$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/c5/888869-7a65-415b-b68f-5484402ceb7a/1/sMIK4drMoxgVsnRwKSfBpanbx7M.mft File: sMIK4drMoxgVsnRwKSfBpanbx7M.mft (raw, json) Hash identifier: ixI2yQxP1H8TwttxUaWox/6bOE4JafqtCxK1OxpjmE8= Subject key identifier: 35:86:D6:2E:9C:19:49:A9:0E:40:14:67:3F:4B:8A:7D:B0:33:DD:1C Authority key identifier: B0:C2:0A:E1:DA:CC:A3:18:15:B2:74:70:29:27:C1:A5:A9:DB:C7:B3 Certificate issuer: /CN=b0c20ae1dacca31815b274702927c1a5a9dbc7b3 Certificate serial: 0199507806967A33E4D2DA8D114905746A56 Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/sMIK4drMoxgVsnRwKSfBpanbx7M.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/c5/888869-7a65-415b-b68f-5484402ceb7a/1/sMIK4drMoxgVsnRwKSfBpanbx7M.mft Manifest number: 169C Signing time: Tue 16 Sep 2025 03:01:07 +0000 Manifest this update: Tue 16 Sep 2025 03:01:07 +0000 Manifest next update: Wed 17 Sep 2025 03:01:07 +0000 Files and hashes: 1: BO-bzW2V5HfZnpDWCOZRREj0_aA.roa (hash: bBvM5GD33JW26g6UBHC38zwmrN/wxvFNIrA/ZVP1z3g=) 2: D2VP3boIbKOt_7fZmoGwBMd0j_E.roa (hash: 5B9i3Ekd388l3dq3yF+uoTeTOTbzf9g6nU3q4mHoYKI=) 3: KDntMwv7lfN57GwH3c-ooOZ7MV8.roa (hash: N8ZIBiU8gH7tSdeMv2oT8+5VHr8ZvOaPGXUGzn1qd6o=) 4: MKXE3l_kRrUK-SEa0SjlnZgrzOY.roa (hash: qB75ATBjq0bvGr3VuX9ZJkiNF1i/cky+GUiK1V7um9s=) 5: OMLGm3M8AukdVmECZgGAm5oBI6w.roa (hash: NhtCtzcMBYjPL2amj6HhHMrktNr+dPVzL27OzOSW9VY=) 6: QhEieVCa4VzXwRS2R-uT3VD69zA.roa (hash: g7EksG6Y5xUVpGTxJtSk1SiYEQY9x4uAiGIMcbCmQ/k=) 7: T_vGm-YR8rSAG_LKyG-LL0j3jZY.roa (hash: ctLCD3mPPm9ORV/MIVYXQC7GReMvIOdcov6IyRw8Un0=) 8: VT5Wd_pqOJ9dH5ke9coXfMElArk.roa (hash: fLcCO/2FWRaPE55k8VUjCjI94f4/oSwtLUtlY9+MVT8=) 9: ZwvgwSFitJnn0NI2TLMjAG1OYEI.roa (hash: 3EAQTTBdwC0en0ttbPcWmRtInqoUrBVPVbUH2J6E2Tg=) 10: i2Cr6PSWUcoNruWdbdR97Em0Dh4.roa (hash: kTy26coV3ftFQPHtpIaAlqr+Ns/2fmpdvjWPntGul4A=) 11: sMIK4drMoxgVsnRwKSfBpanbx7M.crl (hash: +d7KfuJFa2qihMKmxYGf3XM88AaBKuIEFKQ6u5tBIhs=) Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/c5/888869-7a65-415b-b68f-5484402ceb7a/1/sMIK4drMoxgVsnRwKSfBpanbx7M.crl rsync://rpki.ripe.net/repository/DEFAULT/c5/888869-7a65-415b-b68f-5484402ceb7a/1/sMIK4drMoxgVsnRwKSfBpanbx7M.mft rsync://rpki.ripe.net/repository/DEFAULT/sMIK4drMoxgVsnRwKSfBpanbx7M.