$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/e9/129564-f1db-4dc5-8906-6fcdcd5ab660/1/D_gMvf4YNUo8_bov4HmqLrxY3NQ.mft File: D_gMvf4YNUo8_bov4HmqLrxY3NQ.mft (raw, json) Hash identifier: ZjtDVsil8fx+QwEkvcuw3bQyVsrruprHCeuhzGHk80A= Subject key identifier: 3F:F5:FF:0B:A4:60:CC:73:D1:23:1E:ED:BC:69:31:B9:42:E1:B9:B4 Authority key identifier: 0F:F8:0C:BD:FE:18:35:4A:3C:FD:BA:2F:E0:79:AA:2E:BC:58:DC:D4 Certificate issuer: /CN=0ff80cbdfe18354a3cfdba2fe079aa2ebc58dcd4 Certificate serial: 0198D583E84D26DFA1E36325D7FC757716CD Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/D_gMvf4YNUo8_bov4HmqLrxY3NQ.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/e9/129564-f1db-4dc5-8906-6fcdcd5ab660/1/D_gMvf4YNUo8_bov4HmqLrxY3NQ.mft Manifest number: 114F Signing time: Sat 23 Aug 2025 06:00:48 +0000 Manifest this update: Sat 23 Aug 2025 06:00:48 +0000 Manifest next update: Sun 24 Aug 2025 06:00:48 +0000 Files and hashes: 1: 05a96nC6w3y2ygNtRz0fE79NNb8.roa (hash: ppeSYFnMCMF7eN3FJQde50ROVZCQWbOF6N6WCP1Ll48=) 2: ALwZhIzMltcNA93bXSkzknwg_14.roa (hash: 8/oCBG94vIxN2asbJtnpsK13+hX56C8+2PdARaHhKJk=) 3: DEkBy5NY_LBNS4NnY8NdFK8rzcA.roa (hash: +sPTotcuWF+CjCR1a5iOtYDxd/TTy8d8sIEt72jDjC4=) 4: D_gMvf4YNUo8_bov4HmqLrxY3NQ.crl (hash: WAAUrVo0NTYQYE1394JrSOvnx7N8EZhI7uQyvJslTlM=) 5: E4H11vqlDsWfsKfFnRaByGFpFjE.roa (hash: uk2Eyw6ijxdod6j6CVfKRX8Y6AcwVXdvoKqS9Zsbg6E=) 6: MKy6XWAYP3zxh7zwKNcWOiDPR-k.roa (hash: R+XM0slVwo6Gs1r7U5p3g+xfmCVjwikkwCXqqmpC4RI=) 7: P1pvZ_QpHLCNhor-GrDuuGuoxWU.roa (hash: j2Q3VKziFV5MgEQnuqrclJc+B8ndKOKWRmqLDbcpuQk=) 8: TBO-3J5fI4kjR6nBhhGm9Q7Fxxs.roa (hash: GxuPpCFAskC5A0RoCelobXY9HbueDhOq2tEj0W9aVGs=) 9: XDcWQfbkwvZ4pO52-Rl-lOrB_iw.roa (hash: ht+KVJK83F1lQo8Wp6/sNr0N7S9QYHVd5SEP7bnL0Q4=) 10: fegZDjvnxgRurYo7N2dE56doPrs.roa (hash: G1Sc4jTNIBp0OhDx/ZdY4eKnulZIfcXzqIWbYkym44I=) 11: hNPAJBJQcRtE-SJjyoGEKsljmXA.roa (hash: cxILOvyPqMN2Kz+W/9LGBBCgK1NOKrZ4exJ0ZNKhTeQ=) 12: hZwwv2HVesOoWYMZ9UQ59KZD92Q.roa (hash: nRGFDkYZm2Umz0tBGBIfwm3qOUkJet0CLVO2qS5d1Y8=) 13: pDnsD5Q1hTzMW2k6uZ4MVh9ZizU.roa (hash: Ug4pqyVy1hepE30KQdlNpPdKYvaVRsEaEW6Bq45BqsI=) 14: rY4Fp-Dk7WkrCbqk7rdEiiNEmj4.roa (hash: rnMK9FKk4H5lXqqOHDb/rM0tbc6UoAnWXexKMf+rh/I=) 15: svu4gQ0pPgVBKQU6339vQZbXEAQ.roa (hash: RAHfZT/d13ig7RU8lQNXL5nHpSOa8CZeRzLwR9xpJH8=) 16: zVmWAWgKyx4eeMir-1Xzz5QBscI.roa (hash: l61zAP2yjNHffK4hBUy/wZEnThG4T0vWtxK+N6Tomow=) Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/e9/129564-f1db-4dc5-8906-6fcdcd5ab660/1/D_gMvf4YNUo8_bov4HmqLrxY3NQ.crl rsync://rpki.ripe.net/repository/DEFAULT/e9/129564-f1db-4dc5-8906-6fcdcd5ab660/1/D_gMvf4YNUo8_bov4HmqLrxY3NQ.mft rsync://rpki.ripe.net/repository/DEFAULT/D_gMvf4YNUo8_bov4HmqLrxY3NQ.