$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/cc/051fa2-c580-4a02-a186-e69f7a5d2d90/1/8P8sYimvdjqZ9TSaMlEN9KRSYUM.mft File: 8P8sYimvdjqZ9TSaMlEN9KRSYUM.mft (raw, json) Hash identifier: jaRQ2/VHptcxfq2YxTCSZOY9VmThM5zhfXQPAUPGUTY= Subject key identifier: 9C:E3:96:E9:63:7F:C0:C7:B8:B0:A9:E0:16:FE:6A:79:69:C6:DF:63 Authority key identifier: F0:FF:2C:62:29:AF:76:3A:99:F5:34:9A:32:51:0D:F4:A4:52:61:43 Certificate issuer: /CN=f0ff2c6229af763a99f5349a32510df4a4526143 Certificate serial: 01992EC7325E9322345C9331E8A45AA02591 Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/8P8sYimvdjqZ9TSaMlEN9KRSYUM.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/cc/051fa2-c580-4a02-a186-e69f7a5d2d90/1/8P8sYimvdjqZ9TSaMlEN9KRSYUM.mft Manifest number: 167C Signing time: Tue 09 Sep 2025 14:00:30 +0000 Manifest this update: Tue 09 Sep 2025 14:00:30 +0000 Manifest next update: Wed 10 Sep 2025 14:00:30 +0000 Files and hashes: 1: 00x2a7vYcUP_RgzqZlJDShLq9Do.roa (hash: cq08qt5t6pt7+g4zB6xtHZuctjeJqy9pw/L/lk8TYFo=) 2: 8P8sYimvdjqZ9TSaMlEN9KRSYUM.crl (hash: cM6g8V9JlJx7euLkR+H8cpLVal7pZ+2nT0ZbHwAM/6o=) 3: KVMzJG-tiBiXKGfDbX7s-fqSUcs.roa (hash: izdiO/l04uY0Tl9GP7xbaa4HsWMYkrOgbs0SiG0a1K8=) 4: OBC2jp5FIHT7G9c2m1xsJUD2ivs.roa (hash: DrwuyysosoB70lBjSllnHo3rVU0U0NusilzO8tRi9Q0=) 5: OxF-ngX6YGUArZrbAYmh9hpGzkU.roa (hash: zhEaR7GNPbf+2lOaH8uFUPJFKzbpuLS5x4CvU7dkxPs=) 6: Q2Pg2GNHELVKyFoNgxOuT8YFvLY.roa (hash: DsyRU7FSw+3XDKbBM9HrtgkzYSVPnqWwqknbD6CWVSU=) 7: RO-InVXPYoHaB1ZpM-19yr94dQs.roa (hash: 8Y6VcUcgO4alufdIJ4djN2KAnB4AyYetp1VZzDDuyNk=) 8: TbcAJ-7kgZbLEMeBArn-aI2s0Oc.roa (hash: ebCgIhbDpPxtlRtDjitUarjC0W1nxe0ujpocy11Koxs=) 9: _gM5SG_4QQqKocZtcQPCR80SAmI.roa (hash: ee8TJS3VrEj5YXrt15hISXpN3dVXM3P5ROyjlVEMHSs=) 10: fG6If6WZh4pXAVRu1gEQ7wbPbEs.roa (hash: OIBSpF8oXZotrR8RVX6KacBPnJZCoNiFLIZ7aWyayQU=) 11: gfQeyx6Q7sjS4Xpny9IUQ8tQxLY.roa (hash: zrq/geD7ajZHxMLm7OvFbnGGXeIS14GfMNfAscurlR8=) Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/cc/051fa2-c580-4a02-a186-e69f7a5d2d90/1/8P8sYimvdjqZ9TSaMlEN9KRSYUM.crl rsync://rpki.ripe.net/repository/DEFAULT/cc/051fa2-c580-4a02-a186-e69f7a5d2d90/1/8P8sYimvdjqZ9TSaMlEN9KRSYUM.mft rsync://rpki.ripe.net/repository/DEFAULT/8P8sYimvdjqZ9TSaMlEN9KRSYUM.