$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/ca/4a9cc4-2b9a-4ef2-a33a-872b3710c2a1/1/ge7UCROD2e1AVtn07_fSYi3c4gU.mft File: ge7UCROD2e1AVtn07_fSYi3c4gU.mft (raw, json) Hash identifier: FxTiHkGaDCcy1A8Sixf6+qFo0GQm/xFE5nNpn3OoEsE= Subject key identifier: 8E:38:07:8C:6F:A3:30:3D:10:9B:8A:26:D2:EA:89:21:9C:5A:C2:00 Authority key identifier: 81:EE:D4:09:13:83:D9:ED:40:56:D9:F4:EF:F7:D2:62:2D:DC:E2:05 Certificate issuer: /CN=81eed4091383d9ed4056d9f4eff7d2622ddce205 Certificate serial: 01992BFD15635FC3DDD8D7E39D29AC53264F Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/ge7UCROD2e1AVtn07_fSYi3c4gU.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/ca/4a9cc4-2b9a-4ef2-a33a-872b3710c2a1/1/ge7UCROD2e1AVtn07_fSYi3c4gU.mft Manifest number: 168E Signing time: Tue 09 Sep 2025 01:00:30 +0000 Manifest this update: Tue 09 Sep 2025 01:00:30 +0000 Manifest next update: Wed 10 Sep 2025 01:00:30 +0000 Files and hashes: 1: 1-FVNiQvWEXUQsyhSP2mXL7ZeFhI.roa (hash: h2VWp4VUz/KwikufobsIYuUTWP+PbubtA5kM1+IYNJ4=) 2: 1-cC_8sf2Sjlcbm7-DZh4XuYIArQ.roa (hash: 0N5yH6BWqUs7tPNNDSMGPx2mfE/ZRDiPQfeLQl52Wgo=) 3: GTiO-SupitdTmKiZ_HKcU4MJuTk.roa (hash: +PZAxnriWNXJlrxxhGkuM8aqghAi9SsDw/xLwTjAVR8=) 4: XF9ImwV6WWJIs0xQcjK4t7jAy60.roa (hash: cqd2xtXIiuriNNQV4wixCocQ/6vU5JsRpBkdhH+9z5k=) 5: f6ghH_7B3PzM3ktCIJpbMer11MQ.roa (hash: gQOe3jDJjm6Z8U0Sg1BUTciGU/YhoqXEIyyDOVhhKCY=) 6: ge7UCROD2e1AVtn07_fSYi3c4gU.crl (hash: TcRSPqhpNg4JQ8jEIO3CRlp1aC8X8StQgl0FJXlUSss=) 7: i30xTo-UR4_VbHo8fjprUc4AF6g.roa (hash: a1dsNKX1kvmUfXHRJMRlL3dZirJz9clcR1rF2jPzapU=) 8: qWZ64G_gV6r1a1VTWhYwuR9ilIk.roa (hash: SNBGanOggO8FdGYV/GuiVAQ6b34zKk2VTZJhKLFl+04=) 9: uhgMFZw8rs0tJvJzvMK6WeU68F0.roa (hash: qV6k2QQIZBdjD0SstNGQRZVonpUjQ86it1wpOl33iLI=) 10: xb_V8FoCziLwhsNf2nDbMavL4CE.roa (hash: FYXyUhIT7c2rjGPzDYmHZI9gN0Jm7MertTGE0IiU5ck=) Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/ca/4a9cc4-2b9a-4ef2-a33a-872b3710c2a1/1/ge7UCROD2e1AVtn07_fSYi3c4gU.crl rsync://rpki.ripe.net/repository/DEFAULT/ca/4a9cc4-2b9a-4ef2-a33a-872b3710c2a1/1/ge7UCROD2e1AVtn07_fSYi3c4gU.mft rsync://rpki.ripe.net/repository/DEFAULT/ge7UCROD2e1AVtn07_fSYi3c4gU.