$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/f5/6990e9-c3c0-478a-9997-95b08e3660cf/1/kiIItHtqhk2dH_M-BqqB0TgZp04.mft File: kiIItHtqhk2dH_M-BqqB0TgZp04.mft (raw, json) Hash identifier: t5bJ8Ve7gEkdQumX3o0YNMQ6NG8tm+9DQzAcGH/+uJY= Subject key identifier: 44:0C:C4:D1:F0:CE:1A:51:FA:05:FA:D4:AA:D3:60:58:11:7B:27:23 Authority key identifier: 92:22:08:B4:7B:6A:86:4D:9D:1F:F3:3E:06:AA:81:D1:38:19:A7:4E Certificate issuer: /CN=922208b47b6a864d9d1ff33e06aa81d13819a74e Certificate serial: 01992CD92AD32F1E91A06BDC40B56CB88853 Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/kiIItHtqhk2dH_M-BqqB0TgZp04.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/f5/6990e9-c3c0-478a-9997-95b08e3660cf/1/kiIItHtqhk2dH_M-BqqB0TgZp04.mft Manifest number: 16C2 Signing time: Tue 09 Sep 2025 05:00:53 +0000 Manifest this update: Tue 09 Sep 2025 05:00:53 +0000 Manifest next update: Wed 10 Sep 2025 05:00:53 +0000 Files and hashes: 1: 1-rtI9dIBDPGpB7XLgp5LO6PPhNw.roa (hash: ZOyoK37XAa4AMrftPMDpS57217i8QyMPPSqOrLIuDh0=) 2: 1MqnWOr2XX863k_xrrBNGhpSTM8.roa (hash: ZAHJz2QsnnKlOkhGF4MOgyBVqnyxAgqsRswDwRAbn1Q=) 3: 5PKjnXPKiBPIfg2zkRDmJ9KcHZ4.roa (hash: EtX1xDpToRHGMg+04c4AtWvPkGfQaUFr/7IoFqm8yd0=) 4: ETJiLj_FPEXG5No5WrAoxGg_y_w.roa (hash: 662t7NLUufLVnPvlW5VowqyxEXMWNP4WIugo2zvrIGE=) 5: QX1PzB0slLNh42gV_9Uq9W7-NNU.roa (hash: 42Me4JYy4dGGMwi/uXUY8iDNdYDcztDyEjfKcP1cPGo=) 6: WtirBgLdd1QDsDcFh1HdrsUIlWo.roa (hash: GA2Y0Eudc/59qW3vmpiDOm6qcDbR/NWl/VMU6tiADWg=) 7: XPCmvArgHR13v_k02Z1LW1lWJx8.roa (hash: 9yrs8EgUGCgumASichQb2a43gXVQMGz8ZJNkpOkb3cg=) 8: XWYIJ6UuSY9_AQiT-hJINBObDQE.roa (hash: PdxLhxNEU7vSAkCuLaQWVId/t5OMWmj8bekrOqUDrSs=) 9: cOLPd5Lu_3ww7o-cdhWB7-TfdNY.roa (hash: S/36KJdTMQ8aIP0tPHIBx2zWJTQd/RRNG/oJA1iTyvo=) 10: iCgmGpyhGXjIvVkyeLmT7N8_y-4.roa (hash: jOahkOswhpSU7ry2oaBtzcTaxYOf5EimbWn3HXDfD9I=) 11: j-60Smkd34pUp65Reim9QN1pXBY.roa (hash: M2tsmNC79ATfwuHh7j2unUzS2isZxvxmhlA+F7YtpNY=) 12: kiIItHtqhk2dH_M-BqqB0TgZp04.crl (hash: yKSsSRmCcCzPWYkF4yPEerwqM+KnWDpMtqDnzTulMq0=) 13: knSytMRDBBEnCJmSSPDhHWtHg0c.roa (hash: xgKSyUyWK6rR5NEa7nVIywiPdyu/cPSGzuk49MX8f0A=) 14: vBAure0FxWxWdTfj2W3O6_7De24.roa (hash: yikPG1Koq3q/WuhD/GCuT4mpPwhtQgx1jshmNW1jKHY=) 15: yyPUAj_dCWAktPW0jmBjCiRvIJg.roa (hash: H8oCA9x6vnmIvl4HatB3uvnypYSjgIN9/CrfMgatutI=) Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/f5/6990e9-c3c0-478a-9997-95b08e3660cf/1/kiIItHtqhk2dH_M-BqqB0TgZp04.crl rsync://rpki.ripe.net/repository/DEFAULT/f5/6990e9-c3c0-478a-9997-95b08e3660cf/1/kiIItHtqhk2dH_M-BqqB0TgZp04.mft rsync://rpki.ripe.net/repository/DEFAULT/kiIItHtqhk2dH_M-BqqB0TgZp04.