$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/92/f153dc-cbfb-4a4f-80d2-745e08fe58c6/1/sLWoCnEG4KS4VFyBULtyxpn8yaA.mft File: sLWoCnEG4KS4VFyBULtyxpn8yaA.mft (raw, json) Hash identifier: Yw8y5oUIId/RQF/PgrfUJWQch1DfKeI0UZZiqepeCAM= Subject key identifier: 0B:53:3A:93:2F:C4:7A:18:9A:6C:F6:37:AA:03:D4:68:BB:4E:F9:7C Authority key identifier: B0:B5:A8:0A:71:06:E0:A4:B8:54:5C:81:50:BB:72:C6:99:FC:C9:A0 Certificate issuer: /CN=b0b5a80a7106e0a4b8545c8150bb72c699fcc9a0 Certificate serial: 019931252401EAB288ED49DA0253AC3B1E81 Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/sLWoCnEG4KS4VFyBULtyxpn8yaA.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/92/f153dc-cbfb-4a4f-80d2-745e08fe58c6/1/sLWoCnEG4KS4VFyBULtyxpn8yaA.mft Manifest number: 1697 Signing time: Wed 10 Sep 2025 01:02:21 +0000 Manifest this update: Wed 10 Sep 2025 01:02:21 +0000 Manifest next update: Thu 11 Sep 2025 01:02:21 +0000 Files and hashes: 1: 60jG5Ay8pKNRLAaYiabGAbMAWcU.roa (hash: mGDjXdclRD6cM00fzezmu8njPZGu0i86EMmzQCWdsaI=) 2: 8NknCKB4mqEufbZ6UbHgAa8xKGk.roa (hash: +VuXhmjH2zdhVZOeQIf+1XfhIBEvtUJA5CNUFP6jbIc=) 3: Cwb1KDzjyZP06ERQCkOqE8eDn-Q.roa (hash: qEbiLSfggbr/wcV1CfVb4G8sOcwZPVPdEo2xFZT7GWw=) 4: ULGt5CdhlE1JEjeG7VsVStOraA8.roa (hash: RKuD3ZtjSv+b+szTB+emIP6q+hmA+ntSP7hJQn+VQLA=) 5: XXx0PZbW0VSnHcKqWvct0KGeX5o.roa (hash: fg2kYbNMaJFsDmSVzEYMa+3owPgOnqiysynI+fCXGgg=) 6: XqyfpygCBb8Q3tIPPqdoPK94M0A.roa (hash: 2VTgMTAP00AWrF9/qszpE/dPLTmJ6fjO0h7TyCaHdtE=) 7: _xekjSFtSAUujx70CN_lqAzDOTI.roa (hash: RCBKZCow8/qZDtOMSChrlpX+0rMSwhsyivwOBDzZ8y0=) 8: d5wYN4sqYmgKKKUN9X-8jp9PKTs.roa (hash: /7Xb7BgMP/VziPk4Q/U+uMUdmAyttT7O93i5sL6urDU=) 9: jU-enqBlwHSK5LFQUkQMv3mnQ3c.roa (hash: XGjlZdDrp7Q05Es+vT4dQhjxGrAgZ9KHZykl/3VpHuk=) 10: rgPd-lPBT_KjoGNurNCPr8-tYLM.roa (hash: 7UFfmlghHed6gv5YUhlj2bi7/Km6EbVr9jqYqXUYH8o=) 11: sLWoCnEG4KS4VFyBULtyxpn8yaA.crl (hash: iZQLariJOUn3A7XYpOJHlDcDBFOAD5iwIrH82/F5jJ8=) 12: uYQNZGrXH6jilfHVW7M6-uKjZF8.roa (hash: K7dbhIw3GKL8CpYsfdoECZtVDjcGxNIlpZxMSzxg0fc=) 13: zad7TKoNmHhoc0CyHOzgSXKr6f4.roa (hash: LQ6zogTRTgGoz9vqyWdA5yZND4PDb2ytjo7mWtS7rF8=) Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/92/f153dc-cbfb-4a4f-80d2-745e08fe58c6/1/sLWoCnEG4KS4VFyBULtyxpn8yaA.crl rsync://rpki.ripe.net/repository/DEFAULT/92/f153dc-cbfb-4a4f-80d2-745e08fe58c6/1/sLWoCnEG4KS4VFyBULtyxpn8yaA.mft rsync://rpki.ripe.net/repository/DEFAULT/sLWoCnEG4KS4VFyBULtyxpn8yaA.