$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/62/aea36d-babf-4474-a78b-6a4ecaf8b3b1/1/dGNlNVtmVWSiEMNYxooBF7f765o.mft File: dGNlNVtmVWSiEMNYxooBF7f765o.mft (raw, json) Hash identifier: eFwkv3zZXMsUHrX0zvd4+Lowr+NYqHDj8GY3J21RA34= Subject key identifier: 39:38:3A:0E:BC:C4:27:A7:7A:72:96:54:9A:5A:16:40:32:89:1E:F4 Authority key identifier: 74:63:65:35:5B:66:55:64:A2:10:C3:58:C6:8A:01:17:B7:FB:EB:9A Certificate issuer: /CN=746365355b665564a210c358c68a0117b7fbeb9a Certificate serial: 0198D54DE2AD927EBA49446BE2110BF4BEF1 Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/dGNlNVtmVWSiEMNYxooBF7f765o.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/62/aea36d-babf-4474-a78b-6a4ecaf8b3b1/1/dGNlNVtmVWSiEMNYxooBF7f765o.mft Manifest number: 16B5 Signing time: Sat 23 Aug 2025 05:01:48 +0000 Manifest this update: Sat 23 Aug 2025 05:01:48 +0000 Manifest next update: Sun 24 Aug 2025 05:01:48 +0000 Files and hashes: 1: 0Z8yTYlKjkqvKh6kY-kM6OXYfz8.roa (hash: fwm0Gtt1RFKV50/Ms+CgVe/rwlPJ9Q3VLzTFIW1v2aw=) 2: 4AhKQoLmAk1YQIBQspZfyfaiu0s.roa (hash: 1kEaOXNNkPEAuTvrZqrQmCGg/Uu08f1ofkHwiva1rBk=) 3: 4VJyAeGVgAs2ysdZRw_rlOWdRTY.roa (hash: Xd7f6Is8VkQ7huxtuAE7hUXnUe/NIXlF2TbPODpbZHk=) 4: 8xmePB-pGcDcrQ-prX4UP_SBy78.roa (hash: OO9rzem914ccJuV3c6Pdstzz47bnogLMsoJtrFTJhQo=) 5: 9nwJkf06ywYV97ycnHX8xephiLw.roa (hash: E/N+tJSxegWf0b+66cYXz6Gw0s8y/7JfEZqjs9iWYvA=) 6: G1nDGEYcV0zuKzKuOXzDx75r3GI.roa (hash: 41u/KL+MWJdDf84HJGznj8QmpQB0mJMrGBzkwlxjtIc=) 7: HtGtnD1WG-uR4lNZ5h-A8-pjUrU.roa (hash: JiGHlI4PQlUWbSzc2TBFb2wXm1bs25OSgaV13SVkmqE=) 8: JPWgfoIicBY7uqLCE-abW2DSU0c.roa (hash: A927JecYLMujCKzkMKtyVfZVMSoezFJjSy/bYsYd8SE=) 9: Kvx3aMKyyHxozL3U3ap2oLWDca0.roa (hash: Zz8Vm/BEn2VlT/RjADj2XxnM/3K7+ZuLbhNPkP9kcOQ=) 10: M7UMw75zEMferpyTZliqTtxFYGw.roa (hash: bhGEILsyYzSvD2gGTZix+BRHPPr9Z15A13HndBQFJh0=) 11: TQNP6hoAf66GZWfHy5k78DAiiCU.roa (hash: uABddS+djXpmQc7iz2KFGbyJ5oeYnTC/ey9Ec918mow=) 12: UMHCyN1PhpnvoYUbs1CT_48YLGk.roa (hash: i765qk64qL4Uog5FTQxpy5y2jivRwNCYq0ub5NcQaLk=) 13: V51fQsmdOucWQLFJANFvs_Ma2i0.roa (hash: mhzDbXcVW4r5ZjsZqcqDKjjyLnY5MIVjnfy6m1yWpyc=) 14: V5HLYQX7OEpLFK_MH5_sUYR0JBQ.roa (hash: 6cm5gNEppEG5XD2KabFv9dmbCHQEnB7rCQFwcW30ZWM=) 