$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/bb/32109e-24c9-4c88-a8e8-fdf6638d2c04/1/a8XefXJVt9WCYMZaEgsWTvEO-QM.mft File: a8XefXJVt9WCYMZaEgsWTvEO-QM.mft (raw, json) Hash identifier: ZEun5n7TJq76zqsPVYuIbcGvbQmxLd8eU07N4WnB0rQ= Subject key identifier: 3F:43:AE:16:F8:A5:FC:8A:C4:56:D7:C2:DF:96:C9:FF:72:57:2D:DC Authority key identifier: 6B:C5:DE:7D:72:55:B7:D5:82:60:C6:5A:12:0B:16:4E:F1:0E:F9:03 Certificate issuer: /CN=6bc5de7d7255b7d58260c65a120b164ef10ef903 Certificate serial: 01992CD9549A86B377EEF084EFEB0F357FDB Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/a8XefXJVt9WCYMZaEgsWTvEO-QM.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/bb/32109e-24c9-4c88-a8e8-fdf6638d2c04/1/a8XefXJVt9WCYMZaEgsWTvEO-QM.mft Manifest number: 164F Signing time: Tue 09 Sep 2025 05:01:04 +0000 Manifest this update: Tue 09 Sep 2025 05:01:04 +0000 Manifest next update: Wed 10 Sep 2025 05:01:04 +0000 Files and hashes: 1: 12ToQcSPt7mcdwlwu8cks0_4omc.roa (hash: Iyr2cE2tf2K+xaBK2dhfD2MWZhPJHAOvhdyF3JqR+/g=) 2: 5ZYhCNxqOm04hmY0BhngKxN9rig.roa (hash: 83J35QD4/t+gUfggZnoS3qCNRY62Cfjrx/Jm442KIdY=) 3: DNFKKqPzY2tTxyq4ZF-e6ESwWBk.roa (hash: ONyXaG/qy9WX6Bit7PbMeuasymNM8i3asJe1STaYw+o=) 4: HQby7lGCxVhcsYrFBxtLvu1Nq1s.roa (hash: OEoyOXMuUI9gzJHQlRaFw5QR3hyZ9zizJ0Zhg109soQ=) 5: KEB7URRNcLIkdHFl8_NaQFzoCUc.roa (hash: 8o0J9qbfKon/Y8q8sQm0uMymQ1kVnwb8u5ia9INGr/U=) 6: RVuh9Ovnia6HGIxuY5C4mqQkVzw.roa (hash: 7MdQXOdkGadK2Vo4n1LYddNyvg9R887clmJN5QnKDO0=) 7: _4iJCnTkrZTLi3Znw6No51nUp0U.roa (hash: q5ypixYuURsWaauidvKopOxQLyMvMh9Ff8agaEGE8Z8=) 8: a8XefXJVt9WCYMZaEgsWTvEO-QM.crl (hash: XhPZ31IQyjOqqzP1MHbmCLq5NxH3axe02bTc5aJU5MM=) 9: egyYxAR3bwmsGgeknwOtvs63Vmw.roa (hash: XurIkmwZSfSrHBi1j2SOabRmxdimDBrxAVpSXYwSmK8=) 10: gCwZCj5y4eEHhiE3OdNG143EtPw.roa (hash: bJxdVgp0WUK1yUG+3MFHdMNTBJUCc3SJjDGJmr3bN5s=) 11: kWxL8-0FaQ5asnDLfivzWKH4-z8.roa (hash: aTbkIB4IPS1IGAIXN2uxEpuYorOcI3bZmMM6X6TsyjM=) 12: nQzfhkK0L8K8VGMXs_pIgBcKa-8.roa (hash: 2JOr2Q6s/2fFgYLPZiWXmQsfUISg4nyXJUmxnphc+Ec=) 13: wM1Yw5nFuvuJTOAzQjCj5rN5Pm0.roa (hash: ent4AXHk/p6bQe6GuoAZTq2KLI9u7gMCUsO1EmVjq8w=) Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/bb/32109e-24c9-4c88-a8e8-fdf6638d2c04/1/a8XefXJVt9WCYMZaEgsWTvEO-QM.crl rsync://rpki.ripe.net/repository/DEFAULT/bb/32109e-24c9-4c88-a8e8-fdf6638d2c04/1/a8XefXJVt9WCYMZaEgsWTvEO-QM.mft rsync://rpki.ripe.net/repository/DEFAULT/a8XefXJVt9WCYMZaEgsWTvEO-QM.