$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/b8/6d5d75-4d1e-4697-b1d3-36e344abc9d3/1/437h7O0Z-KCjpjW_qiZCk-NDd5U.mft File: 437h7O0Z-KCjpjW_qiZCk-NDd5U.mft (raw, json) Hash identifier: o2jo918ZLjM1NqybpRe00gUMhnIUq2KrH9PL6brhW2Q= Subject key identifier: D9:ED:5E:46:42:2C:30:73:B4:84:E7:39:94:86:3F:00:2A:06:80:24 Authority key identifier: E3:7E:E1:EC:ED:19:F8:A0:A3:A6:35:BF:AA:26:42:93:E3:43:77:95 Certificate issuer: /CN=e37ee1eced19f8a0a3a635bfaa264293e3437795 Certificate serial: 01991DD43A281AFBFF5C5A3D97540A03D910 Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/437h7O0Z-KCjpjW_qiZCk-NDd5U.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/b8/6d5d75-4d1e-4697-b1d3-36e344abc9d3/1/437h7O0Z-KCjpjW_qiZCk-NDd5U.mft Manifest number: 1698 Signing time: Sat 06 Sep 2025 07:01:11 +0000 Manifest this update: Sat 06 Sep 2025 07:01:11 +0000 Manifest next update: Sun 07 Sep 2025 07:01:11 +0000 Files and hashes: 1: 1-gMcB2tX1aJagc2aIqyie1JosUM.roa (hash: e/zYIsHTFYDxeTkK5hyPfn+knzLFEB1hZl3ZQmxyCc0=) 2: 437h7O0Z-KCjpjW_qiZCk-NDd5U.crl (hash: 1m1KYgj65btkLhNuLb7eD0u5BSU5yVCL0pYb3/SfCco=) 3: 9eNXipbIkyVdZ3T8NqmEYXwSLqE.roa (hash: BrQPu/EjsIQipBfThN07mTNPYYMcHP60+6UvtDcOjIw=) 4: EFuxyCYga5KedfhIetzIM8Wqp3Y.roa (hash: O+IR1hZ8a8RGzU0SmSAJy1+brABxzqq2amGl3toGZFo=) 5: JS9UWtZttem3o1fXhyj6cDhffLI.roa (hash: 2i5hM4JyTJhdNStU0tEfjgguQh3ME+ydQZVTRw+h18A=) 6: RX5TjbcaEwYk1IhE69eAlXBXNyQ.roa (hash: c0wkjrnxIEHQj5HUBmajY9pyKvCItPr80kJiD5UVJ6c=) 7: TxnmQLTJ7RG9p8EWlmGMzoVFKYM.roa (hash: ya4Fhh2AAgBvWI3PefXXRZJhuG79XQoe+sEudA3lm48=) 8: Ug41i06gdv9Ukc46NZ5XcrOupdE.roa (hash: llRNNcmXFkFqLY4QgsxGuCXjBef7WAi2K7CKwj9Mkc8=) 9: ZYZn-5YwBHa46UGZ7YpzFXkXV2c.roa (hash: nysaKplSjq7+66zMvup13xDe5hG/XF/iaG+ccwRnc48=) 10: iTq1k1-n5HC3mDH6yOxsGqky0UI.roa (hash: AGbGIRgcWmrYfxQjlQUEIVcfb2QPCldn/oJ/TJ7MR/A=) 11: ijEqoAEZpU0XwucBGAsnbQDDdNw.roa (hash: JCAoDA+s8OPB6Om2MtNX+ndsLOblJSylnwNeZbS7ZEI=) 12: oUN6hm9XIH9hez7uSosGEeiTS64.roa (hash: O2lJOrBjeZAv4ECvJJ0xPhkbtSeFQ6Qb6tFoYeeLtF0=) 13: rHz8kaauSx9yjUtMHgkc7yNJ95o.roa (hash: PhKHXgs0bJsWkyri4OmHbJXKHUs8Dv3fw5JQFOIgfUI=) Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/b8/6d5d75-4d1e-4697-b1d3-36e344abc9d3/1/437h7O0Z-KCjpjW_qiZCk-NDd5U.crl rsync://rpki.ripe.net/repository/DEFAULT/b8/6d5d75-4d1e-4697-b1d3-36e344abc9d3/1/437h7O0Z-KCjpjW_qiZCk-NDd5U.mft rsync://rpki.ripe.net/repository/DEFAULT/437h7O0Z-KCjpjW_qiZCk-NDd5U.