$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/a7/b9adf4-f910-4355-bfc8-608564839fd0/1/H2gTjU7C6lHKzvCf8QWKNwpb4ZA.mft File: H2gTjU7C6lHKzvCf8QWKNwpb4ZA.mft (raw, json) Hash identifier: NsWMYj3cfujZ4sJkmE6sidOBB1qZtwJ/Ijqmf8MyGlI= Subject key identifier: C9:F2:10:1B:44:FE:74:B8:EF:F2:96:54:AF:38:FA:68:4F:61:F3:DA Authority key identifier: 1F:68:13:8D:4E:C2:EA:51:CA:CE:F0:9F:F1:05:8A:37:0A:5B:E1:90 Certificate issuer: /CN=1f68138d4ec2ea51cacef09ff1058a370a5be190 Certificate serial: 01992F6CA29EECAB2DA8E9A043DD32358476 Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/H2gTjU7C6lHKzvCf8QWKNwpb4ZA.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/a7/b9adf4-f910-4355-bfc8-608564839fd0/1/H2gTjU7C6lHKzvCf8QWKNwpb4ZA.mft Manifest number: 16A1 Signing time: Tue 09 Sep 2025 17:01:12 +0000 Manifest this update: Tue 09 Sep 2025 17:01:12 +0000 Manifest next update: Wed 10 Sep 2025 17:01:12 +0000 Files and hashes: 1: 5oD2HNqgzG_qOcF_21G9KLy5e2Y.roa (hash: RmXZv+Vqe5cI4h6ljtkED0qwtDL54/1oOSvgcLZr5dM=) 2: 6H0jPgZ40-qSdMrUIpXtjHxd2VA.roa (hash: bKX7Wm+km5brNebStx9trC9lQWDSYN+gli61DR2OFCc=) 3: 75sT-nwUqhGJrktdH6EqWa-q1mo.roa (hash: R1QtO6OQwY7O/dWJMCnCSA9mjsQZb+aGyr2mwiCWXM0=) 4: Bk5EEDboiWzloYLSbIprmQyOumI.roa (hash: Leabib+pYR396O62ZqXXAQ9RyIVRB2I7VcCKzRGI0Zw=) 5: FRe6auZzcSOVPtZ6Q5yvjDHlzS0.roa (hash: 2NaXdTlzJjkR6eXsQNd9ul22Iz8k3jyPNXeVsKS/++A=) 6: GEXA_gDFN_UI9pmu8MV3voaPJJw.roa (hash: dqAjGTOppVUexxUhNJnZSDJjjUoQVnH9/+S3XNxYfss=) 7: H2gTjU7C6lHKzvCf8QWKNwpb4ZA.crl (hash: 7o/5z8/HFjOd+6ay6EQd1RnesOWeUqF1dBedgL4Jlb4=) 8: J0mrTDoDAe4tdcNY4ZTx8ruuu9g.roa (hash: SdkYwpw3qIRaB5VQaHi9AMXoPRVnXFJoZo9ChQzY2P8=) 9: QKd9v1TqhiMsVLAcOxJ22eYxs_g.roa (hash: HKu0bw+bkfxh/NhVSCdqzBjjysK0/agU+8z7cijegyY=) 10: WKhjscqZWdN-nuM8dfIBcstyH14.roa (hash: khUF0nyoDvCPGxtlsBxOqPz0aIco2pUZJy9sOWQaHzM=) 11: qMUUhW1iC-XMKPgcY2-u4nUNHXY.roa (hash: 8IGWcOXBDlPGcQOckJ+GtmlbDYmD6/HkpFAja/aKolM=) 12: tV8pY2AaFoThs7aSR_rVRKM4uZ8.roa (hash: 5JEjFQnGCc8ZZH1Nis0Dk3OW+MkzIr5bBwteIscBMNg=) Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/a7/b9adf4-f910-4355-bfc8-608564839fd0/1/H2gTjU7C6lHKzvCf8QWKNwpb4ZA.crl rsync://rpki.ripe.net/repository/DEFAULT/a7/b9adf4-f910-4355-bfc8-608564839fd0/1/H2gTjU7C6lHKzvCf8QWKNwpb4ZA.mft rsync://rpki.ripe.net/repository/DEFAULT/H2gTjU7C6lHKzvCf8QWKNwpb4ZA.