$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/b1/7703ef-2422-437c-b93d-595e0bf5c613/1/MmN4f9D5SzeBPu8WvIE3Qj7j_vM.mft File: MmN4f9D5SzeBPu8WvIE3Qj7j_vM.mft (raw, json) Hash identifier: dpLY1Ee+qTZXsBpkA4+2g3bYyDi4bdESjQiw1FxeKd0= Subject key identifier: 50:2E:A7:90:B3:F8:91:BA:22:08:AA:3E:B1:62:E8:23:D4:54:FE:D1 Authority key identifier: 32:63:78:7F:D0:F9:4B:37:81:3E:EF:16:BC:81:37:42:3E:E3:FE:F3 Certificate issuer: /CN=3263787fd0f94b37813eef16bc8137423ee3fef3 Certificate serial: 0199183F6A764007BC4E05BAF98934A2DDDF Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/MmN4f9D5SzeBPu8WvIE3Qj7j_vM.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/b1/7703ef-2422-437c-b93d-595e0bf5c613/1/MmN4f9D5SzeBPu8WvIE3Qj7j_vM.mft Manifest number: 16A5 Signing time: Fri 05 Sep 2025 05:00:33 +0000 Manifest this update: Fri 05 Sep 2025 05:00:33 +0000 Manifest next update: Sat 06 Sep 2025 05:00:33 +0000 Files and hashes: 1: 6EzBdLMFhAHXtGoqOgo2hhkKxsE.roa (hash: 6BZyqWO3dBV2T/D/HQLLEXL8wtnsNJxMwYYKl/DQzgM=) 2: 6ef47TXoBdfjKnlsNsow8DBixKo.roa (hash: CJVWo8/zfulxwmsfO0I8Hpt8eJudz4hqVHD23gptH10=) 3: GiScTXLFDlSkFEEGri5P1vz6Sho.roa (hash: uMhctxLibeY+IpaWynfmNEbttAIjD24+B1IvRH31TQ8=) 4: KbQ--oBtSgvSfZVrBwQ6M553Hwk.roa (hash: NJgK04btjY64hOecbKh54mIt3v+Yqupp2O5zCZPtgv0=) 5: MmN4f9D5SzeBPu8WvIE3Qj7j_vM.crl (hash: q7AgG9PFXaSlYQkv6tOGSWBVi78DGCiCRaOUW8yuF/w=) 6: Oi1LQnm4lsa7_1hR1J20jJ6vxNI.roa (hash: SY2CzV8LXx9B2pkUZksUiYNXDfeS5dNBeKSh1IfycAI=) 7: nb4wfQ7FzEgUQNDsTQT1rI6C1P0.roa (hash: XbtW2pGYp04EBEIcviRAYkU8I+ewGGN4xhpRClBs10Q=) 8: pZHCAjsk0quEKKapLoBOB8SLyYU.roa (hash: PkFYd+Uy2SwEBC/xRtpP2pJp1/vhJ01S2mfX0UJzqmk=) 9: s_FtOH_04RI6fQSwCEGQRaxenqE.roa (hash: Up1ChTzvoa7S+h2ZhOA1fS6mN/rXtYcGjF6VjvPQ6yU=) 10: xncarj25crr8jheWMdTk_hHjDgA.roa (hash: faBPhFeokl7YpLGqkirAx40a8ze0nSMM/W/gUDbYpqs=) 11: zo7mxq2v2o0aNKJKvVs8XzMAoSo.roa (hash: hDK25txovgb427j58Xr748zftbcgjP77JZ1VaXHts3o=) Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/b1/7703ef-2422-437c-b93d-595e0bf5c613/1/MmN4f9D5SzeBPu8WvIE3Qj7j_vM.crl rsync://rpki.ripe.net/repository/DEFAULT/b1/7703ef-2422-437c-b93d-595e0bf5c613/1/MmN4f9D5SzeBPu8WvIE3Qj7j_vM.mft rsync://rpki.ripe.net/repository/DEFAULT/MmN4f9D5SzeBPu8WvIE3Qj7j_vM.