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Wed 10 Sep 2025 21:45:22 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:99:31:25:24:01:ea:b2:88:ed:49:da:02:53:ac:3b:1e:81 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=b0b5a80a7106e0a4b8545c8150bb72c699fcc9a0 Validity Not Before: Sep 10 01:02:21 2025 GMT Not After : Sep 11 01:02:21 2025 GMT Subject: CN=0b533a932fc47a189a6cf637aa03d468bb4ef97c Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:d6:76:8d:77:27:19:9b:dd:1a:5d:a0:da:79:00: f6:c6:e6:fd:8f:5a:1a:63:d3:77:1f:44:f5:28:d2: b8:f0:d2:f4:76:db:3d:1f:fa:83:9c:46:2d:c1:7c: d8:73:3b:f2:07:d5:2d:a9:81:cb:c3:f1:67:92:d4: fd:52:0b:9c:90:f1:72:9c:1d:0d:0a:54:7f:59:e0: fc:a9:de:0a:78:07:8c:d8:97:d6:65:ce:31:e4:08: 6c:2f:9d:f1:ef:94:34:c6:83:1c:41:15:b7:b8:1c: 85:74:ec:7e:69:ba:bc:a6:b3:3f:5c:aa:ee:a3:71: e1:ab:1c:38:44:58:e1:a1:3c:6a:71:19:dc:f0:38: 37:b9:ed:8e:54:af:f8:73:3c:e2:3d:99:4c:94:5b: e5:b4:bf:d8:a6:d5:71:8c:37:13:0e:1b:35:fc:29: de:c0:e6:2c:ff:2d:e3:77:6a:6f:6d:4c:1e:66:9f: 3a:41:0d:c0:7b:af:6a:ba:2e:46:b1:7e:86:db:d3: 88:09:63:67:41:53:a6:a9:8b:87:4b:a2:c4:33:83: 48:49:d8:05:12:a4:c0:4e:03:28:83:2c:9c:90:11: 63:87:e8:a1:ca:d6:fb:b9:dd:3e:e5:43:87:c5:f0: 45:ba:ca:e7:6d:31:09:4b:9d:ec:d9:8c:bd:23:5e: df:49 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 0B:53:3A:93:2F:C4:7A:18:9A:6C:F6:37:AA:03:D4:68:BB:4E:F9:7C X509v3 Authority Key Identifier: keyid:B0:B5:A8:0A:71:06:E0:A4:B8:54:5C:81:50:BB:72:C6:99:FC:C9:A0 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/sLWoCnEG4KS4VFyBULtyxpn8yaA.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/92/f153dc-cbfb-4a4f-80d2-745e08fe58c6/1/sLWoCnEG4KS4VFyBULtyxpn8yaA.mft X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/92/f153dc-cbfb-4a4f-80d2-745e08fe58c6/1/sLWoCnEG4KS4VFyBULtyxpn8yaA.