$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/9e/f76e20-5859-415d-86b3-119efcbb2023/1/u4MGMPI7Bwore99Sn3OUjJfqzUA.mft File: u4MGMPI7Bwore99Sn3OUjJfqzUA.mft (raw, json) Hash identifier: jVFCFx+mfIj3lxrWL6KKkw81AHuYGC4Sj3jEgprv29w= Subject key identifier: EC:17:EF:F5:83:30:40:F9:0B:FE:BE:0B:96:15:A2:E3:9D:D9:2C:4B Authority key identifier: BB:83:06:30:F2:3B:07:0A:2B:7B:DF:52:9F:73:94:8C:97:EA:CD:40 Certificate issuer: /CN=bb830630f23b070a2b7bdf529f73948c97eacd40 Certificate serial: 01992BFD5E606F1188DE94FDEEF237812830 Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/u4MGMPI7Bwore99Sn3OUjJfqzUA.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/9e/f76e20-5859-415d-86b3-119efcbb2023/1/u4MGMPI7Bwore99Sn3OUjJfqzUA.mft Manifest number: 16ED Signing time: Tue 09 Sep 2025 01:00:48 +0000 Manifest this update: Tue 09 Sep 2025 01:00:48 +0000 Manifest next update: Wed 10 Sep 2025 01:00:48 +0000 Files and hashes: 1: 1UFvvpbQowasUvap5PgWxR7ZHQM.roa (hash: cstJIipWCq4rApZKewY4Sy3q5g3XVtYXYMHVBMpCXwg=) 2: 2zKVxa5ZKGpg1zDrETT8fTyAG8U.roa (hash: RUglVoeUy6tdJhM2FiBGFBEjFDwNfOCa0rtIGcZ1G9w=) 3: 3G7uhcLKWWOtfmFK3Aty6Ijq4PE.roa (hash: 8QA8TR1b1eaSEAsPrBsT2EeJQQNKv/ChzK9Nd3Kvl/4=) 4: MdYXP9JDqyEnQSSpfC3vQstDRu4.roa (hash: 9CrtuWJI6l7IbdwDLorSOiVfWXkvbfh9OjjPb0sDWaY=) 5: PbW71RIBvB328VTIPh1scqZr_24.roa (hash: ZhoUQFHnvxU9klhLxoI/zN467hf68pEuS9x78HwJXRs=) 6: SDOLmAhobKGDPwlOvXakvXkm9LU.roa (hash: zmS1T8bhM8/AfzZdTFVM6nmbZ8DYbKH7HiNAE7C3CHU=) 7: bu-aY814oN0zZmuedO0-L6nA1Js.roa (hash: l9qaLt4gYL7GO6wlotPMWtCoUA115L85+uv76tlCG/s=) 8: fi7u_8aaxqQqH2QeccD8KGKx3hM.roa (hash: 0Mmbiog2iLNRJeesgr68dLzWfBwYCoI0LBsDE3h2PiQ=) 9: hd8f9GXaZg6VqPO3GnT_Jn8EtPg.roa (hash: LitGGda2Jk/OSIgKSm4T+WW9T8l6YL8v5aCrz79cl4o=) 10: u4MGMPI7Bwore99Sn3OUjJfqzUA.crl (hash: 3QxpY4g2aD4rv2vkG50+PZmJoYFVdZ96TZOwZDEXpx0=) Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/9e/f76e20-5859-415d-86b3-119efcbb2023/1/u4MGMPI7Bwore99Sn3OUjJfqzUA.crl rsync://rpki.ripe.net/repository/DEFAULT/9e/f76e20-5859-415d-86b3-119efcbb2023/1/u4MGMPI7Bwore99Sn3OUjJfqzUA.mft rsync://rpki.ripe.net/repository/DEFAULT/u4MGMPI7Bwore99Sn3OUjJfqzUA.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Wed 10 Sep 2025 01:00:48 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:99:2b:fd:5e:60:6f:11:88:de:94:fd:ee:f2:37:81:28:30 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=bb830630f23b070a2b7bdf529f73948c97eacd40 Validity Not Before: Sep 9 01:00:48 2025 GMT Not After : Sep 10 01:00:48 2025 GMT Subject: CN=ec17eff5833040f90bfebe0b9615a2e39dd92c4b Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:ad:f8:05:d9:db:88:48:a1:b8:da:97:79:cf:58: 27:f4:ff:1f:3c:a3:76:2b:b9:4b:c3:26:8f:dd:92: 9e:d9:05:ee:f5:79:9c:83:7d:c5:a7:29:05:ed:53: b6:0b:93:61:39:93:75:42:f7:e2:1c:f9:bc:df:f7: 16:17:a8:04:b0:1d:68:24:bb:73:d5:79:38:33:be: 34:95:ee:35:c9:f5:0c:92:ff:62:02:ce:8e:e1:92: 9e:ea:0b:1d:29:04:74:20:08:5e:45:e4:a4:b5:08: 11:9b:42:28:c5:a3:47:ae:d5:ef:52:26:bd:ed:0c: 05:c2:66:73:05:81:f8:af:b6:af:c9:14:30:95:65: c1:97:63:cc:ac:a8:5b:e9:e7:59:d1:75:e5:5d:9a: 8a:82:86:8e:97:a4:b8:2f:00:85:ac:7d:55:50:a0: 32:d7:0f:14:5e:b2:20:98:df:b3:0a:f3:6d:24:2b: 26:75:ca:22:9b:5a:14:d5:ca:41:fc:be:cf:ee:e5: 68:b4:d5:4c:41:3b:0b:11:be:0d:86:3e:79:3f:7a: d0:14:a8:8f:f3:52:f4:2c:e9:03:81:a6:64:8a:8c: 45:da:6a:3a:d8:70:03:b2:c1:01:f2:ff:3d:2a:eb: 47:d7:b6:fa:dc:bd:c0:be:e6:b0:24:cc:95:76:c8: 97:57 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: EC:17:EF:F5:83:30:40:F9:0B:FE:BE:0B:96:15:A2:E3:9D:D9:2C:4B X509v3 Authority Key Identifier: keyid:BB:83:06:30:F2:3B:07:0A:2B:7B:DF:52:9F:73:94:8C:97:EA:CD:40 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/u4MGMPI7Bwore99Sn3OUjJfqzUA.