$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/59/86297a-d219-4567-9171-421e6bc7e2e8/1/4tW7QBGA5V9cFl1HkI3_T-KaDYY.mft File: 4tW7QBGA5V9cFl1HkI3_T-KaDYY.mft (raw, json) Hash identifier: ho1IDosyxojNLmdYO5vRV2qKU6pRZOChv+v3kzoYozo= Subject key identifier: FA:45:C9:E7:BD:39:33:37:28:80:26:00:ED:19:3B:99:70:69:FB:DF Authority key identifier: E2:D5:BB:40:11:80:E5:5F:5C:16:5D:47:90:8D:FF:4F:E2:9A:0D:86 Certificate issuer: /CN=e2d5bb401180e55f5c165d47908dff4fe29a0d86 Certificate serial: 0197B6A22AA788E820DF2C61B7179666304F Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/4tW7QBGA5V9cFl1HkI3_T-KaDYY.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/59/86297a-d219-4567-9171-421e6bc7e2e8/1/4tW7QBGA5V9cFl1HkI3_T-KaDYY.mft Manifest number: 097D Signing time: Sat 28 Jun 2025 13:02:50 +0000 Manifest this update: Sat 28 Jun 2025 13:02:50 +0000 Manifest next update: Sun 29 Jun 2025 13:02:50 +0000 Files and hashes: 1: 4tW7QBGA5V9cFl1HkI3_T-KaDYY.crl (hash: GjY6h1K8dGdoAJq1n8PwmH/odJgFHj1YIq2WcNMQ0RM=) 2: 5DnR59g0uDhlCeBnwu0_1-KUFeg.roa (hash: jAnqTMpaItG0GhBN/hjRVmkf1KAEsae1ohPc+vQL06Q=) 3: 8PxMQW8r6gNYx6cR3PMs2yrl5ew.roa (hash: GqHXtanVRqdO2QW4vR+6/WyxTi1dfx0DVX7E+ZRdtvU=) 4: DamwXsWqw-pNiIY7Y9gzUoz46SI.roa (hash: 1+3IDizWDcTViB++VKv1xbkAGlHPeiHczREvYVy1BEk=) 5: Dt-A1UKjqPAgnYkiz5oOF3KPif4.roa (hash: jW2Q0BDw92rsfiM8k0/wQ6GD7kmaBburgq62TnGU9aA=) 6: Kn_2eJGh3EcHDuB-OJ8l3E2w8hE.roa (hash: kQ83aGfbv2Iq481MBuTu7pjTHv3tFZPurvWLoY3PlVA=) 7: LAI14FhpOzU-rcfdJ6U9PG061Ec.roa (hash: avAt1L3mlV+2vo4CiZ8YrFs2RggnJV+Qj20+5tYBmII=) 8: LbrW0uU2svuMgCfEegCflkeiJNI.roa (hash: xicAKV+b+Rrkk93cgla0jRgvKkmUQRZcuO0wo+Vll1I=) 9: NH99_Parr6i87GqyKHm971OOvUA.roa (hash: ejRR3IxtFm+BdQE6JvQ7L16gCRkI9epYBVSx8aKoP8A=) 10: OOSnnzJCzwuc2Oreq9KoON2OJy4.roa (hash: 8ZWXugZrnN7Xp4F6Xn87sRk2TjB10Ze3ouSEvaxFbzM=) 11: Q820-mh3gTLx3r5yd43BKUrxxh8.roa (hash: koyxE8n/nkkyiE6UfVNmxydTa2BJ9VFKJe/4B3gcMPg=) 12: QRvqjOpbm1bsYYXVNYJCdsL2K9c.roa (hash: gbsaPykuhKfA/rXSneeYnuzsVzL0kGuorXD/sYaSjK8=) 13: STuoLQHHZBzK_Ldaz7xkxpSaBqY.roa (hash: ZzI62CUIffeXt6hPl33Fk7eNbx5SV7+e0g7j7C8NgSI=) 14: dPORcLPPy7vGPpK7YO0ZCdg3SLc.roa (hash: M8CeF8WcmPBFysMRz6rWQ9roOEfHfMbz/n6BV0QqyTM=) 15: ea2ONoTt3SySSjctEUa2mvxPlk0.roa (hash: aHDpbhU3poNDj7sgG29oLTuaOz779tw43LjPP8jq2GU=) 16: gPbim5HyI5_coGPfod5GORXHFJM.roa (hash: WqgzuFgOy6ZgR1XpLM/1W9uFliVDMHByx6+nWg3yG7Q=) 17: hV1kQUu8Pdq1hwLjpsPqwMqfj_U.roa (hash: N1eliwWO7Qtxwve5drBayNA7B9DMRJgSbxRNUu9dsfY=) 18: o1MTa_u6ng7YChqgqqMpF_EDHDo.roa (hash: medB94fc43SFhZiIXkS8L2CLIYdmUFnxbXmgm5u0RKM=) 