$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/df/01058a-4a82-4818-972d-842858122bbc/1/RklSvBZUQexuLiAQyTPcgw82FzE.mft File: RklSvBZUQexuLiAQyTPcgw82FzE.mft (raw, json) Hash identifier: SzEk+dNtfobxju4szgk1SoamJkynNNupKq+LO3HON10= Subject key identifier: C3:DB:11:3F:15:6C:17:B2:58:9B:6F:C0:AB:8F:FB:A0:EA:7A:55:27 Authority key identifier: 46:49:52:BC:16:54:41:EC:6E:2E:20:10:C9:33:DC:83:0F:36:17:31 Certificate issuer: /CN=464952bc165441ec6e2e2010c933dc830f361731 Certificate serial: 0198D773A54008946B8EB7E4E42B3DEA3FB1 Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/RklSvBZUQexuLiAQyTPcgw82FzE.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/df/01058a-4a82-4818-972d-842858122bbc/1/RklSvBZUQexuLiAQyTPcgw82FzE.mft Manifest number: 09F4 Signing time: Sat 23 Aug 2025 15:02:16 +0000 Manifest this update: Sat 23 Aug 2025 15:02:16 +0000 Manifest next update: Sun 24 Aug 2025 15:02:16 +0000 Files and hashes: 1: 7HWHA8UqwHtsqDMBW-DwrAaDDjM.roa (hash: e8s5o0udkcNi/3gr4/Pby8a6BORkIl6Tk5BcUgdqf98=) 2: 8ZU3bGrm9xWhwMuNBNg_sVSf78w.roa (hash: q1BAPF4hVnnZILV3v3GzNcOP1nX7SZBYfnbCOVjjzwo=) 3: 9-Cs-wlSKolkQOZlHuZ6o38xnW8.roa (hash: /LvilRmKOS6giT5Dw0+bvBLFwH/Vk7jUGiOc4qBQkvY=) 4: CH-MNJ62x7kM2_t2iuWi-Pl441k.roa (hash: HaFXnQzr7MPgH+K0peJzoRzHcSdMpsIno7S1dDVTYls=) 5: F93HK3zZbjyanEiJSO9cArJniew.roa (hash: wrh+x7Klvcmq0ZMqoDo7aM3datdsQCypsCC/kWY8BG4=) 6: RklSvBZUQexuLiAQyTPcgw82FzE.crl (hash: rwBNxLXeiXoahH+YI6Aa+YujjFIca1iGlzyLiDy5YCo=) 7: RocZhE1Sgw4wWmm8LnKO4d7f68w.roa (hash: +rys+d7y9dD2VIYL252iXtWKGL/n4lME4L1WtriVBxI=) 8: U47Wz_LD2xLJywbdswHmPzRJpDo.roa (hash: qCq8pw/dLAXcMlcPqPaGHxhAYIuN8gInNQEcnd7HSIs=) 9: cSOzcJuJznyp0-yCo16vcwC-SO4.roa (hash: /BcpV3CpFg+yHnaLyG3CeUoFmA/RLptEV35Vt1SRJwQ=) 10: g8u27N4QItUirByGNIpicNOy82Y.roa (hash: 86XD7A3oPGKMoD9IAzlfVhw0nOpZrI3Tfibq7N31K6c=) 11: iH3j8qY1-071YfTwOblznlAQw6s.roa (hash: yME8emyVjusbrBjqemdlgI+CwPOa3VlHZpR5ZeMxUWc=) 12: mGSm6WnPN8htR3E3SqRmvrkDAW0.roa (hash: ma8SoOibhRfVHVvLv4aSGOKoznJfyTFPs8hixxk0hN8=) 13: o8lbHUF5p8P0LSI1V6iY7jMTuTg.roa (hash: ZQCfB91uZ1JZ71d13fCWoNRsNQvDiuAzDxXdM3rVpoo=) 14: ryDPDikJ1i_zY_ss9G41qhvN3jc.roa (hash: h94vj7TMlIg5ainHE5mYHmcUUj3Q1WNeWVzGbaI/3Fg=) 15: s34gFp_Dg8YCv8xU55YOYuR_tp0.roa (hash: 6OSop7WtLWi7lLLdg7yDCXvjXq4AkQqEA6GX04GSf58=) Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/df/01058a-4a82-4818-972d-842858122bbc/1/RklSvBZUQexuLiAQyTPcgw82FzE.crl rsync://rpki.ripe.net/repository/DEFAULT/df/01058a-4a82-4818-972d-842858122bbc/1/RklSvBZUQexuLiAQyTPcgw82FzE.mft rsync://rpki.ripe.net/repository/DEFAULT/RklSvBZUQexuLiAQyTPcgw82FzE.