$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/fd/1ccf25-20de-4b2e-a0e1-de4acf447fae/1/eXmGPOqCrrjp3zhLOapRdvS8-mE.mft File: eXmGPOqCrrjp3zhLOapRdvS8-mE.mft (raw, json) Hash identifier: wP0y4im3eKcsQEnK2N6ECo234BUImcNGNYPaXFDocjg= Subject key identifier: AC:30:1B:E8:F5:B9:55:57:7D:2A:AE:6B:24:CC:DD:1D:F1:29:F9:C9 Authority key identifier: 79:79:86:3C:EA:82:AE:B8:E9:DF:38:4B:39:AA:51:76:F4:BC:FA:61 Certificate issuer: /CN=7979863cea82aeb8e9df384b39aa5176f4bcfa61 Certificate serial: 019932A3A5E5DBC961D184B61AE84E0A1CDD Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/eXmGPOqCrrjp3zhLOapRdvS8-mE.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/fd/1ccf25-20de-4b2e-a0e1-de4acf447fae/1/eXmGPOqCrrjp3zhLOapRdvS8-mE.mft Manifest number: 169B Signing time: Wed 10 Sep 2025 08:00:09 +0000 Manifest this update: Wed 10 Sep 2025 08:00:09 +0000 Manifest next update: Thu 11 Sep 2025 08:00:09 +0000 Files and hashes: 1: 2cSeSi_Xs9nxENINXXMmVW1DasQ.roa (hash: NILYBWHjcUi2YMu0b6KQQ7GSdlhIfBjAKlI5QryWGe8=) 2: 31B5K7vkAfS9R2wkGuV5dcAnL2Y.roa (hash: O89Ry4yQ6lrE+ydQl9ey5gr4XCsYEJZz/2ZEEVTUklM=) 3: 8rBNukWPHPmFUpvlkGmzTz1-HwA.roa (hash: tMcco5dxWlTIQfy3zxbp0EQ9rOWiTqcDWIU/jeQq+bM=) 4: DrV2xA7Yd-hZFiq3pO9rygl2qg0.roa (hash: TVf6eSJU2syGlD0lzcyv3W0pP95vSrCKIhPdX0AUyh0=) 5: GGh-0xxwn6ceElDQMHRGmEsQE-s.roa (hash: P3CSh7y+NvPz/ZjtWmpED7vAzzUGfZNIvd2EgvFxP9s=) 6: NmG_HXr74xhss_g6667RcEUKRLI.roa (hash: w4iJzBXqF4+nBtbBp9H18XsHRW5050KpbO/LhdFePIo=) 7: OeWAQhxz5E883h7RJjR3cmkBM6o.roa (hash: SpK+6FCkO+sEnLY+zrox32fWgUHKX5y3hElZSDHvkaU=) 8: cPIFj4emJFvwe8Upx_l04Smq82M.roa (hash: vDJnCBY3/Xu6IQlzRF0lLRZwveQcZyy7umYRTs07PBM=) 9: eXmGPOqCrrjp3zhLOapRdvS8-mE.crl (hash: OS7vGr4Uj3TZKTEZ0WfVgJ4ymL5t9xj8XVdO5fikmnQ=) 10: jRyIBgdtXReJ9oHBVuw4FaEWM-0.roa (hash: ZszsBIs7CJREdsDcllx0N3t5IqBzFvq0JJZ2fLMu8PY=) 11: pGXlBe8mvqpUo_lCHeYFkShv2K8.roa (hash: rjd6cps92Ja94+46vbe5lft5y/2s10gUp3FV0e699LY=) 12: zIH5sPlMx70fyP1Az3Csaj7WyTI.roa (hash: 2aeoW9K+GdEGc7tRsUNmCwR+CPzyrfG3s/F0EGb6/Pk=) Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/fd/1ccf25-20de-4b2e-a0e1-de4acf447fae/1/eXmGPOqCrrjp3zhLOapRdvS8-mE.crl rsync://rpki.ripe.net/repository/DEFAULT/fd/1ccf25-20de-4b2e-a0e1-de4acf447fae/1/eXmGPOqCrrjp3zhLOapRdvS8-mE.mft rsync://rpki.ripe.net/repository/DEFAULT/eXmGPOqCrrjp3zhLOapRdvS8-mE.