$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/84/962fb1-3df0-4ec2-b50a-b36a24d39427/1/g1vJu1R-J3iNIhvIu9X7AuAkSA8.mft File: g1vJu1R-J3iNIhvIu9X7AuAkSA8.mft (raw, json) Hash identifier: Ck9gFNVTuPpKjjEpYMBMqZ1ipeatOkiMpGeNyB+mS7E= Subject key identifier: 98:A8:9C:1F:38:98:8B:D9:E1:FA:91:8F:20:83:6F:E8:32:94:2A:07 Authority key identifier: 83:5B:C9:BB:54:7E:27:78:8D:22:1B:C8:BB:D5:FB:02:E0:24:48:0F Certificate issuer: /CN=835bc9bb547e27788d221bc8bbd5fb02e024480f Certificate serial: 0198D629887CE5878B194820698E0B403B55 Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/g1vJu1R-J3iNIhvIu9X7AuAkSA8.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/84/962fb1-3df0-4ec2-b50a-b36a24d39427/1/g1vJu1R-J3iNIhvIu9X7AuAkSA8.mft Manifest number: 1663 Signing time: Sat 23 Aug 2025 09:01:42 +0000 Manifest this update: Sat 23 Aug 2025 09:01:42 +0000 Manifest next update: Sun 24 Aug 2025 09:01:42 +0000 Files and hashes: 1: 0RuxYCs-ZR77zbS2FKRWZztVK0Q.roa (hash: jSdqasNIGwiL/SkcUsG3UsldrYCjzkxpl4GYnjGAclY=) 2: 4jaGZdOEYrPblfps0YpbkEMcNKM.roa (hash: G6P2F/yQN3KTaexhThEC0j4hTEjLeDNZKdLyv/NC+3M=) 3: 4sVuDUHUhuqv4fotP4t5XZJrll4.roa (hash: ObxWj69OtudWkX1fVAGgmn9Z1mlrHpzlXmvK45aoIXM=) 4: DXe2QCeg44oSwSjch2B9InQFKjo.roa (hash: K6OnR7hdUcOFhOpAS0quOhv9TOcSZTKYV24C7+i6Ykc=) 5: Dtu0FUQBTwq7nMetgTpNdxrJrUc.roa (hash: 2+O0fEd5VicZaDp5QDSOVxRQGaFMgRpvuxLyoCSaMdM=) 6: LfLe7YKoxpINUdoXGyuAfXYrniQ.roa (hash: Dgetk7NQsymcClj7R3CjDeNB27bpcwbabN1XuUrEiuk=) 7: QP6HFrGNHPgiMzuluLrD65g0i-A.roa (hash: l99hGpVbTIt/+tvuvWJuKHSUe5o+u4epf35vOiEw4Vc=) 8: TcREFaat3BLntw04ypyL63blPnc.roa (hash: ujFrwypXV/leJfWI8GP1wwYG1eD9LOp8Gpc7lvuU/io=) 9: Zg9LMTVlLMAMzOgaRCOZsvbj5YY.roa (hash: 9YC0kyDqEXxaDbjw/WFc8btR+dLVmBtAW2yMy6GIxwY=) 10: ZgkKPqbv9uiQkq9_E4cqyYGcFls.roa (hash: m/krRcpOPe54FnCcamtSok5EA+fs9cArfGttZA4+K7A=) 11: bL6MKH62F5NiojNDkRLOm7t1V50.roa (hash: VYSTyygBbvuJ4ferc/WHT6RrnYr38adoWbgUflVODE4=) 12: e8sw3NSVdW7RuwBxKGlVO3o7vs4.roa (hash: vas7IbvKA+23Qxw1IFtJvSTpfV6psv5Y/rS0T6Oox/Y=) 13: g1vJu1R-J3iNIhvIu9X7AuAkSA8.crl (hash: NheYg3Q9edqpxR6MQ1hrDiFNWEJH9vMODJTN9HdVhTo=) 14: lmi4kKkD-fm8PiwIfC8JLrzBw14.roa (hash: YX7AOdebhpFQSdPo9Jj8qzaopE6t4H529tPcuJmvtPc=) 15: ndVpFTiV-032z1oLz_wixEvXGiw.roa (hash: /HnhEZMMk7Eh52x99XbC/u8H+8NvDyXM8aky5jw29mA=) 16: qxvPMaX8OGrCfU_og9o2DVWnb6o.roa (hash: EVV5E8QbGEPDIg0iJeaGWGQ6+38SPbZU14znorEijaI=) 17: rvBoaYSrYkbtJTtOKbhTdATaFJM.roa (hash: LE4FJA/j7M053Yg4eAl5SJ9uM0sRd4GVsWhWeNGGUv0=) 18: z4wc-XAByuKg9_4TbtczZujvcTM.roa (hash: k/l1khmraEpcZ2ZtOkT01pmuwNGz8qHwS9DZWQhB7Ek=) Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/84/962fb1-3df0-4ec2-b50a-b36a24d39427/1/g1vJu1R-J3iNIhvIu9X7AuAkSA8.crl rsync://rpki.ripe.net/repository/DEFAULT/84/962fb1-3df0-4ec2-b50a-b36a24d39427/1/g1vJu1R-J3iNIhvIu9X7AuAkSA8.mft rsync://rpki.ripe.net/repository/DEFAULT/g1vJu1R-J3iNIhvIu9X7AuAkSA8.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Sun 24 Aug 2025 05:01:29 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:98:d6:29:88:7c:e5:87:8b:19:48:20:69:8e:0b:40:3b:55 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=835bc9bb547e27788d221bc8bbd5fb02e024480f Validity Not Before: Aug 23 09:01:42 2025 GMT Not After : Aug 24 09:01:42 2025 GMT Subject: CN=98a89c1f38988bd9e1fa918f20836fe832942a07 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:ae:b8:8e:d3:27:36:67:5c:7a:c9:22:67:47:47: f7:1d:c7:29:cb:ed:ee:1b:3c:36:d3:d1:0c:1d:96: ef:95:59:63:5d:5f:64:c5:46:cb:74:2e:03:5b:33: ca:e6:c7:2a:f1:a9:b0:ef:26:2e:91:9a:a6:7a:de: aa:9e:9d:3d:13:c5:c6:bd:6a:a2:41:f1:3c:1e:6b: bf:81:3a:a1:a4:39:3b:9e:d0:cc:e0:86:1f:73:be: fa:05:e5:57:57:65:bc:fb:68:ac:dc:95:58:76:92: ee:ef:84:f3:87:f2:f0:d1:c8:a6:3e:34:6c:a3:29: e9:32:fc:13:a3:0c:b9:e3:40:40:ab:61:77:99:89: 04:21:7a:9f:8c:6e:bc:e9:15:e8:63:77:45:66:0b: 43:22:2d:cc:1a:f1:fa:70:43:66:f3:22:c2:f6:b6: 9f:db:74:6c:1e:f7:ce:af:d7:2a:dc:6f:ee:cb:08: ab:75:23:00:aa:66:21:8d:ee:91:c9:91:b5:81:a1: 09:e9:dc:33:f0:1f:f2:01:45:ca:ed:f8:01:d6:99: f7:c6:6c:25:ee:e9:5b:77:c6:61:67:92:23:d7:f9: 91:8f:0a:ba:3b:23:79:19:08:16:4a:89:cf:25:1c: da:5a:01:2c:9e:da:08:06:58:09:a2:ea:42:7c:d2: 54:4f Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 98:A8:9C:1F:38:98:8B:D9:E1:FA:91:8F:20:83:6F:E8:32:94:2A:07 X509v3 Authority Key Identifier: keyid:83:5B:C9:BB:54:7E:27:78:8D:22:1B:C8:BB:D5:FB:02:E0:24:48:0F X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/g1vJu1R-J3iNIhvIu9X7AuAkSA8.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/84/962fb1-3df0-4ec2-b50a-b36a24d39427/1/g1vJu1R-J3iNIhvIu9X7AuAkSA8.mft X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/84/962fb1-3df0-4ec2-b50a-b36a24d39427/1/g1vJu1R-J3iNIhvIu9X7AuAkSA8.