$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/42/57a34f-e33b-4e17-bc32-66457724c2d3/1/b3Xk6Utct0UXt7AVaAFdqebuzbY.mft File: b3Xk6Utct0UXt7AVaAFdqebuzbY.mft (raw, json) Hash identifier: iAqkjNqT494n8wx0YtzfFVuJ9IkcjlUF9vbW7J9dOX0= Subject key identifier: 2E:0D:8F:27:1D:B9:63:3B:8A:21:76:72:12:A3:05:01:3A:42:46:C6 Authority key identifier: 6F:75:E4:E9:4B:5C:B7:45:17:B7:B0:15:68:01:5D:A9:E6:EE:CD:B6 Certificate issuer: /CN=6f75e4e94b5cb74517b7b01568015da9e6eecdb6 Certificate serial: 0198D58382BE3153C1ED555769033E00FC02 Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/b3Xk6Utct0UXt7AVaAFdqebuzbY.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/42/57a34f-e33b-4e17-bc32-66457724c2d3/1/b3Xk6Utct0UXt7AVaAFdqebuzbY.mft Manifest number: 0DBD Signing time: Sat 23 Aug 2025 06:00:22 +0000 Manifest this update: Sat 23 Aug 2025 06:00:22 +0000 Manifest next update: Sun 24 Aug 2025 06:00:22 +0000 Files and hashes: 1: 4gI_4-IO4A-DLjbwey2IpOI1Gac.roa (hash: mQ7omWDIQV8V9vzwSyRnlClYxhElWnlIxHJNMRFaihs=) 2: 4vux7awz3E36tFDHIazA7-jkwq4.roa (hash: wB2NxL5iO7Z/8XbFdlxXumlf3zZuQEhQW8UuOP6HgoY=) 3: I-ZRabDkxnomVm9OpqrSmL7wegM.roa (hash: ahQV4yiQozNhzmoCjav4vhE90dmYTbq1NoD7TQiCni8=) 4: NwkL_RCVaGXT4imbBaIpPZw6kWg.roa (hash: eMKiOz/oyNA6w3y0uBc35mP8Vw/9Quu64JkJ41OaQz0=) 5: OM9sp83gq8JLzkuTWdaZtycRFbg.roa (hash: 6zlXFie+AwK2F8W6WJu8AHXI3dxTSD6r6hI+SWEgdaY=) 6: Ph2VzfPmPZtEPzSLkO7pzzgo-po.roa (hash: fkmSgLLFQNKR7Q8TZwhTdwOECOCKZn3/ppvBg4D1aeM=) 7: REOoP6Y8-wsgon83LmwFQJMZALc.roa (hash: A4lQGU6MhGm6OdwWVbHE5BG8fr09wGeJM7NnUUCETR0=) 8: TsGqxUBkJwOPQAWoVKR2AEF1ans.roa (hash: uv2TTIYvJgqngCKe+XNr+deXWi65MhBACHmWx2No1ag=) 9: b3Xk6Utct0UXt7AVaAFdqebuzbY.crl (hash: e14f4S69t5hFbc8DI4jZQjLF9UxH9TjAjYIhOTPzRbY=) 10: dgaS6fn3OpV72cEYNy7VeVSk2tE.roa (hash: t9/MBst/MC7EkBAyzHdTuY3YBMIxG+Elxy81Bz6kYyc=) 11: fzvvk5bzP10N2OQNounBbEQbNsE.roa (hash: RKFAzkj15rOGrQMxeuqq2cZQnvwnI2ibWU1wR/fhdrE=) 12: ps-zGnTGe4PKACLSOfDDMQx9t_M.roa (hash: xpFFfF+DS0D5TdCkxuXovC0W/qhotMUgVNP3M/NZPEQ=) 13: qwX6nOrWDCdJ2ChcYo_FlUo9358.roa (hash: 6/DNhjHhr5UMjHSyj4Zm9KTo/594qOQNI4iGYnKpGJU=) 14: rzIBmBWw3qJ2DmXGis1jynjXok4.roa (hash: ASwn1bLvv7MmInkvVqrqb1niCj3V+gQdtibxQbu0H/k=) 15: vmXd6JCE5kf_nXENEGshI9bqd18.roa (hash: jvJ9f/eUHMFjQiA1AQT5dKViK2og3agdpUoI7vfMR3k=) 16: z0Qvo_o1aarIKR-qrgaRYpvfwjc.roa (hash: RiWOkvqrTFK0brETv9UpsQbvKc3QbmQ0OasKxFLAePE=) 17: