$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/f3/897449-e9cf-4a79-89cf-41bb21ac2801/1/w4KAxTALdIiKx-tL-mQX2aLnsL4.mft File: w4KAxTALdIiKx-tL-mQX2aLnsL4.mft (raw, json) Hash identifier: syhnPHIcnvf4f68jQ5rYnY5vtQe0nBqtZlYhzRteG/8= Subject key identifier: F5:C2:7F:88:3B:BC:F7:F6:96:81:5D:D2:6A:81:BE:23:2B:B7:08:FA Authority key identifier: C3:82:80:C5:30:0B:74:88:8A:C7:EB:4B:FA:64:17:D9:A2:E7:B0:BE Certificate issuer: /CN=c38280c5300b74888ac7eb4bfa6417d9a2e7b0be Certificate serial: 019926D717E61630D48D13D0EF5D26B0532E Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/w4KAxTALdIiKx-tL-mQX2aLnsL4.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/f3/897449-e9cf-4a79-89cf-41bb21ac2801/1/w4KAxTALdIiKx-tL-mQX2aLnsL4.mft Manifest number: 0CC1 Signing time: Mon 08 Sep 2025 01:00:54 +0000 Manifest this update: Mon 08 Sep 2025 01:00:54 +0000 Manifest next update: Tue 09 Sep 2025 01:00:54 +0000 Files and hashes: 1: 1-O5PDCUIluNLwvL9ckZlTCiic5k.roa (hash: qhMDH/EIRf4uY8j8ZGgtmM3x6fh4+mOzTAkLJHzFbx0=) 2: 4l2IuTNstzGjNpiJFAwrychEOYw.roa (hash: m0X4eBCPHrx7Zmyz1UFRgVdtWA6FSM4O8cwU3fWGGhY=) 3: 8rc38ft7-cghVzgrIG_FEF23U4Y.roa (hash: zloCasQf4bNBLab9ps9NdNLvpuuMo4M0OO1zU76wLpY=) 4: IpV-26RSBCyAkVzi7Inj30YgLcM.roa (hash: ivn8CGpeMH35yLdwrBkCj0ryi6QOV70S64s8vxb45yQ=) 5: Kcn00ncHNEC4teVRwNmLYgJJBl8.roa (hash: ZM2cHlKba3YUH3uQ1CaA6CmJi6+0AYo//r2ySJ6HY5Y=) 6: OOJEMS5u2eb8DxkKrEosPXMw0Og.roa (hash: woCuxd2WLpz7AXDSWi//5Tr0gOU4v6FPC4jcOIMMjJ0=) 7: SDf8e-aBMrUzX-EHBBsyWkrUmG4.roa (hash: ZMabjtEf/lNM+vCMu5X1yKN5qreSc4/TmGSw3zFXhC4=) 8: SGMklr5AeE8jGTkv_5TNxH2UtBY.roa (hash: 5/gm3b3ZHQxuqtVGihJbcna/seeg7cLgU18tVnIiLhE=) 9: T7t5Bx6X2DN_5tf4efrA7vnqj2k.roa (hash: td8rBwHJnN+UP91bKfMfmPAq5aMPIDcnHWXi4WyoQek=) 10: VnWBSIofzpiIChVy5VaCLbOrKuE.roa (hash: n4Pjt5REvHccwjD3WmZQU5I3ehXb6sJY91R5vA4Pyfs=) 11: VxDCjm6wjynMra5WGkzJGoCPrhs.roa (hash: 6jDW1q/fW7zMLlE0XVbr19PIoHkbmzCNYkeTGYpRMW4=) 12: XuxgvLAd05qq4hqx4c_u4WYR7dY.roa (hash: zkLSNkHMYRl5bJ5dZozHFmcx3BcVtlFo0wC7SXYmwLQ=) 13: eVTHYh7c14c-D-F-B7SOqDObhvM.roa (hash: qrDFV3XmeSi0Zuvt7pZ0s9LJ8U6nsNBbLnOPzpjEjB4=) 14: jwC74-F5iREL188mldERk81FXug.roa (hash: ddYPoTatj6nI/eSrzriO9qo6/69S19UgdJCWsEfW64k=) 15: rpjetk_9g8Cajq47M1TtU-V8mAI.roa (hash: XNGViz5g4jjEVcTyrQCWY5LMRILB8EuyV5tfHGoyT64=) 16: sfwAjAu-GXwERqjbAFegCNjl2ek.roa (hash: wOmEjaFSgw+sIMZgz4C+gVMxcEXH5qSK0eNAgBIfZlY=) 17: w4KAxTALdIiKx-tL-mQX2aLnsL4.crl (hash: fpNG00ZWpzz+7vHutnKv9iMMYGolv5D5K2hqyqSEwM4=) Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/f3/897449-e9cf-4a79-89cf-41bb21ac2801/1/w4KAxTALdIiKx-tL-mQX2aLnsL4.crl rsync://rpki.ripe.net/repository/DEFAULT/f3/897449-e9cf-4a79-89cf-41bb21ac2801/1/w4KAxTALdIiKx-tL-mQX2aLnsL4.mft rsync://rpki.ripe.net/repository/DEFAULT/w4KAxTALdIiKx-tL-mQX2aLnsL4.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Tue 09 Sep 2025 01:00:23 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:99:26:d7:17:e6:16:30:d4:8d:13:d0:ef:5d:26:b0:53:2e Signature Algorithm: sha256WithRSAEncryption Issuer: CN=c38280c5300b74888ac7eb4bfa6417d9a2e7b0be Validity Not Before: Sep 8 01:00:54 2025 GMT Not After : Sep 9 01:00:54 2025 GMT Subject: CN=f5c27f883bbcf7f696815dd26a81be232bb708fa Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:be:8b:43:0f:c6:51:77:21:12:9a:57:eb:31:c4: f2:53:0f:10:ce:b0:0e:7a:97:68:5a:d3:0e:56:03: 92:00:5e:c1:49:d7:48:6b:5e:41:25:fa:24:4b:b1: 56:8f:a0:ad:0a:00:a6:9a:20:5d:c5:22:ce:33:f1: f5:3f:21:62:3b:81:0f:b1:e8:2c:e7:70:5b:ba:06: 15:10:79:6d:d7:c2:d2:08:71:ed:ee:a5:f7:68:86: ec:13:77:1e:5f:9a:ac:8c:8f:ee:6a:71:ce:39:c7: 83:9f:9e:e6:fe:27:25:57:ec:ed:22:e0:86:26:ab: 52:5a:31:e5:7b:df:7e:20:bb:4f:85:59:1f:89:95: 9d:81:52:c3:1b:f7:42:5f:9f:fc:2e:67:ae:1b:18: 33:70:e0:e6:5d:9b:ee:6a:83:71:35:b1:60:98:74: ee:70:8b:4a:07:06:5b:d2:ab:49:5a:34:4e:5a:95: 92:fe:d8:ad:48:30:c9:02:f6:a3:c4:b1:d4:ac:77: a9:53:0a:5e:21:74:76:f0:03:b0:35:c0:57:cf:3e: b6:a9:d9:54:6e:d4:7c:d4:ba:51:63:3d:ca:ed:59: dc:5f:ad:1c:49:8e:27:1b:c3:93:ca:c6:39:da:f6: c8:b2:76:f2:07:db:87:24:ce:2e:c7:80:bf:29:01: ab:75 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: F5:C2:7F:88:3B:BC:F7:F6:96:81:5D:D2:6A:81:BE:23:2B:B7:08:FA X509v3 Authority Key Identifier: keyid:C3:82:80:C5:30:0B:74:88:8A:C7:EB:4B:FA:64:17:D9:A2:E7:B0:BE X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/w4KAxTALdIiKx-tL-mQX2aLnsL4.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/f3/897449-e9cf-4a79-89cf-41bb21ac2801/1/w4KAxTALdIiKx-tL-mQX2aLnsL4.mft X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/f3/897449-e9cf-4a79-89cf-41bb21ac2801/1/w4KAxTALdIiKx-tL-mQX2aLnsL4.