$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/90/9d9192-273c-4ca9-b2ba-fa9cb51cd0f1/1/ayM9dVCLToXMz0Q0mny3AxmNHSY.mft File: ayM9dVCLToXMz0Q0mny3AxmNHSY.mft (raw, json) Hash identifier: J6lmqjK4jDTuHi6LsHOfNoRXxPTaL8YWWa18sT2ICxI= Subject key identifier: 51:6D:D1:41:70:D8:FE:8C:E3:BE:02:E5:76:A4:BD:D6:F4:A8:55:85 Authority key identifier: 6B:23:3D:75:50:8B:4E:85:CC:CF:44:34:9A:7C:B7:03:19:8D:1D:26 Certificate issuer: /CN=6b233d75508b4e85cccf44349a7cb703198d1d26 Certificate serial: 0198D698226CCEC278BA8E4697E6B7E6A463 Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/ayM9dVCLToXMz0Q0mny3AxmNHSY.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/90/9d9192-273c-4ca9-b2ba-fa9cb51cd0f1/1/ayM9dVCLToXMz0Q0mny3AxmNHSY.mft Manifest number: 13B1 Signing time: Sat 23 Aug 2025 11:02:30 +0000 Manifest this update: Sat 23 Aug 2025 11:02:30 +0000 Manifest next update: Sun 24 Aug 2025 11:02:30 +0000 Files and hashes: 1: 2cIKXah99bs326V7_K2_ATU1wCc.roa (hash: 8U7vy7F8tH1dtIEl5RJoquiwlVH7Dw2C2urkmS/8Z1s=) 2: 3Q5YOz_BI10ve__t3IetYuqaGUA.roa (hash: ZILL1qGL3E11+bnE750yzGJ+LQfFTIO6h5xfluweBiQ=) 3: AjBp57cbFRBUIwIaXhNlUU4xc9Y.roa (hash: ZV9AX+FvWa4YVP0u/DD5byIthcNtHTveftQNUrL/KbI=) 4: CDcE_vqm19Y_w1U_nUrldF-Ugs0.roa (hash: xI3BVyx2LWN6Xd4vh4ettZDFc5P8efBg+uxBmnTHoxk=) 5: MWVrNJSe74q7kEhW6qS8QXcSrrc.roa (hash: SMPMCny2Jv5HoImrcf2XEmoMCaHU3khczb0z6CCQ9uc=) 6: ONBLhs2q3EPNBcKzjuUXI9NfDXk.roa (hash: 02TEqjTXH1kKdBwPOe/Fj5S0NZ7Hp7pCF4TDcYi4oGk=) 7: ZkxRUMGE9CQRvySfgcJj3kHytZg.roa (hash: UKRx7jBVZPPDl6SgbH7t7Qygyz8pBsSIfl7nu9h+mgg=) 8: aB6sxL1ZlKSQNpa4jL29xIkPi_I.roa (hash: zA0AFONbK9br9fZoJVU4SW6cugn1tuIJBYSB1Nl3/G8=) 9: ayM9dVCLToXMz0Q0mny3AxmNHSY.crl (hash: RgEBigvM7b3ONb44ATxfBJodhB2kkDKBHGfzeJiXGUA=) 10: fZeNbyH5ujZlgqfP9AgorOMXohA.roa (hash: Dn0aZqCRGKt2adMmUTTsiPmw4Pp+E7zhFHoCHO312UY=) 11: fb3lzsKRuT3DqmRVbbR-BGF4wXU.roa (hash: pxuBhHoXzqbakdVTx6L5TNOxX98HDl41yiAFcXSWT3Q=) 12: hEZZKQJ28Km_5UhH3cpxvYkLLZU.roa (hash: +vaYxbzQEi6M9mf3DyKNxFAOI6eLzddsZf7cVFe2WCE=) 13: hUM0lQ0ODj8Qil7w4D2sZvQVB4w.roa (hash: 8bKnMQhqygeFZmPwESYE+kESImBLAc2qmeTscpnWZ2s=) 14: hZs6PbiV1FHRQvgoNjIWkApb1x4.roa (hash: slbvJPVch+dH2HvE/UBBZulZ2jCavWoY4Ccie6OcAiU=) 15: itqdYmGsrfepmyYSKCd1c5R77js.roa (hash: W2/G8eoM3IFmeLBvMWU5XzC6g/z37f1zNFuZs/37yXE=) 16: lUA4Psv--QayOhT_SsZZvDZxilM.roa (hash: YGf2R2IX409XBgVvc7ca6dAQRj+o7jLte4H3tVm4ZpY=) 17: nPdGgeG-9wHMZBn1oHFY2TrIyd4.roa (hash: