$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/a8/9fa83d-b2a3-45e4-8499-f525816402bd/1/_4IwmmgUZ4rXLj8xpP4CcvQL2YY.mft File: _4IwmmgUZ4rXLj8xpP4CcvQL2YY.mft (raw, json) Hash identifier: LzeteO+U4p2K6+qBU4EvXW8Fz+YsEj3NAWDKxeBo9O0= Subject key identifier: 66:A2:93:A9:F8:93:54:E2:95:CC:FC:BE:73:D5:22:C2:C8:29:85:F2 Authority key identifier: FF:82:30:9A:68:14:67:8A:D7:2E:3F:31:A4:FE:02:72:F4:0B:D9:86 Certificate issuer: /CN=ff82309a6814678ad72e3f31a4fe0272f40bd986 Certificate serial: 019926D6F15D93D0CB142938F35356D6A5D1 Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/_4IwmmgUZ4rXLj8xpP4CcvQL2YY.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/a8/9fa83d-b2a3-45e4-8499-f525816402bd/1/_4IwmmgUZ4rXLj8xpP4CcvQL2YY.mft Manifest number: 16BA Signing time: Mon 08 Sep 2025 01:00:44 +0000 Manifest this update: Mon 08 Sep 2025 01:00:44 +0000 Manifest next update: Tue 09 Sep 2025 01:00:44 +0000 Files and hashes: 1: 07ZXjsdxsFuEtdgHwbOq-R5G76E.roa (hash: 1M9pQCAfVRT7MQ/Zj4tT9AVlQVRcilmGlJyGKK/xyXM=) 2: 1-qG54akf4ZK4Vn2nJAtq8qKMB-M.roa (hash: +KrvgwuNM4eT5l98LWe/CjZjFxSOKRz6fj1mSGz0IgM=) 3: 4PQhz7MOxuhGtS_nPubpyXMJOcI.roa (hash: BnJSvsApOD8luZipfIRx4R+p7IT8Z+rfRgGtpM8nPhY=) 4: 7_xHvFH9z1lTBMmCYCZyfOMLpCE.roa (hash: Dy9Ep1VuSlW1UwNypkd8T87oMpJakHz3KhMW+QvcJps=) 5: 8JVDAVLNFauwqQaVfnt2Vbf7qyM.roa (hash: v8PEoTepb8SY5IPZDmMyByiGGEsM8VZnFBHuEpMHhf8=) 6: Fxq3h1JsdzyzYDgYtP2wnoeOjLA.roa (hash: tJ0CFUjWGpQHeBJKiYedBkhtxvRYSIaLu2u0ULfF3Dw=) 7: GYDa6uF4PXtvgFCZif9U8DfyJhs.roa (hash: x9pM/mAY2BLb1r8R45XN3qmt1Gw8vPBkNTNsNDjS6Jk=) 8: ISiMd8SOBUmeZ3l9pfTrNrRMVZ4.roa (hash: jX1VL1H9HdYzBbWtVwBVZy9/vxHTwytZF8IGlvhq3Yc=) 9: JXUpuOiDJbpAQ6wJyegYg23uwQY.roa (hash: IcXnbwWR3QdHkuBHHjMtVeQKCG9JaMJJR88n+O+Lv4g=) 10: K3gtWKami_XUUUtVwrQwwcMOVAg.roa (hash: 01aEVs3iMb11GEQQScA48mgu1ByLdBE37Eq3V2mjiGQ=) 11: Kn5AOeIvqDj0QyY0a6gvSVOYK04.roa (hash: /7QM63bFC+CBTXnuyFwX9/7nQ/C+RhIxyYwX13EXYS0=) 12: LL7AEgR132RnJITVXb1v0I3LCyw.roa (hash: gwRFxp3BgZCfzCqdNDK/XuHwvvhdYQt+5LD2lZsPRaU=) 13: NaXmOsDpDUrJU-L3cR4MsoyMUQA.roa (hash: dVVNZQbSo8+6scs7Gd+Q59/WTz4n0kcfFCZ13Y+qz7s=) 14: UryH-7kbyXWUJTfxmD8_iKhQToA.roa (hash: 9X1VOT+y467gWK0X8aw0s4QPOjoJGbo5qGz+HUSG1OM=) 15: V4iFmGmpuX9vmwKfCIL4MHq3iJo.roa (hash: I7wr4UYfNx1god3F0V72adpmlcw8clHUqo883JUOo54=) 16: XR-_EEDwF8zWqFnUJesI7P4suXw.roa (hash: 5Fp6z6r3AdWNjIT316J/wStOBp8ELRHvRNd1XNc9tso=) 17: ZtIB391wA96ODwULxOuaUb3zKjw.roa (hash: iYFjXUPN6915L3avwAU1BHDz24hStz0uZXCywgYk214=) 18: _4IwmmgUZ4rXLj8xpP4CcvQL2YY.crl (hash: kjka8t+zmuUwVB6kXLt3Y+DPLkTgt+HAHNbwsaGgl1g=) 19: bke-YJ-tbDLGpp3kvZGH2TLdlOI.roa (hash: NXBX9RHNDwlq1k9iub5dxUrFv5q8FjUTbkNsfuh2Uzo=) 20: bloAk3yeA7RnUogV_JT9EWIP-hM.roa (hash: 2fE3VucaSZiB1/IjzEIuOiCkE2iec+1KGKY3worRZJI=) 21: bzmfxm3S5hbe6Gaa6wvgeLEiaNA.roa (hash: Ar56s14Axf0ioHIstHBEGHX85IVOcRUFRcIehjO4vNI=) 22: fBlvBTMJM3ddqp2rUiQB8ldjkd0.roa (hash: ETihZGojVJlaCJwQ0UQbamp7h1DxH8Yq4UnyjKrHjTY=) 23: iUM8bJHwQ48CpEg1dQgbuZoF2F8.roa (hash: FAU/hqJaw9dZlVsB9TPc90NTrKoL6yNGJeYIXg92yTQ=) 24: pN1QTddIk2qdFe_mOVuHdGmP3Z4.roa (hash: CywtU84R198uQ8xF6BjJqnsNgApLacLlntN4HmgGHZM=) 25: rE9cybiH6oB4mGa5EHSN9cceqWE.roa (hash: YG48gdDn/SUyc3i/+XHJ5HagqvRplqEN/up/vYOmvBI=) 26: uYzA14o4SLgVDIUH1V-hG4krcmM.roa (hash: AAmmFasdZzQbOIJJuAxM6M66jvg5N0KdzbSbTAsq2+w=) 27: ug_XierUONvwggKOMaZkJe81loY.roa (hash: XoFHm2sqFbn3YwKVKBV5bvDEJtDLvYE5/kOQORtiPDE=) 28: waIdBiyQcZY5S3UHlSgYjhWy3yA.roa (hash: B01bIchSEkzdF5UX/NW8F0eHIFCkAlYI9AyRAZwvgUg=) 29: yphDYCojIc0PisUPqGFzcSpaHr4.roa (hash: kueA64oPFnuqfOUJ8KFf+GceWa+kI7exnedP73+jI8A=) Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/a8/9fa83d-b2a3-45e4-8499-f525816402bd/1/_4IwmmgUZ4rXLj8xpP4CcvQL2YY.crl rsync://rpki.ripe.net/repository/DEFAULT/a8/9fa83d-b2a3-45e4-8499-f525816402bd/1/_4IwmmgUZ4rXLj8xpP4CcvQL2YY.mft rsync://rpki.ripe.net/repository/DEFAULT/_4IwmmgUZ4rXLj8xpP4CcvQL2YY.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Tue 09 Sep 2025 01:00:23 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:99:26:d6:f1:5d:93:d0:cb:14:29:38:f3:53:56:d6:a5:d1 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=ff82309a6814678ad72e3f31a4fe0272f40bd986 Validity Not Before: Sep 8 01:00:44 2025 GMT Not After : Sep 9 01:00:44 2025 GMT Subject: CN=66a293a9f89354e295ccfcbe73d522c2c82985f2 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:c9:15:56:f0:6b:67:d6:7d:8c:22:8e:8a:db:c6: 29:21:29:c2:d0:91:1c:90:e6:e2:fd:26:a7:d3:9d: 7e:23:30:69:ed:fc:4c:83:f4:18:60:a9:e8:49:67: 8b:5a:17:32:53:e2:c1:2e:d4:66:b1:80:a5:19:54: fc:93:b4:eb:43:b9:29:20:09:ee:4e:59:20:ea:d0: 9e:38:fa:e2:b7:49:fb:3e:da:31:9c:97:2b:9d:6e: d0:4c:18:db:f1:f9:bb:90:e6:7e:5e:1e:e4:1c:1d: 96:80:4a:8e:98:88:49:9f:33:9f:c0:51:25:cb:f1: 62:f0:13:3f:c7:a9:8d:4b:c2:9c:aa:17:c8:d4:59: 9c:75:79:7f:b6:b8:48:9e:33:54:43:87:dc:a2:e8: 26:fc:f5:60:81:e5:cc:3c:a0:cc:45:73:a5:a8:7a: cd:48:f7:fe:86:66:06:4b:fd:61:6f:20:e9:c5:81: 74:be:0a:b1:d6:b9:5b:23:e3:76:83:e6:c3:b5:b7: 32:5f:0f:d1:26:5a:0d:ce:d5:cc:6a:16:d7:ea:f9: 9e:5f:1f:b9:88:fc:96:83:42:09:bf:ba:13:85:02: f6:d7:2d:82:48:5c:3e:74:a4:b8:c3:67:25:54:19: a3:9e:52:ab:86:2c:fb:9e:28:a3:33:d3:5b:0f:be: 7c:6d Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 66:A2:93:A9:F8:93:54:E2:95:CC:FC:BE:73:D5:22:C2:C8:29:85:F2 X509v3 Authority Key Identifier: keyid:FF:82:30:9A:68:14:67:8A:D7:2E:3F:31:A4:FE:02:72:F4:0B:D9:86 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/_4IwmmgUZ4rXLj8xpP4CcvQL2YY.