19: pA-Fq_J6A5SNZJF98Uix7eSPlIg.roa (hash: 7lwAf6YG9+AyLk5HAGkoZYURCw6qLQhN2f3/kdNJO0w=) 20: v5F31cV6XBvE5243s4oHQBqQQDM.roa (hash: +2WzyiNTSNMZQ/+SFfQYAFWtFS/6Ce5PKrWiHjJlqng=) 21: xbbY79UbNbRYIgyXeBU4cy_zCmI.roa (hash: c0Ac2LrLggmLnLPt492ZZRPubOLwoYV4rcik5rRDaO0=) 22: zw1raLzJkOzuLdWVP5BWRU84p2o.roa (hash: XIzDwzNdh9cyZCy+DakAR8zEkFIdZM7IKTxs2TBKsWM=) Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/59/86297a-d219-4567-9171-421e6bc7e2e8/1/4tW7QBGA5V9cFl1HkI3_T-KaDYY.crl rsync://rpki.ripe.net/repository/DEFAULT/59/86297a-d219-4567-9171-421e6bc7e2e8/1/4tW7QBGA5V9cFl1HkI3_T-KaDYY.mft rsync://rpki.ripe.net/repository/DEFAULT/4tW7QBGA5V9cFl1HkI3_T-KaDYY.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Sun 29 Jun 2025 13:02:50 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:97:b6:a2:2a:a7:88:e8:20:df:2c:61:b7:17:96:66:30:4f Signature Algorithm: sha256WithRSAEncryption Issuer: CN=e2d5bb401180e55f5c165d47908dff4fe29a0d86 Validity Not Before: Jun 28 13:02:50 2025 GMT Not After : Jun 29 13:02:50 2025 GMT Subject: CN=fa45c9e7bd39333728802600ed193b997069fbdf Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:8d:b6:b4:9d:6c:b8:1a:66:3b:91:0f:6e:02:1d: ff:77:c3:f5:36:3b:4a:d0:37:5c:c6:34:2f:5b:94: c3:c4:0a:87:23:cc:1f:a8:0e:50:0a:1e:7d:37:86: ec:40:61:7f:eb:38:c8:c8:38:7b:7a:a3:2b:25:4e: 5a:06:0d:b7:eb:b8:83:34:a4:0d:37:03:7c:67:97: 24:0b:7b:ed:39:e6:90:25:78:bb:58:1e:a7:9d:ca: 00:53:7a:eb:c0:df:51:d5:95:1b:5e:72:80:99:bb: cc:58:85:4c:eb:3c:d5:3a:e1:ec:04:1f:18:11:70: 26:06:65:4f:08:90:c4:e7:af:f1:fb:50:5d:58:39: 69:06:37:5a:d5:fa:55:9e:a2:3e:83:c1:56:ef:12: 52:e7:30:e2:4c:89:2a:4e:19:72:fa:ae:2d:e6:14: 93:4a:54:a7:8d:9b:93:32:70:81:5b:a3:5e:65:be: 3d:eb:35:08:4c:26:d2:f0:1f:35:87:35:36:e1:af: f4:ff:2e:bf:46:9e:ca:e9:21:79:b8:e0:25:71:53: d6:68:3d:25:5b:e0:50:70:3a:a4:de:83:94:70:29: d0:96:f9:99:c9:30:10:ef:92:fd:71:f7:bc:87:9c: f7:ad:eb:af:7c:6b:4e:95:3c:a7:7e:f1:20:ab:74: bd:b3 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: FA:45:C9:E7:BD:39:33:37:28:80:26:00:ED:19:3B:99:70:69:FB:DF X509v3 Authority Key Identifier: keyid:E2:D5:BB:40:11:80:E5:5F:5C:16:5D:47:90:8D:FF:4F:E2:9A:0D:86 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/4tW7QBGA5V9cFl1HkI3_T-KaDYY.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/59/86297a-d219-4567-9171-421e6bc7e2e8/1/4tW7QBGA5V9cFl1HkI3_T-KaDYY.mft X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/59/86297a-d219-4567-9171-421e6bc7e2e8/1/4tW7QBGA5V9cFl1HkI3_T-KaDYY.