$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/80/fb42ec-10b4-4dcf-bef0-2d143d7b853c/1/9fsy0iZrH5vOV8rJi8AkfyyRl_I.mft File: 9fsy0iZrH5vOV8rJi8AkfyyRl_I.mft (raw, json) Hash identifier: N4yyT7suPVf4WQa/1daEpTB+RKWQrj+yF0+2c701EyQ= Subject key identifier: 9F:22:82:1A:BF:E3:7B:09:D3:9A:28:D5:EC:82:69:75:9F:39:08:D4 Authority key identifier: F5:FB:32:D2:26:6B:1F:9B:CE:57:CA:C9:8B:C0:24:7F:2C:91:97:F2 Certificate issuer: /CN=f5fb32d2266b1f9bce57cac98bc0247f2c9197f2 Certificate serial: 0198D6607877D76060E89F746FCD1B24FE37 Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/9fsy0iZrH5vOV8rJi8AkfyyRl_I.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/80/fb42ec-10b4-4dcf-bef0-2d143d7b853c/1/9fsy0iZrH5vOV8rJi8AkfyyRl_I.mft Manifest number: 0FF1 Signing time: Sat 23 Aug 2025 10:01:43 +0000 Manifest this update: Sat 23 Aug 2025 10:01:43 +0000 Manifest next update: Sun 24 Aug 2025 10:01:43 +0000 Files and hashes: 1: 7InXKoGXPyPmSkShdNo1bN5BHPE.roa (hash: p0vQNoVwsgdCf98zXzcil2JDwtIbKg4o52YVuAX43Qg=) 2: 9fsy0iZrH5vOV8rJi8AkfyyRl_I.crl (hash: lAGJiCRWnPqkE5y1bFKVvTARfzWbEiCkV+yRINVA4PI=) 3: G7eTk3jqB-BdA_Wy3K2E2YFtyTA.roa (hash: OtseOoY4gfu7tKjqn1wIwpg1/zv9XoIf0fx8DQ1CUfM=) 4: ISNHkwTdIse1R5eVAbZVrpNzf7I.roa (hash: aWcNBCaUk6iVQl/ljrkexa0tplOypXs9VyEvekzMA3M=) 5: L0ujmwzkJ6RRH45eugAjMYC2Zhg.roa (hash: ZYuGlloJDpR2SY2TTczc6v50q6dosW6j6YAj25G96Pg=) 6: LII7hRC3tP9UTUOEbD-OlE2YLz0.roa (hash: 2G0IT+KoXJQxpXp8HjaK3udKnKhR8XLas866IuV7Mj4=) 7: MGAJtndIL2Zkck_RVFiKK_Egp5c.roa (hash: 3Dl+p66+/Z3qtyr+Z1rkPfMp8vG5nBq1fl9w3qHRGM4=) 8: VTdQuPLguO6Ibw0Th9ypJCxyOf8.roa (hash: ipcRPToVDEN7EVH1AfqkAeCn3ymsz/f4y1+i87V66wQ=) 9: _nLYAZC-VddX97JjR5Q6LKKqBQ4.roa (hash: ndREz8aC1hd1w5pe58qePL+6kw9PyDSZ6Q1HeOlC7Rc=) 10: d1Mc0OsWnepemmVerPa7kdZl1N8.roa (hash: JRdvIEtlRj7j9yeTQYkXzcTmst5QyvuiftJaDhMJ8Og=) 11: gZtcQ4r6Woqv34G6dpT_HEC-DoY.roa (hash: FjGgXSzWLOa8xqz/zgnt2HT+YvKm/u5bq1IXo4VHelQ=) 12: k_9bhWj2JcQnyMq-FPfEv0otOUw.roa (hash: Zs3oxA2HTYXtiE5lUDi8OJy4SVF/+vQT5qkuzqaf+ew=) 13: o4_pEwPipmYi6C3PXNhpC7by3MA.roa (hash: HbprNAxeP8NoQY7jwdw1Rs3l1Tj/TI85puQfPIX124c=) 14: p5_bRG9M5kT8MStfkRHRT1v8cg0.roa (hash: ZjQG7VMMupt1nuY8BdmGWD7HOxruqtYbna7mlcKvAUo=) 15: qjxC3CMWMpiM1TpibiIWl8s1Se0.roa (hash: vL7m0foCqcx4qZwFUYV1ieilxVwO5UgoFDNdvDch1DE=) 16: t0gWV72zLQLExI3pDHKlUQNMCLg.roa (hash: sZqkeiCyvYuQZJfxR8h/KOL8f5qWehA/zicZawvNouA=) 17: wj2VxfuvQPp_y-B-S4cBoG4no9E.roa (hash: NUb/774hisZdKkcNsYbowzixlPdgcgSeN+DazRzxjeU=) 18: yKoxV-6M6xkebvfJ-LK1Pi2FfE4.roa (hash: BokFvMbsrr4nAc7qB6GIDJeX4FQmEPo1VOjQtgLqvj0=) Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/80/fb42ec-10b4-4dcf-bef0-2d143d7b853c/1/9fsy0iZrH5vOV8rJi8AkfyyRl_I.crl rsync://rpki.ripe.net/repository/DEFAULT/80/fb42ec-10b4-4dcf-bef0-2d143d7b853c/1/9fsy0iZrH5vOV8rJi8AkfyyRl_I.mft rsync://rpki.ripe.net/repository/DEFAULT/9fsy0iZrH5vOV8rJi8AkfyyRl_I.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Sun 24 Aug 2025 10:01:43 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:98:d6:60:78:77:d7:60:60:e8:9f:74:6f:cd:1b:24:fe:37 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=f5fb32d2266b1f9bce57cac98bc0247f2c9197f2 Validity Not Before: Aug 23 10:01:43 2025 GMT Not After : Aug 24 10:01:43 2025 GMT Subject: CN=9f22821abfe37b09d39a28d5ec8269759f3908d4 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:a9:83:36:ca:5f:b8:d2:58:cc:9e:4c:30:dd:06: bc:2f:1a:b9:cd:57:2a:43:b3:15:8a:e6:c5:7b:ec: 85:e3:bf:34:5e:cd:23:15:37:80:c2:03:72:40:d9: 1b:8e:ac:ea:64:5b:ba:bf:1a:01:e3:e9:0f:26:e3: be:88:c5:78:84:9a:dc:2c:d0:2f:34:39:c7:83:98: 55:40:e3:df:d2:dc:35:c1:ed:79:1b:9e:38:fd:7f: c6:44:64:48:5a:8c:49:4d:cf:6b:6d:47:bf:41:a8: 2a:c7:64:5f:7f:08:ed:07:22:f5:f0:23:03:41:44: ed:ca:75:6e:ff:f6:e1:05:a1:98:aa:05:39:2c:db: 76:72:0f:a0:1f:65:c5:b7:1f:5d:f5:8d:17:44:8a: e5:77:17:b2:ef:13:98:3b:c1:27:0d:4d:21:7c:bb: 91:74:d8:43:1e:73:9a:29:a6:1b:10:c1:de:36:8b: 01:2c:61:39:1b:3f:cb:49:d4:fc:4b:08:e8:f7:1e: cb:b1:b9:16:b0:c8:57:0f:b4:17:4b:7a:b3:7e:cc: 6b:99:03:a9:68:45:85:b0:37:8c:0d:ae:25:1d:82: fb:d7:19:d7:57:09:e7:41:1f:1e:83:54:4d:2e:3a: d7:2a:f8:9c:23:72:54:87:86:9b:aa:01:9d:bb:02: 81:95 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 9F:22:82:1A:BF:E3:7B:09:D3:9A:28:D5:EC:82:69:75:9F:39:08:D4 X509v3 Authority Key Identifier: keyid:F5:FB:32:D2:26:6B:1F:9B:CE:57:CA:C9:8B:C0:24:7F:2C:91:97:F2 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/9fsy0iZrH5vOV8rJi8AkfyyRl_I.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/80/fb42ec-10b4-4dcf-bef0-2d143d7b853c/1/9fsy0iZrH5vOV8rJi8AkfyyRl_I.mft X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/80/fb42ec-10b4-4dcf-bef0-2d143d7b853c/1/9fsy0iZrH5vOV8rJi8AkfyyRl_I.