zLs5eIQla7JvuOsDIVylY_LlW9Y.roa (hash: EWXm1Aj94qBaUfmc96DwvRvWK77ZtmJaOaVeqhh7Bw8=) Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/42/57a34f-e33b-4e17-bc32-66457724c2d3/1/b3Xk6Utct0UXt7AVaAFdqebuzbY.crl rsync://rpki.ripe.net/repository/DEFAULT/42/57a34f-e33b-4e17-bc32-66457724c2d3/1/b3Xk6Utct0UXt7AVaAFdqebuzbY.mft rsync://rpki.ripe.net/repository/DEFAULT/b3Xk6Utct0UXt7AVaAFdqebuzbY.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Sun 24 Aug 2025 00:37:04 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:98:d5:83:82:be:31:53:c1:ed:55:57:69:03:3e:00:fc:02 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=6f75e4e94b5cb74517b7b01568015da9e6eecdb6 Validity Not Before: Aug 23 06:00:22 2025 GMT Not After : Aug 24 06:00:22 2025 GMT Subject: CN=2e0d8f271db9633b8a21767212a305013a4246c6 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:cd:ed:97:86:a1:69:14:dd:1e:e6:7c:c9:87:38: b1:1c:10:00:9c:55:70:15:4c:a3:9b:5e:ff:79:cb: ff:4c:ac:05:48:be:ce:c0:a0:55:b3:65:91:e7:ce: 00:3b:ab:d2:c2:37:67:c6:15:eb:21:f7:8f:19:f1: 74:cd:bf:d2:03:d6:ca:c0:bd:3f:a8:fa:b7:07:f0: 74:21:63:d1:6c:95:4d:4f:d1:3a:b5:9a:b1:61:98: 41:00:18:ce:6d:ce:8b:28:69:8c:1b:c1:84:4a:91: 13:5d:5a:e8:46:29:36:c3:92:45:82:70:39:74:35: 03:f1:ba:38:eb:61:0d:ac:8a:5d:49:54:3c:97:67: 42:76:25:02:a1:9b:1e:81:1c:45:1d:14:01:bb:e0: 2a:f5:4d:b9:5c:83:85:9b:94:dd:c1:16:69:05:b1: ab:ea:0c:7a:c5:d0:f6:0e:26:58:13:dd:cd:83:0f: 45:b0:60:79:a1:a4:c0:29:ce:c5:03:ad:38:1a:c5: cf:ee:a0:25:21:53:e8:85:a2:be:d7:bd:5e:9b:cf: c0:47:17:20:46:99:ac:0d:bd:ae:be:23:ae:9a:2c: b3:3a:87:3d:0a:53:c0:53:5d:3a:06:42:7b:a3:dc: 04:62:c4:d5:6a:c4:45:84:0d:16:11:08:a7:a6:0d: 09:c1 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 2E:0D:8F:27:1D:B9:63:3B:8A:21:76:72:12:A3:05:01:3A:42:46:C6 X509v3 Authority Key Identifier: keyid:6F:75:E4:E9:4B:5C:B7:45:17:B7:B0:15:68:01:5D:A9:E6:EE:CD:B6 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/b3Xk6Utct0UXt7AVaAFdqebuzbY.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/42/57a34f-e33b-4e17-bc32-66457724c2d3/1/b3Xk6Utct0UXt7AVaAFdqebuzbY.mft X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/42/57a34f-e33b-4e17-bc32-66457724c2d3/1/b3Xk6Utct0UXt7AVaAFdqebuzbY.