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 46:09:8b:90:31:39:6e:2f:a1:e8:c6:1a:47:9e:1d:05:fc:ca: e1:94:4c:df:59:26:77:b6:18:53:ca:bd:d0:7a:0b:c0:79:69: 65:14:7c:e9:20:79:ef:f8:50:9f:08:21:c7:7d:69:7a:9e:9a: 61:c0:25:60:92:cf:b0:e6:0b:15:3b:ae:e2:30:44:18:82:5a: 50:06:ac:6f:5a:78:74:28:05:7b:5e:eb:8c:07:46:65:4a:92: 71:1f:3f:96:c7:57:a8:85:e2:54:bf:fb:2c:18:c0:48:ee:a5: 01:b5:b6:0d:ec:42:d4:e9:b1:dc:2a:8d:2c:46:c3:20:a1:0d: 7e:a4:bc:22:3c:38:e5:34:bb:4e:bd:5a:82:f7:f9:1a:de:db: 1c:d0:74:c3:ce:76:90:71:b9:b9:0b:70:1a:0c:64:01:dc:69: 5b:b8:b4:12:e1:8b:c4:bd:c2:33:2b:73:e2:23:fd:b8:d2:06: 7f:8c:7b:e2:9e:a6:42:ea:15:96:a0:c7:e9:f3:4d:62:7e:0c: 7d:d5:57:c1:17:55:78:78:f1:e9:d6:10:4e:f0:63:bc:65:57: f1:6b:21:8a:0b:41:e9:67:4c:a2:c0:b6:7a:8a:b6:42:b8:16: 66:e6:a7:26:65:2d:8e:52:3b:29:8f:83:4a:6f:94:36:ce:c7: c7:ff:1e:4e -----BEGIN CERTIFICATE----- MIIFFjCCA/6gAwIBAgISAZe2oiqniOgg3yxhtxeWZjBPMA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKGUyZDViYjQwMTE4MGU1NWY1YzE2NWQ0NzkwOGRmZjRmZTI5 YTBkODYwHhcNMjUwNjI4MTMwMjUwWhcNMjUwNjI5MTMwMjUwWjAzMTEwLwYDVQQD EyhmYTQ1YzllN2JkMzkzMzM3Mjg4MDI2MDBlZDE5M2I5OTcwNjlmYmRmMIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAjba0nWy4GmY7kQ9uAh3/d8P1NjtK 0DdcxjQvW5TDxAqHI8wfqA5QCh59N4bsQGF/6zjIyDh7eqMrJU5aBg2367iDNKQN NwN8Z5ckC3vtOeaQJXi7WB6nncoAU3rrwN9R1ZUbXnKAmbvMWIVM6zzVOuHsBB8Y EXAmBmVPCJDE56/x+1BdWDlpBjda1fpVnqI+g8FW7xJS5zDiTIkqThly+q4t5hST SlSnjZuTMnCBW6NeZb496zUITCbS8B81hzU24a/0/y6/Rp7K6SF5uOAlcVPWaD0l W+BQcDqk3oOUcCnQlvmZyTAQ75L9cfe8h5z3reuvfGtOlTynfvEgq3S9swIDAQAB o4ICIjCCAh4wHQYDVR0OBBYEFPpFyee9OTM3KIAmAO0ZO5lwafvfMB8GA1UdIwQY MBaAFOLVu0ARgOVfXBZdR5CN/0/img2GMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvNHRXN1FCR0E1VjljRmwxSGtJM19ULUthRFlZLmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC81OS84NjI5N2EtZDIxOS00NTY3LTkxNzEt NDIxZTZiYzdlMmU4LzEvNHRXN1FCR0E1VjljRmwxSGtJM19ULUthRFlZLm1mdDCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC81OS84NjI5N2EtZDIxOS00NTY3LTkxNzEtNDIxZTZiYzdlMmU4 LzEvNHRXN1FCR0E1VjljRmwxSGtJM19ULUthRFlZLmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEARgmLkDE5 bi+h6MYaR54dBfzK4ZRM31kmd7YYU8q90HoLwHlpZRR86SB57/hQnwghx31pep6a YcAlYJLPsOYLFTuu4jBEGIJaUAasb1p4dCgFe17rjAdGZUqScR8/lsdXqIXiVL/7 LBjASO6lAbW2DexC1Omx3CqNLEbDIKENfqS8Ijw45TS7Tr1agvf5Gt7bHNB0w852 kHG5uQtwGgxkAdxpW7i0EuGLxL3CMytz4iP9uNIGf4x74p6mQuoVlqDH6fNNYn4M fdVXwRdVeHjx6dYQTvBjvGVX8WshigtB6WdMosC2eoq2QrgWZuanJmUtjlI7KY+D Sm+UNs7Hx/8eTg== -----END CERTIFICATE-----Generated at Sat Jun 28 20:59:15 2025 by rpki-client