$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/eb/eee131-bb8c-4887-869b-6fe4d8fed160/1/h0v4BwzuQwXRo4npEPtRArvMGUE.mft File: h0v4BwzuQwXRo4npEPtRArvMGUE.mft (raw, json) Hash identifier: xJCyqxfuMw9tj6Vz4X+yYmBBBI4IBoDuQFWwW4UBUak= Subject key identifier: 5E:DD:DF:A4:1C:2A:3F:6D:07:66:69:07:D6:3C:9B:4E:29:C0:40:D2 Authority key identifier: 87:4B:F8:07:0C:EE:43:05:D1:A3:89:E9:10:FB:51:02:BB:CC:19:41 Certificate issuer: /CN=874bf8070cee4305d1a389e910fb5102bbcc1941 Certificate serial: 019919897EEB23CD635669EECA35B9886187 Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/h0v4BwzuQwXRo4npEPtRArvMGUE.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/eb/eee131-bb8c-4887-869b-6fe4d8fed160/1/h0v4BwzuQwXRo4npEPtRArvMGUE.mft Manifest number: 0FFC Signing time: Fri 05 Sep 2025 11:01:05 +0000 Manifest this update: Fri 05 Sep 2025 11:01:05 +0000 Manifest next update: Sat 06 Sep 2025 11:01:05 +0000 Files and hashes: 1: 0OKEEKGhx09vrOl7RYzWo3_wxgQ.roa (hash: bVmqeltj/mUgRyI/UDd3qXuGmM6ZNTUv7NHdJ5Ecm14=) 2: 0na0952KGc1H37d43sfmQKJLL00.roa (hash: corUkZBv/wXf0UWamqTqW2vCXAO7jctIMZRyOPGvfMc=) 3: 0nyuKNwkHdjNx58vqjYZWHgdk04.roa (hash: IJwrVyR1/3bxuDIXcjl0pqsWJYg81ab8+TgzpFzMgak=) 4: 50gtoTdhN9nO756-F4DP2ztZ9co.roa (hash: PoNPNVOdbr6ZQt1a8yzQyLs5SXzvoUcV/tLE/CbCBRA=) 5: 5WW9l5SbU7Xc5dzcJPOjnh-Ti1k.roa (hash: 2mR14FDC49JE9sKTdrARapGEl+mL/ykOGzFFu5F/fQM=) 6: GPQpLDssO6fTD1dGaJR05RFssa4.roa (hash: fp71tS0Tf+vhKpm3TY4BWXK7QdJ3Wg7DCBdUoQ7F5lg=) 7: J9C16lcx8PgyurfKUP9kuPkC8qk.roa (hash: FgZNOU0gXFenPcB6tHkqCpKLWPVhc0a8myZew2TEgCo=) 8: LumIDmC9KaTmO5EmvKNIDB_MJ6I.roa (hash: T1v6ldOgSnHm0ILMw4lezNqfO7yaUlFFJv2DMeUijuQ=) 9: VvF4Vi4FweHBoF6fwzvWsqkmd1g.roa (hash: 0iNsEJDKXYV/LCkoqqh7O11YVgjXO/OY9nxGaKpwAV8=) 10: h0v4BwzuQwXRo4npEPtRArvMGUE.crl (hash: iZjVAYxb6FTy8ug4sKAUrXJJToYiawPdW7Nc6V909NU=) 11: vevN_FQh1oLDczAFJHEKh5hEOxE.roa (hash: T6+n5imfk+pQSeT5Osi01ihP8snYGAynnv1xpTuEaoU=) 12: xER0K9I9xK8DBLC6KDcI75JR9LY.roa (hash: OqOr60qixfUKi1rv4+JZ/v9458y498eM0Dbfd2dxyz4=) Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/eb/eee131-bb8c-4887-869b-6fe4d8fed160/1/h0v4BwzuQwXRo4npEPtRArvMGUE.crl rsync://rpki.ripe.net/repository/DEFAULT/eb/eee131-bb8c-4887-869b-6fe4d8fed160/1/h0v4BwzuQwXRo4npEPtRArvMGUE.mft rsync://rpki.ripe.net/repository/DEFAULT/h0v4BwzuQwXRo4npEPtRArvMGUE.