$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/9e/aba502-d191-4fd7-a7cf-504f2766760f/1/snJh1xU0i_1zzp27ckiGVpk7ovE.mft File: snJh1xU0i_1zzp27ckiGVpk7ovE.mft (raw, json) Hash identifier: HVIod+IsgAGHP3DpqlsfTqCxt3l/IWFU5bPcMuHgdps= Subject key identifier: FB:66:D4:54:79:E4:70:D2:97:95:69:0B:65:03:4C:97:40:17:71:CC Authority key identifier: B2:72:61:D7:15:34:8B:FD:73:CE:9D:BB:72:48:86:56:99:3B:A2:F1 Certificate issuer: /CN=b27261d715348bfd73ce9dbb72488656993ba2f1 Certificate serial: 019935375B969D4C2E35D8B9DDF1821C2CF2 Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/snJh1xU0i_1zzp27ckiGVpk7ovE.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/9e/aba502-d191-4fd7-a7cf-504f2766760f/1/snJh1xU0i_1zzp27ckiGVpk7ovE.mft Manifest number: 11A8 Signing time: Wed 10 Sep 2025 20:00:44 +0000 Manifest this update: Wed 10 Sep 2025 20:00:44 +0000 Manifest next update: Thu 11 Sep 2025 20:00:44 +0000 Files and hashes: 1: 54iLRsUEYQSLlV8kHVTer9P4keA.roa (hash: Oib7LJlXh4bUMGiTPxF+59IQOdwF+fvCUOmQ1Sv5YqM=) 2: 83ZfI9Fyoy0-0Ed7XViCJUVWAUk.roa (hash: x5Erfp0LUGN9evcbs1ECyXblatyvnAhrnm8OrbCDB8k=) 3: DtWqKYrRCyGx6dsd9f2L7CKfIRc.roa (hash: O7NemdIlDZpd4quz6YecLMnjW1CyD/u06cKhcBOTRro=) 4: GrZCo-Pl-pKds5zmwg7ubalVFTA.roa (hash: XSM4rBpjvcsUyAb/r/u55Oo3ZCJqxZNIGwjYsJQ68bw=) 5: M80ufUXhkNHfa9K4zU6X6k_ofZQ.roa (hash: 4dQl+qST57nUFs67WwcEmlUV01oY2iEO29630JMqbwE=) 6: OcXOGlX2Gc26JEdm5iWVWnBYg58.roa (hash: /vGDKbgE4iZUS4BzIvVP16inipE2apdXrS0M45rcngw=) 7: QpucqboD9L8Uv9-I8wC2eqyytjM.roa (hash: QJ36JcAEae+tPmwoLHxsrKQ/qHkNlapv2iTQudy3nXg=) 8: VLrSYlONO7JZUvaeI6OzgjRksA0.roa (hash: LTkUIoLhvOTPKcASxWAtrGL8orynFjazuB3yg7c0ZYo=) 9: W95VCieFrYA-UWvQbNSL7N3Y2Cg.roa (hash: YvWvtJ9d+roXNfi60DzUNUYY7G9jfkQp1ZTCPAwbx+g=) 10: Yw4yz2qvg4rQujrK-dIx_KPixQM.roa (hash: rPOdhOXTd0LJkvjvgXHjpfcSX15w4WKfBaBl0s4PykM=) 11: mMdAkncXd62KSLEMH5-GZ2xifmI.roa (hash: BsiKxHj0OcEVg20ZYqrvGiqQgj+ynivI6054d313+QE=) 12: snJh1xU0i_1zzp27ckiGVpk7ovE.crl (hash: LPtc7EpeJqJ3R7uJd79Ttiw/dbNaAU1s13JoYhOxEB0=) 13: tXmj_lk4J_cxjq5mg9Y-DnR4g68.roa (hash: FkJnyg1Nbp4kUP6A2c71ys6CgKIoTjWwYiDec6OD1BY=) 14: x93oIxwN7f9CnY5MK-gEMFA9RCs.roa (hash: iUrM+UkqfotbOBAOD6sNrVDAFzEQJnu2I0F39zCKGjM=) 15: x_9TAtatN7OaJxTBmrfHpUlXZDA.roa (hash: 2gG4s/omQ5P0Lbi33p1Th/x4L/bao6YkNKtuc6UmamA=) Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/9e/aba502-d191-4fd7-a7cf-504f2766760f/1/snJh1xU0i_1zzp27ckiGVpk7ovE.crl rsync://rpki.ripe.net/repository/DEFAULT/9e/aba502-d191-4fd7-a7cf-504f2766760f/1/snJh1xU0i_1zzp27ckiGVpk7ovE.mft rsync://rpki.ripe.net/repository/DEFAULT/snJh1xU0i_1zzp27ckiGVpk7ovE.