$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/dc/c515c9-df08-426c-80e6-0367268ff871/1/CBt6IuUc-5z4QgXkRJmYrVXY8GU.mft File: CBt6IuUc-5z4QgXkRJmYrVXY8GU.mft (raw, json) Hash identifier: daWXWA7N1/54AQEkaVlEXNyumVNCDBKA+P717Dtbhug= Subject key identifier: A1:33:EB:97:BE:03:1D:3F:6E:9A:3F:DE:97:28:43:6E:D6:E8:67:32 Authority key identifier: 08:1B:7A:22:E5:1C:FB:9C:F8:42:05:E4:44:99:98:AD:55:D8:F0:65 Certificate issuer: /CN=081b7a22e51cfb9cf84205e4449998ad55d8f065 Certificate serial: 01992CA250A09C8308C1F80D9F86ED455373 Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/CBt6IuUc-5z4QgXkRJmYrVXY8GU.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/dc/c515c9-df08-426c-80e6-0367268ff871/1/CBt6IuUc-5z4QgXkRJmYrVXY8GU.mft Manifest number: 16AB Signing time: Tue 09 Sep 2025 04:00:58 +0000 Manifest this update: Tue 09 Sep 2025 04:00:58 +0000 Manifest next update: Wed 10 Sep 2025 04:00:58 +0000 Files and hashes: 1: 0EWIFMkHOwPxXxJO-cVVnlFMV9M.roa (hash: H3HRfMwSGiaOC4hjRP3JPpolbe1iEtk1HgVt+tXcFJg=) 2: 1Q8S-F04ndhiDn0SGwOoAJvpcJE.roa (hash: C3Etga/0CnN14pA6mDGityRvYUsO547YlA3aweNBuiE=) 3: 5HzzPzyXFWUltUFIxz7A1OHGi7o.roa (hash: KdXF+S8JaHRcZ3Ivt3Pqt/DXcq9oRCgLGhDICrSfT58=) 4: 8-WV0KFzAJRQQFuP9I6yLavMsag.roa (hash: I9thkkCJIm1PtEdyWstVE+kMoQxLauXSjcbMKnMywsw=) 5: 9NRiEzWNWvOsqkkmj1H_nO4JtIA.roa (hash: M1EfpG0UAk+KXmH4YDb8gbqx8X4cMoL0D3M3L/57Gmk=) 6: CBt6IuUc-5z4QgXkRJmYrVXY8GU.crl (hash: so6rMOYWul8iOl63lTyThAghDELieomapivdMASCDSw=) 7: CdZHXMtiuXIYHPmoJY2aErxG8Z8.roa (hash: zau8aloWL7mHqdY4KBJaLbm12+SMJIeq7unHMUAtkpg=) 8: GnVxDQNRy4lZ_6dGRtjVD3G4cHQ.roa (hash: uewNPszrVAmQ8TC2z53P69rsch1KQGC60dIp6JPFrsU=) 9: M4I4vx1xHRyGLzdFv0m3WqQ7kbc.roa (hash: 2EMSvLZ8cjOngMWy3qqLP47J5l90EJ/AMLuHP59YgVk=) 10: QDnTB1-gKLLvkYk5f0mHuXK293g.roa (hash: ITp7yMZbWE36QWni9uBDxLpY4F+C9+SnVAj3E7l62Ts=) 11: XDAdp99VnBF7cnnsQ12OybJrT8Y.roa (hash: RlZg9LpMx3Sn+N/ygBjqDdQQDqiZuazZKwQVgxx0FBg=) 12: rfdo-9tZjARHX4NveRw0hMtJZi0.roa (hash: 5ECReeTc1Tc4KP4YsINLVoWJBI6UqeiVxcrFrB9M65o=) 13: tjV22hyfL6sKASeEJo6Ke2cIRMg.roa (hash: j+NWMjI7+Df8SVOaL0Iyl9IZZ4H1LL2E359iqV63je4=) 14: zCJNwAHBT-OuD8JSwLlWmHeq2i0.roa (hash: xxcu2GFnZrIoRaIL254U2SP3O3E+qALgdaalLMmqYoY=) Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/dc/c515c9-df08-426c-80e6-0367268ff871/1/CBt6IuUc-5z4QgXkRJmYrVXY8GU.crl rsync://rpki.ripe.net/repository/DEFAULT/dc/c515c9-df08-426c-80e6-0367268ff871/1/CBt6IuUc-5z4QgXkRJmYrVXY8GU.mft rsync://rpki.ripe.net/repository/DEFAULT/CBt6IuUc-5z4QgXkRJmYrVXY8GU.