$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/ac/f3549f-18f7-48b0-901d-25cc9d6cfbb9/1/I0Rtp6cLznc-wrwWVarjDDwYQSw.mft File: I0Rtp6cLznc-wrwWVarjDDwYQSw.mft (raw, json) Hash identifier: kiAnrn2+cvsn2rM8p/KzZgqRbpahEgEYrxnEye8Vlbg= Subject key identifier: 2D:1C:11:99:60:16:65:4F:2D:7B:64:95:5D:15:E2:3E:FC:9D:11:7F Authority key identifier: 23:44:6D:A7:A7:0B:CE:77:3E:C2:BC:16:55:AA:E3:0C:3C:18:41:2C Certificate issuer: /CN=23446da7a70bce773ec2bc1655aae30c3c18412c Certificate serial: 01991E42299D2A5E96D54AF60F7AF14B9021 Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/I0Rtp6cLznc-wrwWVarjDDwYQSw.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/ac/f3549f-18f7-48b0-901d-25cc9d6cfbb9/1/I0Rtp6cLznc-wrwWVarjDDwYQSw.mft Manifest number: 142F Signing time: Sat 06 Sep 2025 09:01:16 +0000 Manifest this update: Sat 06 Sep 2025 09:01:16 +0000 Manifest next update: Sun 07 Sep 2025 09:01:16 +0000 Files and hashes: 1: 1-DmgZ4SOp-NyMxLpBYaEtj39Pdc.roa (hash: moNVW0pEVWJfvkZEJ959J7HVzxYxrRxeZe7wePoILkM=) 2: 1-YvBQ0BXrsF-NI7ubQxbzvPVuzg.roa (hash: eYRmazTnlT6QkpTc8BcLL4cZu0o6zfLVuHBleuRca74=) 3: FwySP1jVKL7DmmlRNwZnvOJofjw.roa (hash: F8V8HLYupPXjwfMEbx0g1ieMP6WPPz1HmoVO8jTtRCg=) 4: I0Rtp6cLznc-wrwWVarjDDwYQSw.crl (hash: oficjpq4xLGJtZ1laLAC+NETB05W8sRmRlAxHyLvN3I=) 5: Xu2K8fW-gQnYV7VE3ISwB8N68f8.roa (hash: NKQq6ePbr62hGHn3QtTkpNNxc85cdItsXJmI3/Mzf2w=) 6: bXcsNUMfdZBR3tv1r8dI-NGTxGI.roa (hash: nSyMcXVhj3Lt4TUfuUh042NUrc5IpwBc7m8EmxqlbJw=) 7: d_P2C7-8KzXEXKrYSD9DOI8LiWE.roa (hash: Yd4prnJa4gstJKWN3oZHIXfbfrVyLQkl2GQSNyCI7uQ=) 8: k5bIb9MZd-l_B-bxXKNoMlRDovA.roa (hash: bpuvw96upd8j55DJW2izTXwq0PIjcaMc/13PHw88j0I=) 9: leUb75eQIxyb-VxN49MBjH1YF7k.roa (hash: kyA2+f/9l+pKqkl9Or57N7CwCtWEqE5/Far2bCfSZ4I=) 10: pqM1u8SkS4zcFQvrBhQWpXPMYCA.roa (hash: ZvRrYdTYDz9FJEg1Ikh5qg9AfwzK1a1b92vZCCUcbys=) 11: qV9uaYW0EJ9RfJ2uJjNKqD5z7XA.roa (hash: 8zBVfYPjKnKjKryP+fVFU4l51KGHl1B5bpWFMv1A9Mk=) 12: sDrv6ds57QYfp4Z_4o5IpblURKI.roa (hash: Y8MxO27e+WV4vIqzW7fZxZuurHymmQUKVTNCec7B22g=) 13: wFX7xPpJ7yA033Ye7jyB7b5hfrY.roa (hash: cWLM1VzdX6e7FN9H2A5u+k5ZkEsPKCYG7CFbFvNUR/k=) 14: xxa6C-pa80quO5ROYbjP391EF1Y.roa (hash: kO5NzNIL7QO5wmPmlUrjQ/tzsh5UuDfcIRoRWEvLEF8=) Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/ac/f3549f-18f7-48b0-901d-25cc9d6cfbb9/1/I0Rtp6cLznc-wrwWVarjDDwYQSw.crl rsync://rpki.ripe.net/repository/DEFAULT/ac/f3549f-18f7-48b0-901d-25cc9d6cfbb9/1/I0Rtp6cLznc-wrwWVarjDDwYQSw.mft rsync://rpki.ripe.net/repository/DEFAULT/I0Rtp6cLznc-wrwWVarjDDwYQSw.