$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/4a/768fdb-d1b5-4bef-bcbd-4924fa000b7c/1/pjvMbSX3R2-7PsM_bbw-nurZIhI.mft File: pjvMbSX3R2-7PsM_bbw-nurZIhI.mft (raw, json) Hash identifier: CfhvY+Ygui1AI3ibVD94MmTa1L5u+OyeRAy1B8ffnHs= Subject key identifier: 88:25:81:77:C9:60:67:C8:98:A6:8B:01:99:32:A7:1E:85:FB:21:C7 Authority key identifier: A6:3B:CC:6D:25:F7:47:6F:BB:3E:C3:3F:6D:BC:3E:9E:EA:D9:22:12 Certificate issuer: /CN=a63bcc6d25f7476fbb3ec33f6dbc3e9eead92212 Certificate serial: 0198D8845A1731486C885BF917CB2CA0383B Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/pjvMbSX3R2-7PsM_bbw-nurZIhI.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/4a/768fdb-d1b5-4bef-bcbd-4924fa000b7c/1/pjvMbSX3R2-7PsM_bbw-nurZIhI.mft Manifest number: 09AE Signing time: Sat 23 Aug 2025 20:00:09 +0000 Manifest this update: Sat 23 Aug 2025 20:00:09 +0000 Manifest next update: Sun 24 Aug 2025 20:00:09 +0000 Files and hashes: 1: 5NFcVQOlS2SfRA9_dseHho-9-mc.roa (hash: swfI8aXvx2sxn3YOzxRnlDU7qvwOILHJAwX26Y3ztqI=) 2: 719PZLmeHqbujtRsKmvo5771XIo.roa (hash: bsKRuhzJIveVWiHQvKvv+dLt6oNf3d66tNY6ht9/C3A=) 3: 8WUQrdzKsEZUNzZ9k3E9ajfkd5s.roa (hash: Ixz0hSpVqJJ/oAfsncTGxOv3fHWBSaH9gBGjqTv8vpQ=) 4: 9da7QwJtgauRKNjGkYyDQLL8-O4.roa (hash: uHI0blR98Hb4EZoXh33vUeo4Adxn8MvZW3EEfG9DtPY=) 5: FHXWFrj4nreKJjXTfDKCc6Y16Is.roa (hash: PfuW04ELrwKUUeQD8qGy+/BFhBo8C5J05OWPOUMFx5w=) 6: Ho4pDAaaconFe5cZ7ygze1a44Xo.roa (hash: 1pC6hpICFpbgfqlZn7adq2AVfLKO5t0AC5KWofkjFSE=) 7: Kd5CFoG07kPDgqUGQpHj24zQka8.roa (hash: +2s4BraFjLJP4x9hMH6DgHfMWVkWCLxuz2cF8ghToGs=) 8: NYJYw1BTKJV56akoY5ZQRJna-MA.roa (hash: brwHoHz9mi1vg8NUkbqZqqePDdu1Ej44xmauCwQ9Qac=) 9: TLEdQvZiEPlpX35O8B6oknJfuyE.roa (hash: AdjCtV/JftiFEQtyk78ssQUWpqAhZBfMUWjoyo3BngI=) 10: fBfhsJw2d6Op2y70b533dv-T4j4.roa (hash: B8cZmEngTY2Ne9QwtzyJ6aeIrWSAdYH7Des5rTXKgP4=) 11: pjvMbSX3R2-7PsM_bbw-nurZIhI.crl (hash: 69mJjuMywcZb1NnZjK2gG+np/tVLc7snolZlghP6rto=) Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/4a/768fdb-d1b5-4bef-bcbd-4924fa000b7c/1/pjvMbSX3R2-7PsM_bbw-nurZIhI.crl rsync://rpki.ripe.net/repository/DEFAULT/4a/768fdb-d1b5-4bef-bcbd-4924fa000b7c/1/pjvMbSX3R2-7PsM_bbw-nurZIhI.mft rsync://rpki.ripe.net/repository/DEFAULT/pjvMbSX3R2-7PsM_bbw-nurZIhI.