$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/99/2ece62-1d8c-450c-91e8-8eeb757cf545/1/1nPYSbfVBHN21X5veW8AGLcLRQY.mft File: 1nPYSbfVBHN21X5veW8AGLcLRQY.mft (raw, json) Hash identifier: wNiexF7q2ZzOPELOiS0uXQig2JSjhtyqPrvtkgRn9hs= Subject key identifier: 39:02:9A:1E:B7:27:53:1A:70:EA:13:AB:CF:2E:C5:EF:1E:64:89:F8 Authority key identifier: D6:73:D8:49:B7:D5:04:73:76:D5:7E:6F:79:6F:00:18:B7:0B:45:06 Certificate issuer: /CN=d673d849b7d5047376d57e6f796f0018b70b4506 Certificate serial: 019936F03E6FEA714328E6DEE5AC8D76DF6B Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/1nPYSbfVBHN21X5veW8AGLcLRQY.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/99/2ece62-1d8c-450c-91e8-8eeb757cf545/1/1nPYSbfVBHN21X5veW8AGLcLRQY.mft Manifest number: 1685 Signing time: Thu 11 Sep 2025 04:02:17 +0000 Manifest this update: Thu 11 Sep 2025 04:02:17 +0000 Manifest next update: Fri 12 Sep 2025 04:02:17 +0000 Files and hashes: 1: 0MIjC24hYDTW286dNJh5qkIVoQM.roa (hash: MXU+N4PdoB06EZ/HjOQwFUwlQG2n1kwzXC/QtbLmJF0=) 2: 1-TrGp-z9XirqNAVi00kZmMtegAQ.roa (hash: cZ4yM8vQzUWF39oRoRKvKg08K8izx43nKLI06xAV69c=) 3: 1i8rkHyD_GEpEeT-VSPmrM7G9hg.roa (hash: T9uIPUHDBJqXpx6DpvHR6pRhllvR8xZm3kC3o7hqoD8=) 4: 1nPYSbfVBHN21X5veW8AGLcLRQY.crl (hash: BCf/6w5KC2CH32VDu1+gsTt+K38mM0JZTFgzCe5KJAc=) 5: ARk7nVFItdFVCXn3sJgvaZ_sS0g.roa (hash: 7EEJNomrXNWfyMmnkFvuBOXpyWJs7s8lvlhWBalFymc=) 6: AgHi8XOuA8AW6mQ9081yaHFi7LY.roa (hash: GntMqrIeYlMh8GQHa17dRcWuW6VcPzJOKzx7OubvqC4=) 7: B3ZVVduO-XEeJJT5EOMOysoNJrI.roa (hash: hGLOqNOpZ+B1pvsSFo3MX/h7GOvVIRzBnRvB+fSCcjA=) 8: FCxYBsvWXDM15GSlGFr8QNu4RYE.roa (hash: 0mvD6N4h6dDsOpud4GT2Wd7vYleLAl39nQHcItAcmYc=) 9: IP6dxUf_151oN-w_YJNTEK8gFBY.roa (hash: DuBNN+Dmeyf3QMZYAuCqpfhCledEl++glFpZz6IL1T4=) 10: P1PPxJKJvcVWj4wZUdazuOzBw4Q.roa (hash: HnwzMbfg3535mDnah1e/JlAfCR0Kk2ea4N+rWTnPdJY=) 11: PXVQtp8fbfqZ5jFNvah34s8vf1o.roa (hash: jLDp0a0yIOcsSTqlqaPMGk/PVKwXxyLWYql8ZP+aAO4=) 12: Q6ELIGGMyAWLP2-8AinpN7dCP-I.roa (hash: +d8Mriz+mLl19IhnPZ6nZe1Nzbfe1sFAT1awQgdm62g=) 13: cdoljHUC9Q9DPh0xJN6bOQNfYgI.roa (hash: asTmSigp9GpUrfz/TvjdPq/vlaO8kX04TRA2R2OR/KQ=) 14: dukzfVMcltyysZZBvIjQGrHZPLo.roa (hash: lgww+jOruUco3lHQUmYd3nD9/JIBuRROS48oFbH8RVc=) 15: ex-k0hBYMJp3Xt63sbFH4dmaPp0.roa (hash: S04+oB5rzQSuvoSFbDJ54Q32HsuNGomFta+C8/uA5R4=) 16: hansf5f-8ZlprgL3Get4FXhM3qg.roa (hash: tdLlts3wjizciN3JSF4Zj+MG2KHEHQp/kr7Y9fEY9Hk=) 17: ktcN_1CUp7LaLxP99XlfX2aR3JY.roa (hash: A4GSKwqS/3qXXX5KzVNih95wvOg7T1xafYwJVI0/Hp0=) 18: rw3wmNK1T9KyKFmnPInliFk653U.roa (hash: