$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/cd/6168d7-946c-4574-91ea-82ad14555eaa/1/mCz4CcDj6OVVL50N0uJ-DdLY2r4.mft File: mCz4CcDj6OVVL50N0uJ-DdLY2r4.mft (raw, json) Hash identifier: +QO6r75CuuscABJuuv33w1Ilnlq01f2XDbUJyUS3k9w= Subject key identifier: BC:1C:81:B1:D5:D5:3E:40:A0:28:A7:D9:C0:8D:CF:00:3E:65:E3:6D Authority key identifier: 98:2C:F8:09:C0:E3:E8:E5:55:2F:9D:0D:D2:E2:7E:0D:D2:D8:DA:BE Certificate issuer: /CN=982cf809c0e3e8e5552f9d0dd2e27e0dd2d8dabe Certificate serial: 0199179A89FE1E9C3641BF474891FD0C2C3C Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/mCz4CcDj6OVVL50N0uJ-DdLY2r4.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/cd/6168d7-946c-4574-91ea-82ad14555eaa/1/mCz4CcDj6OVVL50N0uJ-DdLY2r4.mft Manifest number: 1741 Signing time: Fri 05 Sep 2025 02:00:27 +0000 Manifest this update: Fri 05 Sep 2025 02:00:27 +0000 Manifest next update: Sat 06 Sep 2025 02:00:27 +0000 Files and hashes: 1: 1-W8fXv0jttdWKlzJAXVxxYtpRug.roa (hash: gpIh638+Fcd1tAei50b0+8GVpPlev9wrd/g4gdASdjg=) 2: 1UWB6DiO5XdV3re-o8rnuoqA6Ms.roa (hash: acQwekWVQZ/8nvJFITjzBnRus/D8fEtyc11Q6KELe7w=) 3: 21_l98tMuuHtah8-s1GQ4s9w80o.roa (hash: kBh4jdwY3MGZ4Pq8reV1XfNIfs+7zVu2WLUGJ+5lgvc=) 4: 4w30D5KawwaEKeLXCLppZs-985Y.roa (hash: D2Lwmoer5qGID/4i5fsaA6M5CcgJmrhikqoV9diBlTk=) 5: 584_8-MCCtntQOfvULwWZs9O7nE.roa (hash: 2qpHd4/GVV0NiG+wogJB5AQCeDp3yyLGq0zIUvBip28=) 6: 627caqDtqNfm9yW20lXiIagRUdA.roa (hash: Mi5qNzk/DECdSaSuVbFAUrlrcWaAk5NhLe1pKkhpRiI=) 7: AZYvtxCiQAo7McIIg5dYZPnjqkI.roa (hash: e/Nkv2lWFMKh5GkiCT+Bt9tYXmSUttTSHjKIqokHr5w=) 8: Brhkd2-auvvZmCyvxy5ORhHeQ6E.roa (hash: g8WF2m4nW9TPwqD2pE0ddCjVXs1fr0m/MHPrZ/Qj2HI=) 9: CnHjgZKNSNMP8dJ_BtYZ7Xo4ZrM.roa (hash: FqQbIRpVOThM0L1uy/AMjORSqSUsS/5+snA6mZqlQAA=) 10: IrnlAQa6M1A96HHiDasRUfVGqbQ.roa (hash: xgq5FcKSqvltS9tf8414o9TbLoeW+VIxwonV5uaPruw=) 11: LOKrZEDDVhVnSlJWlOLgQ5nPcM0.roa (hash: 2CeUB6HU9O6IboYshEwLG/p+jYhiKQ64ZtA5Y3idzrs=) 12: LbbsmkI3GqawDuN3XH6acheMxPw.roa (hash: BqWA3SYDAKLfoYVuIlyCld31iNDXkXCl/KtIv69jNUw=) 13: MRoUAROw4LH2qMua3FF0ivRRV1k.roa (hash: AM1ERkg9MkmZ5+MBy7Dj4XsMG8QwYDlhJ+3I/zu6fhk=) 14: OOYkNDqqDn1Unj3M-yrjf_S9VlU.roa (hash: