$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/c5/9ab42a-df92-4e42-9e33-5c5892afa487/1/8E6yBPNYAEeIIk4vsY5NXnS-v40.mft File: 8E6yBPNYAEeIIk4vsY5NXnS-v40.mft (raw, json) Hash identifier: IaFGp8r/rSmUkG/anUeaqH1jduA2wOAfIcF0Yuv8tx8= Subject key identifier: 09:19:50:91:8D:71:5A:28:6C:92:60:9A:1B:22:AE:96:EF:5A:9D:D8 Authority key identifier: F0:4E:B2:04:F3:58:00:47:88:22:4E:2F:B1:8E:4D:5E:74:BE:BF:8D Certificate issuer: /CN=f04eb204f358004788224e2fb18e4d5e74bebf8d Certificate serial: 019927E9798EB407DF9CB4FFEE2A935D4166 Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/8E6yBPNYAEeIIk4vsY5NXnS-v40.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/c5/9ab42a-df92-4e42-9e33-5c5892afa487/1/8E6yBPNYAEeIIk4vsY5NXnS-v40.mft Manifest number: 1098 Signing time: Mon 08 Sep 2025 06:00:36 +0000 Manifest this update: Mon 08 Sep 2025 06:00:36 +0000 Manifest next update: Tue 09 Sep 2025 06:00:36 +0000 Files and hashes: 1: 1gtsCJyHdZ_mz1Vmc6aYSOZRTug.roa (hash: i5FmepCDxpYMWJtIWumi8I2WhRPEkV925D+zrSFUKqc=) 2: 8E6yBPNYAEeIIk4vsY5NXnS-v40.crl (hash: 52CcYpItctU+ebSaCwwIrX3exR2xtHz0XI3goCV+1g0=) 3: AFN8OqvwZcsViNN-78O6BvKElME.roa (hash: gpOsJUC88/6LJdG6QKOWEGeO9P8/YN9o1I8OET+li9E=) 4: HzrOiNg5IGbvxaY6EJtaFTiPwJc.roa (hash: YVHrJ9qFMIVBjiboinqQXWeAb+UlfN0QhYG5EqTl3JU=) 5: KuzmOknbrD4Lg71OoDCO-y0GoDQ.roa (hash: L4TpWALjC8fwxZDKVNiQiJm1WAVC/DpX7t4BNMww1vk=) 6: N-Bn6UoZzfA4_e9vqjwupkidrwM.roa (hash: P0ucGjyfHx1AsSd/Hp9hPmA5fgW6WVVitbxsp2xrVOM=) 7: Xw6d5Q0Ua1XRZl5MjugABbqCL-g.roa (hash: 7lcJjOAWe6HvAJ8ku7/K4ZXcDrrbdwoOF4w1DXALzIA=) 8: hFAl1HVJl_9l3iGKDXy7Q3YLL-4.roa (hash: t3lebss2cDykApymCPDX/VFxLKKQQSAwSa+9uLLWAvg=) 9: ij6-YE2XVidboU68JMPVKequ6tg.roa (hash: YEMop9i5KBqo0Emc5LLaJ2ZkaUOlrtnZjcsi8p8jPuQ=) 10: lmLPjrfNDPS9XohB9eEXKDTvTVw.roa (hash: YUDeNZCjz7C+nv1yj/KNPiCOaWxteb6jP1PE6tH/qfc=) 11: vir9lXd95VlX33FtFKeYsF-pV7c.roa (hash: qWwJG4kSEBMq0oRm7MvhT+tJgjjEqP9pDam2i3CMe+g=) 12: vwnatcxNwSZQjN_EAgtCA6gLjGQ.roa (hash: is+QjkNRgmAAQFm1WLdb+VI9EY3XXeS9tjv/htKBkks=) 13: wOKO5BfevHhq6oErWALub8pu8xU.roa (hash: JFoG8SyIRYLSlAyJTBoEWjYzWkPzFQdNMJLWFlUmxRU=) Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/c5/9ab42a-df92-4e42-9e33-5c5892afa487/1/8E6yBPNYAEeIIk4vsY5NXnS-v40.crl rsync://rpki.ripe.net/repository/DEFAULT/c5/9ab42a-df92-4e42-9e33-5c5892afa487/1/8E6yBPNYAEeIIk4vsY5NXnS-v40.mft rsync://rpki.ripe.net/repository/DEFAULT/8E6yBPNYAEeIIk4vsY5NXnS-v40.