byyB+zxuPES8tnSL4mP/gAsHzJQoaaZNw85rrGkKtTM=) 19: s-kJqLbM0KEIQbJ-31AW4jYwkyY.roa (hash: lel2X5N/TCz7Pdk6leCd67OSoke7W8rTYmRW3JpbyRE=) 20: thGwDSmOCB2egMkJayh7HTNBOoA.roa (hash: vrdMbk1dhZJxT4RMXRheIxv51EMC51s58JC+BTY/Vpg=) 21: wAAXYuIkUKtvrw39DQ6SG8wkbtE.roa (hash: jytRpaU7guGLhPsBwh2sgZuD9rMlPbNl3UHkvQz/oCo=) 22: y51hiFPZW-gkNjlGWGRcL6QruIc.roa (hash: IeyRLiiRko+dn467AL+M0JoJJpnysqiT8H5/V2IcxR0=) Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/99/2ece62-1d8c-450c-91e8-8eeb757cf545/1/1nPYSbfVBHN21X5veW8AGLcLRQY.crl rsync://rpki.ripe.net/repository/DEFAULT/99/2ece62-1d8c-450c-91e8-8eeb757cf545/1/1nPYSbfVBHN21X5veW8AGLcLRQY.mft rsync://rpki.ripe.net/repository/DEFAULT/1nPYSbfVBHN21X5veW8AGLcLRQY.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Fri 12 Sep 2025 04:02:17 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:99:36:f0:3e:6f:ea:71:43:28:e6:de:e5:ac:8d:76:df:6b Signature Algorithm: sha256WithRSAEncryption Issuer: CN=d673d849b7d5047376d57e6f796f0018b70b4506 Validity Not Before: Sep 11 04:02:17 2025 GMT Not After : Sep 12 04:02:17 2025 GMT Subject: CN=39029a1eb727531a70ea13abcf2ec5ef1e6489f8 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:b9:42:06:cc:98:05:1f:0e:aa:65:b5:ce:3a:8b: e2:e5:c4:5d:72:79:0e:34:32:66:3b:86:d6:a5:21: 47:7e:09:eb:11:ad:d5:ec:53:db:2e:84:b0:2f:54: c0:c6:5e:50:77:51:1a:c6:27:09:f5:11:8b:c2:36: 2b:40:ae:5a:6c:d1:35:c5:f6:d4:7a:88:ea:69:ee: f4:94:da:1e:7f:a1:49:f2:05:e4:5a:a4:f1:3d:1e: 52:b6:67:ff:aa:61:f4:a0:94:c7:b4:c3:c1:b0:bd: fa:4a:db:62:76:d9:28:e0:9c:66:9e:2d:db:bb:82: a6:21:2b:58:13:59:70:1f:c0:39:e5:75:f1:41:c6: 6c:26:82:14:3d:e1:6e:2c:29:56:bc:1b:80:9a:66: 9f:0e:55:91:58:b1:0f:46:7b:67:ac:ef:02:2b:7b: 7a:93:3c:e0:48:1f:d1:33:35:c9:07:9a:42:d5:75: c8:1e:40:67:a0:a1:57:37:3d:c6:c7:cc:1d:e8:c1: 62:be:1f:35:2a:e3:69:2a:70:16:97:bb:5c:77:cf: 53:6a:d2:d1:fe:46:ee:da:1e:89:89:dc:67:35:43: 4d:90:62:fc:1d:41:28:55:73:d5:7d:85:39:30:83: 93:07:ca:1a:36:10:65:3b:42:e8:0b:21:fe:7e:60: ea:95 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 39:02:9A:1E:B7:27:53:1A:70:EA:13:AB:CF:2E:C5:EF:1E:64:89:F8 X509v3 Authority Key Identifier: keyid:D6:73:D8:49:B7:D5:04:73:76:D5:7E:6F:79:6F:00:18:B7:0B:45:06 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/1nPYSbfVBHN21X5veW8AGLcLRQY.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/99/2ece62-1d8c-450c-91e8-8eeb757cf545/1/1nPYSbfVBHN21X5veW8AGLcLRQY.mft X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/99/2ece62-1d8c-450c-91e8-8eeb757cf545/1/1nPYSbfVBHN21X5veW8AGLcLRQY.