$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/a7/9151c0-3326-4801-9363-c7d19930d66d/1/tOgroXFdaurlsBAnJf_gyDRzXX0.mft File: tOgroXFdaurlsBAnJf_gyDRzXX0.mft (raw, json) Hash identifier: dtHqlGZudP0+bpqjyZ4375TnvUPSOhB8bWo3Ryk4pxY= Subject key identifier: 06:80:2E:15:F1:04:32:6D:56:33:AF:B5:1A:8F:DF:47:4E:20:D8:26 Authority key identifier: B4:E8:2B:A1:71:5D:6A:EA:E5:B0:10:27:25:FF:E0:C8:34:73:5D:7D Certificate issuer: /CN=b4e82ba1715d6aeae5b0102725ffe0c834735d7d Certificate serial: 01992DEC4A980C462E974EB1EF64FEEAA018 Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/tOgroXFdaurlsBAnJf_gyDRzXX0.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/a7/9151c0-3326-4801-9363-c7d19930d66d/1/tOgroXFdaurlsBAnJf_gyDRzXX0.mft Manifest number: 0E6C Signing time: Tue 09 Sep 2025 10:01:24 +0000 Manifest this update: Tue 09 Sep 2025 10:01:24 +0000 Manifest next update: Wed 10 Sep 2025 10:01:24 +0000 Files and hashes: 1: 69jsCPkwXK1lmTxeQTyCID9PpjA.roa (hash: h/Q47E5oO3l5JxeekNZr7l4rqZH5SyA0969VUEHNB8w=) 2: 9MVV1yAh59mTgEP_W258bMa49_o.roa (hash: iCN3glju44EdxjBrGRw+NZhFmqg56yUA7pS6/PNweyY=) 3: AjV2rlIwTElr058YXLjGHHrdXf0.roa (hash: LTFD7RWDdMyUwIhuINghYkedTIuVGScYQK467Diulf0=) 4: Dgr2wvOQnRz5hgawqSG0QB7Wpf8.roa (hash: qz1bNfdEE/9TcJfQDqdc+8FtR45UoCnUkyfUGSABkmQ=) 5: Nc7iCAoE-03LSc1GXjFAkPSA-x0.roa (hash: VtOFvrmMP9apoQYdMZ3KyjB/zTDsL+t3o+S71XhQxpY=) 6: ObtlGayrPGhbC0NJB3cANhdfN9g.roa (hash: IXODRFBoDBQAcQ/y7+mqgK85yVkykmHrcIsLk/+rl+k=) 7: RzTS_aVg4A3thhT1xHxtMXq_vOI.roa (hash: zu1mzofX6iUkewhCXeSVvIWnMGeLEK4TikiEna45T0w=) 8: VifVBKjqmDhUgid5BLElJTuQJo4.roa (hash: WI5+mxqhucetVt6cCUvKQ5QuoJnG/kLcpHeXlC1Yb5Y=) 9: hG1KSyXr5tG55jI9wBm-tSwn7ZM.roa (hash: ojUG1DHCfBEX5RoSvSto85jWrWuEE+T8wqBz5z+O87U=) 10: lKCL8VeF7spgo1KPqTl3MnMrJFU.roa (hash: G5kvKqbW+q0BKre+iGyFYRJgxgTgTCaLSiQqwrZLbuM=) 11: tOgroXFdaurlsBAnJf_gyDRzXX0.crl (hash: YdpYEj+kg+QccMrIf+aaMPK0iueuNKlRyeEgCYXZo0o=) Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/a7/9151c0-3326-4801-9363-c7d19930d66d/1/tOgroXFdaurlsBAnJf_gyDRzXX0.crl rsync://rpki.ripe.net/repository/DEFAULT/a7/9151c0-3326-4801-9363-c7d19930d66d/1/tOgroXFdaurlsBAnJf_gyDRzXX0.mft rsync://rpki.ripe.net/repository/DEFAULT/tOgroXFdaurlsBAnJf_gyDRzXX0.