$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/e2/ad3044-cdce-46cf-92c9-a954d053994a/1/1g9F98xLaR_UoxwfHAtPYF13pu8.mft File: 1g9F98xLaR_UoxwfHAtPYF13pu8.mft (raw, json) Hash identifier: eUOD8NQhGe6QmjF3Udg1cAy8Zj0BEAlICTPKoVN/djY= Subject key identifier: 68:2D:79:98:D5:FA:82:E0:48:BA:79:4F:39:64:52:7F:1D:FF:67:BF Authority key identifier: D6:0F:45:F7:CC:4B:69:1F:D4:A3:1C:1F:1C:0B:4F:60:5D:77:A6:EF Certificate issuer: /CN=d60f45f7cc4b691fd4a31c1f1c0b4f605d77a6ef Certificate serial: 0198D5F159A3B9FFA565B9193FB748DF7C11 Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/1g9F98xLaR_UoxwfHAtPYF13pu8.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/e2/ad3044-cdce-46cf-92c9-a954d053994a/1/1g9F98xLaR_UoxwfHAtPYF13pu8.mft Manifest number: 1653 Signing time: Sat 23 Aug 2025 08:00:20 +0000 Manifest this update: Sat 23 Aug 2025 08:00:20 +0000 Manifest next update: Sun 24 Aug 2025 08:00:20 +0000 Files and hashes: 1: 1g9F98xLaR_UoxwfHAtPYF13pu8.crl (hash: zv5B/s8pnPen/0SX4JUD3GGKeRMW/KMPgCqeVFwlsPY=) 2: GMAT5cnP7VsDriW3_zL3dmojRH8.roa (hash: 9OZgqMWwoj0IlbvwNkLekurnPx7RT1aRlKGSPHOL6N4=) 3: IoE67Ac0pXcZcF9gBBC8VKka1vE.roa (hash: kt4XWZcgrYkLHsaAC2c2z5iyqyhmqC0zJwGvhSrnQ3E=) 4: MnG_2GzorHPsXNp5Vum7-rUjReY.roa (hash: D3z8cv+XlClqN6b2gc/ybPBfC33Ewbb6orbavaJ/jxk=) 5: PPMANDrLvF7lVgznicSOoAT3-3U.roa (hash: goEhx/poAjkzaQRi2RGACZSEuEQ6nJJ0p5PoSp7o6bo=) 6: b5u0PP2LUmpbpNJ4qAdIl3s9IjI.roa (hash: 4ZbWUTDO0hiozFSxacFGW2XCjTl1RPjd3yDPIUYji9M=) 7: jfxb2BR-CQiCSpU8DpDydbDz1b0.roa (hash: fObbuEbq3/zFmHWpgeQlp5JFopCYl+4GEGdq5exW77c=) 8: rrmPFSxVt5xEtowDvlnYGvxrH3s.roa (hash: mhHuydqllyBkMxNXx9HLabM7W+Fte6mEhiiQe0n8fRA=) 9: th1p5jE1fl21GfKXyCflURpVpo0.roa (hash: w4pXoPCT9slYbdDvFiyPewBrsldI3f9m6umM8Wv0SkE=) 10: viBgIC4abJYY7C__L2VefsiYSYI.roa (hash: r+Hi34v0Qt4A/ODVfo4uFHb77CXM38aMXnF2F0o4IcY=) 11: xNr5I0Wokl-j2aBAEkjZmpNRVng.roa (hash: epmYMuuR7FlxzNy/fvLKPn2AzgVlFDZhQf7tXXleECM=) Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/e2/ad3044-cdce-46cf-92c9-a954d053994a/1/1g9F98xLaR_UoxwfHAtPYF13pu8.crl rsync://rpki.ripe.net/repository/DEFAULT/e2/ad3044-cdce-46cf-92c9-a954d053994a/1/1g9F98xLaR_UoxwfHAtPYF13pu8.mft rsync://rpki.ripe.net/repository/DEFAULT/1g9F98xLaR_UoxwfHAtPYF13pu8.