$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/f8/b1f6ee-c4ef-4355-af36-a558ee65431f/1/ciqMHTEYlQFhCP-9FFdcd8wodzo.mft File: ciqMHTEYlQFhCP-9FFdcd8wodzo.mft (raw, json) Hash identifier: Pstewf4m0JTiZANsyGl/X/KP51yZQu6I6iAodbwToK8= Subject key identifier: BE:42:16:09:88:5C:F8:32:C1:34:C0:30:84:48:71:3F:67:CA:E7:B2 Authority key identifier: 72:2A:8C:1D:31:18:95:01:61:08:FF:BD:14:57:5C:77:CC:28:77:3A Certificate issuer: /CN=722a8c1d311895016108ffbd14575c77cc28773a Certificate serial: 0198D583CA344256B95D8B59CF5980CDA461 Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/ciqMHTEYlQFhCP-9FFdcd8wodzo.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/f8/b1f6ee-c4ef-4355-af36-a558ee65431f/1/ciqMHTEYlQFhCP-9FFdcd8wodzo.mft Manifest number: 16A1 Signing time: Sat 23 Aug 2025 06:00:40 +0000 Manifest this update: Sat 23 Aug 2025 06:00:40 +0000 Manifest next update: Sun 24 Aug 2025 06:00:40 +0000 Files and hashes: 1: 2_z48hJvW9cSrimqDQBgMrVpEQs.roa (hash: oE4HqjwZlQTv4ObB0KpkYDlK+xOPSCz/U5+L5QyTFnI=) 2: 4e5pIyH-5Elgfcqbgv__FOG63l8.roa (hash: 16h88AqJ7GzCv5plzgfUDX/bZIVuf4Ci8HhgyLVJXV4=) 3: 5cpMF4gywWh4TSF3WyLtzpEIguk.roa (hash: OtbGKrZ7YrSxXH5K8jC9MppIQd02GNRo1inboNoBRxM=) 4: 61tSV3QXLbjs_o_29J3y2Sz7rgQ.roa (hash: 6WGDu/T4fPA2CuqPdnDUedMj+jXcp4NfWsWrHmBy+tw=) 5: 8BSNOYyVDFZxdK6Tcxvw22iK4m8.roa (hash: +qLExyvNPSTVOOA92aPeXt0S4hRJ4I0dXrN9T8T2uoU=) 6: DVsFv0t_ecOVNHO3HwANDhXlask.roa (hash: Lwozg5a0CSQqgCd1wpNSUT8JWSsH0h6hmDldcmW800Q=) 7: E0jD3zaQKNcY4OwTowy1qkc7UII.roa (hash: LFEZv2sUyTiQuviAPaH5GVDhB6qp78p/+LRpCeIzCx8=) 8: ESVrWrjx7uQrIu0OVLySmaVBfAA.roa (hash: 3It2cHEioDdRd+vQFpeUNpMQgEGw5qFoe8Q/XwN8mJY=) 9: GUW7yMHSxMWKPOxBZPmYfJyT23c.roa (hash: ja5FNbrm3KfTJUYoB/uc275n0oYgzZBEDq6fXdub3G4=) 10: ILWOt7E0VcSN53t_NxyVxlZk5U8.roa (hash: fDXYQZD5ADS6uBj8cli9WDuucKNjqNS/JRawIUfAzxE=) 11: M0j7_1LaERciPULQ9bHyFVdlekg.roa (hash: st0UHombc6Z8INz/2/VOrk1dCPrSkjpUcNTVU3Gvg+Y=) 12: WXqpX2cUzR8srh7EQXKS6ZsVr1k.roa (hash: iKPqe2rKMp5bbd7ax1HJv4fDxF+WBcNpcpJkO6bLbGs=) 13: WdrZxhy3fLo5c5Ai6MRdTyqQ468.roa (hash: IrU3x8n31DYJH+OdZCgSZpf1IPCjbwcXSyqOIAQwYlI=) 14: Xfh8zrRZw7A0aXC3E9LebWyErd4.roa (hash: FUQj4hR3WY/C5r364dxzUxMw4OF2Ggqd9oIi1o4fn10=) 15: XnKhkIj8XU2HxSZI-PPO4P-cC2I.roa (hash: RZJBztvaM9qOkXAu1EUg2oUvPjGzxSs7nEvJhyJK0qY=) 16: XymxCebgP2iZukhvR2MoULKQYg8.roa (hash: Gic+qBu6uDav81P9UIqh8LoxizRVVE2tkjr5RFnItJo=) 17: baWixGmdwdkSX9TDGN-Qlb4lmGA.roa (hash: GhZuR5USZpNa0EDpXlmYqKRP7MC168zFvx0Rz6R/PK0=) 18: bs-Ks38HPiFE0Vzu9hCOAT_v2qk.roa (hash: 59dDdRNblQTB9SVjvDy4pNzxWykMNeIW4S3L/KbIT9A=) 19: c0ZnvHQrmnuJhbdNtuSYX2OHS9c.roa (hash: Xwx99qFCWbgDS7FjLjIYXDibpdvOr8Iwvs0X/aUeNvM=) 20: ciqMHTEYlQFhCP-9FFdcd8wodzo.crl (hash: OiBEtt4C7GAT/7mdmtE78IDf0ijX3eblRf+k9ElGRaY=) 21: hABxVjfNOUJpj-z5UorT-xdaa44.roa (hash: 6sQ9BTmeHNBdeeQCTv6P6DGLQnjJuSvy0rz9LS1SIG4=) 22: j63jZRnMUiDSsXvYQHecWgsCRyQ.roa (hash: K8+M3lFPQKubjIsmYzQtDktqmYXELL1jNbS29/gsyAA=) 23: mA147Xd7z63TDz_x49XUByd9djA.roa (hash: QizndFGS4tu424cwh2ulp0h3A1hTFAM9aqHWhGGLPbA=) 24: rIgcdTeWZFGqJKg9n3iWHMAsC7Y.roa (hash: a0sp1XHVAFftpd98cWn25wYJYIERTkIsIUmu6LiYvzk=) 25: umw1f8KATzlinkc94jrVNM7O5FM.roa (hash: nSUZvuLB5WOlfTLV7B/9YHvz7jophepWeg4X/O79XDM=) 26: wBmGKXHN8M3c7OBKyxuRTU7lBLA.roa (hash: NjB9Qp+zgAcVCYv6VDKIdB6u1ZpCafutoKC8Tsuys6o=) 27: ynIgMwcMUfu6aoySdoB2_fxZ-2g.roa (hash: Ad2Ob20F2PglYmj0nGXoA2H7TNg37jxfUh38S1QtL8E=) 28: yxTjGPj_Qglxr_34LiTpZhaydeQ.roa (hash: Vz8qidNibQKtCnGpm2NL5uzzI7FPXB8PEr1lT5su1wg=) 29: z3aZTQKZFzM29IIBXsAtxZGZ_Tc.roa (hash: fjct9lWmGvHOEo0YjITzcQBCzb1QrDPT5eJeyB+eK+k=) 30: z80MVwRUXWgMDbcJ_g9xksS0uHs.roa (hash: SUb3bn81u2CP978uSjnzY5A3iGrgJwGR+seJyNzkQWc=) Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/f8/b1f6ee-c4ef-4355-af36-a558ee65431f/1/ciqMHTEYlQFhCP-9FFdcd8wodzo.crl rsync://rpki.ripe.net/repository/DEFAULT/f8/b1f6ee-c4ef-4355-af36-a558ee65431f/1/ciqMHTEYlQFhCP-9FFdcd8wodzo.mft rsync://rpki.ripe.net/repository/DEFAULT/ciqMHTEYlQFhCP-9FFdcd8wodzo.