$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/b0/742370-e10f-4541-aa6c-61afb66d1e8c/1/Ge5fFvwUSsuYl3RJ-qCrd94b3Mk.mft File: Ge5fFvwUSsuYl3RJ-qCrd94b3Mk.mft (raw, json) Hash identifier: Khl9X1iBvBrhRNlAjdeu9OUjYh39k1HBHoCratYaum4= Subject key identifier: 91:3F:B5:45:28:A0:2B:5B:AD:98:C9:F6:F4:55:03:5B:44:9B:F4:6E Authority key identifier: 19:EE:5F:16:FC:14:4A:CB:98:97:74:49:FA:A0:AB:77:DE:1B:DC:C9 Certificate issuer: /CN=19ee5f16fc144acb98977449faa0ab77de1bdcc9 Certificate serial: 01992C6B3A86C74E4255A3C229FB35FA3891 Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/Ge5fFvwUSsuYl3RJ-qCrd94b3Mk.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/b0/742370-e10f-4541-aa6c-61afb66d1e8c/1/Ge5fFvwUSsuYl3RJ-qCrd94b3Mk.mft Manifest number: 0A71 Signing time: Tue 09 Sep 2025 03:00:48 +0000 Manifest this update: Tue 09 Sep 2025 03:00:48 +0000 Manifest next update: Wed 10 Sep 2025 03:00:48 +0000 Files and hashes: 1: 1zxqTZu6SRyYv_Ffy0lFoBPOEm4.roa (hash: ThozvqbE39I99NwlKLMA8FultirTXMcz2Kd4yrw2ZKw=) 2: 2JQiF-KuxisBuWKzCCYjlMYezbU.roa (hash: SXSN+jTHRj/1XPCNhGNyMfhXX6aenkr84XXZn44oBus=) 3: 2wuDk6nFqqGYiaSC6iucrRXcbQk.roa (hash: 79MFBQJOifCFih1gwOm9utzcHryDlN0MlgfAlM0KB/E=) 4: 64__ti8-v70UmOgEukqaYVnNiPA.roa (hash: VerqmgWX+ipN/DN9t0GnBufDYhut1qzOjx4DnJxcXoE=) 5: Dd0lNs2hky54dQAv3vPisZjCFp4.roa (hash: NVL0LmaHqGXfi7RWJ5Z26iREn6xhTna8KN7jsCj7oR4=) 6: G79Wrqy1Lf8BeR2TvbTFt1b4zUw.roa (hash: mkWsUDpUk6REoIb9yGYNYnYwXC9syYE03KiortiRCR0=) 7: Ge5fFvwUSsuYl3RJ-qCrd94b3Mk.crl (hash: kRKFVP1o1b8S8MF5jIxBJHhk4bL4xf6iSXeRxZOfP9s=) 8: MtXcqoleDqMSyVWGFxd3850uGF8.roa (hash: 5zTGwHssmIeS5Ukj/HGoA7Wxq1gUaItGj34ri17+IlA=) 9: Q6bkyyQLjY5spQCrn9goEf71pPU.roa (hash: 9lviglTOByJ8RQWmZ8UPa2cM7z/LltLd8urB8JmBNnE=) 10: U6LKInYX6jQwBV8KMEesVDrNWSk.roa (hash: g36WmG/r5q9WK7xtEoYV2z/lqj+2PVHpdEIB93a9SEM=) 11: U93bZjAVh1P1joBT40YtFgkj33U.roa (hash: zo9QHI0N0+rtiU9CTdPl68EA0JwhDa16Oocr2Zm0PWg=) 12: Uaif5mluHcrJUGbfFQOQv5aGmqo.roa (hash: 4GcANOdK85GtkfgKCJ6D/Bc//mwXx0P/TVTNMp8rznY=) 13: diYtHkbWhD5oCZMkqf9gfGkO_S0.roa (hash: mAM70Fu/V+UYJ6UW5MauFuojQwzYrrWiK8CdKSQ5gBA=) 14: jyDBS4SlMdZTmgBvwq4TdZHy1_k.roa (hash: LeAOH2iyHYZi5p/Iq7kAMVJlSvm2ZJXwY56cgcvgz+I=) 15: kWZqnAqGVCQZUMelFlFHrbydZtM.roa (hash: 9J/2cfRnnGFBEvwGJLQNSpjlPJ6nqFC3XpqXj5zCg1w=) Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/b0/742370-e10f-4541-aa6c-61afb66d1e8c/1/Ge5fFvwUSsuYl3RJ-qCrd94b3Mk.crl rsync://rpki.ripe.net/repository/DEFAULT/b0/742370-e10f-4541-aa6c-61afb66d1e8c/1/Ge5fFvwUSsuYl3RJ-qCrd94b3Mk.mft rsync://rpki.ripe.net/repository/DEFAULT/Ge5fFvwUSsuYl3RJ-qCrd94b3Mk.