$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/f2/4842a9-9fcd-4bb6-bb04-0dbbc249e657/1/SSFvXBZbgnp_1z2BB669L2PGPiQ.mft File: SSFvXBZbgnp_1z2BB669L2PGPiQ.mft (raw, json) Hash identifier: wmQe9ltW2Ht6CwbMl8uRKHiZZp1C6kiPjlAnTpDMKQQ= Subject key identifier: E6:97:E0:55:95:40:87:EB:32:5F:63:18:44:6E:D8:49:47:59:A0:A0 Authority key identifier: 49:21:6F:5C:16:5B:82:7A:7F:D7:3D:81:07:AE:BD:2F:63:C6:3E:24 Certificate issuer: /CN=49216f5c165b827a7fd73d8107aebd2f63c63e24 Certificate serial: 019959B1E3716B5A2A3779EACF77E9A635B5 Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/SSFvXBZbgnp_1z2BB669L2PGPiQ.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/f2/4842a9-9fcd-4bb6-bb04-0dbbc249e657/1/SSFvXBZbgnp_1z2BB669L2PGPiQ.mft Manifest number: 07A5 Signing time: Wed 17 Sep 2025 22:00:54 +0000 Manifest this update: Wed 17 Sep 2025 22:00:54 +0000 Manifest next update: Thu 18 Sep 2025 22:00:54 +0000 Files and hashes: 1: 3EzuBFNcE3-Y9EKRZTTEJ-hJ0r0.roa (hash: c7Qo95/rDIGaWw+UtmeeU76uTMOHrZiqKPmI6hQSOzo=) 2: 8wPWU2vG9yor96syg0xci6OMavk.roa (hash: 58okY/hMSnPqb+2am85BaYPbNkOmLTFbAoYMmjPkzSM=) 3: A8u38dlgw8e8wVBstLEUX0BIwKA.roa (hash: wMifdjJKZOKPZclZ2LTT2h1hBhv48+8C1YSb4m0Dn8w=) 4: MjYi-LSjoIJQHulT2C8hiHI7HD8.roa (hash: dC5UZCibXUg9xVnIxopZdKZtoheRYoCMgnJyaeHGfKM=) 5: O442f9rKCameMmZGS2am4On1RJE.roa (hash: Tjn+0NJyIaKfDErYElD/Vnb1U5GiOqlQwXo7lUYpajU=) 6: PYtBwXCIX2JfibgH-eH6y28_VrI.roa (hash: HiHxBEZ/k5oJMJ4flD5NHFntvssSaUpL19eBPcUrz0Y=) 7: SSFvXBZbgnp_1z2BB669L2PGPiQ.crl (hash: PGgTgWyWA090KJCulkKijzgpTeSDIiy/LgFYGRqJhIw=) 8: XhNIRKox72ceLxS-HicNdteAlnc.roa (hash: QNRbEve8iPmaf5PJ3d4wKSJFvAQJTgfZsNNYbZDbIlc=) 9: eWMDU8HwO4x-gg3ujXJ2STSGGfQ.roa (hash: RDB743TY+2ejVaYtMpnXMPNwKxBcHmk10C4c+qWabCo=) 10: hTZXcUjpJUJ22kXbz7xa6_8yeXg.roa (hash: T8pLPSySDtezTp46L2Jv6HnkGBBxe5327Qx79YtHPlw=) 11: kTJsplmwURGCaPzG4ayo6wcNo7A.roa (hash: l/8qlEM8+mm6CRnvB68H+M19y+bDF0JqtLE1zP1nToE=) 12: oX3OGzwxfpoj75NeGxUgbWj5Nag.roa (hash: AUpPKp6STpZ3+I37dxgfx0DnwlKN78RdnPEKRCGUs1k=) 13: pSBQwLUPyYWO99fSCGOORj9giws.roa (hash: JkOzR+BpOFLVw+DBFx5vd7D/7xkaT2h6VtCqnTT04N4=) Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/f2/4842a9-9fcd-4bb6-bb04-0dbbc249e657/1/SSFvXBZbgnp_1z2BB669L2PGPiQ.crl rsync://rpki.ripe.net/repository/DEFAULT/f2/4842a9-9fcd-4bb6-bb04-0dbbc249e657/1/SSFvXBZbgnp_1z2BB669L2PGPiQ.mft rsync://rpki.ripe.net/repository/DEFAULT/SSFvXBZbgnp_1z2BB669L2PGPiQ.