$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/c0/e45e30-e7d8-4fb8-90ad-f71038e967a4/1/tIUv-6fVfFqK-7bqW-r33-wMFFo.mft File: tIUv-6fVfFqK-7bqW-r33-wMFFo.mft (raw, json) Hash identifier: eehjFESQ4eHHPO982VQQcd2UcnlqBr5TomhI9yBZTNc= Subject key identifier: 1E:68:0C:C3:65:4F:C1:8E:00:C8:B2:53:26:EB:64:D7:1D:73:DC:F9 Authority key identifier: B4:85:2F:FB:A7:D5:7C:5A:8A:FB:B6:EA:5B:EA:F7:DF:EC:0C:14:5A Certificate issuer: /CN=b4852ffba7d57c5a8afbb6ea5beaf7dfec0c145a Certificate serial: 01992FA31BA8292DE20F6450FCADF72EABBE Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/tIUv-6fVfFqK-7bqW-r33-wMFFo.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/c0/e45e30-e7d8-4fb8-90ad-f71038e967a4/1/tIUv-6fVfFqK-7bqW-r33-wMFFo.mft Manifest number: 168D Signing time: Tue 09 Sep 2025 18:00:42 +0000 Manifest this update: Tue 09 Sep 2025 18:00:42 +0000 Manifest next update: Wed 10 Sep 2025 18:00:42 +0000 Files and hashes: 1: 2zBG6wv0zKBe2XlbGkfLL9rOdtY.roa (hash: lxNpEB+wfb/SASGgTTjYX3zTxUdrCP8FyxAXU//G0JE=) 2: 60ZaPiBpi8SxBTjOjQUT9FiEU2Q.roa (hash: +EenJI8/Zu0itO/r18F94M+NWWU8CW03dUIDwunEbUc=) 3: EU2O-Gd0BV713EAdFoGJuGMnLgQ.roa (hash: DIGhFlsty46rXCRlbLUopCZPIy0Ap7bO0kln0jsUUZQ=) 4: O3sXFCWDkxRLQArJVgciZYJOH2k.roa (hash: wEiLpu8rEygqvBvHCRoBqicZ9xgf2J+eV7J8nj+KxjA=) 5: ZjHl0XpQM8CCJz6Om67G0wOmvS4.roa (hash: xCetPcOL8RFsZEGexQBgMW05eQfuM1TVnSNp6oyXZtQ=) 6: d8mFLNhZassFfsIT0V6Pg-FoNgA.roa (hash: G1lxk+WJgE19vtZBUhgAhwauP4CikNyKzPmcQ0hwXlc=) 7: dEvm44MVXindQlOEmPEQUDFIhOs.roa (hash: dVgBBC/Rmim2eB3c1PNCO34aKUguzhPQDH4vqUewLA0=) 8: l1wLvb6NKoGEYg4t8n0m6fJ0nkM.roa (hash: ql0IO639qJqy1cMjdHcoEEjUejhdun3XvEvt+WT91vI=) 9: nf_J-Be6PvK26ukKjJl6IQe1MJY.roa (hash: 0NfHfYZttT9eDOJu1RyDhX+/FDw371Nzr/BlGE9d+BA=) 10: tIUv-6fVfFqK-7bqW-r33-wMFFo.crl (hash: GQSkdE0AZ8yRXwq6LvWvIvWBjg262QKMaDOc+1tptOU=) 11: w7JADU6oCGh6YbUdtkn1AWlz8C8.roa (hash: BeTxZ9eibtqN9brjaSZeCdnih1w74ddiTrBxnDrR2hk=) Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/c0/e45e30-e7d8-4fb8-90ad-f71038e967a4/1/tIUv-6fVfFqK-7bqW-r33-wMFFo.crl rsync://rpki.ripe.net/repository/DEFAULT/c0/e45e30-e7d8-4fb8-90ad-f71038e967a4/1/tIUv-6fVfFqK-7bqW-r33-wMFFo.mft rsync://rpki.ripe.net/repository/DEFAULT/tIUv-6fVfFqK-7bqW-r33-wMFFo.