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Sat 06 Sep 2025 05:00:33 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:99:18:3f:6a:76:40:07:bc:4e:05:ba:f9:89:34:a2:dd:df Signature Algorithm: sha256WithRSAEncryption Issuer: CN=3263787fd0f94b37813eef16bc8137423ee3fef3 Validity Not Before: Sep 5 05:00:33 2025 GMT Not After : Sep 6 05:00:33 2025 GMT Subject: CN=502ea790b3f891ba2208aa3eb162e823d454fed1 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:b9:7b:89:21:71:90:0d:5b:a5:35:a8:6b:84:19: 10:d6:1c:f4:78:85:31:6f:bc:47:27:a3:03:57:9a: 29:00:7d:2f:51:ec:12:be:e6:ad:ef:b7:06:1e:da: 83:d7:98:3d:30:d5:84:45:1c:82:1f:d0:4c:1d:51: a3:c2:3f:c5:e9:c6:ae:32:f5:63:6f:7d:e5:29:ac: 86:e3:78:6c:fe:1a:a6:bc:4a:1e:d3:c8:92:66:24: ba:fc:83:ff:35:ab:9f:ce:bd:42:0b:96:56:83:c8: ad:b5:19:23:f7:25:f4:49:b7:66:ab:48:17:c0:38: 07:62:b1:f3:e1:cd:fc:c6:f2:1e:3f:1e:da:b9:21: 85:88:db:af:d5:1f:a0:8c:88:0c:3b:04:83:36:84: e4:dc:16:b0:c6:db:1f:7a:d6:75:c2:91:d0:c6:23: ec:be:d0:c4:35:84:8f:aa:9e:ff:d9:ae:67:42:82: 5a:e7:63:3c:0a:e1:f6:0b:fd:07:14:82:a7:e2:09: 05:68:7d:88:66:bf:e6:13:17:c1:48:42:09:f3:39: 25:c9:e7:57:fa:98:fe:5f:6d:84:1a:3a:fe:74:22: 7d:97:49:c7:59:98:11:b1:51:1f:e7:9e:77:91:89: 41:cc:cc:4b:02:10:d4:7f:eb:c2:53:dd:ec:08:f7: fe:2d Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 50:2E:A7:90:B3:F8:91:BA:22:08:AA:3E:B1:62:E8:23:D4:54:FE:D1 X509v3 Authority Key Identifier: keyid:32:63:78:7F:D0:F9:4B:37:81:3E:EF:16:BC:81:37:42:3E:E3:FE:F3 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/MmN4f9D5SzeBPu8WvIE3Qj7j_vM.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/b1/7703ef-2422-437c-b93d-595e0bf5c613/1/MmN4f9D5SzeBPu8WvIE3Qj7j_vM.mft X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/b1/7703ef-2422-437c-b93d-595e0bf5c613/1/MmN4f9D5SzeBPu8WvIE3Qj7j_vM.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 66:77:e6:aa:a0:f4:a1:c0:22:a5:1d:2e:1d:25:9d:9d:69:23: e9:34:cc:06:76:6c:53:52:3d:36:aa:0e:49:43:7b:95:f7:71: b7:57:b3:53:35:e0:48:5d:b8:ba:e2:ad:63:c6:61:98:8e:dd: 4b:88:b3:40:71:ab:1c:de:1f:97:6e:fd:f2:43:39:3e:f8:aa: fc:87:ac:32:6d:05:2e:43:6f:ad:4e:81:7e:2d:87:3d:c7:2e: 