15: WWDr2Um8NXXwWukbK6cj1BF3t7Q.roa (hash: KB4bFVPkGqmvCaRGbBdpA1si7s9CexKnU66M/mHt/0s=) 16: XZET7dFa5OoJqf73WGd1UHo9Trs.roa (hash: FbxqvpbDfsQRYaW0n//PgGX2T+UQY1wiBpKlSWUYJQg=) 17: dGNlNVtmVWSiEMNYxooBF7f765o.crl (hash: h9X/87dS+KjsiPi/eBq8lYZI8VpPv15sKu3EqLrexLc=) 18: dc2g-kIH50S7LA2o26AVsv4LItA.roa (hash: anV8AfiZnJM+uW7z2xYGvooxLoCl6L/cGFCY34WgBTU=) 19: g3gXDyn1r3CKRtOkIamh9XiFNXQ.roa (hash: bsh/frVfpWjiiUA/IVdx5lj5UBB7HEuHeERH5RVXbJU=) 20: hbkDGu-27NQwuA34KKvsthuBpoc.roa (hash: gs4QclFDIW6OH3AQHoXwFFecYQ+OpwQ25vhb21IUnck=) 21: iHslhtFiuKaugZuIjgDSTM4F6Sk.roa (hash: 43DehRvyD4BSrfqUpPUdy+zsjmfPk1hQcSdYylB1zpo=) 22: jJYsZg4wnTyX9mV0JNA_riAb8aI.roa (hash: 2YSmon6Fik8vSjQAeDBGETPmH22iZ7Gu1aYziQraG2Q=) 23: jmqPtt5Ns_W-iBFLphm9TOPqcBk.roa (hash: Q0XLFkj7/QEzPnBRybOs7B/q1S4uk4+SdVBsy+OCL8U=) 24: kMJn1HheqQ9Rsacjsd3PZ6CXhTk.roa (hash: QHx3y/n5TxjTD6iBbFsTYJr5O+YrfK0OyTuVkyzqTiI=) 25: lkYJ-_nXwt_j8sYXcXEPI8XjVSs.roa (hash: H5A3LLoCNjemShwdfzZoOLg2oRcQfw/qyX1Up4Fug7w=) 26: m095Z-7KR0K5gXucbWhKiz12Uqg.roa (hash: pKKUCvxcyqiDYUVY3jhLgvu4uMJ7RTYnDW2HPLpWkkY=) 27: nMVuUhhQLd_p2MmIFg0uk6oN0DA.roa (hash: VPC3QfM3Xk9o/TFr02RnouDa7yDlwB8VvuZ6tJbURMA=) 28: nyslHXPfyz0FM3udFOE-7tndyMk.roa (hash: gPoCAQJEwCTv4wbyGKoKpT/fwNV2im1/jc8HR0EwRAo=) 29: oEbBV7xx5_jwLtoklKva4-Dg2v8.roa (hash: i+aaCmiUXCVg0OPcM0SwO92pJsKLDZGoxx/fXdMrMgQ=) 30: oQY8Ggs-WHGozgLdlzn62PGvTmo.roa (hash: Rm3b27WZnppZmsClSvXbSesr4c+ogRwCEVrSLNbiwvA=) 31: r-97pPvj-RimUl1469wxiEjOXHw.roa (hash: BJihjsrYYxzSHh3xQ0PZJNW0AKvTbj8ZG/b/oUaGZaU=) 32: sTAcEeIlslVpuXMYkyeJBskGwEo.roa (hash: sDqLs0eEA0fKuxXHljiO7Zt9np/B1YWaKWKNaP6grbA=) 33: si-h3EMZPum7ZeFVKrM-JgEvS5s.roa (hash: e6RNF3nCZ80GPAqffnrYJBWzKtbs1gbwLTkQ6jY31gw=) 34: t2bPxtc37O7_UaSx43VqFjBQeQ8.roa (hash: TQAVmYhnwd2Kv49WbSb4VDqVmwGOcSo0dPabg2IvysA=) 35: yTFqO5xiaIDSCJNJ_ZUqbKSypdQ.roa (hash: zRFFAOZDcEueQQ2liuDNq8EtejJKoUyry9Flbp6zROU=) Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/62/aea36d-babf-4474-a78b-6a4ecaf8b3b1/1/dGNlNVtmVWSiEMNYxooBF7f765o.crl rsync://rpki.ripe.net/repository/DEFAULT/62/aea36d-babf-4474-a78b-6a4ecaf8b3b1/1/dGNlNVtmVWSiEMNYxooBF7f765o.mft rsync://rpki.ripe.net/repository/DEFAULT/dGNlNVtmVWSiEMNYxooBF7f765o.