$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/fe/05e17f-d31f-431f-a8bc-7e05ab41b6e4/1/_TfMjxazxsvTNGqj7WF3Hz6DrJc.mft File: _TfMjxazxsvTNGqj7WF3Hz6DrJc.mft (raw, json) Hash identifier: 7+Ium1t0e9dIzUCuZQ7A8OIIs/MUlsnjUM5hO548V8U= Subject key identifier: F3:B7:05:18:55:AF:11:7F:B6:0F:69:AF:D8:BF:74:22:3E:B7:20:72 Authority key identifier: FD:37:CC:8F:16:B3:C6:CB:D3:34:6A:A3:ED:61:77:1F:3E:83:AC:97 Certificate issuer: /CN=fd37cc8f16b3c6cbd3346aa3ed61771f3e83ac97 Certificate serial: 0198D6297E18584B89E08C9F6794CEFB0ABA Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/_TfMjxazxsvTNGqj7WF3Hz6DrJc.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/fe/05e17f-d31f-431f-a8bc-7e05ab41b6e4/1/_TfMjxazxsvTNGqj7WF3Hz6DrJc.mft Manifest number: 16A4 Signing time: Sat 23 Aug 2025 09:01:40 +0000 Manifest this update: Sat 23 Aug 2025 09:01:40 +0000 Manifest next update: Sun 24 Aug 2025 09:01:40 +0000 Files and hashes: 1: 0HACyBUxgNOKSEcXcfPHI7LfmIg.roa (hash: wqTJepcUODfu+UsDaT3UCXuLJcUfFBmEBfdq4N3Rg18=) 2: 0SGQgnDHvljd8WswPS3Zor6FDL4.roa (hash: 6cEGIRuHIzEG7/ilcX3ol3tjHMExu8vRWtvJG3iihbQ=) 3: 8YFjhJllAvnuj7iLErGij7HrSXA.roa (hash: Jhl/M/KE8hoNx5Qk80x4cpNTjAEwV+xL9n1btN845EY=) 4: CkYxOCFcXglZibNQBz57XM7xS7k.roa (hash: tPE6/6y5+L8gtSA/0lIV1hRfNlGi7fzBLSET7NYUXhQ=) 5: L2ou3KYC7aOW9h4MkxvmRdF9-XM.roa (hash: HdnRHq9xsHsffUN6vf8PfjK/qp0rtSAt5eAQOAgASLA=) 6: ORny9zSgmvPNlHA0GSjf-fW7JAM.roa (hash: 2mt1E0mw+ncsqd4MDmo2JIYlDgVM2APWu07de1NTQyk=) 7: Qx6qMFrufEPZv8mWu9XgjLsLMB8.roa (hash: P/r3/JxO1CdcEUxJoGOxAQuq95icEB2m2qPK3qHqs10=) 8: TAdP0yKv9NpfjSbhNts0juEkm1U.roa (hash: dvn2DfwTU0n63QcUIMIBNntGEWr2G1UXma7Nhu8Iurs=) 9: WoZoEuE3OARNKqVJ9taXo2-Zt8M.roa (hash: Sn/ecsmLImTPn1yvBagjjq/XB8omW7tpmekWgI2yuFs=) 10: XdBKdwv6cTf-QnKldOeZvGt4D_Y.roa (hash: TxqV86SQTi0t4BbX6SVLNGYD/xhHt70JrJfSx9PYDmA=) 11: _TfMjxazxsvTNGqj7WF3Hz6DrJc.crl (hash: 3bfrfX6sz/4tjr4rU5aAeryCc2wUvyVtN7CDFrzgTfg=) 12: bboBBp1tKqS0RC4vsgwoBCmEwqY.roa (hash: 74uXCligXDCEvZU13I/aaPCJJzSMTM22JuT1PuhmBlQ=) 13: cTcEU6BZVDHzKsGmYrYFuehVnmw.roa (hash: Wt8W9AEoHsxpxFYj5Y9GGKvIgV+LkMQs3tuB0PH0H4Q=) 14: hKxNfLTH0X80Ow-eROTxbGbiZe4.roa (hash: hZv0Z8Cj/PVONdIYD1TEXdIoPUW4dHy+qq7CiSqIhck=) 15: peQXZljVycjXahMLHOgebWKzO6c.roa (hash: 6nDgFHnTrpxmQJyrmsK88oc050AwIyK1nEAS/RY/l94=) 16: xCt-3I4HSr25MhC8BMd2thevgVU.roa (hash: sZUNm0dz+rTstayb8zMPvmRuDI0MPNSTCMqD12A4Oww=) Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/fe/05e17f-d31f-431f-a8bc-7e05ab41b6e4/1/_TfMjxazxsvTNGqj7WF3Hz6DrJc.crl rsync://rpki.ripe.net/repository/DEFAULT/fe/05e17f-d31f-431f-a8bc-7e05ab41b6e4/1/_TfMjxazxsvTNGqj7WF3Hz6DrJc.mft rsync://rpki.ripe.net/repository/DEFAULT/_TfMjxazxsvTNGqj7WF3Hz6DrJc.