$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/4b/f8a5d1-260a-46a4-a8e4-283fe54a6f2f/1/pM6WQKPvL-oZN0rY-Z9CPXqnx2s.mft File: pM6WQKPvL-oZN0rY-Z9CPXqnx2s.mft (raw, json) Hash identifier: N+JMsFVmj6V4X39YzfT9wMOixJU8cn6bMNhOAEo+BdM= Subject key identifier: A2:D1:7B:25:FB:11:B2:9A:46:E8:45:3F:94:3C:BB:B1:4E:07:DB:52 Authority key identifier: A4:CE:96:40:A3:EF:2F:EA:19:37:4A:D8:F9:9F:42:3D:7A:A7:C7:6B Certificate issuer: /CN=a4ce9640a3ef2fea19374ad8f99f423d7aa7c76b Certificate serial: 0198D54E5329DCE1C26337B160198A636156 Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/pM6WQKPvL-oZN0rY-Z9CPXqnx2s.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/4b/f8a5d1-260a-46a4-a8e4-283fe54a6f2f/1/pM6WQKPvL-oZN0rY-Z9CPXqnx2s.mft Manifest number: 1323 Signing time: Sat 23 Aug 2025 05:02:16 +0000 Manifest this update: Sat 23 Aug 2025 05:02:16 +0000 Manifest next update: Sun 24 Aug 2025 05:02:16 +0000 Files and hashes: 1: 3MQ1Zm2jB8qgOjCAc_a0v-3nM_o.roa (hash: T4pVm2mU2N5el1g2HcnlglhN57e23NLVS7ny7NzSBL0=) 2: 4SEUaFHVUAL3abRJwnhpLcw21dk.roa (hash: Nz767QGxnFH79p/BW/8MOsNM3RviNN1Kvy4GgZgMyGs=) 3: FCFfx3p7hHCFHlKPZobVJyLJ5MI.roa (hash: 6JV0xEEqdwivRbZdMI4zo4Wpa9PWQK4gKoasAD6odWU=) 4: IYmUJK1vApyWT119wps-ukf2n9E.roa (hash: w1dWdBHD/FLi3tR98pk3iJlbhc1nR22X1Pwn/kqhO/0=) 5: KcuMI0SBvL5BPuYJm6BH3vJKAQ0.roa (hash: s0e2eWUrZQW14pJCqfjgMZ+ViTFNuU9345bizVg0sKY=) 6: MSrSUIwYGP5OzMFaA9dwr3mO4jY.roa (hash: OHzV5kP6uhO1eFoIB7t+WKfJjHs90j+a/iXQqOXuv30=) 7: N7C2a3H5ML3ydyNI5IDIoJ6m-6U.roa (hash: FJm0Nzs6ME/1+LojcQZMLdUu/cBqlxKE16Bs75fFFLw=) 8: Nf1rHETWcCnhWhR_uM_9B2P3jb8.roa (hash: pBdKIUwSvvQqLJChVbTbSEDRXa+Ll262+ax9ivbZD0o=) 9: OFTgwkdKspRJ_TvSv6vgx_ckdLQ.roa (hash: b7UPAbBCKcuRworqLaxy25e9Gx9nfc4PaZocWvp2h84=) 10: RzvDJbgMFFQ3RXZZowAtkGpvaYQ.roa (hash: pXgfU5zLGpdaPENK8y9IOVL5xtiIt9Fk8RRzx12JQUw=) 11: WToItz8al9Sw1IRtEOUm1ku1TzY.roa (hash: cD3Nf3okXGtPiYuFOkPnzfMJHgIYmW52aVmaOwxOEN0=) 12: dcAEUZ_ghRVpaUYo3WWA9zUPe9U.roa (hash: AsvsdGamYH2cSArWOQT5cvLOD/2t8gp5MEnt/aWjLII=) 13: m-VIT0LjtD9EzoMprh8uOjUFAXU.roa (hash: uPdvifi2Mse38dnV2nTzHEKQ8cRZMoEcUuAqy+pbA4Y=) 14: mIeBpS2n4kCr0BZmoszWNjvAQck.roa (hash: sgSJy89RWLefTDlUw+TWGE3cezazErlzXNR2nAjs6uU=) 15: pM6WQKPvL-oZN0rY-Z9CPXqnx2s.crl (hash: o0WoKZH1JrrJwfZuaV0P1OkUCRHbIbxFaum+vEECDtk=) 16: sVCQlL9zy4ci5k4im_qh1UgQSao.roa (hash: tXiv/i4AXQDYnVQqrjLO82vwz0zcYS5lORUFrc1ytqg=) Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/4b/f8a5d1-260a-46a4-a8e4-283fe54a6f2f/1/pM6WQKPvL-oZN0rY-Z9CPXqnx2s.crl rsync://rpki.ripe.net/repository/DEFAULT/4b/f8a5d1-260a-46a4-a8e4-283fe54a6f2f/1/pM6WQKPvL-oZN0rY-Z9CPXqnx2s.mft rsync://rpki.ripe.net/repository/DEFAULT/pM6WQKPvL-oZN0rY-Z9CPXqnx2s.