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Thu 11 Sep 2025 20:00:15 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:99:35:37:5b:96:9d:4c:2e:35:d8:b9:dd:f1:82:1c:2c:f2 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=b27261d715348bfd73ce9dbb72488656993ba2f1 Validity Not Before: Sep 10 20:00:44 2025 GMT Not After : Sep 11 20:00:44 2025 GMT Subject: CN=fb66d45479e470d29795690b65034c97401771cc Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:b3:fe:61:87:f3:76:c6:d9:f2:29:e6:b6:91:2b: b0:c4:f9:77:cb:56:97:09:6a:a7:06:6f:5b:86:b9: 94:f9:1d:fd:b9:a8:6f:db:f0:ae:cf:d5:02:d1:33: 8e:d8:57:88:f6:85:9c:8b:09:8d:cd:59:3a:62:3b: 19:ac:8c:d4:d0:6e:ec:62:c3:2d:57:60:1b:07:45: 5b:fc:e3:4e:2c:ae:a9:95:57:8b:fb:19:38:80:82: 15:1b:9b:21:30:14:0a:80:c1:0c:cf:53:b3:2a:cf: 16:04:c1:75:d6:b7:6e:9a:7e:6a:59:36:dc:12:f1: e9:1e:f3:81:66:40:46:38:46:a3:1d:d7:03:af:36: 66:f6:66:2e:ad:19:66:94:b5:d7:fc:92:0d:1c:80: de:a6:40:a2:c2:de:2b:3f:55:8a:ce:8a:92:f4:41: 02:ce:b0:c3:5c:47:97:54:2f:d0:30:37:6a:49:a7: 4d:7e:c8:04:84:8c:e3:06:79:07:9f:d9:c5:3b:a0: 66:60:b7:6a:d8:c0:75:89:18:bd:74:11:5e:f8:ee: 9f:d7:a4:d6:5c:4b:80:ae:7c:56:c7:47:f3:59:d6: 16:1d:37:cf:0f:47:1e:0e:a0:3a:19:f5:be:18:42: d6:36:c7:26:89:29:8b:4f:30:8b:18:29:6d:e6:60: be:17 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: FB:66:D4:54:79:E4:70:D2:97:95:69:0B:65:03:4C:97:40:17:71:CC X509v3 Authority Key Identifier: keyid:B2:72:61:D7:15:34:8B:FD:73:CE:9D:BB:72:48:86:56:99:3B:A2:F1 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/snJh1xU0i_1zzp27ckiGVpk7ovE.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/9e/aba502-d191-4fd7-a7cf-504f2766760f/1/snJh1xU0i_1zzp27ckiGVpk7ovE.mft X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/9e/aba502-d191-4fd7-a7cf-504f2766760f/1/snJh1xU0i_1zzp27ckiGVpk7ovE.