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Sun 24 Aug 2025 05:01:29 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:98:d6:29:7e:18:58:4b:89:e0:8c:9f:67:94:ce:fb:0a:ba Signature Algorithm: sha256WithRSAEncryption Issuer: CN=fd37cc8f16b3c6cbd3346aa3ed61771f3e83ac97 Validity Not Before: Aug 23 09:01:40 2025 GMT Not After : Aug 24 09:01:40 2025 GMT Subject: CN=f3b7051855af117fb60f69afd8bf74223eb72072 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:b4:f2:c1:5d:75:cf:7f:30:d8:f0:3b:18:3c:12: 61:7a:c7:cc:b8:35:81:6d:9b:a5:51:a3:28:85:b0: 06:bb:47:c8:e2:c3:88:b9:65:5c:34:bb:5c:10:7a: 10:1b:e8:d3:6f:08:44:c2:77:60:d4:88:37:df:3e: 07:70:40:91:3b:2f:c4:5b:f2:f0:35:0f:38:42:90: e2:fb:ef:ba:e3:27:1f:2f:92:04:17:8c:7e:9b:c1: 9e:8a:4f:53:0c:16:49:84:11:7b:17:fe:5e:5a:34: 66:a8:ec:0e:28:96:02:b4:30:26:51:b0:a8:47:90: f6:18:f4:9c:cb:b3:40:51:0e:4d:b0:47:44:80:89: 1f:f0:e6:7e:00:0d:b5:b7:1d:aa:27:97:42:4e:f3: f6:7f:b6:52:ef:1e:23:ab:84:2e:a2:19:f6:96:ec: 37:3a:64:d4:5a:57:2e:34:40:ec:e2:cf:7e:15:91: 87:08:f5:d9:51:4e:74:31:b8:5c:1d:0b:a0:95:d6: e7:46:ef:8f:58:0c:42:11:0d:db:ca:31:fd:03:f5: 5e:fe:73:a3:a6:78:18:68:ef:f9:43:eb:d5:2d:b9: fc:1d:30:16:99:ac:6d:52:ad:6b:9d:8c:c7:b4:af: b0:04:a1:73:9e:ba:56:07:94:4c:35:bf:07:f5:da: e5:5b Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: F3:B7:05:18:55:AF:11:7F:B6:0F:69:AF:D8:BF:74:22:3E:B7:20:72 X509v3 Authority Key Identifier: keyid:FD:37:CC:8F:16:B3:C6:CB:D3:34:6A:A3:ED:61:77:1F:3E:83:AC:97 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/_TfMjxazxsvTNGqj7WF3Hz6DrJc.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/fe/05e17f-d31f-431f-a8bc-7e05ab41b6e4/1/_TfMjxazxsvTNGqj7WF3Hz6DrJc.mft X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/fe/05e17f-d31f-431f-a8bc-7e05ab41b6e4/1/_TfMjxazxsvTNGqj7WF3Hz6DrJc.