$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/c7/29e166-98d2-49f2-8497-0503749adea0/1/RotZLzEQvGw1JJqCcaDawamssM4.mft File: RotZLzEQvGw1JJqCcaDawamssM4.mft (raw, json) Hash identifier: zp6bbsWGmAkkb494pr2UVPwUTNMKcvPUg8F034CX83A= Subject key identifier: 25:A9:DD:E4:B3:9E:7B:38:FF:11:DC:92:B8:EB:2A:27:FF:19:01:72 Authority key identifier: 46:8B:59:2F:31:10:BC:6C:35:24:9A:82:71:A0:DA:C1:A9:AC:B0:CE Certificate issuer: /CN=468b592f3110bc6c35249a8271a0dac1a9acb0ce Certificate serial: 01994F6559F0D6873BF57045CFA76091DFA1 Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/RotZLzEQvGw1JJqCcaDawamssM4.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/c7/29e166-98d2-49f2-8497-0503749adea0/1/RotZLzEQvGw1JJqCcaDawamssM4.mft Manifest number: 0697 Signing time: Mon 15 Sep 2025 22:01:05 +0000 Manifest this update: Mon 15 Sep 2025 22:01:05 +0000 Manifest next update: Tue 16 Sep 2025 22:01:05 +0000 Files and hashes: 1: 4PdFFqbPgnyAF8OAZU59EP79EQE.roa (hash: 0N0pRYIfSwp4rQqEao9ImOBW5Z4au+nqt0SGDhOprnI=) 2: 8u1Ww9yNVHCXoKy959EsUaU71zs.roa (hash: MCjwWNvinwMVi61YdY3QarB5BMMcy4gUuYfqYD2T3PI=) 3: MmkRluHTTNv9acWxYHJ3_GpMc5Q.roa (hash: V0Un6MJpun4HqmbH7gvdiyIo+DrhsdEBvML0fOcMAjk=) 4: RotZLzEQvGw1JJqCcaDawamssM4.crl (hash: JSd7/aq2orp+wPNXOTZkdkD01Veuvnp+RaRMAyDp4Fw=) 5: _vYyrixRE-yXYNd95EagmmedMZs.roa (hash: Nq9E9fzlDdc1TerNy7pW2Y+cp+tsEL9ANsKsoDQ0Pwo=) 6: bvgsPr3D5PPxL6J89BfI0hjp6nU.roa (hash: gQ8pHX8IE1KeaNe50ukz0WLLfO6NzXHlCO7loLPh0Ow=) 7: e6BOh4A7Z0EqXS_Z7v985a00_NI.roa (hash: EqH9IVqgjmT9i4a41FluNoDodNsuWZemaPP3A4ZtRNU=) 8: elD2CPARB_SCiElYBqX86L528iA.roa (hash: 4GpojDoTFDR9/As1unQ2wQcCWk8x0pykSLzc87gKTZw=) 9: i1oSM0zm6FdsD8GW2rr18ZJYU9c.roa (hash: vhtU0Gjcgqwk2dDqzgcdqq71xJAqWywoPwJaRLlLExA=) 10: moar5P9-vHm1h7dW1fwgc72NFhw.roa (hash: JbVrT9GvQCxgYaVUxgeC2lZytQA7NzFvIW4W5mDjY3A=) 11: wpO2gWHd7fIiJY2UmwBghuKU8Pk.roa (hash: eNcYuQe4vVrI0lLxGnwWNPY5OwCaWdtNSK5bPAl0Ug8=) Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/c7/29e166-98d2-49f2-8497-0503749adea0/1/RotZLzEQvGw1JJqCcaDawamssM4.crl rsync://rpki.ripe.net/repository/DEFAULT/c7/29e166-98d2-49f2-8497-0503749adea0/1/RotZLzEQvGw1JJqCcaDawamssM4.mft rsync://rpki.ripe.net/repository/DEFAULT/RotZLzEQvGw1JJqCcaDawamssM4.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Tue 16 Sep 2025 22:00:15 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:99:4f:65:59:f0:d6:87:3b:f5:70:45:cf:a7:60:91:df:a1 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=468b592f3110bc6c35249a8271a0dac1a9acb0ce Validity Not Before: Sep 15 22:01:05 2025 GMT Not After : Sep 16 22:01:05 2025 GMT Subject: CN=25a9dde4b39e7b38ff11dc92b8eb2a27ff190172 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:bc:7c:f9:a5:0d:67:42:35:11:95:cb:ba:32:85: 90:32:e8:29:a9:16:ce:41:4b:48:7e:7d:3c:b3:93: f1:1b:c2:ee:bb:c8:ac:e1:50:6a:75:20:7b:3b:b7: 8e:cd:51:28:46:80:c8:4e:72:2e:1f:d2:65:35:71: 49:b5:d4:0c:eb:68:3c:f5:56:a5:29:68:23:51:7b: 78:00:94:55:87:81:de:f6:cb:77:94:eb:d4:8b:a5: a0:fd:16:da:81:f2:25:ff:65:a1:90:31:7f:5c:74: 0c:6a:11:bc:f8:18:b4:e6:36:d0:b3:b0:6e:3d:34: 00:38:92:35:12:9b:1b:60:64:c4:c3:6f:21:d3:06: 76:69:a7:23:ea:1d:8c:3a:c7:cf:a9:01:29:df:ad: 39:5b:2e:dc:d5:4b:e4:f3:b3:03:b0:3f:ce:35:37: 45:1e:68:4b:53:82:2e:f6:8b:91:33:70:ec:d5:f1: 41:c3:9c:bf:94:d4:12:56:e1:fd:6c:92:11:e0:f1: 