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Wed 10 Sep 2025 17:00:22 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:99:2f:6c:a2:9e:ec:ab:2d:a8:e9:a0:43:dd:32:35:84:76 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=1f68138d4ec2ea51cacef09ff1058a370a5be190 Validity Not Before: Sep 9 17:01:12 2025 GMT Not After : Sep 10 17:01:12 2025 GMT Subject: CN=c9f2101b44fe74b8eff29654af38fa684f61f3da Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:bc:09:50:44:2d:3f:25:c0:df:af:0c:bf:d3:e4: be:28:8f:09:57:62:4f:d6:88:17:17:8e:d4:1c:a2: d2:aa:bf:8a:c3:a2:3c:a4:27:95:86:a3:42:24:e0: 11:cb:31:32:96:f2:ff:f2:19:e3:a3:34:63:51:b0: 75:07:97:7e:58:35:b9:c2:65:fe:17:09:4e:b6:b8: fa:3f:04:90:fd:e9:96:d3:b2:f7:2b:8e:ab:4a:fb: fc:d6:1a:1a:c9:78:28:8d:1b:53:37:6c:55:fc:64: 94:41:9e:2d:0b:98:22:f3:d5:4a:a0:7b:27:32:7a: bc:94:cd:69:21:a3:c0:d8:da:5d:04:4b:45:b7:72: 86:62:e1:d7:80:6a:65:37:a3:df:93:3d:2e:b8:cb: c4:ce:73:a8:ca:9a:30:6a:eb:1e:94:78:fc:33:0a: 52:f0:90:65:a2:f3:98:82:30:57:32:5d:d7:58:51: ed:0e:45:f6:8c:6a:cf:92:2e:80:69:f0:af:74:47: b0:a4:e9:d3:c9:1b:a8:f6:9f:23:90:fb:f3:22:05: ff:0c:6f:3d:94:13:80:63:4d:a5:87:4b:75:7b:27: 38:a6:31:3e:f7:d0:15:c1:20:a6:09:5e:d6:8c:66: 43:d3:3d:e5:96:ac:9c:09:05:bd:f9:de:3c:85:20: f4:77 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: C9:F2:10:1B:44:FE:74:B8:EF:F2:96:54:AF:38:FA:68:4F:61:F3:DA X509v3 Authority Key Identifier: keyid:1F:68:13:8D:4E:C2:EA:51:CA:CE:F0:9F:F1:05:8A:37:0A:5B:E1:90 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/H2gTjU7C6lHKzvCf8QWKNwpb4ZA.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/a7/b9adf4-f910-4355-bfc8-608564839fd0/1/H2gTjU7C6lHKzvCf8QWKNwpb4ZA.mft X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/a7/b9adf4-f910-4355-bfc8-608564839fd0/1/H2gTjU7C6lHKzvCf8QWKNwpb4ZA.