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 07:1f:0f:7a:8f:24:10:49:14:14:2a:9d:b3:34:fe:a5:a7:23: 8a:93:71:ad:12:db:cf:42:9b:70:cf:0e:9f:8a:ec:c7:72:76: 50:67:4c:b3:a6:6b:cd:b5:c4:d3:56:4f:b7:40:95:c4:90:55: 1c:3c:ca:79:7e:d0:3c:5f:da:58:78:dc:7d:bb:b6:d8:cc:ef: 98:14:71:94:29:2b:06:e7:20:9e:9e:17:51:21:c5:de:f2:d9: e2:bc:d6:d0:f5:78:59:57:2b:d3:5c:ad:3c:a1:f6:a1:cd:f6: 67:3b:df:11:12:47:44:39:2c:6d:1a:14:15:8b:06:ee:47:6b: 85:4c:c0:83:3b:61:80:15:d5:72:eb:5c:b9:58:66:ca:cb:1a: 8a:44:9c:cc:a8:8d:1d:d3:9a:e1:53:37:50:2d:a1:e9:c1:1c: e0:30:c6:ea:66:c2:96:72:b4:4f:fc:d2:81:c1:6e:9a:70:a0: 67:eb:38:65:84:82:9c:94:e0:d2:45:96:19:bb:04:15:ef:55: fd:e1:64:b1:43:37:d3:e0:68:ad:b6:b9:8d:e3:a7:90:5f:e3: 08:b6:ec:27:22:2e:13:26:fc:35:ee:5b:a3:75:f5:40:27:bc: a4:7c:f7:e0:9d:d5:82:91:f6:43:25:f4:90:67:b1:f8:3f:1b: 39:5b:7e:6a -----BEGIN CERTIFICATE----- MIIFFjCCA/6gAwIBAgISAZjWYHh312Bg6J90b80bJP43MA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKGY1ZmIzMmQyMjY2YjFmOWJjZTU3Y2FjOThiYzAyNDdmMmM5 MTk3ZjIwHhcNMjUwODIzMTAwMTQzWhcNMjUwODI0MTAwMTQzWjAzMTEwLwYDVQQD Eyg5ZjIyODIxYWJmZTM3YjA5ZDM5YTI4ZDVlYzgyNjk3NTlmMzkwOGQ0MIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAqYM2yl+40ljMnkww3Qa8Lxq5zVcq Q7MViubFe+yF4780Xs0jFTeAwgNyQNkbjqzqZFu6vxoB4+kPJuO+iMV4hJrcLNAv NDnHg5hVQOPf0tw1we15G544/X/GRGRIWoxJTc9rbUe/Qagqx2RffwjtByL18CMD QUTtynVu//bhBaGYqgU5LNt2cg+gH2XFtx9d9Y0XRIrldxey7xOYO8EnDU0hfLuR dNhDHnOaKaYbEMHeNosBLGE5Gz/LSdT8Swjo9x7LsbkWsMhXD7QXS3qzfsxrmQOp aEWFsDeMDa4lHYL71xnXVwnnQR8eg1RNLjrXKvicI3JUh4abqgGduwKBlQIDAQAB o4ICIjCCAh4wHQYDVR0OBBYEFJ8ighq/43sJ05oo1eyCaXWfOQjUMB8GA1UdIwQY MBaAFPX7MtImax+bzlfKyYvAJH8skZfyMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvOWZzeTBpWnJINXZPVjhySmk4QWtmeXlSbF9JLmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC84MC9mYjQyZWMtMTBiNC00ZGNmLWJlZjAt MmQxNDNkN2I4NTNjLzEvOWZzeTBpWnJINXZPVjhySmk4QWtmeXlSbF9JLm1mdDCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC84MC9mYjQyZWMtMTBiNC00ZGNmLWJlZjAtMmQxNDNkN2I4NTNj LzEvOWZzeTBpWnJINXZPVjhySmk4QWtmeXlSbF9JLmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEABx8Peo8k EEkUFCqdszT+pacjipNxrRLbz0KbcM8On4rsx3J2UGdMs6ZrzbXE01ZPt0CVxJBV HDzKeX7QPF/aWHjcfbu22MzvmBRxlCkrBucgnp4XUSHF3vLZ4rzW0PV4WVcr01yt PKH2oc32ZzvfERJHRDksbRoUFYsG7kdrhUzAgzthgBXVcutcuVhmyssaikSczKiN HdOa4VM3UC2h6cEc4DDG6mbClnK0T/zSgcFumnCgZ+s4ZYSCnJTg0kWWGbsEFe9V /eFksUM30+Borba5jeOnkF/jCLbsJyIuEyb8Ne5bo3X1QCe8pHz34J3VgpH2QyX0 kGex+D8bOVt+ag== -----END CERTIFICATE-----Generated at Sat Aug 23 16:45:03 2025 by rpki-client