$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/36/ddf8b3-1c08-495c-8ddf-fae5dbed3b1b/1/b4Tkc4pw6jnAjO8hBDKuOZ7H6RU.mft File: b4Tkc4pw6jnAjO8hBDKuOZ7H6RU.mft (raw, json) Hash identifier: 4B/T3BF4uBDDIHx0XUjyM4bg27kVchIJGhnJs20OqrU= Subject key identifier: EA:C1:A9:CA:06:A3:29:CA:CB:E3:79:B2:74:6F:7F:F6:BC:46:00:CA Authority key identifier: 6F:84:E4:73:8A:70:EA:39:C0:8C:EF:21:04:32:AE:39:9E:C7:E9:15 Certificate issuer: /CN=6f84e4738a70ea39c08cef210432ae399ec7e915 Certificate serial: 019874BDD19B1030E5E68AB118CF7BB3CB2B Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/b4Tkc4pw6jnAjO8hBDKuOZ7H6RU.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/36/ddf8b3-1c08-495c-8ddf-fae5dbed3b1b/1/b4Tkc4pw6jnAjO8hBDKuOZ7H6RU.mft Manifest number: 17A7 Signing time: Mon 04 Aug 2025 11:00:53 +0000 Manifest this update: Mon 04 Aug 2025 11:00:53 +0000 Manifest next update: Tue 05 Aug 2025 11:00:53 +0000 Files and hashes: 1: 1-XYbyaBcVcshilmQIraEr2hzy6A.roa (hash: +rJ6q2xp3+pOntAkOp7t+IimgXTqSYNUYrUlxqfBCAs=) 2: 1-acserkdaRwKD1ZOt9mnNNr_tGk.roa (hash: 6hEtVWrVnbgrhSvEQ68FfjrHt5WP9Jfl8fiwkMXiUDI=) 3: 2NzLzMOeFuBmYcrjiyDs5_DFYgI.roa (hash: UjwWdB8k577gYTCkJHn1rSTdVabHuDeCfYMOytlfWbk=) 4: 4b9wapi-A3xvohc41Khc1lUVmhg.roa (hash: iNy46VLu2un4QkjNe7VEFguyWUL0vvJsdCZlhuaclZQ=) 5: 5ZZSm_Fa_pFTl_cyAdVd2h8Ixgc.roa (hash: BkNNieru96Ok0gqv++x1NXt1ZiRd17b/+Pd802cp/Gk=) 6: 5zoRP68EVGDpXKwRwzUsGLHu-RY.roa (hash: +G8Jr7o2yQYUluTJTvXDAD+vj+5ImCPfksbZKx/QVjg=) 7: ADGW21X--XpG2WBIYj5kIM1Z0-g.roa (hash: 9A8sa2id1+8ByNAMewXe7FMcF817DiqS5V9Qri3bdTE=) 8: BScWdljv0AQRTZyIvglOZ0oFBE0.roa (hash: S79FUTXfJV4hESBGmFYG1R6KYPNaNufbRNEZRwYtCR0=) 9: BjGl9Q72g_Ec259If-Jk56BpizQ.roa (hash: ZmMAA1yu7c6D1XkjZod31MG9U+mujHQhvFcz7QsWW3s=) 10: HT9n5XGxiSRGbixWv-3kz0mWWh4.roa (hash: iHpx3TCWPvIoST4OBGoxr/waO+FYhNZeiOZuEYotXaU=) 11: JW8AyJFJPkQ1ZGONgpNYjy_UapU.roa (hash: 7j/1BSk7JznLZDNSRYDx/seCvE0WvECGanSxETBdFRU=) 12: Jo9_8piUxg2wee4-7hJARk5rotE.roa (hash: vqLLjwPcKVEzxJ3q8XfOQ/ryqpCfo/jKRQDYOnt6bJ4=) 13: KvaEQEmYbbYuHslL-MGtAyo-m2o.roa (hash: X5W6uO0llg8M0/nBFAkOWtE1oQ1OqXNWwnS/1SvBYmU=) 14: LMXjBxSACWe23B5KJVgWjys-RW4.roa (hash: bXK/65j0IbvpFBLJOgM7eXPZPRVnlnzA2N/1RiBf40M=) 