$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/59/86297a-d219-4567-9171-421e6bc7e2e8/1/4tW7QBGA5V9cFl1HkI3_T-KaDYY.mft File: 4tW7QBGA5V9cFl1HkI3_T-KaDYY.mft (raw, json) Hash identifier: +HLosPCH4efkkS+HptLRgbSeqJlZ8PGtn/BQJlJY4i8= Subject key identifier: 77:8C:7D:48:C5:72:55:6E:97:FD:FA:07:D2:EC:CE:00:7E:B0:86:E5 Authority key identifier: E2:D5:BB:40:11:80:E5:5F:5C:16:5D:47:90:8D:FF:4F:E2:9A:0D:86 Certificate issuer: /CN=e2d5bb401180e55f5c165d47908dff4fe29a0d86 Certificate serial: 0198D65FA5EEC57444897BC028C3E68C97F3 Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/4tW7QBGA5V9cFl1HkI3_T-KaDYY.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/59/86297a-d219-4567-9171-421e6bc7e2e8/1/4tW7QBGA5V9cFl1HkI3_T-KaDYY.mft Manifest number: 0A12 Signing time: Sat 23 Aug 2025 10:00:49 +0000 Manifest this update: Sat 23 Aug 2025 10:00:49 +0000 Manifest next update: Sun 24 Aug 2025 10:00:49 +0000 Files and hashes: 1: 4tW7QBGA5V9cFl1HkI3_T-KaDYY.crl (hash: FfZ/XGyefPvCfFVQxl5zQs/GryrqOLU2hykqXNJgYyY=) 2: 5DnR59g0uDhlCeBnwu0_1-KUFeg.roa (hash: jAnqTMpaItG0GhBN/hjRVmkf1KAEsae1ohPc+vQL06Q=) 3: 8PxMQW8r6gNYx6cR3PMs2yrl5ew.roa (hash: GqHXtanVRqdO2QW4vR+6/WyxTi1dfx0DVX7E+ZRdtvU=) 4: DamwXsWqw-pNiIY7Y9gzUoz46SI.roa (hash: 1+3IDizWDcTViB++VKv1xbkAGlHPeiHczREvYVy1BEk=) 5: Dt-A1UKjqPAgnYkiz5oOF3KPif4.roa (hash: jW2Q0BDw92rsfiM8k0/wQ6GD7kmaBburgq62TnGU9aA=) 6: Kn_2eJGh3EcHDuB-OJ8l3E2w8hE.roa (hash: kQ83aGfbv2Iq481MBuTu7pjTHv3tFZPurvWLoY3PlVA=) 7: LAI14FhpOzU-rcfdJ6U9PG061Ec.roa (hash: avAt1L3mlV+2vo4CiZ8YrFs2RggnJV+Qj20+5tYBmII=) 8: LbrW0uU2svuMgCfEegCflkeiJNI.roa (hash: xicAKV+b+Rrkk93cgla0jRgvKkmUQRZcuO0wo+Vll1I=) 9: NH99_Parr6i87GqyKHm971OOvUA.roa (hash: ejRR3IxtFm+BdQE6JvQ7L16gCRkI9epYBVSx8aKoP8A=) 10: OOSnnzJCzwuc2Oreq9KoON2OJy4.roa (hash: 8ZWXugZrnN7Xp4F6Xn87sRk2TjB10Ze3ouSEvaxFbzM=) 11: Q820-mh3gTLx3r5yd43BKUrxxh8.roa (hash: koyxE8n/nkkyiE6UfVNmxydTa2BJ9VFKJe/4B3gcMPg=) 12: QRvqjOpbm1bsYYXVNYJCdsL2K9c.roa (hash: gbsaPykuhKfA/rXSneeYnuzsVzL0kGuorXD/sYaSjK8=) 13: STuoLQHHZBzK_Ldaz7xkxpSaBqY.roa (hash: ZzI62CUIffeXt6hPl33Fk7eNbx5SV7+e0g7j7C8NgSI=) 14: dPORcLPPy7vGPpK7YO0ZCdg3SLc.roa (hash: M8CeF8WcmPBFysMRz6rWQ9roOEfHfMbz/n6BV0QqyTM=) 15: ea2ONoTt3SySSjctEUa2mvxPlk0.roa (hash: aHDpbhU3poNDj7sgG29oLTuaOz779tw43LjPP8jq2GU=) 16: gPbim5HyI5_coGPfod5GORXHFJM.roa (hash: WqgzuFgOy6ZgR1XpLM/1W9uFliVDMHByx6+nWg3yG7Q=) 17: hV1kQUu8Pdq1hwLjpsPqwMqfj_U.roa (hash: N1eliwWO7Qtxwve5drBayNA7B9DMRJgSbxRNUu9dsfY=) 18: o1MTa_u6ng7YChqgqqMpF_EDHDo.roa (hash: medB94fc43SFhZiIXkS8L2CLIYdmUFnxbXmgm5u0RKM=) 