$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/98/b03213-5e80-4931-81ce-f752d81605fb/1/1-TrGzSJAJJu6YBcfCG6RAcyHyiQ.mft File: 1-TrGzSJAJJu6YBcfCG6RAcyHyiQ.mft (raw, json) Hash identifier: OBaEA6l93G8JaxbOVcB+/5YQbN/seIPC1nxXxwVzv+0= Subject key identifier: 4D:47:2E:2A:EB:0A:1C:D2:7A:73:75:7E:B9:65:21:D1:69:99:6C:96 Authority key identifier: F9:3A:C6:CD:22:40:24:9B:BA:60:17:1F:08:6E:91:01:CC:87:CA:24 Certificate issuer: /CN=f93ac6cd2240249bba60171f086e9101cc87ca24 Certificate serial: 01992DEC9EF83ABAC8D7E9CEC5252BA59D75 Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/1-TrGzSJAJJu6YBcfCG6RAcyHyiQ.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/98/b03213-5e80-4931-81ce-f752d81605fb/1/1-TrGzSJAJJu6YBcfCG6RAcyHyiQ.mft Manifest number: 111C Signing time: Tue 09 Sep 2025 10:01:45 +0000 Manifest this update: Tue 09 Sep 2025 10:01:45 +0000 Manifest next update: Wed 10 Sep 2025 10:01:45 +0000 Files and hashes: 1: 1-TrGzSJAJJu6YBcfCG6RAcyHyiQ.crl (hash: LaKv4XeanCG7G+NCZBSGjbTnwReLIjyaCnpC96Rc8QA=) 2: 1rvU47bf__v_KrHYYRPHuR8fgjc.roa (hash: HO9MgV76hbMMfAjtcpab0pQMUXJlCX3bhzQB4ONUQns=) 3: 22T8EVZzlO41oAMFJlvqzAG1qBo.roa (hash: bfWurW2nFor6WKDfmZqrumDW3WLiIUdWZMuqYcYHQ4U=) 4: 2Eku4G4QcFntTeBnPdjQt16QDE8.roa (hash: /h0JlWzojsWTrZMYWqaSRG6HTNQqdKotAsOYfDdHfIU=) 5: 4ooJNHbCgJHfVSaDRkuU0t8O_Vo.roa (hash: +SG76G9IyTI0k0seOJpd2UmxDLN7P9YRF6si6eLLNeA=) 6: 8tB6p8pD3Es3mcW7_h_tKKFo3gs.roa (hash: /upIizdLvhAVo+dTJgi7w1RXZAYuejov/d8qUeJyxe0=) 7: 9qr8r8xTppJSHLya24yoc85Hk7U.roa (hash: lgokGB6Ll002voLL4TcV40sMF+WO24Rj8TUlgWDpzXo=) 8: IAaDUlLUfgx8yfwZmpcftz_J3zA.roa (hash: v1q3KD/AbTqO/Q8Ibts7qUHfFpUCjL1VF+LMfn/fbQI=) 9: Pj3zogl5ZYWOBY3ig7th641eV9A.roa (hash: 7ElQ3zJdzTdZczGF6CkoIorKYRoi8e4nnKid4Ex6yb0=) 10: QAKkeXuZL_ZFLh3yXryVAC9r4uc.roa (hash: UUlL1WVDgsXwZrqIFrcSXaDunz9z9QLg+VVmo+sK9RI=) 11: T4c9dXjox_IR0w4Sp6j6uIsrN8w.roa (hash: t8vtLXPqqc+zrZrNOi4D5mdJAEBF1Ira9/CrglSSLyQ=) 12: TUz_WJSMNczh0a4oE0JPAiZeFwc.roa (hash: W6HJwXWWYxWpF1iC+V/7g0tdFSADqlwW02aC7Kto7U8=) 13: UD8PeoC507j-R5gM4iVeaToplJg.roa (hash: E+NOjqQP7fFW4dktZcx7zBoGyfZltq1IW944Fil+FoI=) 14: Uvc0mIYrtGDSDiJY8e0YxhvZfsc.roa (hash: t1AKkHKCvtUzgk+Av5NTg1kvHY45d4XWobXLQBwd5jg=) 15: WSh4WlDKBbGMyb7nRqG4Mxx97R0.roa (hash: PyohQrEbBmUFGkizOCRWLarzuzBDIMXrn/I9XNTnDqs=) 16: XIJUooGzzFBzLgFVyUb-bnI6Oy8.roa (hash: TCYLQRnuzWsgOnaV3SPssBWZuYXYMvyZ2XlBCOrqK8s=) 17: XSjZ6P2-J8Hkfl3O5rZuaXFNxu4.roa (hash: mDVKUCcUGNt3ihgIQHKFLdzsYM8bgFSt2hrni9Xfg/0=) 18: ZVz0SKvkjOxlciVFBqTr0VUiknA.roa (hash: uFR00EkEnl9o+CnA+h+cBK23mrxF+agDbELB+ERqUFU=) 