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 61:87:57:16:68:ee:40:bc:3a:04:c5:ba:7c:23:86:b3:36:98: 68:94:3b:22:69:f0:72:7c:80:4c:68:7b:54:7f:7a:8c:c3:8b: 7f:08:0d:c8:28:93:c6:25:0b:99:79:ee:8a:5b:e7:2a:a5:36: 81:b9:78:13:60:4a:03:7d:5a:ec:e5:47:c1:a7:6c:33:42:4b: d9:bf:12:6c:61:f6:59:07:1c:e7:eb:6a:6a:09:40:f3:cb:26: e8:1d:e7:39:01:d8:c2:66:92:b3:2b:0a:f0:82:90:46:2b:13: 80:ff:f4:0f:5d:3c:ea:25:6d:7a:b9:d6:08:3b:1a:3f:2b:3c: c1:7a:21:ea:86:ef:c5:e6:45:36:2a:2b:53:1f:3e:e9:70:0f: 13:b8:1c:fd:c3:c6:82:30:c9:ad:eb:e8:5e:3d:13:0d:1a:4d: 9c:c0:66:bc:00:f0:24:3e:8f:36:6c:c8:63:2d:9a:6c:a0:02: 88:d4:2f:d7:d1:14:3f:41:28:73:aa:ef:42:9f:a7:14:f9:a5: 35:25:32:14:76:e0:d3:9e:63:e2:6a:dc:55:e9:03:19:e8:15: 00:c7:c3:e1:41:00:e8:19:da:f3:77:ba:d0:f5:2a:03:44:85: fe:a1:14:34:9e:e4:14:8e:31:6c:f1:d6:97:5d:68:90:af:43: 71:f2:dd:67 -----BEGIN CERTIFICATE----- MIIFFjCCA/6gAwIBAgISAZk1N1uWnUwuNdi53fGCHCzyMA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKGIyNzI2MWQ3MTUzNDhiZmQ3M2NlOWRiYjcyNDg4NjU2OTkz YmEyZjEwHhcNMjUwOTEwMjAwMDQ0WhcNMjUwOTExMjAwMDQ0WjAzMTEwLwYDVQQD EyhmYjY2ZDQ1NDc5ZTQ3MGQyOTc5NTY5MGI2NTAzNGM5NzQwMTc3MWNjMIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAs/5hh/N2xtnyKea2kSuwxPl3y1aX CWqnBm9bhrmU+R39uahv2/Cuz9UC0TOO2FeI9oWciwmNzVk6YjsZrIzU0G7sYsMt V2AbB0Vb/ONOLK6plVeL+xk4gIIVG5shMBQKgMEMz1OzKs8WBMF11rdumn5qWTbc EvHpHvOBZkBGOEajHdcDrzZm9mYurRlmlLXX/JINHIDepkCiwt4rP1WKzoqS9EEC zrDDXEeXVC/QMDdqSadNfsgEhIzjBnkHn9nFO6BmYLdq2MB1iRi9dBFe+O6f16TW XEuArnxWx0fzWdYWHTfPD0ceDqA6GfW+GELWNscmiSmLTzCLGClt5mC+FwIDAQAB o4ICIjCCAh4wHQYDVR0OBBYEFPtm1FR55HDSl5VpC2UDTJdAF3HMMB8GA1UdIwQY MBaAFLJyYdcVNIv9c86du3JIhlaZO6LxMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvc25KaDF4VTBpXzF6enAyN2NraUdWcGs3b3ZFLmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC85ZS9hYmE1MDItZDE5MS00ZmQ3LWE3Y2Yt NTA0ZjI3NjY3NjBmLzEvc25KaDF4VTBpXzF6enAyN2NraUdWcGs3b3ZFLm1mdDCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC85ZS9hYmE1MDItZDE5MS00ZmQ3LWE3Y2YtNTA0ZjI3NjY3NjBm LzEvc25KaDF4VTBpXzF6enAyN2NraUdWcGs3b3ZFLmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAYYdXFmju QLw6BMW6fCOGszaYaJQ7ImnwcnyATGh7VH96jMOLfwgNyCiTxiULmXnuilvnKqU2 gbl4E2BKA31a7OVHwadsM0JL2b8SbGH2WQcc5+tqaglA88sm6B3nOQHYwmaSsysK 8IKQRisTgP/0D1086iVternWCDsaPys8wXoh6obvxeZFNiorUx8+6XAPE7gc/cPG gjDJrevoXj0TDRpNnMBmvADwJD6PNmzIYy2abKACiNQv19EUP0Eoc6rvQp+nFPml NSUyFHbg055j4mrcVekDGegVAMfD4UEA6Bna83e60PUqA0SF/qEUNJ7kFI4xbPHW l11okK9DcfLdZw== -----END CERTIFICATE-----Generated at Thu Sep 11 00:39:08 2025 by rpki-client