$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/ab/7282b4-7f11-4ee0-abea-e13e5579c5dc/1/Q9W6CBXJ9Rk_gJie6JOsrMS6iEk.mft File: Q9W6CBXJ9Rk_gJie6JOsrMS6iEk.mft (raw, json) Hash identifier: GviKcRzCYMlNSaUPak8IlYDvtFmP0fEeIUpwmib/o6I= Subject key identifier: D7:86:59:2E:97:3F:71:C9:62:23:31:72:46:2D:15:01:39:57:FB:69 Authority key identifier: 43:D5:BA:08:15:C9:F5:19:3F:80:98:9E:E8:93:AC:AC:C4:BA:88:49 Certificate issuer: /CN=43d5ba0815c9f5193f80989ee893acacc4ba8849 Certificate serial: 0198D5837B5D57A26B7D0F217246C0A348FE Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/Q9W6CBXJ9Rk_gJie6JOsrMS6iEk.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/ab/7282b4-7f11-4ee0-abea-e13e5579c5dc/1/Q9W6CBXJ9Rk_gJie6JOsrMS6iEk.mft Manifest number: 1667 Signing time: Sat 23 Aug 2025 06:00:20 +0000 Manifest this update: Sat 23 Aug 2025 06:00:20 +0000 Manifest next update: Sun 24 Aug 2025 06:00:20 +0000 Files and hashes: 1: Bt_BJ_rJvQ-dhFs_SCmV1G3Ogsk.roa (hash: MRBJocdcxttyraiCxJuRCmX4CgQbJJdUodQ85Hkwc4U=) 2: JyxghoeF6hDC8N6SVjWRhYxsMBM.roa (hash: xPNYZdV7e7Lg6hC+x9cwa/uaXPSCMeE53FUH9lU5TIM=) 3: OYF94ILNmc9IGZCl0trT_vCrveA.roa (hash: uj8o2STwQYQOQKO9jHh+UgR4tdLDjqQa9LhPcW5B4qI=) 4: Q9W6CBXJ9Rk_gJie6JOsrMS6iEk.crl (hash: NkrZ8Ns37ir65EBSW2CxfQhQHYZOxSAzBMAxOhX5TjM=) 5: a2-Ak-XNzMq87nGfxm17NNrDD-w.roa (hash: oobPnpb12mxX5CV2sXI30Is1iiyb45x/TVEFVdIFWQ0=) 6: bDUFsRxvOWilElkS5MfCCIWk1XQ.roa (hash: mAKIKAHs72Ncw5cLpVcqx2omnJ6e82AfVTrRpnwNpJU=) 7: bkFu5lpbMCNQfDrUwHK85noTE8w.roa (hash: LF7GIBSOnpzm9vehsDsQICT9UHecDF3rayxCzLBTmJc=) 8: i4BvPEbIU0LE_KGbaw2Du_jwtCU.roa (hash: /Y2NvzZtZ5IYW3kWzP26GGHk2SWDVIrWTwCk4pyyB7E=) 9: tyWKDUVqC5IzOiqKJqRpStnyBMA.roa (hash: qWagwXDRFIv38+Ji9vgNoeMWS7OrJF0vAZgWVKNUl5M=) 10: xXPje22kQWotZEDmug62wH0gDiA.roa (hash: agsgwd8NBBgzTmUw5oBm+qVdc/ai59WAMmo29EAFg6c=) Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/ab/7282b4-7f11-4ee0-abea-e13e5579c5dc/1/Q9W6CBXJ9Rk_gJie6JOsrMS6iEk.crl rsync://rpki.ripe.net/repository/DEFAULT/ab/7282b4-7f11-4ee0-abea-e13e5579c5dc/1/Q9W6CBXJ9Rk_gJie6JOsrMS6iEk.mft rsync://rpki.ripe.net/repository/DEFAULT/Q9W6CBXJ9Rk_gJie6JOsrMS6iEk.