$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/c3/1b4105-3471-4592-bf07-73fd3bc19aa7/1/_zFJJHOnjG_p9Tn5-n0iUlYKK34.mft File: _zFJJHOnjG_p9Tn5-n0iUlYKK34.mft (raw, json) Hash identifier: nIHDlPaJezVpA4KC6YOqstWFNgwjoCvb/lRzQB/inQg= Subject key identifier: 5F:34:29:EA:68:EA:9B:9A:06:8C:CB:13:E4:3D:FB:F9:A4:6C:4E:57 Authority key identifier: FF:31:49:24:73:A7:8C:6F:E9:F5:39:F9:FA:7D:22:52:56:0A:2B:7E Certificate issuer: /CN=ff31492473a78c6fe9f539f9fa7d2252560a2b7e Certificate serial: 01992CD972A5CAED1CE48D9C9997033F7279 Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/_zFJJHOnjG_p9Tn5-n0iUlYKK34.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/c3/1b4105-3471-4592-bf07-73fd3bc19aa7/1/_zFJJHOnjG_p9Tn5-n0iUlYKK34.mft Manifest number: 163E Signing time: Tue 09 Sep 2025 05:01:12 +0000 Manifest this update: Tue 09 Sep 2025 05:01:12 +0000 Manifest next update: Wed 10 Sep 2025 05:01:12 +0000 Files and hashes: 1: F_cRK7_FuJ1SOPF-eStGPWamodQ.roa (hash: bwgPCaYQdCUVOLDgCvOHRKGxaq7IRtIbjKPrwDwOiGI=) 2: Itnfb5cOidqPHmrm9ItGmwZzqpE.roa (hash: iss4kvemyRAUGLNEu7CN/erlN+DUp3hzgmc3aCXZAfU=) 3: JaFKfYKslg0WUVhBG8hHu6LqTvw.roa (hash: 4GgDdTVxQxqewTP0EOz1RIPWIQ2EEWazgc1qxopxzyA=) 4: NiD2SDjoMC5kCqhJ0LqUs7rzMnw.roa (hash: 9+KHXzf6QQ6hX/XBCMhmaRntprEYELpBh7Oa+Qw01T4=) 5: ShXwELNENSFmGBdjnWGg5NqouYI.roa (hash: CvtdGpDGnIEThk2qtR3nRVqJ7XKDlnHvbjdMw3b5GEg=) 6: U6O4fPn6akIpWmgc4yJT0O6kLpo.roa (hash: yofA2VyhfSO3CESlgcLfFamVAKarRdUA7fzOcVSh6T0=) 7: _zFJJHOnjG_p9Tn5-n0iUlYKK34.crl (hash: kH8P2HHTkbCKY2OK5NLZP0QFSB0zrCtudaKfDxFDhVg=) 8: ccs7nyLFaW5A18K4O1qhpOVnDF0.roa (hash: kVq8Rt+cDTCddUdzX9poi4CfmBkJSUYFh1PJxqkXE8A=) 9: u3VJR1_M7JzYx842qLGTM0en5V0.roa (hash: qbP/xDwKS1NUr1YSZhW1L+ZrVrT39XIk/W4+EAm8kOI=) 10: y4Nw6VYuIuUZOv6I685fKqZhbWQ.roa (hash: JM0RAslsFdrhEKUBmY+ywDM/Jo6q24Igd7pWLFOkC9Q=) 11: zIstcjB0l5dXMsxLJF-PmySyWoY.roa (hash: sZKTonBPo728p5sx2a7KurcsOwIi7QOOMBd8o6TZnS4=) Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/c3/1b4105-3471-4592-bf07-73fd3bc19aa7/1/_zFJJHOnjG_p9Tn5-n0iUlYKK34.crl rsync://rpki.ripe.net/repository/DEFAULT/c3/1b4105-3471-4592-bf07-73fd3bc19aa7/1/_zFJJHOnjG_p9Tn5-n0iUlYKK34.mft rsync://rpki.ripe.net/repository/DEFAULT/_zFJJHOnjG_p9Tn5-n0iUlYKK34.