15: Pma951-fcX5jiVn9YitaIzqrAj8.roa (hash: 0/AGrcLuUyyDlI1hxz3Umwj3aZC17s9562wzTDbO9go=) 16: QpYP7aICb6t-wB-Ae5TMIMzNxKc.roa (hash: 6l5wYI4rKFuFbwO5LaOnIgodQP9eROSLsioYs0st/CU=) 17: RSdOaSCVA6ogR36fNmSEfGUHdAQ.roa (hash: IUUzQDet8SkqHV+8ZTZJqpqrDR0834YedORjDV1jlUQ=) 18: RjTJ2EaIZfE051tXU0vuScbwBZk.roa (hash: TowX0WWdHApvFSISjmRiH2FsG9LnVvVrELSSI98m3So=) 19: S41Cd1AR9Z2hLvzGr_WeJ_4qMlU.roa (hash: GjF5x01fdvJu7nYuxxfVRo6MwcjIthDWhsqgii6EbWo=) 20: Yed44AUAbqpY6pzy3aMkteNGQ_g.roa (hash: FZrMifpRX5lyJO47EzwgH+UZbzIMubq2K2YsFTZ5WZI=) 21: _8ZQWuUaGZ9feBTbscjwZbx48pM.roa (hash: TNfC23AEZS88V+zreqHVoePX0RM2CaFufz271/b9FGE=) 22: a50NC_KbZ3PAjC1mndgRcsuXyn8.roa (hash: s97CymR7q1YMF5NI8Qg8aTQzotgVHDsGx5ZdFa/dmDM=) 23: b4Tkc4pw6jnAjO8hBDKuOZ7H6RU.crl (hash: 5UXV6wnc22R4fyNv4Yoibw3Se+M60SKVivP/mrdOyyg=) 24: b87Ytvc_OnLAU1-AiNzrR9Ndx_A.roa (hash: V6H++cmx7ABhwsJs47K6MKjpAOnt/75CprhxJ6Gbmq0=) 25: bhQC1zmugCUygVdsESALM-lPxWs.roa (hash: je9TYnAZ6tB4EzwBybgxJXYtbsShxgoopSrP7paJTb0=) 26: c1sgK9zuoOxh6sun4HtvyHOmEJI.roa (hash: 7A9r5WGQuJQjFpmB8y8JqZJj3l8SSyjq29NCM8V6rMw=) 27: cKm65Eb_WOsg0rJgahrGEn-QzNM.roa (hash: pkezS3MrD2s+itmukvNwqj5ekac2E5fRWqLx+Gd03qs=) 28: l5eLjRRQiofbgCfgGWC1ESLA0cI.roa (hash: A6wsuiAvc2IMJwsxkxrsjHGVGqfe958bhgt4EvG4y/o=) 29: lTt6-BquGF5yr17soQVU1ae3Nl4.roa (hash: cbpOu/9li7hUD3//tcAhamYiInAc+XJrVakWtx1CJTw=) 30: mIlfd2Y7sLPKpHtrrMK_-InI48g.roa (hash: QVRLDaOir+bWKqrIbf3Zg68E+xxOZ6wlJD5b1bWHT/A=) 31: oyOwytjNRcSSmC0Uz56t5B0Pn0U.roa (hash: bjJY96goKiZV3xFO6+9vadLGgV/G2i2Ywu0z1Lu4FeE=) 32: pKgW_epUKKqINQVkGFPfKQN_JME.roa (hash: MpYnxhEKRzbjZbG7ScaYIGMVo8jyEDa8wL6U3lmWFGs=) 33: uBiCjzsr4xU25o2Q9uEI8pAvGi0.roa (hash: ndWd7SzVAqTlN/7xiWhTaXhcDTar2hjRQoFL1p1qfwY=) 34: uaFeOb3ZlsDhBvdC5DMfN4a2b_I.roa (hash: C+Q/JJpWz+OpRjzqLkpJWwNsijdGi5P+0vA5yzfq5BA=) 35: zMycwWf9Tpp5xSB6-C5UFRiyMQU.roa (hash: oLzSeqmsbJ/B++9sA71n/u3LkcCkqvS26sSAP1tYoR0=) Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/36/ddf8b3-1c08-495c-8ddf-fae5dbed3b1b/1/b4Tkc4pw6jnAjO8hBDKuOZ7H6RU.crl rsync://rpki.ripe.net/repository/DEFAULT/36/ddf8b3-1c08-495c-8ddf-fae5dbed3b1b/1/b4Tkc4pw6jnAjO8hBDKuOZ7H6RU.mft rsync://rpki.ripe.net/repository/DEFAULT/b4Tkc4pw6jnAjO8hBDKuOZ7H6RU.