$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/e2/ad3044-cdce-46cf-92c9-a954d053994a/1/1g9F98xLaR_UoxwfHAtPYF13pu8.mft File: 1g9F98xLaR_UoxwfHAtPYF13pu8.mft (raw, json) Hash identifier: YGy2w/u3Vf7pv6xOOM3pQ24FA7d+5PzbtN3qwanjeFM= Subject key identifier: 6B:09:D3:E2:25:B8:5B:A4:AA:36:DB:96:F0:26:D7:5B:7B:BB:C3:24 Authority key identifier: D6:0F:45:F7:CC:4B:69:1F:D4:A3:1C:1F:1C:0B:4F:60:5D:77:A6:EF Certificate issuer: /CN=d60f45f7cc4b691fd4a31c1f1c0b4f605d77a6ef Certificate serial: 01993680A81DB0E2D14745A36D2EA2EFC505 Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/1g9F98xLaR_UoxwfHAtPYF13pu8.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/e2/ad3044-cdce-46cf-92c9-a954d053994a/1/1g9F98xLaR_UoxwfHAtPYF13pu8.mft Manifest number: 1685 Signing time: Thu 11 Sep 2025 02:00:25 +0000 Manifest this update: Thu 11 Sep 2025 02:00:25 +0000 Manifest next update: Fri 12 Sep 2025 02:00:25 +0000 Files and hashes: 1: 1g9F98xLaR_UoxwfHAtPYF13pu8.crl (hash: F3RK6TeT/2wCQuIveqG0LZE4tOmwCPZkpOg4wEZbuRQ=) 2: GMAT5cnP7VsDriW3_zL3dmojRH8.roa (hash: 9OZgqMWwoj0IlbvwNkLekurnPx7RT1aRlKGSPHOL6N4=) 3: IoE67Ac0pXcZcF9gBBC8VKka1vE.roa (hash: kt4XWZcgrYkLHsaAC2c2z5iyqyhmqC0zJwGvhSrnQ3E=) 4: MnG_2GzorHPsXNp5Vum7-rUjReY.roa (hash: D3z8cv+XlClqN6b2gc/ybPBfC33Ewbb6orbavaJ/jxk=) 5: PPMANDrLvF7lVgznicSOoAT3-3U.roa (hash: goEhx/poAjkzaQRi2RGACZSEuEQ6nJJ0p5PoSp7o6bo=) 6: b5u0PP2LUmpbpNJ4qAdIl3s9IjI.roa (hash: 4ZbWUTDO0hiozFSxacFGW2XCjTl1RPjd3yDPIUYji9M=) 7: jfxb2BR-CQiCSpU8DpDydbDz1b0.roa (hash: fObbuEbq3/zFmHWpgeQlp5JFopCYl+4GEGdq5exW77c=) 8: rrmPFSxVt5xEtowDvlnYGvxrH3s.roa (hash: mhHuydqllyBkMxNXx9HLabM7W+Fte6mEhiiQe0n8fRA=) 9: th1p5jE1fl21GfKXyCflURpVpo0.roa (hash: w4pXoPCT9slYbdDvFiyPewBrsldI3f9m6umM8Wv0SkE=) 10: viBgIC4abJYY7C__L2VefsiYSYI.roa (hash: r+Hi34v0Qt4A/ODVfo4uFHb77CXM38aMXnF2F0o4IcY=) 11: xNr5I0Wokl-j2aBAEkjZmpNRVng.roa (hash: epmYMuuR7FlxzNy/fvLKPn2AzgVlFDZhQf7tXXleECM=) Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/e2/ad3044-cdce-46cf-92c9-a954d053994a/1/1g9F98xLaR_UoxwfHAtPYF13pu8.crl rsync://rpki.ripe.net/repository/DEFAULT/e2/ad3044-cdce-46cf-92c9-a954d053994a/1/1g9F98xLaR_UoxwfHAtPYF13pu8.mft rsync://rpki.ripe.net/repository/DEFAULT/1g9F98xLaR_UoxwfHAtPYF13pu8.