$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/56/efb8ee-c5c4-4467-a0cc-88a3c41faee2/1/q4xsWLYH_yOucXWmFoLHVIDx4hQ.mft File: q4xsWLYH_yOucXWmFoLHVIDx4hQ.mft (raw, json) Hash identifier: erDS/xCHebwbxFbx8f5CtVJLdbRzP9WhspP9O2CIlzM= Subject key identifier: 91:E0:9B:6C:B9:BE:96:50:F9:99:AA:3B:21:74:3C:C5:47:85:49:83 Authority key identifier: AB:8C:6C:58:B6:07:FF:23:AE:71:75:A6:16:82:C7:54:80:F1:E2:14 Certificate issuer: /CN=ab8c6c58b607ff23ae7175a61682c75480f1e214 Certificate serial: 0198D515FCC13BE5A27E4D77663C37493DCB Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/q4xsWLYH_yOucXWmFoLHVIDx4hQ.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/56/efb8ee-c5c4-4467-a0cc-88a3c41faee2/1/q4xsWLYH_yOucXWmFoLHVIDx4hQ.mft Manifest number: 1357 Signing time: Sat 23 Aug 2025 04:00:44 +0000 Manifest this update: Sat 23 Aug 2025 04:00:44 +0000 Manifest next update: Sun 24 Aug 2025 04:00:44 +0000 Files and hashes: 1: Ay4048oOGOLd8W5gLDDEAyTF8CE.roa (hash: NXsQAFwkRa/GC3TqDmqhOZeN3qNn6FtRxq658PxTeSo=) 2: EbvXq4EM8hAgSkGiFLRqaY-G0EU.roa (hash: zajtrIP7Ewp9NW7IyVXFEVPjCtiQ0d/m581bkbpxnPI=) 3: FDdC23f-QMX8x6wvwKf2MaftED4.roa (hash: h9m2qsiGkrW+4l59GNkStG6h59aEcnuwE/KLJqr7Cgk=) 4: FHjjaCL7QaSxR7Yf_uDdz3cQhuA.roa (hash: Brv6WLVF3QRBSayqPg/J2H5JWwF8VVYLp0UA1sg3bSA=) 5: GanbvvtqSZENbmIdtfbYun4fuOo.roa (hash: a9IMBYKg4BFPWfGPrEQ1nIFRtJtRWqf5txg0Sr68Odk=) 6: HeWtxOQwTN1uf0xfcq_bZw71XkA.roa (hash: Q3cAdwW00NmkMkDNixCTZhHEBzWnPkDYpvdoFVzzSP4=) 7: LPXBlOJ83SUZetduCUkP3lDmZb8.roa (hash: Xahh/YPbtY5jZR0nw8MkUj4SXBdb+qHLE/N+aHg/zLg=) 8: MBaWylrBVCifHO75NhqX3hwA3gI.roa (hash: rBGbEwve3PVfVzEgeSB6FNde2V4Ej5oriQNU2JdSej4=) 9: TNZjVfkoPHNGWuPROUhTApW2tS4.roa (hash: HeS2ECV8xSlPFS6ZfzpvaJlw7gUvm2q+HDJoDgc0tag=) 10: VEkecCYWX-3eJbHzfXRPqIguSrU.roa (hash: y+HxKa51lXccWcF8YAwZEEpBtkvi4YQc9qp84HUBYjU=) 11: bJOubptyDCUoksZUBTEQqGVmM9c.roa (hash: 5AtXcXlAprhgr08DWqOvaQo1UWB8kRpiaZt7z80DD44=) 12: gY7ZGvPzoH-CX9GeUSTzaqQXovY.roa (hash: 2Y8QhFV1RfXgwz+9zPSSImXIf02O6QwrVpawBy0GOpo=) 13: j5_CqMmkt1DG3j-liA9ojTF-2zk.roa (hash: 9/Skv7dfWWCpzLOyfdQVA/mAMx0mIp9bCVvdrEzkMLY=) 14: ktsWW1aNW0Ka2r1y8DatRgdAjnQ.roa (hash: B9kQb2mez0Ho2ienkmxwkosyQ4vYDt/9bZEi638La00=) 15: pWYX2715Q-5BkbFDg0Sh9v9WvPs.roa (hash: TgnvC3W5sZgU6RXpmwyf5MNyrmOzs/Lefze2pwDj6yc=) 16: pdqJCRLiJ7NUW64tDbwue3bHfpU.roa (hash: ljeRCKKswXVLuB5MoRwzN0UCpzG2Fbx/CHdpqjKSohM=) 17: q4xsWLYH_yOucXWmFoLHVIDx4hQ.crl (hash: G8KvOU1kcX/CtyOcDkXyj5EhdIFtlqhajNN6NIzW39o=) 18: tuLu-KxTyWECQsa7jsPHvbBC7-c.roa (hash: sICitbN0hdJLsCXmDSmpQhmRlzSQyxGdXNXHPCYmLv0=) Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/56/efb8ee-c5c4-4467-a0cc-88a3c41faee2/1/q4xsWLYH_yOucXWmFoLHVIDx4hQ.crl rsync://rpki.ripe.net/repository/DEFAULT/56/efb8ee-c5c4-4467-a0cc-88a3c41faee2/1/q4xsWLYH_yOucXWmFoLHVIDx4hQ.mft rsync://rpki.ripe.net/repository/DEFAULT/q4xsWLYH_yOucXWmFoLHVIDx4hQ.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Sun 24 Aug 2025 00:37:04 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:98:d5:15:fc:c1:3b:e5:a2:7e:4d:77:66:3c:37:49:3d:cb Signature Algorithm: sha256WithRSAEncryption Issuer: CN=ab8c6c58b607ff23ae7175a61682c75480f1e214 Validity Not Before: Aug 23 04:00:44 2025 GMT Not After : Aug 24 04:00:44 2025 GMT Subject: CN=91e09b6cb9be9650f999aa3b21743cc547854983 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:a3:ba:3f:e2:ca:84:17:7a:b2:b2:b7:d8:91:54: d1:e6:29:51:31:1f:31:4c:4e:58:29:0f:cb:19:3e: 15:89:e3:b5:fc:94:9d:63:80:63:88:90:47:c5:b7: 7c:92:12:11:bb:1e:bf:8e:54:87:89:a1:9e:32:d8: 51:41:5c:3f:7b:1b:9b:2b:0e:4f:a8:c3:f1:f5:fa: 6a:6e:a3:2b:ba:cf:8d:23:9c:e0:83:69:b4:53:26: 1b:45:64:07:cf:b8:d9:e0:ee:d9:02:69:01:15:85: a2:45:74:0b:58:9d:fb:39:9f:c2:de:b3:b8:5f:80: ce:a3:c6:f2:c5:9e:ae:59:09:6b:1b:a9:36:d2:7c: 23:f6:35:8c:75:c8:2a:c9:4a:34:c9:8b:ba:cb:5f: 95:4c:bc:38:ec:8c:8b:30:4e:61:7e:f9:4a:a0:9d: c0:90:24:43:65:43:d4:cc:d4:e1:e9:5f:4d:0f:87: b2:16:09:64:c2:b0:78:c1:7e:71:47:70:2f:c8:7e: 48:ba:f9:29:d0:aa:21:9c:a5:e6:8d:e1:98:6e:ee: 66:75:f6:92:67:c6:f1:38:5f:50:aa:aa:dc:84:09: d3:51:d8:9b:00:e7:fd:54:40:82:1e:d6:6a:5e:83: a6:eb:85:9a:b2:88:cc:42:0b:62:cb:7d:da:6a:74: ff:f9 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 91:E0:9B:6C:B9:BE:96:50:F9:99:AA:3B:21:74:3C:C5:47:85:49:83 X509v3 Authority Key Identifier: keyid:AB:8C:6C:58:B6:07:FF:23:AE:71:75:A6:16:82:C7:54:80:F1:E2:14 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/q4xsWLYH_yOucXWmFoLHVIDx4hQ.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/56/efb8ee-c5c4-4467-a0cc-88a3c41faee2/1/q4xsWLYH_yOucXWmFoLHVIDx4hQ.mft X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/56/efb8ee-c5c4-4467-a0cc-88a3c41faee2/1/q4xsWLYH_yOucXWmFoLHVIDx4hQ.