$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/de/f2bd6c-4843-4ead-aa09-3c16ff841ab2/1/b8UNDUIGe3arGi6OUz_4SbZdVvU.mft File: b8UNDUIGe3arGi6OUz_4SbZdVvU.mft (raw, json) Hash identifier: t3oSFCtrHBfOu01NZ1oVv3D5szznCuPZqRC1+PA4ru0= Subject key identifier: AF:B2:A0:2A:83:2E:56:13:EA:09:8C:A5:A4:32:76:F2:5F:9A:7E:B3 Authority key identifier: 6F:C5:0D:0D:42:06:7B:76:AB:1A:2E:8E:53:3F:F8:49:B6:5D:56:F5 Certificate issuer: /CN=6fc50d0d42067b76ab1a2e8e533ff849b65d56f5 Certificate serial: 0198D65FD8FDA0740058B03063E037CA2B23 Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/b8UNDUIGe3arGi6OUz_4SbZdVvU.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/de/f2bd6c-4843-4ead-aa09-3c16ff841ab2/1/b8UNDUIGe3arGi6OUz_4SbZdVvU.mft Manifest number: 1673 Signing time: Sat 23 Aug 2025 10:01:02 +0000 Manifest this update: Sat 23 Aug 2025 10:01:02 +0000 Manifest next update: Sun 24 Aug 2025 10:01:02 +0000 Files and hashes: 1: 0Abj6PSR4FyJUqM6LoN6KFa-26E.roa (hash: 3N4/akmiC/u7gL1HF+D/mYuikLJRGoPmYVruDqzajtA=) 2: 1-HYjW61poyKPMhvfx7U4CngkbXQ.roa (hash: FgaQ7pllPxrtYs+K7a4T0YujtsmGhQlX0nAW+eszuLQ=) 3: 1X78ozO3_5ULJTTX4ARholYkMtY.roa (hash: 1YfjPO55+mmSYnYEpQNn/8Y7Ymp0JTDMtIPTDKYWHh8=) 4: 3yeC5jM2ksuqKR2Zh5IvhgGT7kM.roa (hash: aly6yVEpJfsikwPOCEOA8sYqzyulJ58cobvGMlp3Pfc=) 5: H6AhUHbx8OlryRkBD15AK_97AFI.roa (hash: aVuSxMtEE3jtCIFUPkZzKs9s0u5aGihLcG9skQiW4iU=) 6: IE5Ot6kXSpSm_XTJaCWCEcClZ1E.roa (hash: ecVDNUR7HlsILjWVcvUtVx/095hxRc4P38CIzJWANj8=) 7: K8brr-FPsMEnGF0kbZo88qS6lTk.roa (hash: qW/T11RMV283PJtyNsGcccWeoOYrXus8SlIyII3hPJA=) 8: OQtVR-cBTyQL6VvIXAOtawOW2cA.roa (hash: Y4JxghrLsZ564AFIbmlJP5QHypmTlarb7NM9FNTmN7A=) 9: RzzP2UDDSAPrZWNFm6aBz91iMgQ.roa (hash: 1RDkfiEzt2ZEB4LXorNIAFk4fcDKeMEBcQ7w1edzRtU=) 10: UND6ykiM5N2Whk6faH2bgr5_Tp8.roa (hash: 5dH/g9DexAH0bhxx/mr0h3rPJ5N5miOI47JiKbqWBiU=) 11: XKHgN2jT3_6QMfOgHKrS1JlPtdM.roa (hash: 0/lku7LnO6lIZwW3HNYBW2LCc3aSui+jPA3GCkogDfQ=) 12: b8UNDUIGe3arGi6OUz_4SbZdVvU.crl (hash: PZlGrStIkhTK4FzTDVlqnTZt78M+4+ojoUtZzjEgDzU=) 13: hz97jgo9bqt0uT-ArAt9KzOXsP4.roa (hash: bhze+d6pD3xd6tpzBiM9HUGCjaef6tJylvnHETr5GxE=) 14: wEFBReYub_TeCbtnkjQHEDS6zaQ.roa (hash: 5e2lfQsxA6BsgP6dDtPIK0Ql9foij6lPOeMn2Q1JhkI=) 15: yhQ6xBNVu2d9gMvHbWmdb3fTnDU.roa (hash: QpVyxb1Mu2qXGgc7DSw5FLEOPavgu3Uy/ZdRkYO4Cds=) Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/de/f2bd6c-4843-4ead-aa09-3c16ff841ab2/1/b8UNDUIGe3arGi6OUz_4SbZdVvU.crl rsync://rpki.ripe.net/repository/DEFAULT/de/f2bd6c-4843-4ead-aa09-3c16ff841ab2/1/b8UNDUIGe3arGi6OUz_4SbZdVvU.mft rsync://rpki.ripe.net/repository/DEFAULT/b8UNDUIGe3arGi6OUz_4SbZdVvU.