$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/97/f0ae62-c107-43ce-a8a9-6b4372602096/1/RFnsKl_VOQnFI59MyNbTKaJ3m7E.mft File: RFnsKl_VOQnFI59MyNbTKaJ3m7E.mft (raw, json) Hash identifier: oWYFxCzuYoZ+QumRLyNKI2m3RwHEChgUSHNITQ9aFSw= Subject key identifier: F9:54:F7:55:0E:42:29:5B:13:68:D2:F1:78:74:24:49:C1:E2:32:8C Authority key identifier: 44:59:EC:2A:5F:D5:39:09:C5:23:9F:4C:C8:D6:D3:29:A2:77:9B:B1 Certificate issuer: /CN=4459ec2a5fd53909c5239f4cc8d6d329a2779bb1 Certificate serial: 0198D5836C9DA59F1FA131B8449DDBCBEA98 Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/RFnsKl_VOQnFI59MyNbTKaJ3m7E.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/97/f0ae62-c107-43ce-a8a9-6b4372602096/1/RFnsKl_VOQnFI59MyNbTKaJ3m7E.mft Manifest number: 1717 Signing time: Sat 23 Aug 2025 06:00:16 +0000 Manifest this update: Sat 23 Aug 2025 06:00:16 +0000 Manifest next update: Sun 24 Aug 2025 06:00:16 +0000 Files and hashes: 1: 1-7aN5Y6Foyja-HiqAj9gN6Rc6k4.roa (hash: jDZWxzV6WKasK/KOSHm608wpr9AiNLlJdvyr4xiSzWk=) 2: 10M3-RfIQV3NW38sTt84h19doqM.roa (hash: fr/uZNa0p91ao9kbKIopODsJw9xbA9tAQ6bp3+hbIzo=) 3: 6ugQ7Op1QlEgpnnjZORYaHyj-n4.roa (hash: da6x8ewYyKy59i5CpZgWQCl1+/GS7ELU/wuWQ0Fl69Q=) 4: 93XoyOBot5Q31NIUzCFTG35eypU.roa (hash: 3DisuqOhct1g6Kl/cifQgLMmcCXnn6jb3AkS/2a6zZU=) 5: 9lb0b8puZUrfHtd0Z5dIrE77_nU.roa (hash: OJTr3zPbOINFegVE0vxgz27hNWHc6eDJ+C9CqzwclrQ=) 6: AYE9RP6khvfye_7uC2vRmqzDees.roa (hash: VO7W7FrsKeQNaTvLKPgJFYccrl9+5IT8HgXKnTlUDg8=) 7: Ch-PYAhyFagok0fhupPjZ_Lqcbg.roa (hash: MkUDcB5uA+GO6qe6fT2sF+iljffZj0n8p1hLZtz2zP0=) 8: I0285mEqTYvxtf-YdOlMsXqnwE8.roa (hash: jUvu2e798qxwWX/SO3R/OaJlKxHtUy0iBk2O74dZKD4=) 9: JUyxU9F3JlDU8_kPHaIM7D1fTB4.roa (hash: lVPZY1fXxxj7hHiCvzUwToPcItRxiXJdn4MbDVZ/BIE=) 10: Lve6BQbeL2rFjoFCEuei9a2B55k.roa (hash: /LeeZHXLPxH/tzbUGQf83LW7pwH4khS3syMv2XfxHPI=) 11: OOKUSdBo719Fy6eQLO8FhLRmb-A.roa (hash: 0lNFdByCLqg9LTuNeACyTh+4cjDobHcCQ2yCIpT7EoU=) 12: ORMfVTwPs1g4XJUABRwPxcI2TlM.roa (hash: 9SsDOeofewDgil5pBAt7LCSquVuRcpzseNGmRukWM3E=) 13: PEiuIrxRAt_nWSHWFCZ-Y1OnDuo.roa (hash: ZSdReMmjCAzPhYFnV9uySINs/4oWCSJNtieIfzwYQ/s=) 14: POIbET2y0PbfSBlBzEywzQzwDZM.roa (hash: c2xoo6jdbzcBQgJLO4NjoS/VTJiuYBB4TzzOCdQY54Y=) 15: RFnsKl_VOQnFI59MyNbTKaJ3m7E.crl (hash: SCbNazT0sdE1rcIt4xYA/0iR0GGiHHwfyTWVs86hesI=) 16: W8pbaE9SITvmp3StMfJ7E--X4M0.roa (hash: uRUesuHnpXbWgYa8xNv9zFt/fxahoQmchuNu9Hzil3c=) 17: ZI6GdsMzohLPUFShGgyzJq1kyik.roa (hash: PrDvAMB+nPO9eaE9jiZQHT0Ok3/0hmxZNq9LGHu2LmY=) 18: ZTNxxf9Sv4EBIpVp27CcJMGatqI.roa (hash: qgnMNoDlY76gADXwHdrnws2enpTow72z+24Q3TkgA6g=) 19: doTkTINLFVROWpT2utaeKFTTyfg.roa (hash: JBSOler1D5ArGxteRfH6QxI8GrNqgOUNUjr08yLOppA=) 20: fppOoPtasrtX4ZPzc57YRYYu954.roa (hash: b5+haWAHnyoPiS6Ivn63/MAGZ3E+APtZSJu8to6vL6M=) 21: hmf92WiBFjmzN343WPL4dSXIFak.roa (hash: tFUSfY/dpte4ljkINbzL+FeZDYPzvtaSG9KZ1d5SzXE=) 22: ijaEBGBM7o1seGP9ZFryQWjDWk4.roa (hash: Pjmjb1/h0AeL+KxQ/QOIKyfX0TnoNPhenlbIfi1Wt9Y=) 23: pJLtq0OEiC2n7NLXkBcDtX4LKDI.roa (hash: uNIUZktT2Y68Tva6qi8p96kvm5I4VqlHL5j6Sqmwjo8=) 24: r47m3eotHrMfZKa0-yAY8glxtLY.roa (hash: mRtglxssp+DT8qOyFoRUQ5mLUPm3H45BSG3whqlcJGc=) 25: rznOCTPZyadrsSzyPCChz69ZAxU.roa (hash: 2zkH1SRaKlvMmrIdmVipWy+g7uH2rfqKdzk0RNlqPlA=) 26: sTTymR01F6RDoynC8TSKvkamGWE.roa (hash: Q6Klebt7/VfO16Ve7IU7cVobaORhn/KAvxjY4XLaEeQ=) 27: tar55zvuH18kuOxMVvu0NW5b5Yw.roa (hash: A6vRPid9iNZmBQQQbcvjnNeHXEMvqtHNVZn5MSwsclo=) 28: wJSVIQ5jg_-lv48HD0WKwu2CbdM.roa (hash: oRLIIxFVnadydVwsfyy8jjdbfqtuyuSbLDJWjt8TqWI=) 29: ziWOGVzc91RDjHDHhPd1qawwCoQ.roa (hash: MaCT2em34JjV5QJZwshEC6RNemddpDFN1wmBFpOjty8=) Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/97/f0ae62-c107-43ce-a8a9-6b4372602096/1/RFnsKl_VOQnFI59MyNbTKaJ3m7E.crl rsync://rpki.ripe.net/repository/DEFAULT/97/f0ae62-c107-43ce-a8a9-6b4372602096/1/RFnsKl_VOQnFI59MyNbTKaJ3m7E.mft rsync://rpki.ripe.net/repository/DEFAULT/RFnsKl_VOQnFI59MyNbTKaJ3m7E.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Sun 24 Aug 2025 05:01:29 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:98:d5:83:6c:9d:a5:9f:1f:a1:31:b8:44:9d:db:cb:ea:98 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=4459ec2a5fd53909c5239f4cc8d6d329a2779bb1 Validity Not Before: Aug 23 06:00:16 2025 GMT Not After : Aug 24 06:00:16 2025 GMT Subject: CN=f954f7550e42295b1368d2f178742449c1e2328c Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:93:c3:80:3b:e0:85:80:5a:56:2d:0d:0c:73:28: 9d:9d:0e:53:ff:11:33:bf:a2:25:81:af:8e:29:43: e2:db:82:f3:9f:bd:7e:bf:20:13:5d:f5:f3:7e:c3: c1:df:e3:6c:57:36:91:db:c1:c3:9f:16:ae:7e:f9: 4f:73:3b:ef:ba:73:5a:b4:0b:6f:d3:fa:6d:70:54: 4f:9f:f0:84:06:58:bc:3b:26:0b:6d:74:c2:5e:6d: 0d:13:44:d7:03:1e:89:5b:af:83:9d:86:fa:0b:a3: 52:8f:09:ad:67:ab:71:b8:a3:23:a2:e0:4b:ea:2d: 97:75:d4:b1:42:b9:ba:44:54:39:06:90:bc:ed:6b: 0d:f9:bf:45:9a:85:fb:02:7d:62:b5:37:12:f3:83: a3:90:2a:a5:0b:11:ba:0d:0a:49:d4:9d:47:ba:b7: e5:17:c3:b4:52:e4:5a:d0:de:ec:7b:e6:85:a8:74: 50:4e:b2:8c:22:c3:3e:96:10:71:fb:a2:16:d9:c8: bb:b2:0a:c2:95:e4:37:cc:89:1d:87:60:a2:bb:0c: a8:70:a1:62:1b:3c:7e:82:c2:6d:3f:b2:a9:d8:02: 88:2b:42:22:d6:5d:23:75:b8:86:88:29:51:09:e0: d2:09:e3:29:0a:36:25:47:55:be:59:04:12:97:a4: d1:29 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: F9:54:F7:55:0E:42:29:5B:13:68:D2:F1:78:74:24:49:C1:E2:32:8C X509v3 Authority Key Identifier: keyid:44:59:EC:2A:5F:D5:39:09:C5:23:9F:4C:C8:D6:D3:29:A2:77:9B:B1 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/RFnsKl_VOQnFI59MyNbTKaJ3m7E.