$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/90/c48271-dee5-4841-a7dd-b0d72e910efe/1/SIxl3DWbWMprpdPa64dPBYaE6MY.mft File: SIxl3DWbWMprpdPa64dPBYaE6MY.mft (raw, json) Hash identifier: 8Czq5sYFPVn4RuUpOyp40OcP6bl2qMzEMgWFBMN5ZFE= Subject key identifier: 06:4E:F3:EA:CE:FC:28:33:0F:77:51:07:2F:C5:F2:86:0A:1D:E5:C7 Authority key identifier: 48:8C:65:DC:35:9B:58:CA:6B:A5:D3:DA:EB:87:4F:05:86:84:E8:C6 Certificate issuer: /CN=488c65dc359b58ca6ba5d3daeb874f058684e8c6 Certificate serial: 0199270DC62E8561985C41544A16586EDFE2 Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/SIxl3DWbWMprpdPa64dPBYaE6MY.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/90/c48271-dee5-4841-a7dd-b0d72e910efe/1/SIxl3DWbWMprpdPa64dPBYaE6MY.mft Manifest number: 0BD1 Signing time: Mon 08 Sep 2025 02:00:38 +0000 Manifest this update: Mon 08 Sep 2025 02:00:38 +0000 Manifest next update: Tue 09 Sep 2025 02:00:38 +0000 Files and hashes: 1: 1-aj5T9Cp2VGdvqAo0BLyNQl0OP0.roa (hash: wS9UY1GzEmJu3DzghbibQIVXymTHZMRkgirREpKzVig=) 2: CUbuh0PM3yqW-CpytCXAWwYdQ7Q.roa (hash: j6MdXA11jocwq2zYd6v7F0+Oq8jAXnx5FNp5BWwzZDI=) 3: GlW6zMLj6EttAmWKHy7iwfBhWZE.roa (hash: ABJiNZOFb+afM+eJQ3jwpevUgACzN0c5eNSdwc405sQ=) 4: L80pK6ObZRSScU_AZIXdqKhbLPs.roa (hash: 18whVklVMP7ZtNSmFR8DrFdceRMOWEFp28FcU5z0yMo=) 5: OZiwI2QkuuLbAOllr-XJlZEbneE.roa (hash: mXAIyClIU1Z4vpuyMsGiBBynCYmQ4v0FodyB8WIXhxk=) 6: PIHm_2dfJM_TGdcbwqQtnYwPXVY.roa (hash: kVHy+yISe5vrX43T3bIZxXbjFq8ypYr+GWkGUxqbMqI=) 7: SIxl3DWbWMprpdPa64dPBYaE6MY.crl (hash: 3J85cfZLUPN0nJYMQru7ZE5/axSwzbQfdFDqrDZ/+dg=) 8: cSVJv9Y-FnxxLG20frdAri_noBk.roa (hash: 34paWKddNtWaw0Vl7xzlk/3/M190Z6IXyvbGbAK4Tj8=) 9: ea6BO6jv5qXL6KOn3swl4W7fpN8.roa (hash: qb7RyOCex8dd5d/iXyz9TFdFXAm9eOIl5Q9VrGqRffk=) 10: f83w0UBpgcJD0dA64iAq7lmXARw.roa (hash: f9wovq1EqzUTh58ehH2r8oD0Nk4JJQcPOCa3DaAqpnI=) 11: h-PNQcjWOScse8WjyOhQeSbv950.roa (hash: /sFDGAAGqPfiAFmlm5KuC6NUsSeC3ZuPzrCQYYwFUic=) 12: mNSZJOUVeZicld4QAL_-bUUCGDI.roa (hash: nBD9zjll4ut7eXUVf0/WxLdu+1b2MWKBGI9qLKkr07w=) 13: qxsheS1XzS3dymYbKGRvC_3BiO4.roa (hash: VtweZ6shC74Bgwh1irW6gEbqeXbHeH8CL8orxJ3cqko=) 14: sejuuPdZzCrTGWMQL8q6fL6s1bI.roa (hash: Ijpq2YAMnAhyxDacqfun38Wp4QxYF9meZt2cnqXBEVs=) 15: z4bsjVbTnI81Y7pi92gQtwuMcMA.roa (hash: 6k5So3y2nhT6Ksfiwx9bk8ELUKmJlBzOynlhbHwQFMg=) Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/90/c48271-dee5-4841-a7dd-b0d72e910efe/1/SIxl3DWbWMprpdPa64dPBYaE6MY.crl rsync://rpki.ripe.net/repository/DEFAULT/90/c48271-dee5-4841-a7dd-b0d72e910efe/1/SIxl3DWbWMprpdPa64dPBYaE6MY.mft rsync://rpki.ripe.net/repository/DEFAULT/SIxl3DWbWMprpdPa64dPBYaE6MY.