$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/77/9fab5c-e138-4ef6-8799-b0b35a34e388/1/j8aWRkV6i_jvlWm5tCfp8sRi5W4.mft File: j8aWRkV6i_jvlWm5tCfp8sRi5W4.mft (raw, json) Hash identifier: h4Y8MkABaTtVdO7kx5bOzxsPqq6IkTY9JW2IzqBSNmk= Subject key identifier: 1D:63:D5:70:66:F7:65:D8:6B:D7:E0:E0:8F:81:EB:36:40:93:AB:89 Authority key identifier: 8F:C6:96:46:45:7A:8B:F8:EF:95:69:B9:B4:27:E9:F2:C4:62:E5:6E Certificate issuer: /CN=8fc69646457a8bf8ef9569b9b427e9f2c462e56e Certificate serial: 0198D439BCFA1976C3DD3D67BBD4C98E237F Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/j8aWRkV6i_jvlWm5tCfp8sRi5W4.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/77/9fab5c-e138-4ef6-8799-b0b35a34e388/1/j8aWRkV6i_jvlWm5tCfp8sRi5W4.mft Manifest number: 11D3 Signing time: Sat 23 Aug 2025 00:00:10 +0000 Manifest this update: Sat 23 Aug 2025 00:00:10 +0000 Manifest next update: Sun 24 Aug 2025 00:00:10 +0000 Files and hashes: 1: 33CUfDLiP8hMW8-xKnh5gWXZm9w.roa (hash: Bh9+3b8fWDJobwnZ5uEge8oWIc5s9pLu/K/Qpm494l0=) 2: 37WDsJgS29ArcL4Cmhv4wwYMgFc.roa (hash: AXUUOGrTgb1EkHkLKG0Np5XXpArC+TW3abI6bwcRXy8=) 3: 8Pql3WWXWEFRERRDmVMGD4G9M-A.roa (hash: Ou+GeKB9aMm7s/S9nX0yfjyzbehhUnphSDoiUeT/MCo=) 4: 8sf3AriWeoOoKb2ZrL9ruFI5-yU.roa (hash: akXe86mXNL4F4xYmekk3EuMAOLAD/RcPwHK74zX/QY0=) 5: 9a6AdkqAs0vIWdMjgvg0SfIEVG8.roa (hash: 3MZg0XXsOYdVObhOBprmqJ/8u/fpWKxyx3HFfsb7hhc=) 6: AmHkvm73L7WuRs2OBkCuUN3ylao.roa (hash: mk6A7F32UtKijP2YOQDh8IbbK8Vw0IDJK2YgMl3UZWk=) 7: Gkj-_sNoI1_V4Aq0AR967JJ7iIA.roa (hash: D6alHFBw87PSRUedkFujLNRW9+yoaIFCiBA4D58vz5s=) 8: H9HhLY73Vk4PBLowFwmqq8qnEvs.roa (hash: yboN6O4NEwN/9jtzcqVhwL7Xp6BAuM4oUmdLAuSlRZc=) 9: MakxThxT5UsU25fCDQKlS5KLtpA.roa (hash: l4AKksay049W9B075Nvia/rqmIQrOxBlcCFqa/jsrsw=) 10: VuwmrfCYeX-5-G3EACirZwyCtzg.roa (hash: 1HbLhGjSO6WtBBMMxb8oy/0MhfWurHjl8dezIem0SBE=) 11: a_gWGAH_HkQq48s4xebSJs8e9SM.roa (hash: /PN+oDh7g+uIG4/Jaj9EAzn6xGtetecKxsI53eVsu+k=) 12: bwAG82vgu_-f3Xus3V_4NK2WQyQ.roa (hash: qly2qjfn5eyWDXm67Zp4c9WaqGquHK1Au5pP/Lwhj6U=) 13: fczn2jh4ajq3X4s1Mo_fsWXXm34.roa (hash: J5rtauXxpoCURr4ah9LdMnYQCXOtCScxCM8XbJ0ALGA=) 14: j8aWRkV6i_jvlWm5tCfp8sRi5W4.crl (hash: LfGiME2jfJMwu24yjoImqYFudjs8wKvqhI0FlxIq/50=) 15: qSSwvFyukku__Xfha7NX-KNKilU.roa (hash: /YidgkIq90t9kIOCAgVZgfxaifzNpJSznlRbFAd8dbE=) 16: tUXcljwuTzZu2HFVE--E_B3XnQ4.roa (hash: Gfw3NzI90kBuKsp8o/a8mrst3zcJzAdSNtNsY8SwJUA=) 17: tgzOB-X3X9hQIl9WIvEW-sVk2TA.roa (hash: dct8dEsqnpkwRMNVp0z4oU64+Yxl27f7QQdtJgkmALY=) 