$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/6a/a8ebe4-d0b3-4e7d-af25-0468042486dc/1/8N2BqDPZsEPH_9Y1pZh_U2lxGA0.mft File: 8N2BqDPZsEPH_9Y1pZh_U2lxGA0.mft (raw, json) Hash identifier: 78HNneFYRVVD5UWE9BGoZW+iFENyiVWGs5A+DgLfW2g= Subject key identifier: 21:49:64:26:D3:02:52:DD:74:54:D5:47:6C:67:6C:F1:67:28:55:C0 Authority key identifier: F0:DD:81:A8:33:D9:B0:43:C7:FF:D6:35:A5:98:7F:53:69:71:18:0D Certificate issuer: /CN=f0dd81a833d9b043c7ffd635a5987f536971180d Certificate serial: 0197B5C4E5B60A89131654881BBDE8DA9964 Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/8N2BqDPZsEPH_9Y1pZh_U2lxGA0.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/6a/a8ebe4-d0b3-4e7d-af25-0468042486dc/1/8N2BqDPZsEPH_9Y1pZh_U2lxGA0.mft Manifest number: 169A Signing time: Sat 28 Jun 2025 09:01:09 +0000 Manifest this update: Sat 28 Jun 2025 09:01:09 +0000 Manifest next update: Sun 29 Jun 2025 09:01:09 +0000 Files and hashes: 1: 1-pkoPKMCZ9qOJcUpbg4SD3YM82I.roa (hash: fr0BGqmmgkymb/Io2tWlqm6/TRfrQYD5zH4bv2liAY4=) 2: 60lT6E7Hw-SybLa6dCTef8Owqso.roa (hash: kxBaSXQQFFLnQ/jWfDvLC1N4uboGoYMJnKAExPscFWo=) 3: 8N2BqDPZsEPH_9Y1pZh_U2lxGA0.crl (hash: wy/olNAQqZSJWT+LCGBdmfL2Ndb1gyiTd+2ihlJfhMw=) 4: AMAwp6VcPHRw-QKe79lcrFcU19Y.roa (hash: 7tQw2Qq7bBZ1uCaMQ14QDglKar+luUjoIxeh5RB2w1o=) 5: AkeW0dNO6HwoGorE-RVkvkd5lYI.roa (hash: cFEnsrh1nsOvG/GU22O2yZ4HJtAwycOwC2PtRPjLqBI=) 6: B1142MZmoWC79cU7wc6SpTqGiyI.roa (hash: ho8/5G5V6c0C9LD1lAUutQeKnpgOVsvxXS6BHwKivQY=) 7: H8YJLWnpWipMvgIr9ji5smf4Tfk.roa (hash: M3PeYVw02zCqgGsGWVEqY9NDqtJ4pOhlFV2aXiG2+JY=) 8: KbXum3tGxYpXO3QIbsz4v0Gc9YE.roa (hash: Xdbf5vp7RPXfCgiOaz1rHhCCOGhSA6vAYCYI/x90YU0=) 9: Mdp9Kv-Vu7KoI3CAPKr9JqJyQF0.roa (hash: SVNqMzugCbLVwMP8haqTfMrXYGbHl90Ct7rAkwp4GGU=) 10: Nx6plveuESXQK8zHN0saWCNgZtg.roa (hash: QL/uKZ/nr+28xsvZGhgIMqZgRaxPkWfGMmZV7z027VM=) 11: PXz0xECU6TjhYqxiIXtEO5Wt6wc.roa (hash: IQ6HG99adaSd4g8dYN9Tq5G654BtgGfHZKvbtQePiBg=) 12: QUqReStf6TEFnsU1tSixUGPYTuI.roa (hash: K60fCDp86LLBo6obO2VN9uWaTquDob132b4Q/cH5WYU=) 13: RRXv77ic8-YnL2L0BrEWnnilces.roa (hash: oObWYvqL50IXeyb91XFkxYV2GVpxyr296NJwG9LKFJk=) 14: S5aHdm30TryFtG2jDVy3wkSOz2Q.roa (hash: gGROgcge0wvbKabdkDSLw/YtICixKaiQd0Hk++1c5Is=) 15: TW2quqEtMmBMtjFETxrg2LVk9Oo.roa (hash: 63aKh4PjYXwflLNSYPKfmuOdFvd6LVwJFipNOxlRjJI=) 16: U3eAzBYqlS5ny3loqC6d-X4pjFc.roa (hash: EJBjhB6YSDKCWSO1xn35SUiNwifHM1pCOrpPoOsV3vc=) 17: WZKLhLcb_14f65w-Gxi0P7Y4PGI.roa (hash: rd8mwsH5vvMfna/I2W08kC0v/oG9b9ll9tJk/Yl4I2o=) 18: XLs5m7yFpYbQixlyQEPtxV_7mOs.roa (hash: Fghw0ZM8qJSM1Rk38Og5x502OtV7xRwTHNOwSJX4CJo=) 19: YJCi9AWh99xuK45xoYGOeQ7CnmE.roa (hash: Ti9BtXIsKFet++HwcTL4uva9A9w4W22YtG5seAitsY8=) 20: ZasgQLj553uShFx9qygvcO1idVY.roa (hash: xV4yVjOGaxnmU8uKE6oE/eSTkUdEZQ/Ub4WuQWWJos0=) 21: _NcltatYeskVsJ2GmWYQEOtBuzU.roa (hash: EFUSsiFNwzbPc+B6nty0bVOEIqERfMB5igPoEOdQ1Ow=) 22: arMtKMIP71-vKvUAgp4clBsMWok.roa (hash: tYZYrtz6Qwf6eAJhxSX8JcByWBMLnLzyGmAuVNAgGeU=) 23: cmkgGNwAjlwl-nXBDnQsuZkaQjk.roa (hash: GH4mAasSrVefCL06doAPOCgwr9kOuVQg7pmr2jmaWv0=) 24: nzNqqRbCzyZOz_LPEX7ekoQzrL8.roa (hash: wB9E00UMNSv7JsFYWSDeCYdTSCiuPXkofCcaEspbuBQ=) 25: pAaBglS_ph_lomtz_pi-YWsNz74.roa (hash: +DNf/G42yq93h12+GOLlNd9IxjCcQ12CMJ+kjCCl/Cw=) 26: qq4fM1ObQGyaLMmavbeC_4huAhs.roa (hash: uj3kwNGwI3ye+3/FlFrfR0c/PIhlj04gSoV4ikzeXw8=) 27: sJ8MWzOJrRSDCEy5539zFEW54Fg.roa (hash: SrkAclwJ6pGZe3QnLXmTkQWct0fK9CqayvHKB5l708k=) 28: tIoiJqn_Zw4bkifEyWUceFVpDXE.roa (hash: +3bSV4N3AQ7/Wh4s2xd9vZBKmvEVCXYmroX/aifAP+8=) Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/6a/a8ebe4-d0b3-4e7d-af25-0468042486dc/1/8N2BqDPZsEPH_9Y1pZh_U2lxGA0.crl rsync://rpki.ripe.net/repository/DEFAULT/6a/a8ebe4-d0b3-4e7d-af25-0468042486dc/1/8N2BqDPZsEPH_9Y1pZh_U2lxGA0.mft rsync://rpki.ripe.net/repository/DEFAULT/8N2BqDPZsEPH_9Y1pZh_U2lxGA0.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Sun 29 Jun 2025 09:01:09 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:97:b5:c4:e5:b6:0a:89:13:16:54:88:1b:bd:e8:da:99:64 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=f0dd81a833d9b043c7ffd635a5987f536971180d Validity Not Before: Jun 28 09:01:09 2025 GMT Not After : Jun 29 09:01:09 2025 GMT Subject: CN=21496426d30252dd7454d5476c676cf1672855c0 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:b7:47:93:fe:a2:8f:34:6d:ed:04:54:52:91:69: cc:dd:0c:8c:2c:48:f1:d5:92:32:03:5b:67:7a:4c: c5:36:0b:a3:80:81:34:db:fe:5d:f8:17:ae:f2:1a: c1:82:53:32:3f:1b:46:c0:f6:d3:ad:6e:64:5c:3f: 55:f3:d4:f1:d7:27:c9:28:d8:ea:17:c3:80:ee:d3: 5e:dd:04:67:75:d7:04:5f:ab:24:9c:24:8b:df:f8: f3:0d:ba:f7:b7:c7:1c:ae:39:db:9d:88:cd:be:f9: 8a:aa:69:e5:0b:a1:4d:10:2d:31:fd:8c:b4:f3:92: 06:2f:44:7b:5e:b1:18:05:99:bb:f0:a1:da:46:f0: 7b:31:0b:2e:f9:08:b2:c4:95:0d:a8:88:20:81:45: 57:cf:36:81:c7:e7:0b:34:80:d7:93:fa:b2:e1:ba: aa:dd:01:06:3d:32:3e:ce:13:df:62:b3:1f:4e:1e: 0b:d0:40:4d:14:f3:f5:f3:0a:61:c3:b3:32:d1:80: 9b:e4:9a:ef:c7:ef:08:08:ed:a6:3b:7f:ba:e4:c4: 6d:a2:30:04:fc:52:bd:bc:0b:5b:e2:3f:63:3e:8e: 62:62:11:a0:98:48:f2:21:79:8f:46:6d:ba:46:bc: 61:63:72:51:9d:a9:1b:c2:5b:22:32:67:9a:6f:85: 8d:9f Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 21:49:64:26:D3:02:52:DD:74:54:D5:47:6C:67:6C:F1:67:28:55:C0 X509v3 Authority Key Identifier: keyid:F0:DD:81:A8:33:D9:B0:43:C7:FF:D6:35:A5:98:7F:53:69:71:18:0D X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/8N2BqDPZsEPH_9Y1pZh_U2lxGA0.