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/9e/f76e20-5859-415d-86b3-119efcbb2023/1/u4MGMPI7Bwore99Sn3OUjJfqzUA.mft X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/9e/f76e20-5859-415d-86b3-119efcbb2023/1/u4MGMPI7Bwore99Sn3OUjJfqzUA.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 1f:d6:9d:e3:62:08:c6:fd:a2:8c:79:ab:ad:f0:7a:22:36:a8: e7:fc:c2:aa:fa:08:63:43:e4:c2:4d:b8:94:26:e3:d1:46:66: 8f:31:3d:62:e5:41:85:2c:41:7c:a8:c2:29:86:b4:54:a3:00: 75:cb:be:d0:64:f3:af:39:90:26:ac:9b:3c:83:e7:b6:56:7a: f7:e5:e5:17:38:f8:c4:0a:ab:ae:6e:06:42:0e:eb:22:48:a3: fa:d7:9e:3b:a6:82:aa:05:31:0d:6b:5a:91:64:dd:b4:77:28: d8:c8:0a:97:ea:ba:24:69:c0:06:81:f1:c9:ad:d8:a4:58:ca: b1:ff:b4:6e:71:89:b9:75:04:8c:f4:5a:e8:89:ec:05:05:dc: 03:b0:48:bb:42:08:1c:bc:a7:1f:12:de:f4:0c:c3:78:0b:d2: d5:e4:5b:dd:4b:32:53:5b:98:fb:33:1c:a5:e5:95:71:f3:3c: 9b:0d:b8:a5:17:24:a7:b4:d1:40:70:27:7b:34:a3:62:f9:8f: af:09:64:c2:15:39:57:cb:86:dd:79:db:3f:86:4e:b0:e6:d2: 79:1a:81:6c:94:6f:71:58:e9:fe:96:fb:4f:f9:23:bb:b6:5d: 5e:9c:58:2d:c1:61:b3:8a:df:b8:8c:89:8f:a2:3f:df:5b:a6: dd:00:0d:41 -----BEGIN CERTIFICATE----- MIIFFjCCA/6gAwIBAgISAZkr/V5gbxGI3pT97vI3gSgwMA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKGJiODMwNjMwZjIzYjA3MGEyYjdiZGY1MjlmNzM5NDhjOTdl YWNkNDAwHhcNMjUwOTA5MDEwMDQ4WhcNMjUwOTEwMDEwMDQ4WjAzMTEwLwYDVQQD EyhlYzE3ZWZmNTgzMzA0MGY5MGJmZWJlMGI5NjE1YTJlMzlkZDkyYzRiMIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEArfgF2duISKG42pd5z1gn9P8fPKN2 K7lLwyaP3ZKe2QXu9Xmcg33FpykF7VO2C5NhOZN1QvfiHPm83/cWF6gEsB1oJLtz 1Xk4M740le41yfUMkv9iAs6O4ZKe6gsdKQR0IAheReSktQgRm0IoxaNHrtXvUia9 7QwFwmZzBYH4r7avyRQwlWXBl2PMrKhb6edZ0XXlXZqKgoaOl6S4LwCFrH1VUKAy 1w8UXrIgmN+zCvNtJCsmdcoim1oU1cpB/L7P7uVotNVMQTsLEb4Nhj55P3rQFKiP 81L0LOkDgaZkioxF2mo62HADssEB8v89KutH17b63L3AvuawJMyVdsiXVwIDAQAB o4ICIjCCAh4wHQYDVR0OBBYEFOwX7/WDMED5C/6+C5YVouOd2SxLMB8GA1UdIwQY MBaAFLuDBjDyOwcKK3vfUp9zlIyX6s1AMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvdTRNR01QSTdCd29yZTk5U24zT1VqSmZxelVBLmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC85ZS9mNzZlMjAtNTg1OS00MTVkLTg2YjMt MTE5ZWZjYmIyMDIzLzEvdTRNR01QSTdCd29yZTk5U24zT1VqSmZxelVBLm1mdDCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC85ZS9mNzZlMjAtNTg1OS00MTVkLTg2YjMtMTE5ZWZjYmIyMDIz LzEvdTRNR01QSTdCd29yZTk5U24zT1VqSmZxelVBLmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAH9ad42II xv2ijHmrrfB6Ijao5/zCqvoIY0Pkwk24lCbj0UZmjzE9YuVBhSxBfKjCKYa0VKMA dcu+0GTzrzmQJqybPIPntlZ69+XlFzj4xAqrrm4GQg7rIkij+teeO6aCqgUxDWta kWTdtHco2MgKl+q6JGnABoHxya3YpFjKsf+0bnGJuXUEjPRa6InsBQXcA7BIu0II HLynHxLe9AzDeAvS1eRb3UsyU1uY+zMcpeWVcfM8mw24pRckp7TRQHAnezSjYvmP rwlkwhU5V8uG3XnbP4ZOsObSeRqBbJRvcVjp/pb7T/kju7ZdXpxYLcFhs4rfuIyJ j6I/31um3QANQQ== -----END CERTIFICATE-----Generated at Tue Sep 9 10:53:15 2025 by rpki-client