18: xKRilO0vwgvjeykGWxxPZlep8IA.roa (hash: DWIP1iliS91BdTEgbVE4cDPtiHmdG7awTm/8ZCjAlzk=) 19: xrtDAIk3vWJYXPnZVXMHaoJfbQs.roa (hash: u3EOwyWtPWjn//AFUgWdQ3LoVgi+BzUJpSJKyhN9AL0=) Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/77/9fab5c-e138-4ef6-8799-b0b35a34e388/1/j8aWRkV6i_jvlWm5tCfp8sRi5W4.crl rsync://rpki.ripe.net/repository/DEFAULT/77/9fab5c-e138-4ef6-8799-b0b35a34e388/1/j8aWRkV6i_jvlWm5tCfp8sRi5W4.mft rsync://rpki.ripe.net/repository/DEFAULT/j8aWRkV6i_jvlWm5tCfp8sRi5W4.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Sun 24 Aug 2025 00:00:10 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:98:d4:39:bc:fa:19:76:c3:dd:3d:67:bb:d4:c9:8e:23:7f Signature Algorithm: sha256WithRSAEncryption Issuer: CN=8fc69646457a8bf8ef9569b9b427e9f2c462e56e Validity Not Before: Aug 23 00:00:10 2025 GMT Not After : Aug 24 00:00:10 2025 GMT Subject: CN=1d63d57066f765d86bd7e0e08f81eb364093ab89 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:a0:8b:c5:b9:1a:c1:3e:c5:25:6c:a5:26:0b:95: 15:5a:e9:30:c1:cf:f1:bf:fe:8a:31:d9:be:37:a7: fc:f5:a5:65:ae:60:85:4c:26:26:d6:cc:1f:e7:c2: d4:3d:e9:01:fd:91:6c:57:95:5a:36:2a:cf:94:48: 85:57:72:d8:32:7a:1a:cd:87:cf:a1:c6:f1:55:23: a6:c6:2c:bf:ce:31:ae:58:1f:95:b6:b5:dc:f7:ae: 05:81:d6:a4:33:70:50:51:68:f5:b5:ea:00:20:1b: 1e:84:25:a7:cd:dd:ec:79:fb:ac:07:1a:ce:3b:c3: ea:a0:7f:ce:cc:a4:19:69:7d:3f:c8:63:6f:a7:87: 41:de:7e:dc:21:e1:d8:56:88:45:ad:1d:94:c3:a7: 77:41:b3:cd:1e:fa:f5:9c:31:6d:b2:81:fa:03:7c: aa:fa:ac:ac:eb:cc:2e:6f:2f:1a:29:58:26:30:96: 43:5c:4b:83:24:66:b4:0f:cd:8e:96:cc:4a:a0:d2: d9:03:b5:5b:83:dc:7d:65:07:dd:65:21:8b:54:65: 0b:a3:31:46:ea:2f:8b:6e:96:81:94:99:f1:a6:29: d9:53:57:ac:18:4b:0a:1c:31:74:ef:fe:60:b4:da: 48:41:bc:b7:56:f0:07:55:2c:1f:5a:ec:20:da:54: 45:63 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 1D:63:D5:70:66:F7:65:D8:6B:D7:E0:E0:8F:81:EB:36:40:93:AB:89 X509v3 Authority Key Identifier: keyid:8F:C6:96:46:45:7A:8B:F8:EF:95:69:B9:B4:27:E9:F2:C4:62:E5:6E X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/j8aWRkV6i_jvlWm5tCfp8sRi5W4.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/77/9fab5c-e138-4ef6-8799-b0b35a34e388/1/j8aWRkV6i_jvlWm5tCfp8sRi5W4.mft X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/77/9fab5c-e138-4ef6-8799-b0b35a34e388/1/j8aWRkV6i_jvlWm5tCfp8sRi5W4.