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Sun 24 Aug 2025 20:00:09 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:98:d8:84:5a:17:31:48:6c:88:5b:f9:17:cb:2c:a0:38:3b Signature Algorithm: sha256WithRSAEncryption Issuer: CN=a63bcc6d25f7476fbb3ec33f6dbc3e9eead92212 Validity Not Before: Aug 23 20:00:09 2025 GMT Not After : Aug 24 20:00:09 2025 GMT Subject: CN=88258177c96067c898a68b019932a71e85fb21c7 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:bc:b1:b2:a9:2f:b6:28:08:87:3c:ba:54:aa:67: 35:a9:30:cf:a3:a8:b5:6d:1e:e0:31:81:70:1e:d8: 04:81:3f:89:26:54:02:40:3d:52:e3:d9:42:6d:8b: 1e:d8:06:92:75:c4:47:a1:9a:86:29:fd:68:a0:6f: 74:76:41:37:ad:a1:33:2b:a4:5a:19:cf:e1:b1:32: d6:63:2e:a5:ca:e5:f6:67:c9:e9:6d:37:5f:b1:5f: df:cc:16:8b:03:98:3a:c0:f8:13:1b:94:b1:9b:85: 2e:5b:09:c3:b0:f0:b5:fb:6d:25:92:09:37:05:c5: 87:79:7e:76:dd:8c:74:25:c2:2a:f3:e1:f9:b8:db: 68:97:f9:60:8c:07:e5:10:07:3c:2f:4f:39:fd:b4: da:d7:0f:3e:a0:ee:ae:30:6b:29:92:82:65:de:18: 5c:03:f1:47:2d:5e:81:26:c4:6c:fe:37:e9:6f:8b: 7f:a3:56:ac:56:11:7f:6e:23:4b:51:86:82:58:71: 1c:87:d6:a3:62:58:a8:f0:b6:e0:7a:80:44:3a:9e: f8:39:8c:d1:5a:44:00:91:e5:06:51:ab:9a:6e:57: 70:99:0d:a3:b0:a0:7b:1a:8a:18:36:f5:1c:9e:64: bf:b1:9d:75:17:56:51:fc:3c:59:6f:c7:1b:65:c1: 26:e1 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 88:25:81:77:C9:60:67:C8:98:A6:8B:01:99:32:A7:1E:85:FB:21:C7 X509v3 Authority Key Identifier: keyid:A6:3B:CC:6D:25:F7:47:6F:BB:3E:C3:3F:6D:BC:3E:9E:EA:D9:22:12 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/pjvMbSX3R2-7PsM_bbw-nurZIhI.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/4a/768fdb-d1b5-4bef-bcbd-4924fa000b7c/1/pjvMbSX3R2-7PsM_bbw-nurZIhI.mft X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/4a/768fdb-d1b5-4bef-bcbd-4924fa000b7c/1/pjvMbSX3R2-7PsM_bbw-nurZIhI.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 2a:36:77:bc:d6:6e:1e:80:34:1a:c5:ae:76:d4:6b:03:3f:49: 70:b9:f1:b4:5a:6a:86:ca:2f:cf:fe:ee:50:5a:57:8d:ee:5e: de:82:f6:2a:58:a3:c4:67:cd:6a:dd:f4:eb:24:bc:a9:ab:c3: 74:a9:99:d2:6d:45:4b:1a:c1:e1:21:42:c1:a0:2e:54:14:25: 82:c4:c8:a1:df:10:69:85:33:c1:1f:89:30:9d:e3:b8:65:cb: 