$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/de/f2bd6c-4843-4ead-aa09-3c16ff841ab2/1/b8UNDUIGe3arGi6OUz_4SbZdVvU.mft File: b8UNDUIGe3arGi6OUz_4SbZdVvU.mft (raw, json) Hash identifier: KpgPpGMzj6PUQylzb7dkXYrK6QfoFGpSviLokSfdg8g= Subject key identifier: 23:CC:E9:F9:B7:22:5E:20:49:CC:14:6C:3D:1A:D5:0E:B6:A5:13:4A Authority key identifier: 6F:C5:0D:0D:42:06:7B:76:AB:1A:2E:8E:53:3F:F8:49:B6:5D:56:F5 Certificate issuer: /CN=6fc50d0d42067b76ab1a2e8e533ff849b65d56f5 Certificate serial: 0199277C4ABA4D3C0785550C66F34868B5A8 Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/b8UNDUIGe3arGi6OUz_4SbZdVvU.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/de/f2bd6c-4843-4ead-aa09-3c16ff841ab2/1/b8UNDUIGe3arGi6OUz_4SbZdVvU.mft Manifest number: 169D Signing time: Mon 08 Sep 2025 04:01:20 +0000 Manifest this update: Mon 08 Sep 2025 04:01:20 +0000 Manifest next update: Tue 09 Sep 2025 04:01:20 +0000 Files and hashes: 1: 0Abj6PSR4FyJUqM6LoN6KFa-26E.roa (hash: 3N4/akmiC/u7gL1HF+D/mYuikLJRGoPmYVruDqzajtA=) 2: 1-HYjW61poyKPMhvfx7U4CngkbXQ.roa (hash: FgaQ7pllPxrtYs+K7a4T0YujtsmGhQlX0nAW+eszuLQ=) 3: 1X78ozO3_5ULJTTX4ARholYkMtY.roa (hash: 1YfjPO55+mmSYnYEpQNn/8Y7Ymp0JTDMtIPTDKYWHh8=) 4: 3yeC5jM2ksuqKR2Zh5IvhgGT7kM.roa (hash: aly6yVEpJfsikwPOCEOA8sYqzyulJ58cobvGMlp3Pfc=) 5: H6AhUHbx8OlryRkBD15AK_97AFI.roa (hash: aVuSxMtEE3jtCIFUPkZzKs9s0u5aGihLcG9skQiW4iU=) 6: IE5Ot6kXSpSm_XTJaCWCEcClZ1E.roa (hash: ecVDNUR7HlsILjWVcvUtVx/095hxRc4P38CIzJWANj8=) 7: K8brr-FPsMEnGF0kbZo88qS6lTk.roa (hash: qW/T11RMV283PJtyNsGcccWeoOYrXus8SlIyII3hPJA=) 8: OQtVR-cBTyQL6VvIXAOtawOW2cA.roa (hash: Y4JxghrLsZ564AFIbmlJP5QHypmTlarb7NM9FNTmN7A=) 9: RzzP2UDDSAPrZWNFm6aBz91iMgQ.roa (hash: 1RDkfiEzt2ZEB4LXorNIAFk4fcDKeMEBcQ7w1edzRtU=) 10: UND6ykiM5N2Whk6faH2bgr5_Tp8.roa (hash: 5dH/g9DexAH0bhxx/mr0h3rPJ5N5miOI47JiKbqWBiU=) 11: XKHgN2jT3_6QMfOgHKrS1JlPtdM.roa (hash: 0/lku7LnO6lIZwW3HNYBW2LCc3aSui+jPA3GCkogDfQ=) 12: b8UNDUIGe3arGi6OUz_4SbZdVvU.crl (hash: 3q7gC/GA9ybCyxHcDfi9zFE15uc7DG5iN0TC+u0oKcQ=) 13: hz97jgo9bqt0uT-ArAt9KzOXsP4.roa (hash: bhze+d6pD3xd6tpzBiM9HUGCjaef6tJylvnHETr5GxE=) 14: wEFBReYub_TeCbtnkjQHEDS6zaQ.roa (hash: 5e2lfQsxA6BsgP6dDtPIK0Ql9foij6lPOeMn2Q1JhkI=) 15: yhQ6xBNVu2d9gMvHbWmdb3fTnDU.roa (hash: QpVyxb1Mu2qXGgc7DSw5FLEOPavgu3Uy/ZdRkYO4Cds=) Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/de/f2bd6c-4843-4ead-aa09-3c16ff841ab2/1/b8UNDUIGe3arGi6OUz_4SbZdVvU.crl rsync://rpki.ripe.net/repository/DEFAULT/de/f2bd6c-4843-4ead-aa09-3c16ff841ab2/1/b8UNDUIGe3arGi6OUz_4SbZdVvU.mft rsync://rpki.ripe.net/repository/DEFAULT/b8UNDUIGe3arGi6OUz_4SbZdVvU.