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Tue 09 Sep 2025 01:00:23 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:99:27:0d:c6:2e:85:61:98:5c:41:54:4a:16:58:6e:df:e2 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=488c65dc359b58ca6ba5d3daeb874f058684e8c6 Validity Not Before: Sep 8 02:00:38 2025 GMT Not After : Sep 9 02:00:38 2025 GMT Subject: CN=064ef3eacefc28330f7751072fc5f2860a1de5c7 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:b5:b5:14:94:73:3e:17:34:bb:76:c1:bd:ba:c0: 80:d8:4d:ad:20:05:41:83:47:ce:7d:d8:48:1a:d9: 93:03:92:dd:44:52:d8:2a:39:83:08:45:84:0a:93: 5a:91:93:b2:af:fe:9e:c5:12:b9:09:23:32:fd:ca: 52:1b:93:2d:5a:b5:2d:31:5f:21:85:66:02:18:96: 74:98:f8:dc:83:6d:fe:a6:ed:85:e9:63:23:5b:9e: 68:0c:db:ce:cd:35:fb:86:bc:4e:50:fd:a5:7d:a3: 04:4f:38:d8:fd:88:61:f7:e6:2e:94:0b:12:a7:ab: a1:36:64:fe:95:a4:f5:a4:54:78:4a:72:11:72:34: c2:f6:ef:53:8e:f9:54:47:6a:de:55:a3:cd:8f:8e: 5e:77:ee:f9:78:f6:ff:7e:e8:45:67:0f:ac:ab:88: 33:58:91:78:01:7d:98:39:ac:04:f0:45:80:6c:d7: 60:c1:d1:40:e0:00:c5:02:28:45:a7:40:ec:8b:32: 1a:a9:b0:53:3b:48:18:59:0b:b9:94:fc:92:eb:fe: 17:d7:d3:fd:ed:96:65:c2:67:6f:97:96:e7:b7:c4: 4d:b7:7d:f7:22:fc:d2:11:c6:8f:54:7b:d5:50:14: 41:df:2e:23:a1:2b:a5:0e:d9:4b:55:1d:a7:c4:46: 65:3b Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 06:4E:F3:EA:CE:FC:28:33:0F:77:51:07:2F:C5:F2:86:0A:1D:E5:C7 X509v3 Authority Key Identifier: keyid:48:8C:65:DC:35:9B:58:CA:6B:A5:D3:DA:EB:87:4F:05:86:84:E8:C6 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/SIxl3DWbWMprpdPa64dPBYaE6MY.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/90/c48271-dee5-4841-a7dd-b0d72e910efe/1/SIxl3DWbWMprpdPa64dPBYaE6MY.mft X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/90/c48271-dee5-4841-a7dd-b0d72e910efe/1/SIxl3DWbWMprpdPa64dPBYaE6MY.