$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/df/01058a-4a82-4818-972d-842858122bbc/1/RklSvBZUQexuLiAQyTPcgw82FzE.mft File: RklSvBZUQexuLiAQyTPcgw82FzE.mft (raw, json) Hash identifier: BmL6d0Rnpofjz1izzDhCKXiaepiUVrQTNP++MACac6Y= Subject key identifier: 37:E5:09:B1:14:C0:1A:76:6E:EF:6B:53:83:72:FF:E6:76:81:B7:F0 Authority key identifier: 46:49:52:BC:16:54:41:EC:6E:2E:20:10:C9:33:DC:83:0F:36:17:31 Certificate issuer: /CN=464952bc165441ec6e2e2010c933dc830f361731 Certificate serial: 01995AC46146371BCB422D013CF3CF59FDA5 Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/RklSvBZUQexuLiAQyTPcgw82FzE.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/df/01058a-4a82-4818-972d-842858122bbc/1/RklSvBZUQexuLiAQyTPcgw82FzE.mft Manifest number: 0A39 Signing time: Thu 18 Sep 2025 03:00:43 +0000 Manifest this update: Thu 18 Sep 2025 03:00:43 +0000 Manifest next update: Fri 19 Sep 2025 03:00:43 +0000 Files and hashes: 1: 7HWHA8UqwHtsqDMBW-DwrAaDDjM.roa (hash: e8s5o0udkcNi/3gr4/Pby8a6BORkIl6Tk5BcUgdqf98=) 2: 8ZU3bGrm9xWhwMuNBNg_sVSf78w.roa (hash: q1BAPF4hVnnZILV3v3GzNcOP1nX7SZBYfnbCOVjjzwo=) 3: 9-Cs-wlSKolkQOZlHuZ6o38xnW8.roa (hash: /LvilRmKOS6giT5Dw0+bvBLFwH/Vk7jUGiOc4qBQkvY=) 4: CH-MNJ62x7kM2_t2iuWi-Pl441k.roa (hash: HaFXnQzr7MPgH+K0peJzoRzHcSdMpsIno7S1dDVTYls=) 5: CshdLYgm8KyBI5ue0kfqXsT_Uys.roa (hash: DVS6FpXLV5zruadQ+b5hngh4jzKnFCNJRTeuOL+rHMo=) 6: F93HK3zZbjyanEiJSO9cArJniew.roa (hash: wrh+x7Klvcmq0ZMqoDo7aM3datdsQCypsCC/kWY8BG4=) 7: RklSvBZUQexuLiAQyTPcgw82FzE.crl (hash: kcD+HGQog/qRr5OuYoQeYu/XnZ6mSkd69dhawt6u5No=) 8: RocZhE1Sgw4wWmm8LnKO4d7f68w.roa (hash: +rys+d7y9dD2VIYL252iXtWKGL/n4lME4L1WtriVBxI=) 9: U47Wz_LD2xLJywbdswHmPzRJpDo.roa (hash: qCq8pw/dLAXcMlcPqPaGHxhAYIuN8gInNQEcnd7HSIs=) 10: bsJ2xZlOkw1plvuA7l4e3XmHypY.roa (hash: 1vESi505hq9zZ4EhI/OkoYePF4oay9Y9KHYuJ7nDjEk=) 11: cSOzcJuJznyp0-yCo16vcwC-SO4.roa (hash: /BcpV3CpFg+yHnaLyG3CeUoFmA/RLptEV35Vt1SRJwQ=) 12: g8u27N4QItUirByGNIpicNOy82Y.roa (hash: 86XD7A3oPGKMoD9IAzlfVhw0nOpZrI3Tfibq7N31K6c=) 13: iH3j8qY1-071YfTwOblznlAQw6s.roa (hash: yME8emyVjusbrBjqemdlgI+CwPOa3VlHZpR5ZeMxUWc=) 14: mGSm6WnPN8htR3E3SqRmvrkDAW0.roa (hash: ma8SoOibhRfVHVvLv4aSGOKoznJfyTFPs8hixxk0hN8=) 15: ryDPDikJ1i_zY_ss9G41qhvN3jc.roa (hash: h94vj7TMlIg5ainHE5mYHmcUUj3Q1WNeWVzGbaI/3Fg=) 16: s34gFp_Dg8YCv8xU55YOYuR_tp0.roa (hash: 6OSop7WtLWi7lLLdg7yDCXvjXq4AkQqEA6GX04GSf58=) Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/df/01058a-4a82-4818-972d-842858122bbc/1/RklSvBZUQexuLiAQyTPcgw82FzE.crl rsync://rpki.ripe.net/repository/DEFAULT/df/01058a-4a82-4818-972d-842858122bbc/1/RklSvBZUQexuLiAQyTPcgw82FzE.mft rsync://rpki.ripe.net/repository/DEFAULT/RklSvBZUQexuLiAQyTPcgw82FzE.