$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/d0/1e04b8-1031-43f9-9667-8e6f878db5f4/1/71fC2dk6x8-bLxfKp4WbaYWzm50.mft File: 71fC2dk6x8-bLxfKp4WbaYWzm50.mft (raw, json) Hash identifier: x7hqj8UdYCH0BXMLTS3GvJ+EZ32Ow76LrSpBCMUvXYo= Subject key identifier: 4F:F5:0B:10:FF:58:5E:EC:2C:0C:6B:C4:AF:13:CA:F9:2C:7D:25:F0 Authority key identifier: EF:57:C2:D9:D9:3A:C7:CF:9B:2F:17:CA:A7:85:9B:69:85:B3:9B:9D Certificate issuer: /CN=ef57c2d9d93ac7cf9b2f17caa7859b6985b39b9d Certificate serial: 0199161A89999DFC62823A51157D364F7C98 Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/71fC2dk6x8-bLxfKp4WbaYWzm50.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/d0/1e04b8-1031-43f9-9667-8e6f878db5f4/1/71fC2dk6x8-bLxfKp4WbaYWzm50.mft Manifest number: 12A9 Signing time: Thu 04 Sep 2025 19:01:01 +0000 Manifest this update: Thu 04 Sep 2025 19:01:01 +0000 Manifest next update: Fri 05 Sep 2025 19:01:01 +0000 Files and hashes: 1: 0SnEDSu2fch50mXfNCrgepjBXHI.roa (hash: An4Aho4+/IQv1xSA0visBRO6r1aot3IcatgSZ0mIirs=) 2: 4cYZBaSCfKx4xdTyV36QiAtkYH8.roa (hash: 4TbdTxLmlk8EX546dkAWoaHsA8UX5a3+NdKi5edH1kY=) 3: 71fC2dk6x8-bLxfKp4WbaYWzm50.crl (hash: VDIEmT1Vv0mMkbrP1+sfLNSyd2BO/2uZtMwKQAhZzzc=) 4: CFEprGG9zI2SPXEkfveiqcGkxys.roa (hash: zwoMXpp3WPmfn1e+WeBEAccAThpouC8C+SBbtldgA/c=) 5: EK6XW48thDOhbEqOrZVkF4wNviY.roa (hash: TaMn+E7YE9NMIOz64w+l5qs88ZBiuzDcpLepxVp30kM=) 6: RLjWAiBDW7OGzF_VcCkKg-SuzTE.roa (hash: DCBINTtLxKJQkC6BRMLb3TMqWlrNb5ZnwJro+/q+QhU=) 7: Xd2QaW60upMnqwQIBHXXIoPXPzs.roa (hash: +i6BQOs/QyU2pk+3pSoh+wtk4Cf+VFJXifr7WtqVoY4=) 8: ZWH5dik-57qT_VKYcibYh0fZMes.roa (hash: V4HyXcC7GD93JW+xBhzBdGWwVycZxFz98efL+J+3t6c=) 9: d3w3nqB5Kl-FSC0jSCG-gsD4dlY.roa (hash: 33QNQ+kF6mFEetO5Rno9ayPExXyzerB4sZWFH0Ulruk=) 10: dLVFM6LOXJ7fgmVbzXYVW8I5oYY.roa (hash: p6zpbFHToZdevuasfH2dIun4+77hBuovd01laS+bKxs=) 11: kaXih0ftxLoxKevElyyNGY3Am90.roa (hash: VV+Kmbg3++xVZSuR6z9QplDGDyuGw9lzxK6+uDRXc2k=) 12: mMAwso5PyMiUkBDuP91mCU2ukBI.roa (hash: 8lAOzf9Ul80EHkivmkCJNmV8WShjC87n8hXocC2Jg4o=) 13: rL6AzulHQOLcRfhqRrPdMX43AzM.roa (hash: /p4sN3vL44k5lwQiWwAvoayVUuPAubPMAhf99ERn0+c=) 14: xE9QBs_-I-okZvOErWXLkoKDqmk.roa (hash: PCh0aczn6Bj3Hiz+iIpjZK10Xg+FpiTDJMX+WibJh2o=) 15: yedI6EpedZ28jyB60XNo0uK6oF8.roa (hash: hWsq9urJIZSeMGg4SgxXz+gEuiBCoRbdm4v/CAFQ2CU=) Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/d0/1e04b8-1031-43f9-9667-8e6f878db5f4/1/71fC2dk6x8-bLxfKp4WbaYWzm50.crl rsync://rpki.ripe.net/repository/DEFAULT/d0/1e04b8-1031-43f9-9667-8e6f878db5f4/1/71fC2dk6x8-bLxfKp4WbaYWzm50.mft rsync://rpki.ripe.net/repository/DEFAULT/71fC2dk6x8-bLxfKp4WbaYWzm50.