19: pA-Fq_J6A5SNZJF98Uix7eSPlIg.roa (hash: 7lwAf6YG9+AyLk5HAGkoZYURCw6qLQhN2f3/kdNJO0w=) 20: v5F31cV6XBvE5243s4oHQBqQQDM.roa (hash: +2WzyiNTSNMZQ/+SFfQYAFWtFS/6Ce5PKrWiHjJlqng=) 21: xbbY79UbNbRYIgyXeBU4cy_zCmI.roa (hash: c0Ac2LrLggmLnLPt492ZZRPubOLwoYV4rcik5rRDaO0=) 22: zw1raLzJkOzuLdWVP5BWRU84p2o.roa (hash: XIzDwzNdh9cyZCy+DakAR8zEkFIdZM7IKTxs2TBKsWM=) Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/59/86297a-d219-4567-9171-421e6bc7e2e8/1/4tW7QBGA5V9cFl1HkI3_T-KaDYY.crl rsync://rpki.ripe.net/repository/DEFAULT/59/86297a-d219-4567-9171-421e6bc7e2e8/1/4tW7QBGA5V9cFl1HkI3_T-KaDYY.mft rsync://rpki.ripe.net/repository/DEFAULT/4tW7QBGA5V9cFl1HkI3_T-KaDYY.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Sun 24 Aug 2025 05:01:29 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:98:d6:5f:a5:ee:c5:74:44:89:7b:c0:28:c3:e6:8c:97:f3 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=e2d5bb401180e55f5c165d47908dff4fe29a0d86 Validity Not Before: Aug 23 10:00:49 2025 GMT Not After : Aug 24 10:00:49 2025 GMT Subject: CN=778c7d48c572556e97fdfa07d2ecce007eb086e5 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:af:fd:1e:37:09:49:e1:c1:0a:a6:19:d2:71:5f: ff:00:0d:8d:09:e8:b7:b5:72:38:72:58:c2:4c:25: 33:2b:ea:4e:68:3f:b7:99:fa:7c:bb:29:d7:5e:e8: 28:7b:13:68:07:94:13:e2:52:f4:f8:20:37:7d:d4: 6f:68:9f:76:bd:b6:99:35:fa:d0:44:21:f5:3e:43: 61:93:9f:40:f7:d1:d1:6d:bb:c0:e9:55:e0:af:38: df:f1:bf:25:32:c1:d4:cc:ef:c5:50:ec:ad:a8:d1: cb:4c:70:19:4f:e4:7d:fc:bc:46:c7:49:d7:34:12: df:e8:f7:67:79:ec:1a:a5:8e:ac:9c:8d:ca:fa:c4: e8:05:54:57:6b:76:de:ba:43:6a:2b:80:fb:47:9f: ec:dd:78:17:b9:cd:57:da:6a:28:5f:4c:50:34:6f: 07:2d:6a:0a:b0:f4:f3:3f:aa:e8:be:4f:f8:88:b4: 95:7e:24:e8:67:bf:1a:21:e0:70:32:57:79:19:17: b9:be:d4:4e:0c:dc:3b:28:c5:08:a6:37:dd:82:11: 87:07:a7:68:33:a3:d3:83:dd:09:8f:ac:c0:cf:19: 6a:a9:ea:77:56:40:64:90:7a:20:57:7a:08:2a:b6: 94:60:73:e3:78:4b:9e:35:c4:80:37:e4:4f:74:8e: e9:09 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 77:8C:7D:48:C5:72:55:6E:97:FD:FA:07:D2:EC:CE:00:7E:B0:86:E5 X509v3 Authority Key Identifier: keyid:E2:D5:BB:40:11:80:E5:5F:5C:16:5D:47:90:8D:FF:4F:E2:9A:0D:86 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/4tW7QBGA5V9cFl1HkI3_T-KaDYY.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/59/86297a-d219-4567-9171-421e6bc7e2e8/1/4tW7QBGA5V9cFl1HkI3_T-KaDYY.mft X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/59/86297a-d219-4567-9171-421e6bc7e2e8/1/4tW7QBGA5V9cFl1HkI3_T-KaDYY.