oCGvjVeC4FC9ueufaA6bhsrNhxHd2pd306IA0XGXLfs=) 15: QJvPeNzFvPANqEbfkIc8-3zDQLs.roa (hash: felyBGjLHZhYiBLtOS5vAZwi9iqRNucwfxHrWgkMpWA=) 16: TrJv_8fKTcS_JBhUlD0AOoYAAQA.roa (hash: f2kfoia7LPQzOEBZN5rSYHh6gWQLd4Eepwr2rpiJk9c=) 17: UlqMdzKNjKKz7GVAWhNQ0GeC6iE.roa (hash: vyjrNuYYOAehZPhyITO+Q5uPp2e1fJC2nVGYypgHEhg=) 18: WJhqTCUN_AjGjAYRDp33eZN0BY4.roa (hash: 06Htmns2yq5ClkGiqHYQcD9sTifSqYU3RXoOiPSPCkE=) 19: azJgsmdTDF3ELk-I19mAROWoKeE.roa (hash: oh/dgWtIFhqfW7S9fR3cOqTRk0csYkiTH2ALt2aoNhQ=) 20: eChAGDbdQGMbx-CgEa8ktTddF6A.roa (hash: WaY78nyI3A8kBY4pFd0TG8ZJI0s+NCkhF+OV6SV5Crw=) 21: gN00iWVZ4X9ImdixtPXeB88eR_k.roa (hash: DPVgneYPbYS00UaxJyd5C7zkqYJRRcPWgn4xBTn6bHk=) 22: gnHztlWIUEkbfP_VpJDgy1aZ-q8.roa (hash: 8IEq5Il4ymKT0XR1RNf3aEeBm7YPqbccSq4VWhr/cXU=) 23: mCz4CcDj6OVVL50N0uJ-DdLY2r4.crl (hash: j3J7jjlFmziYzcGbamvsGK3e5Q/ZVS4mBbGeC1u+tVw=) 24: owD2F5PTIfIuOH1ResHlD6bHqfw.roa (hash: FwwD5nwDxuakINFZYh01TzvwO9abW6HL7q42RgazHtQ=) 25: s5Ai9g5eYYL8Bgx7ZWiTovq-xxE.roa (hash: BtApyhPvW43mqLBFeRPcKdPRw6DTk5KYzme6TZtVXns=) 26: sClmMBT_F-zHChOlRIEgdQPxP6k.roa (hash: ZhHXlBlX50DWtj7LBEqnVF6o2/ifQbmJsY9h3vjBI4Q=) 27: sMeA9xl8ZUuMKTOiIPGJ4CDhuVU.roa (hash: die5Hli6P/WXh1sfkmGYgfVjSONOwz0N0yrCW9dYC6M=) 28: sW7iMiWbwjQZ4JTr9eqMstrH0fY.roa (hash: fl3fF4gUVsev8QdVZnLOIu5u/5rzRWGxzrZRrAPXabs=) 29: tdG4gwbiCDTl2DZU4EFrqi-57Fc.roa (hash: HXWAwqtUcnHFWl+ei5dmWCUQV5Bz5IiYmO9iAB6ydxI=) 30: w23_TR4dcsNa31LTX8HVMLWRN_w.roa (hash: rfdkH9NAgBWGbrUS8/d8Rmrz5XY4u8KepKOXwjiNknw=) 31: wWRDfWHup1u0k3UjICPfUYIPuSY.roa (hash: yzH1M2v1GGWQRBkb4bWaRfefbh3n4eH1xoy+GhWge5A=) 32: wYxMdXSUEDjU1Cv3_j8xQDvi1yg.roa (hash: WyaQu0KrdFh/xZS6g5xHvbw77OL9Wai9qSXwo4Oty1g=) 33: xeXsIqRyNQ8tCJjLiS_SWkibat0.roa (hash: JByqNQHgtIum6mQVh/2h0Z7sUMkRsbp23RZvkf78Q8U=) 34: zA8L3Jvv9SEACC4CD6D8SPMP2Sk.roa (hash: Tngvw9PMaTEzEGc2VaqgRFM8azKZIG82ga5hio7GHN8=) Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/cd/6168d7-946c-4574-91ea-82ad14555eaa/1/mCz4CcDj6OVVL50N0uJ-DdLY2r4.crl rsync://rpki.ripe.net/repository/DEFAULT/cd/6168d7-946c-4574-91ea-82ad14555eaa/1/mCz4CcDj6OVVL50N0uJ-DdLY2r4.mft rsync://rpki.ripe.net/repository/DEFAULT/mCz4CcDj6OVVL50N0uJ-DdLY2r4.