$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/e6/587792-bae9-4183-a4b1-ff5f1ad69266/1/s8UbDAY8_BaUP8mkfiyAWZD26q4.mft File: s8UbDAY8_BaUP8mkfiyAWZD26q4.mft (raw, json) Hash identifier: fcQNeKf5R5e7Kq/HW6g2m0A4+db5H+ubQDcRH1XkNts= Subject key identifier: 24:1F:89:D0:57:FD:E9:A5:E8:9A:91:3A:F5:DA:16:83:F0:B9:CC:62 Authority key identifier: B3:C5:1B:0C:06:3C:FC:16:94:3F:C9:A4:7E:2C:80:59:90:F6:EA:AE Certificate issuer: /CN=b3c51b0c063cfc16943fc9a47e2c805990f6eaae Certificate serial: 01993124803368089E518EEC35BFED80295D Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/s8UbDAY8_BaUP8mkfiyAWZD26q4.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/e6/587792-bae9-4183-a4b1-ff5f1ad69266/1/s8UbDAY8_BaUP8mkfiyAWZD26q4.mft Manifest number: 1687 Signing time: Wed 10 Sep 2025 01:01:39 +0000 Manifest this update: Wed 10 Sep 2025 01:01:39 +0000 Manifest next update: Thu 11 Sep 2025 01:01:39 +0000 Files and hashes: 1: 2mMFFVEf9RI7laeK707TbUw9w1o.roa (hash: lJtAZDZI6kWuia4ewbwmh2H0Ib7YOsmGLnMGMcXt0g8=) 2: BqnvofScUisQsUQed2MQ6B18GAQ.roa (hash: aF/iFUXhalT+tHSvHf/i2jdL4yddWHGSdcJZMfIy3uE=) 3: DV3PY9YU5zk2EaQYZkZq4p-ZUYM.roa (hash: iyl4yZuKkTsrQs+Y4JJy2vYNDSKm0/gIBzJQSKVyBGM=) 4: FeALzwmlHVBsdnrHTXpUuCdKMKk.roa (hash: LOwvL3odoyBFINMdFWH/VCQRIEFy3WTnNyeQKYYbRfU=) 5: H1-xrUolZhz6fzzg_UIN6T3DPWQ.roa (hash: qIZY0TolKgREye8GEvOpwQsSjnvpT07vwo6n55/XGY4=) 6: TyV9-G3EmDmxesG6kytX3N3gsKY.roa (hash: 5ZTWb+G4Smvs/SR1cTUZYD6dnJkngJRJoyw2KmVLYwM=) 7: UDyJk4Oy_-L1Te8H_oQucf6YjW4.roa (hash: RtdvCTTWOI7dE+z50k0BiFUEbUEH2UCgRme1pMQy/3s=) 8: WjZqJ0NhE5N_q8Z5fvWq8P2vTKU.roa (hash: yqIxBJiLiShm8irHVY2/sGIwoQoJ1y3znhIp9whAo54=) 9: dKsN1qGwEKIQpUTURYKT2umZW2w.roa (hash: tA8mIaQttFCg4VHXuxLgiMZWDalN45RLcJgG64coFpw=) 10: hmD_gbHlASML2ltcjVZUWmwvSYc.roa (hash: 7BK9fS2pKl/VxlRPtn0r5sqSpL1lbttsGsNK/TVCOlc=) 11: kskh1ZO_la7WXFGA4d2IKKXIwWc.roa (hash: PSi/1bSx17DcwOcX0aGn17oACEy8dwOziOStHczOl68=) 12: n4LrIW3mgA8G3axl4csgyTpsp8Q.roa (hash: LNegLtDN4y1dMd1RyuVmBjmyfpzTDjWVARTw/3voBLo=) 13: qfvkeVV0y4MYey-tvY_ef7wx-wY.roa (hash: vszu6nR/oFbgkiJpXSyUxF5kf03wjhbHFgMzPvnqwuM=) 14: s8UbDAY8_BaUP8mkfiyAWZD26q4.crl (hash: KSfmuqpzJ+za9Lkm0bL4aGQkyLwZ/lZgNRgv1WyK1Qk=) Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/e6/587792-bae9-4183-a4b1-ff5f1ad69266/1/s8UbDAY8_BaUP8mkfiyAWZD26q4.crl rsync://rpki.ripe.net/repository/DEFAULT/e6/587792-bae9-4183-a4b1-ff5f1ad69266/1/s8UbDAY8_BaUP8mkfiyAWZD26q4.mft rsync://rpki.ripe.net/repository/DEFAULT/s8UbDAY8_BaUP8mkfiyAWZD26q4.