$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/0e/b05667-e850-4c45-aee3-aded1c469eaf/1/4e-WlKpI2BJ56O3kMHlfJ2jS3VI.mft File: 4e-WlKpI2BJ56O3kMHlfJ2jS3VI.mft (raw, json) Hash identifier: 8PB9hzbxZIK6mZ6AmXiJB7kV16GDwK++ccdD2Y9T5/Q= Subject key identifier: 28:31:FA:20:D0:E8:6B:D5:39:81:83:BF:C2:BB:18:AA:44:AF:88:3E Authority key identifier: E1:EF:96:94:AA:48:D8:12:79:E8:ED:E4:30:79:5F:27:68:D2:DD:52 Certificate issuer: /CN=e1ef9694aa48d81279e8ede430795f2768d2dd52 Certificate serial: 0198D584018B7B4C67CF2BAAB5551958A336 Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/4e-WlKpI2BJ56O3kMHlfJ2jS3VI.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/0e/b05667-e850-4c45-aee3-aded1c469eaf/1/4e-WlKpI2BJ56O3kMHlfJ2jS3VI.mft Manifest number: 1664 Signing time: Sat 23 Aug 2025 06:00:54 +0000 Manifest this update: Sat 23 Aug 2025 06:00:54 +0000 Manifest next update: Sun 24 Aug 2025 06:00:54 +0000 Files and hashes: 1: 4e-WlKpI2BJ56O3kMHlfJ2jS3VI.crl (hash: hrIrBVdmpp5nSvpuXm5RLWezji9Dg1J1geMG/TX1EfA=) 2: 4u-FrWKWaho_ISyzc5VOsCnPB-Q.roa (hash: YfroGaZGo+3Y5Nuhq7M/QzCuhU+RFQDjKrM1lqbk5uM=) 3: 8d-QnWmEgzJ4Rpdyt7aQY0aM-Bw.roa (hash: 0s45oUU1o2ifddAJ6DTLViE5f0A+VumWP+t1SybvUik=) 4: CkNJTmPQJYQ_MfgWt_qPISpjHfg.roa (hash: qG9Z2rLkFr1Vmea2q1Wmoyhhg6jqa9C65AeyXksg/3U=) 5: FEB62enegK42pklHkojm9vjgl0s.roa (hash: pN0xSy0QFp+Q3GwqmGGo0b2YcH4wi98IeY7EBvCVPM4=) 6: KOQt4Fdw-Mbd2H2laDLh-QtpT_A.roa (hash: E+ao0zcz+gKQCFRR+32WIwFe4k6aZm0mJuIHZG8OTjY=) 7: LHEJ8P9xNDxGFTn9ZcZ57mD7xNY.roa (hash: EVWTprH8s6PFuD1lSOWR/aPK95uNZWXobgBHo0J2/Hk=) 8: O2u9sNM2VsxkrEw4_x5dbnD4cmI.roa (hash: z4M4rzCbwDQczsVkru5nQYgRim30go1bSOu9yN0yWpY=) 9: _03YY1Sj2Mw8TbRIg27y8NVs5gc.roa (hash: 8hmyw8PyKYN4X/jeEdZ5Etu4V01gYWZ543O86aZNZY4=) 10: _yn-31rADEG7zTcXfVb92NptH0Q.roa (hash: Tyq49fvsXK4jK1l1SC866Zxd+HFpg8YBsLVC4Nlc/M8=) 11: chhwL-zj1isGKfXerZSwFuCy2Ig.roa (hash: EaAAiNMyzMZfk0/ZwRL/V1h2YZdNe3SPfk1b1YTVfY8=) 12: e2V3iL-uocdOIPUhO2ww3JIX-7M.roa (hash: b3B9MhMBUvAQVqS/GvgXTcCqWa1oJVBigVQ6uwvtX+0=) 13: osgJC1j873fUuICkEREfgiPJqL4.roa (hash: zVB8fV5Ug3WHZPkxIRefMnGWpQ+cjsymHV6dUGE8Z54=) 14: vjKyioN5ZLUQGqbv0hjh-k7ZHnI.roa (hash: rxK/AqCNmTQ7FTdlF/qR+joUKZx1vJKUfba0dd+y2Mw=) 15: whqum5btfebJ92EiHlAqEY1dMyI.roa (hash: sd3Z4KpjAwY2NA9vLDkpCk4Gn41kPN8SDpZ7IYPGDjE=) Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/0e/b05667-e850-4c45-aee3-aded1c469eaf/1/4e-WlKpI2BJ56O3kMHlfJ2jS3VI.crl rsync://rpki.ripe.net/repository/DEFAULT/0e/b05667-e850-4c45-aee3-aded1c469eaf/1/4e-WlKpI2BJ56O3kMHlfJ2jS3VI.mft rsync://rpki.ripe.net/repository/DEFAULT/4e-WlKpI2BJ56O3kMHlfJ2jS3VI.