$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/99/2ece62-1d8c-450c-91e8-8eeb757cf545/1/1nPYSbfVBHN21X5veW8AGLcLRQY.mft File: 1nPYSbfVBHN21X5veW8AGLcLRQY.mft (raw, json) Hash identifier: ryGEZ+bszrALSAre3v6DINj3KATNsFTQenEaQk66oKI= Subject key identifier: 24:9A:5C:77:62:2C:74:F9:D3:6C:E9:C4:B3:AB:FB:C2:EB:35:CD:ED Authority key identifier: D6:73:D8:49:B7:D5:04:73:76:D5:7E:6F:79:6F:00:18:B7:0B:45:06 Certificate issuer: /CN=d673d849b7d5047376d57e6f796f0018b70b4506 Certificate serial: 0198D66036A5562B4961933B1F3E901ED29D Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/1nPYSbfVBHN21X5veW8AGLcLRQY.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/99/2ece62-1d8c-450c-91e8-8eeb757cf545/1/1nPYSbfVBHN21X5veW8AGLcLRQY.mft Manifest number: 1653 Signing time: Sat 23 Aug 2025 10:01:26 +0000 Manifest this update: Sat 23 Aug 2025 10:01:26 +0000 Manifest next update: Sun 24 Aug 2025 10:01:26 +0000 Files and hashes: 1: 0MIjC24hYDTW286dNJh5qkIVoQM.roa (hash: MXU+N4PdoB06EZ/HjOQwFUwlQG2n1kwzXC/QtbLmJF0=) 2: 1-TrGp-z9XirqNAVi00kZmMtegAQ.roa (hash: cZ4yM8vQzUWF39oRoRKvKg08K8izx43nKLI06xAV69c=) 3: 1i8rkHyD_GEpEeT-VSPmrM7G9hg.roa (hash: T9uIPUHDBJqXpx6DpvHR6pRhllvR8xZm3kC3o7hqoD8=) 4: 1nPYSbfVBHN21X5veW8AGLcLRQY.crl (hash: vNt6S6nZWxbTuHnnkmda757vLUu42n0O9hxPQxiwyYQ=) 5: ARk7nVFItdFVCXn3sJgvaZ_sS0g.roa (hash: 7EEJNomrXNWfyMmnkFvuBOXpyWJs7s8lvlhWBalFymc=) 6: AgHi8XOuA8AW6mQ9081yaHFi7LY.roa (hash: GntMqrIeYlMh8GQHa17dRcWuW6VcPzJOKzx7OubvqC4=) 7: B3ZVVduO-XEeJJT5EOMOysoNJrI.roa (hash: hGLOqNOpZ+B1pvsSFo3MX/h7GOvVIRzBnRvB+fSCcjA=) 8: FCxYBsvWXDM15GSlGFr8QNu4RYE.roa (hash: 0mvD6N4h6dDsOpud4GT2Wd7vYleLAl39nQHcItAcmYc=) 9: IP6dxUf_151oN-w_YJNTEK8gFBY.roa (hash: DuBNN+Dmeyf3QMZYAuCqpfhCledEl++glFpZz6IL1T4=) 10: P1PPxJKJvcVWj4wZUdazuOzBw4Q.roa (hash: HnwzMbfg3535mDnah1e/JlAfCR0Kk2ea4N+rWTnPdJY=) 11: PXVQtp8fbfqZ5jFNvah34s8vf1o.roa (hash: jLDp0a0yIOcsSTqlqaPMGk/PVKwXxyLWYql8ZP+aAO4=) 12: Q6ELIGGMyAWLP2-8AinpN7dCP-I.roa (hash: +d8Mriz+mLl19IhnPZ6nZe1Nzbfe1sFAT1awQgdm62g=) 13: cdoljHUC9Q9DPh0xJN6bOQNfYgI.roa (hash: asTmSigp9GpUrfz/TvjdPq/vlaO8kX04TRA2R2OR/KQ=) 14: dukzfVMcltyysZZBvIjQGrHZPLo.roa (hash: lgww+jOruUco3lHQUmYd3nD9/JIBuRROS48oFbH8RVc=) 15: ex-k0hBYMJp3Xt63sbFH4dmaPp0.roa (hash: S04+oB5rzQSuvoSFbDJ54Q32HsuNGomFta+C8/uA5R4=) 16: hansf5f-8ZlprgL3Get4FXhM3qg.roa (hash: tdLlts3wjizciN3JSF4Zj+MG2KHEHQp/kr7Y9fEY9Hk=) 17: ktcN_1CUp7LaLxP99XlfX2aR3JY.roa (hash: A4GSKwqS/3qXXX5KzVNih95wvOg7T1xafYwJVI0/Hp0=) 18: rw3wmNK1T9KyKFmnPInliFk653U.roa (hash: byyB+zxuPES8tnSL4mP/gAsHzJQoaaZNw85rrGkKtTM=) 19: s-kJqLbM0KEIQbJ-31AW4jYwkyY.roa (hash: lel2X5N/TCz7Pdk6leCd67OSoke7W8rTYmRW3JpbyRE=) 20: thGwDSmOCB2egMkJayh7HTNBOoA.roa (hash: vrdMbk1dhZJxT4RMXRheIxv51EMC51s58JC+BTY/Vpg=) 21: wAAXYuIkUKtvrw39DQ6SG8wkbtE.roa (hash: jytRpaU7guGLhPsBwh2sgZuD9rMlPbNl3UHkvQz/oCo=) 22: y51hiFPZW-gkNjlGWGRcL6QruIc.roa (hash: IeyRLiiRko+dn467AL+M0JoJJpnysqiT8H5/V2IcxR0=) Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/99/2ece62-1d8c-450c-91e8-8eeb757cf545/1/1nPYSbfVBHN21X5veW8AGLcLRQY.crl rsync://rpki.ripe.net/repository/DEFAULT/99/2ece62-1d8c-450c-91e8-8eeb757cf545/1/1nPYSbfVBHN21X5veW8AGLcLRQY.mft rsync://rpki.ripe.net/repository/DEFAULT/1nPYSbfVBHN21X5veW8AGLcLRQY.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Sun 24 Aug 2025 05:01:29 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:98:d6:60:36:a5:56:2b:49:61:93:3b:1f:3e:90:1e:d2:9d Signature Algorithm: sha256WithRSAEncryption Issuer: CN=d673d849b7d5047376d57e6f796f0018b70b4506 Validity Not Before: Aug 23 10:01:26 2025 GMT Not After : Aug 24 10:01:26 2025 GMT Subject: CN=249a5c77622c74f9d36ce9c4b3abfbc2eb35cded Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:e7:12:96:5b:dc:04:5e:8c:b8:83:04:f6:ca:2f: 67:2c:f0:63:d5:be:2d:90:ea:d5:67:8e:eb:94:61: 51:d0:99:fa:ac:00:7f:16:68:f6:bd:c6:6a:c7:15: 74:72:8a:77:86:62:75:17:1c:bb:6e:a6:60:48:1a: 89:53:9d:a9:65:34:80:45:4f:5c:63:c3:79:43:70: 68:1b:02:5f:94:c0:46:7e:ec:4e:e2:31:b6:55:b9: d2:16:6e:cc:bd:10:fe:44:ed:c2:65:59:7c:bd:c1: c1:8a:5f:9e:c1:3b:34:37:47:a7:25:10:32:19:c4: 2f:79:e5:ee:61:c8:23:5d:14:9b:07:90:ff:04:96: 6b:0f:ae:5e:ed:77:7c:a2:51:94:9c:a8:0c:d3:7b: 33:39:d6:f6:52:de:36:bd:e0:9c:02:a8:8f:24:e7: bc:a3:68:48:a0:f7:46:ac:2d:c3:16:67:96:64:92: a7:52:20:76:5f:f8:aa:93:77:24:59:2f:4f:ea:37: 38:7c:92:41:34:58:3e:e3:85:30:7a:d3:e8:c5:ba: 50:62:30:43:ba:6b:37:01:89:aa:f9:d1:03:91:ee: 16:46:3a:81:6e:76:db:8e:89:76:c0:5d:a0:3e:a1: a5:da:3e:76:e2:bf:ab:75:c8:74:f4:64:da:e9:e8: 43:39 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 24:9A:5C:77:62:2C:74:F9:D3:6C:E9:C4:B3:AB:FB:C2:EB:35:CD:ED X509v3 Authority Key Identifier: keyid:D6:73:D8:49:B7:D5:04:73:76:D5:7E:6F:79:6F:00:18:B7:0B:45:06 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/1nPYSbfVBHN21X5veW8AGLcLRQY.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/99/2ece62-1d8c-450c-91e8-8eeb757cf545/1/1nPYSbfVBHN21X5veW8AGLcLRQY.mft X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/99/2ece62-1d8c-450c-91e8-8eeb757cf545/1/1nPYSbfVBHN21X5veW8AGLcLRQY.