$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/f2/cc6e99-6e5f-401b-912d-1095544c6c50/1/mc5WmhTC2zdy8jGHzmjmVB7ABI4.mft File: mc5WmhTC2zdy8jGHzmjmVB7ABI4.mft (raw, json) Hash identifier: 8rDFXALd7VSRrBguBaWrWal7vogoiuZNFPkz/rAVVb8= Subject key identifier: 00:0C:33:6A:2A:77:B8:B6:55:25:E9:78:5A:C5:AB:63:0F:56:5E:61 Authority key identifier: 99:CE:56:9A:14:C2:DB:37:72:F2:31:87:CE:68:E6:54:1E:C0:04:8E Certificate issuer: /CN=99ce569a14c2db3772f23187ce68e6541ec0048e Certificate serial: 01991C8A483235CCE45BDF6D60FA7EB81385 Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/mc5WmhTC2zdy8jGHzmjmVB7ABI4.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/f2/cc6e99-6e5f-401b-912d-1095544c6c50/1/mc5WmhTC2zdy8jGHzmjmVB7ABI4.mft Manifest number: 168F Signing time: Sat 06 Sep 2025 01:00:48 +0000 Manifest this update: Sat 06 Sep 2025 01:00:48 +0000 Manifest next update: Sun 07 Sep 2025 01:00:48 +0000 Files and hashes: 1: 7hlWKm8vTIF0LH1H2oS6Admh1TI.roa (hash: JGgMMA+OZIrWq67kkKcLVk/aNndkz3SnG1R5RYOVvj8=) 2: 8Okcs_WzeZSlRzql6-e5V5V7syA.roa (hash: Bgf74cz9Nwo/ctlxM9vVhY3z4DibfYQP6Uszu31EXc8=) 3: AJpw_2i3EoQNYD9kunMPYOdByi8.roa (hash: 2y+udfjFmNVer5C4pJzKndxIM53KHs0ELdljGNxXclM=) 4: BW-ZjApW-eGpyxFEOc0qqC_7S5k.roa (hash: RqpMiCDIPeUSPd1EPbgHwl0XZwlcr7/eFSWcSxO7pPY=) 5: FjCA5Ak9pc8iYQAo2kd8vxWMg2c.roa (hash: LWHCt8fi0ffLNOHRJ69hCW6DNWkN+nY4S8kMpRaQ7ss=) 6: Ik8Kqt-zKfrsdQjyrAjHXX-mlLc.roa (hash: Zg9C0+0W8n0QIjR6RRPkp/OJIpBk8iu2+syGMIoxQyg=) 7: P82-6fcmXy1vqdLrwWWqytTl0TM.roa (hash: z01aDruR3yMRSRzpiGY2CGLWYQwuEAMQJV+YU0LBGGA=) 8: RYdEtsOojE3SXyShhqAjMIQl9xQ.roa (hash: bxAZYk1bj8j4gGSsg9+CUkCHFq1GRl7baVopFxolE0s=) 9: WBeAt2UOvPgAdfpllYF8DBrXsx8.roa (hash: IGhLKO/rQTI4tOBHJDgWqI73xTyqxuZsgF0ztyC/dOc=) 10: bbmenZqkY_bNQyceoK-fLvwWxdc.roa (hash: 5/uuA7PsJ4CyNOajTBR0J1Bkylsmq9V39AJtX9hFgFU=) 11: dMlBq16YcIM7-JR7sVrQGjUo5Ts.roa (hash: i7NU7NT4PhY/w3tg6T+Z3qdRHBm2oFSaLm/74+Urx2g=) 12: f4e7IUwG3JkPasx3oPPOpKnw014.roa (hash: oT75cSQjF7ggxHOJOkz6Sxjs0hfilCF0H6NE1nJtUfo=) 13: mNguxrQSssFTgOvDx-TtVJcngJ0.roa (hash: p4yScE1NaP9LVRZLGH/RikX/bIEDOl76JK/45ns5C9Q=) 14: mc5WmhTC2zdy8jGHzmjmVB7ABI4.crl (hash: cmGXN2ZK2pIhmm000qwbj6c9qXqQ39Ue/GaDwqEriow=) 15: u_mqTybwgy-hqVDwwCNi1Bf-8tI.roa (hash: JZzfV1nFUUQsICoBUJ9//kJmxjSvH3d3D7ybB8QQr/Y=) Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/f2/cc6e99-6e5f-401b-912d-1095544c6c50/1/mc5WmhTC2zdy8jGHzmjmVB7ABI4.crl rsync://rpki.ripe.net/repository/DEFAULT/f2/cc6e99-6e5f-401b-912d-1095544c6c50/1/mc5WmhTC2zdy8jGHzmjmVB7ABI4.mft rsync://rpki.ripe.net/repository/DEFAULT/mc5WmhTC2zdy8jGHzmjmVB7ABI4.