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Sun 24 Aug 2025 05:01:29 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:98:d5:84:01:8b:7b:4c:67:cf:2b:aa:b5:55:19:58:a3:36 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=e1ef9694aa48d81279e8ede430795f2768d2dd52 Validity Not Before: Aug 23 06:00:54 2025 GMT Not After : Aug 24 06:00:54 2025 GMT Subject: CN=2831fa20d0e86bd5398183bfc2bb18aa44af883e Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:a1:c5:95:0c:ff:ca:96:ae:7c:9f:a3:65:71:c8: 60:2a:f1:ee:7e:d2:ee:51:d7:e1:4a:7f:85:b4:f9: b0:e5:37:77:67:e9:8e:b0:30:c6:5b:6c:00:52:96: 42:f2:e6:03:9e:72:e9:f3:13:00:86:08:40:77:51: 6f:7a:26:ee:d6:76:a8:02:5e:bb:c2:23:c1:bf:b9: b1:49:40:70:61:69:b1:bb:9e:e9:88:2b:c6:f7:db: 0a:0f:45:a0:1c:12:e5:4f:db:e3:d2:9f:ab:86:ee: 26:8a:f3:0b:8f:6f:99:a2:9d:9f:3f:81:79:cb:02: 83:3f:8f:e6:57:5f:d7:d6:71:70:ae:d1:b4:85:b4: 99:6b:59:f7:f9:08:19:c0:b3:0e:25:35:af:c9:22: 9b:c5:b4:23:53:f5:72:f1:57:c5:b7:27:b9:ea:00: c8:4e:e5:a1:d5:27:33:b0:5b:a2:a8:4a:60:c9:e6: 91:47:01:f2:63:78:3b:38:9d:be:17:bb:28:10:6b: 13:6a:fc:54:01:49:aa:32:8f:7e:17:62:d3:1e:5f: 56:b1:e8:7a:a5:c0:5f:30:bc:32:4f:49:12:cc:ce: 92:23:50:7d:cc:67:9d:75:5a:69:a0:76:f5:40:f6: 70:8c:5d:5a:7a:54:d7:97:9b:46:2b:0f:b1:82:f9: 82:7f Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 28:31:FA:20:D0:E8:6B:D5:39:81:83:BF:C2:BB:18:AA:44:AF:88:3E X509v3 Authority Key Identifier: keyid:E1:EF:96:94:AA:48:D8:12:79:E8:ED:E4:30:79:5F:27:68:D2:DD:52 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/4e-WlKpI2BJ56O3kMHlfJ2jS3VI.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/0e/b05667-e850-4c45-aee3-aded1c469eaf/1/4e-WlKpI2BJ56O3kMHlfJ2jS3VI.mft X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/0e/b05667-e850-4c45-aee3-aded1c469eaf/1/4e-WlKpI2BJ56O3kMHlfJ2jS3VI.