$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/d1/789caf-c8d2-419e-ae04-691422311729/1/8MEEBBaR3DhPOxqM35XJZijqba8.mft File: 8MEEBBaR3DhPOxqM35XJZijqba8.mft (raw, json) Hash identifier: 2XbzFjIVUwjIegdJmjQJzyXp+dWJV4JrmWz13hlcT40= Subject key identifier: F7:14:6A:45:0D:40:A9:11:73:51:FD:B0:C6:8B:A9:21:05:CE:D1:21 Authority key identifier: F0:C1:04:04:16:91:DC:38:4F:3B:1A:8C:DF:95:C9:66:28:EA:6D:AF Certificate issuer: /CN=f0c104041691dc384f3b1a8cdf95c96628ea6daf Certificate serial: 019925C46857AA26D73D2E8CAE38891B9FC0 Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/8MEEBBaR3DhPOxqM35XJZijqba8.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/d1/789caf-c8d2-419e-ae04-691422311729/1/8MEEBBaR3DhPOxqM35XJZijqba8.mft Manifest number: 1629 Signing time: Sun 07 Sep 2025 20:00:52 +0000 Manifest this update: Sun 07 Sep 2025 20:00:52 +0000 Manifest next update: Mon 08 Sep 2025 20:00:52 +0000 Files and hashes: 1: 1-jVAuwl23O0NOs1-bK6yeNscKls.roa (hash: Uvxs615yu+WEWoRFMHOzorsioWG8H9U4nAbzC8roX+c=) 2: 8MEEBBaR3DhPOxqM35XJZijqba8.crl (hash: fPm5+pLYQUyJKXzJrjSF1PgCiqv8H9yO0IOQh0MK9W4=) 3: Hl-LGslDYIhPlAkXHQHVv-RvB0w.roa (hash: O2E13yhrehXyHLH26oeDji6bWmBZEWAoPwvjmCy5UcQ=) 4: KeGOh-2gcusv29keikRHiEVKS4s.roa (hash: QrPYIqt13xYHx5UZtiEmzISVzXSCi7pxjFZqjccXxgI=) 5: PCT5Mgh2BfqwgaWaY02UF5LaLEs.roa (hash: XaBzd5GEKaiXR6sIMeiAlmk2HwlM0MvOxOjSag3QaY4=) 6: asCMHwRsfFwCKLi99bMyFo21krk.roa (hash: utShPNIu2DvLofXXWk5YOZ1a0OQi1aHbqM+BbMHKgoE=) 7: euk47PXoK5T6-tp0xVlaMzoR2zU.roa (hash: ELFMwMZ6NBCdcRDyZO9f72nzLI4WiJG57xVHtBVDcdU=) 8: fs_wxLugKiT_ydUrQOwGSh335rY.roa (hash: Q5dvvgKthsbcb9JzHMCTpI33x4XiWX2kEMaFSL83EKo=) 9: s-NcW6l6hXn5NOmuFXHN7mTAqcY.roa (hash: Ec6KZfarDMvuXKyozJ8ogUajfjL0rcRRpwLDmiHket8=) 10: xs5EMPFexMMDbg6ZozpAr6uWE70.roa (hash: qg/QvTawYThYqecFxjzESCzrgezKdtEVEc1jID0tLZg=) Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/d1/789caf-c8d2-419e-ae04-691422311729/1/8MEEBBaR3DhPOxqM35XJZijqba8.crl rsync://rpki.ripe.net/repository/DEFAULT/d1/789caf-c8d2-419e-ae04-691422311729/1/8MEEBBaR3DhPOxqM35XJZijqba8.mft rsync://rpki.ripe.net/repository/DEFAULT/8MEEBBaR3DhPOxqM35XJZijqba8.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Mon 08 Sep 2025 20:00:52 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:99:25:c4:68:57:aa:26:d7:3d:2e:8c:ae:38:89:1b:9f:c0 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=f0c104041691dc384f3b1a8cdf95c96628ea6daf Validity Not Before: Sep 7 20:00:52 2025 GMT Not After : Sep 8 20:00:52 2025 GMT Subject: CN=f7146a450d40a9117351fdb0c68ba92105ced121 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:b6:13:79:e3:86:88:57:b6:87:a8:77:0e:61:a4: 68:30:a3:05:87:a5:74:a4:64:9d:3f:98:7b:c1:d8: a0:e2:31:3f:7f:fb:f3:ba:31:29:31:a5:f5:f9:4e: 6a:93:25:b2:09:c6:de:08:97:a1:df:1c:2e:99:66: 4c:57:53:c4:ce:c1:33:cf:7c:db:0b:56:e7:63:8b: 8a:74:57:c2:99:59:a0:28:d3:ed:26:06:06:07:13: c0:2a:70:7e:e4:cc:e1:c0:28:96:be:50:83:e9:4b: 39:a7:e8:97:cb:ba:7a:7a:f2:57:77:51:d0:3f:64: 6d:3b:a5:f3:bd:bd:ce:81:6d:83:61:7f:10:f9:d7: d9:9a:3b:1d:e6:6d:2b:dc:24:f1:88:de:16:ed:d4: 53:db:e0:5b:fc:a0:db:21:2f:53:dd:ef:06:b1:4e: e3:6d:8d:a0:e2:0e:a0:b1:98:50:81:84:da:08:78: 7a:89:c9:ba:59:0e:b7:c9:76:6f:61:cf:6c:f3:d9: af:78:fb:7f:4f:ec:40:af:ff:1b:f7:c8:32:5f:64: 50:78:25:0f:a7:d3:25:c2:e0:19:14:0b:68:72:c0: 0e:0c:af:dd:bf:8a:9a:b2:c5:a2:a5:0f:30:a0:c5: ab:73:79:27:b3:ce:bb:49:a7:62:75:26:c4:57:0f: 50:cb Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: F7:14:6A:45:0D:40:A9:11:73:51:FD:B0:C6:8B:A9:21:05:CE:D1:21 X509v3 Authority Key Identifier: keyid:F0:C1:04:04:16:91:DC:38:4F:3B:1A:8C:DF:95:C9:66:28:EA:6D:AF X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/8MEEBBaR3DhPOxqM35XJZijqba8.