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Tue 16 Sep 2025 22:00:15 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:99:50:78:06:96:7a:33:e4:d2:da:8d:11:49:05:74:6a:56 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=b0c20ae1dacca31815b274702927c1a5a9dbc7b3 Validity Not Before: Sep 16 03:01:07 2025 GMT Not After : Sep 17 03:01:07 2025 GMT Subject: CN=3586d62e9c1949a90e4014673f4b8a7db033dd1c Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:b8:9e:9a:7d:f9:33:f9:28:90:b7:e0:54:9c:ca: d7:4b:20:09:5b:d2:b0:f7:c5:e3:bf:ac:b1:d2:55: 62:8c:73:e8:c0:ec:f1:72:47:84:d1:10:ae:2f:0e: 11:22:08:53:4a:46:8d:2a:bf:f9:cf:94:a6:c9:6c: 42:81:d6:ba:07:d0:aa:1d:0d:d8:46:35:22:fe:ba: ff:0b:cf:65:3d:22:c0:1e:46:6f:28:db:3d:2e:88: 49:bd:e3:14:c4:a7:45:56:1e:c8:c4:77:92:31:09: cd:ef:eb:2e:75:3a:44:79:f6:94:4f:f7:d7:04:8d: dc:8e:bc:d0:ed:db:f3:7e:d1:40:61:e8:8d:4c:0c: bf:2d:55:cc:1a:f5:38:9d:02:07:b9:aa:88:50:70: fc:28:88:19:a6:e2:a8:f6:4b:35:07:43:1a:35:f4: ae:85:49:7c:ac:63:c8:db:a9:62:8a:ee:bf:fe:1f: de:98:7d:f1:d8:7e:15:62:b9:06:8e:75:6a:a7:8a: 61:47:63:29:49:ee:db:c2:2b:dc:99:18:d5:33:d2: 1d:3b:53:99:42:86:b5:82:76:2d:25:cc:f4:ea:b0: e1:f9:99:d3:52:4c:82:08:fe:38:3b:f1:ed:20:00: 8f:ad:1e:d0:27:05:67:2e:a4:44:31:ca:1d:b0:b6: cb:29 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 35:86:D6:2E:9C:19:49:A9:0E:40:14:67:3F:4B:8A:7D:B0:33:DD:1C X509v3 Authority Key Identifier: keyid:B0:C2:0A:E1:DA:CC:A3:18:15:B2:74:70:29:27:C1:A5:A9:DB:C7:B3 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/sMIK4drMoxgVsnRwKSfBpanbx7M.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/c5/888869-7a65-415b-b68f-5484402ceb7a/1/sMIK4drMoxgVsnRwKSfBpanbx7M.mft X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/c5/888869-7a65-415b-b68f-5484402ceb7a/1/sMIK4drMoxgVsnRwKSfBpanbx7M.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 30:28:55:d7:61:b3:c8:43:12:ae:1d:e8:71:f1:ca:e5:3d:da: 5b:ff:80:6a:f5:0f:b4:f8:28:15:6e:d3:5d:e8:0d:01:80:9d: 77:f4:34:aa:0c:a1:dd:8c:6a:f0:a3:cd:32:f9:a8:1b:6c:2d: b1:14:9d:3d:b4:4e:1b:bd:bc:fe:f1:8d:cb:4e:65:2e:1c:50: f3:9d:cd:ad:44:55:40:c2:98:a6:c6:bf:9c:74:2f:f3:d1:e8: 