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Sun 24 Aug 2025 05:01:29 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:98:d5:4e:53:29:dc:e1:c2:63:37:b1:60:19:8a:63:61:56 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=a4ce9640a3ef2fea19374ad8f99f423d7aa7c76b Validity Not Before: Aug 23 05:02:16 2025 GMT Not After : Aug 24 05:02:16 2025 GMT Subject: CN=a2d17b25fb11b29a46e8453f943cbbb14e07db52 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:9c:90:4f:ee:0d:a9:89:1e:ac:23:9b:73:cf:14: b5:3e:3f:e3:e8:6f:13:4c:2d:41:3b:03:b8:ef:94: 25:60:8f:02:63:99:5d:90:15:ee:c3:15:f3:04:d9: af:7c:00:26:82:54:af:0f:c7:8e:e3:91:ea:f7:b8: 97:2a:63:8a:86:95:2f:ba:93:6f:de:8d:e7:a2:7d: 53:f8:09:03:16:2f:d9:74:a5:b0:52:2c:6f:32:3b: 37:d7:61:8c:1a:29:f9:bb:d6:ba:38:56:38:29:39: 86:89:c2:49:1e:1b:e5:38:65:37:01:cc:27:53:d2: a7:68:8d:99:50:09:03:18:60:a5:10:f7:1a:f0:7c: 04:30:d2:2d:cb:5b:0c:aa:ec:88:ec:af:7e:e3:a7: be:af:8a:09:dd:1e:d7:e4:2e:fe:c0:29:05:b2:df: 23:18:01:5e:6d:24:c8:56:c1:7e:48:ab:80:68:da: f4:d4:49:a0:7b:90:0f:5f:d8:eb:34:0f:60:e1:f6: c2:3c:ba:d8:13:d1:bd:2d:79:90:4c:fa:4a:ee:ab: ef:18:43:0b:75:2e:37:09:60:b2:6c:3e:aa:7e:63: e2:23:d6:57:78:5a:ad:53:5e:38:9e:87:24:28:5c: 3b:e6:8e:f8:da:80:24:ef:d7:31:ea:55:02:f4:af: 8c:a3 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: A2:D1:7B:25:FB:11:B2:9A:46:E8:45:3F:94:3C:BB:B1:4E:07:DB:52 X509v3 Authority Key Identifier: keyid:A4:CE:96:40:A3:EF:2F:EA:19:37:4A:D8:F9:9F:42:3D:7A:A7:C7:6B X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/pM6WQKPvL-oZN0rY-Z9CPXqnx2s.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/4b/f8a5d1-260a-46a4-a8e4-283fe54a6f2f/1/pM6WQKPvL-oZN0rY-Z9CPXqnx2s.mft X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/4b/f8a5d1-260a-46a4-a8e4-283fe54a6f2f/1/pM6WQKPvL-oZN0rY-Z9CPXqnx2s.