$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/cd/6168d7-946c-4574-91ea-82ad14555eaa/1/mCz4CcDj6OVVL50N0uJ-DdLY2r4.mft File: mCz4CcDj6OVVL50N0uJ-DdLY2r4.mft (raw, json) Hash identifier: zB0SD9usF5dZkq5PgbVyLNHermCU8mdnlsPRevWh2Jk= Subject key identifier: C5:04:C5:5F:1E:FE:CE:C2:EB:BB:6C:8B:89:B1:68:3A:E3:6D:89:35 Authority key identifier: 98:2C:F8:09:C0:E3:E8:E5:55:2F:9D:0D:D2:E2:7E:0D:D2:D8:DA:BE Certificate issuer: /CN=982cf809c0e3e8e5552f9d0dd2e27e0dd2d8dabe Certificate serial: 0198D65F9D81D30A8F5CBEA6B3D7A50962CB Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/mCz4CcDj6OVVL50N0uJ-DdLY2r4.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/cd/6168d7-946c-4574-91ea-82ad14555eaa/1/mCz4CcDj6OVVL50N0uJ-DdLY2r4.mft Manifest number: 171F Signing time: Sat 23 Aug 2025 10:00:47 +0000 Manifest this update: Sat 23 Aug 2025 10:00:47 +0000 Manifest next update: Sun 24 Aug 2025 10:00:47 +0000 Files and hashes: 1: 1-W8fXv0jttdWKlzJAXVxxYtpRug.roa (hash: gpIh638+Fcd1tAei50b0+8GVpPlev9wrd/g4gdASdjg=) 2: 1UWB6DiO5XdV3re-o8rnuoqA6Ms.roa (hash: acQwekWVQZ/8nvJFITjzBnRus/D8fEtyc11Q6KELe7w=) 3: 21_l98tMuuHtah8-s1GQ4s9w80o.roa (hash: kBh4jdwY3MGZ4Pq8reV1XfNIfs+7zVu2WLUGJ+5lgvc=) 4: 4w30D5KawwaEKeLXCLppZs-985Y.roa (hash: D2Lwmoer5qGID/4i5fsaA6M5CcgJmrhikqoV9diBlTk=) 5: 584_8-MCCtntQOfvULwWZs9O7nE.roa (hash: 2qpHd4/GVV0NiG+wogJB5AQCeDp3yyLGq0zIUvBip28=) 6: 627caqDtqNfm9yW20lXiIagRUdA.roa (hash: Mi5qNzk/DECdSaSuVbFAUrlrcWaAk5NhLe1pKkhpRiI=) 7: AZYvtxCiQAo7McIIg5dYZPnjqkI.roa (hash: e/Nkv2lWFMKh5GkiCT+Bt9tYXmSUttTSHjKIqokHr5w=) 8: Brhkd2-auvvZmCyvxy5ORhHeQ6E.roa (hash: g8WF2m4nW9TPwqD2pE0ddCjVXs1fr0m/MHPrZ/Qj2HI=) 9: CnHjgZKNSNMP8dJ_BtYZ7Xo4ZrM.roa (hash: FqQbIRpVOThM0L1uy/AMjORSqSUsS/5+snA6mZqlQAA=) 10: IrnlAQa6M1A96HHiDasRUfVGqbQ.roa (hash: xgq5FcKSqvltS9tf8414o9TbLoeW+VIxwonV5uaPruw=) 11: LOKrZEDDVhVnSlJWlOLgQ5nPcM0.roa (hash: 2CeUB6HU9O6IboYshEwLG/p+jYhiKQ64ZtA5Y3idzrs=) 12: LbbsmkI3GqawDuN3XH6acheMxPw.roa (hash: BqWA3SYDAKLfoYVuIlyCld31iNDXkXCl/KtIv69jNUw=) 13: MRoUAROw4LH2qMua3FF0ivRRV1k.roa (hash: AM1ERkg9MkmZ5+MBy7Dj4XsMG8QwYDlhJ+3I/zu6fhk=) 14: OOYkNDqqDn1Unj3M-yrjf_S9VlU.roa (hash: oCGvjVeC4FC9ueufaA6bhsrNhxHd2pd306IA0XGXLfs=) 15: QJvPeNzFvPANqEbfkIc8-3zDQLs.roa (hash: felyBGjLHZhYiBLtOS5vAZwi9iqRNucwfxHrWgkMpWA=) 16: TrJv_8fKTcS_JBhUlD0AOoYAAQA.roa (hash: f2kfoia7LPQzOEBZN5rSYHh6gWQLd4Eepwr2rpiJk9c=) 17: UlqMdzKNjKKz7GVAWhNQ0GeC6iE.roa (hash: vyjrNuYYOAehZPhyITO+Q5uPp2e1fJC2nVGYypgHEhg=) 18: WJhqTCUN_AjGjAYRDp33eZN0BY4.roa (hash: 06Htmns2yq5ClkGiqHYQcD9sTifSqYU3RXoOiPSPCkE=) 19: azJgsmdTDF3ELk-I19mAROWoKeE.roa (hash: oh/dgWtIFhqfW7S9fR3cOqTRk0csYkiTH2ALt2aoNhQ=) 20: eChAGDbdQGMbx-CgEa8ktTddF6A.roa (hash: WaY78nyI3A8kBY4pFd0TG8ZJI0s+NCkhF+OV6SV5Crw=) 21: gN00iWVZ4X9ImdixtPXeB88eR_k.roa (hash: DPVgneYPbYS00UaxJyd5C7zkqYJRRcPWgn4xBTn6bHk=) 22: gnHztlWIUEkbfP_VpJDgy1aZ-q8.roa (hash: 8IEq5Il4ymKT0XR1RNf3aEeBm7YPqbccSq4VWhr/cXU=) 23: mCz4CcDj6OVVL50N0uJ-DdLY2r4.crl (hash: 3C+BzKrMMKZ0WUeqwPSsGlfr9pf9cgcf9Cqpd4aoiEQ=) 24: owD2F5PTIfIuOH1ResHlD6bHqfw.roa (hash: FwwD5nwDxuakINFZYh01TzvwO9abW6HL7q42RgazHtQ=) 25: s5Ai9g5eYYL8Bgx7ZWiTovq-xxE.roa (hash: BtApyhPvW43mqLBFeRPcKdPRw6DTk5KYzme6TZtVXns=) 26: sClmMBT_F-zHChOlRIEgdQPxP6k.roa (hash: ZhHXlBlX50DWtj7LBEqnVF6o2/ifQbmJsY9h3vjBI4Q=) 27: sW7iMiWbwjQZ4JTr9eqMstrH0fY.roa (hash: fl3fF4gUVsev8QdVZnLOIu5u/5rzRWGxzrZRrAPXabs=) 28: tdG4gwbiCDTl2DZU4EFrqi-57Fc.roa (hash: HXWAwqtUcnHFWl+ei5dmWCUQV5Bz5IiYmO9iAB6ydxI=) 29: w23_TR4dcsNa31LTX8HVMLWRN_w.roa (hash: rfdkH9NAgBWGbrUS8/d8Rmrz5XY4u8KepKOXwjiNknw=) 30: wWRDfWHup1u0k3UjICPfUYIPuSY.roa (hash: yzH1M2v1GGWQRBkb4bWaRfefbh3n4eH1xoy+GhWge5A=) 31: wYxMdXSUEDjU1Cv3_j8xQDvi1yg.roa (hash: WyaQu0KrdFh/xZS6g5xHvbw77OL9Wai9qSXwo4Oty1g=) 32: xeXsIqRyNQ8tCJjLiS_SWkibat0.roa (hash: JByqNQHgtIum6mQVh/2h0Z7sUMkRsbp23RZvkf78Q8U=) 33: zA8L3Jvv9SEACC4CD6D8SPMP2Sk.roa (hash: Tngvw9PMaTEzEGc2VaqgRFM8azKZIG82ga5hio7GHN8=) Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/cd/6168d7-946c-4574-91ea-82ad14555eaa/1/mCz4CcDj6OVVL50N0uJ-DdLY2r4.crl rsync://rpki.ripe.net/repository/DEFAULT/cd/6168d7-946c-4574-91ea-82ad14555eaa/1/mCz4CcDj6OVVL50N0uJ-DdLY2r4.mft rsync://rpki.ripe.net/repository/DEFAULT/mCz4CcDj6OVVL50N0uJ-DdLY2r4.