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 07:31:49:7e:8a:95:52:02:a2:ea:9a:c0:cb:df:43:2a:0e:60: b4:e6:56:e7:2e:65:79:f8:18:1b:b8:77:66:70:6c:3b:54:89: b7:2b:70:84:29:81:82:f9:c0:ce:71:a2:6a:43:60:fc:ce:21: 33:37:b8:a4:dd:6b:b2:ce:72:21:64:20:94:d9:b8:6b:e5:3e: cd:56:27:ef:f6:29:2f:7b:02:57:d8:07:f1:30:b7:b3:d9:c3: 2e:71:b5:ed:41:d6:0e:eb:6c:5e:6c:9b:c3:9c:33:33:93:b5: 44:4d:5b:cb:fe:60:11:ba:e4:9e:a7:05:6a:dd:36:46:2d:9f: a8:1f:60:89:07:55:ad:e7:f4:b5:74:55:0d:06:a8:ff:bf:39: 3f:02:f1:36:b1:14:2d:fd:da:a3:b6:42:5d:4f:cc:80:92:82: f2:fe:5e:17:ad:37:40:6a:7c:d6:4f:70:b1:af:72:93:bf:2e: 86:a3:cb:98:8d:5e:96:6b:96:c6:f3:c4:5f:71:4e:80:bd:13: 11:40:d0:d7:fc:67:72:9e:da:09:9a:93:13:05:f4:d7:32:0a: 1e:e7:90:88:a6:4a:d1:f6:c9:5e:67:80:14:87:da:c8:7e:a6: 1b:db:8d:af:c7:60:d1:89:ce:67:61:90:65:c2:8f:3c:91:25: 70:0a:a5:74 -----BEGIN CERTIFICATE----- MIIFFjCCA/6gAwIBAgISAZjVg4K+MVPB7VVXaQM+APwCMA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKDZmNzVlNGU5NGI1Y2I3NDUxN2I3YjAxNTY4MDE1ZGE5ZTZl ZWNkYjYwHhcNMjUwODIzMDYwMDIyWhcNMjUwODI0MDYwMDIyWjAzMTEwLwYDVQQD EygyZTBkOGYyNzFkYjk2MzNiOGEyMTc2NzIxMmEzMDUwMTNhNDI0NmM2MIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAze2XhqFpFN0e5nzJhzixHBAAnFVw FUyjm17/ecv/TKwFSL7OwKBVs2WR584AO6vSwjdnxhXrIfePGfF0zb/SA9bKwL0/ qPq3B/B0IWPRbJVNT9E6tZqxYZhBABjObc6LKGmMG8GESpETXVroRik2w5JFgnA5 dDUD8bo462ENrIpdSVQ8l2dCdiUCoZsegRxFHRQBu+Aq9U25XIOFm5TdwRZpBbGr 6gx6xdD2DiZYE93Ngw9FsGB5oaTAKc7FA604GsXP7qAlIVPohaK+171em8/ARxcg RpmsDb2uviOumiyzOoc9ClPAU106BkJ7o9wEYsTVasRFhA0WEQinpg0JwQIDAQAB o4ICIjCCAh4wHQYDVR0OBBYEFC4NjycduWM7iiF2chKjBQE6QkbGMB8GA1UdIwQY MBaAFG915OlLXLdFF7ewFWgBXanm7s22MA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvYjNYazZVdGN0MFVYdDdBVmFBRmRxZWJ1emJZLmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC80Mi81N2EzNGYtZTMzYi00ZTE3LWJjMzIt NjY0NTc3MjRjMmQzLzEvYjNYazZVdGN0MFVYdDdBVmFBRmRxZWJ1emJZLm1mdDCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC80Mi81N2EzNGYtZTMzYi00ZTE3LWJjMzItNjY0NTc3MjRjMmQz LzEvYjNYazZVdGN0MFVYdDdBVmFBRmRxZWJ1emJZLmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEABzFJfoqV UgKi6prAy99DKg5gtOZW5y5lefgYG7h3ZnBsO1SJtytwhCmBgvnAznGiakNg/M4h Mze4pN1rss5yIWQglNm4a+U+zVYn7/YpL3sCV9gH8TC3s9nDLnG17UHWDutsXmyb w5wzM5O1RE1by/5gEbrknqcFat02Ri2fqB9giQdVref0tXRVDQao/785PwLxNrEU Lf3ao7ZCXU/MgJKC8v5eF603QGp81k9wsa9yk78uhqPLmI1elmuWxvPEX3FOgL0T EUDQ1/xncp7aCZqTEwX01zIKHueQiKZK0fbJXmeAFIfayH6mG9uNr8dg0YnOZ2GQ ZcKPPJElcAqldA== -----END CERTIFICATE-----Generated at Sat Aug 23 10:16:35 2025 by rpki-client