19: q8aI8en4lXWEAOIqjltL2dKCNEM.roa (hash: mIK7Q6QxymI6Gyc9Mumf03eU529f/5ddct/D368l5+0=) 20: yRetO5hGF2Sg7Urg7tPPa5ziUiI.roa (hash: 0y+iCbPQCXEytpzJVMYbIqcFI7KG0+fLz2JnONERKbY=) Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/98/b03213-5e80-4931-81ce-f752d81605fb/1/1-TrGzSJAJJu6YBcfCG6RAcyHyiQ.crl rsync://rpki.ripe.net/repository/DEFAULT/98/b03213-5e80-4931-81ce-f752d81605fb/1/1-TrGzSJAJJu6YBcfCG6RAcyHyiQ.mft rsync://rpki.ripe.net/repository/DEFAULT/1-TrGzSJAJJu6YBcfCG6RAcyHyiQ.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Wed 10 Sep 2025 08:00:23 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:99:2d:ec:9e:f8:3a:ba:c8:d7:e9:ce:c5:25:2b:a5:9d:75 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=f93ac6cd2240249bba60171f086e9101cc87ca24 Validity Not Before: Sep 9 10:01:45 2025 GMT Not After : Sep 10 10:01:45 2025 GMT Subject: CN=4d472e2aeb0a1cd27a73757eb96521d169996c96 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:c7:7f:e4:1f:fb:89:69:06:5c:1c:c3:ad:f8:29: 1d:3b:dd:4c:0a:3c:48:d9:3c:06:27:9e:4e:1d:e6: 55:f6:f4:85:da:7b:bd:7e:cb:4a:86:bb:71:c1:0c: 4a:6a:06:79:36:9b:c3:74:c8:30:95:d4:de:9b:8d: 69:6c:65:78:56:44:df:1a:c0:16:4b:4d:af:33:b6: 77:62:c2:7a:69:09:bc:03:75:f1:47:c4:ba:2a:ca: f8:7a:5d:6d:f3:65:27:86:c6:74:c2:0e:5a:1e:e3: 40:1e:8e:10:cb:df:03:7c:df:d5:de:23:9b:62:7d: 41:d5:cc:12:65:6a:18:7b:44:12:fb:04:7c:f0:4f: b0:d8:4b:9a:2a:52:1b:0c:df:a4:95:32:27:98:fb: 14:85:e8:2d:2c:86:2c:51:f6:41:d4:82:65:f4:a3: c9:a0:20:53:94:a7:ae:74:86:a0:da:23:eb:4a:fe: b2:f3:e5:25:2c:c7:1c:c5:e5:22:b8:f4:b7:fa:d6: 41:53:ec:d5:16:d2:13:04:57:13:96:95:e6:f7:6c: c8:83:e3:a8:d7:db:88:d6:be:16:8e:76:ad:61:ab: b9:4b:de:57:0c:8d:30:de:0f:7b:73:86:53:57:0a: 34:60:c8:44:7d:23:b0:fd:bc:5f:5c:7d:9f:c2:71: 4a:c7 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 4D:47:2E:2A:EB:0A:1C:D2:7A:73:75:7E:B9:65:21:D1:69:99:6C:96 X509v3 Authority Key Identifier: keyid:F9:3A:C6:CD:22:40:24:9B:BA:60:17:1F:08:6E:91:01:CC:87:CA:24 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/1-TrGzSJAJJu6YBcfCG6RAcyHyiQ.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/98/b03213-5e80-4931-81ce-f752d81605fb/1/1-TrGzSJAJJu6YBcfCG6RAcyHyiQ.mft X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/98/b03213-5e80-4931-81ce-f752d81605fb/1/1-TrGzSJAJJu6YBcfCG6RAcyHyiQ.