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Sun 24 Aug 2025 05:01:29 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:98:d6:5f:9d:81:d3:0a:8f:5c:be:a6:b3:d7:a5:09:62:cb Signature Algorithm: sha256WithRSAEncryption Issuer: CN=982cf809c0e3e8e5552f9d0dd2e27e0dd2d8dabe Validity Not Before: Aug 23 10:00:47 2025 GMT Not After : Aug 24 10:00:47 2025 GMT Subject: CN=c504c55f1efecec2ebbb6c8b89b1683ae36d8935 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:a9:fc:18:06:55:91:70:14:c2:10:ea:7f:09:0c: e7:51:a5:4b:8b:f2:5c:50:a4:da:97:e4:ef:2f:a3: 19:56:90:f8:63:9d:7e:ce:8c:85:80:30:4f:3f:6d: a5:55:20:8b:9b:45:e4:fa:91:87:92:87:86:16:fd: 9b:bb:27:c5:36:37:a1:16:dc:1f:90:75:ff:7f:35: e7:d5:55:db:21:f8:24:09:fc:b3:b5:e4:06:a7:98: f5:1f:84:db:a7:dd:c2:71:aa:fe:e6:e4:19:2e:2f: 42:3f:c6:10:b8:c9:8a:bb:ec:50:86:83:3c:2e:b2: f1:84:59:08:0d:8c:84:71:cb:2e:38:36:34:58:95: 1d:ec:64:29:05:6e:28:d1:79:ea:fc:0a:23:02:d0: 5e:27:51:96:aa:fe:24:d8:c5:76:25:83:be:10:5b: 49:32:67:f0:00:ef:cb:a3:c7:f1:dc:5c:c0:12:47: e6:26:dc:d3:fb:76:4e:c6:0b:38:de:8d:21:7a:2a: ce:fa:08:4b:c9:65:a7:61:95:68:70:f7:64:f0:a8: d7:5c:30:f2:ed:56:80:18:6c:b0:eb:c6:d7:30:3f: f5:20:ce:e8:48:79:3d:df:67:01:88:70:a4:8f:19: 2b:bf:64:4d:21:3a:68:60:d9:06:43:4f:d8:5b:99: 68:63 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: C5:04:C5:5F:1E:FE:CE:C2:EB:BB:6C:8B:89:B1:68:3A:E3:6D:89:35 X509v3 Authority Key Identifier: keyid:98:2C:F8:09:C0:E3:E8:E5:55:2F:9D:0D:D2:E2:7E:0D:D2:D8:DA:BE X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/mCz4CcDj6OVVL50N0uJ-DdLY2r4.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/cd/6168d7-946c-4574-91ea-82ad14555eaa/1/mCz4CcDj6OVVL50N0uJ-DdLY2r4.mft X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/cd/6168d7-946c-4574-91ea-82ad14555eaa/1/mCz4CcDj6OVVL50N0uJ-DdLY2r4.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 52:10:73:d3:5b:80:a0:cd:5e:fd:98:bd:d5:94:3c:ca:6c:40: 11:f4:33:85:95:07:d8:00:11:ab:d6:9d:37:fb:d2:97:14:4d: e1:26:a8:eb:b0:af:9e:39:91:1f:bf:3e:98:00:ed:4f:ea:14: 83:25:a4:e7:38:27:d5:b9:73:18:d4:d2:23:aa:4c:77:e6:58: 89:42:37:59:a2:a6:e5:fa:ff:c7:f0:49:bf:eb:ef:7a:69:c0: 05:c3:1c:c1:fa:a9:58:d3:03:76:48:cd:74:97:78:30:cc:cb: 