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Fri 05 Sep 2025 19:01:01 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:99:16:1a:89:99:9d:fc:62:82:3a:51:15:7d:36:4f:7c:98 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=ef57c2d9d93ac7cf9b2f17caa7859b6985b39b9d Validity Not Before: Sep 4 19:01:01 2025 GMT Not After : Sep 5 19:01:01 2025 GMT Subject: CN=4ff50b10ff585eec2c0c6bc4af13caf92c7d25f0 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:88:75:3f:23:82:4d:6b:2e:42:02:0c:b7:c2:3d: 09:68:e6:15:a1:d2:64:d7:a7:5d:c0:55:f0:a6:bb: 77:3c:27:4c:1d:af:d5:80:19:d5:d8:6b:a9:9d:66: e3:85:09:e8:b7:5f:58:e2:95:19:12:19:77:32:e3: 2a:9a:5c:93:08:95:99:24:00:50:cf:4a:99:26:01: 7c:5c:21:21:1b:68:6e:6e:85:fb:71:8a:c8:40:f8: 87:32:8b:93:eb:8f:54:98:08:cb:b4:9d:95:ac:fc: 98:6a:63:27:50:90:08:68:37:8d:0b:b0:73:82:80: df:7a:b8:6f:c4:4d:1b:18:53:72:70:65:e9:20:f0: 6d:19:33:44:bb:f6:2e:e3:30:e3:90:c5:42:16:a5: 7e:57:d5:06:37:41:a8:31:34:90:f3:f1:f0:33:35: 02:1f:1c:5c:a3:36:5b:42:94:8c:5a:04:ab:ce:ab: e7:1b:dc:89:bd:6c:cb:83:90:e5:80:d0:f1:30:f1: 25:c5:36:f8:a7:5c:80:b4:43:5a:2a:2b:c6:ec:d0: ca:2e:45:e3:52:48:28:b8:c6:b4:61:5b:6b:fb:1f: 26:94:2d:1f:52:09:c5:09:08:c5:93:cc:98:b0:7f: 49:c6:b1:f6:cc:c0:b6:e8:41:a8:25:bf:7a:2c:e0: b4:47 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 4F:F5:0B:10:FF:58:5E:EC:2C:0C:6B:C4:AF:13:CA:F9:2C:7D:25:F0 X509v3 Authority Key Identifier: keyid:EF:57:C2:D9:D9:3A:C7:CF:9B:2F:17:CA:A7:85:9B:69:85:B3:9B:9D X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/71fC2dk6x8-bLxfKp4WbaYWzm50.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/d0/1e04b8-1031-43f9-9667-8e6f878db5f4/1/71fC2dk6x8-bLxfKp4WbaYWzm50.mft X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/d0/1e04b8-1031-43f9-9667-8e6f878db5f4/1/71fC2dk6x8-bLxfKp4WbaYWzm50.