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 3a:89:28:b3:48:d4:37:88:36:ee:7d:07:45:f8:bb:c9:e0:0f: 02:8b:30:30:a4:8b:52:dc:da:f5:31:a0:cf:c0:46:24:31:b1: 8d:3a:3c:73:d4:1a:c9:23:ee:ae:91:ae:bc:3d:f3:e8:52:08: 2e:5c:a9:f4:ab:55:3f:e8:d7:d6:c7:06:00:46:6c:e6:6f:99: ff:59:59:d2:d7:09:ad:11:77:a3:d8:ed:f9:9c:32:1f:22:e2: 44:7f:1e:d9:2d:e3:9d:bb:8e:95:9d:8c:fb:51:71:f7:a6:d4: 6c:74:07:23:2f:d6:6f:3d:35:98:b6:79:5a:bf:4b:24:54:fa: 29:4b:98:c3:20:ac:36:de:ca:2b:ca:0b:a6:44:b9:7c:d5:4a: 88:29:a9:e5:9e:36:5b:84:21:f4:27:8a:41:4e:23:f4:f1:76: e2:21:d3:d6:ac:3e:d1:00:17:b6:9e:88:42:61:e0:69:a9:9d: cd:5c:be:e3:0d:3c:8a:0e:5c:04:d8:d3:5a:88:a8:33:19:37: 8a:3c:5e:d9:eb:31:d0:fc:1f:05:9d:b6:9b:df:b6:90:2b:c0: fa:08:9b:b0:a5:9a:dd:18:8b:b7:81:7c:13:5b:dd:e2:b4:31: 85:54:3d:94:7e:97:a5:15:5d:0a:d8:d1:d7:5b:ba:62:65:74: 97:c8:6d:95 -----BEGIN CERTIFICATE----- MIIFFjCCA/6gAwIBAgISAZk28D5v6nFDKObe5ayNdt9rMA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKGQ2NzNkODQ5YjdkNTA0NzM3NmQ1N2U2Zjc5NmYwMDE4Yjcw YjQ1MDYwHhcNMjUwOTExMDQwMjE3WhcNMjUwOTEyMDQwMjE3WjAzMTEwLwYDVQQD EygzOTAyOWExZWI3Mjc1MzFhNzBlYTEzYWJjZjJlYzVlZjFlNjQ4OWY4MIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAuUIGzJgFHw6qZbXOOovi5cRdcnkO NDJmO4bWpSFHfgnrEa3V7FPbLoSwL1TAxl5Qd1EaxicJ9RGLwjYrQK5abNE1xfbU eojqae70lNoef6FJ8gXkWqTxPR5Stmf/qmH0oJTHtMPBsL36Sttidtko4Jxmni3b u4KmIStYE1lwH8A55XXxQcZsJoIUPeFuLClWvBuAmmafDlWRWLEPRntnrO8CK3t6 kzzgSB/RMzXJB5pC1XXIHkBnoKFXNz3Gx8wd6MFivh81KuNpKnAWl7tcd89TatLR /kbu2h6JidxnNUNNkGL8HUEoVXPVfYU5MIOTB8oaNhBlO0LoCyH+fmDqlQIDAQAB o4ICIjCCAh4wHQYDVR0OBBYEFDkCmh63J1MacOoTq88uxe8eZIn4MB8GA1UdIwQY MBaAFNZz2Em31QRzdtV+b3lvABi3C0UGMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvMW5QWVNiZlZCSE4yMVg1dmVXOEFHTGNMUlFZLmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC85OS8yZWNlNjItMWQ4Yy00NTBjLTkxZTgt OGVlYjc1N2NmNTQ1LzEvMW5QWVNiZlZCSE4yMVg1dmVXOEFHTGNMUlFZLm1mdDCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC85OS8yZWNlNjItMWQ4Yy00NTBjLTkxZTgtOGVlYjc1N2NmNTQ1 LzEvMW5QWVNiZlZCSE4yMVg1dmVXOEFHTGNMUlFZLmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAOokos0jU N4g27n0HRfi7yeAPAoswMKSLUtza9TGgz8BGJDGxjTo8c9QaySPurpGuvD3z6FII Llyp9KtVP+jX1scGAEZs5m+Z/1lZ0tcJrRF3o9jt+ZwyHyLiRH8e2S3jnbuOlZ2M +1Fx96bUbHQHIy/Wbz01mLZ5Wr9LJFT6KUuYwyCsNt7KK8oLpkS5fNVKiCmp5Z42 W4Qh9CeKQU4j9PF24iHT1qw+0QAXtp6IQmHgaamdzVy+4w08ig5cBNjTWoioMxk3 ijxe2esx0PwfBZ22m9+2kCvA+gibsKWa3RiLt4F8E1vd4rQxhVQ9lH6XpRVdCtjR 11u6YmV0l8htlQ== -----END CERTIFICATE-----Generated at Thu Sep 11 10:08:34 2025 by rpki-client