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Sat 06 Sep 2025 01:00:24 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:99:17:9a:89:fe:1e:9c:36:41:bf:47:48:91:fd:0c:2c:3c Signature Algorithm: sha256WithRSAEncryption Issuer: CN=982cf809c0e3e8e5552f9d0dd2e27e0dd2d8dabe Validity Not Before: Sep 5 02:00:27 2025 GMT Not After : Sep 6 02:00:27 2025 GMT Subject: CN=bc1c81b1d5d53e40a028a7d9c08dcf003e65e36d Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:fc:b8:82:0b:4c:51:2f:d5:9a:7b:e6:32:cd:5c: 26:84:d2:19:d4:c9:7c:a2:7e:55:1a:cb:e5:9e:7d: 4f:61:08:8f:db:75:f6:38:bc:7b:09:c8:c1:40:25: 8e:22:53:41:fc:ed:25:49:6a:34:ed:96:67:2e:6b: 6e:b8:20:8a:da:40:6e:4f:ae:e6:ff:df:0f:e6:1b: d4:01:9d:c4:4d:cb:9f:5f:1a:15:e3:ac:5e:9e:a9: 6b:72:7b:aa:96:a9:9e:cf:02:7d:a4:01:56:30:45: a5:21:89:89:35:ec:56:1e:6c:c5:2a:f4:b3:c6:78: 1a:f5:dc:d8:73:34:c4:a7:3b:cd:79:40:e9:83:ed: ae:32:93:64:61:2a:af:96:76:e5:80:f9:83:4c:45: f4:b1:8a:ee:27:e5:bf:10:59:d9:8f:d8:b2:54:ff: 65:2b:1e:57:c7:60:af:fc:bd:d1:f3:60:bd:62:6d: 5f:74:a2:cb:71:41:f1:4b:09:39:22:e9:70:aa:3a: 9d:74:53:0f:97:fc:8a:2d:a5:a9:eb:50:e1:46:ea: 41:44:02:27:34:f4:05:eb:04:d9:e3:68:81:e8:d1: d6:97:86:6f:13:0d:67:e2:90:c0:09:b7:a4:a2:9c: 55:dd:ec:b9:80:47:21:60:54:c3:1e:a2:34:e0:dc: 3c:89 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: BC:1C:81:B1:D5:D5:3E:40:A0:28:A7:D9:C0:8D:CF:00:3E:65:E3:6D X509v3 Authority Key Identifier: keyid:98:2C:F8:09:C0:E3:E8:E5:55:2F:9D:0D:D2:E2:7E:0D:D2:D8:DA:BE X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/mCz4CcDj6OVVL50N0uJ-DdLY2r4.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/cd/6168d7-946c-4574-91ea-82ad14555eaa/1/mCz4CcDj6OVVL50N0uJ-DdLY2r4.mft X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/cd/6168d7-946c-4574-91ea-82ad14555eaa/1/mCz4CcDj6OVVL50N0uJ-DdLY2r4.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 56:e4:14:fc:57:89:a5:9f:9b:10:0d:c6:e4:a5:7d:c0:82:0a: 28:32:8d:2b:97:d8:b7:be:12:6f:d1:e2:49:5a:61:0a:80:d8: c4:1d:bd:5e:70:10:9a:f4:2f:91:93:af:90:42:fa:b3:dd:d1: 14:7c:d5:9c:06:52:23:ac:d2:08:38:fc:7f:46:57:7b:f6:50: 5c:45:f2:5b:aa:70:f2:64:8d:62:41:8a:de:3d:1b:f8:bf:4d: e0:e6:b5:06:c7:f8:7e:1c:12:f1:ef:c6:59:29:e3:11:f6:e3: 