$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/ed/8e8e82-5274-4d2f-8ca0-ab19fcb0ce64/1/4VgI8_khvIw-6ofHWExYTBAAsFE.mft File: 4VgI8_khvIw-6ofHWExYTBAAsFE.mft (raw, json) Hash identifier: G3ich59yVXF5VLmIXbB6RNdThK2u5ggwB5YjVtIJ+f8= Subject key identifier: 37:13:51:54:04:98:11:5D:54:5A:6A:03:37:31:30:21:66:02:95:99 Authority key identifier: E1:58:08:F3:F9:21:BC:8C:3E:EA:87:C7:58:4C:58:4C:10:00:B0:51 Certificate issuer: /CN=e15808f3f921bc8c3eea87c7584c584c1000b051 Certificate serial: 019953CE581B2B75C460DA75DB084235AE96 Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/4VgI8_khvIw-6ofHWExYTBAAsFE.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/ed/8e8e82-5274-4d2f-8ca0-ab19fcb0ce64/1/4VgI8_khvIw-6ofHWExYTBAAsFE.mft Manifest number: 16AE Signing time: Tue 16 Sep 2025 18:34:15 +0000 Manifest this update: Tue 16 Sep 2025 18:34:15 +0000 Manifest next update: Wed 17 Sep 2025 18:34:15 +0000 Files and hashes: 1: 4VgI8_khvIw-6ofHWExYTBAAsFE.crl (hash: hUoXbLKuVMzZUzVPgd6+nO4N5YPQObEV8JRZY4PTfDQ=) 2: 7hCd_HKEYkXLvNCBLfMsTezcRXs.roa (hash: U6tVugGWrDYmHCXTomFCnYlQyCN2W9AcT+utfrGkYmM=) 3: BqWFQfCpNOawJLR_2bQgKiWus78.roa (hash: dwDCQUgPm6/+eGPO1V7wb2aMqwp5qzv/WSd8fL7sTv4=) 4: HK9YTPeAPa2mm7JsqVFDcEqWktE.roa (hash: pGFfaceKosL6QVYMO3oG4sR8CNlOKvbDd43IVlI91l4=) 5: SiUykNKTjaApyo1sqndO19rBYAs.roa (hash: jaR1D2Lqsnpc33UxJXomGKoF/S6s6EdMDhOpwvCqmiY=) 6: dsVEniM-PjP3aF57gRKfJeGsuXA.roa (hash: rATVs9dRCK5irdzRkSY1vrtCfxCwPvZoSJA3EPbdN5Q=) 7: jNJogHc9h5lodSxhpjDRYEENUOM.roa (hash: O0aQYdB/pHChDSdymrPe8W/YPJRqMLBI8pg3+YHjgZ8=) 8: pm4iWvL8z96fIGtjxaGjSXeRJT4.roa (hash: ZYVelcX+1GR4HDMDdE6U47zsAh6vEcuxWCIg/8E3uZE=) 9: qeW6k62Ova_Op7BhYtzucMuedHs.roa (hash: iPCOF2sKXY5KaN1yHnhdOMP4cE9n3NAPWSlvKOP6/hY=) 10: qispPpKIlPSWV1rI1EAZQtlT-p0.roa (hash: sBtkCqwyGciPSktKwAiba5P4WFIxvlZFVG+B/hvcwgI=) 11: ttSCm0GX77Lv7F9AG7Ej_PDwc8E.roa (hash: CXBZohUwM39VG497MDaDZEXDgP7mhwxpOgtdpsLOGh4=) 12: xyWS8GMXAK5cHVz0I4kSnXYHwUs.roa (hash: U2goV1mLS2kaWO5TW5yX21b9KWWpNNSkN88rAFVfNXQ=) 13: z1XxJmXXx8uVxhk9CwQJXiPqHzU.roa (hash: EaljD/90P2BfuVNTpmwdBC+zdctwtxvncMDcXLvuk10=) Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/ed/8e8e82-5274-4d2f-8ca0-ab19fcb0ce64/1/4VgI8_khvIw-6ofHWExYTBAAsFE.crl rsync://rpki.ripe.net/repository/DEFAULT/ed/8e8e82-5274-4d2f-8ca0-ab19fcb0ce64/1/4VgI8_khvIw-6ofHWExYTBAAsFE.mft rsync://rpki.ripe.net/repository/DEFAULT/4VgI8_khvIw-6ofHWExYTBAAsFE.