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 46:ff:5e:13:a7:4a:a9:a5:c1:6d:ea:69:0d:7c:04:00:c3:3b: 58:e7:29:a9:d3:60:68:81:0e:00:73:8e:04:15:49:d1:50:57: 72:3f:93:8c:c9:b6:a5:e7:89:9e:de:fd:34:f7:b3:71:55:c3: 66:0f:7f:50:a3:07:16:b1:f7:f0:c2:da:ac:68:a3:87:e5:14: e3:81:54:63:82:ca:12:01:ca:58:69:3c:64:92:2a:4b:30:0f: 74:3b:43:d0:46:4e:17:77:5f:f7:95:09:80:57:5a:de:2e:29: 28:e6:d0:f9:86:9e:cf:04:01:1a:01:6f:fb:a6:57:d7:a8:54: c1:1f:cc:f9:70:8a:33:02:d2:70:3f:ba:49:0d:6f:ca:21:d6: ca:51:39:4c:ec:ec:83:8e:d9:4a:9e:a4:bf:a6:a9:7c:e7:25: 84:e2:54:d2:a3:38:87:39:f6:9e:b5:ee:5b:b9:13:0e:c8:4a: e3:2b:25:a8:4a:67:a6:f3:f0:9a:dc:66:b5:f4:c4:12:9f:cf: 68:4f:12:f2:92:66:d0:0b:3d:df:40:9f:97:08:7a:a5:f6:3a: ed:b2:8b:83:5e:ee:e5:4d:de:f6:78:74:f3:cd:a8:eb:9c:76: db:2f:04:07:aa:86:d5:eb:92:20:b3:07:94:65:3e:2e:ed:e9: 75:85:6c:ac -----BEGIN CERTIFICATE----- MIIFFjCCA/6gAwIBAgISAZknDcYuhWGYXEFUShZYbt/iMA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKDQ4OGM2NWRjMzU5YjU4Y2E2YmE1ZDNkYWViODc0ZjA1ODY4 NGU4YzYwHhcNMjUwOTA4MDIwMDM4WhcNMjUwOTA5MDIwMDM4WjAzMTEwLwYDVQQD EygwNjRlZjNlYWNlZmMyODMzMGY3NzUxMDcyZmM1ZjI4NjBhMWRlNWM3MIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAtbUUlHM+FzS7dsG9usCA2E2tIAVB g0fOfdhIGtmTA5LdRFLYKjmDCEWECpNakZOyr/6exRK5CSMy/cpSG5MtWrUtMV8h hWYCGJZ0mPjcg23+pu2F6WMjW55oDNvOzTX7hrxOUP2lfaMETzjY/Yhh9+YulAsS p6uhNmT+laT1pFR4SnIRcjTC9u9TjvlUR2reVaPNj45ed+75ePb/fuhFZw+sq4gz WJF4AX2YOawE8EWAbNdgwdFA4ADFAihFp0DsizIaqbBTO0gYWQu5lPyS6/4X19P9 7ZZlwmdvl5bnt8RNt333IvzSEcaPVHvVUBRB3y4joSulDtlLVR2nxEZlOwIDAQAB o4ICIjCCAh4wHQYDVR0OBBYEFAZO8+rO/CgzD3dRBy/F8oYKHeXHMB8GA1UdIwQY MBaAFEiMZdw1m1jKa6XT2uuHTwWGhOjGMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvU0l4bDNEV2JXTXBycGRQYTY0ZFBCWWFFNk1ZLmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC85MC9jNDgyNzEtZGVlNS00ODQxLWE3ZGQt YjBkNzJlOTEwZWZlLzEvU0l4bDNEV2JXTXBycGRQYTY0ZFBCWWFFNk1ZLm1mdDCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC85MC9jNDgyNzEtZGVlNS00ODQxLWE3ZGQtYjBkNzJlOTEwZWZl LzEvU0l4bDNEV2JXTXBycGRQYTY0ZFBCWWFFNk1ZLmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEARv9eE6dK qaXBbeppDXwEAMM7WOcpqdNgaIEOAHOOBBVJ0VBXcj+TjMm2peeJnt79NPezcVXD Zg9/UKMHFrH38MLarGijh+UU44FUY4LKEgHKWGk8ZJIqSzAPdDtD0EZOF3df95UJ gFda3i4pKObQ+YaezwQBGgFv+6ZX16hUwR/M+XCKMwLScD+6SQ1vyiHWylE5TOzs g47ZSp6kv6apfOclhOJU0qM4hzn2nrXuW7kTDshK4yslqEpnpvPwmtxmtfTEEp/P aE8S8pJm0As930Cflwh6pfY67bKLg17u5U3e9nh0882o65x22y8EB6qG1euSILMH lGU+Lu3pdYVsrA== -----END CERTIFICATE-----Generated at Mon Sep 8 08:07:06 2025 by rpki-client