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Wed 10 Sep 2025 17:00:22 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:99:2f:a3:1b:a8:29:2d:e2:0f:64:50:fc:ad:f7:2e:ab:be Signature Algorithm: sha256WithRSAEncryption Issuer: CN=b4852ffba7d57c5a8afbb6ea5beaf7dfec0c145a Validity Not Before: Sep 9 18:00:42 2025 GMT Not After : Sep 10 18:00:42 2025 GMT Subject: CN=1e680cc3654fc18e00c8b25326eb64d71d73dcf9 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:e9:d4:83:b6:24:de:70:9d:a0:73:e3:d2:47:d1: b0:2a:82:9e:59:fa:29:05:21:4c:b1:ea:71:45:31: 74:00:81:dc:4a:60:e3:13:c9:7c:d9:19:5e:15:50: 8c:d3:4e:3b:57:dd:1b:d9:1d:2b:8d:e2:e0:a8:d6: 71:fb:65:2b:da:2f:ae:bf:6b:0c:45:89:f3:1b:80: 76:23:52:e2:56:53:9d:cb:96:ac:1a:a8:99:d7:0e: bd:84:b7:ea:87:c2:c1:33:db:42:a9:37:8f:6a:19: 73:42:2a:59:c7:64:b8:3a:84:ed:44:0c:fb:7b:b1: e5:c7:71:1e:d0:07:3a:fc:0d:9a:b6:a7:f3:0d:cf: 21:7b:32:6d:f9:37:62:91:6b:e6:89:97:24:18:22: d5:9c:3b:44:7c:82:76:f9:d8:53:d6:f0:98:e5:98: ad:43:f6:d5:15:86:c2:7b:66:1f:46:62:2b:04:d1: ae:91:53:f2:1b:29:c8:c1:f6:0d:3a:a6:3f:65:7c: de:0c:96:50:c9:4e:3a:b8:8c:2b:03:fa:bb:90:35: 7c:d2:eb:7e:20:2d:60:05:ed:7a:cb:c9:86:89:7f: 5f:a6:e8:98:45:68:d3:e1:1a:d0:fb:fc:3d:5b:e4: 5b:3a:17:60:79:a7:54:bf:04:a7:2a:d2:0d:18:48: 7e:9f Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 1E:68:0C:C3:65:4F:C1:8E:00:C8:B2:53:26:EB:64:D7:1D:73:DC:F9 X509v3 Authority Key Identifier: keyid:B4:85:2F:FB:A7:D5:7C:5A:8A:FB:B6:EA:5B:EA:F7:DF:EC:0C:14:5A X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/tIUv-6fVfFqK-7bqW-r33-wMFFo.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/c0/e45e30-e7d8-4fb8-90ad-f71038e967a4/1/tIUv-6fVfFqK-7bqW-r33-wMFFo.mft X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/c0/e45e30-e7d8-4fb8-90ad-f71038e967a4/1/tIUv-6fVfFqK-7bqW-r33-wMFFo.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption a3:02:0e:a4:00:7d:c1:b4:74:cf:eb:96:74:68:e4:66:d1:2a: 9b:fc:1f:9d:70:cd:8d:b4:ab:1c:a4:5e:74:a0:a8:ba:05:e1: ca:32:5e:5f:b1:9e:0d:eb:27:ca:64:19:29:71:4c:8b:ce:0f: ec:98:30:58:23:e3:e0:d5:a9:17:95:ec:a7:c1:e4:97:4b:df: bd:0c:6d:29:0d:ee:53:28:65:c9:1a:cd:98:f6:7e:2d:86:00: ba:66:39:c1:4d:06:e1:d9:85:69:9f:0f:3a:ed:4f:d4:16:df: 34:99:2f:e6:7f:41:89:35:ce:ab:e1:0b:a8:1d:bf:60:8c:a9: 50:86:1b:3d:17:78:90:0b:90:72:84:9c:69:a2:9b:14:b8:11: 4c:32:70:df:70:58:ca:12:38:84:ed:2a:34:1d:c6:e3:8b:3e: 2f:7a:2c:dc:21:22:96:a7:c8:33:d6:8c:91:e6:59:b2:e0:e7: 0a:83:d9:90:57:82:82:1c:35:3e:3c:8a:ad:c0:21:2b:21:ae: 20:c9:bc:4f:2d:12:33:9e:3a:5d:76:84:e9:21:6d:c2:28:0f: f3:61:97:38:70:c9:61:f0:6c:9e:ff:86:9c:5f:e0:79:b5:15: 3c:a1:bf:e7:cd:93:56:bf:6b:62:44:51:dd:aa:0c:5e:d3:b1: 99:9e:78:56 -----BEGIN CERTIFICATE----- MIIFFjCCA/6gAwIBAgISAZkvoxuoKS3iD2RQ/K33Lqu+MA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKGI0ODUyZmZiYTdkNTdjNWE4YWZiYjZlYTViZWFmN2RmZWMw YzE0NWEwHhcNMjUwOTA5MTgwMDQyWhcNMjUwOTEwMTgwMDQyWjAzMTEwLwYDVQQD EygxZTY4MGNjMzY1NGZjMThlMDBjOGIyNTMyNmViNjRkNzFkNzNkY2Y5MIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEA6dSDtiTecJ2gc+PSR9GwKoKeWfop BSFMsepxRTF0AIHcSmDjE8l82RleFVCM0047V90b2R0rjeLgqNZx+2Ur2i+uv2sM RYnzG4B2I1LiVlOdy5asGqiZ1w69hLfqh8LBM9tCqTePahlzQipZx2S4OoTtRAz7 e7Hlx3Ee0Ac6/A2atqfzDc8hezJt+TdikWvmiZckGCLVnDtEfIJ2+dhT1vCY5Zit Q/bVFYbCe2YfRmIrBNGukVPyGynIwfYNOqY/ZXzeDJZQyU46uIwrA/q7kDV80ut+ IC1gBe16y8mGiX9fpuiYRWjT4RrQ+/w9W+RbOhdgeadUvwSnKtINGEh+nwIDAQAB o4ICIjCCAh4wHQYDVR0OBBYEFB5oDMNlT8GOAMiyUybrZNcdc9z5MB8GA1UdIwQY MBaAFLSFL/un1Xxaivu26lvq99/sDBRaMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvdElVdi02ZlZmRnFLLTdicVctcjMzLXdNRkZvLmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC9jMC9lNDVlMzAtZTdkOC00ZmI4LTkwYWQt ZjcxMDM4ZTk2N2E0LzEvdElVdi02ZlZmRnFLLTdicVctcjMzLXdNRkZvLm1mdDCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC9jMC9lNDVlMzAtZTdkOC00ZmI4LTkwYWQtZjcxMDM4ZTk2N2E0 LzEvdElVdi02ZlZmRnFLLTdicVctcjMzLXdNRkZvLmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAowIOpAB9 wbR0z+uWdGjkZtEqm/wfnXDNjbSrHKRedKCougXhyjJeX7GeDesnymQZKXFMi84P 7JgwWCPj4NWpF5Xsp8Hkl0vfvQxtKQ3uUyhlyRrNmPZ+LYYAumY5wU0G4dmFaZ8P Ou1P1BbfNJkv5n9BiTXOq+ELqB2/YIypUIYbPRd4kAuQcoScaaKbFLgRTDJw33BY yhI4hO0qNB3G44s+L3os3CEilqfIM9aMkeZZsuDnCoPZkFeCghw1PjyKrcAhKyGu IMm8Ty0SM546XXaE6SFtwigP82GXOHDJYfBsnv+GnF/gebUVPKG/582TVr9rYkRR 3aoMXtOxmZ54Vg== -----END CERTIFICATE-----Generated at Tue Sep 9 22:54:06 2025 by rpki-client