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Thu 18 Sep 2025 21:38:15 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:99:5a:c4:61:46:37:1b:cb:42:2d:01:3c:f3:cf:59:fd:a5 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=464952bc165441ec6e2e2010c933dc830f361731 Validity Not Before: Sep 18 03:00:43 2025 GMT Not After : Sep 19 03:00:43 2025 GMT Subject: CN=37e509b114c01a766eef6b538372ffe67681b7f0 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:c5:0e:a7:ab:ce:5c:1a:2b:32:79:75:39:99:d1: 6e:6f:14:38:3f:67:39:77:aa:d7:3f:23:70:50:2e: 16:29:da:6e:c5:c8:af:77:bf:52:63:12:ee:cb:e7: 60:40:34:9a:f4:4c:2c:ae:44:e3:f5:3f:8d:6d:b1: 37:02:68:a9:00:84:9c:7e:1f:0b:55:86:eb:d3:3e: 9f:97:64:3f:7b:df:9d:ea:5a:61:89:42:79:c3:e0: 50:9f:f0:e7:bf:5f:e9:59:c6:c3:ea:56:0e:23:60: 33:03:60:fc:7a:56:a4:74:1d:44:18:c3:cd:b4:98: 40:f8:f7:77:36:a1:4e:29:8a:91:a1:fe:ae:f7:68: f9:91:eb:ce:17:68:da:4a:ba:db:48:aa:57:74:9b: 77:f0:35:d4:21:4f:e2:91:c8:75:53:5d:67:81:03: 40:c3:72:5f:e4:01:3b:be:39:18:99:95:41:3c:fc: 96:1e:30:29:b1:14:2f:de:a9:06:b7:e7:5b:7e:c8: e5:1f:e1:b0:66:27:41:c4:b4:d4:29:15:22:d7:35: a1:90:11:9a:74:b4:0e:2a:27:82:85:3e:52:cd:e8: 70:88:24:44:c6:73:7b:6b:95:f8:6f:29:a4:6c:f5: 12:2c:cd:b3:cc:02:17:c8:a5:62:ab:b0:bf:da:85: 0d:b3 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 37:E5:09:B1:14:C0:1A:76:6E:EF:6B:53:83:72:FF:E6:76:81:B7:F0 X509v3 Authority Key Identifier: keyid:46:49:52:BC:16:54:41:EC:6E:2E:20:10:C9:33:DC:83:0F:36:17:31 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/RklSvBZUQexuLiAQyTPcgw82FzE.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/df/01058a-4a82-4818-972d-842858122bbc/1/RklSvBZUQexuLiAQyTPcgw82FzE.mft X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/df/01058a-4a82-4818-972d-842858122bbc/1/RklSvBZUQexuLiAQyTPcgw82FzE.