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/a8/9fa83d-b2a3-45e4-8499-f525816402bd/1/_4IwmmgUZ4rXLj8xpP4CcvQL2YY.mft X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/a8/9fa83d-b2a3-45e4-8499-f525816402bd/1/_4IwmmgUZ4rXLj8xpP4CcvQL2YY.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 8f:11:c2:e3:45:ee:43:b8:1f:df:4b:f8:cc:88:35:af:98:d6: 44:a6:02:78:5b:e4:c8:72:61:56:59:a8:52:8c:65:45:3b:e2: 14:89:63:de:b1:1c:39:c7:dc:5f:57:f3:03:6b:d7:e6:5f:67: 57:bc:a2:4e:91:45:04:80:09:54:82:09:b6:e7:cc:2a:46:f6: b5:ab:39:2a:75:33:98:6b:6b:cc:8f:1e:20:82:56:13:fa:31: d6:27:62:1a:f7:cc:92:7b:df:cf:65:16:73:73:dd:3d:38:d8: 56:ed:b0:cd:7e:7e:d6:db:1d:9b:fb:0f:1d:24:c8:56:e2:26: c3:e6:cf:46:4a:0e:65:de:45:e7:f2:7f:ac:49:0f:ba:87:a8: 2a:b2:98:90:a9:66:4b:93:a3:b1:b9:bb:fc:f4:1c:fb:76:1f: 73:38:a6:64:0b:1a:79:67:e6:82:b5:81:b6:e0:fa:c2:3b:76: 95:a2:01:90:b0:b6:a3:8f:25:7f:56:3f:ab:12:e3:d4:bb:9f: 76:8d:fa:29:69:67:b9:8e:72:bd:53:1b:32:50:43:eb:af:09: 0a:50:fc:96:bd:a9:20:28:04:1b:6b:0d:2e:2e:ee:65:ab:3e: 1c:bd:68:bc:37:ad:ed:a2:46:ab:4d:03:04:c7:e1:24:e9:f3: 4e:8c:27:0b -----BEGIN CERTIFICATE----- MIIFFjCCA/6gAwIBAgISAZkm1vFdk9DLFCk481NW1qXRMA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKGZmODIzMDlhNjgxNDY3OGFkNzJlM2YzMWE0ZmUwMjcyZjQw YmQ5ODYwHhcNMjUwOTA4MDEwMDQ0WhcNMjUwOTA5MDEwMDQ0WjAzMTEwLwYDVQQD Eyg2NmEyOTNhOWY4OTM1NGUyOTVjY2ZjYmU3M2Q1MjJjMmM4Mjk4NWYyMIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAyRVW8Gtn1n2MIo6K28YpISnC0JEc kObi/San051+IzBp7fxMg/QYYKnoSWeLWhcyU+LBLtRmsYClGVT8k7TrQ7kpIAnu Tlkg6tCeOPrit0n7PtoxnJcrnW7QTBjb8fm7kOZ+Xh7kHB2WgEqOmIhJnzOfwFEl y/Fi8BM/x6mNS8KcqhfI1FmcdXl/trhInjNUQ4fcougm/PVggeXMPKDMRXOlqHrN SPf+hmYGS/1hbyDpxYF0vgqx1rlbI+N2g+bDtbcyXw/RJloNztXMahbX6vmeXx+5 iPyWg0IJv7oThQL21y2CSFw+dKS4w2clVBmjnlKrhiz7niijM9NbD758bQIDAQAB o4ICIjCCAh4wHQYDVR0OBBYEFGaik6n4k1Tilcz8vnPVIsLIKYXyMB8GA1UdIwQY MBaAFP+CMJpoFGeK1y4/MaT+AnL0C9mGMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvXzRJd21tZ1VaNHJYTGo4eHBQNENjdlFMMllZLmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC9hOC85ZmE4M2QtYjJhMy00NWU0LTg0OTkt ZjUyNTgxNjQwMmJkLzEvXzRJd21tZ1VaNHJYTGo4eHBQNENjdlFMMllZLm1mdDCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC9hOC85ZmE4M2QtYjJhMy00NWU0LTg0OTktZjUyNTgxNjQwMmJk LzEvXzRJd21tZ1VaNHJYTGo4eHBQNENjdlFMMllZLmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAjxHC40Xu Q7gf30v4zIg1r5jWRKYCeFvkyHJhVlmoUoxlRTviFIlj3rEcOcfcX1fzA2vX5l9n V7yiTpFFBIAJVIIJtufMKkb2tas5KnUzmGtrzI8eIIJWE/ox1idiGvfMknvfz2UW c3PdPTjYVu2wzX5+1tsdm/sPHSTIVuImw+bPRkoOZd5F5/J/rEkPuoeoKrKYkKlm S5Ojsbm7/PQc+3YfczimZAsaeWfmgrWBtuD6wjt2laIBkLC2o48lf1Y/qxLj1Luf do36KWlnuY5yvVMbMlBD668JClD8lr2pICgEG2sNLi7uZas+HL1ovDet7aJGq00D BMfhJOnzTownCw== -----END CERTIFICATE-----Generated at Mon Sep 8 08:44:27 2025 by rpki-client