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Wed 10 Sep 2025 05:01:04 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:99:2c:d9:54:9a:86:b3:77:ee:f0:84:ef:eb:0f:35:7f:db Signature Algorithm: sha256WithRSAEncryption Issuer: CN=6bc5de7d7255b7d58260c65a120b164ef10ef903 Validity Not Before: Sep 9 05:01:04 2025 GMT Not After : Sep 10 05:01:04 2025 GMT Subject: CN=3f43ae16f8a5fc8ac456d7c2df96c9ff72572ddc Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:94:bd:3c:9b:9e:be:8d:d0:2f:b2:0d:96:14:3d: a4:0e:28:5f:5b:96:12:08:bb:63:3e:6f:a4:92:6f: ae:96:3d:d5:2b:d1:70:16:83:39:7e:d6:aa:ff:7a: 58:87:93:fe:5d:83:29:54:98:de:76:9d:9a:00:76: 2d:bc:16:8e:af:aa:3e:6c:f2:70:fd:0f:0f:19:6a: 44:dd:7a:4d:a3:e7:c9:0a:5b:c8:8a:27:c8:36:0c: 39:93:0a:d1:b1:61:46:03:01:64:43:8e:5e:d1:d2: ea:d6:e3:08:c5:66:e6:f3:00:3d:7b:c0:14:92:79: 83:40:5d:c2:45:ca:4f:97:42:89:f6:74:ea:1a:d6: 18:c3:4d:71:07:a0:65:94:55:78:1c:17:a3:15:96: 39:ff:91:82:a1:30:e8:61:0f:cd:4a:02:a2:d5:04: be:c6:ee:10:8f:e8:d0:63:66:0f:7d:56:79:48:43: ff:5d:e2:86:1a:9f:e4:00:9e:e4:d1:22:11:8f:b2: 02:4a:30:24:82:b8:1a:bb:1a:b5:f6:66:5c:24:91: 82:d6:20:85:6c:2d:08:18:d2:52:ff:b8:e6:e0:c0: 9d:89:bd:9a:47:12:bb:79:a4:73:18:5b:69:95:9b: 81:5f:df:dd:f9:9a:b3:4f:c1:26:8c:d8:3a:a9:b0: 6e:b5 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 3F:43:AE:16:F8:A5:FC:8A:C4:56:D7:C2:DF:96:C9:FF:72:57:2D:DC X509v3 Authority Key Identifier: keyid:6B:C5:DE:7D:72:55:B7:D5:82:60:C6:5A:12:0B:16:4E:F1:0E:F9:03 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/a8XefXJVt9WCYMZaEgsWTvEO-QM.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/bb/32109e-24c9-4c88-a8e8-fdf6638d2c04/1/a8XefXJVt9WCYMZaEgsWTvEO-QM.mft X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/bb/32109e-24c9-4c88-a8e8-fdf6638d2c04/1/a8XefXJVt9WCYMZaEgsWTvEO-QM.