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Wed 10 Sep 2025 21:45:22 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:99:31:24:80:33:68:08:9e:51:8e:ec:35:bf:ed:80:29:5d Signature Algorithm: sha256WithRSAEncryption Issuer: CN=b3c51b0c063cfc16943fc9a47e2c805990f6eaae Validity Not Before: Sep 10 01:01:39 2025 GMT Not After : Sep 11 01:01:39 2025 GMT Subject: CN=241f89d057fde9a5e89a913af5da1683f0b9cc62 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:d9:54:9e:3d:f3:30:79:a5:f7:7e:1c:d9:73:eb: e5:6f:de:73:02:a9:76:ff:49:13:2c:21:4e:e1:e2: ab:56:ff:0d:c9:73:9d:d1:eb:e4:b0:4b:b6:86:68: ab:95:1b:70:01:b8:a8:7c:22:b7:fa:51:fc:0d:b7: 14:92:97:6c:34:ad:3c:e8:6f:fe:5d:fb:07:1b:39: 21:ed:13:4b:ba:b7:44:4a:a9:b5:14:2d:52:c5:8b: 75:e7:c9:b4:d6:b3:5d:0c:66:b9:5f:b0:0c:88:b1: 73:1d:4a:1f:84:48:2d:9a:b1:bc:af:78:1b:30:82: 15:9c:5b:c8:0e:36:08:c9:3b:19:dd:dd:82:d5:f7: 28:c1:71:72:6d:d6:d3:8b:8b:41:23:52:8d:d4:e1: b5:83:7b:f8:2b:6a:4a:0e:50:23:ee:6e:9f:32:0a: f9:41:79:5d:8b:fd:ae:e1:e1:14:0a:28:31:19:6b: 99:14:2f:3c:ce:ed:7d:47:79:a6:28:6f:e1:38:df: 0e:fa:dc:53:8c:ff:95:b9:b4:43:10:8f:4f:0b:12: 3a:b6:ca:42:5c:92:67:94:3b:3c:a4:84:a9:7b:43: 4f:23:c9:7e:c8:3d:f2:5f:99:78:03:51:b8:b6:82: 49:12:33:aa:21:1e:df:5f:4b:c7:3a:55:22:4c:83: a4:77 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 24:1F:89:D0:57:FD:E9:A5:E8:9A:91:3A:F5:DA:16:83:F0:B9:CC:62 X509v3 Authority Key Identifier: keyid:B3:C5:1B:0C:06:3C:FC:16:94:3F:C9:A4:7E:2C:80:59:90:F6:EA:AE X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/s8UbDAY8_BaUP8mkfiyAWZD26q4.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/e6/587792-bae9-4183-a4b1-ff5f1ad69266/1/s8UbDAY8_BaUP8mkfiyAWZD26q4.mft X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/e6/587792-bae9-4183-a4b1-ff5f1ad69266/1/s8UbDAY8_BaUP8mkfiyAWZD26q4.