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 22:66:4d:50:84:ef:39:1b:42:d9:3a:62:63:29:b0:3c:83:7f: 43:9a:93:d2:89:15:cd:cf:b9:a9:4d:b7:38:73:e3:e3:f2:11: b6:58:f1:cd:70:63:ac:32:4a:85:d5:8f:53:c8:1b:17:ad:9f: 5a:70:e4:51:2e:9a:82:08:f7:6f:f1:72:5c:d6:36:aa:66:00: 64:3d:4d:85:04:24:4f:a2:4f:78:4c:1c:0d:7c:93:ac:45:91: cd:ed:7f:f7:48:10:7b:67:6a:0f:87:97:f5:b7:79:bf:c4:92: d2:c0:71:5a:cd:d7:b2:df:a9:95:f7:c2:6c:1a:6c:03:c2:ef: da:c9:89:5b:5c:be:ae:03:a3:74:b4:55:e1:e9:3d:84:86:45: e7:c8:73:bc:a0:ae:cc:5d:90:6a:65:17:aa:91:0d:a8:1b:2a: 6f:b1:75:c1:32:78:8a:80:d3:10:ee:d7:af:29:88:84:ab:47: 7b:1e:c5:b1:ba:2f:bd:85:d9:42:c9:34:a9:f1:12:a9:44:c6: 68:4b:f6:9a:83:6f:e6:53:22:ee:b7:80:62:5c:ca:52:a0:cf: 35:06:48:db:36:dc:90:bc:9d:67:3c:35:e2:16:ad:e7:f9:54: 78:6e:d1:96:cc:87:a5:1a:ba:30:81:f2:b6:eb:3f:11:f3:4d: 25:91:28:5d -----BEGIN CERTIFICATE----- MIIFFjCCA/6gAwIBAgISAZkWGomZnfxigjpRFX02T3yYMA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKGVmNTdjMmQ5ZDkzYWM3Y2Y5YjJmMTdjYWE3ODU5YjY5ODVi MzliOWQwHhcNMjUwOTA0MTkwMTAxWhcNMjUwOTA1MTkwMTAxWjAzMTEwLwYDVQQD Eyg0ZmY1MGIxMGZmNTg1ZWVjMmMwYzZiYzRhZjEzY2FmOTJjN2QyNWYwMIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAiHU/I4JNay5CAgy3wj0JaOYVodJk 16ddwFXwprt3PCdMHa/VgBnV2GupnWbjhQnot19Y4pUZEhl3MuMqmlyTCJWZJABQ z0qZJgF8XCEhG2huboX7cYrIQPiHMouT649UmAjLtJ2VrPyYamMnUJAIaDeNC7Bz goDferhvxE0bGFNycGXpIPBtGTNEu/Yu4zDjkMVCFqV+V9UGN0GoMTSQ8/HwMzUC HxxcozZbQpSMWgSrzqvnG9yJvWzLg5DlgNDxMPElxTb4p1yAtENaKivG7NDKLkXj UkgouMa0YVtr+x8mlC0fUgnFCQjFk8yYsH9JxrH2zMC26EGoJb96LOC0RwIDAQAB o4ICIjCCAh4wHQYDVR0OBBYEFE/1CxD/WF7sLAxrxK8TyvksfSXwMB8GA1UdIwQY MBaAFO9XwtnZOsfPmy8XyqeFm2mFs5udMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvNzFmQzJkazZ4OC1iTHhmS3A0V2JhWVd6bTUwLmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC9kMC8xZTA0YjgtMTAzMS00M2Y5LTk2Njct OGU2Zjg3OGRiNWY0LzEvNzFmQzJkazZ4OC1iTHhmS3A0V2JhWVd6bTUwLm1mdDCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC9kMC8xZTA0YjgtMTAzMS00M2Y5LTk2NjctOGU2Zjg3OGRiNWY0 LzEvNzFmQzJkazZ4OC1iTHhmS3A0V2JhWVd6bTUwLmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAImZNUITv ORtC2TpiYymwPIN/Q5qT0okVzc+5qU23OHPj4/IRtljxzXBjrDJKhdWPU8gbF62f WnDkUS6aggj3b/FyXNY2qmYAZD1NhQQkT6JPeEwcDXyTrEWRze1/90gQe2dqD4eX 9bd5v8SS0sBxWs3Xst+plffCbBpsA8Lv2smJW1y+rgOjdLRV4ek9hIZF58hzvKCu zF2QamUXqpENqBsqb7F1wTJ4ioDTEO7XrymIhKtHex7FsbovvYXZQsk0qfESqUTG aEv2moNv5lMi7reAYlzKUqDPNQZI2zbckLydZzw14hat5/lUeG7RlsyHpRq6MIHy tus/EfNNJZEoXQ== -----END CERTIFICATE-----Generated at Fri Sep 5 04:27:25 2025 by rpki-client