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Sun 24 Aug 2025 05:01:29 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:98:d5:83:7b:5d:57:a2:6b:7d:0f:21:72:46:c0:a3:48:fe Signature Algorithm: sha256WithRSAEncryption Issuer: CN=43d5ba0815c9f5193f80989ee893acacc4ba8849 Validity Not Before: Aug 23 06:00:20 2025 GMT Not After : Aug 24 06:00:20 2025 GMT Subject: CN=d786592e973f71c962233172462d15013957fb69 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:c7:b7:dd:2f:57:ba:bb:8e:e2:34:60:1c:da:d5: 3f:e6:aa:d3:2d:e0:6d:67:1a:b1:33:d7:80:3c:36: e0:3a:90:62:b9:05:1e:2e:a5:59:13:dd:af:6b:f3: cd:05:27:1c:1a:d1:df:8d:5b:75:ad:88:ee:ad:ce: a5:f1:a2:c0:aa:63:c9:58:93:12:b8:03:c4:d4:6d: 7a:d8:82:a9:a8:07:35:46:99:d7:0f:21:6a:91:f0: 6b:4c:37:26:f7:48:7c:d4:bf:6b:b6:dc:e2:f4:17: 0c:54:c3:42:d4:f9:07:7e:83:f3:61:f3:22:ef:13: 80:e6:6c:4c:fc:15:28:23:9b:06:ac:db:e1:05:6f: f6:f9:19:b5:04:e1:20:64:30:15:f3:a9:54:cd:63: 94:f2:1b:ff:1c:48:5c:48:bb:16:4e:29:23:74:b2: 09:91:01:1e:06:71:af:e3:ca:eb:a2:c5:71:ce:e9: b4:cd:5c:bd:8f:5e:5d:f0:93:90:a8:d5:39:6b:57: 5f:c2:e9:93:76:f4:6c:1d:f7:fb:77:7d:9d:6e:ac: b2:09:f8:c6:3b:ae:31:a3:24:81:a9:08:60:fb:c2: 8d:94:bc:09:da:1f:a1:ac:bb:2a:42:f1:b6:e6:d6: 2e:2b:cf:b9:cd:04:df:5c:53:5d:a2:f3:72:85:7f: d5:73 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: D7:86:59:2E:97:3F:71:C9:62:23:31:72:46:2D:15:01:39:57:FB:69 X509v3 Authority Key Identifier: keyid:43:D5:BA:08:15:C9:F5:19:3F:80:98:9E:E8:93:AC:AC:C4:BA:88:49 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/Q9W6CBXJ9Rk_gJie6JOsrMS6iEk.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/ab/7282b4-7f11-4ee0-abea-e13e5579c5dc/1/Q9W6CBXJ9Rk_gJie6JOsrMS6iEk.mft X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/ab/7282b4-7f11-4ee0-abea-e13e5579c5dc/1/Q9W6CBXJ9Rk_gJie6JOsrMS6iEk.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption d0:2f:e2:42:ca:92:20:70:88:a1:08:84:b0:4d:56:3d:fa:54: a5:5d:e0:3f:f6:cb:79:4e:4d:63:db:d1:67:0d:95:4c:3e:79: 55:47:11:fb:75:ea:e7:86:50:f9:18:0a:0a:71:39:24:ea:6d: 84:17:b4:28:06:81:7c:17:0f:70:ff:58:95:65:12:9f:ab:41: f3:85:a5:da:86:c7:3f:4b:74:10:c2:8f:6f:76:7e:3d:c9:7d: e8:9d:d9:7c:59:f2:af:27:61:e6:fd:a0:e5:74:75:51:48:71: c7:7c:7c:d5:d6:d8:60:78:21:ad:4b:7a:fe:6c:93:8f:0c:2f: ce:ae:4c:3c:9c:66:75:49:16:4e:b6:00:45:ab:02:27:5b:43: e7:f8:72:ec:bc:14:56:17:e6:1b:dd:dd:d6:ca:92:4b:d9:59: 65:21:f5:9e:a7:47:dd:e4:65:da:c5:7f:12:b8:76:1b:4d:4e: f7:60:d3:6a:e2:8b:db:e3:6b:c7:c0:98:4f:6b:66:68:d1:18: d5:ef:99:c9:c2:25:6d:3d:89:4f:50:fd:0f:c6:39:b0:1d:bc: 81:d9:78:c3:8a:fb:43:34:91:65:17:80:d2:c5:2e:ff:15:ee: fc:0c:dd:e3:52:85:7b:ce:79:c2:9f:5b:7f:82:c6:d5:1d:d7: bb:44:22:e8 -----BEGIN CERTIFICATE----- MIIFFjCCA/6gAwIBAgISAZjVg3tdV6JrfQ8hckbAo0j+MA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKDQzZDViYTA4MTVjOWY1MTkzZjgwOTg5ZWU4OTNhY2FjYzRi YTg4NDkwHhcNMjUwODIzMDYwMDIwWhcNMjUwODI0MDYwMDIwWjAzMTEwLwYDVQQD EyhkNzg2NTkyZTk3M2Y3MWM5NjIyMzMxNzI0NjJkMTUwMTM5NTdmYjY5MIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAx7fdL1e6u47iNGAc2tU/5qrTLeBt ZxqxM9eAPDbgOpBiuQUeLqVZE92va/PNBSccGtHfjVt1rYjurc6l8aLAqmPJWJMS uAPE1G162IKpqAc1RpnXDyFqkfBrTDcm90h81L9rttzi9BcMVMNC1PkHfoPzYfMi 7xOA5mxM/BUoI5sGrNvhBW/2+Rm1BOEgZDAV86lUzWOU8hv/HEhcSLsWTikjdLIJ kQEeBnGv48rrosVxzum0zVy9j15d8JOQqNU5a1dfwumTdvRsHff7d32dbqyyCfjG O64xoySBqQhg+8KNlLwJ2h+hrLsqQvG25tYuK8+5zQTfXFNdovNyhX/VcwIDAQAB o4ICIjCCAh4wHQYDVR0OBBYEFNeGWS6XP3HJYiMxckYtFQE5V/tpMB8GA1UdIwQY MBaAFEPVuggVyfUZP4CYnuiTrKzEuohJMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvUTlXNkNCWEo5UmtfZ0ppZTZKT3NyTVM2aUVrLmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC9hYi83MjgyYjQtN2YxMS00ZWUwLWFiZWEt ZTEzZTU1NzljNWRjLzEvUTlXNkNCWEo5UmtfZ0ppZTZKT3NyTVM2aUVrLm1mdDCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC9hYi83MjgyYjQtN2YxMS00ZWUwLWFiZWEtZTEzZTU1NzljNWRj LzEvUTlXNkNCWEo5UmtfZ0ppZTZKT3NyTVM2aUVrLmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEA0C/iQsqS IHCIoQiEsE1WPfpUpV3gP/bLeU5NY9vRZw2VTD55VUcR+3Xq54ZQ+RgKCnE5JOpt hBe0KAaBfBcPcP9YlWUSn6tB84Wl2obHP0t0EMKPb3Z+Pcl96J3ZfFnyrydh5v2g 5XR1UUhxx3x81dbYYHghrUt6/myTjwwvzq5MPJxmdUkWTrYARasCJ1tD5/hy7LwU VhfmG93d1sqSS9lZZSH1nqdH3eRl2sV/Erh2G01O92DTauKL2+Nrx8CYT2tmaNEY 1e+ZycIlbT2JT1D9D8Y5sB28gdl4w4r7QzSRZReA0sUu/xXu/Azd41KFe855wp9b f4LG1R3Xu0Qi6A== -----END CERTIFICATE-----Generated at Sat Aug 23 13:56:03 2025 by rpki-client