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Sun 24 Aug 2025 14:00:04 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:98:d7:73:a5:40:08:94:6b:8e:b7:e4:e4:2b:3d:ea:3f:b1 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=464952bc165441ec6e2e2010c933dc830f361731 Validity Not Before: Aug 23 15:02:16 2025 GMT Not After : Aug 24 15:02:16 2025 GMT Subject: CN=c3db113f156c17b2589b6fc0ab8ffba0ea7a5527 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:c7:e4:50:cf:f0:75:a7:c6:94:f5:c6:dc:5f:cc: fa:b4:f2:51:c0:10:c7:21:ce:9b:4d:8b:5a:8a:14: 52:8d:73:47:55:a2:75:38:bd:f5:b2:b0:af:cc:a5: b0:25:75:a5:fe:73:cb:e6:7e:19:5b:6b:2b:a5:61: 0d:5e:16:cd:07:51:2a:76:6c:e0:b6:51:95:a9:aa: 96:7b:a1:c2:2b:a1:1a:14:fc:74:87:cb:00:e9:e7: 96:88:6e:7e:c9:b6:ba:f9:a6:71:de:a7:b7:68:66: d0:37:9b:0e:ea:75:0f:3a:ac:0e:09:0c:d8:65:69: a2:9a:d0:49:42:0a:2a:4c:a9:21:b1:2c:cb:82:69: 15:35:ac:12:4a:78:58:3d:e6:a4:a8:b3:99:d9:4b: 55:01:4f:4d:20:8b:fb:7d:7d:df:7f:e7:33:fb:de: d6:98:ec:a4:8e:af:96:84:e9:11:a2:72:b6:0f:92: 9a:13:5e:a1:96:57:4b:fd:93:19:f6:17:9d:60:69: 76:62:25:2f:0a:46:cd:29:b8:a9:e1:9d:39:01:6c: df:10:48:11:bb:3c:28:5a:31:a8:89:e0:b4:d9:ad: 85:b1:0e:f4:a5:57:c0:c2:3f:1a:ed:80:2e:e6:92: 0a:ba:19:e7:6e:33:a2:c6:43:d4:c1:91:38:7a:4c: 98:bb Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: C3:DB:11:3F:15:6C:17:B2:58:9B:6F:C0:AB:8F:FB:A0:EA:7A:55:27 X509v3 Authority Key Identifier: keyid:46:49:52:BC:16:54:41:EC:6E:2E:20:10:C9:33:DC:83:0F:36:17:31 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/RklSvBZUQexuLiAQyTPcgw82FzE.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/df/01058a-4a82-4818-972d-842858122bbc/1/RklSvBZUQexuLiAQyTPcgw82FzE.mft X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/df/01058a-4a82-4818-972d-842858122bbc/1/RklSvBZUQexuLiAQyTPcgw82FzE.