14:c1:4e:3b:42:24:8f:05:50:49:d9:3e:e8:18:d8:87:25:04: 61:28:bc:10:b0:ff:d7:03:10:85:22:83:ac:5f:f4:16:38:fa: 1a:82:b3:b1:9b:ad:5f:12:d1:0a:0f:e9:77:ad:29:9d:dc:a0: 35:43:22:4a:31:df:94:ad:b3:56:7e:e9:e0:48:b4:e4:5b:0c: 27:e7:66:a5:26:dd:05:78:aa:7a:45:5e:40:65:05:08:3d:48: d8:ba:38:9c:55:c9:dc:af:10:00:14:8a:c9:24:e9:d4:44:ad: 85:9e:7e:8b:bb:c8:91:85:bd:b9:d9:ac:cd:c6:f5:32:fb:94: d4:bb:60:06:65:fd:05:44:88:2b:a8:44:5c:ba:42:6d:b1:41: 10:45:64:ae:aa:4c:85:d5:42:00:5c:52:64:3e:74:0c:0f:87: 70:0a:19:63 -----BEGIN CERTIFICATE----- MIIFFjCCA/6gAwIBAgISAZlQeAaWejPk0tqNEUkFdGpWMA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKGIwYzIwYWUxZGFjY2EzMTgxNWIyNzQ3MDI5MjdjMWE1YTlk YmM3YjMwHhcNMjUwOTE2MDMwMTA3WhcNMjUwOTE3MDMwMTA3WjAzMTEwLwYDVQQD EygzNTg2ZDYyZTljMTk0OWE5MGU0MDE0NjczZjRiOGE3ZGIwMzNkZDFjMIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAuJ6affkz+SiQt+BUnMrXSyAJW9Kw 98Xjv6yx0lVijHPowOzxckeE0RCuLw4RIghTSkaNKr/5z5SmyWxCgda6B9CqHQ3Y RjUi/rr/C89lPSLAHkZvKNs9LohJveMUxKdFVh7IxHeSMQnN7+sudTpEefaUT/fX BI3cjrzQ7dvzftFAYeiNTAy/LVXMGvU4nQIHuaqIUHD8KIgZpuKo9ks1B0MaNfSu hUl8rGPI26liiu6//h/emH3x2H4VYrkGjnVqp4phR2MpSe7bwivcmRjVM9IdO1OZ Qoa1gnYtJcz06rDh+ZnTUkyCCP44O/HtIACPrR7QJwVnLqREMcodsLbLKQIDAQAB o4ICIjCCAh4wHQYDVR0OBBYEFDWG1i6cGUmpDkAUZz9Lin2wM90cMB8GA1UdIwQY MBaAFLDCCuHazKMYFbJ0cCknwaWp28ezMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvc01JSzRkck1veGdWc25Sd0tTZkJwYW5ieDdNLmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC9jNS84ODg4NjktN2E2NS00MTViLWI2OGYt NTQ4NDQwMmNlYjdhLzEvc01JSzRkck1veGdWc25Sd0tTZkJwYW5ieDdNLm1mdDCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC9jNS84ODg4NjktN2E2NS00MTViLWI2OGYtNTQ4NDQwMmNlYjdh LzEvc01JSzRkck1veGdWc25Sd0tTZkJwYW5ieDdNLmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAMChV12Gz yEMSrh3ocfHK5T3aW/+AavUPtPgoFW7TXegNAYCdd/Q0qgyh3Yxq8KPNMvmoG2wt sRSdPbROG728/vGNy05lLhxQ853NrURVQMKYpsa/nHQv89HoFMFOO0IkjwVQSdk+ 6BjYhyUEYSi8ELD/1wMQhSKDrF/0Fjj6GoKzsZutXxLRCg/pd60pndygNUMiSjHf lK2zVn7p4Ei05FsMJ+dmpSbdBXiqekVeQGUFCD1I2Lo4nFXJ3K8QABSKySTp1ESt hZ5+i7vIkYW9udmszcb1MvuU1LtgBmX9BUSIK6hEXLpCbbFBEEVkrqpMhdVCAFxS ZD50DA+HcAoZYw== -----END CERTIFICATE-----Generated at Tue Sep 16 05:55:01 2025 by rpki-client