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Wed 17 Sep 2025 18:34:15 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:99:53:ce:58:1b:2b:75:c4:60:da:75:db:08:42:35:ae:96 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=e15808f3f921bc8c3eea87c7584c584c1000b051 Validity Not Before: Sep 16 18:34:15 2025 GMT Not After : Sep 17 18:34:15 2025 GMT Subject: CN=371351540498115d545a6a033731302166029599 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:ee:da:06:ca:01:95:81:ea:e3:68:ba:5a:f9:65: d3:5d:80:d5:0f:b8:5d:fd:43:e2:23:f8:dd:76:fc: 2c:4c:6a:89:11:c0:7b:b1:d5:13:71:a6:6e:a2:82: 93:3a:e6:aa:df:0c:f1:83:36:e2:f5:6c:f3:f2:ad: a0:a9:60:43:94:b8:43:0d:f6:01:12:b9:23:30:e6: ac:99:62:3b:65:7e:6d:e0:06:29:a9:6a:ce:a6:cd: 40:06:aa:85:f2:47:a8:e9:8d:db:91:81:c2:2a:63: f5:67:d0:d7:fc:21:9b:e9:0d:5c:6a:b7:12:35:3b: 89:ac:08:3e:be:25:44:ef:7f:9b:12:68:5e:1e:fc: 21:13:be:1b:6a:55:f0:d3:e8:2d:a3:50:05:c6:8a: fd:74:06:7d:5b:cd:dd:56:2e:93:56:a5:a7:6b:1a: 6a:ca:74:a7:ba:ce:2d:cc:bc:7f:2a:6c:9d:70:54: 8a:5e:7a:ec:f1:1d:a0:85:ce:98:28:95:db:d4:94: 63:6f:dc:0e:8a:e3:b5:d4:73:ab:52:b7:85:be:ba: 11:c0:03:e9:cf:d7:25:c4:06:2e:a9:e8:7b:5e:3a: 23:77:50:f6:7b:f1:41:a7:85:4d:f3:13:9d:b0:45: bb:24:ad:f9:f3:59:e8:b9:9c:c0:86:f7:3e:60:92: 4a:65 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 37:13:51:54:04:98:11:5D:54:5A:6A:03:37:31:30:21:66:02:95:99 X509v3 Authority Key Identifier: keyid:E1:58:08:F3:F9:21:BC:8C:3E:EA:87:C7:58:4C:58:4C:10:00:B0:51 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/4VgI8_khvIw-6ofHWExYTBAAsFE.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/ed/8e8e82-5274-4d2f-8ca0-ab19fcb0ce64/1/4VgI8_khvIw-6ofHWExYTBAAsFE.mft X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/ed/8e8e82-5274-4d2f-8ca0-ab19fcb0ce64/1/4VgI8_khvIw-6ofHWExYTBAAsFE.