$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/bd/f053cd-1d79-43a1-9aab-0e72416b4dc7/1/o4nnA1sI4YGjQfN-2nND0j8cr6Q.mft File: o4nnA1sI4YGjQfN-2nND0j8cr6Q.mft (raw, json) Hash identifier: OV1WFTSxkrDAgh3c8QbQgixYHRPSlomvYBgfmFqmTnU= Subject key identifier: CD:AD:79:6D:32:98:14:55:B4:1F:E7:43:53:C7:88:44:D8:3B:32:89 Authority key identifier: A3:89:E7:03:5B:08:E1:81:A3:41:F3:7E:DA:73:43:D2:3F:1C:AF:A4 Certificate issuer: /CN=a389e7035b08e181a341f37eda7343d23f1cafa4 Certificate serial: 01991E0B19AC785CBA0FEC00CB4EB1174A9D Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/o4nnA1sI4YGjQfN-2nND0j8cr6Q.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/bd/f053cd-1d79-43a1-9aab-0e72416b4dc7/1/o4nnA1sI4YGjQfN-2nND0j8cr6Q.mft Manifest number: 159F Signing time: Sat 06 Sep 2025 08:01:07 +0000 Manifest this update: Sat 06 Sep 2025 08:01:07 +0000 Manifest next update: Sun 07 Sep 2025 08:01:07 +0000 Files and hashes: 1: A-6dGixYiVjP5SArd3OOXzF_y94.roa (hash: dHKBVyiR8mv13Z7wTMxDvJhUaTAdj4JJSYSEmomSgRI=) 2: EdyN193XAqCuwUeh3uoqwgMp6YM.roa (hash: aMp83WD7+8DMvO0EZKm2i6yVdt39wHGmWPL1VSmKtjM=) 3: KWzqOLtIWSWtWkByhLp85FW_7rM.roa (hash: +yMm4K7E6517qc0jJ3daW8uChLhsqKi3MVBCXwIyDXI=) 4: ZMT2qJeQlu-C5i0G01EBCNd-g6M.roa (hash: Jul8wggfGDzUNFRFlHhNzs2me0GUF4GTUbIsvxzWDwQ=) 5: adPv80nsAvDoMdbWFhmbQrTYx_c.roa (hash: 4ui5pcCs9o10PJAGBjhy0LQC0IJvn6eEg11QBgbYrhM=) 6: ayrwJOZcqXwPotZkkftDNJvjVWI.roa (hash: u8hehMe3mSy7WRp8JZKZ+vW+iYZYC7RSsKKYne4ZeUk=) 7: dBRyMZmE2MJby6jWlOxwaQP0Xaw.roa (hash: n5MzTBEIB9PdMNKBfe5+OAUwctGrct8tICmAF1a6F9E=) 8: fnuqhATdgk7065LZ-MFpw_mk_Sk.roa (hash: MF0/pFOYDoQu2nRxFXy3gK33SujqFiXhgPkh2E7fsqk=) 9: mPlgxbWD56Le2xy3b_FhRsqSxsc.roa (hash: AfWfwIbPTYGoiVxVmMF6d4mso8lDoU2eXTIxJq7pZSw=) 10: o4nnA1sI4YGjQfN-2nND0j8cr6Q.crl (hash: 9B3ABGqIxPr7indLXDYgvb3+qqxeFoPHI5rOnXJH4AA=) Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/bd/f053cd-1d79-43a1-9aab-0e72416b4dc7/1/o4nnA1sI4YGjQfN-2nND0j8cr6Q.crl rsync://rpki.ripe.net/repository/DEFAULT/bd/f053cd-1d79-43a1-9aab-0e72416b4dc7/1/o4nnA1sI4YGjQfN-2nND0j8cr6Q.mft rsync://rpki.ripe.net/repository/DEFAULT/o4nnA1sI4YGjQfN-2nND0j8cr6Q.