$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/9e/f76e20-5859-415d-86b3-119efcbb2023/1/u4MGMPI7Bwore99Sn3OUjJfqzUA.mft File: u4MGMPI7Bwore99Sn3OUjJfqzUA.mft (raw, json) Hash identifier: XN//3c5mNlJsP/vEmdW3kt7gGmJ2B71+zUib3QZUf0c= Subject key identifier: C2:A9:A2:9F:97:68:58:9A:2A:85:FD:60:B6:52:44:5E:FE:42:5C:09 Authority key identifier: BB:83:06:30:F2:3B:07:0A:2B:7B:DF:52:9F:73:94:8C:97:EA:CD:40 Certificate issuer: /CN=bb830630f23b070a2b7bdf529f73948c97eacd40 Certificate serial: 0198D4E08FFC1C8D06376AE8EE604C644C85 Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/u4MGMPI7Bwore99Sn3OUjJfqzUA.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/9e/f76e20-5859-415d-86b3-119efcbb2023/1/u4MGMPI7Bwore99Sn3OUjJfqzUA.mft Manifest number: 16B0 Signing time: Sat 23 Aug 2025 03:02:23 +0000 Manifest this update: Sat 23 Aug 2025 03:02:23 +0000 Manifest next update: Sun 24 Aug 2025 03:02:23 +0000 Files and hashes: 1: 1-oqovYb6kXA48Esy0lEB4Qe7ANA.roa (hash: VGdtLijiKCzB7l2xXJsLZyHSJ1X/Htcad4QuCTd7vY8=) 2: 2zKVxa5ZKGpg1zDrETT8fTyAG8U.roa (hash: RUglVoeUy6tdJhM2FiBGFBEjFDwNfOCa0rtIGcZ1G9w=) 3: 3G7uhcLKWWOtfmFK3Aty6Ijq4PE.roa (hash: 8QA8TR1b1eaSEAsPrBsT2EeJQQNKv/ChzK9Nd3Kvl/4=) 4: MdYXP9JDqyEnQSSpfC3vQstDRu4.roa (hash: 9CrtuWJI6l7IbdwDLorSOiVfWXkvbfh9OjjPb0sDWaY=) 5: PbW71RIBvB328VTIPh1scqZr_24.roa (hash: ZhoUQFHnvxU9klhLxoI/zN467hf68pEuS9x78HwJXRs=) 6: SDOLmAhobKGDPwlOvXakvXkm9LU.roa (hash: zmS1T8bhM8/AfzZdTFVM6nmbZ8DYbKH7HiNAE7C3CHU=) 7: bu-aY814oN0zZmuedO0-L6nA1Js.roa (hash: l9qaLt4gYL7GO6wlotPMWtCoUA115L85+uv76tlCG/s=) 8: fi7u_8aaxqQqH2QeccD8KGKx3hM.roa (hash: 0Mmbiog2iLNRJeesgr68dLzWfBwYCoI0LBsDE3h2PiQ=) 9: u4MGMPI7Bwore99Sn3OUjJfqzUA.crl (hash: 1WAtRZvcAHC7+9cL01z25+OH2tktf3xSqe47y0wA5+g=) 10: y8iS8tleElOyte-JeYh4Dq2HQdQ.roa (hash: w4RufdDSavSTM6kQpcDOAtc9GCwrPgmFgYh1WnUGNU8=) Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/9e/f76e20-5859-415d-86b3-119efcbb2023/1/u4MGMPI7Bwore99Sn3OUjJfqzUA.crl rsync://rpki.ripe.net/repository/DEFAULT/9e/f76e20-5859-415d-86b3-119efcbb2023/1/u4MGMPI7Bwore99Sn3OUjJfqzUA.mft rsync://rpki.ripe.net/repository/DEFAULT/u4MGMPI7Bwore99Sn3OUjJfqzUA.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Sun 24 Aug 2025 03:02:23 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:98:d4:e0:8f:fc:1c:8d:06:37:6a:e8:ee:60:4c:64:4c:85 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=bb830630f23b070a2b7bdf529f73948c97eacd40 Validity Not Before: Aug 23 03:02:23 2025 GMT Not After : Aug 24 03:02:23 2025 GMT Subject: CN=c2a9a29f9768589a2a85fd60b652445efe425c09 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:b8:ee:c9:d4:8b:10:21:62:5e:7c:d8:52:fe:b7: f9:16:38:6d:d4:74:26:f9:93:b7:95:b6:f7:44:18: 75:76:ae:6c:20:f2:b9:2f:e6:3e:20:ea:a7:f6:d1: de:14:c0:7e:1a:f4:3b:39:30:3f:67:16:e6:a3:19: 4b:74:66:37:b4:25:55:33:f4:62:cb:73:3c:df:a3: ff:8f:b7:ea:74:5b:f1:bc:7a:d0:69:24:3f:4d:32: 16:29:da:41:f6:49:80:18:e6:71:87:ae:de:2b:fa: 10:95:d0:87:bb:2c:30:5b:00:32:3d:54:f1:05:14: 72:01:50:62:6e:bf:9b:a8:c4:ee:57:83:57:b7:57: 2c:52:15:62:38:02:0c:8c:a9:d8:0b:ff:5a:94:24: 90:af:9f:5a:b1:9d:b4:2b:2d:d5:90:7a:d6:02:1b: 4e:59:b6:13:9e:fb:31:92:a5:9a:92:67:f9:96:e0: 76:82:ca:97:91:7d:d5:e8:88:85:ea:c2:6f:fb:1d: 65:9d:fd:83:f8:b2:8c:6c:b2:c6:31:71:cc:74:16: 87:41:7f:e8:59:a0:7b:56:4f:e5:22:94:a3:38:13: 24:10:28:91:84:6b:34:dc:e3:37:c2:3f:76:84:15: 26:eb:ff:f7:39:05:e8:6e:a1:45:de:ed:56:a2:fa: 91:17 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: C2:A9:A2:9F:97:68:58:9A:2A:85:FD:60:B6:52:44:5E:FE:42:5C:09 X509v3 Authority Key Identifier: keyid:BB:83:06:30:F2:3B:07:0A:2B:7B:DF:52:9F:73:94:8C:97:EA:CD:40 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/u4MGMPI7Bwore99Sn3OUjJfqzUA.