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/6a/a8ebe4-d0b3-4e7d-af25-0468042486dc/1/8N2BqDPZsEPH_9Y1pZh_U2lxGA0.mft X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/6a/a8ebe4-d0b3-4e7d-af25-0468042486dc/1/8N2BqDPZsEPH_9Y1pZh_U2lxGA0.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 74:d3:b4:79:d0:cd:f5:9f:18:c1:0e:9b:7b:e3:33:0b:ce:e2: 53:45:12:9f:85:43:7c:d8:70:85:51:73:1b:aa:f5:6b:b2:27: f0:38:cf:23:34:05:5f:58:1e:1c:74:ed:8d:17:91:2c:16:9a: db:51:d8:99:63:2e:e6:82:f7:50:71:5b:0d:7d:af:8f:c3:fb: 1f:96:58:6a:a6:c7:28:51:e8:1a:af:2a:75:69:a8:92:9a:c0: 0d:bb:9d:55:a1:c3:42:46:88:55:91:bb:eb:ea:8c:71:d7:3b: 11:da:09:df:14:07:31:bb:e6:0e:85:9c:fa:6e:cd:2d:fb:4b: 77:d6:89:8c:95:29:04:cf:3d:70:d0:b6:bc:6a:49:a1:19:f4: 8a:b5:c2:33:12:8b:a9:53:f2:5b:77:75:32:78:af:ee:df:a0: 16:9b:58:d9:92:b4:3e:f4:8e:73:19:68:50:c6:2b:7d:71:dc: 06:68:44:f1:1a:5f:e9:c9:12:be:d7:23:24:0d:4c:f4:59:54: f7:ff:09:4f:f5:19:44:e9:d7:fe:53:04:ab:55:d6:04:ac:a4: 40:4a:6c:be:3a:8a:93:d3:95:32:4c:26:ca:22:6a:0e:79:e6: a5:04:5f:dc:03:f1:46:da:65:6b:f9:e0:7f:5f:52:41:85:df: b2:f8:c6:87 -----BEGIN CERTIFICATE----- MIIFFjCCA/6gAwIBAgISAZe1xOW2CokTFlSIG73o2plkMA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKGYwZGQ4MWE4MzNkOWIwNDNjN2ZmZDYzNWE1OTg3ZjUzNjk3 MTE4MGQwHhcNMjUwNjI4MDkwMTA5WhcNMjUwNjI5MDkwMTA5WjAzMTEwLwYDVQQD EygyMTQ5NjQyNmQzMDI1MmRkNzQ1NGQ1NDc2YzY3NmNmMTY3Mjg1NWMwMIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAt0eT/qKPNG3tBFRSkWnM3QyMLEjx 1ZIyA1tnekzFNgujgIE02/5d+Beu8hrBglMyPxtGwPbTrW5kXD9V89Tx1yfJKNjq F8OA7tNe3QRnddcEX6sknCSL3/jzDbr3t8ccrjnbnYjNvvmKqmnlC6FNEC0x/Yy0 85IGL0R7XrEYBZm78KHaRvB7MQsu+QiyxJUNqIgggUVXzzaBx+cLNIDXk/qy4bqq 3QEGPTI+zhPfYrMfTh4L0EBNFPP18wphw7My0YCb5Jrvx+8ICO2mO3+65MRtojAE /FK9vAtb4j9jPo5iYhGgmEjyIXmPRm26RrxhY3JRnakbwlsiMmeab4WNnwIDAQAB o4ICIjCCAh4wHQYDVR0OBBYEFCFJZCbTAlLddFTVR2xnbPFnKFXAMB8GA1UdIwQY MBaAFPDdgagz2bBDx//WNaWYf1NpcRgNMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvOE4yQnFEUFpzRVBIXzlZMXBaaF9VMmx4R0EwLmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC82YS9hOGViZTQtZDBiMy00ZTdkLWFmMjUt MDQ2ODA0MjQ4NmRjLzEvOE4yQnFEUFpzRVBIXzlZMXBaaF9VMmx4R0EwLm1mdDCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC82YS9hOGViZTQtZDBiMy00ZTdkLWFmMjUtMDQ2ODA0MjQ4NmRj LzEvOE4yQnFEUFpzRVBIXzlZMXBaaF9VMmx4R0EwLmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAdNO0edDN 9Z8YwQ6be+MzC87iU0USn4VDfNhwhVFzG6r1a7In8DjPIzQFX1geHHTtjReRLBaa 21HYmWMu5oL3UHFbDX2vj8P7H5ZYaqbHKFHoGq8qdWmokprADbudVaHDQkaIVZG7 6+qMcdc7EdoJ3xQHMbvmDoWc+m7NLftLd9aJjJUpBM89cNC2vGpJoRn0irXCMxKL qVPyW3d1Mniv7t+gFptY2ZK0PvSOcxloUMYrfXHcBmhE8Rpf6ckSvtcjJA1M9FlU 9/8JT/UZROnX/lMEq1XWBKykQEpsvjqKk9OVMkwmyiJqDnnmpQRf3APxRtpla/ng f19SQYXfsvjGhw== -----END CERTIFICATE-----Generated at Sat Jun 28 19:43:45 2025 by rpki-client