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Fri 12 Sep 2025 02:00:25 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:99:36:80:a8:1d:b0:e2:d1:47:45:a3:6d:2e:a2:ef:c5:05 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=d60f45f7cc4b691fd4a31c1f1c0b4f605d77a6ef Validity Not Before: Sep 11 02:00:25 2025 GMT Not After : Sep 12 02:00:25 2025 GMT Subject: CN=6b09d3e225b85ba4aa36db96f026d75b7bbbc324 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:a2:0e:41:c7:a0:e2:f4:14:ce:0b:a7:be:39:fa: b7:5c:6b:a3:64:07:2f:e6:ee:27:c4:a4:f7:f5:27: 10:3c:17:bc:a6:39:c1:17:77:dd:22:34:2c:40:1d: 9b:e4:2b:84:b0:b1:6f:aa:4c:d9:7d:5d:00:0e:93: a5:da:5e:bf:6e:b2:5f:7b:42:38:6c:94:ec:82:6c: f1:65:d9:b7:7e:71:e1:d7:66:40:8f:b7:e2:97:d8: 93:36:a4:d7:aa:51:02:05:41:2f:26:ea:4b:fd:57: 49:54:33:a4:c9:27:1c:48:21:54:10:07:14:d9:78: 29:0f:97:61:53:2d:3e:af:7d:15:24:3c:8d:4b:b9: b3:61:17:b1:95:98:f6:d6:4f:63:32:ff:f5:47:02: aa:7d:6e:00:b2:c6:61:2b:fc:fe:c5:ee:4a:6e:15: d4:bd:53:4d:63:e0:dc:00:cf:4d:0c:1e:dc:d6:97: 1a:7d:4d:64:67:35:a5:04:15:ac:3c:01:88:66:f3: 6c:7d:d1:82:81:c4:4e:e4:cf:12:d3:11:50:00:71: d6:d4:1b:8a:07:95:75:bf:bb:af:f0:95:9e:f2:70: 43:ef:b3:30:86:00:4e:d2:39:9e:d7:b3:21:34:07: 94:26:71:bb:e0:71:54:ce:54:b5:3c:c3:48:fc:24: fd:5f Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 6B:09:D3:E2:25:B8:5B:A4:AA:36:DB:96:F0:26:D7:5B:7B:BB:C3:24 X509v3 Authority Key Identifier: keyid:D6:0F:45:F7:CC:4B:69:1F:D4:A3:1C:1F:1C:0B:4F:60:5D:77:A6:EF X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/1g9F98xLaR_UoxwfHAtPYF13pu8.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/e2/ad3044-cdce-46cf-92c9-a954d053994a/1/1g9F98xLaR_UoxwfHAtPYF13pu8.mft X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/e2/ad3044-cdce-46cf-92c9-a954d053994a/1/1g9F98xLaR_UoxwfHAtPYF13pu8.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 9f:60:02:79:87:47:50:5b:95:c9:b0:7d:88:f3:9c:86:73:83: c1:a4:52:6f:e2:2c:fd:2f:00:d5:9c:1f:29:9e:ef:24:03:22: 27:66:ca:45:c6:eb:a4:2d:4f:e8:bd:21:f2:2d:55:d1:b7:05: a7:49:59:c9:81:77:a0:43:f0:58:4c:b7:3e:9b:09:52:4c:49: 76:9b:4e:fe:70:3f:b9:43:7e:04:01:58:b2:fd:1c:24:64:e6: 