEtZmE5Y2I1MWNkMGYx LzEvYXlNOWRWQ0xUb1hNejBRMG1ueTNBeG1OSFNZLmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAfvc3udJA 4ejud3n0vK25WUsUEzht7ug7+Osn2+3uP/BS1G3tTdXurRpsZGgLH+5NoC+FZo4w jdx+5incONh+jtL5mvOSeyHjzcsXM5wtDOznD6Bqlhinjk13e1SkKiDDfZtjAjM1 ZPIMeVgS8z5WEA8k7sguorStCVj/S7UEUU/sMK0fcLLhS2U7FAElqqWuy+V2w+XQ fvpLmwyOFHiKXsMVrkAX4ZsgvhCMcs2GiyBX0NPI8BWJmXY7m4Z06Cyc+yyFDo+S rjR8sNxDbZAT9BH9pbu/tyGnbClxEJc2QO8UkCP0jRvoDV+lAcgn1zYDtEYhuktg z/cqk+9fF3p8NQ== -----END CERTIFICATE-----Generated at Sat Sep 6 07:54:05 2025 by rpki-client