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Sat 06 Sep 2025 11:01:05 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:99:19:89:7e:eb:23:cd:63:56:69:ee:ca:35:b9:88:61:87 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=874bf8070cee4305d1a389e910fb5102bbcc1941 Validity Not Before: Sep 5 11:01:05 2025 GMT Not After : Sep 6 11:01:05 2025 GMT Subject: CN=5edddfa41c2a3f6d07666907d63c9b4e29c040d2 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:8b:69:69:7d:4a:4f:1f:c8:6f:0b:4f:5d:a4:22: f2:55:4b:29:74:00:ad:2b:da:09:e1:7c:c1:b4:89: 9a:4f:9d:d5:bd:c7:fa:a8:dc:03:ae:65:1d:7a:06: a3:b4:e8:ce:0b:5f:d5:34:5b:bc:2d:0f:12:1e:ee: c4:c7:66:a8:a1:93:f5:6a:bd:9c:9c:93:6a:11:97: 95:4b:d9:54:b3:64:1e:2c:20:63:1c:05:26:c3:88: 3f:9c:8e:6e:28:fb:27:ea:34:80:32:f8:53:33:9e: f0:ef:07:0b:a5:db:0e:9b:88:e2:ea:5e:aa:a0:84: cf:60:a2:f5:4a:97:19:d3:ae:9f:26:e2:11:d3:e5: 3a:52:af:0f:2f:9c:5c:1f:ed:1c:48:46:e2:a1:9e: 83:58:09:0f:7f:54:ef:7a:05:22:22:ad:f4:bc:81: 5a:e6:70:12:7d:41:45:63:cb:b8:ec:9d:33:17:b5: a0:7e:b9:39:fb:45:1a:6d:ab:6a:f7:37:2b:d1:b1: 44:9b:ce:c6:2b:d7:da:e3:cc:03:57:30:ac:64:3f: 9e:d5:16:22:3b:9d:b4:fc:63:98:b2:ea:66:db:11: 56:ff:7a:af:fc:ce:df:0e:cd:8e:df:b9:14:39:04: 62:53:8d:27:a4:2d:58:e2:0e:04:dd:df:3a:6f:43: 26:6b Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 5E:DD:DF:A4:1C:2A:3F:6D:07:66:69:07:D6:3C:9B:4E:29:C0:40:D2 X509v3 Authority Key Identifier: keyid:87:4B:F8:07:0C:EE:43:05:D1:A3:89:E9:10:FB:51:02:BB:CC:19:41 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/h0v4BwzuQwXRo4npEPtRArvMGUE.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/eb/eee131-bb8c-4887-869b-6fe4d8fed160/1/h0v4BwzuQwXRo4npEPtRArvMGUE.mft X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/eb/eee131-bb8c-4887-869b-6fe4d8fed160/1/h0v4BwzuQwXRo4npEPtRArvMGUE.