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption a2:45:76:b9:2f:7e:f4:3a:e4:2d:b1:fb:b6:e0:d8:8a:31:86: a4:f5:c5:f6:d1:f9:5b:ef:15:21:cb:b5:91:99:35:5b:af:b6: 95:30:ad:e6:34:7c:59:83:d5:7a:95:55:62:9b:6b:84:f7:d3: f4:17:e9:f9:22:0d:e5:18:06:ac:8d:e9:26:e8:5f:ee:f8:47: ce:8f:4d:11:cc:d0:dd:e7:43:1d:56:23:24:bc:42:a6:fb:0f: de:d0:f7:b8:e4:4e:61:d9:d2:5a:11:98:f3:d2:31:35:69:9f: 07:5a:af:4b:09:e5:2a:7e:ae:79:99:e9:ff:3c:f4:23:76:0f: 33:cd:90:28:44:8e:f6:40:a3:73:0b:37:84:dd:a5:37:82:db: 28:54:94:e2:df:9f:30:7b:44:de:c2:38:9b:34:79:0e:57:fd: 94:f5:e3:a6:e9:54:ac:75:05:bd:3c:e7:c4:bd:24:52:a3:72: 84:21:05:0d:a4:bc:5e:b1:f4:75:91:1d:87:ce:4d:24:b5:0d: 75:1e:eb:68:4e:27:0f:93:fb:57:40:0f:8f:1d:80:b1:94:c7: 79:b1:cb:6c:ca:69:0f:83:64:ba:92:f1:1a:64:99:3b:6b:54: ec:2a:9e:48:10:d8:30:a7:0d:bd:39:4b:03:a0:b1:fd:67:f0: 19:20:a7:00 -----BEGIN CERTIFICATE----- MIIFFjCCA/6gAwIBAgISAZjWX6XuxXREiXvAKMPmjJfzMA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKGUyZDViYjQwMTE4MGU1NWY1YzE2NWQ0NzkwOGRmZjRmZTI5 YTBkODYwHhcNMjUwODIzMTAwMDQ5WhcNMjUwODI0MTAwMDQ5WjAzMTEwLwYDVQQD Eyg3NzhjN2Q0OGM1NzI1NTZlOTdmZGZhMDdkMmVjY2UwMDdlYjA4NmU1MIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAr/0eNwlJ4cEKphnScV//AA2NCei3 tXI4cljCTCUzK+pOaD+3mfp8uynXXugoexNoB5QT4lL0+CA3fdRvaJ92vbaZNfrQ RCH1PkNhk59A99HRbbvA6VXgrzjf8b8lMsHUzO/FUOytqNHLTHAZT+R9/LxGx0nX NBLf6PdneewapY6snI3K+sToBVRXa3beukNqK4D7R5/s3XgXuc1X2mooX0xQNG8H LWoKsPTzP6rovk/4iLSVfiToZ78aIeBwMld5GRe5vtRODNw7KMUIpjfdghGHB6do M6PTg90Jj6zAzxlqqep3VkBkkHogV3oIKraUYHPjeEueNcSAN+RPdI7pCQIDAQAB o4ICIjCCAh4wHQYDVR0OBBYEFHeMfUjFclVul/36B9LszgB+sIblMB8GA1UdIwQY MBaAFOLVu0ARgOVfXBZdR5CN/0/img2GMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvNHRXN1FCR0E1VjljRmwxSGtJM19ULUthRFlZLmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC81OS84NjI5N2EtZDIxOS00NTY3LTkxNzEt NDIxZTZiYzdlMmU4LzEvNHRXN1FCR0E1VjljRmwxSGtJM19ULUthRFlZLm1mdDCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC81OS84NjI5N2EtZDIxOS00NTY3LTkxNzEtNDIxZTZiYzdlMmU4 LzEvNHRXN1FCR0E1VjljRmwxSGtJM19ULUthRFlZLmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAokV2uS9+ 9DrkLbH7tuDYijGGpPXF9tH5W+8VIcu1kZk1W6+2lTCt5jR8WYPVepVVYptrhPfT 9Bfp+SIN5RgGrI3pJuhf7vhHzo9NEczQ3edDHVYjJLxCpvsP3tD3uOROYdnSWhGY 89IxNWmfB1qvSwnlKn6ueZnp/zz0I3YPM82QKESO9kCjcws3hN2lN4LbKFSU4t+f MHtE3sI4mzR5Dlf9lPXjpulUrHUFvTznxL0kUqNyhCEFDaS8XrH0dZEdh85NJLUN dR7raE4nD5P7V0APjx2AsZTHebHLbMppD4NkupLxGmSZO2tU7CqeSBDYMKcNvTlL A6Cx/WfwGSCnAA== -----END CERTIFICATE-----Generated at Sat Aug 23 15:18:32 2025 by rpki-client