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Thu 18 Sep 2025 21:38:15 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:99:59:b1:e3:71:6b:5a:2a:37:79:ea:cf:77:e9:a6:35:b5 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=49216f5c165b827a7fd73d8107aebd2f63c63e24 Validity Not Before: Sep 17 22:00:54 2025 GMT Not After : Sep 18 22:00:54 2025 GMT Subject: CN=e697e055954087eb325f6318446ed8494759a0a0 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:ab:86:4f:01:2c:2a:11:79:57:0a:78:2f:5d:23: 39:ca:a2:e7:a0:07:48:e8:a0:5a:a9:de:b6:ff:77: 29:eb:4b:18:3d:af:c2:39:bd:0b:c6:94:6c:28:02: 58:4b:69:ca:ee:93:f6:2a:d2:e0:99:bc:a9:50:5b: 83:b5:cf:75:9f:46:2b:78:01:85:65:8e:18:44:3a: 4f:d3:af:66:26:a5:94:b7:65:e1:71:3d:cb:eb:f6: 88:78:53:cd:21:09:12:65:2d:97:f1:a6:dd:f5:eb: 20:73:a2:8b:2b:b8:31:0a:16:64:c6:d4:e1:d3:d3: 42:a6:c1:66:11:75:46:48:30:c7:a8:9d:e9:69:e2: 5e:e0:a4:9c:c6:83:34:b7:f9:43:9e:98:6f:53:2e: 38:76:2a:f7:50:f8:07:a1:18:35:1f:ba:43:5d:14: c1:eb:6b:a8:0f:65:6d:2f:64:96:fa:67:c2:24:1d: 38:5e:cf:d8:fb:4d:7f:05:e1:7c:f2:ed:91:3a:62: 43:91:82:9c:08:e8:79:5a:97:fd:54:eb:25:8a:ad: 1a:35:95:f0:48:6d:f9:1f:b3:fb:0c:98:bf:52:53: 32:65:12:e9:b9:4e:3e:22:c6:a0:7b:1f:5a:f8:45: af:d0:da:a8:f4:25:43:1e:10:97:20:39:d5:42:fd: 7d:3b Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: E6:97:E0:55:95:40:87:EB:32:5F:63:18:44:6E:D8:49:47:59:A0:A0 X509v3 Authority Key Identifier: keyid:49:21:6F:5C:16:5B:82:7A:7F:D7:3D:81:07:AE:BD:2F:63:C6:3E:24 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/SSFvXBZbgnp_1z2BB669L2PGPiQ.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/f2/4842a9-9fcd-4bb6-bb04-0dbbc249e657/1/SSFvXBZbgnp_1z2BB669L2PGPiQ.mft X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/f2/4842a9-9fcd-4bb6-bb04-0dbbc249e657/1/SSFvXBZbgnp_1z2BB669L2PGPiQ.