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Sun 24 Aug 2025 05:01:29 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:98:d5:83:e8:4d:26:df:a1:e3:63:25:d7:fc:75:77:16:cd Signature Algorithm: sha256WithRSAEncryption Issuer: CN=0ff80cbdfe18354a3cfdba2fe079aa2ebc58dcd4 Validity Not Before: Aug 23 06:00:48 2025 GMT Not After : Aug 24 06:00:48 2025 GMT Subject: CN=3ff5ff0ba460cc73d1231eedbc6931b942e1b9b4 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:c3:2c:ae:2a:8d:49:41:75:e3:73:a5:45:46:af: 13:e6:fd:61:30:82:b0:b3:eb:01:80:d0:c6:7c:0e: a5:c3:82:ec:5b:15:08:e4:83:b2:10:bb:03:49:ec: f3:6b:6f:d3:85:48:a0:6c:88:2e:ee:3c:1e:b1:2d: af:95:47:78:5e:aa:b4:7e:95:c8:67:cb:e5:6a:d4: e8:7f:6b:83:bc:9b:54:98:93:52:83:50:c3:62:86: ec:86:b8:1a:38:5f:f2:d2:e9:3a:80:a7:af:37:6b: fb:69:8b:fb:02:a2:aa:ca:c2:69:32:73:0f:57:19: c8:9a:62:9a:df:ff:68:a7:de:e5:77:7a:47:e4:da: 07:7c:3d:fe:f0:cf:86:7c:15:fb:74:4d:38:47:06: 0f:e2:27:06:d9:e7:e1:4a:d8:f4:c0:c6:a3:3d:3f: 0a:f8:92:c5:bb:bc:3f:2a:b6:4c:ee:62:25:e5:59: d2:a6:50:ab:b1:97:d1:7b:47:87:d3:25:a2:ef:6c: fd:c2:9a:39:ca:6d:35:40:d5:46:dd:73:54:51:02: 69:3d:96:56:1e:3a:8d:f5:f5:d3:db:62:1e:1a:86: b3:9e:26:df:85:46:06:39:1a:ea:76:39:1a:49:ac: 7d:ed:7b:2f:5d:4c:58:cb:95:80:4e:10:4e:17:75: 47:a1 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 3F:F5:FF:0B:A4:60:CC:73:D1:23:1E:ED:BC:69:31:B9:42:E1:B9:B4 X509v3 Authority Key Identifier: keyid:0F:F8:0C:BD:FE:18:35:4A:3C:FD:BA:2F:E0:79:AA:2E:BC:58:DC:D4 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/D_gMvf4YNUo8_bov4HmqLrxY3NQ.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/e9/129564-f1db-4dc5-8906-6fcdcd5ab660/1/D_gMvf4YNUo8_bov4HmqLrxY3NQ.mft X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/e9/129564-f1db-4dc5-8906-6fcdcd5ab660/1/D_gMvf4YNUo8_bov4HmqLrxY3NQ.