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 73:05:6a:79:f4:01:a5:d9:b5:c5:fa:b0:ee:9a:82:2d:0e:66: e7:51:8a:6a:95:2b:e1:bc:82:57:56:8d:6d:ea:2e:63:0c:ac: d1:79:9e:66:c5:14:ff:b9:83:8d:e0:bd:be:d1:8b:73:c3:3c: b2:29:a3:4c:35:bb:5b:e1:bf:13:fa:b8:90:ab:7e:66:a9:59: 1e:28:0e:52:63:9c:51:6d:c5:24:2a:b4:24:52:45:df:79:64: bf:1f:bd:0f:87:a0:91:58:86:ab:54:1b:36:b3:fb:32:da:9d: e6:d6:b0:96:fd:c5:cf:17:7c:fc:c5:01:42:8a:fc:b2:07:17: a6:1a:8e:19:ab:9b:79:64:3c:35:ff:42:45:5e:21:59:74:8c: 56:9b:18:57:f4:2f:4d:44:ff:57:09:68:79:c3:fa:72:68:eb: df:ab:fc:cf:b3:d9:0d:36:6d:70:ec:fd:c0:d7:7c:10:81:ff: 41:5f:46:75:b8:b2:e9:d8:8f:97:a6:4c:e3:86:17:69:54:53: 3d:01:8a:c4:f4:8a:33:c6:5d:b9:90:2b:73:95:f2:6e:13:e4: e7:c7:13:3a:c1:0e:4c:c2:50:91:68:40:c4:93:17:69:c6:5b: fc:a7:2e:bb:9e:2e:d4:96:10:7f:3e:c4:92:11:21:63:c1:87: e7:fc:e3:e1 -----BEGIN CERTIFICATE----- MIIFFjCCA/6gAwIBAgISAZjXc6VACJRrjrfk5Cs96j+xMA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKDQ2NDk1MmJjMTY1NDQxZWM2ZTJlMjAxMGM5MzNkYzgzMGYz NjE3MzEwHhcNMjUwODIzMTUwMjE2WhcNMjUwODI0MTUwMjE2WjAzMTEwLwYDVQQD EyhjM2RiMTEzZjE1NmMxN2IyNTg5YjZmYzBhYjhmZmJhMGVhN2E1NTI3MIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAx+RQz/B1p8aU9cbcX8z6tPJRwBDH Ic6bTYtaihRSjXNHVaJ1OL31srCvzKWwJXWl/nPL5n4ZW2srpWENXhbNB1Eqdmzg tlGVqaqWe6HCK6EaFPx0h8sA6eeWiG5+yba6+aZx3qe3aGbQN5sO6nUPOqwOCQzY ZWmimtBJQgoqTKkhsSzLgmkVNawSSnhYPeakqLOZ2UtVAU9NIIv7fX3ff+cz+97W mOykjq+WhOkRonK2D5KaE16hlldL/ZMZ9hedYGl2YiUvCkbNKbip4Z05AWzfEEgR uzwoWjGoieC02a2FsQ70pVfAwj8a7YAu5pIKuhnnbjOixkPUwZE4ekyYuwIDAQAB o4ICIjCCAh4wHQYDVR0OBBYEFMPbET8VbBeyWJtvwKuP+6DqelUnMB8GA1UdIwQY MBaAFEZJUrwWVEHsbi4gEMkz3IMPNhcxMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvUmtsU3ZCWlVRZXh1TGlBUXlUUGNndzgyRnpFLmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC9kZi8wMTA1OGEtNGE4Mi00ODE4LTk3MmQt ODQyODU4MTIyYmJjLzEvUmtsU3ZCWlVRZXh1TGlBUXlUUGNndzgyRnpFLm1mdDCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC9kZi8wMTA1OGEtNGE4Mi00ODE4LTk3MmQtODQyODU4MTIyYmJj LzEvUmtsU3ZCWlVRZXh1TGlBUXlUUGNndzgyRnpFLmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAcwVqefQB pdm1xfqw7pqCLQ5m51GKapUr4byCV1aNbeouYwys0XmeZsUU/7mDjeC9vtGLc8M8 simjTDW7W+G/E/q4kKt+ZqlZHigOUmOcUW3FJCq0JFJF33lkvx+9D4egkViGq1Qb NrP7Mtqd5tawlv3Fzxd8/MUBQor8sgcXphqOGaubeWQ8Nf9CRV4hWXSMVpsYV/Qv TUT/VwloecP6cmjr36v8z7PZDTZtcOz9wNd8EIH/QV9Gdbiy6diPl6ZM44YXaVRT PQGKxPSKM8ZduZArc5XybhPk58cTOsEOTMJQkWhAxJMXacZb/Kcuu54u1JYQfz7E khEhY8GH5/zj4Q== -----END CERTIFICATE-----Generated at Sat Aug 23 19:03:56 2025 by rpki-client