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Wed 10 Sep 2025 14:00:30 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:99:2e:c7:32:5e:93:22:34:5c:93:31:e8:a4:5a:a0:25:91 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=f0ff2c6229af763a99f5349a32510df4a4526143 Validity Not Before: Sep 9 14:00:30 2025 GMT Not After : Sep 10 14:00:30 2025 GMT Subject: CN=9ce396e9637fc0c7b8b0a9e016fe6a7969c6df63 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:da:c2:78:e9:93:1b:4c:39:29:07:5b:9c:a4:81: 72:8a:92:72:bd:a0:40:f6:c1:67:ed:be:bb:52:ef: 97:45:38:3f:61:27:e9:89:de:54:70:5e:a4:ef:d0: e5:b0:53:21:9f:10:5f:b0:fc:17:c8:9c:20:cd:8a: 98:a0:50:9d:26:34:1d:1b:ba:ee:d8:e7:2b:1d:6c: 1a:33:a8:e6:15:57:3d:8f:44:3b:e9:67:1d:a3:44: 08:f8:62:fa:eb:95:44:3b:cb:df:a4:eb:2c:88:8e: 7f:b3:0d:f6:13:2a:c5:37:fc:64:95:5f:3e:bc:89: fe:82:5f:be:36:f5:7f:16:30:ef:09:ba:6e:91:11: bc:6d:04:ac:7d:3b:bb:a8:b3:e2:55:4d:75:72:3d: 91:da:1f:71:bf:57:e1:5b:d9:d4:60:e7:8c:4a:ed: 87:34:86:3c:dc:5a:d9:06:be:6e:22:a4:78:ad:01: 06:55:65:55:88:67:c5:3a:52:a9:6b:80:27:f4:e7: 39:c9:98:13:b4:9a:0e:7b:9c:21:da:68:6a:7c:e0: e7:ea:b4:45:e5:7c:13:36:60:77:da:d7:e2:5f:a6: 71:b7:7f:15:69:47:0e:36:b4:b2:e6:3b:e4:22:61: d8:20:05:78:3d:be:5a:cc:63:fe:44:3f:9e:55:8c: 3c:4b Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 9C:E3:96:E9:63:7F:C0:C7:B8:B0:A9:E0:16:FE:6A:79:69:C6:DF:63 X509v3 Authority Key Identifier: keyid:F0:FF:2C:62:29:AF:76:3A:99:F5:34:9A:32:51:0D:F4:A4:52:61:43 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/8P8sYimvdjqZ9TSaMlEN9KRSYUM.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/cc/051fa2-c580-4a02-a186-e69f7a5d2d90/1/8P8sYimvdjqZ9TSaMlEN9KRSYUM.mft X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/cc/051fa2-c580-4a02-a186-e69f7a5d2d90/1/8P8sYimvdjqZ9TSaMlEN9KRSYUM.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 57:b5:07:b3:a7:12:64:c9:17:47:cb:30:5d:c8:29:2b:9d:69: 08:f3:90:2b:4e:fa:cf:fe:8a:8b:dd:5c:39:c7:c2:af:c2:7e: ce:45:63:91:82:ae:e4:57:2f:81:ba:13:93:ab:4b:fb:8d:7d: 24:52:94:3b:7b:7d:b7:94:d1:6b:7e:13:9c:e7:41:e2:7e:64: b1:5d:04:14:24:0b:a7:70:06:f8:5e:b9:c2:01:34:d9:78:fb: 