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Wed 10 Sep 2025 08:00:23 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:99:2d:ec:4a:98:0c:46:2e:97:4e:b1:ef:64:fe:ea:a0:18 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=b4e82ba1715d6aeae5b0102725ffe0c834735d7d Validity Not Before: Sep 9 10:01:24 2025 GMT Not After : Sep 10 10:01:24 2025 GMT Subject: CN=06802e15f104326d5633afb51a8fdf474e20d826 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:c5:03:6f:1e:b0:4d:04:0f:6d:88:46:bd:e2:99: 44:5f:dc:3f:7c:40:49:4c:6e:b6:bb:fa:76:e4:83: c1:f4:5e:4c:41:a4:5c:af:14:02:00:13:ea:5a:5f: 51:53:fd:38:15:1e:c3:01:75:3a:c9:2d:70:55:bb: 68:a4:c8:46:56:ab:47:81:be:ed:0c:01:50:26:c3: ef:72:8e:99:27:0e:9f:aa:3b:bd:bf:5e:36:6e:61: 5f:4f:ab:cf:6b:bc:ad:07:0c:83:fa:5e:80:c3:10: 93:72:1e:e6:20:c2:a0:2f:3c:e8:13:4d:c4:04:ee: 01:3a:ff:5a:bd:95:fe:13:11:f8:25:c5:2b:b9:21: 64:4a:80:39:e6:9e:70:40:63:78:28:c9:e3:ce:99: e3:06:45:d0:4f:97:58:4a:25:68:b2:59:87:bc:13: 23:7e:29:13:5f:53:28:71:5d:1a:7e:b0:40:12:1d: 36:c5:a0:4f:20:f0:05:d5:69:7b:72:26:25:23:7e: aa:9a:53:5a:21:15:58:ce:2e:6b:24:8e:c2:7b:23: f5:7e:a6:3b:7a:cc:e3:9b:87:2e:0e:c8:ed:74:62: d4:a9:fe:39:99:09:42:86:21:1d:f1:f0:52:c3:db: b5:84:7d:70:23:33:5b:87:db:e3:a9:ba:a6:0f:ab: 86:f1 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 06:80:2E:15:F1:04:32:6D:56:33:AF:B5:1A:8F:DF:47:4E:20:D8:26 X509v3 Authority Key Identifier: keyid:B4:E8:2B:A1:71:5D:6A:EA:E5:B0:10:27:25:FF:E0:C8:34:73:5D:7D X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/tOgroXFdaurlsBAnJf_gyDRzXX0.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/a7/9151c0-3326-4801-9363-c7d19930d66d/1/tOgroXFdaurlsBAnJf_gyDRzXX0.mft X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/a7/9151c0-3326-4801-9363-c7d19930d66d/1/tOgroXFdaurlsBAnJf_gyDRzXX0.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 19:d6:b4:71:d3:3f:d1:91:1b:60:f1:1f:85:93:dd:e7:2a:06: e4:bf:65:d4:2b:e0:f3:b3:da:27:fc:48:5b:73:2f:d6:18:a7: 5c:2c:f7:90:9f:ef:2d:1f:36:07:12:0a:3d:80:ca:bb:42:e7: f2:7d:90:e9:50:93:9d:8c:57:8d:1e:d7:49:85:f3:60:c9:36: 2b:55:28:39:7f:d9:6d:b6:f9:9a:ff:dc:0d:73:99:4a:87:f2: 