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Sun 24 Aug 2025 05:01:29 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:98:d5:f1:59:a3:b9:ff:a5:65:b9:19:3f:b7:48:df:7c:11 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=d60f45f7cc4b691fd4a31c1f1c0b4f605d77a6ef Validity Not Before: Aug 23 08:00:20 2025 GMT Not After : Aug 24 08:00:20 2025 GMT Subject: CN=682d7998d5fa82e048ba794f3964527f1dff67bf Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:9b:38:f1:95:d9:2f:c7:76:3e:f8:f8:da:b2:cf: ee:d5:4a:a0:8a:b2:a4:20:b3:ad:46:2b:29:4d:2f: 52:0e:df:a8:11:e6:5b:c3:e0:a8:42:5d:f0:a5:7c: bf:42:3b:03:88:07:c8:89:d0:11:db:cc:a1:c4:09: 09:13:11:13:22:4c:0d:43:97:76:23:fb:aa:e5:f7: 60:e3:cb:ab:21:81:18:8f:b8:bb:ed:42:2f:b8:6e: e4:1d:50:91:f3:f1:a0:56:d2:8a:c9:7b:8b:69:1d: b0:02:0f:2b:6b:1e:42:c8:54:f8:68:0b:5a:77:34: 7d:c7:e5:43:ca:33:13:2c:e7:e5:93:7d:a5:70:10: 36:7f:35:54:5d:ab:68:55:32:b8:f5:bd:bd:6c:00: 43:aa:e2:67:76:dc:70:47:2a:e4:26:26:89:64:ab: 2c:94:29:fd:2c:3f:b3:59:4c:0f:ba:d4:56:fa:3c: 4b:80:cb:83:55:9f:ac:36:78:12:d9:a3:a5:c3:81: 31:7b:8f:3e:a2:57:8f:12:18:c1:f0:48:a8:20:02: 49:0a:e1:8b:14:97:d7:bc:6c:f9:b8:e4:eb:52:34: d0:d0:c6:28:5b:7f:ab:44:17:6a:af:c4:ff:d9:db: 45:76:1a:c0:ab:ac:ab:10:62:2e:d5:64:23:4e:bc: 3f:f1 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 68:2D:79:98:D5:FA:82:E0:48:BA:79:4F:39:64:52:7F:1D:FF:67:BF X509v3 Authority Key Identifier: keyid:D6:0F:45:F7:CC:4B:69:1F:D4:A3:1C:1F:1C:0B:4F:60:5D:77:A6:EF X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/1g9F98xLaR_UoxwfHAtPYF13pu8.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/e2/ad3044-cdce-46cf-92c9-a954d053994a/1/1g9F98xLaR_UoxwfHAtPYF13pu8.mft X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/e2/ad3044-cdce-46cf-92c9-a954d053994a/1/1g9F98xLaR_UoxwfHAtPYF13pu8.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption ca:9c:a2:3a:b9:d2:58:9b:01:e9:08:fb:5f:7c:65:b0:c8:de: 8d:31:5a:e2:57:2c:e1:f6:52:f9:2a:0e:b6:88:51:d6:e1:4b: ec:4f:db:0e:57:3f:32:51:c0:ea:32:35:36:27:41:0a:94:e4: e8:3e:ad:17:42:d4:c5:d0:f7:c4:e7:0d:b5:c6:84:ee:e5:91: 18:87:aa:61:b7:1c:c7:a6:f7:ae:91:a8:d1:2d:52:4f:5e:6c: