$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/20/9488c7-849c-4ff1-ab4c-ae9283e7964e/1/Sm0oF0kd0s0GeAaONanvxoZn3wI.mft File: Sm0oF0kd0s0GeAaONanvxoZn3wI.mft (raw, json) Hash identifier: lKQ4w522NngJu3Bq4GLtDECZNSupaGm15O80EZb2Ncs= Subject key identifier: 84:FE:39:18:55:3B:79:9D:E0:71:5B:7A:DC:DE:59:48:0D:FB:93:FA Authority key identifier: 4A:6D:28:17:49:1D:D2:CD:06:78:06:8E:35:A9:EF:C6:86:67:DF:02 Certificate issuer: /CN=4a6d2817491dd2cd0678068e35a9efc68667df02 Certificate serial: 0198D54E5AE253B65F7F02CB4A9FAD2FF595 Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/Sm0oF0kd0s0GeAaONanvxoZn3wI.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/20/9488c7-849c-4ff1-ab4c-ae9283e7964e/1/Sm0oF0kd0s0GeAaONanvxoZn3wI.mft Manifest number: 0A70 Signing time: Sat 23 Aug 2025 05:02:18 +0000 Manifest this update: Sat 23 Aug 2025 05:02:18 +0000 Manifest next update: Sun 24 Aug 2025 05:02:18 +0000 Files and hashes: 1: 0CT1joEXXqHn7ApZderh8oz-6X8.roa (hash: BvOsPrngGNiLcDK7gBcQWH9QFWAThZP/Rzb+/PLbPTU=) 2: 1syvLvZNw4oAM-YcaPxmJP31bEQ.roa (hash: LPtgL6Q40OCE7W48yA4YQ85j1wM296i1AWyNKAFeL24=) 3: 2eiy-_16euZlcY312olF09W31s4.roa (hash: IUh18w7P0P6a+lmEiR7StlwVEgGLtk0s4vBFZb7XO5A=) 4: 3EbDHVpUGPClmvm3J9iIFuXcrd8.roa (hash: cSc8UvFvDER4vb0XGisijdGU9FyUobR1/SMTyehQLHQ=) 5: 45wSdKS9u-kLwBER9DAdp0dOdgk.roa (hash: fvR/mlJedJy8x4zrL0etfG0pS/sgz873Mc4ixjc+vyg=) 6: 4hsvXB1iTRQzBfKiak8pW2I8BF4.roa (hash: XAp414dDwa28MtvplUV/sn7g1yns68g20QzpT6TX080=) 7: 9RqjWLw5HPxJzuXKXhGXXmyVkAE.roa (hash: 16h/SJTNr54l9qICOmuHkNeVLrt+8pmYa+3yNFUR3qM=) 8: CyAx1lcKD4wc_amccZ1znyVkKIY.roa (hash: Xo4DDTOMDsU3unzlvdlmOXck+6K2PDfwqs5xU35c1bQ=) 9: D8tDS5afEI55b3ob8NG1ZTIaLQQ.roa (hash: HR9k0vtrdM5wK2sftLGXjSwvC6aqcZVjRpaEL6hcsrk=) 10: D9x1CTV8F_4B-wx1zITSO-EMubE.roa (hash: HbzAlStX6f56p1esX7YT4omJKAR7bHh229e0ejlC5Eg=) 11: FG5pNQ5_c3TjGvqm7drNqjAtp_0.roa (hash: pcv1sQ3cPr8Z5RqoT1cS23yqOKHpxM+1wRoitpX9AAY=) 12: H72gujMCMAZpLRg2cNnbawNMi2A.roa (hash: mc2ktHWkVm4x7yx+zpHQ1y0JVlLOdpVbGYpYAwP02X4=) 13: HIuQQFKgSBuAKuZ5NFV39UWdk-0.roa (hash: 6EaFRuDYvhQ4ZsTUqzReAUxLoig1ZR4YO2BpnNtxZIo=) 14: IYyyhMB1ESxGlLx1uYqNqrIgR6U.roa (hash: 4+KfJiZUKyrNHi/Wrz4kW/2Z3KBOulRvE66Y7Dq4jLQ=) 15: LbcVeiuDUugzhWMtPmYqNrGtC38.roa (hash: 17lM/1TLk5NwhqbTHI9QcyIG0e9IHDWy4YL3CEcB+EE=) 16: LgEojSSWxqPQSa07ze94dva_jUY.roa (hash: bgXznWdGQZcKwK/PhDBEr8V0fAhdejJIL6EFj3ITnqs=) 17: MGapW0vbEsDh07CObJqBM_xk66k.roa (hash: P8snUlMzN8SD1TPId1VEZe9Ri9QxtvHOJ9QJWot9Jpw=) 18: MrSOOhfdgSDu8DQamecQZPxYswE.roa (hash: mfmpNUSQT/f2SOWnIgX00XuCSJAj/TdvBXwWPhwJxA4=) 19: Nf4HvEGyFdJaZ55NzcAbgQ8tyKw.roa (hash: 5jYKkFvljl/sNCuuK9Ccg8C+9QQrnGFhMRE89ePvdFM=) 20: O0wQkTberJBGf616XMSFIFD7KBs.roa (hash: 17n6+YLzt02MURVWqCyG+6B7DEgjzFUFOHL19KG1glw=) 21: OX5WGRMzsMc_dGpoOLVRfny2bxo.roa (hash: 8X3DRCHPDRRM7fXfOlVxxkg/aG8D1XcXWTqt5pAok5c=) 22: OufG3sBDvZI7hwG4WyzIc-Z0xOI.roa (hash: i/Y4cgjlSFEZdmlvRCXLNV99JlvYX2KAZ/g9aNaovag=) 23: PEoeENAheHgzP-nL_A9MPW80L0Y.roa (hash: iWOMsN9mK7Qviawj2/fUT70nqm31lGZIYRGadWpH1II=) 24: PGRCK_988SWzktKeQMe19aO2XTA.roa (hash: QsLivLGV0/DhneRFQo4vdA6cUJRH1asxl+VSehvXl8g=) 25: QNAvqEtOtUfMbDmfsPFEe603WNU.roa (hash: 1LcNY8ab58yNfN182kfxAkp7IB4n+zASQa1ST2WM24w=) 26: SBzgWhSF_OyJTG2wd8o-Ulr1nmk.roa (hash: 6nfYexvO1Kc2k+mD82GVF9WHZYMyGMTF3rCD7nDSq6c=) 27: SLxMZY3ZeVIlZCRsD5-G_5fuV-I.roa (hash: K6b6z9i944Syq+ZCWjptF5NFMjXs/+RPvy8K9zsSPCc=) 28: Sm0oF0kd0s0GeAaONanvxoZn3wI.crl (hash: 7HoP9Po0ETQlPYRjXbF047wnTMS3wv9Xw09gJZT4Iwc=) 29: TwoNGVXfFwHv00p0hl1agjjAKh0.roa (hash: EnXnb3QTXsz/G4VrSLiwLMRbpZkmAexWJqS5QR8p6FI=) 30: VkgHoc_Rx9LO0thb-KJrhy8aQQ8.roa (hash: zIBkV8AorlkbljaZ5zOpi/5kWq6s1363XBg2GvdQ8pE=) 31: W81rCzQb4TbKxPTooSlXa8XN4QI.roa (hash: CtqqoCzBFYTr59fu6lgBm7DIo8Hs2FvwBTe1ZDr7Ngk=) 32: WCelWbxY_ryT25IoQyob9TjveSo.roa (hash: bnYBgUb483TxMKFPkryTdkRUhsIN0EWfbbSv1I4sQIU=) 33: XqUpHQ8-a4h7NWOOmuDaL7p8h20.roa (hash: wucX+GJutPw3tDOpsoQ6MWs680eTe2mkRw2xXYGRGbY=) 34: c6w9ZhDFdmBK7mIz3e7Tj7cKgNY.roa (hash: W9CgyAiS0YOpvUOhIebxxS0z/0teFH9NlJCz2jTE+zo=) 35: cMU8VvUmjbwv8fW28N13UafJfMI.roa (hash: r21tLs/TiTIXMMK7rlbmRyjsYlaJyqFWP02tJ2yQ+5o=) 36: cTM_wPu67RVLbAM3nD6sWnqniqw.roa (hash: Ate7PK/dPf9sl6jT2ZlxKjCFiwliYg6RScR5spCNLF4=) 37: dgRDsleizFFiXe9DaqQOkGqkv1w.roa (hash: 5SxZOgkCgjuwwOmw1bmV20/4QSWRJ59FbX4T3oudoSo=) 38: khtbiZZNtdravP-MConYlqJTYmY.roa (hash: xXo87eImVPHif3j6yLOoXwcVidIvdHpygsCrdgfHCM4=) 39: kzJROGRJyZHBGTjoX7TVF70t_uI.roa (hash: Jj+yaaYYgzB6tRgd4hOyiggZphR9XS4OGfW8KoSDVmg=) 40: l5h3qSPN2b6fME8XWGqxn5Ie5tM.roa (hash: 1gYcxOTK35gAGaMUX4XHHZe6la72rr7YynYRUMDnuCw=) 41: pLRMCkjbhFiMNh52TnBAspU8Hjk.roa (hash: U1FUmpIZB70rTHNhu4UV38Kt+GlWp4EPp8i4yoOh8xY=) 42: pS3QOZ2wypZ71SVvS4_yCNQwDJE.roa (hash: ftQJDmKbzx9RdLUMravYt2oMuiMTqqjLnLQ/z0Jk1Gg=) 43: rWSnUoFSizQeONQqtbmoxgRXQLg.roa (hash: WRwAsaYm/Kcb4E7MVkOhb4dnAP9wdxMUgAV7X/La5Vs=) 44: rxk8aFkOeWjK91_TW-WX0ASv1Z4.roa (hash: 13VThZFeUCr48FxuuPNHQvJ0Fk0X//zMlJyzyJOre9Y=) 45: u-s_IvRi_d2uT0pVGYggJ-9vf_w.roa (hash: xE0k9qkP4J77FkjGvlKk6uMwrXPnBnaccpHmcue4AWY=) 46: vJD-DSmwOkOOJFuZzauASqUSruo.roa (hash: auuNNDBDYVXVMGfixRK8lih+GV92mCYSoacO6fybksg=) 47: vQ8X3oy-JWRk4AKB_VuuP5BjlYM.roa (hash: 5j5FVAZ4CeKUoBwfFPNsI7WH45FNyhDbv1/sr4ayZcY=) 48: wha7fcogtd47YRJWz6jr2K_oy9M.roa (hash: 7bzvo+VMMMPCXskKWF1nzlRo2MigQF9srzUNxlr/2Hg=) 49: zzDzNokLDw5fB_iBSLdcgwToZfI.roa (hash: 9Ii575Yb0QHWdHvqaclZEqxxCr5HLB5JkEBBY/yv0gw=) Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/20/9488c7-849c-4ff1-ab4c-ae9283e7964e/1/Sm0oF0kd0s0GeAaONanvxoZn3wI.crl rsync://rpki.ripe.net/repository/DEFAULT/20/9488c7-849c-4ff1-ab4c-ae9283e7964e/1/Sm0oF0kd0s0GeAaONanvxoZn3wI.mft rsync://rpki.ripe.net/repository/DEFAULT/Sm0oF0kd0s0GeAaONanvxoZn3wI.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Sun 24 Aug 2025 00:37:04 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:98:d5:4e:5a:e2:53:b6:5f:7f:02:cb:4a:9f:ad:2f:f5:95 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=4a6d2817491dd2cd0678068e35a9efc68667df02 Validity Not Before: Aug 23 05:02:18 2025 GMT Not After : Aug 24 05:02:18 2025 GMT Subject: CN=84fe3918553b799de0715b7adcde59480dfb93fa Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:da:43:8c:18:ef:8d:4c:d2:9d:86:22:f0:82:8d: 88:68:cb:dd:c4:45:5d:26:aa:1a:01:33:c8:58:73: e2:48:37:61:9c:62:c1:0c:aa:66:73:7b:a7:b0:b1: 00:e3:cd:4f:54:15:7e:62:62:38:77:c7:bc:9c:a5: 55:11:fa:e0:ba:f1:1c:da:cf:65:11:79:b5:1d:d6: 9f:2a:e6:30:9c:4a:24:0b:cc:d9:24:25:61:51:13: 37:14:eb:f3:65:d9:8b:b3:4f:ea:a2:92:7b:c6:d4: 92:d9:b6:d8:28:e3:5f:6a:df:73:5b:b0:81:de:79: 46:d1:f9:4f:02:d2:ee:73:80:9b:3f:9f:34:7b:60: fa:e3:d9:dd:f6:8a:3c:fd:e8:eb:84:eb:36:38:12: 6f:cc:b8:4e:fa:2b:0a:26:dc:12:6a:58:0a:89:7f: 81:0c:ea:b1:f5:4b:f1:4a:24:a8:83:5e:0c:50:1c: 2a:78:9d:bb:70:1c:e1:7e:dd:a5:5e:38:c7:99:9b: 85:ef:38:6f:da:a1:1f:21:b8:c3:e1:ef:73:74:7e: fc:d0:70:67:3b:d9:b6:54:fc:89:53:ef:b7:93:7c: c8:d4:c7:70:76:a3:40:6d:eb:0c:6f:cd:8e:43:e5: 10:39:4e:78:f9:92:dd:20:6d:4d:b8:fe:80:e3:61: 39:79 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 84:FE:39:18:55:3B:79:9D:E0:71:5B:7A:DC:DE:59:48:0D:FB:93:FA X509v3 Authority Key Identifier: keyid:4A:6D:28:17:49:1D:D2:CD:06:78:06:8E:35:A9:EF:C6:86:67:DF:02 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/Sm0oF0kd0s0GeAaONanvxoZn3wI.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/20/9488c7-849c-4ff1-ab4c-ae9283e7964e/1/Sm0oF0kd0s0GeAaONanvxoZn3wI.mft X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/20/9488c7-849c-4ff1-ab4c-ae9283e7964e/1/Sm0oF0kd0s0GeAaONanvxoZn3wI.