$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/bb/b4b150-dbb8-465f-8155-e4419b64212e/1/8FIRKM9jSqavp-9S1THz_NVWKPk.mft File: 8FIRKM9jSqavp-9S1THz_NVWKPk.mft (raw, json) Hash identifier: 80nzLleKu47kIy3RkaOVDChxX9YXQ8Q1eh1DMJMtYpk= Subject key identifier: 39:18:F0:00:6C:89:1B:27:80:0E:4C:70:1D:D6:1B:F6:5A:B0:CE:E0 Authority key identifier: F0:52:11:28:CF:63:4A:A6:AF:A7:EF:52:D5:31:F3:FC:D5:56:28:F9 Certificate issuer: /CN=f0521128cf634aa6afa7ef52d531f3fcd55628f9 Certificate serial: 01993312D0B1A9179D278E8C88D0A1F0FDE5 Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/8FIRKM9jSqavp-9S1THz_NVWKPk.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/bb/b4b150-dbb8-465f-8155-e4419b64212e/1/8FIRKM9jSqavp-9S1THz_NVWKPk.mft Manifest number: 1683 Signing time: Wed 10 Sep 2025 10:01:35 +0000 Manifest this update: Wed 10 Sep 2025 10:01:35 +0000 Manifest next update: Thu 11 Sep 2025 10:01:35 +0000 Files and hashes: 1: 0vpioq7e7IBvU0f7txi-wExHAPw.roa (hash: lCvUWIuH8RdERCkztaN1NhfYOchJDmj9ywnhD1WG0qs=) 2: 1-t-clxlx4vHi76xBwGIh0Y5orug.roa (hash: WGphFqEzeHYQfivrVaHRtOvOzzhN/PDKxrZlm3FuIDA=) 3: 4CCEdgNV-fGWUC_aGHxQwbUsOKQ.roa (hash: zTRmkFZkHzwf+QYURy5/v5Sjyovq0HLSmOwtNQ48L/c=) 4: 8FIRKM9jSqavp-9S1THz_NVWKPk.crl (hash: PvHFLMyK9Xh3XCJFgmy8pXtyawJClct9ENc0OPPnIwo=) 5: 9oOMh0CjqydkdSKEbK66nXXsu4E.roa (hash: qQJNJWud5A2R6q9LElC5WdsYynVdzga12kQWDH61mWo=) 6: AoQYABlbiRY1s0Gu3McHV58zrpk.roa (hash: 9zDAXKdytFg/3YwoUton7cniFW2Ja9ArE5tJ2skkn+c=) 7: OdGF_e17lYBOCmXmsk6hkXdf7b4.roa (hash: mFKHbPekFFY75D3Eu+1fU9mzEnOZ9+rJaeHup24zW3Q=) 8: PFyByii-LGzRSy90jiJ5mw1207A.roa (hash: gIS/3e5ejAqBGpUPti4f7RxoNdrem0KAE6vwjMubh3s=) 9: Qkq_75MjyviWe2NqgT_-Mwn9gnM.roa (hash: wJb9fi2vDIIR6voDYxFFRDUWuFkEQa98zP1PFmkzpXs=) 10: ScwFXX2rYjT7naQciVMaotJ-UfM.roa (hash: X8Vp96ZEvVObF+OkcOx9P04g9HBNU6my6Pc/b9LR72Y=) 11: rh7_88ku0NVEacOTg4kYRNyhUIs.roa (hash: Uz863y1lKUf+O+OGV8gNQDxIpi4RBI83I9R9FXt5Xp4=) 12: u37q8oxj6d2YnoBLY1VE3CqS2g0.roa (hash: QV9HVDjMgl4TBfOFPjFKF+CTfrUEm6XmvkI/fobJGaM=) Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/bb/b4b150-dbb8-465f-8155-e4419b64212e/1/8FIRKM9jSqavp-9S1THz_NVWKPk.crl rsync://rpki.ripe.net/repository/DEFAULT/bb/b4b150-dbb8-465f-8155-e4419b64212e/1/8FIRKM9jSqavp-9S1THz_NVWKPk.mft rsync://rpki.ripe.net/repository/DEFAULT/8FIRKM9jSqavp-9S1THz_NVWKPk.