90:c3:5c:da:2b:d2:8b:fc:7d:99:0e:fb:66:c5:93:ed:d2:66: dd:b6:88:a5:45:6e:b0:aa:d8:f2:44:2d:f8:ff:7a:03:60:ae: 9c:ec:28:a9:46:43:92:3d:40:99:36:a0:35:0c:29:9a:80:2a: 73:af:e9:85:86:71:0f:c0:2e:ed:a6:ef:09:af:29:b1:2b:16: 70:37:16:e6:4b:ce:a4:7f:7e:27:3c:01:42:71:a9:c3:20:54: 8f:c2:68:95:31:86:b5:6f:bf:d6:8a:8c:cf:2f:f0:ba:5c:ad: 2c:f9:b9:e8:ac:73:51:0c:fa:5c:ea:16:ae:8d:ae:6c:ce:9c: f2:ab:7d:43:eb:e4:9b:e2:1d:d7:70:65:dc:12:13:ff:77:59: d4:bb:6c:b4:cd:0d:09:99:5d:77:04:0b:91:98:eb:a1:b7:4f: 93:39:57:ef -----BEGIN CERTIFICATE----- MIIFFjCCA/6gAwIBAgISAZkuxzJekyI0XJMx6KRaoCWRMA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKGYwZmYyYzYyMjlhZjc2M2E5OWY1MzQ5YTMyNTEwZGY0YTQ1 MjYxNDMwHhcNMjUwOTA5MTQwMDMwWhcNMjUwOTEwMTQwMDMwWjAzMTEwLwYDVQQD Eyg5Y2UzOTZlOTYzN2ZjMGM3YjhiMGE5ZTAxNmZlNmE3OTY5YzZkZjYzMIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEA2sJ46ZMbTDkpB1ucpIFyipJyvaBA 9sFn7b67Uu+XRTg/YSfpid5UcF6k79DlsFMhnxBfsPwXyJwgzYqYoFCdJjQdG7ru 2OcrHWwaM6jmFVc9j0Q76Wcdo0QI+GL665VEO8vfpOssiI5/sw32EyrFN/xklV8+ vIn+gl++NvV/FjDvCbpukRG8bQSsfTu7qLPiVU11cj2R2h9xv1fhW9nUYOeMSu2H NIY83FrZBr5uIqR4rQEGVWVViGfFOlKpa4An9Oc5yZgTtJoOe5wh2mhqfODn6rRF 5XwTNmB32tfiX6Zxt38VaUcONrSy5jvkImHYIAV4Pb5azGP+RD+eVYw8SwIDAQAB o4ICIjCCAh4wHQYDVR0OBBYEFJzjluljf8DHuLCp4Bb+anlpxt9jMB8GA1UdIwQY MBaAFPD/LGIpr3Y6mfU0mjJRDfSkUmFDMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvOFA4c1lpbXZkanFaOVRTYU1sRU45S1JTWVVNLmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC9jYy8wNTFmYTItYzU4MC00YTAyLWExODYt ZTY5ZjdhNWQyZDkwLzEvOFA4c1lpbXZkanFaOVRTYU1sRU45S1JTWVVNLm1mdDCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC9jYy8wNTFmYTItYzU4MC00YTAyLWExODYtZTY5ZjdhNWQyZDkw LzEvOFA4c1lpbXZkanFaOVRTYU1sRU45S1JTWVVNLmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAV7UHs6cS ZMkXR8swXcgpK51pCPOQK076z/6Ki91cOcfCr8J+zkVjkYKu5FcvgboTk6tL+419 JFKUO3t9t5TRa34TnOdB4n5ksV0EFCQLp3AG+F65wgE02Xj7kMNc2ivSi/x9mQ77 ZsWT7dJm3baIpUVusKrY8kQt+P96A2CunOwoqUZDkj1AmTagNQwpmoAqc6/phYZx D8Au7abvCa8psSsWcDcW5kvOpH9+JzwBQnGpwyBUj8JolTGGtW+/1oqMzy/wulyt LPm56KxzUQz6XOoWro2ubM6c8qt9Q+vkm+Id13Bl3BIT/3dZ1LtstM0NCZlddwQL kZjrobdPkzlX7w== -----END CERTIFICATE-----Generated at Tue Sep 9 22:53:01 2025 by rpki-client