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 67:57:bf:fb:fd:7d:a8:fe:a1:9f:51:01:f7:6b:d6:a5:6a:03: b9:fa:12:c3:63:82:50:54:9c:d1:1b:bc:56:c1:7f:9c:fd:35: ca:23:08:4f:73:67:29:79:66:b7:44:33:d1:3c:50:14:38:c1: 92:d2:e6:ec:d4:4c:fe:8d:78:72:a7:f2:96:fd:4f:2a:79:02: e4:e8:36:95:09:f1:79:5f:93:07:cd:8d:99:e5:22:87:75:df: 19:a3:da:fa:52:a0:22:90:08:ab:12:f7:85:7d:92:73:da:eb: d5:36:c1:a3:54:49:c4:be:00:89:f5:66:a5:0f:34:77:96:e5: e2:a9:bf:c2:19:73:0c:86:d1:9d:49:45:e4:24:76:7d:b2:48: 2f:2a:43:8c:d4:8d:d8:0c:fa:e1:d8:08:a4:de:9a:b2:d1:8e: 78:e9:64:19:f1:56:58:cb:9a:ca:2d:03:ac:8d:df:a7:11:b0: cf:18:82:64:61:db:a1:e7:d5:b8:ea:25:15:09:3d:b0:03:94: ca:90:0c:8e:58:eb:8b:0d:57:5c:43:1d:7e:c3:4d:06:c7:85: e2:e7:91:2f:e0:6e:dd:47:0a:80:5c:97:10:3b:4c:2a:0e:e3: 08:5b:7e:c5:ca:d9:36:ea:e4:0a:cb:a8:a5:3a:01:13:f0:7e: 99:c7:5b:d2 -----BEGIN CERTIFICATE----- MIIFFjCCA/6gAwIBAgISAZjVTlriU7ZffwLLSp+tL/WVMA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKDRhNmQyODE3NDkxZGQyY2QwNjc4MDY4ZTM1YTllZmM2ODY2 N2RmMDIwHhcNMjUwODIzMDUwMjE4WhcNMjUwODI0MDUwMjE4WjAzMTEwLwYDVQQD Eyg4NGZlMzkxODU1M2I3OTlkZTA3MTViN2FkY2RlNTk0ODBkZmI5M2ZhMIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEA2kOMGO+NTNKdhiLwgo2IaMvdxEVd JqoaATPIWHPiSDdhnGLBDKpmc3unsLEA481PVBV+YmI4d8e8nKVVEfrguvEc2s9l EXm1HdafKuYwnEokC8zZJCVhURM3FOvzZdmLs0/qopJ7xtSS2bbYKONfat9zW7CB 3nlG0flPAtLuc4CbP580e2D649nd9oo8/ejrhOs2OBJvzLhO+isKJtwSalgKiX+B DOqx9UvxSiSog14MUBwqeJ27cBzhft2lXjjHmZuF7zhv2qEfIbjD4e9zdH780HBn O9m2VPyJU++3k3zI1MdwdqNAbesMb82OQ+UQOU54+ZLdIG1NuP6A42E5eQIDAQAB o4ICIjCCAh4wHQYDVR0OBBYEFIT+ORhVO3md4HFbetzeWUgN+5P6MB8GA1UdIwQY MBaAFEptKBdJHdLNBngGjjWp78aGZ98CMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvU20wb0Ywa2QwczBHZUFhT05hbnZ4b1puM3dJLmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC8yMC85NDg4YzctODQ5Yy00ZmYxLWFiNGMt YWU5MjgzZTc5NjRlLzEvU20wb0Ywa2QwczBHZUFhT05hbnZ4b1puM3dJLm1mdDCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC8yMC85NDg4YzctODQ5Yy00ZmYxLWFiNGMtYWU5MjgzZTc5NjRl LzEvU20wb0Ywa2QwczBHZUFhT05hbnZ4b1puM3dJLmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAZ1e/+/19 qP6hn1EB92vWpWoDufoSw2OCUFSc0Ru8VsF/nP01yiMIT3NnKXlmt0Qz0TxQFDjB ktLm7NRM/o14cqfylv1PKnkC5Og2lQnxeV+TB82NmeUih3XfGaPa+lKgIpAIqxL3 hX2Sc9rr1TbBo1RJxL4AifVmpQ80d5bl4qm/whlzDIbRnUlF5CR2fbJILypDjNSN 2Az64dgIpN6astGOeOlkGfFWWMuayi0DrI3fpxGwzxiCZGHboefVuOolFQk9sAOU ypAMjljriw1XXEMdfsNNBseF4ueRL+Bu3UcKgFyXEDtMKg7jCFt+xcrZNurkCsuo pToBE/B+mcdb0g== -----END CERTIFICATE-----Generated at Sat Aug 23 09:37:49 2025 by rpki-client