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Sun 24 Aug 2025 05:01:29 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:98:d5:83:ca:34:42:56:b9:5d:8b:59:cf:59:80:cd:a4:61 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=722a8c1d311895016108ffbd14575c77cc28773a Validity Not Before: Aug 23 06:00:40 2025 GMT Not After : Aug 24 06:00:40 2025 GMT Subject: CN=be421609885cf832c134c0308448713f67cae7b2 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:bd:50:dd:73:01:cf:05:2d:c5:cb:37:1c:dd:15: 6b:5a:02:0c:f3:72:8b:7f:24:62:6d:3a:94:ec:64: 58:97:4d:ed:ba:cb:6c:1d:e4:8a:e7:77:f4:68:9e: 17:85:65:6b:ba:ee:9c:f5:27:32:e5:d5:a2:ca:e8: 94:9a:41:a7:26:7f:60:97:45:32:8e:84:e8:5b:e2: 1e:36:3c:a8:06:42:8b:f4:05:d4:26:ad:fa:42:34: 5d:f9:a5:e0:b8:36:14:d2:4a:cc:51:48:32:14:94: fc:bc:af:04:21:92:7d:05:7f:5b:0d:73:1f:41:b8: ff:f7:a6:9b:41:ca:19:dc:61:a7:47:b9:a0:fc:e9: d4:c7:71:2e:9e:da:3c:e4:29:33:e6:a2:98:14:05: 60:6f:f7:8c:75:88:95:a8:ed:0d:86:e2:b1:c3:8e: 75:55:a3:78:54:f9:f8:f6:80:c9:86:29:9c:9d:a4: 46:f5:1f:52:7b:48:fb:ff:5e:ff:92:8d:6a:2a:01: e5:89:e9:83:e1:51:a1:eb:2f:29:a0:37:06:99:c6: d5:8e:b7:a1:95:da:04:e5:3d:fa:50:78:b3:46:c6: 6c:46:dd:53:98:97:24:0a:bf:23:1c:f9:b8:56:78: e4:d8:3a:95:b4:23:62:e4:35:c5:39:dd:a5:d2:6d: 56:9d Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: BE:42:16:09:88:5C:F8:32:C1:34:C0:30:84:48:71:3F:67:CA:E7:B2 X509v3 Authority Key Identifier: keyid:72:2A:8C:1D:31:18:95:01:61:08:FF:BD:14:57:5C:77:CC:28:77:3A X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/ciqMHTEYlQFhCP-9FFdcd8wodzo.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/f8/b1f6ee-c4ef-4355-af36-a558ee65431f/1/ciqMHTEYlQFhCP-9FFdcd8wodzo.mft X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/f8/b1f6ee-c4ef-4355-af36-a558ee65431f/1/ciqMHTEYlQFhCP-9FFdcd8wodzo.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 58:b3:6d:aa:5c:dd:2d:a8:7f:f4:6e:20:40:55:34:e1:b1:a9: 8f:bc:9e:70:7f:65:70:69:e4:4c:3f:73:38:ec:fd:f5:10:76: 99:70:c8:0a:55:63:b4:53:ec:e8:a5:e7:f1:db:82:d0:55:86: fe:4f:13:79:8f:f8:90:15:9f:f3:db:83:94:84:54:b9:d0:e6: 50:75:34:7e:7e:6d:12:56:6a:17:e0:9d:ff:6a:1e:0a:af:44: 34:cb:b2:ed:79:94:6e:71:9d:22:37:e9:78:a9:38:65:b6:bd: 6b:fe:c2:1f:58:62:a5:c2:6b:71:16:8a:6d:ef:fd:78:3d:71: 