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 9b:18:8a:54:e3:d0:e3:82:b1:66:0c:a7:57:15:05:fb:f1:85: af:e0:b7:5a:7e:30:84:6b:6f:47:2b:b9:00:8d:bc:d5:40:fa: e2:bb:3b:ee:95:db:dd:70:c9:3b:2e:51:99:5e:bd:4e:20:fb: 4b:9b:44:91:26:85:28:40:ce:9c:64:ba:88:bb:71:90:df:d5: 01:b3:4b:66:6f:fe:bf:04:92:f1:d7:fc:4d:aa:60:88:25:6e: 45:e8:53:57:ad:b2:db:f4:f9:c5:7e:d1:84:a0:93:1b:c2:90: 2c:c8:e0:6f:ed:19:58:a2:ae:24:47:b0:d6:89:15:1e:54:c6: cd:50:7e:3c:2c:43:2d:6d:0d:b1:e1:d4:01:01:73:a6:f6:42: 39:8f:60:2d:37:2d:ee:66:ed:11:eb:fb:9f:0f:40:a1:6a:0c: 04:39:0b:e3:7e:aa:59:66:3e:ef:0f:30:58:6f:0a:ca:d4:c3: 27:cf:3d:77:e3:af:12:f5:8d:fe:b4:58:e0:87:44:05:09:c7: ae:2d:bb:c7:3b:56:a6:16:e2:62:38:bb:dd:92:23:ff:8d:36: 80:d1:44:a3:7d:dd:3a:4d:6e:a5:17:4d:dc:57:3f:a9:34:3b: d6:1f:fb:3b:f8:3b:d6:b0:35:a2:97:dc:d7:ba:4c:be:70:17: 50:ec:d9:cf -----BEGIN CERTIFICATE----- MIIFFjCCA/6gAwIBAgISAZlTzlgbK3XEYNp12whCNa6WMA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKGUxNTgwOGYzZjkyMWJjOGMzZWVhODdjNzU4NGM1ODRjMTAw MGIwNTEwHhcNMjUwOTE2MTgzNDE1WhcNMjUwOTE3MTgzNDE1WjAzMTEwLwYDVQQD EygzNzEzNTE1NDA0OTgxMTVkNTQ1YTZhMDMzNzMxMzAyMTY2MDI5NTk5MIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEA7toGygGVgerjaLpa+WXTXYDVD7hd /UPiI/jddvwsTGqJEcB7sdUTcaZuooKTOuaq3wzxgzbi9Wzz8q2gqWBDlLhDDfYB ErkjMOasmWI7ZX5t4AYpqWrOps1ABqqF8keo6Y3bkYHCKmP1Z9DX/CGb6Q1carcS NTuJrAg+viVE73+bEmheHvwhE74balXw0+gto1AFxor9dAZ9W83dVi6TVqWnaxpq ynSnus4tzLx/KmydcFSKXnrs8R2ghc6YKJXb1JRjb9wOiuO11HOrUreFvroRwAPp z9clxAYuqeh7Xjojd1D2e/FBp4VN8xOdsEW7JK3581nouZzAhvc+YJJKZQIDAQAB o4ICIjCCAh4wHQYDVR0OBBYEFDcTUVQEmBFdVFpqAzcxMCFmApWZMB8GA1UdIwQY MBaAFOFYCPP5IbyMPuqHx1hMWEwQALBRMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvNFZnSThfa2h2SXctNm9mSFdFeFlUQkFBc0ZFLmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC9lZC84ZThlODItNTI3NC00ZDJmLThjYTAt YWIxOWZjYjBjZTY0LzEvNFZnSThfa2h2SXctNm9mSFdFeFlUQkFBc0ZFLm1mdDCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC9lZC84ZThlODItNTI3NC00ZDJmLThjYTAtYWIxOWZjYjBjZTY0 LzEvNFZnSThfa2h2SXctNm9mSFdFeFlUQkFBc0ZFLmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAmxiKVOPQ 44KxZgynVxUF+/GFr+C3Wn4whGtvRyu5AI281UD64rs77pXb3XDJOy5RmV69TiD7 S5tEkSaFKEDOnGS6iLtxkN/VAbNLZm/+vwSS8df8TapgiCVuRehTV62y2/T5xX7R hKCTG8KQLMjgb+0ZWKKuJEew1okVHlTGzVB+PCxDLW0NseHUAQFzpvZCOY9gLTct 7mbtEev7nw9AoWoMBDkL436qWWY+7w8wWG8KytTDJ889d+OvEvWN/rRY4IdEBQnH ri27xztWphbiYji73ZIj/402gNFEo33dOk1upRdN3Fc/qTQ71h/7O/g71rA1opfc 17pMvnAXUOzZzw== -----END CERTIFICATE-----Generated at Tue Sep 16 23:28:39 2025 by rpki-client