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Tue 09 Sep 2025 23:00:23 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:99:2c:d9:2a:d3:2f:1e:91:a0:6b:dc:40:b5:6c:b8:88:53 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=922208b47b6a864d9d1ff33e06aa81d13819a74e Validity Not Before: Sep 9 05:00:53 2025 GMT Not After : Sep 10 05:00:53 2025 GMT Subject: CN=440cc4d1f0ce1a51fa05fad4aad36058117b2723 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:b1:44:13:0d:c8:11:b8:71:57:5a:a5:2e:6c:4d: e5:1d:af:4e:41:70:74:1c:8f:9d:3c:4a:f5:18:78: 03:00:ad:9a:c6:63:38:75:30:03:de:1c:97:97:a9: 14:24:54:47:7f:80:46:b4:5e:c5:51:6e:ed:2f:9f: ce:24:81:b3:e7:95:a6:3b:d2:9e:5b:6f:2b:3b:53: e2:e8:d9:47:51:ce:0c:29:88:03:5f:6b:6d:db:3c: be:b6:c3:6b:13:ab:68:fd:d9:46:9a:7b:f7:b8:a7: c3:e7:94:71:3c:fe:38:75:2e:cd:6e:81:44:1c:e5: 0d:96:76:a8:c9:4c:f6:41:c4:78:c8:e5:64:5a:9d: c9:8e:6a:79:08:f2:2e:41:cf:ad:fe:f7:cd:80:a1: e7:bb:1d:db:e9:69:a5:36:fe:44:18:50:1f:a7:08: 13:78:9e:6a:e5:4b:6c:66:37:4b:36:9e:a1:d6:f1: 80:ed:3e:16:a1:c6:53:04:03:0f:dd:fb:66:7c:34: 3e:6f:67:60:e1:ae:f0:c3:3e:db:7e:fa:29:1d:96: a2:5f:c7:5e:46:9a:f1:ad:1c:3a:ed:01:14:95:41: 58:92:1e:a9:0b:70:5a:d3:c5:bd:fa:c6:fe:3a:b9: 37:65:31:9a:88:28:02:50:5d:26:7d:7a:cd:47:d5: 44:07 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 44:0C:C4:D1:F0:CE:1A:51:FA:05:FA:D4:AA:D3:60:58:11:7B:27:23 X509v3 Authority Key Identifier: keyid:92:22:08:B4:7B:6A:86:4D:9D:1F:F3:3E:06:AA:81:D1:38:19:A7:4E X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/kiIItHtqhk2dH_M-BqqB0TgZp04.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/f5/6990e9-c3c0-478a-9997-95b08e3660cf/1/kiIItHtqhk2dH_M-BqqB0TgZp04.mft X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/f5/6990e9-c3c0-478a-9997-95b08e3660cf/1/kiIItHtqhk2dH_M-BqqB0TgZp04.