$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/5a/6e79b8-2b8f-4ecc-9a6e-70e898bb38dd/1/4UrGEWFN0WXZRVcpbtftRsj8Al8.mft File: 4UrGEWFN0WXZRVcpbtftRsj8Al8.mft (raw, json) Hash identifier: XZcJlAnVXDOZ647qxh/hmCG3mMRZhtUSjmnVODTWhYw= Subject key identifier: F9:64:6C:5F:18:B5:9A:FD:CC:F6:A1:49:25:F7:D4:BC:A9:FC:FA:71 Authority key identifier: E1:4A:C6:11:61:4D:D1:65:D9:45:57:29:6E:D7:ED:46:C8:FC:02:5F Certificate issuer: /CN=e14ac611614dd165d94557296ed7ed46c8fc025f Certificate serial: 0198D4E0BCDEF85B221B64331989EA233ED5 Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/4UrGEWFN0WXZRVcpbtftRsj8Al8.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/5a/6e79b8-2b8f-4ecc-9a6e-70e898bb38dd/1/4UrGEWFN0WXZRVcpbtftRsj8Al8.mft Manifest number: 1676 Signing time: Sat 23 Aug 2025 03:02:34 +0000 Manifest this update: Sat 23 Aug 2025 03:02:34 +0000 Manifest next update: Sun 24 Aug 2025 03:02:34 +0000 Files and hashes: 1: 1-fKXBjqiTeM90rh_YcnHRZImMf4.roa (hash: XviyK9gZCSyNGe87uM1BJ71gLbA2w08qEYd7JArw4Hs=) 2: 21b6ntDP_41WHw4JgmJy5QMFjgw.roa (hash: OyGhDdjF1Bm2rSEG2L631phdq3gbyPG0iQYpMEVeFPo=) 3: 4UrGEWFN0WXZRVcpbtftRsj8Al8.crl (hash: avXe9jYxhU1bxstCTTlT7fc7UZMzNxdXHz6GInvxd8Y=) 4: 6bKmElTtCrApAY9rRgCE9VG2_VI.roa (hash: jkL7mJyzNc2SlG01Dl3hctC0mLi0oOg8Cg2cItdFmp8=) 5: 7p384sXqxwddixUy_mYYBxF3awU.roa (hash: shaUQH6DkAjCcH24QCvbbVnJZikn1zAyihmMsgzPJcI=) 6: EswWK13u7UJf1Xm-aJ2Imfit29g.roa (hash: /9v79+ATF8QEQ4eYOKWEhH/1P4aQ0PCUgp7hFThavBs=) 7: Exr4OKSNhnm-FznHB8jgpNbJZxQ.roa (hash: 1XCrVW6+X9DVjbzilln6lF+f4s4n32v5jZAfIBU7Z40=) 8: G-l8_nIjGXR2g3ie6C0b-DsumJM.roa (hash: qSX4dXaWMvoaO0z2I0BRCaHWI2LO9UgLxYp55tHYyDI=) 9: NZS2Ipchg2nhjy9FYCa-tr7edgc.roa (hash: J91+10sEZiq3a/L3jz4R1QTQGfsCXE1VL5KiBPRPpK8=) 10: Q88Qv2c-OY8pD9XQlm6AYLzEC9k.roa (hash: F0xmcjBp6hsmjep+VgSkib2PdKQQGRbjWEcgD1QBtbM=) 11: Sc4ZzMyRDR0gvOJ_zNA2g4Vxr68.roa (hash: gYB3OVnzjXyPr9Qm/lycd3gdpJQ/+Cl0X5zNJIEQ9rQ=) 12: Uoyhjzu1CnHo8tl7nk_ZhKwl5hU.roa (hash: 48l45O6og6BZyLVhyyu0j9BEA4j1BgnxIO+JWZUTc30=) 13: WXqBRwyxEDgQK5OlFrSMIaFpyVU.roa (hash: IpP8TaM5Wwj7+VayyaCIeA2tv6VLqBIorB1uda3TPMs=) 14: XSbgubujJJ9FZpTPfifgq3AkiU8.roa (hash: QttXfkZolFdSxkPkwsYt6vSDl8DXa766XeZMDQS4Mtw=) 15: clZIrkLG6qMnhbwEIW_pAKHru3U.roa (hash: h9NEDzPBspMO8P2mwx1nUeUnaVh8FCZbKTMitP3Kq70=) 16: dgAUOvzxPFSZzQFCZsXq5wSmuQ4.roa (hash: onCp8InwxVqnOmHcxw1M4XVSgwg1eg4cDcncJgrt2EU=) 17: dp8pvQa4vbHOUBRQq7A88UhSl18.roa (hash: 3Lmekz/0Q0BYHatiLmy2hW/4qKq+J2XWsl9s9mwNmF0=) 18: kQOaGpW4jD-8xGlNbkC3aZmZ2oA.roa (hash: nAfr6WTUGifpmHx8/uBqTFl3/GkMakZU6HzPC4BRKRc=) 19: nqNpqxiiesheCCeqK53xQj3S098.roa (hash: 2DtLb2ES6JjRgW8bn+Qbl4U1xhy1QrUbg+jAVJ9BH7A=) 20: qg9H3rvWINznh7UPHplQbVY73BM.roa (hash: Nx2IWHCLZcluhgcIHU0CznQVLHn9XdJ3ef9jXTt3p68=) 21: uMSALwCFCjHgfXY8GtxojOClYFk.roa (hash: kBut8kDkT5GFXnvjVfuze1IARhQ7/X9J0rwdlLP0FyY=) Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/5a/6e79b8-2b8f-4ecc-9a6e-70e898bb38dd/1/4UrGEWFN0WXZRVcpbtftRsj8Al8.crl rsync://rpki.ripe.net/repository/DEFAULT/5a/6e79b8-2b8f-4ecc-9a6e-70e898bb38dd/1/4UrGEWFN0WXZRVcpbtftRsj8Al8.mft rsync://rpki.ripe.net/repository/DEFAULT/4UrGEWFN0WXZRVcpbtftRsj8Al8.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Sun 24 Aug 2025 00:37:04 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:98:d4:e0:bc:de:f8:5b:22:1b:64:33:19:89:ea:23:3e:d5 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=e14ac611614dd165d94557296ed7ed46c8fc025f Validity Not Before: Aug 23 03:02:34 2025 GMT Not After : Aug 24 03:02:34 2025 GMT Subject: CN=f9646c5f18b59afdccf6a14925f7d4bca9fcfa71 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:b3:af:1c:b8:f7:2c:7b:e1:f9:5d:41:b9:cf:ce: 69:20:8a:3b:1f:c9:26:5a:93:57:ea:a9:90:d6:97: 56:79:50:a1:b7:3b:ce:c3:9a:3e:86:4b:54:39:dc: 9b:03:69:fb:3c:3c:e9:b9:f2:3f:5d:76:48:db:12: d5:b4:cd:fd:1b:1c:2d:a9:23:f0:f9:0f:22:bb:0a: 38:aa:64:e0:bf:29:b5:b6:1e:f3:96:94:20:e1:a1: 33:e4:08:e1:0b:4f:6f:a4:a0:83:50:18:3b:c2:7b: db:64:52:44:60:20:73:17:58:1c:2a:92:46:1f:f2: 7e:84:17:59:1c:59:d6:fe:8a:22:72:95:c6:21:a3: c4:59:e9:99:1c:62:a4:f4:29:df:de:18:ba:3a:a8: 49:70:2b:40:c6:bb:f5:44:cb:b2:8f:74:fb:88:57: be:6f:6d:b0:53:ea:1c:0d:e0:d1:04:a5:43:b9:2f: 53:ae:8e:0f:a0:cd:44:ca:74:f5:d7:a5:42:a4:1a: ac:98:3a:64:57:9c:b8:54:ff:58:72:40:25:ac:0a: 67:86:c5:ce:76:4a:60:fc:96:fd:e7:f4:36:9a:3c: cd:99:75:b4:d6:4d:c6:55:e5:ed:db:72:58:19:d8: 6a:c7:67:6f:19:49:33:f5:a2:f0:13:6f:fa:0c:12: 2e:03 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: F9:64:6C:5F:18:B5:9A:FD:CC:F6:A1:49:25:F7:D4:BC:A9:FC:FA:71 X509v3 Authority Key Identifier: keyid:E1:4A:C6:11:61:4D:D1:65:D9:45:57:29:6E:D7:ED:46:C8:FC:02:5F X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/4UrGEWFN0WXZRVcpbtftRsj8Al8.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/5a/6e79b8-2b8f-4ecc-9a6e-70e898bb38dd/1/4UrGEWFN0WXZRVcpbtftRsj8Al8.mft X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/5a/6e79b8-2b8f-4ecc-9a6e-70e898bb38dd/1/4UrGEWFN0WXZRVcpbtftRsj8Al8.