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 1e:df:32:ff:40:f6:8c:50:88:76:82:51:a0:00:4d:10:db:df: 25:03:b9:ee:f1:c1:18:0b:b7:0a:28:fd:26:86:d1:ee:90:a2: 03:f5:a6:03:9f:6f:fb:1d:5d:3c:fd:75:b9:20:0c:a2:20:b9: 77:25:5a:e6:e9:73:9a:1e:24:af:8e:6d:e3:c1:65:e6:73:c5: e7:9f:72:38:70:d1:47:65:25:1c:59:ef:98:e1:f6:47:94:67: e3:48:f6:13:04:70:6b:98:a4:d3:45:4c:02:8c:41:0a:62:fc: 84:48:4a:e9:3f:d2:91:37:16:2e:3e:bc:f0:c7:34:e0:d0:71: 16:cb:f1:c1:1f:b8:ad:97:42:6a:47:a7:30:b6:a7:83:b0:0b: e8:ad:c5:ab:ac:db:d6:b7:86:e1:54:08:2c:ed:7b:a4:bc:60: 05:0b:48:49:35:f7:b6:3a:46:4e:22:d0:bc:28:52:57:92:da: fa:66:b9:13:76:ea:b8:35:82:eb:bf:49:e0:85:2e:ea:9d:a4: 8c:74:f6:2d:7f:bd:d9:cb:50:9d:28:fe:b8:2f:1c:d2:b0:6f: 0f:f5:16:d8:af:c6:86:3e:23:14:b0:ab:9b:2e:3e:ea:91:4b: 8f:e6:37:58:43:e5:3a:25:d6:a8:d1:67:cf:88:a7:4c:d3:14: 08:57:4f:58 -----BEGIN CERTIFICATE----- MIIFFjCCA/6gAwIBAgISAZkvbKKe7KstqOmgQ90yNYR2MA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKDFmNjgxMzhkNGVjMmVhNTFjYWNlZjA5ZmYxMDU4YTM3MGE1 YmUxOTAwHhcNMjUwOTA5MTcwMTEyWhcNMjUwOTEwMTcwMTEyWjAzMTEwLwYDVQQD EyhjOWYyMTAxYjQ0ZmU3NGI4ZWZmMjk2NTRhZjM4ZmE2ODRmNjFmM2RhMIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAvAlQRC0/JcDfrwy/0+S+KI8JV2JP 1ogXF47UHKLSqr+Kw6I8pCeVhqNCJOARyzEylvL/8hnjozRjUbB1B5d+WDW5wmX+ FwlOtrj6PwSQ/emW07L3K46rSvv81hoayXgojRtTN2xV/GSUQZ4tC5gi89VKoHsn Mnq8lM1pIaPA2NpdBEtFt3KGYuHXgGplN6Pfkz0uuMvEznOoypowauselHj8MwpS 8JBlovOYgjBXMl3XWFHtDkX2jGrPki6AafCvdEewpOnTyRuo9p8jkPvzIgX/DG89 lBOAY02lh0t1eyc4pjE+99AVwSCmCV7WjGZD0z3llqycCQW9+d48hSD0dwIDAQAB o4ICIjCCAh4wHQYDVR0OBBYEFMnyEBtE/nS47/KWVK84+mhPYfPaMB8GA1UdIwQY MBaAFB9oE41OwupRys7wn/EFijcKW+GQMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvSDJnVGpVN0M2bEhLenZDZjhRV0tOd3BiNFpBLmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC9hNy9iOWFkZjQtZjkxMC00MzU1LWJmYzgt NjA4NTY0ODM5ZmQwLzEvSDJnVGpVN0M2bEhLenZDZjhRV0tOd3BiNFpBLm1mdDCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC9hNy9iOWFkZjQtZjkxMC00MzU1LWJmYzgtNjA4NTY0ODM5ZmQw LzEvSDJnVGpVN0M2bEhLenZDZjhRV0tOd3BiNFpBLmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAHt8y/0D2 jFCIdoJRoABNENvfJQO57vHBGAu3Cij9JobR7pCiA/WmA59v+x1dPP11uSAMoiC5 dyVa5ulzmh4kr45t48Fl5nPF559yOHDRR2UlHFnvmOH2R5Rn40j2EwRwa5ik00VM AoxBCmL8hEhK6T/SkTcWLj688Mc04NBxFsvxwR+4rZdCakenMLang7AL6K3Fq6zb 1reG4VQILO17pLxgBQtISTX3tjpGTiLQvChSV5La+ma5E3bquDWC679J4IUu6p2k jHT2LX+92ctQnSj+uC8c0rBvD/UW2K/Ghj4jFLCrmy4+6pFLj+Y3WEPlOiXWqNFn z4inTNMUCFdPWA== -----END CERTIFICATE-----Generated at Wed Sep 10 03:16:37 2025 by rpki-client