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Sun 24 Aug 2025 05:01:29 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:98:d5:4d:e2:ad:92:7e:ba:49:44:6b:e2:11:0b:f4:be:f1 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=746365355b665564a210c358c68a0117b7fbeb9a Validity Not Before: Aug 23 05:01:48 2025 GMT Not After : Aug 24 05:01:48 2025 GMT Subject: CN=39383a0ebcc427a77a7296549a5a164032891ef4 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:af:54:10:12:04:41:65:61:32:41:b5:85:68:de: 11:74:5f:28:b4:2a:4d:e7:cc:de:41:39:06:e9:95: 1c:cf:50:5e:50:a8:a7:31:58:98:2d:d4:57:56:a8: 71:26:b4:f0:cd:c1:b6:30:81:9c:6e:a1:bb:a5:52: d6:23:07:2e:22:c8:ef:2d:41:15:30:34:4d:66:fa: a0:0f:c8:27:16:64:29:79:49:ee:8f:1d:a8:9a:c4: 70:96:e5:a4:ee:dc:75:27:5c:2f:e8:0b:d9:f8:0e: 37:04:0d:33:ef:bb:81:99:46:a2:f5:8f:c3:53:39: e4:39:5b:de:68:ba:2c:ef:0d:75:29:1e:83:20:34: fc:0b:96:70:23:68:f6:c4:f3:8c:a6:ab:58:79:bf: eb:4b:8d:2e:16:4a:83:f4:00:68:48:98:a8:39:cc: 13:2b:fa:f4:85:ec:35:71:da:42:ad:69:41:df:82: 77:d6:46:63:78:6f:cd:c5:57:39:6b:03:0d:fd:26: 17:b3:c9:27:ba:c1:d9:2a:68:94:5b:6b:7f:b3:09: 5b:88:77:73:4d:da:a6:c2:f2:59:f1:5e:f7:a7:66: b7:50:28:d0:cc:7e:cb:e1:14:52:cc:88:6c:8c:61: d2:78:fc:bb:41:31:90:47:5f:f8:e9:51:0a:d5:40: e3:f5 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 39:38:3A:0E:BC:C4:27:A7:7A:72:96:54:9A:5A:16:40:32:89:1E:F4 X509v3 Authority Key Identifier: keyid:74:63:65:35:5B:66:55:64:A2:10:C3:58:C6:8A:01:17:B7:FB:EB:9A X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/dGNlNVtmVWSiEMNYxooBF7f765o.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/62/aea36d-babf-4474-a78b-6a4ecaf8b3b1/1/dGNlNVtmVWSiEMNYxooBF7f765o.mft X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/62/aea36d-babf-4474-a78b-6a4ecaf8b3b1/1/dGNlNVtmVWSiEMNYxooBF7f765o.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 9c:15:2e:86:69:c9:2b:50:7b:2e:b0:c4:0c:22:cb:72:09:19: 00:42:45:48:c2:71:c6:42:68:34:00:6d:33:72:04:58:8e:cc: 7f:92:e5:27:66:e3:8b:85:37:d8:9c:4f:09:0b:f7:ae:8c:00: 57:c9:d2:29:38:86:fb:a5:23:81:42:2c:d8:2b:29:7e:ba:0d: 3a:34:dc:8c:e0:d1:01:19:75:19:97:6e:f9:c7:9a:b0:d5:19: c2:26:33:0a:d2:23:1c:6c:01:14:da:60:49:6f:fc:e4:08:d0: 62:87:38:8d:ab:bf:1d:c4:a1:05:0d:08:73:8c:86:63:35:24: 4f:1e:44:46:67:7a:5c:38:10:61:4e:b2:be:ed:c0:e2:ad:e5: a3:d6:9a:ba:5e:32:bb:0d:ad:d6:7f:b8:05:91:79:3c:52:75: b3:c5:f7:dc:98:71:dc:5d:1c:f9:49:6e:2e:9c:cf:a3:1a:d6: 6f:3e:6b:f7:e9:9d:34:d8:22:2c:98:91:ef:40:5a:c7:e4:c9: 40:4e:db:56:91:6c:25:06:91:7a:e0:89:c4:30:10:0b:59:19: 16:91:0c:85:ba:59:8b:b6:b4:00:3b:04:02:27:71:fd:93:e5: 9f:48:60:e4:51:40:b6:96:48:cf:22:e9:e4:5e:9f:fc:ea:c9: 91:5d:c3:65 -----BEGIN CERTIFICATE----- MIIFFjCCA/6gAwIBAgISAZjVTeKtkn66SURr4hEL9L7xMA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKDc0NjM2NTM1NWI2NjU1NjRhMjEwYzM1OGM2OGEwMTE3Yjdm YmViOWEwHhcNMjUwODIzMDUwMTQ4WhcNMjUwODI0MDUwMTQ4WjAzMTEwLwYDVQQD EygzOTM4M2EwZWJjYzQyN2E3N2E3Mjk2NTQ5YTVhMTY0MDMyODkxZWY0MIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAr1QQEgRBZWEyQbWFaN4RdF8otCpN 58zeQTkG6ZUcz1BeUKinMViYLdRXVqhxJrTwzcG2MIGcbqG7pVLWIwcuIsjvLUEV MDRNZvqgD8gnFmQpeUnujx2omsRwluWk7tx1J1wv6AvZ+A43BA0z77uBmUai9Y/D UznkOVveaLos7w11KR6DIDT8C5ZwI2j2xPOMpqtYeb/rS40uFkqD9ABoSJioOcwT K/r0hew1cdpCrWlB34J31kZjeG/NxVc5awMN/SYXs8knusHZKmiUW2t/swlbiHdz TdqmwvJZ8V73p2a3UCjQzH7L4RRSzIhsjGHSePy7QTGQR1/46VEK1UDj9QIDAQAB o4ICIjCCAh4wHQYDVR0OBBYEFDk4Og68xCenenKWVJpaFkAyiR70MB8GA1UdIwQY MBaAFHRjZTVbZlVkohDDWMaKARe3++uaMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvZEdObE5WdG1WV1NpRU1OWXhvb0JGN2Y3NjVvLmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC82Mi9hZWEzNmQtYmFiZi00NDc0LWE3OGIt NmE0ZWNhZjhiM2IxLzEvZEdObE5WdG1WV1NpRU1OWXhvb0JGN2Y3NjVvLm1mdDCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC82Mi9hZWEzNmQtYmFiZi00NDc0LWE3OGItNmE0ZWNhZjhiM2Ix LzEvZEdObE5WdG1WV1NpRU1OWXhvb0JGN2Y3NjVvLmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAnBUuhmnJ K1B7LrDEDCLLcgkZAEJFSMJxxkJoNABtM3IEWI7Mf5LlJ2bji4U32JxPCQv3rowA V8nSKTiG+6UjgUIs2CspfroNOjTcjODRARl1GZdu+ceasNUZwiYzCtIjHGwBFNpg SW/85AjQYoc4jau/HcShBQ0Ic4yGYzUkTx5ERmd6XDgQYU6yvu3A4q3lo9aaul4y uw2t1n+4BZF5PFJ1s8X33Jhx3F0c+UluLpzPoxrWbz5r9+mdNNgiLJiR70Bax+TJ QE7bVpFsJQaReuCJxDAQC1kZFpEMhbpZi7a0ADsEAidx/ZPln0hg5FFAtpZIzyLp 5F6f/OrJkV3DZQ== -----END CERTIFICATE-----Generated at Sat Aug 23 12:24:44 2025 by rpki-client