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Sun 24 Aug 2025 05:01:29 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:98:d6:5f:d8:fd:a0:74:00:58:b0:30:63:e0:37:ca:2b:23 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=6fc50d0d42067b76ab1a2e8e533ff849b65d56f5 Validity Not Before: Aug 23 10:01:02 2025 GMT Not After : Aug 24 10:01:02 2025 GMT Subject: CN=afb2a02a832e5613ea098ca5a43276f25f9a7eb3 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:cc:9a:f0:bc:a0:f4:e1:ae:32:10:04:cb:a0:89: f3:5b:e3:97:60:1e:c3:91:2b:c4:8c:d2:c2:fd:e7: 50:60:7d:ef:18:9b:2a:ac:ca:b6:1e:27:6e:13:e2: 08:9c:1b:5e:6a:3b:4c:8a:e3:34:68:67:70:b1:1d: f6:e6:a2:dd:86:06:01:ff:8f:06:75:7d:ac:64:67: fa:19:9c:6d:be:f2:ba:c9:0e:16:19:bf:08:a7:6b: 4a:1a:06:a4:6e:0a:ab:19:33:5f:f4:3c:a4:d1:49: 46:4c:14:46:61:be:18:94:aa:be:21:2f:71:67:cf: 45:5e:af:8f:ee:cb:8b:a2:8b:b2:6a:74:69:4f:1c: db:47:47:ca:0b:7a:ad:a9:b3:5e:f8:54:3c:31:62: 1b:c1:68:d7:bd:23:f8:0f:0a:9a:94:5a:57:42:a7: ee:c3:81:46:d5:c2:c9:7e:82:89:24:08:91:6b:07: 83:6e:6c:30:7e:95:76:14:1d:3a:50:6f:7a:56:2a: ce:0d:5b:57:15:1b:1a:ec:e1:50:8b:55:5f:55:d7: 55:5e:38:5f:df:f1:d3:c4:07:3f:61:c3:2a:e5:bd: e5:d2:34:f6:e2:52:ae:09:0e:ed:2c:45:e5:dd:8b: 4e:58:0a:e3:1a:7c:16:e4:42:3f:b5:bd:c8:59:17: 98:d7 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: AF:B2:A0:2A:83:2E:56:13:EA:09:8C:A5:A4:32:76:F2:5F:9A:7E:B3 X509v3 Authority Key Identifier: keyid:6F:C5:0D:0D:42:06:7B:76:AB:1A:2E:8E:53:3F:F8:49:B6:5D:56:F5 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/b8UNDUIGe3arGi6OUz_4SbZdVvU.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/de/f2bd6c-4843-4ead-aa09-3c16ff841ab2/1/b8UNDUIGe3arGi6OUz_4SbZdVvU.mft X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/de/f2bd6c-4843-4ead-aa09-3c16ff841ab2/1/b8UNDUIGe3arGi6OUz_4SbZdVvU.