$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/c9/40498e-d1c0-484c-abcb-61e7f40d5dd6/1/rr85Ti8bJRyI2YiocWEIRYB4bvU.mft File: rr85Ti8bJRyI2YiocWEIRYB4bvU.mft (raw, json) Hash identifier: Xn3pRV/Hmmp5+WWzMXS7tDKbsJocBRxlaIgpmWMlGcU= Subject key identifier: BF:21:CB:00:7D:8F:7D:1D:B4:29:04:54:7F:07:9F:48:D4:18:02:CD Authority key identifier: AE:BF:39:4E:2F:1B:25:1C:88:D9:88:A8:71:61:08:45:80:78:6E:F5 Certificate issuer: /CN=aebf394e2f1b251c88d988a87161084580786ef5 Certificate serial: 0198D7058B2DFF9C107AA32D890A64C74431 Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/rr85Ti8bJRyI2YiocWEIRYB4bvU.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/c9/40498e-d1c0-484c-abcb-61e7f40d5dd6/1/rr85Ti8bJRyI2YiocWEIRYB4bvU.mft Manifest number: 1661 Signing time: Sat 23 Aug 2025 13:02:01 +0000 Manifest this update: Sat 23 Aug 2025 13:02:01 +0000 Manifest next update: Sun 24 Aug 2025 13:02:01 +0000 Files and hashes: 1: 0M_CHtTZz2ksD2BrxQYB5GYr6Qs.roa (hash: pjePI9MMIzsxZCozr1MX0ua7tggMW3H280y5yB3P7S0=) 2: 1-_mCNfP9_HNiBcEsvWHOFnGkC9I.roa (hash: JsQNy89vRBMXhfgHBZLMyPK1KVQmDn747eH7PkqTbv4=) 3: 499vYtwuw8upiAA2ubHtry-MPMw.roa (hash: Z3mdQWlNWDCy7MpQvjVwxOFHXRgVUsKCd9CYyZydkdQ=) 4: BV9MkYw-noIEhqphKumJe_rAYPw.roa (hash: cTycQR7uMvIZ+ka9U/Z707XPur1pq5RdGRaj9s/WBEk=) 5: C9bq6HqiO8wvPt8Ohvw7Ya0CzfI.roa (hash: eBedAMyLvvyEc8yS2VDwWUUS44f1pIhLP9yn06vWvAA=) 6: L3ZGNHnhgVbtJA6v9_KfCLPdQu4.roa (hash: tRfv/CcITA5fhGSfuor8bEI1B/6QYSwrTAH88Vxz5+8=) 7: c_qSQSef9yQq7ko-zsOrz05POQI.roa (hash: FNYiHqlJ6193udyi9UzOaM0voKaXuvqgwAhp2rGz6i4=) 8: imE36QLRTMX_BQ-hGxHCq-HzUSs.roa (hash: 9oBmGg8MmifOi5UePbS9lDJePGL5vAfP7BimBla3w98=) 9: lmrSRQ5ihg55QvYqat1AjaV_GvQ.roa (hash: hnfw4d4vCZD3abd8/WtjTv2gdPGfcl5xx0Mpy2oIhPc=) 10: rq3_2EMmh0cv5ivlO8JPPUeogQc.roa (hash: 9kTdzZUfT/wSfRhG2PTu31/f9X4NTLfSEK/53blCYJ4=) 11: rr85Ti8bJRyI2YiocWEIRYB4bvU.crl (hash: KCIOXJROLjl2fCTELRXFGajKoXkYWHHBDGWpkzfY1xo=) 12: uFaCHWPgxrsotozK3-PvWIlEI14.roa (hash: E71w1Kj/9g7CI68LBGPMUUdmv1Dhxwi441Gs522xPmQ=) Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/c9/40498e-d1c0-484c-abcb-61e7f40d5dd6/1/rr85Ti8bJRyI2YiocWEIRYB4bvU.crl rsync://rpki.ripe.net/repository/DEFAULT/c9/40498e-d1c0-484c-abcb-61e7f40d5dd6/1/rr85Ti8bJRyI2YiocWEIRYB4bvU.mft rsync://rpki.ripe.net/repository/DEFAULT/rr85Ti8bJRyI2YiocWEIRYB4bvU.