a7:a9:84:43:43:b3:6f:f9:b0:af:0d:97:cd:a7:09:34:9f:19: 93:6d:c6:0c:b9:29:ae:08:bd:31:1a:11:c3:ca:a4:df:1f:9c: 1f:fe:e5:e5:14:d0:42:cc:91:6c:b9:3b:7a:25:3f:d3:bc:5f: d7:74:be:f8:ba:13:f5:8e:6d:46:b0:76:30:ae:9d:39:fe:aa: 54:6e:93:f6:84:2f:d0:0c:a3:f9:28:f3:13:d5:55:19:fc:7d: ac:92:a2:fa:f2:5e:be:ae:46:c6:ce:08:52:73:9c:13:b0:56: 25:0a:c3:f2:51:14:2e:16:d1:fb:bc:9b:36:da:ad:aa:37:dd: 93:f3:f2:f7:3f:57:55:6d:24:a3:f6:80:6d:12:60:db:61:1d: 29:42:9c:f8:9c:a1:be:35:f0:22:51:4b:10:59:79:2a:c6:ed: 56:df:0c:e2 -----BEGIN CERTIFICATE----- MIIFFjCCA/6gAwIBAgISAZjV8Vmjuf+lZbkZP7dI33wRMA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKGQ2MGY0NWY3Y2M0YjY5MWZkNGEzMWMxZjFjMGI0ZjYwNWQ3 N2E2ZWYwHhcNMjUwODIzMDgwMDIwWhcNMjUwODI0MDgwMDIwWjAzMTEwLwYDVQQD Eyg2ODJkNzk5OGQ1ZmE4MmUwNDhiYTc5NGYzOTY0NTI3ZjFkZmY2N2JmMIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAmzjxldkvx3Y++Pjass/u1UqgirKk ILOtRispTS9SDt+oEeZbw+CoQl3wpXy/QjsDiAfIidAR28yhxAkJExETIkwNQ5d2 I/uq5fdg48urIYEYj7i77UIvuG7kHVCR8/GgVtKKyXuLaR2wAg8rax5CyFT4aAta dzR9x+VDyjMTLOflk32lcBA2fzVUXatoVTK49b29bABDquJndtxwRyrkJiaJZKss lCn9LD+zWUwPutRW+jxLgMuDVZ+sNngS2aOlw4Exe48+olePEhjB8EioIAJJCuGL FJfXvGz5uOTrUjTQ0MYoW3+rRBdqr8T/2dtFdhrAq6yrEGIu1WQjTrw/8QIDAQAB o4ICIjCCAh4wHQYDVR0OBBYEFGgteZjV+oLgSLp5TzlkUn8d/2e/MB8GA1UdIwQY MBaAFNYPRffMS2kf1KMcHxwLT2Bdd6bvMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvMWc5Rjk4eExhUl9Vb3h3ZkhBdFBZRjEzcHU4LmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC9lMi9hZDMwNDQtY2RjZS00NmNmLTkyYzkt YTk1NGQwNTM5OTRhLzEvMWc5Rjk4eExhUl9Vb3h3ZkhBdFBZRjEzcHU4Lm1mdDCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC9lMi9hZDMwNDQtY2RjZS00NmNmLTkyYzktYTk1NGQwNTM5OTRh LzEvMWc5Rjk4eExhUl9Vb3h3ZkhBdFBZRjEzcHU4LmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAypyiOrnS WJsB6Qj7X3xlsMjejTFa4lcs4fZS+SoOtohR1uFL7E/bDlc/MlHA6jI1NidBCpTk 6D6tF0LUxdD3xOcNtcaE7uWRGIeqYbccx6b3rpGo0S1ST15sp6mEQ0Ozb/mwrw2X zacJNJ8Zk23GDLkprgi9MRoRw8qk3x+cH/7l5RTQQsyRbLk7eiU/07xf13S++LoT 9Y5tRrB2MK6dOf6qVG6T9oQv0Ayj+SjzE9VVGfx9rJKi+vJevq5Gxs4IUnOcE7BW JQrD8lEULhbR+7ybNtqtqjfdk/Py9z9XVW0ko/aAbRJg22EdKUKc+JyhvjXwIlFL EFl5KsbtVt8M4g== -----END CERTIFICATE-----Generated at Sat Aug 23 10:48:42 2025 by rpki-client