$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/2a/89f071-5631-45db-a7e5-cd6152261c6f/1/ExiBcyo-JFqVm8Z54EWMOfiT5Gs.mft File: ExiBcyo-JFqVm8Z54EWMOfiT5Gs.mft (raw, json) Hash identifier: Fr4rUlWZnOMZ/sq7Ju6z2mxueJ8cqXLHWBp0+C/2kQE= Subject key identifier: 81:9A:62:65:05:61:17:E7:8A:15:6B:4A:0B:9C:19:6D:8B:BC:5B:AE Authority key identifier: 13:18:81:73:2A:3E:24:5A:95:9B:C6:79:E0:45:8C:39:F8:93:E4:6B Certificate issuer: /CN=131881732a3e245a959bc679e0458c39f893e46b Certificate serial: 0198D5F184D189A01AB5A9D9FB5E2C6B484A Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/ExiBcyo-JFqVm8Z54EWMOfiT5Gs.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/2a/89f071-5631-45db-a7e5-cd6152261c6f/1/ExiBcyo-JFqVm8Z54EWMOfiT5Gs.mft Manifest number: 175A Signing time: Sat 23 Aug 2025 08:00:31 +0000 Manifest this update: Sat 23 Aug 2025 08:00:31 +0000 Manifest next update: Sun 24 Aug 2025 08:00:31 +0000 Files and hashes: 1: 0FgHZM9vUb9uHoeAiu2mjryWiLE.roa (hash: dSibnUywbm1CQv567gr5v4918RVbBUJM+DaWTjbZmyw=) 2: 0SPY3ehqSJEunmmMtILqWyyAEMs.roa (hash: cgmnKIR+3Qr00X4S8IcJLsQ9ZXGxUN8YiwVkY/6EiLQ=) 3: 1-WBvajt9a9vMz3Gf-bxrEIk5KFI.roa (hash: ixOZ900fztMk7OjhYh4vnjfATcXP54nswes8la4aLuA=) 4: 4ukJa7HMkT7DBb2bYcfynHYUCtI.roa (hash: 50MwC4CJiyXyLJrN7qbX2kdlux7tIAVe2IdkMEIjYog=) 5: 6gbYECNEsSZ7q4JdusnawAW762k.roa (hash: mnrnhi6Fsht+ntxveCOn/XM8T/ttUxP0oCf5rM/Eilo=) 6: 7MZR3mjsAfILO-kcvcAwJd6d2Ao.roa (hash: 34KPCBnRe8nkhxBNb/c94bJh+NIbMikAhxDsnW5Rhtk=) 7: 9HEZa5qCfE-i-viyFzuLFjDXw2A.roa (hash: EpNMwEon27kK973TfZZ8kBFg9KuenuIkIxjrgr3/5HU=) 8: Asr7ZOWfpkDBSjuEfEx9OsDKyrQ.roa (hash: p+62UDWtfe7dh4HDC1QfZ3od4Dagyf7n7BasHemhJIA=) 9: B-Ebcv-J_N7-DKp5EFrzjmiYRw0.roa (hash: 0LrUFyOJZXBRyQDcmvsLMHIZlAZinGZnG68VlQ7rxjU=) 10: ExiBcyo-JFqVm8Z54EWMOfiT5Gs.crl (hash: S/yHu0gbICYYlJbceMFNAtSOI2VXRVeDMHcF1qDq1Mc=) 11: Gp66wYREOc1h9eDQ4Jl1zol0dGY.roa (hash: cbxRjqYTk6aDdWomh1V0dsmExBRlWyKb4b8IjMaBUTM=) 12: Kopeu70g1kU-3eX8ZIc2mReesIY.roa (hash: ztR/+a52TTIyYf3p/JslJHcz82LQOgwps87F/37JYEg=) 13: OCPVGl1peHlEh5xCGuK3bL8qTL8.roa (hash: ODjW3HaeaPU7MMPg1i99Po/ddkSUNUhgFTUigxFDscw=) 14: OaJSkzPg47mQ4rIOwkpdoPx8kX4.roa (hash: UyojqcoIyduZyG+Ubu8/4tRZIqXeRa/61802aE+vRWM=) 15: PDCQ_tcZw8HWtOvB4qdfFfnGv2w.roa (hash: rOsSzp/2Qn7zzipRULSHdV5Ez72cOtvODtaM0ekkqKs=) 16: QtkpYFVkfpGCc6muBgcymFsYmcw.roa (hash: cTasgEqCWORockiyCZ3h8oJtqhnmA7saGpgSFUUMyRw=) 17: Rh_lGayRGbOt5ieswPshE5gVHRQ.roa (hash: mC9VCpAqF4feJF5prCrA3SZDDjWRV8WzJ74r+/aLdvg=) 18: RvSq0f1_KH3WbOL8Dmljmap3ZVo.roa (hash: 5WZhQboymyKPaLswcG/VmWNce1ChWZNZjnINMA2NbP4=) 19: SJHvhaCpGVpEu19gR74F4_s00OM.roa (hash: QYvmEj267N2mBcF32kZnO8aAG/fQkwII3VAx268JC6k=) 20: TMHOC9wHX1rJxaiSMLx9Echx3zw.roa (hash: 6/uJg6ZI9mm5TR8x6Rj4/9T2uacQMFztBl7MRd/GXGE=) 21: VoolzUwqWdjT_6ym6OldKRkJu08.roa (hash: P83IslquU55GgGeVulsKAXE7c1EVmhXTqnamoFvTaus=) 22: W5sBzYpoHJtI8NA-fUrPIcsYmxw.roa (hash: Zjyo8aebwmo43iU7YPG0Rw8SBj65vOSaN9AeZRmqyVE=) 23: WAhJZAlTDUaB6vmjVLZqksIGzmk.roa (hash: Ik7C6qmxni3KBC9zQeT1wej9gtYUxK6ifPjNRKdWczs=) 24: XHgKjO38pNfBvguSYH5AzB6NU48.roa (hash: cLraLK0HrBC1+uwEoZJlLzb/oO0jxC4wj9o4Xo8AIII=) 25: f8HNGqYZ56HDzKMkA97HvxLpDaY.roa (hash: UaI0iT5qEh6DsVjN4hoPGEtmvVSAkZnS69Ts1ZSzz7Y=) 26: g8HopqbG0ETACMkk_zXl3liDZDA.roa (hash: IlJyMCJEwJhYKwqsXmSH9IsBc+u/zpqyYvsIqkn0FEo=) 27: lce29TxMLeElQDDpQ8Ij3c0X0Tk.roa (hash: 78Yo5skViqQdWGup+psFTOfViVx1RTBcrcCMhgyvzbM=) 28: o5ChnZN8Fh2UfQkol6pllSa8vlg.roa (hash: aGdO4WpQUBPqENnqKDVSzkgV5hoyIVh/xhrIeTDF4cA=) 29: rRKhiSrbatFvYmuo6ymeVxGwrXE.roa (hash: FCC1G1laSHKy+MJRui/+QVk4PwxHWgeFN/8JBKnvpeQ=) 30: s0Lr7YuNvhvXYPcKrrFVoUy-LO8.roa (hash: a5e7ib7Q/DgMeBDM9u9FOonj1h8M13aRP36qAw7iBFY=) 31: ucJ6oZ-NcbAXdgi6HJYOVyk08OA.roa (hash: n6wJOnNyXxPTy5zNsySY3nXhHxZ2SIbrK7swKaWaEp4=) 32: v7J0SuAlQFdaHot7td83uoznPPo.roa (hash: Ag0K9C9c2TlJAt8MNSulsrKBKAnHlI2lTalhgszhcOc=) 33: v8O-hmYnMSY31ejAOPQBw6PvlZo.roa (hash: n0/Am/fuQ0Bzlhu28NMtBIbpVUfZ8WWaeSJsXMS/dp8=) 34: vHlaTrrnDokWBry4ZJ37wqk53j8.roa (hash: SsVmvSg8GBzNArTVETDsWfTOcSBDPJ7fxWLL8jZ2GEI=) 35: vQ2pLMXzqa1W2LEF28Wa-hP-JiM.roa (hash: PBNGjnlkKuZn4zEZesv7xi1kyTNAu5mAHnZ6a2szMaY=) 36: ybt1ga0_vsN4KgTOqCIx6p76TyI.roa (hash: +Au68nUXgRDHemgu2ODT+EBUxbABQU2c90g5EDmI6o4=) Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/2a/89f071-5631-45db-a7e5-cd6152261c6f/1/ExiBcyo-JFqVm8Z54EWMOfiT5Gs.crl rsync://rpki.ripe.net/repository/DEFAULT/2a/89f071-5631-45db-a7e5-cd6152261c6f/1/ExiBcyo-JFqVm8Z54EWMOfiT5Gs.mft rsync://rpki.ripe.net/repository/DEFAULT/ExiBcyo-JFqVm8Z54EWMOfiT5Gs.