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption cd:08:fe:76:37:b2:81:92:0a:26:39:a2:82:57:84:3d:63:1e: 30:a8:00:d3:e9:c8:64:6d:40:71:55:37:d3:50:0c:d9:92:20: f5:cf:93:8c:3b:7c:d4:53:fa:2b:82:14:73:cc:c6:85:c8:63: d1:bf:0c:dd:40:b2:b4:88:0e:72:05:90:c2:8e:b3:97:83:0e: 10:d8:0c:5d:6a:cf:d2:ce:07:86:0b:20:1f:ad:d1:24:43:70: f0:56:32:62:4a:ee:6d:3f:a6:94:bf:7b:ae:e5:45:4d:52:d1: a0:34:b9:52:89:3d:e1:6f:90:85:a5:a4:59:49:fa:ad:eb:30: 9c:34:17:5e:35:ac:5a:86:c2:84:52:f1:1a:c7:71:2a:1b:26: 6e:19:fa:fb:f1:70:9c:0a:8c:3f:1e:be:40:d5:a5:e6:85:8b: 53:a9:86:e8:2b:e9:74:79:b0:f2:d2:22:70:f6:2f:6d:ea:2a: 43:14:66:be:98:0d:30:af:48:50:60:a0:b3:40:23:c1:d9:07: 3c:29:6d:07:35:c4:46:26:63:10:9c:a9:8e:ff:08:ca:bb:9a: af:c6:43:bb:38:49:b7:79:80:ca:e2:5d:44:fd:dd:43:ea:25: 74:f8:44:e5:c8:fd:33:7a:82:4d:9a:65:b6:68:81:05:23:f8: 0c:c0:86:66 -----BEGIN CERTIFICATE----- MIIFFjCCA/6gAwIBAgISAZjWKYh85YeLGUggaY4LQDtVMA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKDgzNWJjOWJiNTQ3ZTI3Nzg4ZDIyMWJjOGJiZDVmYjAyZTAy NDQ4MGYwHhcNMjUwODIzMDkwMTQyWhcNMjUwODI0MDkwMTQyWjAzMTEwLwYDVQQD Eyg5OGE4OWMxZjM4OTg4YmQ5ZTFmYTkxOGYyMDgzNmZlODMyOTQyYTA3MIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEArriO0yc2Z1x6ySJnR0f3Hccpy+3u Gzw209EMHZbvlVljXV9kxUbLdC4DWzPK5scq8amw7yYukZqmet6qnp09E8XGvWqi QfE8Hmu/gTqhpDk7ntDM4IYfc776BeVXV2W8+2is3JVYdpLu74Tzh/Lw0cimPjRs oynpMvwTowy540BAq2F3mYkEIXqfjG686RXoY3dFZgtDIi3MGvH6cENm8yLC9raf 23RsHvfOr9cq3G/uywirdSMAqmYhje6RyZG1gaEJ6dwz8B/yAUXK7fgB1pn3xmwl 7ulbd8ZhZ5Ij1/mRjwq6OyN5GQgWSonPJRzaWgEsntoIBlgJoupCfNJUTwIDAQAB o4ICIjCCAh4wHQYDVR0OBBYEFJionB84mIvZ4fqRjyCDb+gylCoHMB8GA1UdIwQY MBaAFINbybtUfid4jSIbyLvV+wLgJEgPMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvZzF2SnUxUi1KM2lOSWh2SXU5WDdBdUFrU0E4LmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC84NC85NjJmYjEtM2RmMC00ZWMyLWI1MGEt YjM2YTI0ZDM5NDI3LzEvZzF2SnUxUi1KM2lOSWh2SXU5WDdBdUFrU0E4Lm1mdDCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC84NC85NjJmYjEtM2RmMC00ZWMyLWI1MGEtYjM2YTI0ZDM5NDI3 LzEvZzF2SnUxUi1KM2lOSWh2SXU5WDdBdUFrU0E4LmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAzQj+djey gZIKJjmigleEPWMeMKgA0+nIZG1AcVU301AM2ZIg9c+TjDt81FP6K4IUc8zGhchj 0b8M3UCytIgOcgWQwo6zl4MOENgMXWrP0s4HhgsgH63RJENw8FYyYkrubT+mlL97 ruVFTVLRoDS5Uok94W+QhaWkWUn6reswnDQXXjWsWobChFLxGsdxKhsmbhn6+/Fw nAqMPx6+QNWl5oWLU6mG6CvpdHmw8tIicPYvbeoqQxRmvpgNMK9IUGCgs0AjwdkH PCltBzXERiZjEJypjv8Iyruar8ZDuzhJt3mAyuJdRP3dQ+oldPhE5cj9M3qCTZpl tmiBBSP4DMCGZg== -----END CERTIFICATE-----Generated at Sat Aug 23 14:07:54 2025 by rpki-client