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Tue 09 Sep 2025 23:00:23 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:99:2b:fd:15:63:5f:c3:dd:d8:d7:e3:9d:29:ac:53:26:4f Signature Algorithm: sha256WithRSAEncryption Issuer: CN=81eed4091383d9ed4056d9f4eff7d2622ddce205 Validity Not Before: Sep 9 01:00:30 2025 GMT Not After : Sep 10 01:00:30 2025 GMT Subject: CN=8e38078c6fa3303d109b8a26d2ea89219c5ac200 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:d3:88:d3:f6:02:8e:2a:17:11:d8:99:5a:6b:87: 52:93:23:71:79:b5:bb:97:af:ae:98:55:50:ef:14: 22:9a:42:18:8e:c4:3c:09:c7:32:4b:5d:cd:a2:32: a4:c5:55:37:2c:22:5f:e8:19:06:8c:a9:fe:d9:d6: 6f:04:ad:99:4f:36:ce:bb:51:dd:d0:df:c0:b2:11: a3:b0:aa:20:d4:c1:ef:dd:01:08:22:05:07:7d:1e: 69:e7:90:ba:b2:06:55:cd:74:17:d4:b8:7e:8a:d2: 3a:e5:a6:7f:cd:b4:47:14:91:8f:92:00:1f:1f:a9: 44:24:5b:60:17:b0:9d:fc:fb:17:7f:d4:31:02:5c: 04:92:f4:f7:83:1c:4c:1f:bb:cf:80:e8:fe:57:4d: 24:d4:d0:76:89:68:03:aa:53:19:c5:30:fd:d2:33: 6d:8c:a1:2d:db:2e:49:84:82:cf:c8:cb:bf:45:24: b2:b9:bd:fa:d5:8f:db:cf:ce:d1:48:8a:12:a9:f8: 75:09:b4:25:6f:55:0b:3f:d2:b2:ac:cd:b0:c4:92: b3:70:2b:d0:02:5b:ba:d7:ac:e9:b1:4f:48:41:96: a4:c7:a4:d3:12:fa:b6:93:b5:66:40:a5:c7:b6:87: 00:66:67:bb:f8:7f:d9:c7:13:5e:f3:e6:92:62:39: 2b:a7 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 8E:38:07:8C:6F:A3:30:3D:10:9B:8A:26:D2:EA:89:21:9C:5A:C2:00 X509v3 Authority Key Identifier: keyid:81:EE:D4:09:13:83:D9:ED:40:56:D9:F4:EF:F7:D2:62:2D:DC:E2:05 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/ge7UCROD2e1AVtn07_fSYi3c4gU.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/ca/4a9cc4-2b9a-4ef2-a33a-872b3710c2a1/1/ge7UCROD2e1AVtn07_fSYi3c4gU.mft X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/ca/4a9cc4-2b9a-4ef2-a33a-872b3710c2a1/1/ge7UCROD2e1AVtn07_fSYi3c4gU.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 50:6d:c9:8d:b7:ab:8c:3f:0f:99:9b:f5:be:5b:1b:52:a6:18: 6e:a6:ba:fb:5e:d6:e0:ea:ed:d7:3b:89:6e:81:6e:12:18:a8: a1:49:24:01:45:8e:14:a4:3a:2f:4a:97:ed:d7:bd:3b:22:b8: 2b:fe:a6:fb:c2:7d:35:7f:89:51:34:21:98:ec:f2:e0:af:cc: b9:89:3c:ff:5c:58:76:2b:9b:34:8e:db:f7:2e:ec:18:80:ea: b1:ed:4a:fe:f9:fe:94:76:9f:f4:ad:90:78:b6:78:6d:d4:33: c6:93:a7:1b:50:3d:1b:03:25:ef:39:51:f5:7c:ee:36:27:41: 07:25:d5:6e:0b:55:72:a6:07:7d:64:7c:f8:41:52:c7:52:d6: 0e:95:5a:49:5d:8a:b7:67:00:58:81:63:67:fe:00:f5:0d:2e: c5:56:35:00:a6:4a:98:be:09:84:8f:cc:4b:19:89:e0:7e:ac: b4:03:94:af:30:1a:77:4b:39:d3:7c:92:c3:34:0c:21:fb:8a: f6:ed:e1:75:93:25:79:43:48:ea:63:9d:0b:a5:09:34:6a:2b: fe:88:5a:a0:01:8d:11:af:00:2e:73:fc:27:f3:ad:5a:0e:c3: f6:20:ef:f7:b7:92:11:36:cc:78:29:6a:fa:5a:06:96:d4:df: 9b:19:0f:b5 -----BEGIN CERTIFICATE----- MIIFFjCCA/6gAwIBAgISAZkr/RVjX8Pd2NfjnSmsUyZPMA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKDgxZWVkNDA5MTM4M2Q5ZWQ0MDU2ZDlmNGVmZjdkMjYyMmRk Y2UyMDUwHhcNMjUwOTA5MDEwMDMwWhcNMjUwOTEwMDEwMDMwWjAzMTEwLwYDVQQD Eyg4ZTM4MDc4YzZmYTMzMDNkMTA5YjhhMjZkMmVhODkyMTljNWFjMjAwMIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEA04jT9gKOKhcR2Jlaa4dSkyNxebW7 l6+umFVQ7xQimkIYjsQ8CccyS13NojKkxVU3LCJf6BkGjKn+2dZvBK2ZTzbOu1Hd 0N/AshGjsKog1MHv3QEIIgUHfR5p55C6sgZVzXQX1Lh+itI65aZ/zbRHFJGPkgAf H6lEJFtgF7Cd/PsXf9QxAlwEkvT3gxxMH7vPgOj+V00k1NB2iWgDqlMZxTD90jNt jKEt2y5JhILPyMu/RSSyub361Y/bz87RSIoSqfh1CbQlb1ULP9KyrM2wxJKzcCvQ Alu616zpsU9IQZakx6TTEvq2k7VmQKXHtocAZme7+H/ZxxNe8+aSYjkrpwIDAQAB o4ICIjCCAh4wHQYDVR0OBBYEFI44B4xvozA9EJuKJtLqiSGcWsIAMB8GA1UdIwQY MBaAFIHu1AkTg9ntQFbZ9O/30mIt3OIFMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvZ2U3VUNST0QyZTFBVnRuMDdfZlNZaTNjNGdVLmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC9jYS80YTljYzQtMmI5YS00ZWYyLWEzM2Et ODcyYjM3MTBjMmExLzEvZ2U3VUNST0QyZTFBVnRuMDdfZlNZaTNjNGdVLm1mdDCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC9jYS80YTljYzQtMmI5YS00ZWYyLWEzM2EtODcyYjM3MTBjMmEx LzEvZ2U3VUNST0QyZTFBVnRuMDdfZlNZaTNjNGdVLmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAUG3Jjber jD8PmZv1vlsbUqYYbqa6+17W4Ort1zuJboFuEhiooUkkAUWOFKQ6L0qX7de9OyK4 K/6m+8J9NX+JUTQhmOzy4K/MuYk8/1xYdiubNI7b9y7sGIDqse1K/vn+lHaf9K2Q eLZ4bdQzxpOnG1A9GwMl7zlR9XzuNidBByXVbgtVcqYHfWR8+EFSx1LWDpVaSV2K t2cAWIFjZ/4A9Q0uxVY1AKZKmL4JhI/MSxmJ4H6stAOUrzAad0s503ySwzQMIfuK 9u3hdZMleUNI6mOdC6UJNGor/ohaoAGNEa8ALnP8J/OtWg7D9iDv97eSETbMeClq +loGltTfmxkPtQ== -----END CERTIFICATE-----Generated at Tue Sep 9 08:10:31 2025 by rpki-client