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Tue 09 Sep 2025 01:00:23 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:99:27:7c:4a:ba:4d:3c:07:85:55:0c:66:f3:48:68:b5:a8 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=6fc50d0d42067b76ab1a2e8e533ff849b65d56f5 Validity Not Before: Sep 8 04:01:20 2025 GMT Not After : Sep 9 04:01:20 2025 GMT Subject: CN=23cce9f9b7225e2049cc146c3d1ad50eb6a5134a Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:ae:67:2c:4a:6c:dc:7c:5e:2b:58:4a:f4:90:01: 51:56:a6:2d:79:f1:64:8a:2f:43:d3:f6:b8:cd:3d: c2:11:59:3b:c2:ab:52:72:c9:d9:6e:2e:f2:5e:ad: ad:4c:15:f1:e2:b3:c0:2a:be:33:82:3f:27:17:86: a5:a2:b4:94:85:0a:02:d0:ae:86:6c:48:e8:f8:25: 09:d5:fe:70:a2:ab:a4:06:af:c7:f6:84:27:b5:76: da:17:28:65:5c:d8:0b:2e:d8:49:a0:2d:7d:3b:52: 52:4e:b5:ba:6f:9e:e7:32:7f:cb:25:20:57:c0:dc: be:49:aa:f6:79:02:7d:1e:2c:f4:9b:a9:4a:89:40: d6:d6:a5:26:2a:1f:cc:90:36:eb:83:c3:f6:78:52: 81:b9:29:f5:d7:06:ba:ba:54:9c:64:4a:a3:4e:81: f0:62:24:7c:22:ad:01:7c:c6:45:a7:96:bb:db:b8: 0c:91:e8:a8:87:58:34:8f:90:8a:1c:c5:68:18:70: 4d:0c:1a:3d:e2:46:4b:45:6b:ed:7f:f4:70:1b:de: 58:d1:f3:7b:fc:f1:ad:e9:a0:c2:b2:4e:1c:e5:40: f3:64:4f:d8:83:81:2f:35:a4:fb:a1:66:d3:58:83: 5f:64:5f:06:34:18:ca:67:5c:c4:02:fd:7e:47:52: 51:79 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 23:CC:E9:F9:B7:22:5E:20:49:CC:14:6C:3D:1A:D5:0E:B6:A5:13:4A X509v3 Authority Key Identifier: keyid:6F:C5:0D:0D:42:06:7B:76:AB:1A:2E:8E:53:3F:F8:49:B6:5D:56:F5 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/b8UNDUIGe3arGi6OUz_4SbZdVvU.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/de/f2bd6c-4843-4ead-aa09-3c16ff841ab2/1/b8UNDUIGe3arGi6OUz_4SbZdVvU.mft X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/de/f2bd6c-4843-4ead-aa09-3c16ff841ab2/1/b8UNDUIGe3arGi6OUz_4SbZdVvU.