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Wed 10 Sep 2025 05:01:12 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:99:2c:d9:72:a5:ca:ed:1c:e4:8d:9c:99:97:03:3f:72:79 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=ff31492473a78c6fe9f539f9fa7d2252560a2b7e Validity Not Before: Sep 9 05:01:12 2025 GMT Not After : Sep 10 05:01:12 2025 GMT Subject: CN=5f3429ea68ea9b9a068ccb13e43dfbf9a46c4e57 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:ba:2a:56:9f:f6:ac:6c:8a:df:71:57:cb:1c:d5: dd:33:21:a6:a2:96:fb:6e:c3:96:98:61:75:ee:fb: f0:31:de:3c:a5:45:87:93:d4:9c:54:e0:89:53:c4: ab:bf:da:d7:08:f8:f5:ff:9b:59:c1:be:02:27:f7: 5b:b7:95:fb:a0:da:64:d7:c7:d1:ea:07:98:99:34: 04:cb:42:db:b1:6b:fc:78:5e:dd:94:23:a0:ed:2c: 8a:7e:4d:0e:ed:ba:b2:21:9c:ab:43:85:2c:76:5a: a1:df:e7:9e:58:38:2e:88:62:3e:cb:15:ae:da:6c: 08:e0:80:60:d0:bb:a7:fc:09:a4:f5:74:05:dd:f4: 9c:30:36:6a:b7:a6:26:ba:96:78:5a:54:e5:b2:c9: 37:4e:0a:33:5b:2b:b9:21:25:38:3c:75:da:ed:81: fd:bd:17:00:25:ee:99:51:a7:bf:dc:64:00:82:eb: 92:57:43:74:09:52:e2:14:6d:fe:e1:27:b8:08:db: 12:80:99:4f:c0:b1:47:24:e4:89:62:e0:26:77:d6: 9d:bf:79:db:02:17:ec:1c:55:f1:18:38:35:3d:57: 04:02:87:16:20:e4:e7:01:79:fb:09:d4:32:ff:d6: b9:21:42:30:fe:38:37:36:b4:6f:53:19:d7:7d:aa: 6a:f3 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 5F:34:29:EA:68:EA:9B:9A:06:8C:CB:13:E4:3D:FB:F9:A4:6C:4E:57 X509v3 Authority Key Identifier: keyid:FF:31:49:24:73:A7:8C:6F:E9:F5:39:F9:FA:7D:22:52:56:0A:2B:7E X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/_zFJJHOnjG_p9Tn5-n0iUlYKK34.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/c3/1b4105-3471-4592-bf07-73fd3bc19aa7/1/_zFJJHOnjG_p9Tn5-n0iUlYKK34.mft X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/c3/1b4105-3471-4592-bf07-73fd3bc19aa7/1/_zFJJHOnjG_p9Tn5-n0iUlYKK34.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 10:a7:13:3a:33:97:97:e2:65:fc:39:8c:70:35:70:0b:65:aa: 1f:21:9c:16:c2:95:1d:f7:85:5b:dd:74:9f:08:e9:71:23:8f: 0e:fa:21:8e:1a:ae:b1:c2:3d:94:7f:22:b0:92:a5:d3:70:ae: fb:91:bf:b2:d5:97:7c:d8:18:61:25:5f:50:16:57:a6:9e:3f: 8c:e7:ea:5f:8b:2f:0b:a4:a6:a4:7d:b1:64:f9:09:47:35:9c: d5:45:ee:90:6b:10:ac:8c:f0:6c:02:c1:e6:cf:e2:11:0b:92: eb:22:ef:54:8f:f4:a8:99:84:3c:9a:1e:48:60:76:86:10:42: 53:fa:ae:16:22:11:0d:4f:72:45:e8:9d:fd:f3:bf:10:9d:6f: df:bc:ac:f4:72:aa:15:7d:0d:a7:a1:27:47:d3:3c:91:69:9a: 15:7a:80:8f:6b:e2:18:72:8f:08:ed:2f:da:44:12:67:66:8b: 2c:a3:e1:24:dc:25:53:cf:f8:63:8e:dd:9e:89:07:96:a0:1c: 7a:43:7f:9f:96:f2:02:fa:85:a3:5f:cc:ef:d6:17:12:ea:42: 6e:e7:2f:2b:72:18:4e:d8:b9:25:07:83:91:73:8b:af:a1:fd: a6:27:96:e5:0e:ed:62:92:2a:bf:2f:6a:a9:29:11:8f:cc:55: 09:3e:f2:9e -----BEGIN CERTIFICATE----- MIIFFjCCA/6gAwIBAgISAZks2XKlyu0c5I2cmZcDP3J5MA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKGZmMzE0OTI0NzNhNzhjNmZlOWY1MzlmOWZhN2QyMjUyNTYw YTJiN2UwHhcNMjUwOTA5MDUwMTEyWhcNMjUwOTEwMDUwMTEyWjAzMTEwLwYDVQQD Eyg1ZjM0MjllYTY4ZWE5YjlhMDY4Y2NiMTNlNDNkZmJmOWE0NmM0ZTU3MIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAuipWn/asbIrfcVfLHNXdMyGmopb7 bsOWmGF17vvwMd48pUWHk9ScVOCJU8Srv9rXCPj1/5tZwb4CJ/dbt5X7oNpk18fR 6geYmTQEy0LbsWv8eF7dlCOg7SyKfk0O7bqyIZyrQ4Usdlqh3+eeWDguiGI+yxWu 2mwI4IBg0Lun/Amk9XQF3fScMDZqt6YmupZ4WlTlssk3TgozWyu5ISU4PHXa7YH9 vRcAJe6ZUae/3GQAguuSV0N0CVLiFG3+4Se4CNsSgJlPwLFHJOSJYuAmd9adv3nb AhfsHFXxGDg1PVcEAocWIOTnAXn7CdQy/9a5IUIw/jg3NrRvUxnXfapq8wIDAQAB o4ICIjCCAh4wHQYDVR0OBBYEFF80Kepo6puaBozLE+Q9+/mkbE5XMB8GA1UdIwQY MBaAFP8xSSRzp4xv6fU5+fp9IlJWCit+MA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvX3pGSkpIT25qR19wOVRuNS1uMGlVbFlLSzM0LmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC9jMy8xYjQxMDUtMzQ3MS00NTkyLWJmMDct NzNmZDNiYzE5YWE3LzEvX3pGSkpIT25qR19wOVRuNS1uMGlVbFlLSzM0Lm1mdDCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC9jMy8xYjQxMDUtMzQ3MS00NTkyLWJmMDctNzNmZDNiYzE5YWE3 LzEvX3pGSkpIT25qR19wOVRuNS1uMGlVbFlLSzM0LmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAEKcTOjOX l+Jl/DmMcDVwC2WqHyGcFsKVHfeFW910nwjpcSOPDvohjhquscI9lH8isJKl03Cu +5G/stWXfNgYYSVfUBZXpp4/jOfqX4svC6SmpH2xZPkJRzWc1UXukGsQrIzwbALB 5s/iEQuS6yLvVI/0qJmEPJoeSGB2hhBCU/quFiIRDU9yReid/fO/EJ1v37ys9HKq FX0Np6EnR9M8kWmaFXqAj2viGHKPCO0v2kQSZ2aLLKPhJNwlU8/4Y47dnokHlqAc ekN/n5byAvqFo1/M79YXEupCbucvK3IYTti5JQeDkXOLr6H9pieW5Q7tYpIqvy9q qSkRj8xVCT7yng== -----END CERTIFICATE-----Generated at Tue Sep 9 10:33:49 2025 by rpki-client