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 36:39:fe:66:44:ab:49:ba:33:d1:25:ed:85:dc:01:db:3c:50: f9:25:49:a3:31:cd:bc:5d:8c:56:02:4a:2a:00:e7:55:e3:70: 7c:d2:b4:99:34:c2:75:53:a8:76:38:d0:1b:59:92:10:96:60: ec:b0:61:52:75:15:11:9b:32:6a:24:46:80:0d:11:fb:4a:4a: f2:75:72:26:90:39:24:53:36:8c:6b:06:7d:07:aa:ca:f0:f7: 11:2d:fb:ef:1f:a3:cc:c4:53:81:39:c2:df:46:92:ef:28:ce: be:90:5b:20:5c:b9:b0:48:3d:c4:b5:fc:1c:08:ca:75:6a:1b: 96:d2:57:5d:24:b7:23:2a:20:c4:25:49:2e:28:49:60:4e:99: cd:c1:6f:01:fd:22:db:dd:2e:89:b0:b8:49:e7:75:f8:aa:4e: 8a:07:a0:37:8d:71:ad:93:96:4f:1e:ab:e2:79:ac:9a:4e:d4: a0:57:0f:1c:2b:f0:64:7c:dc:ff:bf:b4:67:2e:a4:ba:de:53: 9b:8b:43:5c:8a:56:b1:30:ac:5e:fb:25:d9:3b:8c:c1:6d:af: 0a:eb:04:7a:3a:e7:d4:72:0a:ff:9a:83:a3:ef:79:62:86:a1: 0d:1f:a3:a1:ef:66:04:4a:41:13:42:7b:76:8e:cf:f4:71:67: 32:2d:9e:6b -----BEGIN CERTIFICATE----- MIIFFjCCA/6gAwIBAgISAZkZiX7rI81jVmnuyjW5iGGHMA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKDg3NGJmODA3MGNlZTQzMDVkMWEzODllOTEwZmI1MTAyYmJj YzE5NDEwHhcNMjUwOTA1MTEwMTA1WhcNMjUwOTA2MTEwMTA1WjAzMTEwLwYDVQQD Eyg1ZWRkZGZhNDFjMmEzZjZkMDc2NjY5MDdkNjNjOWI0ZTI5YzA0MGQyMIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAi2lpfUpPH8hvC09dpCLyVUspdACt K9oJ4XzBtImaT53Vvcf6qNwDrmUdegajtOjOC1/VNFu8LQ8SHu7Ex2aooZP1ar2c nJNqEZeVS9lUs2QeLCBjHAUmw4g/nI5uKPsn6jSAMvhTM57w7wcLpdsOm4ji6l6q oITPYKL1SpcZ066fJuIR0+U6Uq8PL5xcH+0cSEbioZ6DWAkPf1TvegUiIq30vIFa 5nASfUFFY8u47J0zF7Wgfrk5+0Uabatq9zcr0bFEm87GK9fa48wDVzCsZD+e1RYi O520/GOYsupm2xFW/3qv/M7fDs2O37kUOQRiU40npC1Y4g4E3d86b0MmawIDAQAB o4ICIjCCAh4wHQYDVR0OBBYEFF7d36QcKj9tB2ZpB9Y8m04pwEDSMB8GA1UdIwQY MBaAFIdL+AcM7kMF0aOJ6RD7UQK7zBlBMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvaDB2NEJ3enVRd1hSbzRucEVQdFJBcnZNR1VFLmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC9lYi9lZWUxMzEtYmI4Yy00ODg3LTg2OWIt NmZlNGQ4ZmVkMTYwLzEvaDB2NEJ3enVRd1hSbzRucEVQdFJBcnZNR1VFLm1mdDCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC9lYi9lZWUxMzEtYmI4Yy00ODg3LTg2OWItNmZlNGQ4ZmVkMTYw LzEvaDB2NEJ3enVRd1hSbzRucEVQdFJBcnZNR1VFLmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEANjn+ZkSr Sboz0SXthdwB2zxQ+SVJozHNvF2MVgJKKgDnVeNwfNK0mTTCdVOodjjQG1mSEJZg 7LBhUnUVEZsyaiRGgA0R+0pK8nVyJpA5JFM2jGsGfQeqyvD3ES377x+jzMRTgTnC 30aS7yjOvpBbIFy5sEg9xLX8HAjKdWobltJXXSS3IyogxCVJLihJYE6ZzcFvAf0i 290uibC4Sed1+KpOigegN41xrZOWTx6r4nmsmk7UoFcPHCvwZHzc/7+0Zy6kut5T m4tDXIpWsTCsXvsl2TuMwW2vCusEejrn1HIK/5qDo+95YoahDR+joe9mBEpBE0J7 do7P9HFnMi2eaw== -----END CERTIFICATE-----Generated at Fri Sep 5 20:15:05 2025 by rpki-client