$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/c4/11e5b3-43aa-4279-9441-7e8c6d4d9bef/1/_97EpGpubk-aktC6Lgs6tWWL4b0.mft File: _97EpGpubk-aktC6Lgs6tWWL4b0.mft (raw, json) Hash identifier: pTtIzXl2Y/YPR35YcLHRwMPc96ikGxsdyqeZMgZFb1A= Subject key identifier: 14:EF:34:38:C8:CD:CE:A9:9E:52:F5:05:09:DF:55:A8:F4:E4:85:A4 Authority key identifier: FF:DE:C4:A4:6A:6E:6E:4F:9A:92:D0:BA:2E:0B:3A:B5:65:8B:E1:BD Certificate issuer: /CN=ffdec4a46a6e6e4f9a92d0ba2e0b3ab5658be1bd Certificate serial: 0198D69801E63BDE96AA81BC236806668AD7 Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/_97EpGpubk-aktC6Lgs6tWWL4b0.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/c4/11e5b3-43aa-4279-9441-7e8c6d4d9bef/1/_97EpGpubk-aktC6Lgs6tWWL4b0.mft Manifest number: 1665 Signing time: Sat 23 Aug 2025 11:02:22 +0000 Manifest this update: Sat 23 Aug 2025 11:02:22 +0000 Manifest next update: Sun 24 Aug 2025 11:02:22 +0000 Files and hashes: 1: 9LGSNE38RZCTyouOtHVx3qVP6lw.roa (hash: ugV2YTVWDidN8y0vBVq2PfGkhQx7PuXVEwNoZCBbGX8=) 2: HToY17_1mZB4ipaCxGJw0bacpFA.roa (hash: P0pZpu59CPWpf2Vzltvzp7viaECZ4fpLz1AQRmpEgTA=) 3: OsAkT1Bjc6Bx57ink5LVscASSVM.roa (hash: Me3jYRS4jKNnlOdyWwLlCaXNsCc57NzdmZ5lT79t3Rw=) 4: RmwlFKm2A6wCOU2tiPLTSzuhAA8.roa (hash: NB+w6tJSmFPHFd2FMxkqFpCOapIk+qQqzfmt3QzOsMk=) 5: UobB1JoTOzUGFpCCZFbxasjgqAA.roa (hash: ms0cbPIRl6WuE78I/a1I+geJkM+CYYhZiVIqQ6+fwVY=) 6: VuROyrWs92eKXOizp2Q-0fnpLR0.roa (hash: fMjWZ/dM7054cYWsnjZNa6zVf7FPSoCGvOyM76Sl6Mc=) 7: VxRGHdP__z9RHajqH60awAUqQgg.roa (hash: tIdE9ZmAuCmbV7t2it8DIWQnm6yvOgpE7cprrHK2On0=) 8: _97EpGpubk-aktC6Lgs6tWWL4b0.crl (hash: iOYFiPzfznFdHduYy4RdN0FzzI9whHLGGIkNX+fLJY4=) 9: pJnO9Ba6alCVKMIllyGL5_n-nHo.roa (hash: cF7/LpWh8txlnJKiWf+FQfbAzOZvclLDIIzD8uyNUD0=) 10: vWqmka3oaZQE1cXhvhKJIPN3ikY.roa (hash: wwmYNtR3Cqpxb6sHd4D0z140EddAwpyxzJ7dHxOqth4=) 11: zwTIjW4kVksFhIqqz0Hm86Td_eI.roa (hash: 4Gmw/YEt79d2ifSjcQjjCNUl4cViPsDbJFWDQ996oV4=) Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/c4/11e5b3-43aa-4279-9441-7e8c6d4d9bef/1/_97EpGpubk-aktC6Lgs6tWWL4b0.crl rsync://rpki.ripe.net/repository/DEFAULT/c4/11e5b3-43aa-4279-9441-7e8c6d4d9bef/1/_97EpGpubk-aktC6Lgs6tWWL4b0.mft rsync://rpki.ripe.net/repository/DEFAULT/_97EpGpubk-aktC6Lgs6tWWL4b0.