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Sun 07 Sep 2025 04:00:23 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:99:1d:d4:3a:28:1a:fb:ff:5c:5a:3d:97:54:0a:03:d9:10 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=e37ee1eced19f8a0a3a635bfaa264293e3437795 Validity Not Before: Sep 6 07:01:11 2025 GMT Not After : Sep 7 07:01:11 2025 GMT Subject: CN=d9ed5e46422c3073b484e73994863f002a068024 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:98:5f:55:2f:dd:8b:a1:4b:2e:26:41:8f:a1:eb: 7b:f1:52:ab:0a:c7:2b:6d:33:81:16:a6:f3:39:38: 58:cf:31:ea:06:99:e3:64:46:2e:d8:24:57:34:10: b5:88:58:4b:6a:66:99:c4:59:ee:23:d9:36:56:c3: cb:2c:e9:b2:25:58:20:c3:24:a6:54:d0:14:58:18: 28:79:f0:80:3b:00:ad:8e:fe:05:97:a5:57:6a:44: 3d:dd:87:a5:d5:e5:56:06:ff:4d:66:99:1b:93:ac: f4:58:8c:8e:2d:86:a1:ae:1f:93:ac:d8:63:a0:92: a5:44:cf:2c:cb:db:54:53:71:ed:af:b7:fa:24:3f: c2:cc:7c:1b:0a:33:e3:09:11:07:18:0e:7d:58:c0: 8e:a8:e1:09:6b:55:ca:d7:e9:7b:46:9f:3e:7b:f9: fd:0a:12:5b:fa:b7:55:24:23:ee:f4:1e:b3:0c:f6: c3:87:7e:c1:13:a4:53:98:16:da:a2:ca:e9:5f:91: 7d:85:d1:5b:05:ee:a3:9e:c2:0a:03:7b:8c:c9:d5: 1c:07:00:75:3a:7a:8d:fb:a3:62:aa:94:ba:ed:07: a0:e8:57:60:76:49:48:3a:36:af:cb:61:12:9f:27: a4:64:85:7b:aa:6a:4d:a0:5b:a0:93:ab:28:00:b1: 02:19 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: D9:ED:5E:46:42:2C:30:73:B4:84:E7:39:94:86:3F:00:2A:06:80:24 X509v3 Authority Key Identifier: keyid:E3:7E:E1:EC:ED:19:F8:A0:A3:A6:35:BF:AA:26:42:93:E3:43:77:95 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/437h7O0Z-KCjpjW_qiZCk-NDd5U.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/b8/6d5d75-4d1e-4697-b1d3-36e344abc9d3/1/437h7O0Z-KCjpjW_qiZCk-NDd5U.mft X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/b8/6d5d75-4d1e-4697-b1d3-36e344abc9d3/1/437h7O0Z-KCjpjW_qiZCk-NDd5U.