12:a0:6b:7e:a9:3e:c8:78:aa:29:5a:4b:b3:07:2f:7f:df:a6: 68:e4:14:26:85:4d:68:86:a2:0f:6a:e2:27:79:35:39:34:15: df:0c:48:4d:20:5a:af:d1:a6:9e:84:36:88:d8:a9:5e:8a:e3: 94:f0:4e:34:d1:ca:86:40:90:fe:06:3b:b3:73:30:4c:53:60: d9:17:62:00:5e:be:a8:c0:3e:3c:0b:db:04:99:28:30:56:1d: c2:7f:f5:43:98:4d:83:ba:40:51:df:b8:53:22:79:7c:84:7e: a1:3e:9c:2b:6b:b5:90:ad:e9:cd:c2:d1:ff:f8:9e:cf:99:96: cd:a7:c8:dd:62:77:af:7f:20:40:dc:ab:74:d9:e3:e4:0b:04: 9d:c3:b2:be -----BEGIN CERTIFICATE----- MIIFFjCCA/6gAwIBAgISAZjWX52B0wqPXL6ms9elCWLLMA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKDk4MmNmODA5YzBlM2U4ZTU1NTJmOWQwZGQyZTI3ZTBkZDJk OGRhYmUwHhcNMjUwODIzMTAwMDQ3WhcNMjUwODI0MTAwMDQ3WjAzMTEwLwYDVQQD EyhjNTA0YzU1ZjFlZmVjZWMyZWJiYjZjOGI4OWIxNjgzYWUzNmQ4OTM1MIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAqfwYBlWRcBTCEOp/CQznUaVLi/Jc UKTal+TvL6MZVpD4Y51+zoyFgDBPP22lVSCLm0Xk+pGHkoeGFv2buyfFNjehFtwf kHX/fzXn1VXbIfgkCfyzteQGp5j1H4Tbp93Ccar+5uQZLi9CP8YQuMmKu+xQhoM8 LrLxhFkIDYyEccsuODY0WJUd7GQpBW4o0Xnq/AojAtBeJ1GWqv4k2MV2JYO+EFtJ MmfwAO/Lo8fx3FzAEkfmJtzT+3ZOxgs43o0heirO+ghLyWWnYZVocPdk8KjXXDDy 7VaAGGyw68bXMD/1IM7oSHk932cBiHCkjxkrv2RNITpoYNkGQ0/YW5loYwIDAQAB o4ICIjCCAh4wHQYDVR0OBBYEFMUExV8e/s7C67tsi4mxaDrjbYk1MB8GA1UdIwQY MBaAFJgs+AnA4+jlVS+dDdLifg3S2Nq+MA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvbUN6NENjRGo2T1ZWTDUwTjB1Si1EZExZMnI0LmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC9jZC82MTY4ZDctOTQ2Yy00NTc0LTkxZWEt ODJhZDE0NTU1ZWFhLzEvbUN6NENjRGo2T1ZWTDUwTjB1Si1EZExZMnI0Lm1mdDCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC9jZC82MTY4ZDctOTQ2Yy00NTc0LTkxZWEtODJhZDE0NTU1ZWFh LzEvbUN6NENjRGo2T1ZWTDUwTjB1Si1EZExZMnI0LmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAUhBz01uA oM1e/Zi91ZQ8ymxAEfQzhZUH2AARq9adN/vSlxRN4Sao67CvnjmRH78+mADtT+oU gyWk5zgn1blzGNTSI6pMd+ZYiUI3WaKm5fr/x/BJv+vvemnABcMcwfqpWNMDdkjN dJd4MMzLEqBrfqk+yHiqKVpLswcvf9+maOQUJoVNaIaiD2riJ3k1OTQV3wxITSBa r9GmnoQ2iNipXorjlPBONNHKhkCQ/gY7s3MwTFNg2RdiAF6+qMA+PAvbBJkoMFYd wn/1Q5hNg7pAUd+4UyJ5fIR+oT6cK2u1kK3pzcLR//iez5mWzafI3WJ3r38gQNyr dNnj5AsEncOyvg== -----END CERTIFICATE-----Generated at Sat Aug 23 12:14:54 2025 by rpki-client