$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/aa/ea4455-7836-44c4-b2a3-2ece04e185c2/1/3O9Y1M-jVUP4SIonVuaSTmR7RYk.mft File: 3O9Y1M-jVUP4SIonVuaSTmR7RYk.mft (raw, json) Hash identifier: 6I180vkBfplXHGzuP7Ifb0hkBJahpoT6Zx8xhD3L6EU= Subject key identifier: 5E:7D:59:C8:2D:DF:CD:C7:B6:F1:C2:47:A3:DD:5B:24:79:3A:08:8B Authority key identifier: DC:EF:58:D4:CF:A3:55:43:F8:48:8A:27:56:E6:92:4E:64:7B:45:89 Certificate issuer: /CN=dcef58d4cfa35543f8488a2756e6924e647b4589 Certificate serial: 0199209EBC08E6EB9E785954B302174AD723 Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/3O9Y1M-jVUP4SIonVuaSTmR7RYk.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/aa/ea4455-7836-44c4-b2a3-2ece04e185c2/1/3O9Y1M-jVUP4SIonVuaSTmR7RYk.mft Manifest number: 15E3 Signing time: Sat 06 Sep 2025 20:01:37 +0000 Manifest this update: Sat 06 Sep 2025 20:01:37 +0000 Manifest next update: Sun 07 Sep 2025 20:01:37 +0000 Files and hashes: 1: 3O9Y1M-jVUP4SIonVuaSTmR7RYk.crl (hash: FapxUWKohu35TzpZB8sjQC6AFDyD2Mlc7kapmC3XsOY=) 2: 41fVJkrPbHKQA079D4QVuoSoMHA.roa (hash: sr+TybZqUtIImaDgTqztSGD1XE6oloq4BZ2M4Xpg+u0=) 3: 4pf6JhZ2ZrbzDs3KIhxGjElBlaw.roa (hash: vXT1uBYUu9e7P+u/IiXkrVdl2Zw3UbzSeW2UWFK34Jw=) 4: 6klSWkjjUTbGuPtDfN8cALab9cs.roa (hash: sdgQjkXScGhQKnR4al8+skMwfxtoqagBTslhZkfSKNY=) 5: B3w7E9gvZEzFwMrG99Xq-T1MEBw.roa (hash: X2c/+qNKKXp5+FBng9aKxlFFZbDBWHiqkfhHgQbP6bg=) 6: C2H1BSmYMIrZggVB3V-MZ8CR5SY.roa (hash: MAmDjDLmFQyW+O4vZbG4q4tWTwrvQlayeoQlXr+Fu/8=) 7: DJ2HKm_1c1O48zC-cc12FURV1-w.roa (hash: odPYR1sTJx4nskAcxBKfAydZplTxWpbfAnjmQhPzJX8=) 8: GmlPqmYgpg61oCrtTG9RzmgTZRQ.roa (hash: lOFhsoN8S3GIIvzatAuS7mkyT16CCVPA77MjKa8aWWc=) 9: RZCNuFYkMVfet6khSeCWtqT4r3s.roa (hash: bz5sfARWaL0oWhzQTAMOexVtHrjfBeAF+vBi8eYpl/U=) 10: Sn1YHf-JTelJa8AbFEu9eCrJc-Y.roa (hash: 4RQ4/nSSdbUjaSMtOe+F2ienAydzSYTXwrbRmuUcEJY=) 11: UE3TFsD19f6wQr0gTHDaiwhGdqA.roa (hash: h9a9K3MMF0WQfDnzSvLb5P+n54cp7dIKew88pGDYldk=) 12: VicyF_0e_bvvcn0fKM8q40zu1n8.roa (hash: C5AQCG/2PEYP519Z6IOs4YDYOnLl0s41qulpvbJvJ4g=) 13: _HxOSGDLp42EFmYvwzkWMgsUDRc.roa (hash: ld3Ed4rdMoSUbT+R2+5BJt8zZUTSFFBqMJ22iFdBG+s=) 14: cHLxjuzlgoGDINIVaFsru4PZ9BE.roa (hash: o3eUI2kqgbIKISwJ6D+XZ6uUN50wRiiahX5yY1sTPn4=) 15: lknEfiAWsTgVxunxpJ4Cim6vi_Y.roa (hash: 9nT6QBaPn6YGSLcfszLUc2cPb60rXG8wS9MlLTeVBhw=) 16: mdB3D_zcc3ZMQewiv3J0UZ_sUlo.roa (hash: NsB59ITpkzoeK9pRuPozIMWrvt6Lae+60ChrUSCRg50=) 17: mjTSWLEuvIRJ-mDUVhSblHWE7N4.roa (hash: rmzWSKN3Yb/xA6p/q8UxEXQjDhun2rkoNnE76zOjZHo=) 18: pxtXnWk-oYZ7Qby89ddSCgu91ts.roa (hash: RB8UdezmP543bft1AFoJ1CEu6eopqGc7lCF9jSa1eTc=) 19: q74_W6xdG6goIDi1c08_8gJ6uTE.roa (hash: pxdR0KPAM6OXX14ayHaIWzZB+fjREFkJhs6uGstYGhI=) 20: r3Ck7fpoOKp57Mk1jJgw8XHWAxg.roa (hash: jDsvxvKf5uFW/4bW6b3NOwjRJy48sDgwtQTJJofZqGM=) 21: v99_kaWjoTKnpnOcBogb8Emjk4M.roa (hash: unshnZnS3tg5XPSrGj9Iy+gxnhESQoD/3z5Y8oIxogo=) 22: y38_fk_dl6De5uovg7WKuAzPolA.roa (hash: PsHTMj/SkJczqFC8znjT596YhybynG/bm1yXYsS6Cxs=) 23: z6d9djVL2RnXuevi6Ot8E8e62tc.roa (hash: o9Kh9fFp+5NbfQXFw6W0ABs1khVR+g751jXSLlxLU4c=) 24: zUeLco_9U8ifNR5PMJI3zpijW74.roa (hash: 3lduL1beP27BPGmbMBwONs6g5YeSTXx0lXyH1JulpN4=) Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/aa/ea4455-7836-44c4-b2a3-2ece04e185c2/1/3O9Y1M-jVUP4SIonVuaSTmR7RYk.crl rsync://rpki.ripe.net/repository/DEFAULT/aa/ea4455-7836-44c4-b2a3-2ece04e185c2/1/3O9Y1M-jVUP4SIonVuaSTmR7RYk.mft rsync://rpki.ripe.net/repository/DEFAULT/3O9Y1M-jVUP4SIonVuaSTmR7RYk.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Sun 07 Sep 2025 20:00:23 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:99:20:9e:bc:08:e6:eb:9e:78:59:54:b3:02:17:4a:d7:23 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=dcef58d4cfa35543f8488a2756e6924e647b4589 Validity Not Before: Sep 6 20:01:37 2025 GMT Not After : Sep 7 20:01:37 2025 GMT Subject: CN=5e7d59c82ddfcdc7b6f1c247a3dd5b24793a088b Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:88:72:af:9f:19:a3:b1:c1:d4:02:47:0b:06:29: 3f:81:73:02:1b:b1:ae:6c:33:98:e4:89:e1:15:85: 9e:3b:6f:89:09:d2:bb:a2:fa:99:86:31:1b:7b:f1: 9f:ef:b2:83:6d:3b:d4:9f:72:14:70:42:be:02:ca: f9:0f:f4:f5:0e:07:79:49:d0:26:dc:90:3e:6f:fa: 53:61:e2:ab:0a:e1:37:38:21:ff:8e:1b:63:83:4b: 85:d2:60:2d:c0:39:63:9c:7d:ef:45:62:3a:99:73: 85:50:a1:db:31:bb:33:37:5e:be:0f:03:11:c3:9c: c8:eb:94:fe:70:05:26:78:bb:88:ba:02:d4:12:24: 6a:d8:a2:7d:27:6c:38:3e:ad:c0:17:a2:ba:56:dd: 37:43:fa:2d:b5:85:cd:fa:17:68:fc:45:73:1c:a4: 84:26:09:ba:8a:0d:63:7f:43:9d:97:d1:f5:55:7e: 93:d6:4c:33:11:d6:66:f4:c4:a4:74:4e:41:cf:49: ba:2d:d0:0b:2e:48:63:fc:ab:6b:d0:24:bb:a8:a5: 98:56:e3:2e:9c:e8:c9:a2:2d:72:ca:ff:c0:59:73: 95:87:fe:f9:57:b9:55:3d:81:ba:f2:f1:9a:15:7f: 52:9b:f0:c0:31:16:f6:0f:ce:3b:0a:df:e9:55:36: 6b:3f Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 5E:7D:59:C8:2D:DF:CD:C7:B6:F1:C2:47:A3:DD:5B:24:79:3A:08:8B X509v3 Authority Key Identifier: keyid:DC:EF:58:D4:CF:A3:55:43:F8:48:8A:27:56:E6:92:4E:64:7B:45:89 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/3O9Y1M-jVUP4SIonVuaSTmR7RYk.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/aa/ea4455-7836-44c4-b2a3-2ece04e185c2/1/3O9Y1M-jVUP4SIonVuaSTmR7RYk.mft X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/aa/ea4455-7836-44c4-b2a3-2ece04e185c2/1/3O9Y1M-jVUP4SIonVuaSTmR7RYk.