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 01:d9:02:13:3a:4a:85:08:8f:b1:be:3a:f6:8e:8f:7b:02:e0: 4f:a6:fd:2c:b7:98:3d:48:3c:7e:5c:76:f9:f9:f1:33:a6:22: e5:1b:3c:d6:9a:9c:3f:9d:7a:d0:29:25:1c:8a:c7:94:69:b2: 1b:c7:a3:32:b3:24:0f:43:b6:83:a2:8a:cd:61:00:94:c1:35: c7:b0:b2:a2:b9:be:ce:2b:d3:55:0a:7e:de:69:01:fa:70:e8: d0:5a:68:bb:58:e8:ae:5d:9c:a8:56:fa:f9:f1:02:62:f9:d0: 24:db:cf:c5:a6:11:3a:27:18:1a:3c:fd:84:e9:0e:6e:59:b8: 7d:d5:9e:1a:7f:2f:01:19:b6:ea:ef:5a:f9:57:e8:43:e0:b4: 9d:ce:43:1c:af:1f:f6:4e:5e:b2:68:19:17:67:48:89:75:1f: 7b:ab:1f:42:ec:3a:83:ff:cb:ac:3a:c4:d4:1a:c9:ec:28:6f: dc:02:d6:11:97:b1:2f:34:46:d2:1f:1d:7a:9c:0a:18:97:bf: 76:69:27:04:b3:99:75:f0:c2:82:a2:ed:2b:aa:c3:5e:3c:29: 7a:01:5f:06:6b:c2:c9:f9:e5:a5:d4:66:08:92:84:02:6a:e8: 84:b8:ef:f8:44:0e:1a:a1:63:72:f0:25:7e:11:cd:b3:7b:8e: 00:9b:34:89 -----BEGIN CERTIFICATE----- MIIFFjCCA/6gAwIBAgISAZjVFfzBO+Wifk13Zjw3ST3LMA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKGFiOGM2YzU4YjYwN2ZmMjNhZTcxNzVhNjE2ODJjNzU0ODBm MWUyMTQwHhcNMjUwODIzMDQwMDQ0WhcNMjUwODI0MDQwMDQ0WjAzMTEwLwYDVQQD Eyg5MWUwOWI2Y2I5YmU5NjUwZjk5OWFhM2IyMTc0M2NjNTQ3ODU0OTgzMIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAo7o/4sqEF3qysrfYkVTR5ilRMR8x TE5YKQ/LGT4VieO1/JSdY4BjiJBHxbd8khIRux6/jlSHiaGeMthRQVw/exubKw5P qMPx9fpqbqMrus+NI5zgg2m0UyYbRWQHz7jZ4O7ZAmkBFYWiRXQLWJ37OZ/C3rO4 X4DOo8byxZ6uWQlrG6k20nwj9jWMdcgqyUo0yYu6y1+VTLw47IyLME5hfvlKoJ3A kCRDZUPUzNTh6V9ND4eyFglkwrB4wX5xR3AvyH5Iuvkp0KohnKXmjeGYbu5mdfaS Z8bxOF9QqqrchAnTUdibAOf9VECCHtZqXoOm64WasojMQgtiy33aanT/+QIDAQAB o4ICIjCCAh4wHQYDVR0OBBYEFJHgm2y5vpZQ+ZmqOyF0PMVHhUmDMB8GA1UdIwQY MBaAFKuMbFi2B/8jrnF1phaCx1SA8eIUMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvcTR4c1dMWUhfeU91Y1hXbUZvTEhWSUR4NGhRLmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC81Ni9lZmI4ZWUtYzVjNC00NDY3LWEwY2Mt ODhhM2M0MWZhZWUyLzEvcTR4c1dMWUhfeU91Y1hXbUZvTEhWSUR4NGhRLm1mdDCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC81Ni9lZmI4ZWUtYzVjNC00NDY3LWEwY2MtODhhM2M0MWZhZWUy LzEvcTR4c1dMWUhfeU91Y1hXbUZvTEhWSUR4NGhRLmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAAdkCEzpK hQiPsb469o6PewLgT6b9LLeYPUg8flx2+fnxM6Yi5Rs81pqcP5160CklHIrHlGmy G8ejMrMkD0O2g6KKzWEAlME1x7Cyorm+zivTVQp+3mkB+nDo0Fpou1jorl2cqFb6 +fECYvnQJNvPxaYROicYGjz9hOkOblm4fdWeGn8vARm26u9a+VfoQ+C0nc5DHK8f 9k5esmgZF2dIiXUfe6sfQuw6g//LrDrE1BrJ7Chv3ALWEZexLzRG0h8depwKGJe/ dmknBLOZdfDCgqLtK6rDXjwpegFfBmvCyfnlpdRmCJKEAmrohLjv+EQOGqFjcvAl fhHNs3uOAJs0iQ== -----END CERTIFICATE-----Generated at Sat Aug 23 08:23:21 2025 by rpki-client