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Thu 11 Sep 2025 02:00:22 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:99:32:a3:a5:e5:db:c9:61:d1:84:b6:1a:e8:4e:0a:1c:dd Signature Algorithm: sha256WithRSAEncryption Issuer: CN=7979863cea82aeb8e9df384b39aa5176f4bcfa61 Validity Not Before: Sep 10 08:00:09 2025 GMT Not After : Sep 11 08:00:09 2025 GMT Subject: CN=ac301be8f5b955577d2aae6b24ccdd1df129f9c9 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:cf:60:46:f7:83:87:e6:be:d2:5e:ea:5b:68:58: df:0a:83:79:60:60:48:6b:a1:09:72:cf:6a:48:2f: 8b:7f:7a:59:d0:e5:7e:7f:72:da:15:c4:c8:90:5f: f0:1d:94:85:7b:fc:ad:d1:8c:66:2f:9f:7b:93:36: fb:99:48:69:a1:9c:9f:10:73:e7:12:20:3f:e2:77: ad:13:b9:82:f7:0e:ae:bd:43:82:67:e6:42:f6:ad: 97:40:80:55:9a:04:6f:f9:af:16:d5:1b:56:52:50: 5f:c0:30:61:6f:5c:10:9b:2b:67:2c:21:37:34:ef: ff:31:2f:28:d0:ad:5a:0b:52:e0:6f:ea:54:5f:e4: a8:1a:70:11:7a:63:99:3d:79:e8:2a:92:d2:7c:65: 42:84:e2:43:1a:d2:12:79:1e:45:c3:b7:dd:54:2c: b4:76:be:42:dc:6d:41:f6:9b:7a:5a:1e:df:19:f1: 93:09:4a:cf:c0:c5:e2:d4:c7:0b:07:14:73:13:ec: 10:db:f7:ad:3e:89:0c:18:bd:de:57:4f:e8:e9:b9: 00:d2:21:6d:f6:df:e8:3b:e7:1c:e8:07:08:25:56: d4:20:d4:01:2f:33:7d:10:9c:35:0a:6e:e0:85:d4: 12:09:9b:9f:65:88:06:59:a1:5d:cb:3c:2d:7d:13: ce:57 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: AC:30:1B:E8:F5:B9:55:57:7D:2A:AE:6B:24:CC:DD:1D:F1:29:F9:C9 X509v3 Authority Key Identifier: keyid:79:79:86:3C:EA:82:AE:B8:E9:DF:38:4B:39:AA:51:76:F4:BC:FA:61 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/eXmGPOqCrrjp3zhLOapRdvS8-mE.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/fd/1ccf25-20de-4b2e-a0e1-de4acf447fae/1/eXmGPOqCrrjp3zhLOapRdvS8-mE.mft X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/fd/1ccf25-20de-4b2e-a0e1-de4acf447fae/1/eXmGPOqCrrjp3zhLOapRdvS8-mE.