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Tue 05 Aug 2025 11:00:53 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:98:74:bd:d1:9b:10:30:e5:e6:8a:b1:18:cf:7b:b3:cb:2b Signature Algorithm: sha256WithRSAEncryption Issuer: CN=6f84e4738a70ea39c08cef210432ae399ec7e915 Validity Not Before: Aug 4 11:00:53 2025 GMT Not After : Aug 5 11:00:53 2025 GMT Subject: CN=eac1a9ca06a329cacbe379b2746f7ff6bc4600ca Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:dc:1f:1b:da:9e:94:8a:e8:30:eb:ac:81:4f:1b: 8a:27:29:97:fa:86:e3:c5:18:ff:c6:07:13:70:d8: c3:4d:56:a4:6d:eb:7b:80:90:a2:fd:d3:33:11:e6: c7:de:bc:cc:45:82:2c:0a:fb:0f:58:f0:32:6d:a0: 9a:8d:3e:9e:aa:40:b9:9a:ad:90:7c:c4:b8:6f:7a: 45:3f:2b:95:a1:81:e8:ec:59:c1:42:ab:20:2b:a0: b2:67:f5:17:be:7c:15:c5:ab:a6:c4:54:b0:57:92: c4:cc:c7:49:63:b0:55:60:f1:1d:84:e3:a1:4d:2f: b4:5d:09:d4:93:72:9e:05:5c:6e:74:e5:d3:bf:d4: d2:7e:85:f6:2c:93:97:c5:fc:1d:c8:03:bd:c0:3b: aa:04:e5:71:d5:d4:50:7f:5b:8e:db:36:f1:76:77: 4e:31:77:00:53:15:c1:ae:f5:c6:e9:8f:4c:dc:ae: 88:60:44:a9:76:1c:ea:ca:ca:5c:ed:d1:24:71:7d: f7:01:f7:d7:2a:7d:6e:db:66:b1:c1:87:ce:3a:68: 75:e8:0e:fc:4f:cf:16:c7:68:34:28:99:13:52:a4: 86:8c:cd:f6:6f:99:b8:9b:cd:44:70:3d:f8:c9:93: aa:86:b9:2e:4d:2e:a7:23:80:04:25:a8:00:db:cd: 69:4b Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: EA:C1:A9:CA:06:A3:29:CA:CB:E3:79:B2:74:6F:7F:F6:BC:46:00:CA X509v3 Authority Key Identifier: keyid:6F:84:E4:73:8A:70:EA:39:C0:8C:EF:21:04:32:AE:39:9E:C7:E9:15 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/b4Tkc4pw6jnAjO8hBDKuOZ7H6RU.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/36/ddf8b3-1c08-495c-8ddf-fae5dbed3b1b/1/b4Tkc4pw6jnAjO8hBDKuOZ7H6RU.mft X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/36/ddf8b3-1c08-495c-8ddf-fae5dbed3b1b/1/b4Tkc4pw6jnAjO8hBDKuOZ7H6RU.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 19:4e:a4:c7:c2:bc:74:0a:00:6f:d3:0a:c1:c1:69:77:6b:b8: 8f:a6:ac:2f:68:e4:91:2e:90:6e:fd:4e:4a:b7:82:32:93:92: c1:1f:00:ec:68:7f:ed:60:6d:00:39:b7:af:84:70:d1:24:b3: af:ff:17:e0:83:be:39:03:bb:91:5a:69:db:ff:c3:3a:f6:7d: 55:86:e1:de:de:75:26:75:6f:29:0d:af:e9:1c:01:de:3b:0e: 