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Thu 11 Sep 2025 10:01:35 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:99:33:12:d0:b1:a9:17:9d:27:8e:8c:88:d0:a1:f0:fd:e5 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=f0521128cf634aa6afa7ef52d531f3fcd55628f9 Validity Not Before: Sep 10 10:01:35 2025 GMT Not After : Sep 11 10:01:35 2025 GMT Subject: CN=3918f0006c891b27800e4c701dd61bf65ab0cee0 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:b4:b4:e1:47:c8:24:e2:e4:71:6c:3d:fc:5d:b9: c5:ce:f0:3f:0d:d7:e9:f1:b5:54:e3:1b:c9:b2:84: 51:98:cf:c4:62:1b:52:b8:d6:d4:4f:6f:3a:cf:7e: 7b:be:9e:d5:f2:ba:a1:3c:44:b3:54:dc:5c:ef:37: ea:0c:9e:3b:64:26:97:dd:5f:d6:08:53:75:cc:af: 43:83:d7:fe:ea:2e:8b:0c:2a:0c:82:24:9f:59:d0: 8d:f0:1f:7c:8f:8d:10:33:aa:8a:ed:78:70:a8:32: 86:0d:ea:86:c3:e0:ee:6a:9b:ac:90:d1:30:54:68: c8:2f:fd:d3:e1:8b:82:3d:c5:ec:69:66:8c:58:6d: 92:47:78:82:a5:72:fb:83:28:9f:26:12:2b:be:f3: 21:54:36:e2:0a:f1:aa:31:3b:d7:aa:57:7e:c3:8a: c0:62:17:07:08:0a:8a:5f:4c:4c:0d:d7:47:73:e0: b6:cd:31:94:eb:84:44:d7:97:91:29:43:82:d9:1b: 73:42:df:0f:0d:4b:d4:07:a3:7c:00:fe:39:39:ce: 21:dd:dc:ff:d1:73:79:bf:db:7d:6a:3a:98:00:5c: 22:82:de:9f:a0:4e:2c:84:98:6e:02:3a:2b:f9:64: f8:e1:aa:bd:d2:42:a2:bd:cc:c8:4a:e8:68:bb:bf: bf:71 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 39:18:F0:00:6C:89:1B:27:80:0E:4C:70:1D:D6:1B:F6:5A:B0:CE:E0 X509v3 Authority Key Identifier: keyid:F0:52:11:28:CF:63:4A:A6:AF:A7:EF:52:D5:31:F3:FC:D5:56:28:F9 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/8FIRKM9jSqavp-9S1THz_NVWKPk.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/bb/b4b150-dbb8-465f-8155-e4419b64212e/1/8FIRKM9jSqavp-9S1THz_NVWKPk.mft X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/bb/b4b150-dbb8-465f-8155-e4419b64212e/1/8FIRKM9jSqavp-9S1THz_NVWKPk.