$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/c9/40498e-d1c0-484c-abcb-61e7f40d5dd6/1/rr85Ti8bJRyI2YiocWEIRYB4bvU.mft File: rr85Ti8bJRyI2YiocWEIRYB4bvU.mft (raw, json) Hash identifier: aP9H1v2zm6SxWc/2qDd83UkocM3acFV80owB8Bm4xLE= Subject key identifier: 74:A0:F2:84:CA:EA:82:78:33:63:F6:0B:94:3A:6B:59:BE:C0:E2:BF Authority key identifier: AE:BF:39:4E:2F:1B:25:1C:88:D9:88:A8:71:61:08:45:80:78:6E:F5 Certificate issuer: /CN=aebf394e2f1b251c88d988a87161084580786ef5 Certificate serial: 01995679DE162C2855EFB84D813DE62DD0B1 Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/rr85Ti8bJRyI2YiocWEIRYB4bvU.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/c9/40498e-d1c0-484c-abcb-61e7f40d5dd6/1/rr85Ti8bJRyI2YiocWEIRYB4bvU.mft Manifest number: 16A3 Signing time: Wed 17 Sep 2025 07:00:51 +0000 Manifest this update: Wed 17 Sep 2025 07:00:51 +0000 Manifest next update: Thu 18 Sep 2025 07:00:51 +0000 Files and hashes: 1: 0M_CHtTZz2ksD2BrxQYB5GYr6Qs.roa (hash: pjePI9MMIzsxZCozr1MX0ua7tggMW3H280y5yB3P7S0=) 2: 1-_mCNfP9_HNiBcEsvWHOFnGkC9I.roa (hash: JsQNy89vRBMXhfgHBZLMyPK1KVQmDn747eH7PkqTbv4=) 3: 499vYtwuw8upiAA2ubHtry-MPMw.roa (hash: Z3mdQWlNWDCy7MpQvjVwxOFHXRgVUsKCd9CYyZydkdQ=) 4: BV9MkYw-noIEhqphKumJe_rAYPw.roa (hash: cTycQR7uMvIZ+ka9U/Z707XPur1pq5RdGRaj9s/WBEk=) 5: C9bq6HqiO8wvPt8Ohvw7Ya0CzfI.roa (hash: eBedAMyLvvyEc8yS2VDwWUUS44f1pIhLP9yn06vWvAA=) 6: L3ZGNHnhgVbtJA6v9_KfCLPdQu4.roa (hash: tRfv/CcITA5fhGSfuor8bEI1B/6QYSwrTAH88Vxz5+8=) 7: c_qSQSef9yQq7ko-zsOrz05POQI.roa (hash: FNYiHqlJ6193udyi9UzOaM0voKaXuvqgwAhp2rGz6i4=) 8: imE36QLRTMX_BQ-hGxHCq-HzUSs.roa (hash: 9oBmGg8MmifOi5UePbS9lDJePGL5vAfP7BimBla3w98=) 9: lmrSRQ5ihg55QvYqat1AjaV_GvQ.roa (hash: hnfw4d4vCZD3abd8/WtjTv2gdPGfcl5xx0Mpy2oIhPc=) 10: rq3_2EMmh0cv5ivlO8JPPUeogQc.roa (hash: 9kTdzZUfT/wSfRhG2PTu31/f9X4NTLfSEK/53blCYJ4=) 11: rr85Ti8bJRyI2YiocWEIRYB4bvU.crl (hash: x6pvW8ZYqi63ceJKGmhOvLJGEK2kf9WSpX2jj4Vhfp0=) 12: uFaCHWPgxrsotozK3-PvWIlEI14.roa (hash: E71w1Kj/9g7CI68LBGPMUUdmv1Dhxwi441Gs522xPmQ=) Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/c9/40498e-d1c0-484c-abcb-61e7f40d5dd6/1/rr85Ti8bJRyI2YiocWEIRYB4bvU.crl rsync://rpki.ripe.net/repository/DEFAULT/c9/40498e-d1c0-484c-abcb-61e7f40d5dd6/1/rr85Ti8bJRyI2YiocWEIRYB4bvU.mft rsync://rpki.ripe.net/repository/DEFAULT/rr85Ti8bJRyI2YiocWEIRYB4bvU.