$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/c4/11e5b3-43aa-4279-9441-7e8c6d4d9bef/1/_97EpGpubk-aktC6Lgs6tWWL4b0.mft File: _97EpGpubk-aktC6Lgs6tWWL4b0.mft (raw, json) Hash identifier: SyxG8SyokeJrurubnHR1b9MyOSE03chA1ZkzFmXoypg= Subject key identifier: 9D:04:6C:07:8A:9B:08:7A:F3:3C:75:4A:B0:B3:30:92:53:4E:99:A0 Authority key identifier: FF:DE:C4:A4:6A:6E:6E:4F:9A:92:D0:BA:2E:0B:3A:B5:65:8B:E1:BD Certificate issuer: /CN=ffdec4a46a6e6e4f9a92d0ba2e0b3ab5658be1bd Certificate serial: 01992A7CE04F86CEBB2A1B85132C6EC408D8 Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/_97EpGpubk-aktC6Lgs6tWWL4b0.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/c4/11e5b3-43aa-4279-9441-7e8c6d4d9bef/1/_97EpGpubk-aktC6Lgs6tWWL4b0.mft Manifest number: 1692 Signing time: Mon 08 Sep 2025 18:00:50 +0000 Manifest this update: Mon 08 Sep 2025 18:00:50 +0000 Manifest next update: Tue 09 Sep 2025 18:00:50 +0000 Files and hashes: 1: 0CDlVDamkSbqkLHC-z98yr-JJDQ.roa (hash: W5zGbhpRYk745cXlLi8+akIhnD6+B+lARGkbbVmNBkU=) 2: 9LGSNE38RZCTyouOtHVx3qVP6lw.roa (hash: ugV2YTVWDidN8y0vBVq2PfGkhQx7PuXVEwNoZCBbGX8=) 3: OsAkT1Bjc6Bx57ink5LVscASSVM.roa (hash: Me3jYRS4jKNnlOdyWwLlCaXNsCc57NzdmZ5lT79t3Rw=) 4: RmwlFKm2A6wCOU2tiPLTSzuhAA8.roa (hash: NB+w6tJSmFPHFd2FMxkqFpCOapIk+qQqzfmt3QzOsMk=) 5: UobB1JoTOzUGFpCCZFbxasjgqAA.roa (hash: ms0cbPIRl6WuE78I/a1I+geJkM+CYYhZiVIqQ6+fwVY=) 6: VuROyrWs92eKXOizp2Q-0fnpLR0.roa (hash: fMjWZ/dM7054cYWsnjZNa6zVf7FPSoCGvOyM76Sl6Mc=) 7: VxRGHdP__z9RHajqH60awAUqQgg.roa (hash: tIdE9ZmAuCmbV7t2it8DIWQnm6yvOgpE7cprrHK2On0=) 8: _97EpGpubk-aktC6Lgs6tWWL4b0.crl (hash: eQqoZXtxdd8iHePxi5nnHe7xTjvvMepYjuiotQD5wWc=) 9: pJnO9Ba6alCVKMIllyGL5_n-nHo.roa (hash: cF7/LpWh8txlnJKiWf+FQfbAzOZvclLDIIzD8uyNUD0=) 10: vWqmka3oaZQE1cXhvhKJIPN3ikY.roa (hash: wwmYNtR3Cqpxb6sHd4D0z140EddAwpyxzJ7dHxOqth4=) 11: zwTIjW4kVksFhIqqz0Hm86Td_eI.roa (hash: 4Gmw/YEt79d2ifSjcQjjCNUl4cViPsDbJFWDQ996oV4=) Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/c4/11e5b3-43aa-4279-9441-7e8c6d4d9bef/1/_97EpGpubk-aktC6Lgs6tWWL4b0.crl rsync://rpki.ripe.net/repository/DEFAULT/c4/11e5b3-43aa-4279-9441-7e8c6d4d9bef/1/_97EpGpubk-aktC6Lgs6tWWL4b0.mft rsync://rpki.ripe.net/repository/DEFAULT/_97EpGpubk-aktC6Lgs6tWWL4b0.