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Sun 24 Aug 2025 05:01:29 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:98:d5:f1:84:d1:89:a0:1a:b5:a9:d9:fb:5e:2c:6b:48:4a Signature Algorithm: sha256WithRSAEncryption Issuer: CN=131881732a3e245a959bc679e0458c39f893e46b Validity Not Before: Aug 23 08:00:31 2025 GMT Not After : Aug 24 08:00:31 2025 GMT Subject: CN=819a6265056117e78a156b4a0b9c196d8bbc5bae Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:a1:ec:2d:9b:43:1a:ec:68:0c:7a:14:96:f2:26: 2e:5f:e9:f0:f3:6e:7c:43:3d:00:9f:14:08:43:99: b4:eb:dc:39:82:09:76:f1:42:24:b9:12:cf:d4:da: 22:d0:64:eb:19:c8:4e:a5:84:1b:75:f5:99:c4:9d: 35:9f:dd:37:43:1a:4d:95:5e:4d:6b:c2:36:fe:8a: 3f:17:d5:35:55:8c:49:d9:70:39:b8:ca:00:22:e6: 15:8d:49:5c:5d:3e:59:fe:26:1c:ab:15:7f:1a:ce: a2:14:b1:fd:8b:f3:c1:39:c3:93:7b:25:69:7e:5d: c6:45:d0:ea:39:ba:c4:de:58:d5:4d:fd:62:d4:31: bd:5c:48:d1:29:e7:ae:da:61:8c:7d:b3:2e:19:30: 48:df:35:78:c8:d5:68:45:06:f8:6c:32:5f:2a:aa: ab:c3:3c:8f:f3:29:d1:19:5c:84:cd:4c:21:0b:ab: 83:8e:11:10:7e:10:87:5e:05:36:a9:45:98:2f:d4: e1:2c:21:77:3a:c3:c4:38:ea:16:ac:d4:09:e5:31: 83:ac:b0:f8:9c:6f:fb:52:31:c4:d1:c2:04:b8:0f: 63:c5:ab:44:46:85:ad:77:f4:6a:3d:8f:46:78:82: ea:5c:26:82:67:64:50:b3:3c:4b:61:9b:0e:7e:07: 70:99 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 81:9A:62:65:05:61:17:E7:8A:15:6B:4A:0B:9C:19:6D:8B:BC:5B:AE X509v3 Authority Key Identifier: keyid:13:18:81:73:2A:3E:24:5A:95:9B:C6:79:E0:45:8C:39:F8:93:E4:6B X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/ExiBcyo-JFqVm8Z54EWMOfiT5Gs.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/2a/89f071-5631-45db-a7e5-cd6152261c6f/1/ExiBcyo-JFqVm8Z54EWMOfiT5Gs.mft X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/2a/89f071-5631-45db-a7e5-cd6152261c6f/1/ExiBcyo-JFqVm8Z54EWMOfiT5Gs.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 2c:50:29:ce:30:be:9a:21:c3:73:2a:ad:87:26:f6:c5:41:13: ce:21:51:64:c1:2d:05:a0:64:cf:bd:6c:1d:70:3d:f5:db:19: 13:cf:b6:89:8b:d6:69:b9:8b:73:d8:6e:cc:87:95:1c:e6:60: 0a:a1:7e:d9:a5:1a:da:b4:31:bd:90:22:61:35:36:d8:00:da: c0:a5:15:a2:3d:df:31:2e:90:13:3f:cd:48:45:bf:03:b4:f1: ed:30:56:30:29:b7:54:36:5f:f7:6c:bd:67:1b:44:d1:8b:03: 37:bd:05:a2:ba:53:dc:1a:db:80:ac:c9:4f:77:c9:6a:51:b3: c0:ab:a6:eb:27:7f:2f:31:94:cc:54:35:53:52:9e:0d:8b:20: 1d:11:08:75:52:f1:b7:65:48:29:f9:a8:99:2b:99:d8:c9:ff: d6:e7:70:61:d1:c1:1a:7c:68:59:f1:70:83:e2:39:de:cf:b2: de:03:bb:6b:65:6c:db:ca:9a:26:91:ca:e6:fc:fa:de:40:c4: 1b:8a:1f:b1:84:5d:bd:dc:1d:22:26:d7:bd:32:bd:6d:cf:52: 00:b5:87:48:69:bd:8e:70:02:d6:0b:60:70:df:9f:71:ee:3a: 8f:b3:47:63:12:fb:bf:e9:55:f6:b5:67:3b:32:83:52:86:f2: cd:6c:f3:b1 -----BEGIN CERTIFICATE----- MIIFFjCCA/6gAwIBAgISAZjV8YTRiaAatanZ+14sa0hKMA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKDEzMTg4MTczMmEzZTI0NWE5NTliYzY3OWUwNDU4YzM5Zjg5 M2U0NmIwHhcNMjUwODIzMDgwMDMxWhcNMjUwODI0MDgwMDMxWjAzMTEwLwYDVQQD Eyg4MTlhNjI2NTA1NjExN2U3OGExNTZiNGEwYjljMTk2ZDhiYmM1YmFlMIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAoewtm0Ma7GgMehSW8iYuX+nw8258 Qz0AnxQIQ5m069w5ggl28UIkuRLP1Noi0GTrGchOpYQbdfWZxJ01n903QxpNlV5N a8I2/oo/F9U1VYxJ2XA5uMoAIuYVjUlcXT5Z/iYcqxV/Gs6iFLH9i/PBOcOTeyVp fl3GRdDqObrE3ljVTf1i1DG9XEjRKeeu2mGMfbMuGTBI3zV4yNVoRQb4bDJfKqqr wzyP8ynRGVyEzUwhC6uDjhEQfhCHXgU2qUWYL9ThLCF3OsPEOOoWrNQJ5TGDrLD4 nG/7UjHE0cIEuA9jxatERoWtd/RqPY9GeILqXCaCZ2RQszxLYZsOfgdwmQIDAQAB o4ICIjCCAh4wHQYDVR0OBBYEFIGaYmUFYRfnihVrSgucGW2LvFuuMB8GA1UdIwQY MBaAFBMYgXMqPiRalZvGeeBFjDn4k+RrMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvRXhpQmN5by1KRnFWbThaNTRFV01PZmlUNUdzLmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC8yYS84OWYwNzEtNTYzMS00NWRiLWE3ZTUt Y2Q2MTUyMjYxYzZmLzEvRXhpQmN5by1KRnFWbThaNTRFV01PZmlUNUdzLm1mdDCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC8yYS84OWYwNzEtNTYzMS00NWRiLWE3ZTUtY2Q2MTUyMjYxYzZm LzEvRXhpQmN5by1KRnFWbThaNTRFV01PZmlUNUdzLmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEALFApzjC+ miHDcyqthyb2xUETziFRZMEtBaBkz71sHXA99dsZE8+2iYvWabmLc9huzIeVHOZg CqF+2aUa2rQxvZAiYTU22ADawKUVoj3fMS6QEz/NSEW/A7Tx7TBWMCm3VDZf92y9 ZxtE0YsDN70ForpT3BrbgKzJT3fJalGzwKum6yd/LzGUzFQ1U1KeDYsgHREIdVLx t2VIKfmomSuZ2Mn/1udwYdHBGnxoWfFwg+I53s+y3gO7a2Vs28qaJpHK5vz63kDE G4ofsYRdvdwdIibXvTK9bc9SALWHSGm9jnAC1gtgcN+fce46j7NHYxL7v+lV9rVn OzKDUobyzWzzsQ== -----END CERTIFICATE-----Generated at Sat Aug 23 11:28:22 2025 by rpki-client