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 87:60:07:96:4e:ca:ac:8e:e5:fb:6d:a6:37:fc:4c:ed:76:b4: 86:ff:d5:6a:78:a6:22:c7:6e:84:04:6d:95:01:d1:34:13:49: ec:ae:dd:65:56:13:42:66:7c:be:d4:ec:27:76:da:90:0d:74: 1f:5a:17:21:bc:81:87:e5:7f:6f:30:7a:99:8a:fd:09:44:8e: 4a:ab:7e:32:f8:f9:40:3e:d8:1a:4b:02:9f:63:d2:03:24:60: 8c:bd:46:68:9b:37:40:3d:2f:14:87:eb:d7:21:9d:7e:2b:51: f4:2a:50:ea:94:0b:82:19:68:b4:9a:29:4d:f3:fa:19:e7:b9: 79:b7:92:ec:a6:ac:f9:00:a3:f5:f8:42:00:a8:cc:9f:b9:2e: 76:a6:0e:8e:f0:ad:ce:2a:a4:dd:4e:5a:d3:7e:65:c6:01:b0: c5:a2:c6:bb:76:97:b3:f4:71:9a:fc:3a:59:75:51:0d:29:e3: 3a:46:d7:b2:28:e9:24:1b:4d:0e:56:c5:de:39:f2:51:de:32: 65:8b:9d:2b:1d:ec:70:7e:d3:1d:63:e8:6a:3a:b0:9b:19:07: 5c:f4:6d:f3:ec:d2:44:6a:f6:9f:49:a1:71:73:27:3e:ea:bb: 77:8f:b6:5e:5c:80:94:73:a6:a4:4d:66:d0:8d:be:5e:99:eb: f0:7f:1b:01 -----BEGIN CERTIFICATE----- MIIFFjCCA/6gAwIBAgISAZks2VSahrN37vCE7+sPNX/bMA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKDZiYzVkZTdkNzI1NWI3ZDU4MjYwYzY1YTEyMGIxNjRlZjEw ZWY5MDMwHhcNMjUwOTA5MDUwMTA0WhcNMjUwOTEwMDUwMTA0WjAzMTEwLwYDVQQD EygzZjQzYWUxNmY4YTVmYzhhYzQ1NmQ3YzJkZjk2YzlmZjcyNTcyZGRjMIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAlL08m56+jdAvsg2WFD2kDihfW5YS CLtjPm+kkm+ulj3VK9FwFoM5ftaq/3pYh5P+XYMpVJjedp2aAHYtvBaOr6o+bPJw /Q8PGWpE3XpNo+fJClvIiifINgw5kwrRsWFGAwFkQ45e0dLq1uMIxWbm8wA9e8AU knmDQF3CRcpPl0KJ9nTqGtYYw01xB6BllFV4HBejFZY5/5GCoTDoYQ/NSgKi1QS+ xu4Qj+jQY2YPfVZ5SEP/XeKGGp/kAJ7k0SIRj7ICSjAkgrgauxq19mZcJJGC1iCF bC0IGNJS/7jm4MCdib2aRxK7eaRzGFtplZuBX9/d+ZqzT8EmjNg6qbButQIDAQAB o4ICIjCCAh4wHQYDVR0OBBYEFD9Drhb4pfyKxFbXwt+Wyf9yVy3cMB8GA1UdIwQY MBaAFGvF3n1yVbfVgmDGWhILFk7xDvkDMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvYThYZWZYSlZ0OVdDWU1aYUVnc1dUdkVPLVFNLmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC9iYi8zMjEwOWUtMjRjOS00Yzg4LWE4ZTgt ZmRmNjYzOGQyYzA0LzEvYThYZWZYSlZ0OVdDWU1aYUVnc1dUdkVPLVFNLm1mdDCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC9iYi8zMjEwOWUtMjRjOS00Yzg4LWE4ZTgtZmRmNjYzOGQyYzA0 LzEvYThYZWZYSlZ0OVdDWU1aYUVnc1dUdkVPLVFNLmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAh2AHlk7K rI7l+22mN/xM7Xa0hv/VanimIsduhARtlQHRNBNJ7K7dZVYTQmZ8vtTsJ3bakA10 H1oXIbyBh+V/bzB6mYr9CUSOSqt+Mvj5QD7YGksCn2PSAyRgjL1GaJs3QD0vFIfr 1yGdfitR9CpQ6pQLghlotJopTfP6Gee5ebeS7Kas+QCj9fhCAKjMn7kudqYOjvCt ziqk3U5a035lxgGwxaLGu3aXs/Rxmvw6WXVRDSnjOkbXsijpJBtNDlbF3jnyUd4y ZYudKx3scH7THWPoajqwmxkHXPRt8+zSRGr2n0mhcXMnPuq7d4+2XlyAlHOmpE1m 0I2+Xpnr8H8bAQ== -----END CERTIFICATE-----Generated at Tue Sep 9 13:17:27 2025 by rpki-client