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Sun 07 Sep 2025 04:00:23 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:99:1e:42:29:9d:2a:5e:96:d5:4a:f6:0f:7a:f1:4b:90:21 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=23446da7a70bce773ec2bc1655aae30c3c18412c Validity Not Before: Sep 6 09:01:16 2025 GMT Not After : Sep 7 09:01:16 2025 GMT Subject: CN=2d1c11996016654f2d7b64955d15e23efc9d117f Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:cb:ee:8b:60:9b:fc:63:cc:2d:98:87:00:9c:bd: 87:28:88:e9:4f:5f:80:50:c6:da:10:bb:6b:85:80: e8:0f:6f:60:d7:d2:5c:fd:1d:e1:45:af:5d:42:49: 4a:39:d6:7c:e7:86:f3:4c:99:e6:8f:39:39:bb:58: 0e:13:8f:56:ec:91:45:3d:1e:67:d3:92:c6:74:6f: 5f:e0:d3:7d:9f:cc:5f:a4:a4:e7:fd:66:45:12:2f: 0f:ad:eb:62:38:94:1f:ff:c1:60:27:2c:c0:04:45: ff:fc:15:19:ea:92:e2:22:cf:dd:00:85:42:ca:4d: 8c:6b:a0:4b:e8:4a:f4:34:df:fe:1f:ae:75:c2:ee: a5:7c:ba:fd:d5:f8:dc:16:e2:91:f7:80:c8:85:74: 32:df:4b:d1:e3:9b:04:9d:84:be:df:22:97:57:59: 2b:bd:0e:63:17:40:42:ad:60:54:18:d1:c2:de:5c: 43:b5:9c:bb:b3:75:15:a8:f3:d0:95:23:41:ca:95: eb:c6:72:e8:4b:24:11:4f:1d:46:79:3f:f5:d3:7d: 35:d6:2f:25:8e:2c:33:7e:8b:a9:9d:00:77:58:ea: 45:c1:0c:c4:91:c7:28:a9:d6:36:c2:77:bb:96:44: a0:61:eb:e8:b1:44:ac:a5:08:09:de:83:59:7c:a7: 60:a7 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 2D:1C:11:99:60:16:65:4F:2D:7B:64:95:5D:15:E2:3E:FC:9D:11:7F X509v3 Authority Key Identifier: keyid:23:44:6D:A7:A7:0B:CE:77:3E:C2:BC:16:55:AA:E3:0C:3C:18:41:2C X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/I0Rtp6cLznc-wrwWVarjDDwYQSw.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/ac/f3549f-18f7-48b0-901d-25cc9d6cfbb9/1/I0Rtp6cLznc-wrwWVarjDDwYQSw.mft X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/ac/f3549f-18f7-48b0-901d-25cc9d6cfbb9/1/I0Rtp6cLznc-wrwWVarjDDwYQSw.