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Sun 24 Aug 2025 12:50:04 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:98:d7:05:8b:2d:ff:9c:10:7a:a3:2d:89:0a:64:c7:44:31 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=aebf394e2f1b251c88d988a87161084580786ef5 Validity Not Before: Aug 23 13:02:01 2025 GMT Not After : Aug 24 13:02:01 2025 GMT Subject: CN=bf21cb007d8f7d1db42904547f079f48d41802cd Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:90:5e:ba:35:f2:37:4f:93:28:e3:af:cd:9a:1a: b3:ad:91:ef:56:cd:3a:0b:52:8d:4e:24:40:1b:25: 19:7d:c4:1f:0d:cb:47:9c:9e:45:f1:82:11:b9:c9: e8:c0:c0:42:41:47:25:9d:d1:c5:f1:19:e4:47:b0: 12:45:9e:d0:a9:4b:f6:5b:45:f3:c8:df:30:4e:f9: d8:92:cf:29:9d:c3:9c:2f:ee:87:49:b7:3c:0d:b4: 45:88:f7:9c:20:56:89:78:59:2a:ce:aa:33:02:db: 53:b1:d9:90:83:fa:04:39:f8:f3:3f:76:6b:c2:b2: 09:33:f0:ab:ab:1f:c4:ad:25:02:79:24:e5:9e:b1: 2a:bd:ea:d4:de:88:19:9a:e3:4b:0d:c9:55:9d:e8: 89:d3:4b:1e:10:c4:cf:37:7d:de:00:d1:ab:71:0f: 11:c3:b1:12:92:c2:aa:18:01:82:6d:01:c9:26:24: 21:b5:88:e7:5e:fa:5b:0f:1e:89:8d:6f:09:46:a6: 0f:53:d8:b6:49:16:d3:4a:83:cf:00:11:10:49:83: 82:54:38:4b:ee:32:ac:72:db:fc:67:0f:6b:b5:ef: b9:b1:88:97:30:81:36:8c:ea:5e:0b:d8:14:c6:11: 34:0d:42:34:b7:61:20:60:8a:63:8c:e8:53:cc:7c: 56:5d Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: BF:21:CB:00:7D:8F:7D:1D:B4:29:04:54:7F:07:9F:48:D4:18:02:CD X509v3 Authority Key Identifier: keyid:AE:BF:39:4E:2F:1B:25:1C:88:D9:88:A8:71:61:08:45:80:78:6E:F5 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/rr85Ti8bJRyI2YiocWEIRYB4bvU.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/c9/40498e-d1c0-484c-abcb-61e7f40d5dd6/1/rr85Ti8bJRyI2YiocWEIRYB4bvU.mft X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/c9/40498e-d1c0-484c-abcb-61e7f40d5dd6/1/rr85Ti8bJRyI2YiocWEIRYB4bvU.