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 52:bc:7f:9d:76:c5:18:10:ca:e9:32:d1:6a:3f:fe:75:b8:99: d0:bc:4a:50:a5:d5:5d:8f:5c:97:3f:ac:85:df:be:5d:7a:37: 2f:f2:a7:f9:66:07:44:72:69:27:a2:07:2e:28:20:31:46:0f: a8:89:d6:8e:11:79:e9:59:e4:5e:ba:a0:90:ae:9b:61:6e:21: 00:08:fc:c2:c3:a5:38:9c:73:d9:4c:a7:d3:6c:96:44:ca:df: 40:77:0c:59:29:2c:9d:69:22:60:65:71:e5:16:d5:4e:29:64: dc:03:a9:4a:fa:9c:cc:48:18:b4:f0:67:0c:1a:81:7f:3d:0b: e0:37:88:bc:38:96:ad:2c:e9:cd:91:f4:ee:fa:be:76:76:7c: f9:88:6b:78:6f:50:d9:f2:5a:32:f3:d9:59:40:21:25:86:69: 13:d4:92:76:c0:22:0a:cb:76:96:14:4f:7b:e2:26:41:ec:a9: 97:cb:a1:35:f0:3d:5e:6f:b2:68:47:2e:2f:92:57:0e:cd:40: e6:0f:ea:52:f3:b0:79:0c:c9:f4:e2:bc:7e:35:14:f0:b0:cb: b3:da:ef:f7:6b:b8:13:f8:31:af:3b:7a:96:c9:ac:1c:88:5e: 8e:fc:c1:e8:8f:78:a9:61:bb:a9:68:51:2a:02:26:c8:7c:df: 36:dc:aa:78 -----BEGIN CERTIFICATE----- MIIFFjCCA/6gAwIBAgISAZkxJSQB6rKI7UnaAlOsOx6BMA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKGIwYjVhODBhNzEwNmUwYTRiODU0NWM4MTUwYmI3MmM2OTlm Y2M5YTAwHhcNMjUwOTEwMDEwMjIxWhcNMjUwOTExMDEwMjIxWjAzMTEwLwYDVQQD EygwYjUzM2E5MzJmYzQ3YTE4OWE2Y2Y2MzdhYTAzZDQ2OGJiNGVmOTdjMIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEA1naNdycZm90aXaDaeQD2xub9j1oa Y9N3H0T1KNK48NL0dts9H/qDnEYtwXzYczvyB9UtqYHLw/FnktT9UguckPFynB0N ClR/WeD8qd4KeAeM2JfWZc4x5AhsL53x75Q0xoMcQRW3uByFdOx+abq8prM/XKru o3Hhqxw4RFjhoTxqcRnc8Dg3ue2OVK/4czziPZlMlFvltL/YptVxjDcTDhs1/Cne wOYs/y3jd2pvbUweZp86QQ3Ae69qui5GsX6G29OICWNnQVOmqYuHS6LEM4NISdgF EqTATgMogyyckBFjh+ihytb7ud0+5UOHxfBFusrnbTEJS53s2Yy9I17fSQIDAQAB o4ICIjCCAh4wHQYDVR0OBBYEFAtTOpMvxHoYmmz2N6oD1Gi7Tvl8MB8GA1UdIwQY MBaAFLC1qApxBuCkuFRcgVC7csaZ/MmgMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvc0xXb0NuRUc0S1M0VkZ5QlVMdHl4cG44eWFBLmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC85Mi9mMTUzZGMtY2JmYi00YTRmLTgwZDIt NzQ1ZTA4ZmU1OGM2LzEvc0xXb0NuRUc0S1M0VkZ5QlVMdHl4cG44eWFBLm1mdDCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC85Mi9mMTUzZGMtY2JmYi00YTRmLTgwZDItNzQ1ZTA4ZmU1OGM2 LzEvc0xXb0NuRUc0S1M0VkZ5QlVMdHl4cG44eWFBLmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAUrx/nXbF GBDK6TLRaj/+dbiZ0LxKUKXVXY9clz+shd++XXo3L/Kn+WYHRHJpJ6IHLiggMUYP qInWjhF56VnkXrqgkK6bYW4hAAj8wsOlOJxz2Uyn02yWRMrfQHcMWSksnWkiYGVx 5RbVTilk3AOpSvqczEgYtPBnDBqBfz0L4DeIvDiWrSzpzZH07vq+dnZ8+YhreG9Q 2fJaMvPZWUAhJYZpE9SSdsAiCst2lhRPe+ImQeypl8uhNfA9Xm+yaEcuL5JXDs1A 5g/qUvOweQzJ9OK8fjUU8LDLs9rv92u4E/gxrzt6lsmsHIhejvzB6I94qWG7qWhR KgImyHzfNtyqeA== -----END CERTIFICATE-----Generated at Wed Sep 10 04:48:10 2025 by rpki-client