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 88:63:88:35:cd:21:54:f9:fc:1f:c6:6c:71:7e:87:64:ba:79: 48:37:88:e7:1a:db:0c:7d:92:49:41:56:7a:d2:f8:7f:9d:bd: 84:c3:e1:7f:be:3d:62:47:6d:6f:b2:8c:dc:d5:56:01:32:d7: 6f:6c:9d:6f:9a:2e:97:21:9e:90:b2:ec:ec:71:09:45:19:3e: 79:74:d0:d8:49:68:34:ff:02:e4:fd:2f:e3:f8:fb:4a:e3:87: 31:ac:f0:04:e0:64:6d:9d:4a:a1:85:41:7e:b7:19:9c:a4:a9: f3:9b:16:22:7b:1d:72:05:5a:57:e5:80:84:fc:52:ef:48:a3: 1b:b2:9d:24:ff:84:fe:9e:ba:f9:e7:79:79:be:be:57:a1:42: 25:f0:91:6e:eb:0e:e3:93:d9:1c:35:24:a8:bd:e5:3f:cb:a2: 79:f4:3b:d3:f2:c5:96:7d:cf:80:fc:57:a9:00:5e:36:87:65: ef:86:bd:6c:fe:6d:3d:4a:44:be:13:d1:b9:76:bf:8a:90:90: 96:49:03:e5:8d:1d:d2:d3:53:6b:3b:db:1d:58:6c:0a:67:bd: b7:31:fa:c4:4f:ca:a6:54:67:85:57:24:dc:1f:ed:ad:0a:88: 7a:6b:82:5e:58:fc:79:5f:86:a0:4e:b6:fd:1b:96:79:54:3f: 08:20:54:ce -----BEGIN CERTIFICATE----- MIIFFjCCA/6gAwIBAgISAZjWX9j9oHQAWLAwY+A3yisjMA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKDZmYzUwZDBkNDIwNjdiNzZhYjFhMmU4ZTUzM2ZmODQ5YjY1 ZDU2ZjUwHhcNMjUwODIzMTAwMTAyWhcNMjUwODI0MTAwMTAyWjAzMTEwLwYDVQQD EyhhZmIyYTAyYTgzMmU1NjEzZWEwOThjYTVhNDMyNzZmMjVmOWE3ZWIzMIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAzJrwvKD04a4yEATLoInzW+OXYB7D kSvEjNLC/edQYH3vGJsqrMq2HiduE+IInBteajtMiuM0aGdwsR325qLdhgYB/48G dX2sZGf6GZxtvvK6yQ4WGb8Ip2tKGgakbgqrGTNf9Dyk0UlGTBRGYb4YlKq+IS9x Z89FXq+P7suLoouyanRpTxzbR0fKC3qtqbNe+FQ8MWIbwWjXvSP4DwqalFpXQqfu w4FG1cLJfoKJJAiRaweDbmwwfpV2FB06UG96VirODVtXFRsa7OFQi1VfVddVXjhf 3/HTxAc/YcMq5b3l0jT24lKuCQ7tLEXl3YtOWArjGnwW5EI/tb3IWReY1wIDAQAB o4ICIjCCAh4wHQYDVR0OBBYEFK+yoCqDLlYT6gmMpaQydvJfmn6zMB8GA1UdIwQY MBaAFG/FDQ1CBnt2qxoujlM/+Em2XVb1MA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvYjhVTkRVSUdlM2FyR2k2T1V6XzRTYlpkVnZVLmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC9kZS9mMmJkNmMtNDg0My00ZWFkLWFhMDkt M2MxNmZmODQxYWIyLzEvYjhVTkRVSUdlM2FyR2k2T1V6XzRTYlpkVnZVLm1mdDCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC9kZS9mMmJkNmMtNDg0My00ZWFkLWFhMDktM2MxNmZmODQxYWIy LzEvYjhVTkRVSUdlM2FyR2k2T1V6XzRTYlpkVnZVLmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAiGOINc0h VPn8H8ZscX6HZLp5SDeI5xrbDH2SSUFWetL4f529hMPhf749Ykdtb7KM3NVWATLX b2ydb5oulyGekLLs7HEJRRk+eXTQ2EloNP8C5P0v4/j7SuOHMazwBOBkbZ1KoYVB frcZnKSp85sWInsdcgVaV+WAhPxS70ijG7KdJP+E/p66+ed5eb6+V6FCJfCRbusO 45PZHDUkqL3lP8uiefQ70/LFln3PgPxXqQBeNodl74a9bP5tPUpEvhPRuXa/ipCQ lkkD5Y0d0tNTazvbHVhsCme9tzH6xE/KplRnhVck3B/trQqIemuCXlj8eV+GoE62 /RuWeVQ/CCBUzg== -----END CERTIFICATE-----Generated at Sat Aug 23 12:22:55 2025 by rpki-client