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 3d:1c:a9:c2:6b:fe:2c:57:c8:29:2e:4a:03:ce:b6:08:56:1f: c6:44:4a:fb:2b:5f:71:9d:9f:a3:00:81:03:0a:29:72:66:3a: a0:63:95:fb:0d:cc:2c:9f:83:da:3e:51:9b:f7:bb:19:4a:f9: dd:4a:68:16:bf:f2:da:19:bc:12:17:86:c7:f3:b6:66:1f:8f: ea:e9:38:bf:23:b9:05:f1:ba:0e:a7:75:f1:d8:ea:80:73:1e: df:f6:65:61:5f:5f:17:a6:59:31:ee:a8:a9:43:53:88:33:6e: e5:81:f6:d9:c7:ff:ea:9d:8c:15:b1:dd:61:39:fc:99:82:53: b0:07:4d:4f:f2:35:e0:44:b9:11:f6:eb:3b:83:c1:f5:42:c8: 4c:e6:f6:27:80:96:28:7b:0e:bf:c3:ed:19:44:10:23:80:c9: 4e:58:43:37:5c:6a:43:7a:1b:9f:e1:a0:9f:e6:27:dd:b3:a1: a6:ec:ab:e2:84:81:d6:2c:f7:bf:ef:c2:ba:a6:2d:08:34:07: 84:25:cc:31:76:37:54:c9:80:9d:f1:14:6a:63:1a:c2:c6:27: 42:62:6b:e4:8b:b0:60:31:84:44:80:7d:f5:db:05:fb:4a:0e: 31:87:2a:76:0e:44:5d:7b:9e:9b:e2:c9:bc:99:81:06:2a:97: 66:f9:ce:6f -----BEGIN CERTIFICATE----- MIIFFjCCA/6gAwIBAgISAZknfEq6TTwHhVUMZvNIaLWoMA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKDZmYzUwZDBkNDIwNjdiNzZhYjFhMmU4ZTUzM2ZmODQ5YjY1 ZDU2ZjUwHhcNMjUwOTA4MDQwMTIwWhcNMjUwOTA5MDQwMTIwWjAzMTEwLwYDVQQD EygyM2NjZTlmOWI3MjI1ZTIwNDljYzE0NmMzZDFhZDUwZWI2YTUxMzRhMIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEArmcsSmzcfF4rWEr0kAFRVqYtefFk ii9D0/a4zT3CEVk7wqtScsnZbi7yXq2tTBXx4rPAKr4zgj8nF4alorSUhQoC0K6G bEjo+CUJ1f5woqukBq/H9oQntXbaFyhlXNgLLthJoC19O1JSTrW6b57nMn/LJSBX wNy+Sar2eQJ9Hiz0m6lKiUDW1qUmKh/MkDbrg8P2eFKBuSn11wa6ulScZEqjToHw YiR8Iq0BfMZFp5a727gMkeioh1g0j5CKHMVoGHBNDBo94kZLRWvtf/RwG95Y0fN7 /PGt6aDCsk4c5UDzZE/Yg4EvNaT7oWbTWINfZF8GNBjKZ1zEAv1+R1JReQIDAQAB o4ICIjCCAh4wHQYDVR0OBBYEFCPM6fm3Il4gScwUbD0a1Q62pRNKMB8GA1UdIwQY MBaAFG/FDQ1CBnt2qxoujlM/+Em2XVb1MA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvYjhVTkRVSUdlM2FyR2k2T1V6XzRTYlpkVnZVLmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC9kZS9mMmJkNmMtNDg0My00ZWFkLWFhMDkt M2MxNmZmODQxYWIyLzEvYjhVTkRVSUdlM2FyR2k2T1V6XzRTYlpkVnZVLm1mdDCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC9kZS9mMmJkNmMtNDg0My00ZWFkLWFhMDktM2MxNmZmODQxYWIy LzEvYjhVTkRVSUdlM2FyR2k2T1V6XzRTYlpkVnZVLmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAPRypwmv+ LFfIKS5KA862CFYfxkRK+ytfcZ2fowCBAwopcmY6oGOV+w3MLJ+D2j5Rm/e7GUr5 3UpoFr/y2hm8EheGx/O2Zh+P6uk4vyO5BfG6Dqd18djqgHMe3/ZlYV9fF6ZZMe6o qUNTiDNu5YH22cf/6p2MFbHdYTn8mYJTsAdNT/I14ES5EfbrO4PB9ULITOb2J4CW KHsOv8PtGUQQI4DJTlhDN1xqQ3obn+Ggn+Yn3bOhpuyr4oSB1iz3v+/CuqYtCDQH hCXMMXY3VMmAnfEUamMawsYnQmJr5IuwYDGERIB99dsF+0oOMYcqdg5EXXuem+LJ vJmBBiqXZvnObw== -----END CERTIFICATE-----Generated at Mon Sep 8 08:50:20 2025 by rpki-client