5e:93:b9:c1:6f:12:45:cd:10:b5:f1:d6:75:ec:7e:23:10:db: d3:7f:d5:fd:bb:8e:e4:76:b8:a7:07:94:c3:39:fc:bb:a8:cc: 49:c4:27:95:d7:83:78:a6:86:1a:f0:c0:0e:50:50:56:2e:f0: be:e6:de:78:f0:0c:73:76:2b:70:49:61:c0:87:d1:90:65:d7: 8b:55:d0:bf:fa:d6:bd:81:5f:bf:77:3a:92:f5:d2:08:b7:d2: 7b:f2:01:37:ca:3e:0e:99:b8:f0:54:6b:9a:d6:d1:7b:31:a3: 5e:b9:3c:8e:cf:5d:8f:f4:63:84:23:92:88:a3:3d:60:65:1e: ff:7b:dd:f0:90:8d:2c:ba:f9:0d:41:94:ac:09:5e:52:21:6f: 5e:a2:61:1f -----BEGIN CERTIFICATE----- MIIFFjCCA/6gAwIBAgISAZkXmon+Hpw2Qb9HSJH9DCw8MA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKDk4MmNmODA5YzBlM2U4ZTU1NTJmOWQwZGQyZTI3ZTBkZDJk OGRhYmUwHhcNMjUwOTA1MDIwMDI3WhcNMjUwOTA2MDIwMDI3WjAzMTEwLwYDVQQD EyhiYzFjODFiMWQ1ZDUzZTQwYTAyOGE3ZDljMDhkY2YwMDNlNjVlMzZkMIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEA/LiCC0xRL9Wae+YyzVwmhNIZ1Ml8 on5VGsvlnn1PYQiP23X2OLx7CcjBQCWOIlNB/O0lSWo07ZZnLmtuuCCK2kBuT67m /98P5hvUAZ3ETcufXxoV46xenqlrcnuqlqmezwJ9pAFWMEWlIYmJNexWHmzFKvSz xnga9dzYczTEpzvNeUDpg+2uMpNkYSqvlnblgPmDTEX0sYruJ+W/EFnZj9iyVP9l Kx5Xx2Cv/L3R82C9Ym1fdKLLcUHxSwk5IulwqjqddFMPl/yKLaWp61DhRupBRAIn NPQF6wTZ42iB6NHWl4ZvEw1n4pDACbekopxV3ey5gEchYFTDHqI04Nw8iQIDAQAB o4ICIjCCAh4wHQYDVR0OBBYEFLwcgbHV1T5AoCin2cCNzwA+ZeNtMB8GA1UdIwQY MBaAFJgs+AnA4+jlVS+dDdLifg3S2Nq+MA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvbUN6NENjRGo2T1ZWTDUwTjB1Si1EZExZMnI0LmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC9jZC82MTY4ZDctOTQ2Yy00NTc0LTkxZWEt ODJhZDE0NTU1ZWFhLzEvbUN6NENjRGo2T1ZWTDUwTjB1Si1EZExZMnI0Lm1mdDCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC9jZC82MTY4ZDctOTQ2Yy00NTc0LTkxZWEtODJhZDE0NTU1ZWFh LzEvbUN6NENjRGo2T1ZWTDUwTjB1Si1EZExZMnI0LmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAVuQU/FeJ pZ+bEA3G5KV9wIIKKDKNK5fYt74Sb9HiSVphCoDYxB29XnAQmvQvkZOvkEL6s93R FHzVnAZSI6zSCDj8f0ZXe/ZQXEXyW6pw8mSNYkGK3j0b+L9N4Oa1Bsf4fhwS8e/G WSnjEfbjXpO5wW8SRc0QtfHWdex+IxDb03/V/buO5Ha4pweUwzn8u6jMScQnldeD eKaGGvDADlBQVi7wvubeePAMc3YrcElhwIfRkGXXi1XQv/rWvYFfv3c6kvXSCLfS e/IBN8o+Dpm48FRrmtbRezGjXrk8js9dj/RjhCOSiKM9YGUe/3vd8JCNLLr5DUGU rAleUiFvXqJhHw== -----END CERTIFICATE-----Generated at Fri Sep 5 11:25:29 2025 by rpki-client