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 29:53:c4:ea:f8:16:da:82:7c:59:17:82:41:d9:a3:77:b3:39: 62:75:cc:8c:1f:fa:84:d6:f4:76:6a:59:f6:41:7a:60:54:12: f7:55:c8:b0:e6:90:97:42:95:6f:94:6c:6f:57:98:3f:1e:95: c2:65:e5:c2:65:20:8e:84:4a:63:de:46:3c:3c:4d:68:d0:5b: 99:a6:62:e1:8a:b9:a6:dd:12:b1:17:98:40:6f:80:5a:e7:75: 7c:60:87:53:4d:dc:d7:1b:52:bd:74:e0:26:1d:49:5b:5f:e7: aa:72:73:ec:16:51:05:e6:6a:0d:95:b4:c2:56:6d:38:0f:60: 64:60:cf:7b:54:4b:cd:d9:72:e7:dc:0d:c9:09:a5:bf:68:97: 3c:08:c6:60:5b:7c:ec:3a:57:0e:21:ab:b3:f5:dc:ad:8d:7b: 78:63:a0:8f:11:b6:c7:32:ec:38:88:32:31:46:17:36:4d:f9: 0a:41:36:0e:99:29:d6:eb:d0:c6:ea:08:81:f1:bc:a2:67:63: b5:30:c4:3e:44:14:f3:67:8a:7d:e5:ad:58:b0:75:7b:04:89: ad:ee:f2:ee:0d:a9:fb:da:61:2c:64:58:40:10:44:e9:94:b7: 3a:e6:12:6e:06:d3:2b:9e:c3:ac:65:68:37:9b:5d:ce:ff:f9: c7:d5:70:a8 -----BEGIN CERTIFICATE----- MIIFFjCCA/6gAwIBAgISAZkyo6Xl28lh0YS2GuhOChzdMA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKDc5Nzk4NjNjZWE4MmFlYjhlOWRmMzg0YjM5YWE1MTc2ZjRi Y2ZhNjEwHhcNMjUwOTEwMDgwMDA5WhcNMjUwOTExMDgwMDA5WjAzMTEwLwYDVQQD EyhhYzMwMWJlOGY1Yjk1NTU3N2QyYWFlNmIyNGNjZGQxZGYxMjlmOWM5MIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAz2BG94OH5r7SXupbaFjfCoN5YGBI a6EJcs9qSC+Lf3pZ0OV+f3LaFcTIkF/wHZSFe/yt0YxmL597kzb7mUhpoZyfEHPn EiA/4netE7mC9w6uvUOCZ+ZC9q2XQIBVmgRv+a8W1RtWUlBfwDBhb1wQmytnLCE3 NO//MS8o0K1aC1Lgb+pUX+SoGnARemOZPXnoKpLSfGVChOJDGtISeR5Fw7fdVCy0 dr5C3G1B9pt6Wh7fGfGTCUrPwMXi1McLBxRzE+wQ2/etPokMGL3eV0/o6bkA0iFt 9t/oO+cc6AcIJVbUINQBLzN9EJw1Cm7ghdQSCZufZYgGWaFdyzwtfRPOVwIDAQAB o4ICIjCCAh4wHQYDVR0OBBYEFKwwG+j1uVVXfSquayTM3R3xKfnJMB8GA1UdIwQY MBaAFHl5hjzqgq646d84SzmqUXb0vPphMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvZVhtR1BPcUNycmpwM3poTE9hcFJkdlM4LW1FLmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC9mZC8xY2NmMjUtMjBkZS00YjJlLWEwZTEt ZGU0YWNmNDQ3ZmFlLzEvZVhtR1BPcUNycmpwM3poTE9hcFJkdlM4LW1FLm1mdDCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC9mZC8xY2NmMjUtMjBkZS00YjJlLWEwZTEtZGU0YWNmNDQ3ZmFl LzEvZVhtR1BPcUNycmpwM3poTE9hcFJkdlM4LW1FLmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAKVPE6vgW 2oJ8WReCQdmjd7M5YnXMjB/6hNb0dmpZ9kF6YFQS91XIsOaQl0KVb5Rsb1eYPx6V wmXlwmUgjoRKY95GPDxNaNBbmaZi4Yq5pt0SsReYQG+AWud1fGCHU03c1xtSvXTg Jh1JW1/nqnJz7BZRBeZqDZW0wlZtOA9gZGDPe1RLzdly59wNyQmlv2iXPAjGYFt8 7DpXDiGrs/XcrY17eGOgjxG2xzLsOIgyMUYXNk35CkE2Dpkp1uvQxuoIgfG8omdj tTDEPkQU82eKfeWtWLB1ewSJre7y7g2p+9phLGRYQBBE6ZS3OuYSbgbTK57DrGVo N5tdzv/5x9VwqA== -----END CERTIFICATE-----Generated at Wed Sep 10 11:36:48 2025 by rpki-client