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 90:20:31:16:4f:3f:f3:44:30:0a:45:c7:7f:63:3f:99:10:b9: 81:95:d4:bb:b3:ad:ce:26:23:4a:47:bc:a5:5a:45:c2:a9:ed: 7d:0b:39:5d:6a:e9:c8:7f:ba:fc:38:6f:2f:0e:12:4b:a8:94: d3:52:00:6f:cb:12:50:36:89:02:10:db:51:eb:f1:f3:3f:a0: c0:45:70:61:65:b2:14:7f:32:28:29:bc:db:78:b5:e1:94:b9: 1b:0b:00:6b:84:23:02:fa:68:7c:53:f7:07:ae:ac:f1:44:25: 79:d1:50:70:b5:cf:19:6e:77:bc:49:32:df:c7:78:5d:e6:57: 82:8d:e7:82:3b:44:47:79:e6:b0:26:47:35:42:34:ab:e9:2e: 7e:59:15:21:55:ea:5a:d6:84:7d:18:11:04:f0:8f:84:06:e6: 83:0c:85:ed:31:db:bf:65:ab:80:1f:cf:97:d4:3e:7c:da:46: 24:f8:e5:73:bb:3a:ad:cd:57:43:8d:f9:35:a5:a4:12:5c:9c: d0:48:73:59:87:92:72:7c:2c:af:61:87:60:de:fc:69:fa:23: 9d:2b:d0:87:1d:ed:d2:14:a2:7c:0d:09:a2:09:13:3e:d8:63: a5:ef:a9:a7:e2:90:53:41:bc:23:a1:c0:d4:34:2d:03:73:34: 9f:9a:fc:e7 -----BEGIN CERTIFICATE----- MIIFFjCCA/6gAwIBAgISAZjXBYst/5wQeqMtiQpkx0QxMA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKGFlYmYzOTRlMmYxYjI1MWM4OGQ5ODhhODcxNjEwODQ1ODA3 ODZlZjUwHhcNMjUwODIzMTMwMjAxWhcNMjUwODI0MTMwMjAxWjAzMTEwLwYDVQQD EyhiZjIxY2IwMDdkOGY3ZDFkYjQyOTA0NTQ3ZjA3OWY0OGQ0MTgwMmNkMIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAkF66NfI3T5Mo46/NmhqzrZHvVs06 C1KNTiRAGyUZfcQfDctHnJ5F8YIRucnowMBCQUclndHF8RnkR7ASRZ7QqUv2W0Xz yN8wTvnYks8pncOcL+6HSbc8DbRFiPecIFaJeFkqzqozAttTsdmQg/oEOfjzP3Zr wrIJM/Crqx/ErSUCeSTlnrEqverU3ogZmuNLDclVneiJ00seEMTPN33eANGrcQ8R w7ESksKqGAGCbQHJJiQhtYjnXvpbDx6JjW8JRqYPU9i2SRbTSoPPABEQSYOCVDhL 7jKsctv8Zw9rte+5sYiXMIE2jOpeC9gUxhE0DUI0t2EgYIpjjOhTzHxWXQIDAQAB o4ICIjCCAh4wHQYDVR0OBBYEFL8hywB9j30dtCkEVH8Hn0jUGALNMB8GA1UdIwQY MBaAFK6/OU4vGyUciNmIqHFhCEWAeG71MA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvcnI4NVRpOGJKUnlJMllpb2NXRUlSWUI0YnZVLmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC9jOS80MDQ5OGUtZDFjMC00ODRjLWFiY2It NjFlN2Y0MGQ1ZGQ2LzEvcnI4NVRpOGJKUnlJMllpb2NXRUlSWUI0YnZVLm1mdDCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC9jOS80MDQ5OGUtZDFjMC00ODRjLWFiY2ItNjFlN2Y0MGQ1ZGQ2 LzEvcnI4NVRpOGJKUnlJMllpb2NXRUlSWUI0YnZVLmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAkCAxFk8/ 80QwCkXHf2M/mRC5gZXUu7OtziYjSke8pVpFwqntfQs5XWrpyH+6/DhvLw4SS6iU 01IAb8sSUDaJAhDbUevx8z+gwEVwYWWyFH8yKCm823i14ZS5GwsAa4QjAvpofFP3 B66s8UQledFQcLXPGW53vEky38d4XeZXgo3ngjtER3nmsCZHNUI0q+kuflkVIVXq WtaEfRgRBPCPhAbmgwyF7THbv2WrgB/Pl9Q+fNpGJPjlc7s6rc1XQ435NaWkElyc 0EhzWYeScnwsr2GHYN78afojnSvQhx3t0hSifA0JogkTPthjpe+pp+KQU0G8I6HA 1DQtA3M0n5r85w== -----END CERTIFICATE-----Generated at Sat Aug 23 17:27:22 2025 by rpki-client