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Tue 09 Sep 2025 18:00:50 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:99:2a:7c:e0:4f:86:ce:bb:2a:1b:85:13:2c:6e:c4:08:d8 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=ffdec4a46a6e6e4f9a92d0ba2e0b3ab5658be1bd Validity Not Before: Sep 8 18:00:50 2025 GMT Not After : Sep 9 18:00:50 2025 GMT Subject: CN=9d046c078a9b087af33c754ab0b33092534e99a0 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:bf:20:07:b4:9c:52:ca:ff:cd:c3:a6:5f:8d:e7: f0:89:ee:fb:62:de:25:e4:4c:e1:d7:66:26:15:66: df:83:ce:e4:ce:49:b0:f1:ca:24:ac:4f:25:ba:2a: 65:f8:fc:23:5c:c9:51:9b:49:ed:70:e4:99:48:2d: 9f:22:07:ce:fb:8d:73:07:2a:5c:11:2a:ed:2d:f9: cf:97:87:fa:4b:6e:9f:86:15:f3:f0:3f:6e:0e:b3: df:f2:d1:ce:dd:3f:c0:2c:62:8a:c9:1e:05:15:43: 4b:55:2e:02:f4:44:6e:a1:82:68:8f:ea:f1:00:90: 3c:35:e7:e8:a6:a0:40:00:ac:0c:f0:8f:73:6a:eb: 94:3b:7f:38:5d:30:00:1d:b2:a3:78:9e:03:37:bc: c9:98:12:0e:42:36:5c:d3:d1:0e:83:0e:7e:9c:55: cb:9c:97:e0:7a:8b:8e:3a:96:09:d0:f3:75:f3:e4: 5e:7d:db:8b:e0:56:5b:ca:68:8d:ba:45:b0:e5:2c: c1:c0:11:51:f6:27:84:e8:5f:87:65:72:9c:a5:7e: d2:15:f0:ea:38:e9:b1:1f:b8:7d:76:30:6d:26:cd: 6c:88:d9:b3:70:51:71:19:4a:4c:79:3c:4f:ad:e1: a2:59:a0:a1:68:70:78:3f:6d:08:6d:ff:6c:f1:fc: 63:37 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 9D:04:6C:07:8A:9B:08:7A:F3:3C:75:4A:B0:B3:30:92:53:4E:99:A0 X509v3 Authority Key Identifier: keyid:FF:DE:C4:A4:6A:6E:6E:4F:9A:92:D0:BA:2E:0B:3A:B5:65:8B:E1:BD X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/_97EpGpubk-aktC6Lgs6tWWL4b0.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/c4/11e5b3-43aa-4279-9441-7e8c6d4d9bef/1/_97EpGpubk-aktC6Lgs6tWWL4b0.mft X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/c4/11e5b3-43aa-4279-9441-7e8c6d4d9bef/1/_97EpGpubk-aktC6Lgs6tWWL4b0.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 9a:d2:07:f4:21:1a:55:7d:52:4c:79:ac:45:83:bf:1b:77:e1: 9a:8e:5a:91:4c:2c:48:f2:f5:84:a1:f1:2c:8b:1c:1c:7d:e1: 2d:fd:b7:bc:0b:68:ed:89:91:5d:6e:f9:13:fc:58:7f:80:3f: f2:5e:9d:66:d9:38:86:46:f6:5f:56:0d:26:8a:61:88:14:25: 1e:39:09:9b:03:e1:d5:05:bc:8d:92:8b:f6:47:60:65:56:a3: 