$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/34/d90c6f-6576-46b9-8313-6cbff3c4da01/1/O0duEuiYflswLNwkvdnbP-g8hEk.mft File: O0duEuiYflswLNwkvdnbP-g8hEk.mft (raw, json) Hash identifier: 5vebxg93cfhCRqlY7C4ZdVBKS8yrlpflZLf6GVTocXU= Subject key identifier: 03:BA:F1:18:C0:6B:42:D5:85:D4:17:18:27:FC:B8:9B:1E:B4:3A:59 Authority key identifier: 3B:47:6E:12:E8:98:7E:5B:30:2C:DC:24:BD:D9:DB:3F:E8:3C:84:49 Certificate issuer: /CN=3b476e12e8987e5b302cdc24bdd9db3fe83c8449 Certificate serial: 0198D5BB9CA966E8B7F9992F0C87B57CD60B Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/O0duEuiYflswLNwkvdnbP-g8hEk.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/34/d90c6f-6576-46b9-8313-6cbff3c4da01/1/O0duEuiYflswLNwkvdnbP-g8hEk.mft Manifest number: 1845 Signing time: Sat 23 Aug 2025 07:01:38 +0000 Manifest this update: Sat 23 Aug 2025 07:01:38 +0000 Manifest next update: Sun 24 Aug 2025 07:01:38 +0000 Files and hashes: 1: 4vgCB29E8qksUTRT80hibqkfyyc.roa (hash: jmfyWEEY9JnvGnTw4OogSC5Brt6r5w8K86EHD/wwf9A=) 2: 526untxz-mzv2dHnFDXL_1ptt60.roa (hash: eTZ7gYAJgAUW5KmvOus9/SXIOPMjtfVvCRByFZ9gVg0=) 3: 7AXFe4yxIHvF0jtzsP_F-wLpTyo.roa (hash: fz447Zdcr7iuvJ9YqYhhlssvYnd7PF5Z4bBFuoyFksI=) 4: C-8-iMMsxJ6tnwl9OBqOWIwbNsU.roa (hash: pdyDDn72ivSi04YeLJDn/Rf+owjmwql5RY6I2jPWQjI=) 5: Cz5IOaLfZShikRrc5qEp3L0_dDE.roa (hash: yJQIMc4u5I3PxM3zxWJYXZyrXzNKlBnDlO54oa7k+I4=) 6: DxgEUmzhCfbLGW1VYUfMpFa37nw.roa (hash: aTiJxBWDUefv6IrHKfkDtn+24ct4bHV07inB3EBckiI=) 7: FmAKBKd-PdNqMEGk2uZifaqmnrE.roa (hash: BK0SX5WkOOtWNPjitJ2TK5CAHUK5xcu0+wg05UjWy1g=) 8: GMnz3z9nrgbgP0ppZKUjHaDtXyE.roa (hash: LxAEvoJTMfyFREvhgYObD8aUTHjiu1gGB5tCs2IQyFI=) 9: GXy-YScDdlVSOjaigEKgJ51XCY8.roa (hash: Y3LR/iT+9EdXx7rq4pgAup8VPeSq/ZLbP9lE7Caoknc=) 10: KfRroo9-BNURF9yUWR1WlHgU1ig.roa (hash: d0EUN/5YCOmmW4SmyztOjubnx+pkCFBWNsBncoAozSc=) 11: NBdPQa-wvhCcNUR62UijOKmqLb4.roa (hash: FBuWOoWqS3kDovQ4RTLJifcKo3Lt+KtJgveTvXA1/PY=) 12: O0duEuiYflswLNwkvdnbP-g8hEk.crl (hash: pHirI0iBsR5msZdV7Mk6nP5oQmizpzuCBs1gjZllzUA=) 13: ONvCFUby9FQsaJnAxo4Axtdte3w.roa (hash: Ifw+sRLVQyRVbH8IoOOspPffjTFu/L5Tp5Iujz6vsEg=) 14: PqyNHcmLJdPWxXV1ritb4BmJxi4.roa (hash: 3vlH477/W9mn8TAvOvuTdFa84/v39cjh6RY9RiJ8GGQ=) 15: RPtIr4SyxST2FhDUlfIaVDvDv30.roa (hash: GtTmqq9ciOzu0ubmXjSZndWCRadfRgXNWiYJpFrJC5s=) 16: SYJLObrmnLX0qSjqWy4fjvI4wfg.roa (hash: 8EEWLPfT56iygA2pm9gSd1ZbNAm6vIegZGKTF/BcW2k=) 17: W4gGQid-BJ2ydE-GfarPQD0BXHk.roa (hash: AIulnkFQm6EME0MTgDdsXVMYUQiBqZHjvvdiEh/TZmw=) 18: W6vAzbeYVqv1NulDzaonbbDB8SY.roa (hash: vuX+ehs+1SZ9H4PJ6tewuaRUyccY/gCN0nnCPhhuuuM=) 19: Xf3YKxRqkeL7M00W8PeVBpyDwo4.roa (hash: l1kq88C+6MsbDoI9xmNG80iyS2+gmcx5dOr77F5QPn4=) 20: Y2m9dQZRR5IryF_5Zz3iwenilus.roa (hash: Jz9GiZ+cQjwgpfumcixZsPRulTmHrskYTNVB0A9hwMs=) 21: aRKgFuNEew699NwvZOmMVRESxJw.roa (hash: BbnnNcBf5b80ecOVIfxt6czSFR5JGmFsnVDqmj8IYKc=) 22: bIscYSktyuSdXA8uuitNFV9EUno.roa (hash: w2B+jU39CkMFN16wFNwH+8WwrfFPrjamkhdn7et9g8s=) 23: d0QPUb9bw255FbDfGbVwKoJI6bE.roa (hash: jrR/WoS1SZ3m1OaPCDPsHF9pj1zBDeNV31JSvSAQwFQ=) 24: ejUJhdQv_gD6oiLYrzclBYzyLOY.roa (hash: GfeTAbqceyfp5+2gyCSPrzyUUUuMpH7hOe6M0SAay2Y=) 25: lRiWjK4xEGSZ7hhdPgk-iqq1mwI.roa (hash: JgHkOVWJLhXz09JsY8CuxiPcEyyxQ/VY17v428GySkE=) 26: mmKz5eWbi9QRsWIEG2amdp-45xY.roa (hash: kEXUQutyuTSPl9CnJwgtGOfss4KUFJCUYJtTnTzPgs4=) 27: nei3AaGClDiyy_EfGYw9mDGViqc.roa (hash: qXKOsUvJTZ9r5zNLO+LyECtFcWGid4ruKizdlfVXjdw=) 28: oMVUugxzWQV8CTV8CsCSyXRaVrM.roa (hash: pMKFMHKU1JhFpXnjr6tLo7AocNPXia8Qa3GSVsF74/E=) 29: oWQjZS65WCcLUp_rizKZHEXxja8.roa (hash: ppbU5PBHwS7A+yU9U50SRApQ+OcnfPk2nBS7g+bHUiE=) 30: sIaFicGSLfWywofV-flOlj4BbEs.roa (hash: T3ig9ILGk20fQZ8i8xMsdIL3W6kPVu5G2DRrIA6L3QI=) 31: tGvaJqw-BkYv98JxwuYhGJMirKI.roa (hash: n1mCBZS2+2xEitKl9orN+eHu3AcNiwq8Xb6c6Ko5sAc=) 32: yEUQ_aJkjJZT7FqCL5XucJyCbH4.roa (hash: UhItDph40P0qmr9fzzHpHPa0fBJT60AEwUYsGPaQGNQ=) Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/34/d90c6f-6576-46b9-8313-6cbff3c4da01/1/O0duEuiYflswLNwkvdnbP-g8hEk.crl rsync://rpki.ripe.net/repository/DEFAULT/34/d90c6f-6576-46b9-8313-6cbff3c4da01/1/O0duEuiYflswLNwkvdnbP-g8hEk.mft rsync://rpki.ripe.net/repository/DEFAULT/O0duEuiYflswLNwkvdnbP-g8hEk.