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Sun 24 Aug 2025 05:01:29 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:98:d6:98:01:e6:3b:de:96:aa:81:bc:23:68:06:66:8a:d7 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=ffdec4a46a6e6e4f9a92d0ba2e0b3ab5658be1bd Validity Not Before: Aug 23 11:02:22 2025 GMT Not After : Aug 24 11:02:22 2025 GMT Subject: CN=14ef3438c8cdcea99e52f50509df55a8f4e485a4 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:c2:3d:8e:7f:63:0f:a9:d1:86:5e:7d:41:9d:26: 2d:2c:f3:98:ae:e0:89:a6:24:83:28:e6:0a:eb:c0: dd:e3:f7:96:d5:13:12:eb:0c:fa:74:4d:97:df:3c: 6a:07:8a:11:f1:f4:da:50:7f:08:53:c9:d6:af:c4: 05:8b:51:ff:b7:e5:82:54:55:62:51:51:5e:02:f8: 1c:1b:10:80:3e:07:dd:fb:84:db:9e:3c:e4:b6:a1: ba:09:7e:b7:8c:eb:f1:14:3c:08:78:99:e9:49:86: c0:b5:3c:bd:3d:68:43:d8:c3:56:ac:61:7b:55:b4: f1:77:d1:59:da:eb:bf:4f:e2:d0:68:16:7f:60:45: f9:fd:ac:1d:cc:38:bf:2e:45:16:6c:22:28:b9:9b: 3e:15:fd:3b:ff:a6:45:ab:08:a2:56:b2:5d:ef:f9: 20:c6:a5:15:6e:ef:7a:57:b0:58:fd:a0:6e:1a:89: a7:6c:7d:50:3b:90:04:2e:40:0f:2f:25:9b:98:69: ed:bf:6f:17:87:02:9f:f3:08:0e:b1:f6:53:96:19: c5:44:17:c6:78:38:63:4c:ee:df:17:bc:90:59:e9: 56:08:47:8d:f9:76:0f:0d:c2:18:f8:0c:f0:37:9c: 98:59:80:2d:0d:0b:53:5e:51:a6:24:e2:e1:7c:c5: 56:75 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 14:EF:34:38:C8:CD:CE:A9:9E:52:F5:05:09:DF:55:A8:F4:E4:85:A4 X509v3 Authority Key Identifier: keyid:FF:DE:C4:A4:6A:6E:6E:4F:9A:92:D0:BA:2E:0B:3A:B5:65:8B:E1:BD X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/_97EpGpubk-aktC6Lgs6tWWL4b0.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/c4/11e5b3-43aa-4279-9441-7e8c6d4d9bef/1/_97EpGpubk-aktC6Lgs6tWWL4b0.mft X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/c4/11e5b3-43aa-4279-9441-7e8c6d4d9bef/1/_97EpGpubk-aktC6Lgs6tWWL4b0.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 01:1d:dc:ac:17:84:5f:3c:a6:29:99:7d:a4:fa:59:ae:47:95: d2:6c:74:4e:48:98:d1:19:4b:29:f5:a2:42:3b:a9:48:ad:e2: 4b:ed:ab:c9:52:c6:b0:53:c6:c9:d2:39:2b:b7:88:fa:54:c1: 92:92:4a:fc:cb:96:d3:a0:70:f3:2c:81:88:9c:a7:e9:fd:4c: b6:68:d1:42:9e:97:43:6a:9b:43:6b:86:d8:98:76:f4:11:e3: 