23:ac:d9:ad:19:d0:6a:16:b2:68:b0:8b:56:d3:61:76:96:2c: 55:25:ce:5e:e7:58:af:56:f8:1d:d7:95:9a:bb:ef:9b:1e:f5: d0:e6:9b:44:03:e9:aa:03:c9:b2:8f:c5:d2:99:3a:de:9c:ce: 6e:79:e6:94:ca:c8:78:de:21:3d:df:57:62:dc:e6:37:73:db: 00:16:79:6f:93:ee:60:d1:06:a6:b5:31:00:3f:66:a2:09:51: 4b:48:48:cc:b5:a1:6d:ec:59:13:0b:f3:3f:69:9c:8d:a1:0a: 8d:c9:b5:94:1d:41:5f:e6:f6:d8:61:14:bd:b1:d7:d5:f1:45: fa:76:4a:a9:0c:c8:6f:f6:62:ea:76:9a:7e:03:1d:1f:a7:4f: 26:96:df:5a:1b:80:c8:5d:bb:89:85:d3:2d:c5:5e:e5:bc:2a: fe:2b:03:48 -----BEGIN CERTIFICATE----- MIIFFjCCA/6gAwIBAgISAZk2gKgdsOLRR0WjbS6i78UFMA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKGQ2MGY0NWY3Y2M0YjY5MWZkNGEzMWMxZjFjMGI0ZjYwNWQ3 N2E2ZWYwHhcNMjUwOTExMDIwMDI1WhcNMjUwOTEyMDIwMDI1WjAzMTEwLwYDVQQD Eyg2YjA5ZDNlMjI1Yjg1YmE0YWEzNmRiOTZmMDI2ZDc1YjdiYmJjMzI0MIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAog5Bx6Di9BTOC6e+Ofq3XGujZAcv 5u4nxKT39ScQPBe8pjnBF3fdIjQsQB2b5CuEsLFvqkzZfV0ADpOl2l6/brJfe0I4 bJTsgmzxZdm3fnHh12ZAj7fil9iTNqTXqlECBUEvJupL/VdJVDOkySccSCFUEAcU 2XgpD5dhUy0+r30VJDyNS7mzYRexlZj21k9jMv/1RwKqfW4AssZhK/z+xe5KbhXU vVNNY+DcAM9NDB7c1pcafU1kZzWlBBWsPAGIZvNsfdGCgcRO5M8S0xFQAHHW1BuK B5V1v7uv8JWe8nBD77MwhgBO0jme17MhNAeUJnG74HFUzlS1PMNI/CT9XwIDAQAB o4ICIjCCAh4wHQYDVR0OBBYEFGsJ0+IluFukqjbblvAm11t7u8MkMB8GA1UdIwQY MBaAFNYPRffMS2kf1KMcHxwLT2Bdd6bvMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvMWc5Rjk4eExhUl9Vb3h3ZkhBdFBZRjEzcHU4LmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC9lMi9hZDMwNDQtY2RjZS00NmNmLTkyYzkt YTk1NGQwNTM5OTRhLzEvMWc5Rjk4eExhUl9Vb3h3ZkhBdFBZRjEzcHU4Lm1mdDCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC9lMi9hZDMwNDQtY2RjZS00NmNmLTkyYzktYTk1NGQwNTM5OTRh LzEvMWc5Rjk4eExhUl9Vb3h3ZkhBdFBZRjEzcHU4LmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAn2ACeYdH UFuVybB9iPOchnODwaRSb+Is/S8A1ZwfKZ7vJAMiJ2bKRcbrpC1P6L0h8i1V0bcF p0lZyYF3oEPwWEy3PpsJUkxJdptO/nA/uUN+BAFYsv0cJGTmI6zZrRnQahayaLCL VtNhdpYsVSXOXudYr1b4HdeVmrvvmx710OabRAPpqgPJso/F0pk63pzObnnmlMrI eN4hPd9XYtzmN3PbABZ5b5PuYNEGprUxAD9moglRS0hIzLWhbexZEwvzP2mcjaEK jcm1lB1BX+b22GEUvbHX1fFF+nZKqQzIb/Zi6naafgMdH6dPJpbfWhuAyF27iYXT LcVe5bwq/isDSA== -----END CERTIFICATE-----Generated at Thu Sep 11 11:57:49 2025 by rpki-client