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Sun 07 Sep 2025 08:01:07 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:99:1e:0b:19:ac:78:5c:ba:0f:ec:00:cb:4e:b1:17:4a:9d Signature Algorithm: sha256WithRSAEncryption Issuer: CN=a389e7035b08e181a341f37eda7343d23f1cafa4 Validity Not Before: Sep 6 08:01:07 2025 GMT Not After : Sep 7 08:01:07 2025 GMT Subject: CN=cdad796d32981455b41fe74353c78844d83b3289 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:e5:6a:bc:28:a1:df:fc:01:bd:33:6f:d3:f0:bd: 8c:cc:a3:0b:02:8c:ec:be:52:ca:bd:c4:2d:c3:66: 16:b6:d8:9f:18:c7:bf:0a:d0:20:fb:65:e9:e2:e0: 22:ab:cc:a1:ae:e8:1c:ca:90:06:c2:26:4a:44:d2: dc:7f:31:69:22:73:67:7e:92:30:78:92:a4:44:27: 9b:72:2c:33:24:17:4f:9a:7e:27:58:2f:3a:01:72: fa:f6:90:c6:9c:41:45:33:9a:eb:6d:78:fc:77:20: e1:42:74:69:d7:3f:72:27:2e:69:51:f2:9a:33:c6: 3b:82:63:b9:6f:8e:83:7b:68:ca:d2:d9:0f:38:52: 45:63:63:12:a5:1c:96:aa:a8:fe:fe:59:54:21:cb: f7:04:ff:5c:b0:e0:1c:f3:e7:18:af:bd:9f:d5:72: ad:65:ca:f9:2d:bf:c7:aa:ba:a9:98:7f:39:3d:40: e3:93:bc:3b:be:8c:db:8b:84:59:06:e2:36:9a:b1: a1:6e:3e:e7:83:be:64:d1:7c:04:09:e4:f1:a5:18: 4f:11:1d:c5:9c:fb:7e:2f:b6:41:4d:bb:c3:86:1d: d6:ff:f7:78:6c:a4:a1:1a:06:22:a2:e7:23:e0:16: 5a:85:ac:81:81:83:56:13:5e:fb:a3:b2:39:26:a9: 11:5b Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: CD:AD:79:6D:32:98:14:55:B4:1F:E7:43:53:C7:88:44:D8:3B:32:89 X509v3 Authority Key Identifier: keyid:A3:89:E7:03:5B:08:E1:81:A3:41:F3:7E:DA:73:43:D2:3F:1C:AF:A4 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/o4nnA1sI4YGjQfN-2nND0j8cr6Q.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/bd/f053cd-1d79-43a1-9aab-0e72416b4dc7/1/o4nnA1sI4YGjQfN-2nND0j8cr6Q.mft X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/bd/f053cd-1d79-43a1-9aab-0e72416b4dc7/1/o4nnA1sI4YGjQfN-2nND0j8cr6Q.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 4e:0b:4e:ab:0f:75:db:fe:63:58:85:12:07:c7:07:4e:97:fa: 74:fc:79:aa:43:74:33:9c:ad:5f:09:1f:8e:f3:48:b5:1b:0f: ff:b7:f1:a3:ac:db:f1:98:e0:14:4b:82:a3:6e:ba:ca:14:35: 19:c1:7d:b7:26:2d:56:d8:4c:10:ff:ff:f2:4c:e1:51:c7:5a: 6d:54:1f:1a:7b:15:55:cc:08:ea:52:99:18:f1:fc:31:de:69: 91:b4:61:57:ef:ee:6c:63:88:d8:ff:62:1a:dc:9b:8b:73:48: 