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption c1:0b:44:fe:d0:d8:74:39:8b:e0:1b:f0:ea:2f:b9:6c:f9:5a: 9b:58:a6:f7:d6:86:79:c9:3c:d5:bf:92:07:3b:59:b4:1b:7e: c0:53:47:4a:7b:8a:aa:eb:ef:8f:23:b3:48:29:f5:ed:fa:e1: b0:4d:3f:fd:49:54:8c:f2:52:be:30:c8:8d:cf:f5:f2:de:50: 4b:95:72:fa:5f:7f:ab:45:47:14:b4:a0:11:ff:35:17:84:a9: 29:5d:20:37:7d:53:6f:23:86:51:49:c6:b5:8c:a1:fa:1d:9b: 76:2a:ef:9f:c4:fe:20:f5:c7:97:89:9f:a1:22:3e:13:5f:5a: ca:84:d6:3d:f9:d9:d3:53:76:0a:40:7e:4e:db:cd:37:06:3a: 57:2d:1a:7f:80:28:db:4f:53:e8:fa:b1:bc:fa:15:84:b2:66: 86:f6:8e:7b:51:35:25:d6:e0:85:ea:5c:72:06:71:56:98:13: a3:bf:59:22:60:26:9a:0b:66:02:ba:e3:0c:3a:d7:e8:0b:42: 16:b8:6b:41:e0:21:fb:25:16:89:2c:dd:d7:34:8d:50:c0:a9: 39:61:e5:20:5e:df:2a:4f:a8:26:ec:b8:0c:c8:47:96:b8:10: 78:fc:b3:8c:cc:70:0a:b6:6e:29:95:dc:b6:ce:aa:8a:8c:10: ee:c1:0d:36 -----BEGIN CERTIFICATE----- MIIFFjCCA/6gAwIBAgISAZks2SrTLx6RoGvcQLVsuIhTMA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKDkyMjIwOGI0N2I2YTg2NGQ5ZDFmZjMzZTA2YWE4MWQxMzgx OWE3NGUwHhcNMjUwOTA5MDUwMDUzWhcNMjUwOTEwMDUwMDUzWjAzMTEwLwYDVQQD Eyg0NDBjYzRkMWYwY2UxYTUxZmEwNWZhZDRhYWQzNjA1ODExN2IyNzIzMIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAsUQTDcgRuHFXWqUubE3lHa9OQXB0 HI+dPEr1GHgDAK2axmM4dTAD3hyXl6kUJFRHf4BGtF7FUW7tL5/OJIGz55WmO9Ke W28rO1Pi6NlHUc4MKYgDX2tt2zy+tsNrE6to/dlGmnv3uKfD55RxPP44dS7NboFE HOUNlnaoyUz2QcR4yOVkWp3Jjmp5CPIuQc+t/vfNgKHnux3b6WmlNv5EGFAfpwgT eJ5q5UtsZjdLNp6h1vGA7T4WocZTBAMP3ftmfDQ+b2dg4a7wwz7bfvopHZaiX8de RprxrRw67QEUlUFYkh6pC3Ba08W9+sb+Ork3ZTGaiCgCUF0mfXrNR9VEBwIDAQAB o4ICIjCCAh4wHQYDVR0OBBYEFEQMxNHwzhpR+gX61KrTYFgReycjMB8GA1UdIwQY MBaAFJIiCLR7aoZNnR/zPgaqgdE4GadOMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQva2lJSXRIdHFoazJkSF9NLUJxcUIwVGdacDA0LmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC9mNS82OTkwZTktYzNjMC00NzhhLTk5OTct OTViMDhlMzY2MGNmLzEva2lJSXRIdHFoazJkSF9NLUJxcUIwVGdacDA0Lm1mdDCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC9mNS82OTkwZTktYzNjMC00NzhhLTk5OTctOTViMDhlMzY2MGNm LzEva2lJSXRIdHFoazJkSF9NLUJxcUIwVGdacDA0LmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAwQtE/tDY dDmL4Bvw6i+5bPlam1im99aGeck81b+SBztZtBt+wFNHSnuKquvvjyOzSCn17frh sE0//UlUjPJSvjDIjc/18t5QS5Vy+l9/q0VHFLSgEf81F4SpKV0gN31TbyOGUUnG tYyh+h2bdirvn8T+IPXHl4mfoSI+E19ayoTWPfnZ01N2CkB+TtvNNwY6Vy0af4Ao 209T6PqxvPoVhLJmhvaOe1E1JdbghepccgZxVpgTo79ZImAmmgtmArrjDDrX6AtC FrhrQeAh+yUWiSzd1zSNUMCpOWHlIF7fKk+oJuy4DMhHlrgQePyzjMxwCrZuKZXc ts6qiowQ7sENNg== -----END CERTIFICATE-----Generated at Tue Sep 9 08:02:21 2025 by rpki-client