30:ad:b0:50:6b:87:f4:29:9d:72:73:6a:37:11:3c:a4:23:80: 1f:91:39:4c:0a:cd:54:ce:8e:64:75:0e:92:ab:77:a9:df:50: 6b:0f:a6:82:fc:a0:cb:33:79:ee:10:27:66:69:ba:32:3d:b0: 8c:35:01:2b:35:44:fa:a9:76:97:a8:97:fd:97:b2:7e:eb:cd: 12:ec:de:15:f7:2f:70:35:ef:a4:98:78:92:ac:71:34:75:b2: e4:63:32:e1:4c:64:bc:71:ca:ea:22:a6:bb:c6:5e:4f:bf:9a: 3c:7f:63:a0:9c:76:bb:05:65:c8:7f:64:4e:c3:3e:e5:7b:7f: a2:b6:02:8a -----BEGIN CERTIFICATE----- MIIFFjCCA/6gAwIBAgISAZjVg8o0Qla5XYtZz1mAzaRhMA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKDcyMmE4YzFkMzExODk1MDE2MTA4ZmZiZDE0NTc1Yzc3Y2My ODc3M2EwHhcNMjUwODIzMDYwMDQwWhcNMjUwODI0MDYwMDQwWjAzMTEwLwYDVQQD EyhiZTQyMTYwOTg4NWNmODMyYzEzNGMwMzA4NDQ4NzEzZjY3Y2FlN2IyMIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAvVDdcwHPBS3Fyzcc3RVrWgIM83KL fyRibTqU7GRYl03tustsHeSK53f0aJ4XhWVruu6c9Scy5dWiyuiUmkGnJn9gl0Uy joToW+IeNjyoBkKL9AXUJq36QjRd+aXguDYU0krMUUgyFJT8vK8EIZJ9BX9bDXMf Qbj/96abQcoZ3GGnR7mg/OnUx3Eunto85Ckz5qKYFAVgb/eMdYiVqO0NhuKxw451 VaN4VPn49oDJhimcnaRG9R9Se0j7/17/ko1qKgHliemD4VGh6y8poDcGmcbVjreh ldoE5T36UHizRsZsRt1TmJckCr8jHPm4Vnjk2DqVtCNi5DXFOd2l0m1WnQIDAQAB o4ICIjCCAh4wHQYDVR0OBBYEFL5CFgmIXPgywTTAMIRIcT9nyueyMB8GA1UdIwQY MBaAFHIqjB0xGJUBYQj/vRRXXHfMKHc6MA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvY2lxTUhURVlsUUZoQ1AtOUZGZGNkOHdvZHpvLmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC9mOC9iMWY2ZWUtYzRlZi00MzU1LWFmMzYt YTU1OGVlNjU0MzFmLzEvY2lxTUhURVlsUUZoQ1AtOUZGZGNkOHdvZHpvLm1mdDCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC9mOC9iMWY2ZWUtYzRlZi00MzU1LWFmMzYtYTU1OGVlNjU0MzFm LzEvY2lxTUhURVlsUUZoQ1AtOUZGZGNkOHdvZHpvLmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAWLNtqlzd Lah/9G4gQFU04bGpj7yecH9lcGnkTD9zOOz99RB2mXDIClVjtFPs6KXn8duC0FWG /k8TeY/4kBWf89uDlIRUudDmUHU0fn5tElZqF+Cd/2oeCq9ENMuy7XmUbnGdIjfp eKk4Zba9a/7CH1hipcJrcRaKbe/9eD1xMK2wUGuH9CmdcnNqNxE8pCOAH5E5TArN VM6OZHUOkqt3qd9Qaw+mgvygyzN57hAnZmm6Mj2wjDUBKzVE+ql2l6iX/ZeyfuvN EuzeFfcvcDXvpJh4kqxxNHWy5GMy4UxkvHHK6iKmu8ZeT7+aPH9joJx2uwVlyH9k TsM+5Xt/orYCig== -----END CERTIFICATE-----Generated at Sat Aug 23 14:13:41 2025 by rpki-client