59:44:02:56:e2:17:d8:49:02:d2:06:00:76:5c:ed:c3:d3:3b: 15:cc:d6:4d:9b:2d:a9:22:5c:a0:4d:03:1d:96:4b:7d:97:9e: f8:aa:28:92:ab:76:84:47:a8:7b:a4:83:28:ec:4f:1c:91:c3: db:46:10:0d:c8:7c:93:b1:56:28:7b:7c:ea:8c:07:43:fa:62: 97:40:25:be:5d:66:cb:00:df:ca:5d:47:59:9c:e0:f2:24:f9: 18:83:c1:f5:6e:aa:58:86:dd:c1:a2:33:10:75:1d:b2:f5:53: ff:9c:3a:ee:32:04:bb:7e:03:5e:9f:ac:e3:79:9a:95:c0:69: b2:c6:45:0d:fd:43:bf:45:56:b9:f7:cf:cf:3e:86:40:d7:48: fe:e9:ef:6d:70:4f:71:e0:a7:2a:ff:9d:3d:f6:9a:b4:21:c9: b0:71:b8:9f -----BEGIN CERTIFICATE----- MIIFFjCCA/6gAwIBAgISAZkt7EqYDEYul06x72T+6qAYMA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKGI0ZTgyYmExNzE1ZDZhZWFlNWIwMTAyNzI1ZmZlMGM4MzQ3 MzVkN2QwHhcNMjUwOTA5MTAwMTI0WhcNMjUwOTEwMTAwMTI0WjAzMTEwLwYDVQQD EygwNjgwMmUxNWYxMDQzMjZkNTYzM2FmYjUxYThmZGY0NzRlMjBkODI2MIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAxQNvHrBNBA9tiEa94plEX9w/fEBJ TG62u/p25IPB9F5MQaRcrxQCABPqWl9RU/04FR7DAXU6yS1wVbtopMhGVqtHgb7t DAFQJsPvco6ZJw6fqju9v142bmFfT6vPa7ytBwyD+l6AwxCTch7mIMKgLzzoE03E BO4BOv9avZX+ExH4JcUruSFkSoA55p5wQGN4KMnjzpnjBkXQT5dYSiVoslmHvBMj fikTX1MocV0afrBAEh02xaBPIPAF1Wl7ciYlI36qmlNaIRVYzi5rJI7CeyP1fqY7 eszjm4cuDsjtdGLUqf45mQlChiEd8fBSw9u1hH1wIzNbh9vjqbqmD6uG8QIDAQAB o4ICIjCCAh4wHQYDVR0OBBYEFAaALhXxBDJtVjOvtRqP30dOINgmMB8GA1UdIwQY MBaAFLToK6FxXWrq5bAQJyX/4Mg0c119MA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvdE9ncm9YRmRhdXJsc0JBbkpmX2d5RFJ6WFgwLmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC9hNy85MTUxYzAtMzMyNi00ODAxLTkzNjMt YzdkMTk5MzBkNjZkLzEvdE9ncm9YRmRhdXJsc0JBbkpmX2d5RFJ6WFgwLm1mdDCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC9hNy85MTUxYzAtMzMyNi00ODAxLTkzNjMtYzdkMTk5MzBkNjZk LzEvdE9ncm9YRmRhdXJsc0JBbkpmX2d5RFJ6WFgwLmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAGda0cdM/ 0ZEbYPEfhZPd5yoG5L9l1Cvg87PaJ/xIW3Mv1hinXCz3kJ/vLR82BxIKPYDKu0Ln 8n2Q6VCTnYxXjR7XSYXzYMk2K1UoOX/Zbbb5mv/cDXOZSofyWUQCVuIX2EkC0gYA dlztw9M7FczWTZstqSJcoE0DHZZLfZee+Kookqt2hEeoe6SDKOxPHJHD20YQDch8 k7FWKHt86owHQ/pil0Alvl1mywDfyl1HWZzg8iT5GIPB9W6qWIbdwaIzEHUdsvVT /5w67jIEu34DXp+s43malcBpssZFDf1Dv0VWuffPzz6GQNdI/unvbXBPceCnKv+d PfaatCHJsHG4nw== -----END CERTIFICATE-----Generated at Tue Sep 9 13:40:39 2025 by rpki-client