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/97/f0ae62-c107-43ce-a8a9-6b4372602096/1/RFnsKl_VOQnFI59MyNbTKaJ3m7E.mft X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/97/f0ae62-c107-43ce-a8a9-6b4372602096/1/RFnsKl_VOQnFI59MyNbTKaJ3m7E.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 6f:ba:26:d3:83:46:fa:48:5a:ad:d9:ea:c2:08:87:74:14:a2: 79:cc:78:e3:a5:b3:df:a0:3f:11:84:64:46:76:04:8b:19:80: 04:84:c7:e3:03:b5:23:a3:c7:10:e4:ea:18:1b:6c:65:45:0b: 9c:2f:63:e1:b8:a8:c1:73:3c:98:0c:8a:cc:4d:49:4a:f4:9f: 4a:22:b0:54:a9:f5:31:47:a9:49:76:b9:7a:48:ef:55:89:f7: 87:05:2c:eb:ec:19:d4:c0:98:10:70:96:53:b2:1a:fa:e4:5c: 9f:42:e1:4f:87:b1:3e:18:2f:07:d1:29:b7:85:4f:f1:9d:fa: e9:d1:e8:14:12:f5:66:73:b7:63:ad:17:ce:0f:c5:3b:04:9f: e0:82:ba:cf:c5:6d:95:61:c2:c9:67:a4:ed:61:e3:ff:07:20: 56:79:e5:a6:1a:5d:98:31:86:46:4c:70:13:85:af:da:5f:c4: 09:67:99:0b:89:0d:76:9c:9c:86:09:04:58:58:f9:6b:76:3b: 9f:56:41:a7:65:de:0d:17:a7:13:04:0b:db:7d:6b:b3:4c:0a: 49:52:76:1b:11:37:67:0f:3a:53:2c:e4:71:b6:2b:09:c3:1c: 10:63:42:02:8f:5e:0c:6c:0d:67:a8:27:c2:a4:87:96:f9:8a: b5:0d:51:e6 -----BEGIN CERTIFICATE----- MIIFFjCCA/6gAwIBAgISAZjVg2ydpZ8foTG4RJ3by+qYMA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKDQ0NTllYzJhNWZkNTM5MDljNTIzOWY0Y2M4ZDZkMzI5YTI3 NzliYjEwHhcNMjUwODIzMDYwMDE2WhcNMjUwODI0MDYwMDE2WjAzMTEwLwYDVQQD EyhmOTU0Zjc1NTBlNDIyOTViMTM2OGQyZjE3ODc0MjQ0OWMxZTIzMjhjMIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAk8OAO+CFgFpWLQ0McyidnQ5T/xEz v6Ilga+OKUPi24Lzn71+vyATXfXzfsPB3+NsVzaR28HDnxaufvlPczvvunNatAtv 0/ptcFRPn/CEBli8OyYLbXTCXm0NE0TXAx6JW6+DnYb6C6NSjwmtZ6txuKMjouBL 6i2XddSxQrm6RFQ5BpC87WsN+b9FmoX7An1itTcS84OjkCqlCxG6DQpJ1J1Hurfl F8O0UuRa0N7se+aFqHRQTrKMIsM+lhBx+6IW2ci7sgrCleQ3zIkdh2CiuwyocKFi Gzx+gsJtP7Kp2AKIK0Ii1l0jdbiGiClRCeDSCeMpCjYlR1W+WQQSl6TRKQIDAQAB o4ICIjCCAh4wHQYDVR0OBBYEFPlU91UOQilbE2jS8Xh0JEnB4jKMMB8GA1UdIwQY MBaAFERZ7Cpf1TkJxSOfTMjW0ymid5uxMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvUkZuc0tsX1ZPUW5GSTU5TXlOYlRLYUozbTdFLmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC85Ny9mMGFlNjItYzEwNy00M2NlLWE4YTkt NmI0MzcyNjAyMDk2LzEvUkZuc0tsX1ZPUW5GSTU5TXlOYlRLYUozbTdFLm1mdDCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC85Ny9mMGFlNjItYzEwNy00M2NlLWE4YTktNmI0MzcyNjAyMDk2 LzEvUkZuc0tsX1ZPUW5GSTU5TXlOYlRLYUozbTdFLmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAb7om04NG +khardnqwgiHdBSiecx446Wz36A/EYRkRnYEixmABITH4wO1I6PHEOTqGBtsZUUL nC9j4biowXM8mAyKzE1JSvSfSiKwVKn1MUepSXa5ekjvVYn3hwUs6+wZ1MCYEHCW U7Ia+uRcn0LhT4exPhgvB9Ept4VP8Z366dHoFBL1ZnO3Y60Xzg/FOwSf4IK6z8Vt lWHCyWek7WHj/wcgVnnlphpdmDGGRkxwE4Wv2l/ECWeZC4kNdpychgkEWFj5a3Y7 n1ZBp2XeDRenEwQL231rs0wKSVJ2GxE3Zw86UyzkcbYrCcMcEGNCAo9eDGwNZ6gn wqSHlvmKtQ1R5g== -----END CERTIFICATE-----Generated at Sat Aug 23 11:36:13 2025 by rpki-client