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption a0:53:b8:7d:05:14:b3:ae:ff:ce:92:2c:54:62:fb:b1:73:c0: 5b:54:a9:36:bf:c5:32:fd:aa:a6:ed:4e:80:44:d3:dd:ce:d6: fc:d0:4c:4a:b5:d6:dc:47:7a:c7:e5:8a:b1:95:20:11:ce:69: 99:b3:55:14:ce:56:aa:2b:29:39:ec:7d:af:3f:e0:ae:d4:96: f3:0d:53:b4:9f:bb:04:59:d2:16:63:6f:c8:08:1a:2d:08:77: 3b:dd:23:e9:9f:5f:96:63:a7:73:b9:15:3c:c8:e9:6b:b9:ea: 95:e3:a7:96:c7:58:30:99:b4:dd:67:a4:74:b3:91:82:cc:63: 06:28:ed:41:5d:df:67:38:ce:ef:b6:ee:4d:2d:b3:37:84:30: 72:52:76:59:4c:52:c8:db:d1:eb:37:c8:b0:1e:aa:66:0a:50: 41:ff:2b:a9:35:f9:fd:04:f3:9d:40:c6:76:93:8f:19:c3:b8: b9:3e:99:b1:04:18:80:cc:61:2c:4b:80:cb:d6:5b:da:08:86: d5:b7:d2:fc:27:40:35:fe:14:65:14:ed:45:a9:b9:95:a3:9b: 73:08:b0:d6:04:1c:74:b3:b1:7d:59:e6:6f:99:a6:e1:e6:f5: 35:ba:a5:d0:aa:81:60:e5:e2:d8:86:0c:71:10:73:a4:ce:e6: b1:70:5d:c8 -----BEGIN CERTIFICATE----- MIIFFjCCA/6gAwIBAgISAZjVTlMp3OHCYzexYBmKY2FWMA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKGE0Y2U5NjQwYTNlZjJmZWExOTM3NGFkOGY5OWY0MjNkN2Fh N2M3NmIwHhcNMjUwODIzMDUwMjE2WhcNMjUwODI0MDUwMjE2WjAzMTEwLwYDVQQD EyhhMmQxN2IyNWZiMTFiMjlhNDZlODQ1M2Y5NDNjYmJiMTRlMDdkYjUyMIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAnJBP7g2piR6sI5tzzxS1Pj/j6G8T TC1BOwO475QlYI8CY5ldkBXuwxXzBNmvfAAmglSvD8eO45Hq97iXKmOKhpUvupNv 3o3non1T+AkDFi/ZdKWwUixvMjs312GMGin5u9a6OFY4KTmGicJJHhvlOGU3Acwn U9KnaI2ZUAkDGGClEPca8HwEMNIty1sMquyI7K9+46e+r4oJ3R7X5C7+wCkFst8j GAFebSTIVsF+SKuAaNr01Emge5APX9jrNA9g4fbCPLrYE9G9LXmQTPpK7qvvGEML dS43CWCybD6qfmPiI9ZXeFqtU144nockKFw75o742oAk79cx6lUC9K+MowIDAQAB o4ICIjCCAh4wHQYDVR0OBBYEFKLReyX7EbKaRuhFP5Q8u7FOB9tSMB8GA1UdIwQY MBaAFKTOlkCj7y/qGTdK2PmfQj16p8drMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvcE02V1FLUHZMLW9aTjByWS1aOUNQWHFueDJzLmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC80Yi9mOGE1ZDEtMjYwYS00NmE0LWE4ZTQt MjgzZmU1NGE2ZjJmLzEvcE02V1FLUHZMLW9aTjByWS1aOUNQWHFueDJzLm1mdDCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC80Yi9mOGE1ZDEtMjYwYS00NmE0LWE4ZTQtMjgzZmU1NGE2ZjJm LzEvcE02V1FLUHZMLW9aTjByWS1aOUNQWHFueDJzLmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAoFO4fQUU s67/zpIsVGL7sXPAW1SpNr/FMv2qpu1OgETT3c7W/NBMSrXW3Ed6x+WKsZUgEc5p mbNVFM5WqispOex9rz/grtSW8w1TtJ+7BFnSFmNvyAgaLQh3O90j6Z9flmOnc7kV PMjpa7nqleOnlsdYMJm03WekdLORgsxjBijtQV3fZzjO77buTS2zN4QwclJ2WUxS yNvR6zfIsB6qZgpQQf8rqTX5/QTznUDGdpOPGcO4uT6ZsQQYgMxhLEuAy9Zb2giG 1bfS/CdANf4UZRTtRam5laObcwiw1gQcdLOxfVnmb5mm4eb1Nbql0KqBYOXi2IYM cRBzpM7msXBdyA== -----END CERTIFICATE-----Generated at Sat Aug 23 15:23:27 2025 by rpki-client