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/d1/789caf-c8d2-419e-ae04-691422311729/1/8MEEBBaR3DhPOxqM35XJZijqba8.mft X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/d1/789caf-c8d2-419e-ae04-691422311729/1/8MEEBBaR3DhPOxqM35XJZijqba8.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 3a:70:4c:37:9a:30:b7:6a:14:ec:10:28:56:ea:cc:69:e3:3a: 46:88:e0:63:c3:d9:a9:7c:11:bd:f0:e5:e5:51:12:b1:c0:45: 7e:f6:38:41:68:b5:e0:e6:00:9e:7b:f4:93:eb:16:1d:a4:88: 42:95:cc:d3:35:b6:ce:f6:86:4f:1a:40:da:91:d4:51:5f:26: 3f:db:b8:60:c2:2d:5b:54:85:b5:55:57:31:5e:4d:d8:dc:80: 28:b5:f9:f2:32:1b:57:30:76:85:34:5f:94:d4:b9:09:90:15: 03:ca:96:d6:f1:bd:f9:94:c6:a0:00:ee:74:0a:37:b3:82:19: 36:d2:d8:cf:63:85:a3:25:d3:c4:6d:3d:49:7c:f5:50:94:81: 75:d0:74:77:71:bb:2d:87:fb:14:d1:b8:90:e3:de:fc:b5:de: b1:4c:a4:55:c4:64:11:51:55:0e:4b:c1:c1:64:16:3d:2b:8e: 04:31:b8:e6:aa:25:58:10:a9:2a:ad:ff:b8:61:a5:90:59:64: f7:76:99:46:e6:62:55:74:dc:3d:85:78:69:3a:d5:9c:7a:b8: 86:5a:76:97:d5:9f:45:2f:32:03:9a:34:3b:92:69:4c:11:0a: 94:0a:b2:9b:be:ee:c1:dc:b1:ee:b5:1c:b1:7e:b8:33:aa:ec: 6f:ef:2e:c4 -----BEGIN CERTIFICATE----- MIIFFjCCA/6gAwIBAgISAZklxGhXqibXPS6MrjiJG5/AMA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKGYwYzEwNDA0MTY5MWRjMzg0ZjNiMWE4Y2RmOTVjOTY2Mjhl YTZkYWYwHhcNMjUwOTA3MjAwMDUyWhcNMjUwOTA4MjAwMDUyWjAzMTEwLwYDVQQD EyhmNzE0NmE0NTBkNDBhOTExNzM1MWZkYjBjNjhiYTkyMTA1Y2VkMTIxMIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAthN544aIV7aHqHcOYaRoMKMFh6V0 pGSdP5h7wdig4jE/f/vzujEpMaX1+U5qkyWyCcbeCJeh3xwumWZMV1PEzsEzz3zb C1bnY4uKdFfCmVmgKNPtJgYGBxPAKnB+5MzhwCiWvlCD6Us5p+iXy7p6evJXd1HQ P2RtO6Xzvb3OgW2DYX8Q+dfZmjsd5m0r3CTxiN4W7dRT2+Bb/KDbIS9T3e8GsU7j bY2g4g6gsZhQgYTaCHh6icm6WQ63yXZvYc9s89mvePt/T+xAr/8b98gyX2RQeCUP p9MlwuAZFAtocsAODK/dv4qassWipQ8woMWrc3kns867SadidSbEVw9QywIDAQAB o4ICIjCCAh4wHQYDVR0OBBYEFPcUakUNQKkRc1H9sMaLqSEFztEhMB8GA1UdIwQY MBaAFPDBBAQWkdw4TzsajN+VyWYo6m2vMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvOE1FRUJCYVIzRGhQT3hxTTM1WEpaaWpxYmE4LmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC9kMS83ODljYWYtYzhkMi00MTllLWFlMDQt NjkxNDIyMzExNzI5LzEvOE1FRUJCYVIzRGhQT3hxTTM1WEpaaWpxYmE4Lm1mdDCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC9kMS83ODljYWYtYzhkMi00MTllLWFlMDQtNjkxNDIyMzExNzI5 LzEvOE1FRUJCYVIzRGhQT3hxTTM1WEpaaWpxYmE4LmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAOnBMN5ow t2oU7BAoVurMaeM6RojgY8PZqXwRvfDl5VESscBFfvY4QWi14OYAnnv0k+sWHaSI QpXM0zW2zvaGTxpA2pHUUV8mP9u4YMItW1SFtVVXMV5N2NyAKLX58jIbVzB2hTRf lNS5CZAVA8qW1vG9+ZTGoADudAo3s4IZNtLYz2OFoyXTxG09SXz1UJSBddB0d3G7 LYf7FNG4kOPe/LXesUykVcRkEVFVDkvBwWQWPSuOBDG45qolWBCpKq3/uGGlkFlk 93aZRuZiVXTcPYV4aTrVnHq4hlp2l9WfRS8yA5o0O5JpTBEKlAqym77uwdyx7rUc sX64M6rsb+8uxA== -----END CERTIFICATE-----Generated at Mon Sep 8 05:17:44 2025 by rpki-client