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 2e:8a:27:b3:19:dd:61:45:d3:3b:52:f2:c7:c4:f6:af:ac:9a: 99:cc:81:30:07:9a:37:79:8f:e4:98:71:35:3f:fe:68:e2:07: 34:5a:6e:79:73:d5:1f:bb:85:c3:1e:96:75:2b:f3:ed:21:38: 2c:76:32:e8:20:f2:15:1c:3d:13:80:9c:64:82:8d:f2:be:ab: 82:5d:41:1a:bc:94:9a:ca:22:57:cd:98:36:f4:45:5d:de:5c: a1:d2:5d:db:4a:83:b0:55:9b:5d:11:72:ac:b3:ce:9b:8e:bb: 7b:90:7b:a2:b1:c2:ab:16:0c:87:47:ea:df:e9:90:a1:00:b0: f3:f0:d5:45:a6:5a:aa:14:1f:fd:34:79:3d:7b:2d:a0:c6:62: e7:d0:01:90:af:07:d9:0e:bf:8b:68:d3:8e:6b:17:fe:13:5d: 26:22:d5:14:80:6c:33:98:8d:b3:27:21:53:78:8f:34:73:df: 40:2a:db:09:7c:a2:85:09:fe:49:61:07:25:0e:48:c8:f3:5e: 3a:74:f2:9b:6a:96:e1:93:de:b4:ac:42:9e:a7:0b:43:43:3d: fb:8e:fc:12:90:19:89:18:1d:f7:3c:19:ff:dd:d3:c9:57:bf: 1a:f2:b8:0c:af:e2:d0:4f:48:6a:ef:ba:a0:8a:02:90:94:2c: 4d:9a:6a:a2 -----BEGIN CERTIFICATE----- MIIFFjCCA/6gAwIBAgISAZjWYDalVitJYZM7Hz6QHtKdMA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKGQ2NzNkODQ5YjdkNTA0NzM3NmQ1N2U2Zjc5NmYwMDE4Yjcw YjQ1MDYwHhcNMjUwODIzMTAwMTI2WhcNMjUwODI0MTAwMTI2WjAzMTEwLwYDVQQD EygyNDlhNWM3NzYyMmM3NGY5ZDM2Y2U5YzRiM2FiZmJjMmViMzVjZGVkMIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEA5xKWW9wEXoy4gwT2yi9nLPBj1b4t kOrVZ47rlGFR0Jn6rAB/Fmj2vcZqxxV0cop3hmJ1Fxy7bqZgSBqJU52pZTSARU9c Y8N5Q3BoGwJflMBGfuxO4jG2VbnSFm7MvRD+RO3CZVl8vcHBil+ewTs0N0enJRAy GcQveeXuYcgjXRSbB5D/BJZrD65e7Xd8olGUnKgM03szOdb2Ut42veCcAqiPJOe8 o2hIoPdGrC3DFmeWZJKnUiB2X/iqk3ckWS9P6jc4fJJBNFg+44UwetPoxbpQYjBD ums3AYmq+dEDke4WRjqBbnbbjol2wF2gPqGl2j524r+rdch09GTa6ehDOQIDAQAB o4ICIjCCAh4wHQYDVR0OBBYEFCSaXHdiLHT502zpxLOr+8LrNc3tMB8GA1UdIwQY MBaAFNZz2Em31QRzdtV+b3lvABi3C0UGMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvMW5QWVNiZlZCSE4yMVg1dmVXOEFHTGNMUlFZLmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC85OS8yZWNlNjItMWQ4Yy00NTBjLTkxZTgt OGVlYjc1N2NmNTQ1LzEvMW5QWVNiZlZCSE4yMVg1dmVXOEFHTGNMUlFZLm1mdDCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC85OS8yZWNlNjItMWQ4Yy00NTBjLTkxZTgtOGVlYjc1N2NmNTQ1 LzEvMW5QWVNiZlZCSE4yMVg1dmVXOEFHTGNMUlFZLmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEALoonsxnd YUXTO1Lyx8T2r6yamcyBMAeaN3mP5JhxNT/+aOIHNFpueXPVH7uFwx6WdSvz7SE4 LHYy6CDyFRw9E4CcZIKN8r6rgl1BGryUmsoiV82YNvRFXd5codJd20qDsFWbXRFy rLPOm467e5B7orHCqxYMh0fq3+mQoQCw8/DVRaZaqhQf/TR5PXstoMZi59ABkK8H 2Q6/i2jTjmsX/hNdJiLVFIBsM5iNsychU3iPNHPfQCrbCXyihQn+SWEHJQ5IyPNe OnTym2qW4ZPetKxCnqcLQ0M9+478EpAZiRgd9zwZ/93TyVe/GvK4DK/i0E9Iau+6 oIoCkJQsTZpqog== -----END CERTIFICATE-----Generated at Sat Aug 23 12:15:42 2025 by rpki-client