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 66:98:a8:01:7b:85:4f:f3:92:0d:72:05:93:21:5d:41:cc:3b: de:12:14:13:64:c2:ba:0e:cb:d9:25:99:c8:f2:87:cd:7b:8a: 20:c8:5f:10:97:bb:8c:5e:da:4d:9e:bc:d2:d7:8c:d5:7a:6d: 12:50:21:00:88:6c:c6:86:9f:9a:65:9d:87:fe:af:56:be:9d: 27:17:40:1c:cf:78:e5:cd:16:79:4a:09:27:02:43:d1:96:e8: de:4f:9a:77:85:d2:2d:65:d1:99:c8:83:03:b6:e7:7a:f7:67: a7:ee:b2:67:a6:fd:3c:84:a7:39:59:44:46:8f:3b:9d:54:f6: 8a:fc:14:fa:2a:ca:24:51:dc:0c:37:66:94:a2:93:68:e6:bf: 47:3c:11:e7:2d:d6:01:e8:73:5d:bb:fa:8d:37:c5:42:b8:f8: b3:6e:65:5f:54:86:54:68:f7:f9:64:5a:e0:96:20:f1:f1:54: 25:4a:0a:18:f1:79:fc:5c:7a:4b:ee:96:91:ab:ad:27:cd:be: a7:82:64:ef:36:be:0d:34:e9:a5:21:fe:66:35:cb:a5:c2:7e: 66:89:00:ef:06:47:5d:f4:2a:ef:d3:af:ec:cd:ae:be:2b:f3: 6e:a8:6c:02:92:a5:43:da:8f:78:4d:68:7e:23:fc:54:52:90: 0d:23:3a:0c -----BEGIN CERTIFICATE----- MIIFFjCCA/6gAwIBAgISAZjUObz6GXbD3T1nu9TJjiN/MA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKDhmYzY5NjQ2NDU3YThiZjhlZjk1NjliOWI0MjdlOWYyYzQ2 MmU1NmUwHhcNMjUwODIzMDAwMDEwWhcNMjUwODI0MDAwMDEwWjAzMTEwLwYDVQQD EygxZDYzZDU3MDY2Zjc2NWQ4NmJkN2UwZTA4ZjgxZWIzNjQwOTNhYjg5MIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAoIvFuRrBPsUlbKUmC5UVWukwwc/x v/6KMdm+N6f89aVlrmCFTCYm1swf58LUPekB/ZFsV5VaNirPlEiFV3LYMnoazYfP ocbxVSOmxiy/zjGuWB+VtrXc964FgdakM3BQUWj1teoAIBsehCWnzd3sefusBxrO O8PqoH/OzKQZaX0/yGNvp4dB3n7cIeHYVohFrR2Uw6d3QbPNHvr1nDFtsoH6A3yq +qys68wuby8aKVgmMJZDXEuDJGa0D82OlsxKoNLZA7Vbg9x9ZQfdZSGLVGULozFG 6i+LbpaBlJnxpinZU1esGEsKHDF07/5gtNpIQby3VvAHVSwfWuwg2lRFYwIDAQAB o4ICIjCCAh4wHQYDVR0OBBYEFB1j1XBm92XYa9fg4I+B6zZAk6uJMB8GA1UdIwQY MBaAFI/GlkZFeov475VpubQn6fLEYuVuMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvajhhV1JrVjZpX2p2bFdtNXRDZnA4c1JpNVc0LmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC83Ny85ZmFiNWMtZTEzOC00ZWY2LTg3OTkt YjBiMzVhMzRlMzg4LzEvajhhV1JrVjZpX2p2bFdtNXRDZnA4c1JpNVc0Lm1mdDCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC83Ny85ZmFiNWMtZTEzOC00ZWY2LTg3OTktYjBiMzVhMzRlMzg4 LzEvajhhV1JrVjZpX2p2bFdtNXRDZnA4c1JpNVc0LmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAZpioAXuF T/OSDXIFkyFdQcw73hIUE2TCug7L2SWZyPKHzXuKIMhfEJe7jF7aTZ680teM1Xpt ElAhAIhsxoafmmWdh/6vVr6dJxdAHM945c0WeUoJJwJD0Zbo3k+ad4XSLWXRmciD A7bnevdnp+6yZ6b9PISnOVlERo87nVT2ivwU+irKJFHcDDdmlKKTaOa/RzwR5y3W AehzXbv6jTfFQrj4s25lX1SGVGj3+WRa4JYg8fFUJUoKGPF5/Fx6S+6WkautJ82+ p4Jk7za+DTTppSH+ZjXLpcJ+ZokA7wZHXfQq79Ov7M2uvivzbqhsApKlQ9qPeE1o fiP8VFKQDSM6DA== -----END CERTIFICATE-----Generated at Sat Aug 23 09:41:43 2025 by rpki-client