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Wed 10 Sep 2025 03:00:48 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:99:2c:6b:3a:86:c7:4e:42:55:a3:c2:29:fb:35:fa:38:91 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=19ee5f16fc144acb98977449faa0ab77de1bdcc9 Validity Not Before: Sep 9 03:00:48 2025 GMT Not After : Sep 10 03:00:48 2025 GMT Subject: CN=913fb54528a02b5bad98c9f6f455035b449bf46e Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:f5:6a:f5:78:50:54:29:29:89:6a:13:42:61:0e: 5c:b6:70:56:5a:2f:2e:d1:5f:fd:5f:c7:0b:fe:e0: 1b:06:53:af:81:0e:8b:29:f6:8a:ab:13:d1:3d:06: 52:68:04:6b:b0:fa:a9:82:c9:c4:c5:2c:d3:7b:c4: b1:5c:e9:82:f8:ed:e0:c0:e4:ef:84:0b:30:cd:04: be:f0:2c:8b:9a:9d:1b:aa:0b:76:87:66:5f:56:51: 19:bf:27:f3:06:92:14:66:b7:5b:35:e6:d8:6b:43: 4c:b4:3f:06:b2:e0:a8:84:6e:65:4f:fa:05:59:ae: 6b:49:0c:58:15:02:2f:32:63:2d:c6:96:d5:a1:2b: 37:d3:f0:25:1f:68:c3:2b:e5:55:d6:0f:77:6a:9f: 0f:08:c0:d4:76:df:70:fe:2d:26:56:d6:4b:a9:68: 1c:81:c9:b6:fe:51:be:0b:2b:b9:6d:6b:60:d5:b7: 7b:f0:d1:aa:99:cc:16:f2:3f:13:1d:49:3f:cd:ee: c7:69:3b:0b:ec:85:c0:51:a9:09:0c:1a:a1:59:0f: 55:77:db:b9:60:4c:0a:01:ca:19:0f:88:bc:69:93: 06:2b:78:1f:c2:b9:98:95:c1:ce:2c:e7:33:aa:b0: 93:7d:1f:3e:e4:1b:f2:bf:03:b1:d6:0c:0c:c0:fa: cc:03 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 91:3F:B5:45:28:A0:2B:5B:AD:98:C9:F6:F4:55:03:5B:44:9B:F4:6E X509v3 Authority Key Identifier: keyid:19:EE:5F:16:FC:14:4A:CB:98:97:74:49:FA:A0:AB:77:DE:1B:DC:C9 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/Ge5fFvwUSsuYl3RJ-qCrd94b3Mk.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/b0/742370-e10f-4541-aa6c-61afb66d1e8c/1/Ge5fFvwUSsuYl3RJ-qCrd94b3Mk.mft X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/b0/742370-e10f-4541-aa6c-61afb66d1e8c/1/Ge5fFvwUSsuYl3RJ-qCrd94b3Mk.