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Tue 09 Sep 2025 01:00:23 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:99:27:e9:79:8e:b4:07:df:9c:b4:ff:ee:2a:93:5d:41:66 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=f04eb204f358004788224e2fb18e4d5e74bebf8d Validity Not Before: Sep 8 06:00:36 2025 GMT Not After : Sep 9 06:00:36 2025 GMT Subject: CN=091950918d715a286c92609a1b22ae96ef5a9dd8 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:c8:07:7a:9e:c6:ae:9c:ba:c6:81:6e:6a:4e:df: cd:2e:72:df:2d:12:6c:83:a3:a7:0e:77:18:9d:76: b3:05:5d:2c:7e:5a:f5:f4:57:c9:2c:46:5f:2e:45: 8a:fa:b3:dc:0d:a5:77:0e:6f:b9:8f:b0:2e:50:1d: b2:d5:78:c5:cc:72:e1:14:23:f8:c5:55:ff:17:8b: 68:23:44:63:67:36:94:7a:d3:00:1d:7a:9e:9d:18: cf:de:3b:26:a8:db:20:e6:58:d9:2c:10:44:c3:40: 2f:c8:58:4c:a9:39:8e:50:2a:54:78:ea:6a:e8:b8: 28:03:a7:52:17:8e:da:87:cf:91:e1:d2:2e:e3:0c: f0:fc:c7:3f:a5:73:42:fc:81:16:de:06:50:45:9a: d2:7b:f5:7d:77:c7:66:20:fb:64:f2:49:62:13:51: 82:11:cd:40:6b:d3:bd:09:42:8f:32:1d:8a:8e:f2: b5:a0:29:4d:41:5e:7f:e0:bc:39:24:6a:13:2e:af: ad:30:fb:0a:0f:d2:c3:8b:3a:48:c9:98:0d:90:8c: fb:b4:1a:ad:5f:9b:5d:bf:74:74:8f:e2:fd:10:bf: 4a:ea:d8:51:ab:96:db:22:a1:5a:34:f2:e3:fc:6e: 41:c6:6b:c4:83:f6:38:eb:31:75:1c:c1:c6:21:94: d9:bb Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 09:19:50:91:8D:71:5A:28:6C:92:60:9A:1B:22:AE:96:EF:5A:9D:D8 X509v3 Authority Key Identifier: keyid:F0:4E:B2:04:F3:58:00:47:88:22:4E:2F:B1:8E:4D:5E:74:BE:BF:8D X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/8E6yBPNYAEeIIk4vsY5NXnS-v40.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/c5/9ab42a-df92-4e42-9e33-5c5892afa487/1/8E6yBPNYAEeIIk4vsY5NXnS-v40.mft X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/c5/9ab42a-df92-4e42-9e33-5c5892afa487/1/8E6yBPNYAEeIIk4vsY5NXnS-v40.