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Sun 24 Aug 2025 00:37:04 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:98:d5:bb:9c:a9:66:e8:b7:f9:99:2f:0c:87:b5:7c:d6:0b Signature Algorithm: sha256WithRSAEncryption Issuer: CN=3b476e12e8987e5b302cdc24bdd9db3fe83c8449 Validity Not Before: Aug 23 07:01:38 2025 GMT Not After : Aug 24 07:01:38 2025 GMT Subject: CN=03baf118c06b42d585d4171827fcb89b1eb43a59 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:ec:77:9d:c9:0e:98:db:b1:b0:a1:13:2b:a0:6e: e9:eb:be:87:40:1b:c0:7e:04:75:a0:de:d1:df:a4: 6b:ca:aa:57:35:d6:95:1b:58:80:c1:83:f0:20:d9: dd:8f:12:06:00:c1:31:d5:2c:a3:b6:36:28:58:be: c8:dd:e6:60:c7:c8:d3:12:bc:d9:22:b7:b0:b1:6f: 75:9d:e6:63:27:1f:ea:64:1d:94:35:08:fa:62:63: 3c:6f:f0:ce:68:a1:c4:94:4b:67:b2:9e:c3:3e:0c: f0:b0:ef:60:45:62:84:9c:b6:fe:fd:ad:d3:ce:b5: 08:9f:98:71:7d:22:8e:c1:c1:8c:13:f0:79:3e:73: 44:d0:30:be:04:cf:63:3f:86:79:f0:2c:a2:92:2c: dd:17:57:ab:c8:d4:48:bf:6e:f5:5f:f8:e8:4d:f6: 0c:7d:b9:de:11:2a:b8:6c:53:04:8f:83:af:fc:39: 48:db:01:be:76:26:e2:5c:3f:f8:47:23:91:e4:78: 63:4f:a4:c9:4a:29:13:51:ca:30:e6:dc:08:ca:58: 96:9f:49:41:2b:9e:34:63:b9:1c:5c:6a:9f:c8:6e: 9b:54:0f:d3:09:4f:cd:bf:f3:49:cd:0b:25:49:7a: 43:c1:21:d3:4a:45:71:2f:0f:98:0e:1a:0b:27:13: 3d:dd Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 03:BA:F1:18:C0:6B:42:D5:85:D4:17:18:27:FC:B8:9B:1E:B4:3A:59 X509v3 Authority Key Identifier: keyid:3B:47:6E:12:E8:98:7E:5B:30:2C:DC:24:BD:D9:DB:3F:E8:3C:84:49 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/O0duEuiYflswLNwkvdnbP-g8hEk.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/34/d90c6f-6576-46b9-8313-6cbff3c4da01/1/O0duEuiYflswLNwkvdnbP-g8hEk.mft X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/34/d90c6f-6576-46b9-8313-6cbff3c4da01/1/O0duEuiYflswLNwkvdnbP-g8hEk.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 06:d9:7a:fb:92:6c:36:a6:88:ec:fa:3d:48:96:ee:64:8f:9d: 6a:fc:55:8e:66:d2:cd:5a:55:99:81:4c:e1:66:db:f6:01:c3: 35:41:b7:0c:62:23:2d:88:0d:bf:6b:32:f4:a6:30:86:ec:ba: b7:75:6f:fc:53:4d:1d:44:ea:9f:43:3d:40:da:a4:d1:2d:01: ca:3f:71:cd:84:a8:60:27:1d:40:15:8d:87:e9:ed:36:82:3f: 9a:8e:2b:66:a9:fe:24:b4:6f:a6:5b:34:8e:21:72:4f:30:aa: 8d:5a:b2:28:08:2e:3c:58:a7:da:48:5d:b6:34:89:93:2e:ff: 