31:ee:54:e2:25:49:0d:11:73:d1:fa:ae:43:48:a2:1b:01:b7: e0:3d:7c:54:29:dc:c1:1b:a7:3e:53:ee:3d:e8:40:b3:09:c4: 9f:2e:be:f4:e7:cd:a8:c5:81:0b:bc:4e:eb:b1:ee:df:7c:15: 4b:02:56:dd:53:85:33:75:45:48:fe:13:85:27:ae:66:99:1d: 2a:a6:83:83:1a:f6:70:f7:a0:a5:b1:fc:38:62:40:5e:19:a9: 9b:2f:3b:fa:37:4c:78:cd:d6:f8:e3:da:77:16:28:b4:df:49: ed:c6:6a:46:7f:a1:16:03:8a:84:ea:31:d6:a8:1f:27:39:52: 06:26:eb:13:2a:88:31:2c:03:38:f7:76:e8:b1:9f:85:bc:0b: 43:32:81:72:ea:b2:4d:4e:79:d7:da:ea:5e:83:af:08:3d:ee: c4:e7:cd:af -----BEGIN CERTIFICATE----- MIIFFjCCA/6gAwIBAgISAZjYhFoXMUhsiFv5F8ssoDg7MA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKGE2M2JjYzZkMjVmNzQ3NmZiYjNlYzMzZjZkYmMzZTllZWFk OTIyMTIwHhcNMjUwODIzMjAwMDA5WhcNMjUwODI0MjAwMDA5WjAzMTEwLwYDVQQD Eyg4ODI1ODE3N2M5NjA2N2M4OThhNjhiMDE5OTMyYTcxZTg1ZmIyMWM3MIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAvLGyqS+2KAiHPLpUqmc1qTDPo6i1 bR7gMYFwHtgEgT+JJlQCQD1S49lCbYse2AaSdcRHoZqGKf1ooG90dkE3raEzK6Ra Gc/hsTLWYy6lyuX2Z8npbTdfsV/fzBaLA5g6wPgTG5Sxm4UuWwnDsPC1+20lkgk3 BcWHeX523Yx0JcIq8+H5uNtol/lgjAflEAc8L085/bTa1w8+oO6uMGspkoJl3hhc A/FHLV6BJsRs/jfpb4t/o1asVhF/biNLUYaCWHEch9ajYlio8LbgeoBEOp74OYzR WkQAkeUGUauabldwmQ2jsKB7GooYNvUcnmS/sZ11F1ZR/DxZb8cbZcEm4QIDAQAB o4ICIjCCAh4wHQYDVR0OBBYEFIglgXfJYGfImKaLAZkypx6F+yHHMB8GA1UdIwQY MBaAFKY7zG0l90dvuz7DP228Pp7q2SISMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvcGp2TWJTWDNSMi03UHNNX2Jidy1udXJaSWhJLmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC80YS83NjhmZGItZDFiNS00YmVmLWJjYmQt NDkyNGZhMDAwYjdjLzEvcGp2TWJTWDNSMi03UHNNX2Jidy1udXJaSWhJLm1mdDCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC80YS83NjhmZGItZDFiNS00YmVmLWJjYmQtNDkyNGZhMDAwYjdj LzEvcGp2TWJTWDNSMi03UHNNX2Jidy1udXJaSWhJLmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAKjZ3vNZu HoA0GsWudtRrAz9JcLnxtFpqhsovz/7uUFpXje5e3oL2KlijxGfNat306yS8qavD dKmZ0m1FSxrB4SFCwaAuVBQlgsTIod8QaYUzwR+JMJ3juGXLMe5U4iVJDRFz0fqu Q0iiGwG34D18VCncwRunPlPuPehAswnEny6+9OfNqMWBC7xO67Hu33wVSwJW3VOF M3VFSP4ThSeuZpkdKqaDgxr2cPegpbH8OGJAXhmpmy87+jdMeM3W+OPadxYotN9J 7cZqRn+hFgOKhOox1qgfJzlSBibrEyqIMSwDOPd26LGfhbwLQzKBcuqyTU5519rq XoOvCD3uxOfNrw== -----END CERTIFICATE-----Generated at Sun Aug 24 04:22:00 2025 by rpki-client