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Thu 18 Sep 2025 07:00:15 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:99:56:79:de:16:2c:28:55:ef:b8:4d:81:3d:e6:2d:d0:b1 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=aebf394e2f1b251c88d988a87161084580786ef5 Validity Not Before: Sep 17 07:00:51 2025 GMT Not After : Sep 18 07:00:51 2025 GMT Subject: CN=74a0f284caea82783363f60b943a6b59bec0e2bf Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:93:b5:0a:f0:4d:a5:28:3b:d9:76:40:2a:1e:64: e3:be:65:83:73:4e:7d:98:bd:93:c7:65:60:1d:43: 3c:14:a8:ee:8e:ce:f6:cf:d1:4a:f5:18:6a:27:82: dd:eb:eb:2a:71:22:31:ac:a8:ab:85:5c:8c:5b:2b: 61:4d:3c:6b:0d:e3:b5:62:2f:dd:d2:a7:de:39:52: ef:13:09:f1:7a:56:2b:d8:bb:aa:81:ff:7c:1e:1c: 8f:77:04:41:8d:8b:21:c5:e1:ff:bf:2c:fe:ad:84: 62:11:48:f4:d9:33:e0:d2:32:f7:79:77:a6:57:98: 4e:9c:38:f6:b6:92:10:f0:12:de:22:ef:88:00:57: df:c1:51:60:7f:cf:3b:14:05:ab:05:5c:bb:db:2f: 46:08:ef:2d:5d:d8:65:02:a2:02:05:44:72:6d:de: 2d:a9:fa:e4:b1:75:d5:6c:8a:fa:ce:96:ce:a1:a7: 24:7f:f7:be:db:a3:ab:6a:5c:bd:d2:fc:78:47:7f: cd:26:33:38:1e:85:e9:d0:f0:a8:c1:b5:af:fd:57: ca:35:10:dd:2d:39:30:68:8f:10:67:32:16:64:25: f0:b1:da:3a:ac:6d:f5:cd:83:ca:9c:76:09:14:a4: c3:c9:1e:b7:80:c0:77:92:bb:f4:7f:ec:ec:18:b0: ff:a5 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 74:A0:F2:84:CA:EA:82:78:33:63:F6:0B:94:3A:6B:59:BE:C0:E2:BF X509v3 Authority Key Identifier: keyid:AE:BF:39:4E:2F:1B:25:1C:88:D9:88:A8:71:61:08:45:80:78:6E:F5 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/rr85Ti8bJRyI2YiocWEIRYB4bvU.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/c9/40498e-d1c0-484c-abcb-61e7f40d5dd6/1/rr85Ti8bJRyI2YiocWEIRYB4bvU.mft X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/c9/40498e-d1c0-484c-abcb-61e7f40d5dd6/1/rr85Ti8bJRyI2YiocWEIRYB4bvU.