$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/fd/726bb4-5d87-402d-91ce-5712d95ae638/1/1DTxaGECh2xiFrzqKKXlAuwNe2s.mft File: 1DTxaGECh2xiFrzqKKXlAuwNe2s.mft (raw, json) Hash identifier: aIbLJudsRuQkoCJB5vm1b3WlTfr8YD+WUrrXlznQNHw= Subject key identifier: CD:74:00:96:C4:FA:51:EC:D4:DF:2C:75:64:87:D0:4D:B8:7D:8F:45 Authority key identifier: D4:34:F1:68:61:02:87:6C:62:16:BC:EA:28:A5:E5:02:EC:0D:7B:6B Certificate issuer: /CN=d434f1686102876c6216bcea28a5e502ec0d7b6b Certificate serial: 01992C6B9626A57306FAF967488843901F4B Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/1DTxaGECh2xiFrzqKKXlAuwNe2s.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/fd/726bb4-5d87-402d-91ce-5712d95ae638/1/1DTxaGECh2xiFrzqKKXlAuwNe2s.mft Manifest number: 16D1 Signing time: Tue 09 Sep 2025 03:01:12 +0000 Manifest this update: Tue 09 Sep 2025 03:01:12 +0000 Manifest next update: Wed 10 Sep 2025 03:01:12 +0000 Files and hashes: 1: 1DTxaGECh2xiFrzqKKXlAuwNe2s.crl (hash: xn2E9OpYEOJA9vKUCHxfsYbgZ0uYlk7QE/up2UmGq+Q=) 2: 3bnDZUsDXnEjZmLC2l6TNlR44q0.roa (hash: wvyAIrwBTPizl931rTr7kAFeltcDxlBFhYT3hCElsC8=) 3: 7Cj5773Ww2G0LSY1fnydQfxQCM8.roa (hash: aUx5ljL2u1JfwzPAWHUuxa8lyiqbBKjx2VkYnyoKl00=) 4: 7w_UXb_9EuacQXaOkUvAB9t3GPY.roa (hash: BdddFhDjZUrdf5plsycRSqL9pb4uMD9DIqhfXxLsESI=) 5: 9Du2tHlplI8cqKMhQkDQrma7ABw.roa (hash: tHZwo/QnwGrZt6X37EyHYtZuWfqyTSrPiMBPcRX5QtA=) 6: Asu0DH_A5v7HQJH6cJ--acq6gs4.roa (hash: p83oT8k8StFZXPPk4WZFA6xLSJnWFONbnXX8tMyuY+E=) 7: BPwP4_eaRC-ExEMmsEHbE_XcDyk.roa (hash: PuWly/aliHEqwaBp5Lw/IykpWGderMcstp3zqAZSzaU=) 8: HkpMpgcE2miG9qn79yi3XbK_pOE.roa (hash: 0Rr449PN12HQpu7nIek/UBDMZP0dQl1SRcWWzh64TnM=) 9: JXrXWWEdrlOAxsLEb215YsP36OI.roa (hash: LxUCqn0JmTO3q5jDUwaHYrVbupf5Tpjdv87Nft/gs/M=) 10: Loa4kWXHd_gyVar7KKfuCbOTQSI.roa (hash: V+IAftZbMV1uaMDIpq8IX4vqfn+FazLdtHW0Gi6raiE=) 11: OiUKYkPvCpqnOXZ9zOVHLonU2AY.roa (hash: Lhbego4QvDRSaxc+Seq5OHB8z3WLSv1waMp2zJgiuoA=) 12: PwHMe4i6pz51Ahrp1W-49Rgc_vo.roa (hash: DVJmDnhZvnviJ4n66jT0o+c4DIjAzAehQrpeXl6SGUU=) 13: R0cDHc3n2qmMEAUS6woEeV4DrUw.roa (hash: QJ/g2HXWAm89HNayhA1QKb5SEB9BRX6t6S4vbuLEEGQ=) 14: RzWktUnWleyuAASpHpH94KSShkY.roa (hash: BoPLXDFgsIgaZzKNJy1XCZ2/akxih7lLoVGkf52tsHE=) 15: TKWYs3n3hIoN-hoFqew_mEdXrIo.roa (hash: USDKgLhBpQiNnUXhTAkFdSI2pQG1VTBMCqyXVi79H/o=) 16: WfonxlLMZwy-HhCvndkmDlWeP1U.roa (hash: D2to2wlUfQBqZmE9EvBIj/W3y3+jGxVEf6JIb4l/qG8=) 17: dIkGudwt-RR6RWXajZoxz1vlHzU.roa (hash: OKPlohfOihRtk51p5gTQk9DKoBwl84PalakI/wclgFg=) 18: fQowbtBwRpKjCzhE3ojDTNtTyaM.roa (hash: 5hmuOcmFlB2Eh4C339cOr4B957mNZCHeN0L/cBjITLk=) 19: gL8L6RZ2XqjaOf7a7aVACmgbZKI.roa (hash: kLhGxAypt99j/jO34VpwpOJzvqgyVsGY/56bargYYM8=) 