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 4c:ed:7f:50:27:07:f1:92:ef:33:e2:53:03:4a:35:df:42:9e: 5b:69:5a:db:27:6e:5d:fd:7b:af:61:fd:d3:18:88:59:a5:05: ae:21:74:7f:aa:c2:00:23:88:f1:f3:2c:36:43:fd:21:d5:71: 2b:30:1f:24:ff:81:c9:85:dc:8d:89:23:47:77:23:7c:8d:c4: 52:4a:e5:67:d0:7a:32:22:40:a6:f8:de:0d:e5:3e:fe:c7:e4: f2:0d:42:76:39:b2:a9:70:94:f5:54:aa:48:c4:5c:31:3b:2e: 71:b7:1d:dd:e0:51:db:f9:08:2d:ca:d4:f3:de:fd:7d:67:3e: a2:ca:9c:96:59:9e:30:6d:87:26:f1:cc:4b:51:6d:d4:06:71: 98:ee:85:dc:50:9d:22:cf:ec:5b:1b:64:99:c0:fb:28:57:cd: 44:64:57:41:7c:15:49:b9:b9:76:d8:51:28:f9:3c:4b:6f:71: 21:79:c0:6e:3a:01:3b:e6:13:95:99:1d:e7:4a:3c:e0:a0:78: e4:13:66:2c:e7:b4:91:0c:ee:12:f9:ff:f2:09:4a:6a:02:01: 3e:91:f2:13:21:5a:e5:a6:51:1b:af:ce:bd:a8:3d:d1:37:1c: e7:2e:5f:25:e2:e9:63:c9:7c:3c:1c:70:6c:30:23:75:b4:de: 00:38:fb:4c -----BEGIN CERTIFICATE----- MIIFFjCCA/6gAwIBAgISAZkd1DooGvv/XFo9l1QKA9kQMA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKGUzN2VlMWVjZWQxOWY4YTBhM2E2MzViZmFhMjY0MjkzZTM0 Mzc3OTUwHhcNMjUwOTA2MDcwMTExWhcNMjUwOTA3MDcwMTExWjAzMTEwLwYDVQQD EyhkOWVkNWU0NjQyMmMzMDczYjQ4NGU3Mzk5NDg2M2YwMDJhMDY4MDI0MIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAmF9VL92LoUsuJkGPoet78VKrCscr bTOBFqbzOThYzzHqBpnjZEYu2CRXNBC1iFhLamaZxFnuI9k2VsPLLOmyJVggwySm VNAUWBgoefCAOwCtjv4Fl6VXakQ93Yel1eVWBv9NZpkbk6z0WIyOLYahrh+TrNhj oJKlRM8sy9tUU3Htr7f6JD/CzHwbCjPjCREHGA59WMCOqOEJa1XK1+l7Rp8+e/n9 ChJb+rdVJCPu9B6zDPbDh37BE6RTmBbaosrpX5F9hdFbBe6jnsIKA3uMydUcBwB1 OnqN+6NiqpS67Qeg6FdgdklIOjavy2ESnyekZIV7qmpNoFugk6soALECGQIDAQAB o4ICIjCCAh4wHQYDVR0OBBYEFNntXkZCLDBztITnOZSGPwAqBoAkMB8GA1UdIwQY MBaAFON+4eztGfigo6Y1v6omQpPjQ3eVMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvNDM3aDdPMFotS0NqcGpXX3FpWkNrLU5EZDVVLmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC9iOC82ZDVkNzUtNGQxZS00Njk3LWIxZDMt MzZlMzQ0YWJjOWQzLzEvNDM3aDdPMFotS0NqcGpXX3FpWkNrLU5EZDVVLm1mdDCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC9iOC82ZDVkNzUtNGQxZS00Njk3LWIxZDMtMzZlMzQ0YWJjOWQz LzEvNDM3aDdPMFotS0NqcGpXX3FpWkNrLU5EZDVVLmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEATO1/UCcH 8ZLvM+JTA0o130KeW2la2yduXf17r2H90xiIWaUFriF0f6rCACOI8fMsNkP9IdVx KzAfJP+ByYXcjYkjR3cjfI3EUkrlZ9B6MiJApvjeDeU+/sfk8g1CdjmyqXCU9VSq SMRcMTsucbcd3eBR2/kILcrU8979fWc+osqcllmeMG2HJvHMS1Ft1AZxmO6F3FCd Is/sWxtkmcD7KFfNRGRXQXwVSbm5dthRKPk8S29xIXnAbjoBO+YTlZkd50o84KB4 5BNmLOe0kQzuEvn/8glKagIBPpHyEyFa5aZRG6/Ovag90Tcc5y5fJeLpY8l8PBxw bDAjdbTeADj7TA== -----END CERTIFICATE-----Generated at Sat Sep 6 12:06:45 2025 by rpki-client