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 37:4c:ff:9c:93:07:0d:87:f3:d5:e0:3f:ab:85:a9:20:dc:02: fb:31:01:de:d0:d4:13:38:d5:b1:80:80:8c:9d:ed:dd:74:8e: 67:2d:04:5f:aa:49:cc:74:ed:f7:91:67:a4:06:f3:70:06:c3: e2:1a:e9:11:37:97:54:28:d6:78:c3:66:06:3d:41:67:d1:27: ec:a2:5b:e5:a9:c0:70:a1:14:12:0a:a2:f7:42:38:c8:51:8b: 33:6b:db:af:18:b8:7b:f2:aa:0a:f2:fa:8d:fa:10:ac:15:bb: d3:01:ca:2a:61:87:20:b5:fd:39:26:3b:98:e1:30:0c:0f:e0: d2:41:f6:5a:3c:10:45:1c:66:58:33:d4:b9:e0:48:42:6d:2d: 53:8c:aa:17:94:1d:51:94:27:bb:82:d2:08:44:ef:e0:21:04: af:2c:a3:ef:98:18:a5:97:d9:1e:69:7c:ee:c5:9e:2b:77:f5: 9a:1a:18:1a:9f:0b:e5:ca:76:ae:fa:13:07:ae:67:c6:ce:f3: f9:a8:f6:c0:8c:37:d7:b6:c9:1f:23:f2:5d:9b:2f:d7:b2:0b: 08:fc:3d:64:90:9e:0c:74:26:8d:61:8c:af:e4:b5:9a:53:2c: c7:fe:1d:f0:d1:35:e2:4c:14:63:3b:5c:bb:0a:87:13:c6:de: c9:29:ba:b0 -----BEGIN CERTIFICATE----- MIIFFjCCA/6gAwIBAgISAZjVg+hNJt+h42Ml1/x1dxbNMA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKDBmZjgwY2JkZmUxODM1NGEzY2ZkYmEyZmUwNzlhYTJlYmM1 OGRjZDQwHhcNMjUwODIzMDYwMDQ4WhcNMjUwODI0MDYwMDQ4WjAzMTEwLwYDVQQD EygzZmY1ZmYwYmE0NjBjYzczZDEyMzFlZWRiYzY5MzFiOTQyZTFiOWI0MIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAwyyuKo1JQXXjc6VFRq8T5v1hMIKw s+sBgNDGfA6lw4LsWxUI5IOyELsDSezza2/ThUigbIgu7jwesS2vlUd4Xqq0fpXI Z8vlatTof2uDvJtUmJNSg1DDYobshrgaOF/y0uk6gKevN2v7aYv7AqKqysJpMnMP VxnImmKa3/9op97ld3pH5NoHfD3+8M+GfBX7dE04RwYP4icG2efhStj0wMajPT8K +JLFu7w/KrZM7mIl5VnSplCrsZfRe0eH0yWi72z9wpo5ym01QNVG3XNUUQJpPZZW HjqN9fXT22IeGoaznibfhUYGORrqdjkaSax97XsvXUxYy5WAThBOF3VHoQIDAQAB o4ICIjCCAh4wHQYDVR0OBBYEFD/1/wukYMxz0SMe7bxpMblC4bm0MB8GA1UdIwQY MBaAFA/4DL3+GDVKPP26L+B5qi68WNzUMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvRF9nTXZmNFlOVW84X2JvdjRIbXFMcnhZM05RLmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC9lOS8xMjk1NjQtZjFkYi00ZGM1LTg5MDYt NmZjZGNkNWFiNjYwLzEvRF9nTXZmNFlOVW84X2JvdjRIbXFMcnhZM05RLm1mdDCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC9lOS8xMjk1NjQtZjFkYi00ZGM1LTg5MDYtNmZjZGNkNWFiNjYw LzEvRF9nTXZmNFlOVW84X2JvdjRIbXFMcnhZM05RLmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAN0z/nJMH DYfz1eA/q4WpINwC+zEB3tDUEzjVsYCAjJ3t3XSOZy0EX6pJzHTt95FnpAbzcAbD 4hrpETeXVCjWeMNmBj1BZ9En7KJb5anAcKEUEgqi90I4yFGLM2vbrxi4e/KqCvL6 jfoQrBW70wHKKmGHILX9OSY7mOEwDA/g0kH2WjwQRRxmWDPUueBIQm0tU4yqF5Qd UZQnu4LSCETv4CEEryyj75gYpZfZHml87sWeK3f1mhoYGp8L5cp2rvoTB65nxs7z +aj2wIw317bJHyPyXZsv17ILCPw9ZJCeDHQmjWGMr+S1mlMsx/4d8NE14kwUYztc uwqHE8beySm6sA== -----END CERTIFICATE-----Generated at Sat Aug 23 12:08:52 2025 by rpki-client