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 4c:24:2b:c9:b5:35:19:2c:c5:a1:ce:c9:b8:59:e9:9c:95:d4: 8a:a0:ae:4d:68:14:d6:f3:cd:36:dd:cb:62:19:ba:5d:ed:36: 74:03:c4:e4:fa:a3:32:20:91:a6:13:ec:a1:11:98:34:24:58: b0:97:a6:10:5d:a9:b4:fe:4c:51:09:19:b2:d3:69:f7:76:0a: 5e:ae:dc:b7:f9:4d:e4:b5:35:e4:ea:87:84:c2:eb:1d:18:69: 70:a4:fd:97:0f:11:0a:73:e4:ff:4b:c2:43:00:c1:1e:91:d1: cd:5e:9d:bf:02:57:c5:a0:1a:2d:1b:9e:25:af:c3:bd:04:8d: df:fe:9c:c0:a1:08:17:85:73:ae:d3:e7:72:4f:c9:96:11:9e: f0:f0:20:95:f1:22:ce:dd:3c:11:d4:5c:56:3b:3b:97:9f:6a: 17:09:90:4f:9b:74:f1:c4:28:fd:1a:df:d1:89:3a:9c:47:ba: 05:d6:99:6f:12:fd:fa:98:26:7a:b8:dc:ca:df:72:15:c1:80: d1:37:16:02:e6:aa:b4:92:07:17:d1:a9:39:fe:2a:8d:64:df: 1e:68:af:38:ba:8a:c5:d2:11:79:bc:28:9f:82:9b:90:a6:38: 1c:9c:83:0b:37:0b:56:56:5b:ba:09:fd:96:d4:6e:c0:5a:54: 36:d5:d6:4c -----BEGIN CERTIFICATE----- MIIFFjCCA/6gAwIBAgISAZkzEtCxqRedJ46MiNCh8P3lMA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKGYwNTIxMTI4Y2Y2MzRhYTZhZmE3ZWY1MmQ1MzFmM2ZjZDU1 NjI4ZjkwHhcNMjUwOTEwMTAwMTM1WhcNMjUwOTExMTAwMTM1WjAzMTEwLwYDVQQD EygzOTE4ZjAwMDZjODkxYjI3ODAwZTRjNzAxZGQ2MWJmNjVhYjBjZWUwMIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAtLThR8gk4uRxbD38XbnFzvA/Ddfp 8bVU4xvJsoRRmM/EYhtSuNbUT286z357vp7V8rqhPESzVNxc7zfqDJ47ZCaX3V/W CFN1zK9Dg9f+6i6LDCoMgiSfWdCN8B98j40QM6qK7XhwqDKGDeqGw+DuapuskNEw VGjIL/3T4YuCPcXsaWaMWG2SR3iCpXL7gyifJhIrvvMhVDbiCvGqMTvXqld+w4rA YhcHCAqKX0xMDddHc+C2zTGU64RE15eRKUOC2RtzQt8PDUvUB6N8AP45Oc4h3dz/ 0XN5v9t9ajqYAFwigt6foE4shJhuAjor+WT44aq90kKivczISuhou7+/cQIDAQAB o4ICIjCCAh4wHQYDVR0OBBYEFDkY8ABsiRsngA5McB3WG/ZasM7gMB8GA1UdIwQY MBaAFPBSESjPY0qmr6fvUtUx8/zVVij5MA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvOEZJUktNOWpTcWF2cC05UzFUSHpfTlZXS1BrLmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC9iYi9iNGIxNTAtZGJiOC00NjVmLTgxNTUt ZTQ0MTliNjQyMTJlLzEvOEZJUktNOWpTcWF2cC05UzFUSHpfTlZXS1BrLm1mdDCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC9iYi9iNGIxNTAtZGJiOC00NjVmLTgxNTUtZTQ0MTliNjQyMTJl LzEvOEZJUktNOWpTcWF2cC05UzFUSHpfTlZXS1BrLmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEATCQrybU1 GSzFoc7JuFnpnJXUiqCuTWgU1vPNNt3LYhm6Xe02dAPE5PqjMiCRphPsoRGYNCRY sJemEF2ptP5MUQkZstNp93YKXq7ct/lN5LU15OqHhMLrHRhpcKT9lw8RCnPk/0vC QwDBHpHRzV6dvwJXxaAaLRueJa/DvQSN3/6cwKEIF4VzrtPnck/JlhGe8PAglfEi zt08EdRcVjs7l59qFwmQT5t08cQo/Rrf0Yk6nEe6BdaZbxL9+pgmerjcyt9yFcGA 0TcWAuaqtJIHF9GpOf4qjWTfHmivOLqKxdIRebwon4KbkKY4HJyDCzcLVlZbugn9 ltRuwFpUNtXWTA== -----END CERTIFICATE-----Generated at Wed Sep 10 13:27:38 2025 by rpki-client