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 0a:f2:a1:51:38:34:41:f9:94:d2:ae:15:14:ad:a7:85:2c:4b: 55:a9:4b:01:fe:3e:e2:f7:ab:20:23:c3:a2:1c:a4:bf:30:97: 5a:b2:94:b1:08:cd:6b:7f:ff:08:35:51:f2:54:8d:4e:9f:8e: d7:08:88:f0:b3:99:00:a2:f3:c5:58:dc:47:a8:88:c5:6f:cc: 0b:5a:86:74:67:df:da:0b:ed:39:45:ac:2d:78:6e:c7:d7:d4: ff:5c:fa:6b:9b:a8:3d:a5:56:dd:65:b9:b8:87:e7:62:32:2d: 29:73:f1:fc:7f:40:cf:1a:29:fa:74:3c:70:69:77:bb:70:dd: f5:b4:ac:6e:7a:28:cc:6a:9d:fd:e6:3f:aa:95:75:22:6b:77: 53:99:fc:54:5b:23:fa:68:15:f1:c6:68:fe:c5:53:79:33:6c: d6:9b:9c:12:a0:2b:4d:81:a2:39:42:c9:42:91:64:d2:d6:e5: 04:ed:05:e9:39:2b:a5:4b:a4:69:46:1a:d8:77:af:08:77:42: a6:2f:d9:5d:44:9a:2a:2a:2e:0d:b5:93:16:39:e3:5c:55:7b: 91:a8:a4:de:54:25:41:5b:8c:b8:33:23:4c:37:52:20:9d:66: c6:ff:2c:06:e7:cb:f8:88:f7:1c:3f:ec:2c:23:2e:9d:03:12: cb:a2:1f:05 -----BEGIN CERTIFICATE----- MIIFFjCCA/6gAwIBAgISAZlZseNxa1oqN3nqz3fppjW1MA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKDQ5MjE2ZjVjMTY1YjgyN2E3ZmQ3M2Q4MTA3YWViZDJmNjNj NjNlMjQwHhcNMjUwOTE3MjIwMDU0WhcNMjUwOTE4MjIwMDU0WjAzMTEwLwYDVQQD EyhlNjk3ZTA1NTk1NDA4N2ViMzI1ZjYzMTg0NDZlZDg0OTQ3NTlhMGEwMIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAq4ZPASwqEXlXCngvXSM5yqLnoAdI 6KBaqd62/3cp60sYPa/COb0LxpRsKAJYS2nK7pP2KtLgmbypUFuDtc91n0YreAGF ZY4YRDpP069mJqWUt2XhcT3L6/aIeFPNIQkSZS2X8abd9esgc6KLK7gxChZkxtTh 09NCpsFmEXVGSDDHqJ3paeJe4KScxoM0t/lDnphvUy44dir3UPgHoRg1H7pDXRTB 62uoD2VtL2SW+mfCJB04Xs/Y+01/BeF88u2ROmJDkYKcCOh5Wpf9VOsliq0aNZXw SG35H7P7DJi/UlMyZRLpuU4+Isagex9a+EWv0Nqo9CVDHhCXIDnVQv19OwIDAQAB o4ICIjCCAh4wHQYDVR0OBBYEFOaX4FWVQIfrMl9jGERu2ElHWaCgMB8GA1UdIwQY MBaAFEkhb1wWW4J6f9c9gQeuvS9jxj4kMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvU1NGdlhCWmJnbnBfMXoyQkI2NjlMMlBHUGlRLmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC9mMi80ODQyYTktOWZjZC00YmI2LWJiMDQt MGRiYmMyNDllNjU3LzEvU1NGdlhCWmJnbnBfMXoyQkI2NjlMMlBHUGlRLm1mdDCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC9mMi80ODQyYTktOWZjZC00YmI2LWJiMDQtMGRiYmMyNDllNjU3 LzEvU1NGdlhCWmJnbnBfMXoyQkI2NjlMMlBHUGlRLmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEACvKhUTg0 QfmU0q4VFK2nhSxLValLAf4+4verICPDohykvzCXWrKUsQjNa3//CDVR8lSNTp+O 1wiI8LOZAKLzxVjcR6iIxW/MC1qGdGff2gvtOUWsLXhux9fU/1z6a5uoPaVW3WW5 uIfnYjItKXPx/H9Azxop+nQ8cGl3u3Dd9bSsbnoozGqd/eY/qpV1Imt3U5n8VFsj +mgV8cZo/sVTeTNs1pucEqArTYGiOULJQpFk0tblBO0F6TkrpUukaUYa2HevCHdC pi/ZXUSaKiouDbWTFjnjXFV7kaik3lQlQVuMuDMjTDdSIJ1mxv8sBufL+Ij3HD/s LCMunQMSy6IfBQ== -----END CERTIFICATE-----Generated at Thu Sep 18 06:05:08 2025 by rpki-client