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 2d:c7:bd:5f:c2:9f:19:52:be:5c:7e:31:e3:60:5e:1d:48:33: d3:e7:ee:e3:43:4d:a8:61:ae:e3:bf:92:92:d3:e1:c5:b0:7a: 16:f2:44:82:83:be:ae:07:b4:67:00:6e:26:e7:38:db:85:23: a5:01:08:9b:94:48:a3:cb:85:59:dc:c6:7f:8e:dc:c9:a2:ce: 02:03:46:08:20:5d:60:e7:10:39:01:43:21:c4:ce:a4:8a:48: 01:c9:27:64:47:f2:06:9e:46:cb:ff:01:65:87:2a:c6:ff:89: 3d:3f:b0:6d:07:b5:c9:c9:f1:63:d1:13:9d:cc:8c:28:6d:e1: 54:58:da:23:22:7a:0a:38:c1:f5:fb:f1:ed:0b:6d:78:54:1b: f6:ab:bd:69:aa:b4:e9:49:9e:17:47:c6:6a:c9:95:5e:ff:b1: d8:31:7c:df:7b:09:0d:83:b7:89:4a:1a:d3:cc:d8:52:a0:3b: 98:33:fb:b8:81:f5:f7:d8:35:ec:e3:bc:74:fd:e7:7b:67:cc: 1e:be:ef:97:ae:aa:9b:b8:f5:9f:13:73:9b:04:16:6b:46:78: c7:34:a7:58:bf:75:64:e0:b4:c0:55:59:bd:53:3f:22:74:f7: f0:70:ee:e7:2f:b1:ff:69:de:98:52:58:22:88:fb:69:99:d4: 4d:14:5c:f3 -----BEGIN CERTIFICATE----- MIIFFjCCA/6gAwIBAgISAZkn6XmOtAffnLT/7iqTXUFmMA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKGYwNGViMjA0ZjM1ODAwNDc4ODIyNGUyZmIxOGU0ZDVlNzRi ZWJmOGQwHhcNMjUwOTA4MDYwMDM2WhcNMjUwOTA5MDYwMDM2WjAzMTEwLwYDVQQD EygwOTE5NTA5MThkNzE1YTI4NmM5MjYwOWExYjIyYWU5NmVmNWE5ZGQ4MIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAyAd6nsaunLrGgW5qTt/NLnLfLRJs g6OnDncYnXazBV0sflr19FfJLEZfLkWK+rPcDaV3Dm+5j7AuUB2y1XjFzHLhFCP4 xVX/F4toI0RjZzaUetMAHXqenRjP3jsmqNsg5ljZLBBEw0AvyFhMqTmOUCpUeOpq 6LgoA6dSF47ah8+R4dIu4wzw/Mc/pXNC/IEW3gZQRZrSe/V9d8dmIPtk8kliE1GC Ec1Aa9O9CUKPMh2KjvK1oClNQV5/4Lw5JGoTLq+tMPsKD9LDizpIyZgNkIz7tBqt X5tdv3R0j+L9EL9K6thRq5bbIqFaNPLj/G5BxmvEg/Y46zF1HMHGIZTZuwIDAQAB o4ICIjCCAh4wHQYDVR0OBBYEFAkZUJGNcVoobJJgmhsirpbvWp3YMB8GA1UdIwQY MBaAFPBOsgTzWABHiCJOL7GOTV50vr+NMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvOEU2eUJQTllBRWVJSWs0dnNZNU5YblMtdjQwLmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC9jNS85YWI0MmEtZGY5Mi00ZTQyLTllMzMt NWM1ODkyYWZhNDg3LzEvOEU2eUJQTllBRWVJSWs0dnNZNU5YblMtdjQwLm1mdDCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC9jNS85YWI0MmEtZGY5Mi00ZTQyLTllMzMtNWM1ODkyYWZhNDg3 LzEvOEU2eUJQTllBRWVJSWs0dnNZNU5YblMtdjQwLmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEALce9X8Kf GVK+XH4x42BeHUgz0+fu40NNqGGu47+SktPhxbB6FvJEgoO+rge0ZwBuJuc424Uj pQEIm5RIo8uFWdzGf47cyaLOAgNGCCBdYOcQOQFDIcTOpIpIAcknZEfyBp5Gy/8B ZYcqxv+JPT+wbQe1ycnxY9ETncyMKG3hVFjaIyJ6CjjB9fvx7QtteFQb9qu9aaq0 6UmeF0fGasmVXv+x2DF833sJDYO3iUoa08zYUqA7mDP7uIH199g17OO8dP3ne2fM Hr7vl66qm7j1nxNzmwQWa0Z4xzSnWL91ZOC0wFVZvVM/InT38HDu5y+x/2nemFJY Ioj7aZnUTRRc8w== -----END CERTIFICATE-----Generated at Mon Sep 8 08:35:31 2025 by rpki-client