$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/d0/9f0f7a-11eb-4383-bc6a-4690a007141f/1/4tDEmg6X4NXzztO3trn3LKDLU9Y.mft File: 4tDEmg6X4NXzztO3trn3LKDLU9Y.mft (raw, json) Hash identifier: uOtn+Dq1P+WMoOnuaSiZK6+A7r/8lganKjPL52kb9qY= Subject key identifier: 35:16:E4:BE:61:77:A7:8B:7C:8C:49:31:8F:9D:01:64:8B:AB:2B:F7 Authority key identifier: E2:D0:C4:9A:0E:97:E0:D5:F3:CE:D3:B7:B6:B9:F7:2C:A0:CB:53:D6 Certificate issuer: /CN=e2d0c49a0e97e0d5f3ced3b7b6b9f72ca0cb53d6 Certificate serial: 0198D5BC2BB9E0E7BD1341683F059BE65D18 Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/4tDEmg6X4NXzztO3trn3LKDLU9Y.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/d0/9f0f7a-11eb-4383-bc6a-4690a007141f/1/4tDEmg6X4NXzztO3trn3LKDLU9Y.mft Manifest number: 1340 Signing time: Sat 23 Aug 2025 07:02:15 +0000 Manifest this update: Sat 23 Aug 2025 07:02:15 +0000 Manifest next update: Sun 24 Aug 2025 07:02:15 +0000 Files and hashes: 1: 1-xvBLiVIr5eO0ojnuxuHIDpGNj0.roa (hash: aK7ZmDyAzamzfU5scYPlW3gVBsMwISXT9xd5u5skngQ=) 2: 2BXalnRCdxlKBucFyUnY3v8NXIE.roa (hash: qbascniAVekJiZabGEHd3VuxY6P4azJ4yMUjYrzFjJo=) 3: 4gUeII5uNOSsk7ig0e6KHlG6BHA.roa (hash: xRGa4dvp0FYk/JLyi3pQEJ/XtveeLwqm3x3hfczzGhM=) 4: 4oFgbvjivonc75j6oWwkurpCHuo.roa (hash: wfNIhptalUUsPvpgzrp9sVZFBDTSEW8d7lJfHh/ba4k=) 5: 4tDEmg6X4NXzztO3trn3LKDLU9Y.crl (hash: r1GbZkJlvI+kmQdBCBH/oWvHP541uAePbIF+FNjAtx8=) 6: 5pnldwPETCzwQT8iJkyiSoWD3_k.roa (hash: oJntOrxxRhN9f3IdHJXmdQbwUKQGLcIDOqq/1tPI4PI=) 7: 6uM9geMN5E_JocXQTslv41Eocx8.roa (hash: Dlfx02PXvOyh1z3EkOuN2tEacNYqoH0GaOFD4WRWv7M=) 8: FBdxjOu8SX4p5g9e-XxmzyShdHQ.roa (hash: mngc3R66oJgb9rQ/5d73AA7n7b16oOQZDw1SHYqnhTA=) 9: HglCnD55qDv-Q0rgVR2_h-nRZkY.roa (hash: Qc4gkZG+SuNlsvP0f5FqX4UkqgAGysqsANOz/SQ42AI=) 10: HtZ57OBsmdXhe-F5g-lmzijNxck.roa (hash: P0xwVuTg9ir4CIbwZxsA+9nWaNItfve6TrNuKY2zqxM=) 11: PeZtOK6XcrYqlf82Nopp1BFWAXQ.roa (hash: y6xfqENV86+DxwWiv0cIANxmFCLNJHi4fntVAOoYQLI=) 12: RlHI2VPMUxz4vWMxsz_aSP7Y58A.roa (hash: o2Eco/oz0OjYhDyp8QR2quUuINLwT9HDpRtnEqaVUfg=) 13: SMigdfBEZBCpmCAUQemz1HzXzsY.roa (hash: rYoGdgZTMvC2OSoASCQvWU0g5tSPQxjtZ99HNktE1UI=) 14: _DswbRpVkPXQzJnopc-2rpO7ck0.roa (hash: sOdG0gaxCyeQh9EtJRGptli2IEmCGrHJQ/h1DmBq1IQ=) 15: dkbWTo4bq_yPPRqYmeLtAion_fk.roa (hash: DMCPEeMn/42xBYmE/TT+llc8dW4AkHYEj+Bu1a5chCg=) 16: f8wMF_0nYOjBC4T-3T9maTV9XOg.roa (hash: HH9Xx2RMXttctrpMSPb7lv2kW9EcD2NdHUms9yLQH2E=) 17: p_QYv0L6aYK512B3fR5CFvOoznk.roa (hash: aDfS/bDbCsW3S/qJ7SubMpjp1TuE7mqqhF55UFptL5k=) 18: sP_P89Gjqv0cRXNUr9_pv6JCftE.roa (hash: V9LKomJ1OLCr/vLBTnJjw6UPEUZRVYDPDN8HoyzesJg=) 19: slG7etJhHMxEF_RaKXpH3iT7Jqo.roa (hash: Jw4LSw8veeGAScSQy+xbjepFLappzSdTU9yGBS4At04=) 20: wMpCtJuJnMKH9PZbiphThxb5p3I.roa (hash: ho1eRYtOPimdRyr4aEbAZG/GlZlHUFROWz250IKu38c=) Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/d0/9f0f7a-11eb-4383-bc6a-4690a007141f/1/4tDEmg6X4NXzztO3trn3LKDLU9Y.crl rsync://rpki.ripe.net/repository/DEFAULT/d0/9f0f7a-11eb-4383-bc6a-4690a007141f/1/4tDEmg6X4NXzztO3trn3LKDLU9Y.mft rsync://rpki.ripe.net/repository/DEFAULT/4tDEmg6X4NXzztO3trn3LKDLU9Y.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Sun 24 Aug 2025 00:37:04 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:98:d5:bc:2b:b9:e0:e7:bd:13:41:68:3f:05:9b:e6:5d:18 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=e2d0c49a0e97e0d5f3ced3b7b6b9f72ca0cb53d6 Validity Not Before: Aug 23 07:02:15 2025 GMT Not After : Aug 24 07:02:15 2025 GMT Subject: CN=3516e4be6177a78b7c8c49318f9d01648bab2bf7 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:ce:a2:21:87:a0:01:9f:67:45:42:09:a0:08:3d: f3:be:e2:ea:38:65:4b:78:33:66:9d:72:29:9b:c6: f9:e1:5f:12:e6:62:6b:66:52:0e:e9:2b:2e:52:c8: a7:bb:82:b5:76:fc:cd:11:bf:88:b8:9c:94:de:40: 72:df:01:d7:fb:b7:f4:6a:8a:e3:57:7d:20:ed:51: 74:62:fd:30:b5:86:48:fe:68:20:25:c9:bb:70:9a: 12:37:9b:08:be:12:38:80:0e:3c:70:db:f5:f6:0e: ee:df:57:96:9d:e0:bf:1c:82:e1:14:a9:f9:7e:31: 17:a6:c2:c0:3c:63:15:e2:6a:62:ee:39:b5:e1:68: e7:a9:cb:56:b2:90:fe:a1:12:9e:28:f6:75:ef:ae: 3b:29:4f:7a:10:27:71:d0:f2:84:93:01:c0:b9:bb: 7e:52:6e:9e:31:5a:8a:59:7b:58:0f:7f:0b:64:53: 2f:ec:bf:ec:16:24:0d:6c:9d:0d:8e:56:61:76:1f: c4:f6:f4:13:af:07:88:11:70:dc:f1:8d:b5:c2:f0: 41:88:d2:69:55:65:a6:25:5d:fd:6b:ef:21:e5:af: ca:39:03:d3:20:e3:90:4e:48:9b:23:61:fe:46:ec: 5b:39:d6:95:5d:90:8c:68:3a:47:44:99:ea:40:6f: 9d:9d Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 35:16:E4:BE:61:77:A7:8B:7C:8C:49:31:8F:9D:01:64:8B:AB:2B:F7 X509v3 Authority Key Identifier: keyid:E2:D0:C4:9A:0E:97:E0:D5:F3:CE:D3:B7:B6:B9:F7:2C:A0:CB:53:D6 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/4tDEmg6X4NXzztO3trn3LKDLU9Y.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/d0/9f0f7a-11eb-4383-bc6a-4690a007141f/1/4tDEmg6X4NXzztO3trn3LKDLU9Y.mft X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/d0/9f0f7a-11eb-4383-bc6a-4690a007141f/1/4tDEmg6X4NXzztO3trn3LKDLU9Y.