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption ab:7b:d2:a7:79:10:bb:a7:0c:06:e9:9a:77:21:8e:5c:7c:e6: a9:54:8c:d7:a0:84:4a:12:da:33:b4:74:b9:01:2e:a5:16:20: b8:f0:ab:ad:c0:90:ae:6c:8f:77:2c:e6:95:09:b5:8a:10:5a: fc:83:0e:ef:01:3e:41:40:c9:40:4c:5b:2a:3b:07:49:85:c7: 0a:c8:b2:a2:bb:b8:13:34:2f:9f:4f:8a:c3:bc:b7:e2:f4:73: dd:db:97:5b:86:4e:f6:40:11:2c:19:2c:a7:b0:be:bf:03:30: 76:d4:fc:22:d6:46:af:b5:bb:67:d9:fc:11:02:e3:a1:86:18: 5c:0f:12:26:df:b6:61:48:c5:40:37:55:5d:a0:31:82:c2:4a: 10:12:83:cd:f6:c3:73:4d:ff:f8:27:04:e0:23:81:b7:f6:e6: a1:20:43:c6:76:cb:10:f4:8e:ed:43:79:fc:49:7a:98:5e:37: bc:19:72:25:9e:40:73:41:b5:84:5d:05:67:f9:ff:cc:2e:6e: ee:ec:b2:cc:8a:e2:93:41:52:d9:d2:44:80:0c:fc:06:5e:17: ad:43:be:52:ac:37:93:dc:0d:72:4b:d3:27:b7:9d:66:fe:4a: 3c:e8:57:ec:e8:55:41:5e:6c:50:ec:4f:ff:8e:48:27:c8:10: c2:51:35:fa -----BEGIN CERTIFICATE----- MIIFFjCCA/6gAwIBAgISAZkgnrwI5uueeFlUswIXStcjMA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKGRjZWY1OGQ0Y2ZhMzU1NDNmODQ4OGEyNzU2ZTY5MjRlNjQ3 YjQ1ODkwHhcNMjUwOTA2MjAwMTM3WhcNMjUwOTA3MjAwMTM3WjAzMTEwLwYDVQQD Eyg1ZTdkNTljODJkZGZjZGM3YjZmMWMyNDdhM2RkNWIyNDc5M2EwODhiMIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAiHKvnxmjscHUAkcLBik/gXMCG7Gu bDOY5InhFYWeO2+JCdK7ovqZhjEbe/Gf77KDbTvUn3IUcEK+Asr5D/T1Dgd5SdAm 3JA+b/pTYeKrCuE3OCH/jhtjg0uF0mAtwDljnH3vRWI6mXOFUKHbMbszN16+DwMR w5zI65T+cAUmeLuIugLUEiRq2KJ9J2w4Pq3AF6K6Vt03Q/ottYXN+hdo/EVzHKSE Jgm6ig1jf0Odl9H1VX6T1kwzEdZm9MSkdE5Bz0m6LdALLkhj/Ktr0CS7qKWYVuMu nOjJoi1yyv/AWXOVh/75V7lVPYG68vGaFX9Sm/DAMRb2D847Ct/pVTZrPwIDAQAB o4ICIjCCAh4wHQYDVR0OBBYEFF59Wcgt383HtvHCR6PdWyR5OgiLMB8GA1UdIwQY MBaAFNzvWNTPo1VD+EiKJ1bmkk5ke0WJMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvM085WTFNLWpWVVA0U0lvblZ1YVNUbVI3UllrLmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC9hYS9lYTQ0NTUtNzgzNi00NGM0LWIyYTMt MmVjZTA0ZTE4NWMyLzEvM085WTFNLWpWVVA0U0lvblZ1YVNUbVI3UllrLm1mdDCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC9hYS9lYTQ0NTUtNzgzNi00NGM0LWIyYTMtMmVjZTA0ZTE4NWMy LzEvM085WTFNLWpWVVA0U0lvblZ1YVNUbVI3UllrLmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAq3vSp3kQ u6cMBumadyGOXHzmqVSM16CEShLaM7R0uQEupRYguPCrrcCQrmyPdyzmlQm1ihBa /IMO7wE+QUDJQExbKjsHSYXHCsiyoru4EzQvn0+Kw7y34vRz3duXW4ZO9kARLBks p7C+vwMwdtT8ItZGr7W7Z9n8EQLjoYYYXA8SJt+2YUjFQDdVXaAxgsJKEBKDzfbD c03/+CcE4COBt/bmoSBDxnbLEPSO7UN5/El6mF43vBlyJZ5Ac0G1hF0FZ/n/zC5u 7uyyzIrik0FS2dJEgAz8Bl4XrUO+Uqw3k9wNckvTJ7edZv5KPOhX7OhVQV5sUOxP /45IJ8gQwlE1+g== -----END CERTIFICATE-----Generated at Sun Sep 7 03:27:56 2025 by rpki-client