7d:26:05:2b:cc:a7:90:13:d7:b9:5a:f0:c5:d6:cb:49:90:f9: f6:84:f8:88:2f:bb:b1:0b:9d:6b:bd:8b:eb:51:72:cb:f1:f1: 6d:53:2b:67:5c:55:78:dd:c7:95:ed:66:4a:6e:1b:00:04:ed: 5d:2b:79:6a:22:51:30:d7:f9:76:74:5a:08:26:bc:08:81:f4: e1:6c:cf:3a:cc:ef:43:2e:0f:12:49:32:d5:1d:51:7e:68:d8: 3b:d0:5b:fa:c4:77:01:fe:5f:f8:e6:ff:ae:72:b5:ca:b8:20: bc:ea:53:04:49:d5:df:07:77:a7:e7:e9:85:da:bc:6b:b6:19: f3:4f:53:a1:4a:de:c6:60:03:cb:10:55:c3:15:4f:78:91:cf: 94:4a:8f:b4:e6:11:53:59:31:ae:b1:f7:2d:16:42:94:83:d9: f2:30:f3:24 -----BEGIN CERTIFICATE----- MIIFFjCCA/6gAwIBAgISAZkqfOBPhs67KhuFEyxuxAjYMA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKGZmZGVjNGE0NmE2ZTZlNGY5YTkyZDBiYTJlMGIzYWI1NjU4 YmUxYmQwHhcNMjUwOTA4MTgwMDUwWhcNMjUwOTA5MTgwMDUwWjAzMTEwLwYDVQQD Eyg5ZDA0NmMwNzhhOWIwODdhZjMzYzc1NGFiMGIzMzA5MjUzNGU5OWEwMIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAvyAHtJxSyv/Nw6Zfjefwie77Yt4l 5Ezh12YmFWbfg87kzkmw8cokrE8luipl+PwjXMlRm0ntcOSZSC2fIgfO+41zBypc ESrtLfnPl4f6S26fhhXz8D9uDrPf8tHO3T/ALGKKyR4FFUNLVS4C9ERuoYJoj+rx AJA8NefopqBAAKwM8I9zauuUO384XTAAHbKjeJ4DN7zJmBIOQjZc09EOgw5+nFXL nJfgeouOOpYJ0PN18+RefduL4FZbymiNukWw5SzBwBFR9ieE6F+HZXKcpX7SFfDq OOmxH7h9djBtJs1siNmzcFFxGUpMeTxPreGiWaChaHB4P20Ibf9s8fxjNwIDAQAB o4ICIjCCAh4wHQYDVR0OBBYEFJ0EbAeKmwh68zx1SrCzMJJTTpmgMB8GA1UdIwQY MBaAFP/exKRqbm5PmpLQui4LOrVli+G9MA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvXzk3RXBHcHViay1ha3RDNkxnczZ0V1dMNGIwLmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC9jNC8xMWU1YjMtNDNhYS00Mjc5LTk0NDEt N2U4YzZkNGQ5YmVmLzEvXzk3RXBHcHViay1ha3RDNkxnczZ0V1dMNGIwLm1mdDCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC9jNC8xMWU1YjMtNDNhYS00Mjc5LTk0NDEtN2U4YzZkNGQ5YmVm LzEvXzk3RXBHcHViay1ha3RDNkxnczZ0V1dMNGIwLmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAmtIH9CEa VX1STHmsRYO/G3fhmo5akUwsSPL1hKHxLIscHH3hLf23vAto7YmRXW75E/xYf4A/ 8l6dZtk4hkb2X1YNJophiBQlHjkJmwPh1QW8jZKL9kdgZVajfSYFK8ynkBPXuVrw xdbLSZD59oT4iC+7sQuda72L61Fyy/HxbVMrZ1xVeN3Hle1mSm4bAATtXSt5aiJR MNf5dnRaCCa8CIH04WzPOszvQy4PEkky1R1RfmjYO9Bb+sR3Af5f+Ob/rnK1yrgg vOpTBEnV3wd3p+fphdq8a7YZ809ToUrexmADyxBVwxVPeJHPlEqPtOYRU1kxrrH3 LRZClIPZ8jDzJA== -----END CERTIFICATE-----Generated at Tue Sep 9 01:51:07 2025 by rpki-client