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Sat 06 Sep 2025 17:17:23 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:99:1c:8a:48:32:35:cc:e4:5b:df:6d:60:fa:7e:b8:13:85 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=99ce569a14c2db3772f23187ce68e6541ec0048e Validity Not Before: Sep 6 01:00:48 2025 GMT Not After : Sep 7 01:00:48 2025 GMT Subject: CN=000c336a2a77b8b65525e9785ac5ab630f565e61 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:d3:f7:6b:fc:78:bd:4f:db:0f:bc:9a:b8:b7:93: 3f:96:c9:11:96:f7:dc:c2:74:04:ca:43:ae:2b:3c: cc:67:ab:09:77:c3:99:eb:7f:75:5a:59:7b:ab:34: 99:53:ff:bc:6b:c2:5f:c8:2f:8d:c6:0a:71:19:a5: f9:22:7b:dc:8c:fc:fb:e2:82:8e:1b:43:e6:b4:04: 7f:91:36:9f:d2:af:34:78:9e:5a:2a:60:51:9b:63: ea:de:47:5c:57:d4:a9:af:55:ab:93:42:88:93:71: 7b:fc:80:ec:bf:5b:74:d1:7a:8a:f2:a5:4e:fe:ac: 1b:8d:df:5b:4b:ec:fe:6b:c6:de:74:e9:a2:45:d8: f9:4a:02:50:f4:72:b9:63:c2:73:1d:d4:c8:fb:11: dc:c9:2a:78:61:90:4d:45:d6:7b:83:f8:11:cd:33: ea:ee:2a:40:bb:aa:a1:f7:e2:da:1d:48:ee:8b:84: 17:99:15:df:a0:10:74:b0:12:d0:99:c3:d9:f1:a4: 5c:e3:8b:12:6d:cd:f7:b8:d8:7f:d9:d1:0f:12:1a: d7:37:eb:02:60:66:18:69:2c:73:4b:37:1b:3f:6c: 74:ca:dc:6a:f9:32:5b:3d:e7:73:f5:1c:06:1f:04: 80:75:d0:af:79:74:aa:43:5f:fe:f1:c3:0d:f4:7c: b1:25 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 00:0C:33:6A:2A:77:B8:B6:55:25:E9:78:5A:C5:AB:63:0F:56:5E:61 X509v3 Authority Key Identifier: keyid:99:CE:56:9A:14:C2:DB:37:72:F2:31:87:CE:68:E6:54:1E:C0:04:8E X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/mc5WmhTC2zdy8jGHzmjmVB7ABI4.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/f2/cc6e99-6e5f-401b-912d-1095544c6c50/1/mc5WmhTC2zdy8jGHzmjmVB7ABI4.mft X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/f2/cc6e99-6e5f-401b-912d-1095544c6c50/1/mc5WmhTC2zdy8jGHzmjmVB7ABI4.