4a:3a:49:01:fa:cf:3b:e7:8e:f1:1f:62:df:e4:d9:71:37:92: 62:db:cb:82:64:1f:8c:a3:82:a2:33:7c:f5:02:a0:6d:10:ff: f5:12:d1:cc:eb:44:b8:b3:84:8e:ef:03:f8:77:ff:bb:26:30: ac:af:06:66:06:fc:90:b7:f0:62:2f:e9:cf:9b:5c:90:9f:d6: 70:ae:18:d2:07:30:a0:ed:c7:3d:bc:2d:04:42:18:06:19:6e: 91:13:b9:68:66:48:a5:a4:fb:44:9e:92:61:34:4d:f6:ef:3c: f4:15:25:cc:e1:8f:5f:7b:e8:c4:f3:46:d5:76:70:9d:7a:a3: 05:35:93:58 -----BEGIN CERTIFICATE----- MIIFFjCCA/6gAwIBAgISAZjVu5ypZui3+ZkvDIe1fNYLMA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKDNiNDc2ZTEyZTg5ODdlNWIzMDJjZGMyNGJkZDlkYjNmZTgz Yzg0NDkwHhcNMjUwODIzMDcwMTM4WhcNMjUwODI0MDcwMTM4WjAzMTEwLwYDVQQD EygwM2JhZjExOGMwNmI0MmQ1ODVkNDE3MTgyN2ZjYjg5YjFlYjQzYTU5MIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEA7HedyQ6Y27GwoRMroG7p676HQBvA fgR1oN7R36RryqpXNdaVG1iAwYPwINndjxIGAMEx1SyjtjYoWL7I3eZgx8jTErzZ IrewsW91neZjJx/qZB2UNQj6YmM8b/DOaKHElEtnsp7DPgzwsO9gRWKEnLb+/a3T zrUIn5hxfSKOwcGME/B5PnNE0DC+BM9jP4Z58CyikizdF1eryNRIv271X/joTfYM fbneESq4bFMEj4Ov/DlI2wG+dibiXD/4RyOR5HhjT6TJSikTUcow5twIyliWn0lB K540Y7kcXGqfyG6bVA/TCU/Nv/NJzQslSXpDwSHTSkVxLw+YDhoLJxM93QIDAQAB o4ICIjCCAh4wHQYDVR0OBBYEFAO68RjAa0LVhdQXGCf8uJsetDpZMB8GA1UdIwQY MBaAFDtHbhLomH5bMCzcJL3Z2z/oPIRJMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvTzBkdUV1aVlmbHN3TE53a3ZkbmJQLWc4aEVrLmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC8zNC9kOTBjNmYtNjU3Ni00NmI5LTgzMTMt NmNiZmYzYzRkYTAxLzEvTzBkdUV1aVlmbHN3TE53a3ZkbmJQLWc4aEVrLm1mdDCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC8zNC9kOTBjNmYtNjU3Ni00NmI5LTgzMTMtNmNiZmYzYzRkYTAx LzEvTzBkdUV1aVlmbHN3TE53a3ZkbmJQLWc4aEVrLmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEABtl6+5Js NqaI7Po9SJbuZI+davxVjmbSzVpVmYFM4Wbb9gHDNUG3DGIjLYgNv2sy9KYwhuy6 t3Vv/FNNHUTqn0M9QNqk0S0Byj9xzYSoYCcdQBWNh+ntNoI/mo4rZqn+JLRvpls0 jiFyTzCqjVqyKAguPFin2khdtjSJky7/SjpJAfrPO+eO8R9i3+TZcTeSYtvLgmQf jKOCojN89QKgbRD/9RLRzOtEuLOEju8D+Hf/uyYwrK8GZgb8kLfwYi/pz5tckJ/W cK4Y0gcwoO3HPbwtBEIYBhlukRO5aGZIpaT7RJ6SYTRN9u889BUlzOGPX3voxPNG 1XZwnXqjBTWTWA== -----END CERTIFICATE-----Generated at Sat Aug 23 09:42:20 2025 by rpki-client