$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/ee/c55fdf-a68a-4aa0-b8c5-7f2333604997/1/M8NCwGqsw1nTlDn_WN76jqGHV0g.mft File: M8NCwGqsw1nTlDn_WN76jqGHV0g.mft (raw, json) Hash identifier: A7YYrreKpGVMUD5J1l0x71XKPPDuYZbDB0zhFLc9pRI= Subject key identifier: 33:D4:F0:48:B6:0E:4E:B8:03:ED:42:4C:6C:C1:34:AC:55:7A:F9:17 Authority key identifier: 33:C3:42:C0:6A:AC:C3:59:D3:94:39:FF:58:DE:FA:8E:A1:87:57:48 Certificate issuer: /CN=33c342c06aacc359d39439ff58defa8ea1875748 Certificate serial: 019932A41EE5B832E18D91D026335DD1F2ED Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/M8NCwGqsw1nTlDn_WN76jqGHV0g.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/ee/c55fdf-a68a-4aa0-b8c5-7f2333604997/1/M8NCwGqsw1nTlDn_WN76jqGHV0g.mft Manifest number: 167A Signing time: Wed 10 Sep 2025 08:00:40 +0000 Manifest this update: Wed 10 Sep 2025 08:00:40 +0000 Manifest next update: Thu 11 Sep 2025 08:00:40 +0000 Files and hashes: 1: 1-yS3aYPqpaClbUu2NxEJjasn11w.roa (hash: 5XgaEX1gVaWrfAm4eZoLyJtYysjnny395i7jpZsSAQY=) 2: 1_CHZT9QfuR7tsU-euaK767cklU.roa (hash: 63+eLT9Dw8Qs2m1cc8lHoIY3XMdIir76QzW85Og4v9M=) 3: 2_oHdZTLwl8Ni8dVchp52bQoBP8.roa (hash: 1IGeiz1Jq/CL3kqilbFu1/fy+mEjiI24ecXvvRj4kX4=) 4: 36PcBEuS0YaFeejxK9Rr2Qkonyg.roa (hash: crvn7STBSQ8hyIYObc7IEiRjwRLGGVAHLgb6Zwn91c8=) 5: 4CLeeil6rnYYbSXDioOdMRk-fu0.roa (hash: nA2tspg1OX/8GxIGauCnmSzDzS8p+XC3M6EwX+K2Zuc=) 6: 7Lq5thg4GVm1ghsW2nTmTfntl7Q.roa (hash: Cug0ydNU1zlYNhdljKnKemuyYIF9W9jlVIkuddLMlTQ=) 7: 7usS4n2wTmwQKN_FfLFrT2gzTes.roa (hash: rmvLzeLSfvnfViQvQG0evozZFVJcIY19+X8a4fI9x4Q=) 8: 8YSnvyCLvUiHNjAw1eWuFCNdk2c.roa (hash: PTMxJnzevVSgZNxZ+M3p3kXGLUbEbhxizVHAA+Gkp9w=) 9: DbP7K2VtNw3kapyPyuFvQE7JBSM.roa (hash: 2fzeTpuJWnP6/gv4fT9R5JKUn/1ALgN/OCuPkiMy+VY=) 10: M8NCwGqsw1nTlDn_WN76jqGHV0g.crl (hash: Qmj3/89ZFLc0vRlQfzCy7HiENdEEGV4O2geji7nl1Ck=) 11: PtdarDr91PAic9ExXEPtp5rDR90.roa (hash: pCWRE4xl0SCTzuH+d2oTniDVCc4UbcqvXbr0am8wd2E=) 12: XHw85hniBF8TOIktC8VH-K5Sz7M.roa (hash: Ea6SLJBNB8kXoImOZvy4ZtmOcm4IPMCnAht2m4dCzfQ=) 13: _Cb6FUCoQ03XQzWaAGVZCL11bhk.roa (hash: 7DHJ0ftYg5chCGMOY75jI68kzxP7FSC041EsKG1o0UA=) 14: hmKd6LubvseWFnch4vVN9v-GR6U.roa (hash: eqD+J0wg0iQNL4Cg+PT3/sHzu0dI9aBjTjQ//aaCFJQ=) 15: ixgQ7SiQi_wWeVAAXtTKU7XdZIk.roa (hash: 96bA0cNzp2CN/kCqbjKPaK+FRxIBqzNEUGIfvg5EFb4=) 16: qmxFyvD5jjibZjJM1ZLLs4anyDg.roa (hash: y/C7QUn/kfSJX+tk2XBXNZQ/E3dp0hw1Ap5O7ikQtfw=) 17: v9Lrt2SfuAlXzVot4u7KvPVgY2M.roa (hash: Y7iaJQnKOEgRwNsqfZadHFtG6v/ZxO1cSgSJLizeQ/g=) 18: vmLDD1TBTYG-hEjE6Ab3SFuTYs0.roa (hash: NyOwpcin3g/lVGCyaCZG0ziR33wb6JD1mwKtweMIjl0=) Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/ee/c55fdf-a68a-4aa0-b8c5-7f2333604997/1/M8NCwGqsw1nTlDn_WN76jqGHV0g.crl rsync://rpki.ripe.net/repository/DEFAULT/ee/c55fdf-a68a-4aa0-b8c5-7f2333604997/1/M8NCwGqsw1nTlDn_WN76jqGHV0g.mft rsync://rpki.ripe.net/repository/DEFAULT/M8NCwGqsw1nTlDn_WN76jqGHV0g.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Thu 11 Sep 2025 08:00:40 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:99:32:a4:1e:e5:b8:32:e1:8d:91:d0:26:33:5d:d1:f2:ed Signature Algorithm: sha256WithRSAEncryption Issuer: CN=33c342c06aacc359d39439ff58defa8ea1875748 Validity Not Before: Sep 10 08:00:40 2025 GMT Not After : Sep 11 08:00:40 2025 GMT Subject: CN=33d4f048b60e4eb803ed424c6cc134ac557af917 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:d5:02:e2:91:bc:84:97:87:87:6a:4d:5f:f4:3b: e9:95:32:83:0f:da:97:a2:7f:86:4d:51:34:f5:64: bc:ce:d9:07:5f:db:ac:5a:c6:81:98:f0:9d:35:bd: 43:f8:5c:e8:a8:a7:e2:2c:ed:b1:68:a6:d5:ec:fa: 7c:7d:0e:76:6f:c6:b6:4b:c6:4c:89:23:6a:21:51: 01:a1:6e:a5:ba:76:ab:09:92:e1:ba:4a:d9:0f:18: 8e:61:80:2b:6d:71:45:d5:b6:18:50:5f:4b:ac:df: ff:6f:b5:89:0f:7f:9c:f9:4b:2a:01:c7:41:77:64: fd:9d:fe:21:ec:44:1e:12:c9:a1:8f:1a:5b:cb:43: bf:01:da:6b:2c:85:bc:4e:d7:7c:c9:46:85:8a:de: 66:0b:12:22:7c:d5:d3:c3:23:f6:eb:fb:cc:61:a9: 0d:20:ee:4d:01:96:44:48:6c:d8:a2:91:41:9f:e9: a5:af:87:f1:4c:c6:d8:5c:ec:da:71:7f:1b:6c:d6: 54:f2:4a:b6:7d:ec:5e:23:b4:84:13:be:9e:e8:c4: e8:e1:fe:23:ee:ff:2a:ca:09:6a:d5:25:46:8d:07: 1a:9e:fd:7a:e1:a2:e8:e4:d9:9f:74:6e:23:0f:5a: ec:64:4c:e5:7f:d1:ca:62:4c:ed:91:45:9b:59:31: 05:17 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 33:D4:F0:48:B6:0E:4E:B8:03:ED:42:4C:6C:C1:34:AC:55:7A:F9:17 X509v3 Authority Key Identifier: keyid:33:C3:42:C0:6A:AC:C3:59:D3:94:39:FF:58:DE:FA:8E:A1:87:57:48 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/M8NCwGqsw1nTlDn_WN76jqGHV0g.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/ee/c55fdf-a68a-4aa0-b8c5-7f2333604997/1/M8NCwGqsw1nTlDn_WN76jqGHV0g.mft X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/ee/c55fdf-a68a-4aa0-b8c5-7f2333604997/1/M8NCwGqsw1nTlDn_WN76jqGHV0g.