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 2e:27:2c:af:0d:5d:b6:73:a6:7c:91:50:d5:46:a0:de:8b:a3: 08:50:ea:45:9a:4d:60:51:bc:12:49:50:e9:14:cd:bf:d4:ad: 31:0d:96:10:7d:a6:82:07:36:d9:a7:1c:49:10:7d:5a:c1:d1: 8d:e6:e7:f1:90:29:99:3e:c0:2f:ee:46:68:52:34:f6:25:5f: 01:33:1f:7c:a4:45:2c:4d:f0:f2:7b:07:e3:88:c8:89:82:1f: 66:73:3f:93:64:d9:97:5e:e2:30:ce:bd:59:c1:4a:29:09:e5: 24:0b:d7:31:a7:ed:44:21:39:f7:f5:1a:a4:89:c2:04:f6:76: 53:3f:62:e9:bb:4e:39:41:50:a1:2c:59:de:ac:61:35:b9:b4: 5c:55:e8:83:44:42:0e:c6:f3:1a:eb:11:5c:cf:a9:a1:18:50: 47:41:76:73:19:db:c5:e2:36:4f:08:f3:aa:c4:f8:cf:2d:c0: 5a:50:8b:aa:37:09:6a:46:7f:81:15:12:ca:0c:3a:61:68:21: 4e:59:d0:21:3b:32:13:f1:31:9b:d9:7e:ba:9c:61:3b:67:90: 85:ad:7e:e5:a7:3f:0d:a9:9f:69:08:a5:b0:ad:fc:cd:e2:ae: 4c:bc:90:a8:f5:61:da:8b:ab:ad:70:35:05:2b:be:8e:e0:cd: f7:ff:98:e5 -----BEGIN CERTIFICATE----- MIIFFjCCA/6gAwIBAgISAZlaxGFGNxvLQi0BPPPPWf2lMA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKDQ2NDk1MmJjMTY1NDQxZWM2ZTJlMjAxMGM5MzNkYzgzMGYz NjE3MzEwHhcNMjUwOTE4MDMwMDQzWhcNMjUwOTE5MDMwMDQzWjAzMTEwLwYDVQQD EygzN2U1MDliMTE0YzAxYTc2NmVlZjZiNTM4MzcyZmZlNjc2ODFiN2YwMIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAxQ6nq85cGisyeXU5mdFubxQ4P2c5 d6rXPyNwUC4WKdpuxcivd79SYxLuy+dgQDSa9EwsrkTj9T+NbbE3AmipAIScfh8L VYbr0z6fl2Q/e9+d6lphiUJ5w+BQn/Dnv1/pWcbD6lYOI2AzA2D8elakdB1EGMPN tJhA+Pd3NqFOKYqRof6u92j5kevOF2jaSrrbSKpXdJt38DXUIU/ikch1U11ngQNA w3Jf5AE7vjkYmZVBPPyWHjApsRQv3qkGt+dbfsjlH+GwZidBxLTUKRUi1zWhkBGa dLQOKieChT5SzehwiCRExnN7a5X4bymkbPUSLM2zzAIXyKViq7C/2oUNswIDAQAB o4ICIjCCAh4wHQYDVR0OBBYEFDflCbEUwBp2bu9rU4Ny/+Z2gbfwMB8GA1UdIwQY MBaAFEZJUrwWVEHsbi4gEMkz3IMPNhcxMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvUmtsU3ZCWlVRZXh1TGlBUXlUUGNndzgyRnpFLmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC9kZi8wMTA1OGEtNGE4Mi00ODE4LTk3MmQt ODQyODU4MTIyYmJjLzEvUmtsU3ZCWlVRZXh1TGlBUXlUUGNndzgyRnpFLm1mdDCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC9kZi8wMTA1OGEtNGE4Mi00ODE4LTk3MmQtODQyODU4MTIyYmJj LzEvUmtsU3ZCWlVRZXh1TGlBUXlUUGNndzgyRnpFLmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEALicsrw1d tnOmfJFQ1Uag3oujCFDqRZpNYFG8EklQ6RTNv9StMQ2WEH2mggc22accSRB9WsHR jebn8ZApmT7AL+5GaFI09iVfATMffKRFLE3w8nsH44jIiYIfZnM/k2TZl17iMM69 WcFKKQnlJAvXMaftRCE59/UapInCBPZ2Uz9i6btOOUFQoSxZ3qxhNbm0XFXog0RC DsbzGusRXM+poRhQR0F2cxnbxeI2TwjzqsT4zy3AWlCLqjcJakZ/gRUSygw6YWgh TlnQITsyE/Exm9l+upxhO2eQha1+5ac/DamfaQilsK38zeKuTLyQqPVh2ourrXA1 BSu+juDN9/+Y5Q== -----END CERTIFICATE-----Generated at Thu Sep 18 05:48:51 2025 by rpki-client