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption d0:68:97:f7:82:af:b6:1f:2a:2b:76:e5:a3:f8:20:c9:77:57: 3a:c2:e4:09:c6:92:e6:c1:99:cd:5e:ca:84:da:dd:60:f7:64: fd:b1:81:56:97:31:a6:24:b4:b9:55:2c:f6:28:e5:4b:5e:c7: 79:df:d9:33:e1:17:e0:a3:df:2e:e4:63:d8:ea:0f:82:99:35: c1:6e:ea:14:26:76:38:e5:29:63:14:82:70:19:6f:e2:59:0f: 9f:bd:72:63:26:2e:f7:05:c4:30:d5:af:0e:88:f2:d0:0b:d6: 65:90:72:3a:dd:62:b5:59:c4:ab:92:d8:13:c2:9a:7f:b5:90: 02:93:6f:75:02:ff:d1:b6:e8:36:4c:d7:97:74:8e:f9:72:ea: 22:69:bd:80:86:6a:9a:de:78:77:34:e9:09:86:9a:fd:71:91: e4:b7:73:ae:00:6b:bb:48:20:8b:b9:5f:18:4f:60:5e:c4:f1: 6d:24:9a:72:39:2c:9e:66:94:4c:b9:70:30:2a:dd:4d:1d:b5: 4a:b9:f2:d8:c3:02:e0:64:23:41:59:f5:c5:83:c7:bb:9b:ea: 12:44:6b:ee:33:fb:e8:53:d5:a6:6f:6c:a9:78:b7:4c:80:27: 54:d9:73:cf:08:9d:50:c7:3d:60:fa:f6:aa:cf:dc:ba:ff:cc: cf:e1:e1:83 -----BEGIN CERTIFICATE----- MIIFFjCCA/6gAwIBAgISAZjVvCu54Oe9E0FoPwWb5l0YMA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKGUyZDBjNDlhMGU5N2UwZDVmM2NlZDNiN2I2YjlmNzJjYTBj YjUzZDYwHhcNMjUwODIzMDcwMjE1WhcNMjUwODI0MDcwMjE1WjAzMTEwLwYDVQQD EygzNTE2ZTRiZTYxNzdhNzhiN2M4YzQ5MzE4ZjlkMDE2NDhiYWIyYmY3MIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAzqIhh6ABn2dFQgmgCD3zvuLqOGVL eDNmnXIpm8b54V8S5mJrZlIO6SsuUsinu4K1dvzNEb+IuJyU3kBy3wHX+7f0aorj V30g7VF0Yv0wtYZI/mggJcm7cJoSN5sIvhI4gA48cNv19g7u31eWneC/HILhFKn5 fjEXpsLAPGMV4mpi7jm14WjnqctWspD+oRKeKPZ17647KU96ECdx0PKEkwHAubt+ Um6eMVqKWXtYD38LZFMv7L/sFiQNbJ0NjlZhdh/E9vQTrweIEXDc8Y21wvBBiNJp VWWmJV39a+8h5a/KOQPTIOOQTkibI2H+RuxbOdaVXZCMaDpHRJnqQG+dnQIDAQAB o4ICIjCCAh4wHQYDVR0OBBYEFDUW5L5hd6eLfIxJMY+dAWSLqyv3MB8GA1UdIwQY MBaAFOLQxJoOl+DV887Tt7a59yygy1PWMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvNHRERW1nNlg0Tlh6enRPM3RybjNMS0RMVTlZLmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC9kMC85ZjBmN2EtMTFlYi00MzgzLWJjNmEt NDY5MGEwMDcxNDFmLzEvNHRERW1nNlg0Tlh6enRPM3RybjNMS0RMVTlZLm1mdDCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC9kMC85ZjBmN2EtMTFlYi00MzgzLWJjNmEtNDY5MGEwMDcxNDFm LzEvNHRERW1nNlg0Tlh6enRPM3RybjNMS0RMVTlZLmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEA0GiX94Kv th8qK3blo/ggyXdXOsLkCcaS5sGZzV7KhNrdYPdk/bGBVpcxpiS0uVUs9ijlS17H ed/ZM+EX4KPfLuRj2OoPgpk1wW7qFCZ2OOUpYxSCcBlv4lkPn71yYyYu9wXEMNWv Dojy0AvWZZByOt1itVnEq5LYE8Kaf7WQApNvdQL/0bboNkzXl3SO+XLqImm9gIZq mt54dzTpCYaa/XGR5LdzrgBru0ggi7lfGE9gXsTxbSSacjksnmaUTLlwMCrdTR21 Srny2MMC4GQjQVn1xYPHu5vqEkRr7jP76FPVpm9sqXi3TIAnVNlzzwidUMc9YPr2 qs/cuv/Mz+Hhgw== -----END CERTIFICATE-----Generated at Sat Aug 23 10:26:28 2025 by rpki-client