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption af:f7:69:51:34:aa:ad:d2:09:7c:87:a7:cb:2f:88:e1:9d:2c: 2e:b0:38:a1:82:81:66:b6:d6:ec:68:fc:98:39:f0:49:bf:02: d0:9d:b3:34:48:9b:8d:69:39:1e:88:53:0a:36:b3:33:0f:97: ac:dd:3e:c7:39:a4:64:b8:30:5f:59:e3:86:f5:d7:fb:9f:36: fc:d3:9b:f2:3f:bf:39:16:24:55:46:ee:52:d7:27:f8:e8:2e: 08:26:de:68:a9:49:9c:72:b4:dc:44:3e:18:6b:44:b8:de:32: b5:f4:d5:d6:40:fc:9a:ac:cf:aa:cf:19:c6:10:3b:1b:1f:5a: f7:0f:36:c1:b0:30:c5:b3:b9:c7:79:b3:fb:c3:2d:15:88:9b: 10:9a:34:27:96:3e:9f:cf:c4:bf:35:c8:d7:24:69:02:da:12: c4:62:4d:47:0c:b2:44:bc:80:c4:99:00:21:8d:47:c0:dc:36: 0e:ec:44:23:ad:ff:1a:fb:a7:58:e7:b4:9e:4b:cf:17:7f:d2: ff:0a:97:10:1c:57:a6:2e:c7:8c:05:e8:49:34:5e:85:a4:ed: 11:23:a4:14:3d:3a:a0:45:88:69:0c:9e:5b:38:bb:bd:f2:16: 29:66:7c:67:92:28:32:55:2f:cf:82:18:f0:65:d3:9b:6d:bf: ba:3e:3d:e7 -----BEGIN CERTIFICATE----- MIIFFjCCA/6gAwIBAgISAZjU4Lze+FsiG2QzGYnqIz7VMA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKGUxNGFjNjExNjE0ZGQxNjVkOTQ1NTcyOTZlZDdlZDQ2Yzhm YzAyNWYwHhcNMjUwODIzMDMwMjM0WhcNMjUwODI0MDMwMjM0WjAzMTEwLwYDVQQD EyhmOTY0NmM1ZjE4YjU5YWZkY2NmNmExNDkyNWY3ZDRiY2E5ZmNmYTcxMIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAs68cuPcse+H5XUG5z85pIIo7H8km WpNX6qmQ1pdWeVChtzvOw5o+hktUOdybA2n7PDzpufI/XXZI2xLVtM39GxwtqSPw +Q8iuwo4qmTgvym1th7zlpQg4aEz5AjhC09vpKCDUBg7wnvbZFJEYCBzF1gcKpJG H/J+hBdZHFnW/ooicpXGIaPEWemZHGKk9Cnf3hi6OqhJcCtAxrv1RMuyj3T7iFe+ b22wU+ocDeDRBKVDuS9Tro4PoM1EynT116VCpBqsmDpkV5y4VP9YckAlrApnhsXO dkpg/Jb95/Q2mjzNmXW01k3GVeXt23JYGdhqx2dvGUkz9aLwE2/6DBIuAwIDAQAB o4ICIjCCAh4wHQYDVR0OBBYEFPlkbF8YtZr9zPahSSX31Lyp/PpxMB8GA1UdIwQY MBaAFOFKxhFhTdFl2UVXKW7X7UbI/AJfMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvNFVyR0VXRk4wV1haUlZjcGJ0ZnRSc2o4QWw4LmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC81YS82ZTc5YjgtMmI4Zi00ZWNjLTlhNmUt NzBlODk4YmIzOGRkLzEvNFVyR0VXRk4wV1haUlZjcGJ0ZnRSc2o4QWw4Lm1mdDCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC81YS82ZTc5YjgtMmI4Zi00ZWNjLTlhNmUtNzBlODk4YmIzOGRk LzEvNFVyR0VXRk4wV1haUlZjcGJ0ZnRSc2o4QWw4LmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAr/dpUTSq rdIJfIenyy+I4Z0sLrA4oYKBZrbW7Gj8mDnwSb8C0J2zNEibjWk5HohTCjazMw+X rN0+xzmkZLgwX1njhvXX+582/NOb8j+/ORYkVUbuUtcn+OguCCbeaKlJnHK03EQ+ GGtEuN4ytfTV1kD8mqzPqs8ZxhA7Gx9a9w82wbAwxbO5x3mz+8MtFYibEJo0J5Y+ n8/EvzXI1yRpAtoSxGJNRwyyRLyAxJkAIY1HwNw2DuxEI63/GvunWOe0nkvPF3/S /wqXEBxXpi7HjAXoSTRehaTtESOkFD06oEWIaQyeWzi7vfIWKWZ8Z5IoMlUvz4IY 8GXTm22/uj495w== -----END CERTIFICATE-----Generated at Sat Aug 23 10:13:26 2025 by rpki-client