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/9e/f76e20-5859-415d-86b3-119efcbb2023/1/u4MGMPI7Bwore99Sn3OUjJfqzUA.mft X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/9e/f76e20-5859-415d-86b3-119efcbb2023/1/u4MGMPI7Bwore99Sn3OUjJfqzUA.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 99:de:ef:b0:89:5e:aa:06:2d:10:41:94:f6:93:4e:4d:52:f4: b9:09:b0:31:6d:3a:12:c0:03:ac:f8:29:35:db:9a:5a:25:1e: bc:ac:14:91:48:21:e3:d5:bb:1c:d5:f6:55:b4:b4:77:67:de: 42:c6:68:d4:ec:d4:4d:e1:2c:43:31:12:62:04:e2:56:e9:b8: 9d:ee:f0:e3:02:f9:bc:06:0f:22:56:bb:c8:52:e1:f1:32:0d: 80:64:31:82:7b:f6:7a:45:31:12:40:90:df:7f:cc:d9:ee:5f: 11:20:47:95:f7:80:1d:54:f9:c1:f2:d8:4a:90:b4:17:11:cb: 1c:b6:fc:f8:12:a5:a1:ce:c8:9e:02:7a:cc:46:3b:bb:66:80: 88:29:17:3e:25:9c:82:1c:68:2c:cb:ba:1c:f8:67:8d:93:4d: b7:21:b0:25:40:0e:99:7a:ee:1f:7d:e9:2b:7e:4d:58:bc:f8: ff:15:bd:e6:4e:a0:f9:87:d5:3d:73:21:a7:33:f9:23:a9:dd: 28:33:89:85:da:2e:dd:be:ca:af:e1:99:6b:00:77:46:7f:90: 04:21:cf:c7:f1:39:fd:7f:db:69:f2:be:ef:2a:6d:86:eb:71: 11:f5:85:8b:ca:9b:37:bd:94:93:51:38:2c:02:0c:ba:88:a7: 6f:b3:9c:14 -----BEGIN CERTIFICATE----- MIIFFjCCA/6gAwIBAgISAZjU4I/8HI0GN2ro7mBMZEyFMA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKGJiODMwNjMwZjIzYjA3MGEyYjdiZGY1MjlmNzM5NDhjOTdl YWNkNDAwHhcNMjUwODIzMDMwMjIzWhcNMjUwODI0MDMwMjIzWjAzMTEwLwYDVQQD EyhjMmE5YTI5Zjk3Njg1ODlhMmE4NWZkNjBiNjUyNDQ1ZWZlNDI1YzA5MIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAuO7J1IsQIWJefNhS/rf5Fjht1HQm +ZO3lbb3RBh1dq5sIPK5L+Y+IOqn9tHeFMB+GvQ7OTA/ZxbmoxlLdGY3tCVVM/Ri y3M836P/j7fqdFvxvHrQaSQ/TTIWKdpB9kmAGOZxh67eK/oQldCHuywwWwAyPVTx BRRyAVBibr+bqMTuV4NXt1csUhViOAIMjKnYC/9alCSQr59asZ20Ky3VkHrWAhtO WbYTnvsxkqWakmf5luB2gsqXkX3V6IiF6sJv+x1lnf2D+LKMbLLGMXHMdBaHQX/o WaB7Vk/lIpSjOBMkECiRhGs03OM3wj92hBUm6//3OQXobqFF3u1WovqRFwIDAQAB o4ICIjCCAh4wHQYDVR0OBBYEFMKpop+XaFiaKoX9YLZSRF7+QlwJMB8GA1UdIwQY MBaAFLuDBjDyOwcKK3vfUp9zlIyX6s1AMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvdTRNR01QSTdCd29yZTk5U24zT1VqSmZxelVBLmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC85ZS9mNzZlMjAtNTg1OS00MTVkLTg2YjMt MTE5ZWZjYmIyMDIzLzEvdTRNR01QSTdCd29yZTk5U24zT1VqSmZxelVBLm1mdDCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC85ZS9mNzZlMjAtNTg1OS00MTVkLTg2YjMtMTE5ZWZjYmIyMDIz LzEvdTRNR01QSTdCd29yZTk5U24zT1VqSmZxelVBLmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAmd7vsIle qgYtEEGU9pNOTVL0uQmwMW06EsADrPgpNduaWiUevKwUkUgh49W7HNX2VbS0d2fe QsZo1OzUTeEsQzESYgTiVum4ne7w4wL5vAYPIla7yFLh8TINgGQxgnv2ekUxEkCQ 33/M2e5fESBHlfeAHVT5wfLYSpC0FxHLHLb8+BKloc7IngJ6zEY7u2aAiCkXPiWc ghxoLMu6HPhnjZNNtyGwJUAOmXruH33pK35NWLz4/xW95k6g+YfVPXMhpzP5I6nd KDOJhdou3b7Kr+GZawB3Rn+QBCHPx/E5/X/bafK+7ypthutxEfWFi8qbN72Uk1E4 LAIMuoinb7OcFA== -----END CERTIFICATE-----Generated at Sat Aug 23 14:04:08 2025 by rpki-client