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Wed 10 Sep 2025 04:00:58 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:99:2c:a2:50:a0:9c:83:08:c1:f8:0d:9f:86:ed:45:53:73 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=081b7a22e51cfb9cf84205e4449998ad55d8f065 Validity Not Before: Sep 9 04:00:58 2025 GMT Not After : Sep 10 04:00:58 2025 GMT Subject: CN=a133eb97be031d3f6e9a3fde9728436ed6e86732 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:98:32:39:ad:79:e0:24:f2:cd:32:ad:79:f1:d4: db:6e:0e:0a:f7:5b:4b:cc:18:76:94:48:5d:95:96: 70:f5:91:9e:df:6b:ba:31:9c:3b:e0:de:7b:29:58: 5c:75:db:0e:8c:bd:aa:03:91:e8:d3:40:32:71:c8: 2f:12:2d:35:01:a4:30:9e:62:94:83:90:ea:d9:63: df:e7:a5:63:b3:05:13:56:12:36:cc:69:06:6f:b1: 00:5c:32:48:91:e2:80:84:41:01:55:37:d8:10:7a: 30:31:74:82:57:f8:a3:6f:68:9c:4d:68:66:43:b2: bd:20:3d:25:4c:2b:00:ce:b4:ca:93:0d:39:45:81: ba:3e:2e:66:06:bb:7b:de:08:22:e6:7d:55:f4:d4: 32:25:01:c7:3f:ac:05:7c:08:4e:0b:51:34:15:01: 99:17:b4:97:3c:9e:51:80:21:9d:8d:6e:67:01:af: 2f:f5:db:2a:af:46:c3:6d:74:e9:92:7b:37:be:e2: 92:c4:35:82:f8:f2:f7:9d:de:e7:8e:5c:aa:d1:f6: ab:60:70:08:04:f1:66:ca:6e:8b:dc:35:e6:7a:0c: 66:d4:18:82:b3:92:63:6c:5f:6d:87:91:14:8c:21: 3d:50:e3:e3:d9:42:ba:02:a2:02:4c:66:0d:de:4f: b5:0d Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: A1:33:EB:97:BE:03:1D:3F:6E:9A:3F:DE:97:28:43:6E:D6:E8:67:32 X509v3 Authority Key Identifier: keyid:08:1B:7A:22:E5:1C:FB:9C:F8:42:05:E4:44:99:98:AD:55:D8:F0:65 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/CBt6IuUc-5z4QgXkRJmYrVXY8GU.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/dc/c515c9-df08-426c-80e6-0367268ff871/1/CBt6IuUc-5z4QgXkRJmYrVXY8GU.mft X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/dc/c515c9-df08-426c-80e6-0367268ff871/1/CBt6IuUc-5z4QgXkRJmYrVXY8GU.