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption aa:f5:3f:79:8b:a5:5a:fc:75:ac:98:d3:24:86:6e:99:f0:71: 46:a6:bf:6a:77:c2:bb:9f:97:2d:b5:1c:4f:e8:dc:56:48:39: 14:0a:dd:f7:d4:d9:b1:34:84:52:90:62:8a:83:5c:45:c3:bb: 90:5b:2f:8e:66:61:ef:75:9e:b1:e9:ce:19:c6:8e:b2:3f:19: 76:2c:5a:d5:d7:66:0d:46:26:26:22:98:7c:7b:cf:0d:47:7a: 77:58:64:d3:92:6c:f6:24:e0:04:df:d3:22:98:79:30:f2:c7: 09:f0:62:76:1a:7a:a7:78:a4:b2:b8:b6:d4:5e:ad:b7:13:95: 84:4e:dd:64:d5:b6:81:ee:72:c1:77:7d:3a:a9:05:63:70:f4: 1b:51:39:57:4a:cf:14:fc:a4:32:8b:21:e1:e2:79:7b:6f:6d: 74:b3:f5:f8:f2:f1:84:2b:80:6d:41:f0:ad:b0:ac:b5:cf:62: 7b:fa:b5:49:1a:91:ec:a6:b8:14:86:78:6a:16:99:b9:19:87: ac:86:3c:41:71:83:c5:6c:12:6c:d4:a6:f2:b8:4b:9e:34:15: 2d:87:81:e2:8c:e6:fc:f1:e3:5a:3c:26:8c:5a:06:a5:81:a5: 9d:a8:79:18:42:3d:3e:31:ea:68:8d:a4:1e:3d:ae:b0:61:25: fd:97:6d:f1 -----BEGIN CERTIFICATE----- MIIFGTCCBAGgAwIBAgISAZkt7J74OrrI1+nOxSUrpZ11MA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKGY5M2FjNmNkMjI0MDI0OWJiYTYwMTcxZjA4NmU5MTAxY2M4 N2NhMjQwHhcNMjUwOTA5MTAwMTQ1WhcNMjUwOTEwMTAwMTQ1WjAzMTEwLwYDVQQD Eyg0ZDQ3MmUyYWViMGExY2QyN2E3Mzc1N2ViOTY1MjFkMTY5OTk2Yzk2MIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAx3/kH/uJaQZcHMOt+CkdO91MCjxI 2TwGJ55OHeZV9vSF2nu9fstKhrtxwQxKagZ5NpvDdMgwldTem41pbGV4VkTfGsAW S02vM7Z3YsJ6aQm8A3XxR8S6Ksr4el1t82UnhsZ0wg5aHuNAHo4Qy98DfN/V3iOb Yn1B1cwSZWoYe0QS+wR88E+w2EuaKlIbDN+klTInmPsUhegtLIYsUfZB1IJl9KPJ oCBTlKeudIag2iPrSv6y8+UlLMccxeUiuPS3+tZBU+zVFtITBFcTlpXm92zIg+Oo 19uI1r4WjnatYau5S95XDI0w3g97c4ZTVwo0YMhEfSOw/bxfXH2fwnFKxwIDAQAB o4ICJTCCAiEwHQYDVR0OBBYEFE1HLirrChzSenN1frllIdFpmWyWMB8GA1UdIwQY MBaAFPk6xs0iQCSbumAXHwhukQHMh8okMA4GA1UdDwEB/wQEAwIHgDBlBggrBgEF BQcBAQRZMFcwVQYIKwYBBQUHMAKGSXJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvMS1Uckd6U0pBSkp1NllCY2ZDRzZSQWN5SHlpUS5jZXIw gY4GCCsGAQUFBwELBIGBMH8wfQYIKwYBBQUHMAuGcXJzeW5jOi8vcnBraS5yaXBl Lm5ldC9yZXBvc2l0b3J5L0RFRkFVTFQvOTgvYjAzMjEzLTVlODAtNDkzMS04MWNl LWY3NTJkODE2MDVmYi8xLzEtVHJHelNKQUpKdTZZQmNmQ0c2UkFjeUh5aVEubWZ0 MIGCBgNVHR8EezB5MHegdaBzhnFyc3luYzovL3Jwa2kucmlwZS5uZXQvcmVwb3Np dG9yeS9ERUZBVUxULzk4L2IwMzIxMy01ZTgwLTQ5MzEtODFjZS1mNzUyZDgxNjA1 ZmIvMS8xLVRyR3pTSkFKSnU2WUJjZkNHNlJBY3lIeWlRLmNybDAYBgNVHSABAf8E DjAMMAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgAC BQAwFQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAqvU/ eYulWvx1rJjTJIZumfBxRqa/anfCu5+XLbUcT+jcVkg5FArd99TZsTSEUpBiioNc RcO7kFsvjmZh73WesenOGcaOsj8Zdixa1ddmDUYmJiKYfHvPDUd6d1hk05Js9iTg BN/TIph5MPLHCfBidhp6p3iksri21F6ttxOVhE7dZNW2ge5ywXd9OqkFY3D0G1E5 V0rPFPykMosh4eJ5e29tdLP1+PLxhCuAbUHwrbCstc9ie/q1SRqR7Ka4FIZ4ahaZ uRmHrIY8QXGDxWwSbNSm8rhLnjQVLYeB4ozm/PHjWjwmjFoGpYGlnah5GEI9PjHq aI2kHj2usGEl/Zdt8Q== -----END CERTIFICATE-----Generated at Tue Sep 9 12:43:49 2025 by rpki-client