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption b6:96:06:c2:3b:d7:89:21:ef:63:dd:8e:9c:3a:54:ed:9d:e2: 4f:98:11:1f:4b:15:52:fe:c1:1f:a3:65:d5:fa:b9:31:c9:91: 68:37:3d:f1:0c:e4:e4:24:98:db:86:f0:d4:c2:e2:2c:af:49: 3f:d0:ca:c8:5b:4b:06:a6:f7:82:33:4e:02:c3:7b:2a:59:a1: 4e:bd:34:4c:82:2f:67:5c:d2:be:ba:70:20:23:f5:9c:04:6d: 7a:81:e8:1d:87:23:3d:7f:3d:d5:65:32:ec:85:c2:7b:15:34: 40:2c:37:58:cd:f1:e2:d6:dc:8f:19:3e:79:46:e4:a5:b0:eb: 9f:27:59:e7:87:32:85:c7:1e:1e:8f:1f:7e:0e:83:fd:16:8f: 55:df:a3:aa:97:0d:8a:bc:dd:ed:32:18:fd:2a:62:cb:83:b9: da:0d:9f:9f:b1:ee:5a:61:36:3c:a6:19:ca:6b:32:5c:8d:c1: e7:80:d1:5d:25:38:6c:01:00:00:51:b5:7a:7c:87:3d:b2:77: 00:20:91:fd:cc:d3:cf:e1:ee:9d:c7:36:a8:a9:33:bd:d7:e5: 3d:5f:66:bf:17:a2:34:7c:06:1e:94:3b:a9:be:d9:85:35:b6: 73:a6:f6:51:15:2c:f5:7b:8a:4c:df:9e:39:26:1c:42:84:9f: a8:1b:c0:e9 -----BEGIN CERTIFICATE----- MIIFFjCCA/6gAwIBAgISAZkeQimdKl6W1Ur2D3rxS5AhMA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKDIzNDQ2ZGE3YTcwYmNlNzczZWMyYmMxNjU1YWFlMzBjM2Mx ODQxMmMwHhcNMjUwOTA2MDkwMTE2WhcNMjUwOTA3MDkwMTE2WjAzMTEwLwYDVQQD EygyZDFjMTE5OTYwMTY2NTRmMmQ3YjY0OTU1ZDE1ZTIzZWZjOWQxMTdmMIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAy+6LYJv8Y8wtmIcAnL2HKIjpT1+A UMbaELtrhYDoD29g19Jc/R3hRa9dQklKOdZ854bzTJnmjzk5u1gOE49W7JFFPR5n 05LGdG9f4NN9n8xfpKTn/WZFEi8PretiOJQf/8FgJyzABEX//BUZ6pLiIs/dAIVC yk2Ma6BL6Er0NN/+H651wu6lfLr91fjcFuKR94DIhXQy30vR45sEnYS+3yKXV1kr vQ5jF0BCrWBUGNHC3lxDtZy7s3UVqPPQlSNBypXrxnLoSyQRTx1GeT/103011i8l jiwzfoupnQB3WOpFwQzEkccoqdY2wne7lkSgYevosUSspQgJ3oNZfKdgpwIDAQAB o4ICIjCCAh4wHQYDVR0OBBYEFC0cEZlgFmVPLXtklV0V4j78nRF/MB8GA1UdIwQY MBaAFCNEbaenC853PsK8FlWq4ww8GEEsMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvSTBSdHA2Y0x6bmMtd3J3V1ZhcmpERHdZUVN3LmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC9hYy9mMzU0OWYtMThmNy00OGIwLTkwMWQt MjVjYzlkNmNmYmI5LzEvSTBSdHA2Y0x6bmMtd3J3V1ZhcmpERHdZUVN3Lm1mdDCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC9hYy9mMzU0OWYtMThmNy00OGIwLTkwMWQtMjVjYzlkNmNmYmI5 LzEvSTBSdHA2Y0x6bmMtd3J3V1ZhcmpERHdZUVN3LmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAtpYGwjvX iSHvY92OnDpU7Z3iT5gRH0sVUv7BH6Nl1fq5McmRaDc98Qzk5CSY24bw1MLiLK9J P9DKyFtLBqb3gjNOAsN7KlmhTr00TIIvZ1zSvrpwICP1nARteoHoHYcjPX891WUy 7IXCexU0QCw3WM3x4tbcjxk+eUbkpbDrnydZ54cyhcceHo8ffg6D/RaPVd+jqpcN irzd7TIY/Spiy4O52g2fn7HuWmE2PKYZymsyXI3B54DRXSU4bAEAAFG1enyHPbJ3 ACCR/czTz+Huncc2qKkzvdflPV9mvxeiNHwGHpQ7qb7ZhTW2c6b2URUs9XuKTN+e OSYcQoSfqBvA6Q== -----END CERTIFICATE-----Generated at Sat Sep 6 12:00:06 2025 by rpki-client