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 82:9d:d1:e9:c6:70:87:11:e8:3e:86:f1:14:b1:e1:d3:0e:54: 68:15:b9:58:d1:58:9b:b1:76:f1:5d:6c:25:81:1f:e0:20:04: 5e:c9:b3:93:9b:b8:4e:d6:61:f0:63:21:11:63:99:a5:81:79: 57:4d:41:f1:d6:0a:12:ad:1f:8d:9f:d9:0a:c4:41:13:a3:3f: 4c:d5:1f:34:37:fd:76:bb:bd:e9:cc:8f:18:09:05:dd:b0:9e: 06:cd:79:33:6e:f5:9b:be:eb:0f:6b:4e:00:a9:33:c7:5a:55: d4:9a:85:1e:de:05:e9:57:66:8a:aa:4d:7b:47:78:a2:e4:d4: 4b:05:8d:66:dc:1f:b7:1a:a1:a5:18:06:b0:2b:df:1c:ca:20: 56:b9:ba:7b:4f:7d:f2:de:28:77:ad:16:ac:4a:9c:28:c3:57: 0d:52:c7:a6:33:3b:4f:4e:6c:c8:70:43:27:a8:2e:5b:ed:5d: 09:ce:81:db:6b:cd:25:31:bb:94:a9:c8:e7:99:a1:e0:f3:ff: de:f4:3b:b6:32:89:73:17:a2:c1:ca:85:d2:a2:29:77:43:7a: bd:0f:1b:50:e0:f1:de:42:e7:64:46:3d:8a:cc:cb:40:9c:0a: 8d:65:b0:20:4b:40:ac:d8:68:b1:74:6c:e1:59:11:69:54:69: 45:94:dc:0a -----BEGIN CERTIFICATE----- MIIFFjCCA/6gAwIBAgISAZkm1xfmFjDUjRPQ710msFMuMA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKGMzODI4MGM1MzAwYjc0ODg4YWM3ZWI0YmZhNjQxN2Q5YTJl N2IwYmUwHhcNMjUwOTA4MDEwMDU0WhcNMjUwOTA5MDEwMDU0WjAzMTEwLwYDVQQD EyhmNWMyN2Y4ODNiYmNmN2Y2OTY4MTVkZDI2YTgxYmUyMzJiYjcwOGZhMIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAvotDD8ZRdyESmlfrMcTyUw8QzrAO epdoWtMOVgOSAF7BSddIa15BJfokS7FWj6CtCgCmmiBdxSLOM/H1PyFiO4EPsegs 53BbugYVEHlt18LSCHHt7qX3aIbsE3ceX5qsjI/uanHOOceDn57m/iclV+ztIuCG JqtSWjHle99+ILtPhVkfiZWdgVLDG/dCX5/8LmeuGxgzcODmXZvuaoNxNbFgmHTu cItKBwZb0qtJWjROWpWS/titSDDJAvajxLHUrHepUwpeIXR28AOwNcBXzz62qdlU btR81LpRYz3K7VncX60cSY4nG8OTysY52vbIsnbyB9uHJM4ux4C/KQGrdQIDAQAB o4ICIjCCAh4wHQYDVR0OBBYEFPXCf4g7vPf2loFd0mqBviMrtwj6MB8GA1UdIwQY MBaAFMOCgMUwC3SIisfrS/pkF9mi57C+MA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvdzRLQXhUQUxkSWlLeC10TC1tUVgyYUxuc0w0LmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC9mMy84OTc0NDktZTljZi00YTc5LTg5Y2Yt NDFiYjIxYWMyODAxLzEvdzRLQXhUQUxkSWlLeC10TC1tUVgyYUxuc0w0Lm1mdDCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC9mMy84OTc0NDktZTljZi00YTc5LTg5Y2YtNDFiYjIxYWMyODAx LzEvdzRLQXhUQUxkSWlLeC10TC1tUVgyYUxuc0w0LmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAgp3R6cZw hxHoPobxFLHh0w5UaBW5WNFYm7F28V1sJYEf4CAEXsmzk5u4TtZh8GMhEWOZpYF5 V01B8dYKEq0fjZ/ZCsRBE6M/TNUfNDf9dru96cyPGAkF3bCeBs15M271m77rD2tO AKkzx1pV1JqFHt4F6VdmiqpNe0d4ouTUSwWNZtwftxqhpRgGsCvfHMogVrm6e099 8t4od60WrEqcKMNXDVLHpjM7T05syHBDJ6guW+1dCc6B22vNJTG7lKnI55mh4PP/ 3vQ7tjKJcxeiwcqF0qIpd0N6vQ8bUODx3kLnZEY9iszLQJwKjWWwIEtArNhosXRs 4VkRaVRpRZTcCg== -----END CERTIFICATE-----Generated at Mon Sep 8 04:58:10 2025 by rpki-client