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 22:c2:08:35:b1:ca:d0:b5:c8:46:22:67:80:3c:a2:f3:9f:b1: 73:0c:e2:22:4b:04:b4:fa:fb:7a:92:11:b5:78:fd:b7:d6:14: 2b:5e:e3:9b:e8:49:95:38:f5:15:a5:10:21:43:94:8b:a2:d9: 56:97:67:a3:06:ef:5a:15:d5:28:90:d0:8c:5e:ca:62:a6:c1: c0:3c:b9:be:51:73:a1:78:ff:4c:dc:22:2e:53:c5:f4:63:d1: 85:d6:bd:9e:23:12:e6:11:fa:98:2e:77:33:51:74:6b:13:b6: 9b:9f:dd:8c:fb:60:64:9b:3b:01:c0:63:3a:02:5f:96:39:67: 2e:42:1c:0c:84:35:87:32:6b:91:da:51:70:83:ee:d0:e2:98: 00:e9:b9:12:38:c6:96:53:66:27:68:b4:a0:6d:80:21:0a:a0: 40:a7:9d:98:21:8a:b7:5e:4c:9d:4a:71:d3:46:c4:78:4b:42: 44:62:ed:2a:f9:58:33:d2:42:8b:f2:d8:7a:c0:66:96:90:41: c9:bc:59:a9:85:ab:33:ff:d0:f9:ca:c9:f9:95:26:c0:2f:86: 81:85:6e:f1:de:b4:25:07:f1:41:7f:c2:6d:be:fd:66:65:8a: 1d:25:6e:6d:03:c5:62:3e:22:da:b3:21:5c:af:47:43:d8:33: 2c:41:23:2a -----BEGIN CERTIFICATE----- MIIFFjCCA/6gAwIBAgISAZlWed4WLChV77hNgT3mLdCxMA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKGFlYmYzOTRlMmYxYjI1MWM4OGQ5ODhhODcxNjEwODQ1ODA3 ODZlZjUwHhcNMjUwOTE3MDcwMDUxWhcNMjUwOTE4MDcwMDUxWjAzMTEwLwYDVQQD Eyg3NGEwZjI4NGNhZWE4Mjc4MzM2M2Y2MGI5NDNhNmI1OWJlYzBlMmJmMIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAk7UK8E2lKDvZdkAqHmTjvmWDc059 mL2Tx2VgHUM8FKjujs72z9FK9RhqJ4Ld6+sqcSIxrKirhVyMWythTTxrDeO1Yi/d 0qfeOVLvEwnxelYr2Luqgf98HhyPdwRBjYshxeH/vyz+rYRiEUj02TPg0jL3eXem V5hOnDj2tpIQ8BLeIu+IAFffwVFgf887FAWrBVy72y9GCO8tXdhlAqICBURybd4t qfrksXXVbIr6zpbOoackf/e+26Oraly90vx4R3/NJjM4HoXp0PCowbWv/VfKNRDd LTkwaI8QZzIWZCXwsdo6rG31zYPKnHYJFKTDyR63gMB3krv0f+zsGLD/pQIDAQAB o4ICIjCCAh4wHQYDVR0OBBYEFHSg8oTK6oJ4M2P2C5Q6a1m+wOK/MB8GA1UdIwQY MBaAFK6/OU4vGyUciNmIqHFhCEWAeG71MA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvcnI4NVRpOGJKUnlJMllpb2NXRUlSWUI0YnZVLmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC9jOS80MDQ5OGUtZDFjMC00ODRjLWFiY2It NjFlN2Y0MGQ1ZGQ2LzEvcnI4NVRpOGJKUnlJMllpb2NXRUlSWUI0YnZVLm1mdDCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC9jOS80MDQ5OGUtZDFjMC00ODRjLWFiY2ItNjFlN2Y0MGQ1ZGQ2 LzEvcnI4NVRpOGJKUnlJMllpb2NXRUlSWUI0YnZVLmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAIsIINbHK 0LXIRiJngDyi85+xcwziIksEtPr7epIRtXj9t9YUK17jm+hJlTj1FaUQIUOUi6LZ VpdnowbvWhXVKJDQjF7KYqbBwDy5vlFzoXj/TNwiLlPF9GPRhda9niMS5hH6mC53 M1F0axO2m5/djPtgZJs7AcBjOgJfljlnLkIcDIQ1hzJrkdpRcIPu0OKYAOm5EjjG llNmJ2i0oG2AIQqgQKedmCGKt15MnUpx00bEeEtCRGLtKvlYM9JCi/LYesBmlpBB ybxZqYWrM//Q+crJ+ZUmwC+GgYVu8d60JQfxQX/Cbb79ZmWKHSVubQPFYj4i2rMh XK9HQ9gzLEEjKg== -----END CERTIFICATE-----Generated at Wed Sep 17 08:50:32 2025 by rpki-client