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 5c:e7:3d:81:72:69:8c:0f:88:cf:e2:b9:06:10:b5:57:c2:5b: 7d:fe:a8:34:56:02:ca:51:db:5b:18:c0:08:a2:e4:11:98:39: 9a:84:49:e1:06:69:02:a1:06:2d:79:09:e8:7c:93:89:21:d9: 7c:44:dc:bd:8a:7e:54:ad:2a:d4:14:5f:87:86:bc:2f:64:60: 86:4a:6b:ee:85:12:7f:c4:d9:e2:ea:24:2a:68:ba:d5:30:55: f9:05:c8:10:22:c9:1b:83:d5:31:41:78:3c:e1:af:17:63:be: 21:4b:bc:8b:49:6d:ab:06:54:ec:05:f4:69:97:be:f4:aa:39: ab:0b:63:6c:6a:c3:46:30:fd:a2:50:34:27:9f:15:1d:6a:ed: bd:7d:2b:56:ad:01:52:c3:1d:cb:59:98:97:34:8c:21:83:3d: 01:4c:72:7e:1c:ae:45:8d:4a:75:51:87:08:3c:93:e8:fe:79: 69:d3:18:2d:85:93:32:3c:f5:1c:87:12:9d:24:e6:7d:e3:06: 0f:04:e8:32:b3:41:99:93:36:29:ac:54:70:89:28:d5:3e:cd: 37:c4:76:1e:2a:1e:0c:5f:8a:8a:66:04:66:6a:75:b4:16:36: f7:c6:35:65:f5:bc:2f:f2:25:4f:98:19:48:3f:00:20:55:7c: fe:27:58:6d -----BEGIN CERTIFICATE----- MIIFFjCCA/6gAwIBAgISAZkypB7luDLhjZHQJjNd0fLtMA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKDMzYzM0MmMwNmFhY2MzNTlkMzk0MzlmZjU4ZGVmYThlYTE4 NzU3NDgwHhcNMjUwOTEwMDgwMDQwWhcNMjUwOTExMDgwMDQwWjAzMTEwLwYDVQQD EygzM2Q0ZjA0OGI2MGU0ZWI4MDNlZDQyNGM2Y2MxMzRhYzU1N2FmOTE3MIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEA1QLikbyEl4eHak1f9DvplTKDD9qX on+GTVE09WS8ztkHX9usWsaBmPCdNb1D+FzoqKfiLO2xaKbV7Pp8fQ52b8a2S8ZM iSNqIVEBoW6lunarCZLhukrZDxiOYYArbXFF1bYYUF9LrN//b7WJD3+c+UsqAcdB d2T9nf4h7EQeEsmhjxpby0O/AdprLIW8Ttd8yUaFit5mCxIifNXTwyP26/vMYakN IO5NAZZESGzYopFBn+mlr4fxTMbYXOzacX8bbNZU8kq2fexeI7SEE76e6MTo4f4j 7v8qyglq1SVGjQcanv164aLo5NmfdG4jD1rsZEzlf9HKYkztkUWbWTEFFwIDAQAB o4ICIjCCAh4wHQYDVR0OBBYEFDPU8Ei2Dk64A+1CTGzBNKxVevkXMB8GA1UdIwQY MBaAFDPDQsBqrMNZ05Q5/1je+o6hh1dIMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvTThOQ3dHcXN3MW5UbERuX1dONzZqcUdIVjBnLmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC9lZS9jNTVmZGYtYTY4YS00YWEwLWI4YzUt N2YyMzMzNjA0OTk3LzEvTThOQ3dHcXN3MW5UbERuX1dONzZqcUdIVjBnLm1mdDCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC9lZS9jNTVmZGYtYTY4YS00YWEwLWI4YzUtN2YyMzMzNjA0OTk3 LzEvTThOQ3dHcXN3MW5UbERuX1dONzZqcUdIVjBnLmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAXOc9gXJp jA+Iz+K5BhC1V8Jbff6oNFYCylHbWxjACKLkEZg5moRJ4QZpAqEGLXkJ6HyTiSHZ fETcvYp+VK0q1BRfh4a8L2Rghkpr7oUSf8TZ4uokKmi61TBV+QXIECLJG4PVMUF4 POGvF2O+IUu8i0ltqwZU7AX0aZe+9Ko5qwtjbGrDRjD9olA0J58VHWrtvX0rVq0B UsMdy1mYlzSMIYM9AUxyfhyuRY1KdVGHCDyT6P55adMYLYWTMjz1HIcSnSTmfeMG DwToMrNBmZM2KaxUcIko1T7NN8R2HioeDF+KimYEZmp1tBY298Y1ZfW8L/IlT5gZ SD8AIFV8/idYbQ== -----END CERTIFICATE-----Generated at Wed Sep 10 17:36:34 2025 by rpki-client