$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/fe/05e17f-d31f-431f-a8bc-7e05ab41b6e4/1/_TfMjxazxsvTNGqj7WF3Hz6DrJc.mft File: _TfMjxazxsvTNGqj7WF3Hz6DrJc.mft (raw, json) Hash identifier: jtJOkie8PEzz6xZc6sp7z18dE3rsg5jIeGPp92pE8fw= Subject key identifier: 78:72:7B:3C:C1:18:EE:6C:48:B3:F5:FB:B0:04:1B:64:FA:4F:C4:FD Authority key identifier: FD:37:CC:8F:16:B3:C6:CB:D3:34:6A:A3:ED:61:77:1F:3E:83:AC:97 Certificate issuer: /CN=fd37cc8f16b3c6cbd3346aa3ed61771f3e83ac97 Certificate serial: 01992367CD4C5489589E5CD9B1D01B46222A Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/_TfMjxazxsvTNGqj7WF3Hz6DrJc.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/fe/05e17f-d31f-431f-a8bc-7e05ab41b6e4/1/_TfMjxazxsvTNGqj7WF3Hz6DrJc.mft Manifest number: 16CC Signing time: Sun 07 Sep 2025 09:00:29 +0000 Manifest this update: Sun 07 Sep 2025 09:00:29 +0000 Manifest next update: Mon 08 Sep 2025 09:00:29 +0000 Files and hashes: 1: 0HACyBUxgNOKSEcXcfPHI7LfmIg.roa (hash: wqTJepcUODfu+UsDaT3UCXuLJcUfFBmEBfdq4N3Rg18=) 2: 0SGQgnDHvljd8WswPS3Zor6FDL4.roa (hash: 6cEGIRuHIzEG7/ilcX3ol3tjHMExu8vRWtvJG3iihbQ=) 3: 8YFjhJllAvnuj7iLErGij7HrSXA.roa (hash: Jhl/M/KE8hoNx5Qk80x4cpNTjAEwV+xL9n1btN845EY=) 4: CkYxOCFcXglZibNQBz57XM7xS7k.roa (hash: tPE6/6y5+L8gtSA/0lIV1hRfNlGi7fzBLSET7NYUXhQ=) 5: L2ou3KYC7aOW9h4MkxvmRdF9-XM.roa (hash: HdnRHq9xsHsffUN6vf8PfjK/qp0rtSAt5eAQOAgASLA=) 6: ORny9zSgmvPNlHA0GSjf-fW7JAM.roa (hash: 2mt1E0mw+ncsqd4MDmo2JIYlDgVM2APWu07de1NTQyk=) 7: Qx6qMFrufEPZv8mWu9XgjLsLMB8.roa (hash: P/r3/JxO1CdcEUxJoGOxAQuq95icEB2m2qPK3qHqs10=) 8: TAdP0yKv9NpfjSbhNts0juEkm1U.roa (hash: dvn2DfwTU0n63QcUIMIBNntGEWr2G1UXma7Nhu8Iurs=) 9: WoZoEuE3OARNKqVJ9taXo2-Zt8M.roa (hash: Sn/ecsmLImTPn1yvBagjjq/XB8omW7tpmekWgI2yuFs=) 10: XdBKdwv6cTf-QnKldOeZvGt4D_Y.roa (hash: TxqV86SQTi0t4BbX6SVLNGYD/xhHt70JrJfSx9PYDmA=) 11: _TfMjxazxsvTNGqj7WF3Hz6DrJc.crl (hash: MHLu3OkYBFzoqmOqj6a5gjHLBpZNtZYX7By3e59PNUo=) 12: bboBBp1tKqS0RC4vsgwoBCmEwqY.roa (hash: 74uXCligXDCEvZU13I/aaPCJJzSMTM22JuT1PuhmBlQ=) 13: cTcEU6BZVDHzKsGmYrYFuehVnmw.roa (hash: Wt8W9AEoHsxpxFYj5Y9GGKvIgV+LkMQs3tuB0PH0H4Q=) 14: hKxNfLTH0X80Ow-eROTxbGbiZe4.roa (hash: hZv0Z8Cj/PVONdIYD1TEXdIoPUW4dHy+qq7CiSqIhck=) 15: peQXZljVycjXahMLHOgebWKzO6c.roa (hash: 6nDgFHnTrpxmQJyrmsK88oc050AwIyK1nEAS/RY/l94=) 16: xCt-3I4HSr25MhC8BMd2thevgVU.roa (hash: sZUNm0dz+rTstayb8zMPvmRuDI0MPNSTCMqD12A4Oww=) Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/fe/05e17f-d31f-431f-a8bc-7e05ab41b6e4/1/_TfMjxazxsvTNGqj7WF3Hz6DrJc.crl rsync://rpki.ripe.net/repository/DEFAULT/fe/05e17f-d31f-431f-a8bc-7e05ab41b6e4/1/_TfMjxazxsvTNGqj7WF3Hz6DrJc.mft rsync://rpki.ripe.net/repository/DEFAULT/_TfMjxazxsvTNGqj7WF3Hz6DrJc.