24:2d:f4:25:d0:f0:77:15:ba:f9:d4:aa:50:45:34:21:6b:89: c2:e2:58:da:07:4c:c9:7a:c6:0e:b1:f2:da:57:b9:b7:d6:9b: 5b:1c:c5:ba:91:84:a4:85:87:93:14:92:1c:6b:9a:09:0d:e2: 9b:78:42:7d:05:c0:00:d9:17:00:75:dd:b2:18:53:d0:15:c7: c5:af:fe:55:a0:dc:23:6e:ad:0f:f3:b1:ee:af:ca:8f:7f:95: c1:af:8f:92:8b:8e:24:cb:3d:4f:d4:07:15:c9:36:5d:67:52: 3e:c0:52:79:d3:0c:f5:fa:2f:c4:6c:d9:8c:27:ca:ec:32:d7: b5:b8:f5:aa:92:48:8b:ae:22:a8:af:68:b7:87:79:d0:7b:f3: 5b:07:96:72:37:4c:c4:17:5b:b7:ff:64:1a:36:73:bf:16:3b: b8:a8:af:6b -----BEGIN CERTIFICATE----- MIIFFjCCA/6gAwIBAgISAZh0vdGbEDDl5oqxGM97s8srMA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKDZmODRlNDczOGE3MGVhMzljMDhjZWYyMTA0MzJhZTM5OWVj N2U5MTUwHhcNMjUwODA0MTEwMDUzWhcNMjUwODA1MTEwMDUzWjAzMTEwLwYDVQQD EyhlYWMxYTljYTA2YTMyOWNhY2JlMzc5YjI3NDZmN2ZmNmJjNDYwMGNhMIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEA3B8b2p6Uiugw66yBTxuKJymX+obj xRj/xgcTcNjDTVakbet7gJCi/dMzEebH3rzMRYIsCvsPWPAybaCajT6eqkC5mq2Q fMS4b3pFPyuVoYHo7FnBQqsgK6CyZ/UXvnwVxaumxFSwV5LEzMdJY7BVYPEdhOOh TS+0XQnUk3KeBVxudOXTv9TSfoX2LJOXxfwdyAO9wDuqBOVx1dRQf1uO2zbxdndO MXcAUxXBrvXG6Y9M3K6IYESpdhzqyspc7dEkcX33AffXKn1u22axwYfOOmh16A78 T88Wx2g0KJkTUqSGjM32b5m4m81EcD34yZOqhrkuTS6nI4AEJagA281pSwIDAQAB o4ICIjCCAh4wHQYDVR0OBBYEFOrBqcoGoynKy+N5snRvf/a8RgDKMB8GA1UdIwQY MBaAFG+E5HOKcOo5wIzvIQQyrjmex+kVMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvYjRUa2M0cHc2am5Bak84aEJES3VPWjdINlJVLmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC8zNi9kZGY4YjMtMWMwOC00OTVjLThkZGYt ZmFlNWRiZWQzYjFiLzEvYjRUa2M0cHc2am5Bak84aEJES3VPWjdINlJVLm1mdDCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC8zNi9kZGY4YjMtMWMwOC00OTVjLThkZGYtZmFlNWRiZWQzYjFi LzEvYjRUa2M0cHc2am5Bak84aEJES3VPWjdINlJVLmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAGU6kx8K8 dAoAb9MKwcFpd2u4j6asL2jkkS6Qbv1OSreCMpOSwR8A7Gh/7WBtADm3r4Rw0SSz r/8X4IO+OQO7kVpp2//DOvZ9VYbh3t51JnVvKQ2v6RwB3jsOJC30JdDwdxW6+dSq UEU0IWuJwuJY2gdMyXrGDrHy2le5t9abWxzFupGEpIWHkxSSHGuaCQ3im3hCfQXA ANkXAHXdshhT0BXHxa/+VaDcI26tD/Ox7q/Kj3+Vwa+PkouOJMs9T9QHFck2XWdS PsBSedMM9fovxGzZjCfK7DLXtbj1qpJIi64iqK9ot4d50HvzWweWcjdMxBdbt/9k GjZzvxY7uKivaw== -----END CERTIFICATE-----Generated at Mon Aug 4 14:00:10 2025 by rpki-client