88:87:1d:41:c0:29:b3:0a:45:ce:73:8e:3d:4c:98:bf:b1:f0: 3e:9e:dd:36:ac:57:9c:ad:89:ba:61:e1:a0:51:bc:27:fc:37: e4:83:5a:89:9b:06:83:d4:30:3d:6f:0a:89:a8:eb:31:d7:e0: de:61:5e:fb:8d:d8:28:83:9b:8d:98:d8:46:fc:e0:47:28:fe: 5a:25:4f:09:d0:d1:b4:ff:59:85:1d:2e:67:bb:25:e1:a0:40: 8e:85:14:6a:86:24:0e:e3:af:a1:af:4e:2a:9b:8c:5a:ba:12: bd:35:fe:c7:82:34:85:09:93:7b:ba:0d:0b:54:6c:e9:4a:d5: 39:28:ce:51:79:91:3c:bf:3f:95:21:27:cd:e0:10:77:79:cf: 03:14:58:88 -----BEGIN CERTIFICATE----- MIIFFjCCA/6gAwIBAgISAZkeCxmseFy6D+wAy06xF0qdMA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKGEzODllNzAzNWIwOGUxODFhMzQxZjM3ZWRhNzM0M2QyM2Yx Y2FmYTQwHhcNMjUwOTA2MDgwMTA3WhcNMjUwOTA3MDgwMTA3WjAzMTEwLwYDVQQD EyhjZGFkNzk2ZDMyOTgxNDU1YjQxZmU3NDM1M2M3ODg0NGQ4M2IzMjg5MIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEA5Wq8KKHf/AG9M2/T8L2MzKMLAozs vlLKvcQtw2YWttifGMe/CtAg+2Xp4uAiq8yhrugcypAGwiZKRNLcfzFpInNnfpIw eJKkRCebciwzJBdPmn4nWC86AXL69pDGnEFFM5rrbXj8dyDhQnRp1z9yJy5pUfKa M8Y7gmO5b46De2jK0tkPOFJFY2MSpRyWqqj+/llUIcv3BP9csOAc8+cYr72f1XKt Zcr5Lb/HqrqpmH85PUDjk7w7vozbi4RZBuI2mrGhbj7ng75k0XwECeTxpRhPER3F nPt+L7ZBTbvDhh3W//d4bKShGgYioucj4BZahayBgYNWE177o7I5JqkRWwIDAQAB o4ICIjCCAh4wHQYDVR0OBBYEFM2teW0ymBRVtB/nQ1PHiETYOzKJMB8GA1UdIwQY MBaAFKOJ5wNbCOGBo0HzftpzQ9I/HK+kMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvbzRubkExc0k0WUdqUWZOLTJuTkQwajhjcjZRLmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC9iZC9mMDUzY2QtMWQ3OS00M2ExLTlhYWIt MGU3MjQxNmI0ZGM3LzEvbzRubkExc0k0WUdqUWZOLTJuTkQwajhjcjZRLm1mdDCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC9iZC9mMDUzY2QtMWQ3OS00M2ExLTlhYWItMGU3MjQxNmI0ZGM3 LzEvbzRubkExc0k0WUdqUWZOLTJuTkQwajhjcjZRLmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEATgtOqw91 2/5jWIUSB8cHTpf6dPx5qkN0M5ytXwkfjvNItRsP/7fxo6zb8ZjgFEuCo266yhQ1 GcF9tyYtVthMEP//8kzhUcdabVQfGnsVVcwI6lKZGPH8Md5pkbRhV+/ubGOI2P9i Gtybi3NIiIcdQcApswpFznOOPUyYv7HwPp7dNqxXnK2JumHhoFG8J/w35INaiZsG g9QwPW8KiajrMdfg3mFe+43YKIObjZjYRvzgRyj+WiVPCdDRtP9ZhR0uZ7sl4aBA joUUaoYkDuOvoa9OKpuMWroSvTX+x4I0hQmTe7oNC1Rs6UrVOSjOUXmRPL8/lSEn zeAQd3nPAxRYiA== -----END CERTIFICATE-----Generated at Sat Sep 6 16:33:53 2025 by rpki-client