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Mon 08 Sep 2025 05:00:23 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:99:23:67:cd:4c:54:89:58:9e:5c:d9:b1:d0:1b:46:22:2a Signature Algorithm: sha256WithRSAEncryption Issuer: CN=fd37cc8f16b3c6cbd3346aa3ed61771f3e83ac97 Validity Not Before: Sep 7 09:00:29 2025 GMT Not After : Sep 8 09:00:29 2025 GMT Subject: CN=78727b3cc118ee6c48b3f5fbb0041b64fa4fc4fd Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:af:15:6f:1b:86:43:16:b4:ce:1b:e6:70:20:a1: 0b:00:14:77:e9:c6:70:84:54:c8:a1:21:d7:dc:8f: 41:78:34:47:d5:63:74:c2:71:aa:3c:f2:77:99:74: 7f:3a:1e:a1:0a:90:3a:b5:c6:f0:34:fe:a8:93:e5: 07:3e:47:e2:09:cc:d4:f9:fd:13:4b:29:10:14:72: 24:93:7c:fe:93:9d:d1:9c:48:6f:c8:79:3d:38:2b: 05:16:85:94:ce:7b:8b:ee:93:6a:4b:17:ff:9c:e4: 6c:a5:dd:d7:82:68:b1:df:1e:e3:f9:3e:45:cb:64: 84:95:b0:bd:62:17:4f:3f:e3:da:b3:a2:c5:37:0a: f0:41:db:73:79:f7:ad:90:b9:63:ba:b3:ad:45:3c: e6:43:44:12:6e:0c:02:9e:2b:ec:c9:0d:9a:dc:a3: d8:6e:b1:4d:94:64:52:2c:5e:b2:e8:e5:5b:4b:86: 4c:c7:40:9f:8f:23:8e:66:cc:25:06:65:53:ef:fb: d4:70:fa:72:bf:9f:2d:2c:66:9b:18:72:8d:59:d9: cf:96:21:e8:a1:92:4f:a6:95:6e:87:99:c9:a1:68: 4c:86:24:38:dc:52:9c:f8:eb:78:d4:bc:68:84:7a: e1:d0:9e:85:d7:0f:4b:71:be:b4:4b:a7:7c:71:ec: 77:9b Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 78:72:7B:3C:C1:18:EE:6C:48:B3:F5:FB:B0:04:1B:64:FA:4F:C4:FD X509v3 Authority Key Identifier: keyid:FD:37:CC:8F:16:B3:C6:CB:D3:34:6A:A3:ED:61:77:1F:3E:83:AC:97 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/_TfMjxazxsvTNGqj7WF3Hz6DrJc.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/fe/05e17f-d31f-431f-a8bc-7e05ab41b6e4/1/_TfMjxazxsvTNGqj7WF3Hz6DrJc.mft X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/fe/05e17f-d31f-431f-a8bc-7e05ab41b6e4/1/_TfMjxazxsvTNGqj7WF3Hz6DrJc.