76:f8:22:e0:26:73:30:25:dd:8b:d1:5a:14:9d:8b: ce:c6:02:3c:82:5d:56:46:2e:a1:96:c0:d5:41:f2: a1:03:34:22:da:d2:d1:ab:31:73:bd:30:b6:1c:13: 30:76:06:48:d1:60:6c:95:3b:73:5f:4d:72:28:c0: 99:1b Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 25:A9:DD:E4:B3:9E:7B:38:FF:11:DC:92:B8:EB:2A:27:FF:19:01:72 X509v3 Authority Key Identifier: keyid:46:8B:59:2F:31:10:BC:6C:35:24:9A:82:71:A0:DA:C1:A9:AC:B0:CE X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/RotZLzEQvGw1JJqCcaDawamssM4.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/c7/29e166-98d2-49f2-8497-0503749adea0/1/RotZLzEQvGw1JJqCcaDawamssM4.mft X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/c7/29e166-98d2-49f2-8497-0503749adea0/1/RotZLzEQvGw1JJqCcaDawamssM4.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 72:ea:c3:09:c9:b3:e3:ed:1e:1d:21:ea:15:be:f6:58:50:a8: 85:d7:a7:a0:04:e4:b1:1f:d5:56:ef:4f:58:d9:a0:15:f8:ba: 87:9c:00:5d:48:e3:22:e6:90:4a:8d:d4:23:d7:98:d9:4c:1a: be:cb:b1:40:cb:b7:af:59:5d:ef:83:34:86:7f:3f:33:2b:7f: 22:d4:71:1d:93:54:52:29:b6:19:6b:69:03:c9:e0:8b:7d:61: 11:c0:1e:07:31:8f:05:8a:6c:c0:d0:0c:ac:e6:64:b7:89:26: 78:36:71:ad:ca:ac:ad:68:84:07:a5:26:a9:cf:8a:83:e9:e6: 89:5f:a2:4e:f1:2a:80:13:28:ba:06:fe:90:6e:3d:31:15:35: fd:9c:8b:39:b6:5f:09:d5:6d:09:4c:87:ee:36:4f:c6:36:b7: 1f:bc:68:3d:4a:d7:1c:bb:ef:39:c4:fd:0f:8a:fa:c9:5b:d3: 75:4a:bd:55:c5:79:a5:68:a0:6d:8f:92:fb:12:a0:e6:cf:7d: 97:86:57:cb:fa:45:df:b4:e6:ee:57:bb:75:d9:ad:77:d3:0a: 0a:8b:29:03:f8:95:65:81:17:2a:2e:62:2d:cb:98:aa:9d:da: e0:0b:3f:26:89:39:7a:46:f4:13:7c:48:4b:a1:03:71:8d:8f: e7:bb:da:70 -----BEGIN CERTIFICATE----- MIIFFjCCA/6gAwIBAgISAZlPZVnw1oc79XBFz6dgkd+hMA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKDQ2OGI1OTJmMzExMGJjNmMzNTI0OWE4MjcxYTBkYWMxYTlh Y2IwY2UwHhcNMjUwOTE1MjIwMTA1WhcNMjUwOTE2MjIwMTA1WjAzMTEwLwYDVQQD EygyNWE5ZGRlNGIzOWU3YjM4ZmYxMWRjOTJiOGViMmEyN2ZmMTkwMTcyMIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAvHz5pQ1nQjURlcu6MoWQMugpqRbO QUtIfn08s5PxG8Luu8is4VBqdSB7O7eOzVEoRoDITnIuH9JlNXFJtdQM62g89Val KWgjUXt4AJRVh4He9st3lOvUi6Wg/RbagfIl/2WhkDF/XHQMahG8+Bi05jbQs7Bu PTQAOJI1EpsbYGTEw28h0wZ2aacj6h2MOsfPqQEp3605Wy7c1Uvk87MDsD/ONTdF HmhLU4Iu9ouRM3Ds1fFBw5y/lNQSVuH9bJIR4PF2+CLgJnMwJd2L0VoUnYvOxgI8 gl1WRi6hlsDVQfKhAzQi2tLRqzFzvTC2HBMwdgZI0WBslTtzX01yKMCZGwIDAQAB o4ICIjCCAh4wHQYDVR0OBBYEFCWp3eSznns4/xHckrjrKif/GQFyMB8GA1UdIwQY MBaAFEaLWS8xELxsNSSagnGg2sGprLDOMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvUm90Wkx6RVF2R3cxSkpxQ2NhRGF3YW1zc000LmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC9jNy8yOWUxNjYtOThkMi00OWYyLTg0OTct MDUwMzc0OWFkZWEwLzEvUm90Wkx6RVF2R3cxSkpxQ2NhRGF3YW1zc000Lm1mdDCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC9jNy8yOWUxNjYtOThkMi00OWYyLTg0OTctMDUwMzc0OWFkZWEw LzEvUm90Wkx6RVF2R3cxSkpxQ2NhRGF3YW1zc000LmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAcurDCcmz 4+0eHSHqFb72WFCohdenoATksR/VVu9PWNmgFfi6h5wAXUjjIuaQSo3UI9eY2Uwa vsuxQMu3r1ld74M0hn8/Myt/ItRxHZNUUim2GWtpA8ngi31hEcAeBzGPBYpswNAM rOZkt4kmeDZxrcqsrWiEB6Umqc+Kg+nmiV+iTvEqgBMougb+kG49MRU1/ZyLObZf CdVtCUyH7jZPxja3H7xoPUrXHLvvOcT9D4r6yVvTdUq9VcV5pWigbY+S+xKg5s99 l4ZXy/pF37Tm7le7ddmtd9MKCospA/iVZYEXKi5iLcuYqp3a4As/Jok5ekb0E3xI S6EDcY2P57vacA== -----END CERTIFICATE-----Generated at Tue Sep 16 07:44:12 2025 by rpki-client