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 4e:39:bf:a9:9f:b7:11:6f:bd:3a:83:ec:f7:39:38:77:2e:e5: 72:b0:5e:ad:38:c3:ab:51:2e:ab:a7:eb:26:9f:bf:c8:53:dc: 2c:24:51:09:f8:c2:72:32:29:2d:10:f8:e4:b1:ec:0d:21:8e: cf:8e:5d:4f:a8:41:9d:69:4f:44:8a:2c:28:8e:63:d9:fa:fb: 07:2d:aa:63:70:9f:50:ac:b1:f2:d1:f5:95:56:9c:5b:cd:b1: 11:f1:11:90:c0:43:95:19:0e:a2:4c:85:41:30:d2:f2:ad:5e: f7:d5:8b:ea:04:3f:45:59:5e:65:a2:2c:d1:e3:9c:49:e8:fa: c5:0e:c3:75:53:96:6d:8d:6d:28:0e:65:f4:c3:c1:ab:eb:1a: f0:5b:b8:50:a5:dd:ab:f1:46:2b:d8:b1:16:bf:1c:1e:14:dd: a6:35:e7:5a:74:e2:9a:dc:d3:1b:6a:ad:91:ae:fb:47:02:8b: c4:59:9f:86:f2:60:1e:ad:43:50:52:dc:74:d7:2f:da:df:82: 76:82:47:c2:a7:3d:bf:f2:9e:ac:7b:7a:db:60:1a:96:d5:67: 8a:dc:5d:42:d1:f5:20:5b:5d:23:28:33:97:7d:c6:76:5f:de: f8:3d:ae:3a:16:91:15:f5:c3:b9:99:b1:cc:8d:d5:26:7e:ff: ea:27:b0:dd -----BEGIN CERTIFICATE----- MIIFFjCCA/6gAwIBAgISAZkxJIAzaAieUY7sNb/tgCldMA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKGIzYzUxYjBjMDYzY2ZjMTY5NDNmYzlhNDdlMmM4MDU5OTBm NmVhYWUwHhcNMjUwOTEwMDEwMTM5WhcNMjUwOTExMDEwMTM5WjAzMTEwLwYDVQQD EygyNDFmODlkMDU3ZmRlOWE1ZTg5YTkxM2FmNWRhMTY4M2YwYjljYzYyMIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEA2VSePfMweaX3fhzZc+vlb95zAql2 /0kTLCFO4eKrVv8NyXOd0evksEu2hmirlRtwAbiofCK3+lH8DbcUkpdsNK086G/+ XfsHGzkh7RNLurdESqm1FC1SxYt158m01rNdDGa5X7AMiLFzHUofhEgtmrG8r3gb MIIVnFvIDjYIyTsZ3d2C1fcowXFybdbTi4tBI1KN1OG1g3v4K2pKDlAj7m6fMgr5 QXldi/2u4eEUCigxGWuZFC88zu19R3mmKG/hON8O+txTjP+VubRDEI9PCxI6tspC XJJnlDs8pISpe0NPI8l+yD3yX5l4A1G4toJJEjOqIR7fX0vHOlUiTIOkdwIDAQAB o4ICIjCCAh4wHQYDVR0OBBYEFCQfidBX/eml6JqROvXaFoPwucxiMB8GA1UdIwQY MBaAFLPFGwwGPPwWlD/JpH4sgFmQ9uquMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvczhVYkRBWThfQmFVUDhta2ZpeUFXWkQyNnE0LmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC9lNi81ODc3OTItYmFlOS00MTgzLWE0YjEt ZmY1ZjFhZDY5MjY2LzEvczhVYkRBWThfQmFVUDhta2ZpeUFXWkQyNnE0Lm1mdDCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC9lNi81ODc3OTItYmFlOS00MTgzLWE0YjEtZmY1ZjFhZDY5MjY2 LzEvczhVYkRBWThfQmFVUDhta2ZpeUFXWkQyNnE0LmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEATjm/qZ+3 EW+9OoPs9zk4dy7lcrBerTjDq1Euq6frJp+/yFPcLCRRCfjCcjIpLRD45LHsDSGO z45dT6hBnWlPRIosKI5j2fr7By2qY3CfUKyx8tH1lVacW82xEfERkMBDlRkOokyF QTDS8q1e99WL6gQ/RVleZaIs0eOcSej6xQ7DdVOWbY1tKA5l9MPBq+sa8Fu4UKXd q/FGK9ixFr8cHhTdpjXnWnTimtzTG2qtka77RwKLxFmfhvJgHq1DUFLcdNcv2t+C doJHwqc9v/KerHt622AaltVnitxdQtH1IFtdIygzl33Gdl/e+D2uOhaRFfXDuZmx zI3VJn7/6iew3Q== -----END CERTIFICATE-----Generated at Wed Sep 10 04:23:49 2025 by rpki-client