47:9d:94:5f:28:1c:d0:91:c9:8c:be:99:d4:75:49:22:55:e5: fa:20:ac:9b:cf:ce:fe:15:dc:57:bc:48:aa:08:5b:72:da:fa: f2:e2:55:c1:cd:0e:b2:ab:0c:88:1e:80:b9:4a:c5:13:2d:95: 61:1d:e4:6a:ce:85:24:d0:25:37:8b:07:6d:c2:39:14:11:df: 8c:93:3b:e6:a1:db:5e:87:86:03:27:85:72:73:f0:c0:2d:08: ed:51:f0:a8:cb:89:19:aa:c9:34:68:62:86:d8:d1:51:02:8f: 4d:f5:67:a7:d9:5d:d0:2a:5a:d0:17:c7:16:b5:9d:01:29:11: df:33:f0:eb:49:06:f3:fb:06:69:b3:63:fe:48:c8:46:c6:dc: 66:d4:6b:c3:a5:66:ec:6a:2a:aa:4f:c2:3b:d3:69:36:21:a6: b5:e2:c5:d2 -----BEGIN CERTIFICATE----- MIIFFjCCA/6gAwIBAgISAZjWmAHmO96WqoG8I2gGZorXMA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKGZmZGVjNGE0NmE2ZTZlNGY5YTkyZDBiYTJlMGIzYWI1NjU4 YmUxYmQwHhcNMjUwODIzMTEwMjIyWhcNMjUwODI0MTEwMjIyWjAzMTEwLwYDVQQD EygxNGVmMzQzOGM4Y2RjZWE5OWU1MmY1MDUwOWRmNTVhOGY0ZTQ4NWE0MIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAwj2Of2MPqdGGXn1BnSYtLPOYruCJ piSDKOYK68Dd4/eW1RMS6wz6dE2X3zxqB4oR8fTaUH8IU8nWr8QFi1H/t+WCVFVi UVFeAvgcGxCAPgfd+4TbnjzktqG6CX63jOvxFDwIeJnpSYbAtTy9PWhD2MNWrGF7 VbTxd9FZ2uu/T+LQaBZ/YEX5/awdzDi/LkUWbCIouZs+Ff07/6ZFqwiiVrJd7/kg xqUVbu96V7BY/aBuGomnbH1QO5AELkAPLyWbmGntv28XhwKf8wgOsfZTlhnFRBfG eDhjTO7fF7yQWelWCEeN+XYPDcIY+AzwN5yYWYAtDQtTXlGmJOLhfMVWdQIDAQAB o4ICIjCCAh4wHQYDVR0OBBYEFBTvNDjIzc6pnlL1BQnfVaj05IWkMB8GA1UdIwQY MBaAFP/exKRqbm5PmpLQui4LOrVli+G9MA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvXzk3RXBHcHViay1ha3RDNkxnczZ0V1dMNGIwLmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC9jNC8xMWU1YjMtNDNhYS00Mjc5LTk0NDEt N2U4YzZkNGQ5YmVmLzEvXzk3RXBHcHViay1ha3RDNkxnczZ0V1dMNGIwLm1mdDCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC9jNC8xMWU1YjMtNDNhYS00Mjc5LTk0NDEtN2U4YzZkNGQ5YmVm LzEvXzk3RXBHcHViay1ha3RDNkxnczZ0V1dMNGIwLmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAAR3crBeE XzymKZl9pPpZrkeV0mx0TkiY0RlLKfWiQjupSK3iS+2ryVLGsFPGydI5K7eI+lTB kpJK/MuW06Bw8yyBiJyn6f1MtmjRQp6XQ2qbQ2uG2Jh29BHjR52UXygc0JHJjL6Z 1HVJIlXl+iCsm8/O/hXcV7xIqghbctr68uJVwc0OsqsMiB6AuUrFEy2VYR3kas6F JNAlN4sHbcI5FBHfjJM75qHbXoeGAyeFcnPwwC0I7VHwqMuJGarJNGhihtjRUQKP TfVnp9ld0Cpa0BfHFrWdASkR3zPw60kG8/sGabNj/kjIRsbcZtRrw6Vm7Goqqk/C O9NpNiGmteLF0g== -----END CERTIFICATE-----Generated at Sat Aug 23 14:13:00 2025 by rpki-client