20: lGSh8HAGsvLzJWijuCn5mOFbAtA.roa (hash: g6Sdp9SO3zguPzUUGeNhkKmFB7oPgHI90W+QRmIj6bo=) 21: q5t8pCbXocy8z93aEyQcoKIUr7k.roa (hash: SLK2Vlk0BOq5d8DR4zM41FXSCnTp47baUcSuvvAqgGA=) 22: vx0LBPGo6U2A4w4ADzD_udSk_bE.roa (hash: 1BQsFPNT0rTtzolZzu4KuR7RQiaLrcqqi5uIXl00aQQ=) 23: w1-75ZX9HBx8AUrVwUOKynI5k3I.roa (hash: hPTOiyA3+YJ83FFkcYpaKb35ER44DCXiwk4q5wNRhf8=) 24: wapfnXLlA7DvDqRs4g9z4YLu3L0.roa (hash: Hxhpn18vB/H4YZziS5GXimeo8mFzlErLcl0bPjfu1Vc=) 25: z6n_jUG6I_xYjDJHeip0DRFjTRM.roa (hash: /Wm48sS3g9Z/4zp/4yyUdkHbex7iTx088gxRDh1F6/8=) Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/fd/726bb4-5d87-402d-91ce-5712d95ae638/1/1DTxaGECh2xiFrzqKKXlAuwNe2s.crl rsync://rpki.ripe.net/repository/DEFAULT/fd/726bb4-5d87-402d-91ce-5712d95ae638/1/1DTxaGECh2xiFrzqKKXlAuwNe2s.mft rsync://rpki.ripe.net/repository/DEFAULT/1DTxaGECh2xiFrzqKKXlAuwNe2s.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Tue 09 Sep 2025 23:00:23 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:99:2c:6b:96:26:a5:73:06:fa:f9:67:48:88:43:90:1f:4b Signature Algorithm: sha256WithRSAEncryption Issuer: CN=d434f1686102876c6216bcea28a5e502ec0d7b6b Validity Not Before: Sep 9 03:01:12 2025 GMT Not After : Sep 10 03:01:12 2025 GMT Subject: CN=cd740096c4fa51ecd4df2c756487d04db87d8f45 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:bf:35:c8:3e:a7:e1:cf:13:00:87:98:51:3f:2c: 93:2c:bf:f0:5c:b0:8b:40:26:d4:41:d8:76:e9:cc: 9e:5d:9f:d4:20:77:00:55:aa:fe:51:39:b8:02:3d: b9:b5:69:89:02:77:15:0e:b0:56:bb:ba:80:ea:dc: ea:ea:84:f5:d8:f0:d7:2f:75:f7:16:b3:d1:ab:f1: 12:70:f3:63:84:6b:fa:97:d7:c4:9e:08:c7:f6:76: f4:a8:f1:45:1e:24:72:8e:ea:95:eb:fe:45:6f:ba: df:0c:a9:5f:4c:a7:c2:71:90:43:75:b7:5f:59:6a: ff:a9:1f:d2:43:ec:c0:c0:22:d8:bb:9a:ca:7c:b2: d8:68:dd:bb:cf:48:8d:4b:cd:c5:51:2c:7f:f8:78: b3:e0:fc:a8:26:7a:7d:57:12:92:3b:4e:7c:fb:35: 63:7b:1b:06:51:1d:c5:92:99:53:5f:23:68:1b:da: 4c:87:22:60:a6:7c:4c:af:9b:e9:16:4c:bd:12:33: 9a:3b:ca:fe:56:20:9e:7e:f8:50:46:5c:53:6c:f4: 53:f4:26:84:a0:88:41:4d:97:8f:4f:20:f7:f3:f5: d5:d2:70:f4:0a:b7:c3:a5:9b:fe:14:76:cf:45:ba: 9b:98:45:7a:88:28:d1:95:c6:39:ff:32:57:45:11: e7:89 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: CD:74:00:96:C4:FA:51:EC:D4:DF:2C:75:64:87:D0:4D:B8:7D:8F:45 X509v3 Authority Key Identifier: keyid:D4:34:F1:68:61:02:87:6C:62:16:BC:EA:28:A5:E5:02:EC:0D:7B:6B X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/1DTxaGECh2xiFrzqKKXlAuwNe2s.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/fd/726bb4-5d87-402d-91ce-5712d95ae638/1/1DTxaGECh2xiFrzqKKXlAuwNe2s.mft X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/fd/726bb4-5d87-402d-91ce-5712d95ae638/1/1DTxaGECh2xiFrzqKKXlAuwNe2s.