13:cd:9c:cf:10:e9:20:2a:4f:84:79:3e:d5:dc:90:c7:2c:fe: 37:eb:34:95:8d:c6:ae:7d:ba:fd:97:f6:d9:31:23:aa:a7:1d: ba:bd:eb:d4:ff:59:c6:c0:f2:6e:99:ae:04:d4:7b:cb:a3:d6: 5b:03:dd:6f:74:92:cc:41:fd:ea:c3:76:4a:fd:b1:7d:79:9c: 21:b2:08:df:70:c2:21:d6:2c:36:6a:98:3a:14:f1:61:11:3d: 62:8e:b9:b5:77:9a:80:fd:61:04:13:f9:0f:5a:1f:4a:5c:99: c9:85:61:81:ef:75:3f:f4:13:ca:78:b3:a9:f6:61:24:db:ba: 17:31:ec:52:99:1e:bc:dc:08:14:9e:85:3e:cf:11:4b:4e:3d: 80:b8:ad:1b:2f:62:45:fb:85:d5:1b:b2:ae:da:36:3f:29:29: 04:cd:70:cc -----BEGIN CERTIFICATE----- MIIFFjCCA/6gAwIBAgISAZkYP2p2QAe8TgW6+Yk0ot3fMA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKDMyNjM3ODdmZDBmOTRiMzc4MTNlZWYxNmJjODEzNzQyM2Vl M2ZlZjMwHhcNMjUwOTA1MDUwMDMzWhcNMjUwOTA2MDUwMDMzWjAzMTEwLwYDVQQD Eyg1MDJlYTc5MGIzZjg5MWJhMjIwOGFhM2ViMTYyZTgyM2Q0NTRmZWQxMIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAuXuJIXGQDVulNahrhBkQ1hz0eIUx b7xHJ6MDV5opAH0vUewSvuat77cGHtqD15g9MNWERRyCH9BMHVGjwj/F6cauMvVj b33lKayG43hs/hqmvEoe08iSZiS6/IP/Naufzr1CC5ZWg8ittRkj9yX0Sbdmq0gX wDgHYrHz4c38xvIePx7auSGFiNuv1R+gjIgMOwSDNoTk3BawxtsfetZ1wpHQxiPs vtDENYSPqp7/2a5nQoJa52M8CuH2C/0HFIKn4gkFaH2IZr/mExfBSEIJ8zklyedX +pj+X22EGjr+dCJ9l0nHWZgRsVEf5553kYlBzMxLAhDUf+vCU93sCPf+LQIDAQAB o4ICIjCCAh4wHQYDVR0OBBYEFFAup5Cz+JG6IgiqPrFi6CPUVP7RMB8GA1UdIwQY MBaAFDJjeH/Q+Us3gT7vFryBN0I+4/7zMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvTW1ONGY5RDVTemVCUHU4V3ZJRTNRajdqX3ZNLmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC9iMS83NzAzZWYtMjQyMi00MzdjLWI5M2Qt NTk1ZTBiZjVjNjEzLzEvTW1ONGY5RDVTemVCUHU4V3ZJRTNRajdqX3ZNLm1mdDCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC9iMS83NzAzZWYtMjQyMi00MzdjLWI5M2QtNTk1ZTBiZjVjNjEz LzEvTW1ONGY5RDVTemVCUHU4V3ZJRTNRajdqX3ZNLmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAZnfmqqD0 ocAipR0uHSWdnWkj6TTMBnZsU1I9NqoOSUN7lfdxt1ezUzXgSF24uuKtY8ZhmI7d S4izQHGrHN4fl2798kM5Pviq/IesMm0FLkNvrU6Bfi2HPccuE82czxDpICpPhHk+ 1dyQxyz+N+s0lY3Grn26/Zf22TEjqqcdur3r1P9ZxsDybpmuBNR7y6PWWwPdb3SS zEH96sN2Sv2xfXmcIbII33DCIdYsNmqYOhTxYRE9Yo65tXeagP1hBBP5D1ofSlyZ yYVhge91P/QTynizqfZhJNu6FzHsUpkevNwIFJ6FPs8RS049gLitGy9iRfuF1Ruy rto2PykpBM1wzA== -----END CERTIFICATE-----Generated at Fri Sep 5 12:10:34 2025 by rpki-client