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 5e:85:8e:1d:68:5f:b7:aa:e3:4d:6d:5b:17:d1:ae:d9:d1:f2: c2:03:c1:d3:d1:c0:4c:09:fc:c9:95:16:fc:ab:d6:42:cc:a7: 18:5f:6e:1f:74:7c:6d:0b:ac:be:73:92:87:8b:7a:97:24:b4: ab:2e:b8:b2:ec:d9:59:a9:f6:5e:23:f3:0e:00:ea:98:0c:df: 00:df:8b:f2:de:28:bf:11:29:42:80:48:be:db:d3:b5:8e:e0: d4:78:0e:96:dd:15:4b:be:b8:17:2a:0e:80:6b:03:f5:6d:3d: 1e:17:64:05:00:4a:84:23:1f:4c:6b:69:5d:3f:7d:ce:8b:d0: 89:d3:d5:46:ac:ff:55:03:ff:21:97:ca:20:b5:1a:6f:d5:58: 4f:ac:29:6c:45:b2:1c:47:d0:25:7a:b9:9e:34:6a:b0:69:31: 2d:21:03:65:a9:33:4d:fa:f5:cc:97:34:9f:07:f2:04:54:aa: 4b:af:3e:1e:e4:1f:1b:0c:b2:0b:7b:46:64:7d:f7:73:9c:e4: 01:81:73:b0:a2:5b:df:23:3b:bd:3a:d6:2c:89:ec:06:f3:b7: 89:1a:aa:03:d6:64:0c:de:d7:27:42:5e:f2:56:ea:9f:8a:37: eb:83:00:45:30:f0:89:2e:03:e1:ec:6c:7e:04:62:ee:d4:5e: 01:f4:b3:64 -----BEGIN CERTIFICATE----- MIIFFjCCA/6gAwIBAgISAZkjZ81MVIlYnlzZsdAbRiIqMA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKGZkMzdjYzhmMTZiM2M2Y2JkMzM0NmFhM2VkNjE3NzFmM2U4 M2FjOTcwHhcNMjUwOTA3MDkwMDI5WhcNMjUwOTA4MDkwMDI5WjAzMTEwLwYDVQQD Eyg3ODcyN2IzY2MxMThlZTZjNDhiM2Y1ZmJiMDA0MWI2NGZhNGZjNGZkMIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEArxVvG4ZDFrTOG+ZwIKELABR36cZw hFTIoSHX3I9BeDRH1WN0wnGqPPJ3mXR/Oh6hCpA6tcbwNP6ok+UHPkfiCczU+f0T SykQFHIkk3z+k53RnEhvyHk9OCsFFoWUznuL7pNqSxf/nORspd3Xgmix3x7j+T5F y2SElbC9YhdPP+Pas6LFNwrwQdtzefetkLljurOtRTzmQ0QSbgwCnivsyQ2a3KPY brFNlGRSLF6y6OVbS4ZMx0CfjyOOZswlBmVT7/vUcPpyv58tLGabGHKNWdnPliHo oZJPppVuh5nJoWhMhiQ43FKc+Ot41LxohHrh0J6F1w9Lcb60S6d8cex3mwIDAQAB o4ICIjCCAh4wHQYDVR0OBBYEFHhyezzBGO5sSLP1+7AEG2T6T8T9MB8GA1UdIwQY MBaAFP03zI8Ws8bL0zRqo+1hdx8+g6yXMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvX1RmTWp4YXp4c3ZUTkdxajdXRjNIejZEckpjLmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC9mZS8wNWUxN2YtZDMxZi00MzFmLWE4YmMt N2UwNWFiNDFiNmU0LzEvX1RmTWp4YXp4c3ZUTkdxajdXRjNIejZEckpjLm1mdDCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC9mZS8wNWUxN2YtZDMxZi00MzFmLWE4YmMtN2UwNWFiNDFiNmU0 LzEvX1RmTWp4YXp4c3ZUTkdxajdXRjNIejZEckpjLmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAXoWOHWhf t6rjTW1bF9Gu2dHywgPB09HATAn8yZUW/KvWQsynGF9uH3R8bQusvnOSh4t6lyS0 qy64suzZWan2XiPzDgDqmAzfAN+L8t4ovxEpQoBIvtvTtY7g1HgOlt0VS764FyoO gGsD9W09HhdkBQBKhCMfTGtpXT99zovQidPVRqz/VQP/IZfKILUab9VYT6wpbEWy HEfQJXq5njRqsGkxLSEDZakzTfr1zJc0nwfyBFSqS68+HuQfGwyyC3tGZH33c5zk AYFzsKJb3yM7vTrWLInsBvO3iRqqA9ZkDN7XJ0Je8lbqn4o364MARTDwiS4D4exs fgRi7tReAfSzZA== -----END CERTIFICATE-----Generated at Sun Sep 7 12:33:14 2025 by rpki-client