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 45:3a:2b:c2:17:46:2a:7b:ed:81:5d:f1:26:38:e9:9a:67:ba: 4b:b0:de:e8:76:0b:f8:2b:d3:08:1f:ad:0c:15:eb:9c:15:65: e3:1b:fc:4f:6e:2f:64:39:1a:b9:d1:32:01:a3:ef:ce:67:9a: d9:b2:d2:24:ca:36:ab:68:e8:ca:c3:72:8f:3f:0a:69:ea:40: c2:2e:4d:85:c5:4f:33:69:4a:7a:5c:d7:b3:77:cd:ab:b7:d2: 81:19:f9:24:ec:13:b6:ea:97:e7:6e:4b:f1:95:2c:79:b2:82: 92:76:24:e9:ec:e0:c0:56:ed:cb:ac:75:41:f4:f0:ae:7c:52: 09:14:67:05:c9:49:aa:50:1c:c8:69:0b:a6:81:cd:bd:da:9d: 2c:1b:82:80:3a:c9:2e:77:c2:b0:f5:a8:3d:1d:c6:14:4e:46: 37:69:7f:ce:76:fa:28:6c:24:95:40:8a:16:59:1d:19:42:83: 04:67:2f:64:d7:d7:ef:35:77:a1:85:d1:e6:8c:7c:86:7f:5e: ec:4a:85:06:a1:15:10:78:eb:f5:00:ec:8b:29:6e:95:db:96: bc:2f:d8:c1:96:8a:00:3e:f3:ac:18:8e:a9:76:83:6b:0c:4e: c4:b0:66:e7:c4:3c:2f:00:91:a9:33:37:0e:92:e7:37:1f:7e: a0:59:6e:10 -----BEGIN CERTIFICATE----- MIIFFjCCA/6gAwIBAgISAZksolCgnIMIwfgNn4btRVNzMA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKDA4MWI3YTIyZTUxY2ZiOWNmODQyMDVlNDQ0OTk5OGFkNTVk OGYwNjUwHhcNMjUwOTA5MDQwMDU4WhcNMjUwOTEwMDQwMDU4WjAzMTEwLwYDVQQD EyhhMTMzZWI5N2JlMDMxZDNmNmU5YTNmZGU5NzI4NDM2ZWQ2ZTg2NzMyMIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAmDI5rXngJPLNMq158dTbbg4K91tL zBh2lEhdlZZw9ZGe32u6MZw74N57KVhcddsOjL2qA5Ho00AyccgvEi01AaQwnmKU g5Dq2WPf56VjswUTVhI2zGkGb7EAXDJIkeKAhEEBVTfYEHowMXSCV/ijb2icTWhm Q7K9ID0lTCsAzrTKkw05RYG6Pi5mBrt73ggi5n1V9NQyJQHHP6wFfAhOC1E0FQGZ F7SXPJ5RgCGdjW5nAa8v9dsqr0bDbXTpkns3vuKSxDWC+PL3nd7njlyq0farYHAI BPFmym6L3DXmegxm1BiCs5JjbF9th5EUjCE9UOPj2UK6AqICTGYN3k+1DQIDAQAB o4ICIjCCAh4wHQYDVR0OBBYEFKEz65e+Ax0/bpo/3pcoQ27W6GcyMB8GA1UdIwQY MBaAFAgbeiLlHPuc+EIF5ESZmK1V2PBlMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvQ0J0Nkl1VWMtNXo0UWdYa1JKbVlyVlhZOEdVLmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC9kYy9jNTE1YzktZGYwOC00MjZjLTgwZTYt MDM2NzI2OGZmODcxLzEvQ0J0Nkl1VWMtNXo0UWdYa1JKbVlyVlhZOEdVLm1mdDCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC9kYy9jNTE1YzktZGYwOC00MjZjLTgwZTYtMDM2NzI2OGZmODcx LzEvQ0J0Nkl1VWMtNXo0UWdYa1JKbVlyVlhZOEdVLmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEARTorwhdG KnvtgV3xJjjpmme6S7De6HYL+CvTCB+tDBXrnBVl4xv8T24vZDkaudEyAaPvzmea 2bLSJMo2q2joysNyjz8KaepAwi5NhcVPM2lKelzXs3fNq7fSgRn5JOwTtuqX525L 8ZUsebKCknYk6ezgwFbty6x1QfTwrnxSCRRnBclJqlAcyGkLpoHNvdqdLBuCgDrJ LnfCsPWoPR3GFE5GN2l/znb6KGwklUCKFlkdGUKDBGcvZNfX7zV3oYXR5ox8hn9e 7EqFBqEVEHjr9QDsiylulduWvC/YwZaKAD7zrBiOqXaDawxOxLBm58Q8LwCRqTM3 DpLnNx9+oFluEA== -----END CERTIFICATE-----Generated at Tue Sep 9 13:50:10 2025 by rpki-client