ixNDdEbsReVkHb4nZt1NyyQNAMSP0+ayTT4IyJE76/4=) 18: np9eNjgoLA0jYeMYnFqjApZ6K1s.roa (hash: rFv0HF9ou+nHz2ggvRQ0cKKf/+Wgihlq0XkCRw5GtV4=) 19: u5pfngYD-0MqXeQ11DbdTP8EwmU.roa (hash: xtu5m2bHnGuokc2D/B489MeQCUa3PeUYpTlbCBj8908=) Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/90/9d9192-273c-4ca9-b2ba-fa9cb51cd0f1/1/ayM9dVCLToXMz0Q0mny3AxmNHSY.crl rsync://rpki.ripe.net/repository/DEFAULT/90/9d9192-273c-4ca9-b2ba-fa9cb51cd0f1/1/ayM9dVCLToXMz0Q0mny3AxmNHSY.mft rsync://rpki.ripe.net/repository/DEFAULT/ayM9dVCLToXMz0Q0mny3AxmNHSY.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Sun 24 Aug 2025 05:01:29 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:98:d6:98:22:6c:ce:c2:78:ba:8e:46:97:e6:b7:e6:a4:63 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=6b233d75508b4e85cccf44349a7cb703198d1d26 Validity Not Before: Aug 23 11:02:30 2025 GMT Not After : Aug 24 11:02:30 2025 GMT Subject: CN=516dd14170d8fe8ce3be02e576a4bdd6f4a85585 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:dd:1c:92:b3:e0:bb:4a:6e:65:14:65:7a:df:6c: fb:dd:88:cf:b7:1e:41:2e:7b:60:41:25:b2:6f:de: 6a:8f:40:93:0e:4d:2a:93:49:df:de:b2:e8:7c:35: a4:71:59:0c:02:c4:e9:d6:96:f4:60:66:92:b6:4f: 51:c6:8d:54:c7:41:a7:4c:20:46:9c:5a:cb:af:a4: 0d:28:f7:35:75:91:38:d3:11:0f:c9:ae:c1:fb:20: a0:25:a4:35:45:54:ca:b4:0d:0c:da:18:ca:2d:fa: 72:a3:c4:e4:e9:5b:dc:7b:b4:3f:d7:90:70:bb:5e: cb:c1:e5:e8:82:e0:40:92:9c:52:a5:7a:7d:9d:a3: 35:a4:58:64:5e:79:89:54:35:ca:09:1c:94:10:dd: e5:1e:62:d6:92:fd:e6:c1:a7:ec:1c:0e:f4:3f:00: 52:40:0a:b9:e8:88:91:f2:b7:93:68:a2:df:99:c0: 70:98:20:ea:ab:12:fd:33:77:cf:f0:f3:b1:32:a4: 5e:95:8a:93:3d:02:4a:a6:20:2a:b1:ed:f3:62:49: 73:07:53:fe:bd:01:21:94:2e:c3:8d:5c:f0:7a:2b: c6:67:78:95:6c:be:27:f9:5a:76:fd:27:7f:f2:35: 43:b3:2b:24:08:ad:68:bf:6c:c8:79:43:d2:0d:44: 15:6d Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 51:6D:D1:41:70:D8:FE:8C:E3:BE:02:E5:76:A4:BD:D6:F4:A8:55:85 X509v3 Authority Key Identifier: keyid:6B:23:3D:75:50:8B:4E:85:CC:CF:44:34:9A:7C:B7:03:19:8D:1D:26 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/ayM9dVCLToXMz0Q0mny3AxmNHSY.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/90/9d9192-273c-4ca9-b2ba-fa9cb51cd0f1/1/ayM9dVCLToXMz0Q0mny3AxmNHSY.mft X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/90/9d9192-273c-4ca9-b2ba-fa9cb51cd0f1/1/ayM9dVCLToXMz0Q0mny3AxmNHSY.