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 0c:bc:92:c7:e2:1b:51:21:63:9f:8a:58:ed:f4:cc:58:56:19: 52:e8:ea:81:75:99:5e:c0:a0:c5:74:2f:33:db:c5:38:ff:e4: 23:5e:8e:0a:6e:dc:65:a7:9c:2d:a2:73:92:b6:29:98:22:bf: a8:61:de:06:5a:98:34:c6:69:16:e6:a7:ff:0c:0e:1c:ae:3c: 24:df:6c:36:0b:4d:d2:6e:07:6a:16:a7:5d:dc:ba:e8:64:0c: 9c:1b:ba:00:ac:4c:ec:a9:70:3b:90:68:53:9c:94:74:04:b9: bf:03:08:20:15:39:0e:bb:50:f1:11:4d:d3:d3:77:1b:3a:cd: 2b:63:ea:07:c8:9a:46:d8:84:7d:b9:03:5d:f7:d7:d3:0e:33: a6:de:8c:57:63:91:72:b8:2b:d6:2a:f6:95:63:20:03:a4:37: b6:87:0b:1d:c6:7b:c7:de:d2:85:f8:87:64:10:07:0c:45:9b: b1:f0:15:19:4f:3c:af:1c:fd:53:be:ac:d9:e5:c8:f8:fa:00: b9:d1:26:33:3f:f5:e6:e7:2c:c8:8b:e9:1a:b0:fe:99:b4:41: 54:42:5b:d8:d1:b7:59:95:73:40:22:c1:8d:7e:f5:2a:bb:b2: d3:f5:a2:3f:8c:b0:d9:33:30:22:3f:56:ea:16:43:06:8a:a9: d7:23:65:d8 -----BEGIN CERTIFICATE----- MIIFFjCCA/6gAwIBAgISAZksazqGx05CVaPCKfs1+jiRMA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKDE5ZWU1ZjE2ZmMxNDRhY2I5ODk3NzQ0OWZhYTBhYjc3ZGUx YmRjYzkwHhcNMjUwOTA5MDMwMDQ4WhcNMjUwOTEwMDMwMDQ4WjAzMTEwLwYDVQQD Eyg5MTNmYjU0NTI4YTAyYjViYWQ5OGM5ZjZmNDU1MDM1YjQ0OWJmNDZlMIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEA9Wr1eFBUKSmJahNCYQ5ctnBWWi8u 0V/9X8cL/uAbBlOvgQ6LKfaKqxPRPQZSaARrsPqpgsnExSzTe8SxXOmC+O3gwOTv hAswzQS+8CyLmp0bqgt2h2ZfVlEZvyfzBpIUZrdbNebYa0NMtD8GsuCohG5lT/oF Wa5rSQxYFQIvMmMtxpbVoSs30/AlH2jDK+VV1g93ap8PCMDUdt9w/i0mVtZLqWgc gcm2/lG+Cyu5bWtg1bd78NGqmcwW8j8THUk/ze7HaTsL7IXAUakJDBqhWQ9Vd9u5 YEwKAcoZD4i8aZMGK3gfwrmYlcHOLOczqrCTfR8+5BvyvwOx1gwMwPrMAwIDAQAB o4ICIjCCAh4wHQYDVR0OBBYEFJE/tUUooCtbrZjJ9vRVA1tEm/RuMB8GA1UdIwQY MBaAFBnuXxb8FErLmJd0Sfqgq3feG9zJMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvR2U1ZkZ2d1VTc3VZbDNSSi1xQ3JkOTRiM01rLmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC9iMC83NDIzNzAtZTEwZi00NTQxLWFhNmMt NjFhZmI2NmQxZThjLzEvR2U1ZkZ2d1VTc3VZbDNSSi1xQ3JkOTRiM01rLm1mdDCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC9iMC83NDIzNzAtZTEwZi00NTQxLWFhNmMtNjFhZmI2NmQxZThj LzEvR2U1ZkZ2d1VTc3VZbDNSSi1xQ3JkOTRiM01rLmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEADLySx+Ib USFjn4pY7fTMWFYZUujqgXWZXsCgxXQvM9vFOP/kI16OCm7cZaecLaJzkrYpmCK/ qGHeBlqYNMZpFuan/wwOHK48JN9sNgtN0m4HahanXdy66GQMnBu6AKxM7KlwO5Bo U5yUdAS5vwMIIBU5DrtQ8RFN09N3GzrNK2PqB8iaRtiEfbkDXffX0w4zpt6MV2OR crgr1ir2lWMgA6Q3tocLHcZ7x97ShfiHZBAHDEWbsfAVGU88rxz9U76s2eXI+PoA udEmMz/15ucsyIvpGrD+mbRBVEJb2NG3WZVzQCLBjX71Kruy0/WiP4yw2TMwIj9W 6hZDBoqp1yNl2A== -----END CERTIFICATE-----Generated at Tue Sep 9 13:01:35 2025 by rpki-client