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 77:3a:3d:7e:dc:97:85:d5:71:74:aa:79:54:80:37:e9:00:a2: c5:93:df:e5:24:a0:a3:57:39:ac:3c:21:6a:e8:99:95:60:b8: b7:e6:da:27:f4:42:3a:77:1c:1c:73:a7:33:50:e6:86:9a:e4: 32:3d:1e:b5:d5:1b:f5:b5:57:b6:ba:0e:c8:29:87:6d:e3:e0: 90:4e:2e:fb:1e:b5:c1:6a:95:a8:40:4b:bb:25:73:b0:dc:a9: 92:ae:d4:32:5e:9a:5f:2d:ab:3d:05:0b:a8:95:40:28:3b:ef: 2a:32:88:bc:3c:bb:3f:0a:c5:9f:89:4a:ea:c4:5d:0e:6d:43: 4a:c3:e2:71:d2:e1:cf:bf:b4:6d:89:ad:5f:65:01:3f:61:6e: 2d:1d:90:b3:94:82:ce:f6:37:e7:77:55:f1:d8:55:01:04:ca: ad:83:8a:51:34:43:c2:a8:b8:a2:05:c0:9c:47:30:0e:8f:ec: fe:c2:95:d3:da:3b:c7:e5:f4:4b:5f:ef:74:38:86:d6:fd:02: f7:7d:27:4f:76:ee:aa:82:30:58:db:19:fe:3d:2e:1d:fd:2a: 78:12:ec:81:38:10:b2:7e:2e:51:1e:9b:7a:bd:fa:61:0d:d8: 58:86:52:b0:fd:c5:99:98:95:7c:2b:a8:9e:28:69:21:16:f4: 74:3c:86:73 -----BEGIN CERTIFICATE----- MIIFFjCCA/6gAwIBAgISAZksa5YmpXMG+vlnSIhDkB9LMA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKGQ0MzRmMTY4NjEwMjg3NmM2MjE2YmNlYTI4YTVlNTAyZWMw ZDdiNmIwHhcNMjUwOTA5MDMwMTEyWhcNMjUwOTEwMDMwMTEyWjAzMTEwLwYDVQQD EyhjZDc0MDA5NmM0ZmE1MWVjZDRkZjJjNzU2NDg3ZDA0ZGI4N2Q4ZjQ1MIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAvzXIPqfhzxMAh5hRPyyTLL/wXLCL QCbUQdh26cyeXZ/UIHcAVar+UTm4Aj25tWmJAncVDrBWu7qA6tzq6oT12PDXL3X3 FrPRq/EScPNjhGv6l9fEngjH9nb0qPFFHiRyjuqV6/5Fb7rfDKlfTKfCcZBDdbdf WWr/qR/SQ+zAwCLYu5rKfLLYaN27z0iNS83FUSx/+Hiz4PyoJnp9VxKSO058+zVj exsGUR3FkplTXyNoG9pMhyJgpnxMr5vpFky9EjOaO8r+ViCefvhQRlxTbPRT9CaE oIhBTZePTyD38/XV0nD0CrfDpZv+FHbPRbqbmEV6iCjRlcY5/zJXRRHniQIDAQAB o4ICIjCCAh4wHQYDVR0OBBYEFM10AJbE+lHs1N8sdWSH0E24fY9FMB8GA1UdIwQY MBaAFNQ08WhhAodsYha86iil5QLsDXtrMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvMURUeGFHRUNoMnhpRnJ6cUtLWGxBdXdOZTJzLmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC9mZC83MjZiYjQtNWQ4Ny00MDJkLTkxY2Ut NTcxMmQ5NWFlNjM4LzEvMURUeGFHRUNoMnhpRnJ6cUtLWGxBdXdOZTJzLm1mdDCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC9mZC83MjZiYjQtNWQ4Ny00MDJkLTkxY2UtNTcxMmQ5NWFlNjM4 LzEvMURUeGFHRUNoMnhpRnJ6cUtLWGxBdXdOZTJzLmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAdzo9ftyX hdVxdKp5VIA36QCixZPf5SSgo1c5rDwhauiZlWC4t+baJ/RCOnccHHOnM1Dmhprk Mj0etdUb9bVXtroOyCmHbePgkE4u+x61wWqVqEBLuyVzsNypkq7UMl6aXy2rPQUL qJVAKDvvKjKIvDy7PwrFn4lK6sRdDm1DSsPicdLhz7+0bYmtX2UBP2FuLR2Qs5SC zvY353dV8dhVAQTKrYOKUTRDwqi4ogXAnEcwDo/s/sKV09o7x+X0S1/vdDiG1v0C 930nT3buqoIwWNsZ/j0uHf0qeBLsgTgQsn4uUR6ber36YQ3YWIZSsP3FmZiVfCuo nihpIRb0dDyGcw== -----END CERTIFICATE-----Generated at Tue Sep 9 08:46:22 2025 by rpki-client