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 97:ca:37:93:8a:78:3e:d7:ee:ec:4d:e8:3c:c8:50:45:18:0c: 6d:0f:73:b6:8a:3c:b3:80:9a:1f:2e:38:6f:52:29:11:91:18: 21:07:0a:b3:be:50:86:5e:76:e2:7a:8e:4e:a3:27:72:c8:2c: 8d:26:8c:49:50:f9:c4:d6:38:84:4b:f0:19:92:17:21:cc:b6: e0:c8:a1:55:45:42:e8:76:11:73:e9:32:11:21:40:91:53:44: 3f:c6:9d:3e:a3:2b:33:4d:ac:eb:fb:77:ed:0c:45:81:e2:4d: 5b:0f:fb:38:fe:b5:dd:72:5a:90:31:1c:8f:75:a5:3f:64:0c: 32:71:b7:e7:0b:3a:c6:42:35:29:67:7b:45:f1:c4:ea:23:80: ea:bc:56:fc:6e:c5:ba:6b:91:32:76:63:77:f3:f5:5e:72:8b: f6:63:6b:d5:57:dd:e3:ad:f6:7b:8f:8f:92:c3:4a:f2:81:fa: ac:62:ff:59:86:81:e9:31:b7:fb:a4:a8:2b:6f:e8:e6:89:6b: 4f:35:77:bb:89:e6:51:7e:8c:e9:56:52:a4:f0:74:49:0b:04: 75:ff:ae:8c:36:c0:f4:32:16:76:c8:58:4b:1d:b6:30:0e:59: e0:96:ae:68:79:5d:5b:4c:6a:b8:a7:f3:e0:52:be:3c:19:29: e3:4c:0a:25 -----BEGIN CERTIFICATE----- MIIFFjCCA/6gAwIBAgISAZjWmCJszsJ4uo5Gl+a35qRjMA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKDZiMjMzZDc1NTA4YjRlODVjY2NmNDQzNDlhN2NiNzAzMTk4 ZDFkMjYwHhcNMjUwODIzMTEwMjMwWhcNMjUwODI0MTEwMjMwWjAzMTEwLwYDVQQD Eyg1MTZkZDE0MTcwZDhmZThjZTNiZTAyZTU3NmE0YmRkNmY0YTg1NTg1MIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEA3RySs+C7Sm5lFGV632z73YjPtx5B LntgQSWyb95qj0CTDk0qk0nf3rLofDWkcVkMAsTp1pb0YGaStk9Rxo1Ux0GnTCBG nFrLr6QNKPc1dZE40xEPya7B+yCgJaQ1RVTKtA0M2hjKLfpyo8Tk6Vvce7Q/15Bw u17LweXoguBAkpxSpXp9naM1pFhkXnmJVDXKCRyUEN3lHmLWkv3mwafsHA70PwBS QAq56IiR8reTaKLfmcBwmCDqqxL9M3fP8POxMqRelYqTPQJKpiAqse3zYklzB1P+ vQEhlC7DjVzweivGZ3iVbL4n+Vp2/Sd/8jVDsyskCK1ov2zIeUPSDUQVbQIDAQAB o4ICIjCCAh4wHQYDVR0OBBYEFFFt0UFw2P6M474C5Xakvdb0qFWFMB8GA1UdIwQY MBaAFGsjPXVQi06FzM9ENJp8twMZjR0mMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvYXlNOWRWQ0xUb1hNejBRMG1ueTNBeG1OSFNZLmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC85MC85ZDkxOTItMjczYy00Y2E5LWIyYmEt ZmE5Y2I1MWNkMGYxLzEvYXlNOWRWQ0xUb1hNejBRMG1ueTNBeG1OSFNZLm1mdDCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC85MC85ZDkxOTItMjczYy00Y2E5LWIyYmEtZmE5Y2I1MWNkMGYx LzEvYXlNOWRWQ0xUb1hNejBRMG1ueTNBeG1OSFNZLmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAl8o3k4p4 Ptfu7E3oPMhQRRgMbQ9ztoo8s4CaHy44b1IpEZEYIQcKs75Qhl524nqOTqMncsgs jSaMSVD5xNY4hEvwGZIXIcy24MihVUVC6HYRc+kyESFAkVNEP8adPqMrM02s6/t3 7QxFgeJNWw/7OP613XJakDEcj3WlP2QMMnG35ws6xkI1KWd7RfHE6iOA6rxW/G7F umuRMnZjd/P1XnKL9mNr1Vfd4632e4+PksNK8oH6rGL/WYaB6TG3+6SoK2/o5olr TzV3u4nmUX6M6VZSpPB0SQsEdf+ujDbA9DIWdshYSx22MA5Z4JauaHldW0xquKfz 4FK+PBkp40wKJQ== -----END CERTIFICATE-----Generated at Sat Aug 23 14:15:36 2025 by rpki-client