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 6d:57:47:95:e5:24:c5:80:1c:49:18:49:b5:45:02:a9:b4:32: 01:0a:be:b0:0d:08:96:0a:d8:25:8e:93:f6:f3:39:13:1a:8a: 23:f6:9c:ae:eb:cd:5d:d8:d5:40:60:22:8f:ae:22:87:33:c4: bb:2f:19:1f:da:eb:b0:53:9a:10:d3:3b:64:a7:73:64:2e:32: 64:5f:5f:38:54:79:ff:7f:cd:d9:8b:03:88:84:2f:3f:1c:65: e2:90:8c:28:0a:71:6c:96:40:57:0c:cd:4a:b4:4d:b4:9d:fa: 92:06:56:29:12:41:bb:fb:51:1e:02:ec:45:c6:98:31:be:8b: 00:51:1f:49:cf:12:67:ae:6d:50:75:63:0f:9d:02:9e:01:6c: f8:f0:fd:9a:b0:11:24:aa:a8:9a:6c:cb:17:36:a8:14:e4:45: b4:11:5d:93:43:81:cf:7a:8b:1e:fb:4a:fb:f4:8a:f1:91:8b: fa:0e:a2:3c:9e:1b:97:ba:31:6d:89:ce:86:e5:32:cc:26:55: 97:76:1c:88:d3:d5:9c:37:da:db:b8:2c:e6:fa:44:19:5f:60: 85:ae:03:bb:b0:3b:30:0e:ad:2b:fc:b9:a6:e6:f0:3f:ad:ba: cf:ef:a5:2e:c8:d5:2e:3b:7e:9e:ce:0c:d5:84:a4:b3:c7:cb: 12:7e:0c:81 -----BEGIN CERTIFICATE----- MIIFFjCCA/6gAwIBAgISAZkcikgyNczkW99tYPp+uBOFMA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKDk5Y2U1NjlhMTRjMmRiMzc3MmYyMzE4N2NlNjhlNjU0MWVj MDA0OGUwHhcNMjUwOTA2MDEwMDQ4WhcNMjUwOTA3MDEwMDQ4WjAzMTEwLwYDVQQD EygwMDBjMzM2YTJhNzdiOGI2NTUyNWU5Nzg1YWM1YWI2MzBmNTY1ZTYxMIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEA0/dr/Hi9T9sPvJq4t5M/lskRlvfc wnQEykOuKzzMZ6sJd8OZ6391Wll7qzSZU/+8a8JfyC+NxgpxGaX5InvcjPz74oKO G0PmtAR/kTaf0q80eJ5aKmBRm2Pq3kdcV9Spr1Wrk0KIk3F7/IDsv1t00XqK8qVO /qwbjd9bS+z+a8bedOmiRdj5SgJQ9HK5Y8JzHdTI+xHcySp4YZBNRdZ7g/gRzTPq 7ipAu6qh9+LaHUjui4QXmRXfoBB0sBLQmcPZ8aRc44sSbc33uNh/2dEPEhrXN+sC YGYYaSxzSzcbP2x0ytxq+TJbPedz9RwGHwSAddCveXSqQ1/+8cMN9HyxJQIDAQAB o4ICIjCCAh4wHQYDVR0OBBYEFAAMM2oqd7i2VSXpeFrFq2MPVl5hMB8GA1UdIwQY MBaAFJnOVpoUwts3cvIxh85o5lQewASOMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvbWM1V21oVEMyemR5OGpHSHptam1WQjdBQkk0LmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC9mMi9jYzZlOTktNmU1Zi00MDFiLTkxMmQt MTA5NTU0NGM2YzUwLzEvbWM1V21oVEMyemR5OGpHSHptam1WQjdBQkk0Lm1mdDCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC9mMi9jYzZlOTktNmU1Zi00MDFiLTkxMmQtMTA5NTU0NGM2YzUw LzEvbWM1V21oVEMyemR5OGpHSHptam1WQjdBQkk0LmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAbVdHleUk xYAcSRhJtUUCqbQyAQq+sA0IlgrYJY6T9vM5ExqKI/acruvNXdjVQGAij64ihzPE uy8ZH9rrsFOaENM7ZKdzZC4yZF9fOFR5/3/N2YsDiIQvPxxl4pCMKApxbJZAVwzN SrRNtJ36kgZWKRJBu/tRHgLsRcaYMb6LAFEfSc8SZ65tUHVjD50CngFs+PD9mrAR JKqommzLFzaoFORFtBFdk0OBz3qLHvtK+/SK8ZGL+g6iPJ4bl7oxbYnOhuUyzCZV l3YciNPVnDfa27gs5vpEGV9gha4Du7A7MA6tK/y5pubwP626z++lLsjVLjt+ns4M 1YSks8fLEn4MgQ== -----END CERTIFICATE-----Generated at Sat Sep 6 02:40:44 2025 by rpki-client