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 4b:cf:2d:eb:6e:a4:d6:7b:9f:94:e4:66:2e:35:91:49:fd:53: 07:61:fa:75:a6:ed:e2:13:af:cb:92:a3:92:14:eb:95:13:8a: cc:6d:54:53:ea:2c:e6:77:0f:b6:ef:be:58:b0:a3:c5:14:61: 36:91:fd:bc:a7:df:ee:04:bc:6f:d2:a2:e6:58:03:3c:98:71: 35:2f:c7:32:dc:45:34:d5:5d:14:9b:18:98:54:37:90:2c:b7: 19:3c:9e:90:52:21:ac:b0:f0:0c:a7:28:7c:d7:95:26:8d:2d: 0a:fe:8c:d4:d5:7b:97:7c:b6:60:c6:17:0d:30:57:f3:e4:d0: d3:99:99:05:2e:e7:6f:94:2b:e1:95:6f:2e:b4:19:94:7d:47: 0f:e9:21:ea:d1:6f:66:07:7d:e3:69:a8:4f:9e:36:3a:3f:be: 68:52:8c:08:45:cf:06:b2:78:8a:06:18:c2:7c:73:0b:69:2a: e1:70:36:7d:cb:7e:e5:20:25:f6:37:bd:cf:05:53:0a:08:44: 7d:eb:eb:10:72:64:82:e3:5f:d0:c0:e1:39:ad:d4:7d:de:a9: df:72:16:ab:2b:5a:f0:35:13:55:e8:34:38:d4:98:95:d5:d4: a0:d1:d4:8c:29:f2:b8:f4:27:19:90:80:8a:6a:10:12:93:1b: f4:eb:d2:e8 -----BEGIN CERTIFICATE----- MIIFFjCCA/6gAwIBAgISAZjWKX4YWEuJ4IyfZ5TO+wq6MA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKGZkMzdjYzhmMTZiM2M2Y2JkMzM0NmFhM2VkNjE3NzFmM2U4 M2FjOTcwHhcNMjUwODIzMDkwMTQwWhcNMjUwODI0MDkwMTQwWjAzMTEwLwYDVQQD EyhmM2I3MDUxODU1YWYxMTdmYjYwZjY5YWZkOGJmNzQyMjNlYjcyMDcyMIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAtPLBXXXPfzDY8DsYPBJhesfMuDWB bZulUaMohbAGu0fI4sOIuWVcNLtcEHoQG+jTbwhEwndg1Ig33z4HcECROy/EW/Lw NQ84QpDi+++64ycfL5IEF4x+m8Geik9TDBZJhBF7F/5eWjRmqOwOKJYCtDAmUbCo R5D2GPScy7NAUQ5NsEdEgIkf8OZ+AA21tx2qJ5dCTvP2f7ZS7x4jq4Quohn2luw3 OmTUWlcuNEDs4s9+FZGHCPXZUU50MbhcHQugldbnRu+PWAxCEQ3byjH9A/Ve/nOj pngYaO/5Q+vVLbn8HTAWmaxtUq1rnYzHtK+wBKFznrpWB5RMNb8H9drlWwIDAQAB o4ICIjCCAh4wHQYDVR0OBBYEFPO3BRhVrxF/tg9pr9i/dCI+tyByMB8GA1UdIwQY MBaAFP03zI8Ws8bL0zRqo+1hdx8+g6yXMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvX1RmTWp4YXp4c3ZUTkdxajdXRjNIejZEckpjLmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC9mZS8wNWUxN2YtZDMxZi00MzFmLWE4YmMt N2UwNWFiNDFiNmU0LzEvX1RmTWp4YXp4c3ZUTkdxajdXRjNIejZEckpjLm1mdDCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC9mZS8wNWUxN2YtZDMxZi00MzFmLWE4YmMtN2UwNWFiNDFiNmU0 LzEvX1RmTWp4YXp4c3ZUTkdxajdXRjNIejZEckpjLmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAS88t626k 1nuflORmLjWRSf1TB2H6dabt4hOvy5KjkhTrlROKzG1UU+os5ncPtu++WLCjxRRh NpH9vKff7gS8b9Ki5lgDPJhxNS/HMtxFNNVdFJsYmFQ3kCy3GTyekFIhrLDwDKco fNeVJo0tCv6M1NV7l3y2YMYXDTBX8+TQ05mZBS7nb5Qr4ZVvLrQZlH1HD+kh6tFv Zgd942moT542Oj++aFKMCEXPBrJ4igYYwnxzC2kq4XA2fct+5SAl9je9zwVTCghE fevrEHJkguNf0MDhOa3Ufd6p33IWqyta8DUTVeg0ONSYldXUoNHUjCnyuPQnGZCA imoQEpMb9OvS6A== -----END CERTIFICATE-----Generated at Sat Aug 23 14:01:59 2025 by rpki-client