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 86:76:d9:4a:1e:8d:76:e0:ea:6b:cb:46:14:8e:1b:b7:48:0e: 54:5d:0f:ed:e7:3d:a6:f4:ea:ff:69:82:de:44:ea:60:fe:20: 16:71:ca:78:b8:ba:e9:52:ac:39:af:bb:38:d9:36:ca:39:35: ba:d4:52:62:15:b9:bd:d3:7a:41:63:ac:b2:f5:1a:cc:76:ba: 93:de:88:ac:18:0f:84:50:45:42:14:c1:c7:82:3a:2f:57:b3: 04:f0:42:e7:41:bd:95:25:6d:15:8b:a6:d3:2d:bd:1f:8b:20: b4:31:a9:60:15:5d:90:d9:04:02:21:5c:fe:00:58:6b:cb:dd: 2c:57:b0:72:61:a6:b6:25:2b:98:a6:8b:72:66:2f:50:ab:a9: bf:fc:6f:23:a9:6a:08:7f:6b:4f:5f:8f:ca:64:4d:c6:46:ee: 17:2c:d3:8b:a8:82:ee:8b:90:4e:90:63:27:ab:74:bf:9f:ee: 51:53:13:26:b4:37:13:f0:4d:b6:43:89:c3:dd:c5:4f:5e:5a: 0d:bc:f6:83:32:c1:00:29:b4:f0:eb:98:7a:59:c9:94:3e:75: 39:61:7a:b6:6b:b1:b5:ac:23:4f:77:3f:7c:a4:11:b2:45:e6: e5:f0:75:0a:94:ea:cf:a0:2c:5b:1b:7d:a6:fb:a4:8c:fc:25: 0e:cb:aa:ce -----BEGIN CERTIFICATE----- MIIFFjCCA/6gAwIBAgISAZjVhAGLe0xnzyuqtVUZWKM2MA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKGUxZWY5Njk0YWE0OGQ4MTI3OWU4ZWRlNDMwNzk1ZjI3Njhk MmRkNTIwHhcNMjUwODIzMDYwMDU0WhcNMjUwODI0MDYwMDU0WjAzMTEwLwYDVQQD EygyODMxZmEyMGQwZTg2YmQ1Mzk4MTgzYmZjMmJiMThhYTQ0YWY4ODNlMIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAocWVDP/Klq58n6NlcchgKvHuftLu UdfhSn+FtPmw5Td3Z+mOsDDGW2wAUpZC8uYDnnLp8xMAhghAd1Fveibu1naoAl67 wiPBv7mxSUBwYWmxu57piCvG99sKD0WgHBLlT9vj0p+rhu4mivMLj2+Zop2fP4F5 ywKDP4/mV1/X1nFwrtG0hbSZa1n3+QgZwLMOJTWvySKbxbQjU/Vy8VfFtye56gDI TuWh1SczsFuiqEpgyeaRRwHyY3g7OJ2+F7soEGsTavxUAUmqMo9+F2LTHl9Wseh6 pcBfMLwyT0kSzM6SI1B9zGeddVppoHb1QPZwjF1aelTXl5tGKw+xgvmCfwIDAQAB o4ICIjCCAh4wHQYDVR0OBBYEFCgx+iDQ6GvVOYGDv8K7GKpEr4g+MB8GA1UdIwQY MBaAFOHvlpSqSNgSeejt5DB5Xydo0t1SMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvNGUtV2xLcEkyQko1Nk8za01IbGZKMmpTM1ZJLmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC8wZS9iMDU2NjctZTg1MC00YzQ1LWFlZTMt YWRlZDFjNDY5ZWFmLzEvNGUtV2xLcEkyQko1Nk8za01IbGZKMmpTM1ZJLm1mdDCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC8wZS9iMDU2NjctZTg1MC00YzQ1LWFlZTMtYWRlZDFjNDY5ZWFm LzEvNGUtV2xLcEkyQko1Nk8za01IbGZKMmpTM1ZJLmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAhnbZSh6N duDqa8tGFI4bt0gOVF0P7ec9pvTq/2mC3kTqYP4gFnHKeLi66VKsOa+7ONk2yjk1 utRSYhW5vdN6QWOssvUazHa6k96IrBgPhFBFQhTBx4I6L1ezBPBC50G9lSVtFYum 0y29H4sgtDGpYBVdkNkEAiFc/gBYa8vdLFewcmGmtiUrmKaLcmYvUKupv/xvI6lq CH9rT1+PymRNxkbuFyzTi6iC7ouQTpBjJ6t0v5/uUVMTJrQ3E/BNtkOJw93FT15a Dbz2gzLBACm08OuYelnJlD51OWF6tmuxtawjT3c/fKQRskXm5fB1CpTqz6AsWxt9 pvukjPwlDsuqzg== -----END CERTIFICATE-----Generated at Sat Aug 23 11:37:27 2025 by rpki-client