$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/3d/3e2b18-55c9-4180-8c6e-2c7086fded93/1/CIRls3stTp9BOjHce35suioz25Y.mft File: CIRls3stTp9BOjHce35suioz25Y.mft (raw, json) Hash identifier: a2NFbeWqxS8NsxN4W1eHs7+UbkEBX9jopwupI5/rN48= Subject key identifier: 78:D9:28:CA:EF:40:B3:D8:19:E0:02:93:31:0E:51:74:87:4E:93:09 Authority key identifier: 08:84:65:B3:7B:2D:4E:9F:41:3A:31:DC:7B:7E:6C:BA:2A:33:DB:96 Certificate issuer: /CN=088465b37b2d4e9f413a31dc7b7e6cba2a33db96 Certificate serial: 019874F4FA6D1D22D822377BD0FF2623B637 Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/CIRls3stTp9BOjHce35suioz25Y.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/3d/3e2b18-55c9-4180-8c6e-2c7086fded93/1/CIRls3stTp9BOjHce35suioz25Y.mft Manifest number: 09E5 Signing time: Mon 04 Aug 2025 12:01:08 +0000 Manifest this update: Mon 04 Aug 2025 12:01:08 +0000 Manifest next update: Tue 05 Aug 2025 12:01:08 +0000 Files and hashes: 1: 0NFiTmuSyQvbIvanJiLjWHvt4RM.roa (hash: luko6CdhO6PPQy8mRMEAKBgkFwNJM+Gi1UFJ4ngvy+Q=) 2: 0SX6tguCPbTedDIJv_v61mNVvPQ.roa (hash: OkN/xXnA9ztS0yO9CPbdPXj9DcZxVLy9MCAhSe7Y+Vs=) 3: 1Au5Z5nGoqTJTIUg3MEmF0l6qLQ.roa (hash: IvdLtqnBMyGRWSVQH7Ip2GpcjvgrFZiBYsuGVCM6qKU=) 4: 4nU8t9nFwIiWzcROGA6bDv2HTiA.roa (hash: QIYEjvQS5BHu7T+tElBrKTGFMYY7X1GdGDqPR3ESe8Y=) 5: 7DPyUtc9n8WTweBBkrOb_SjAkcE.roa (hash: ZoSn5vUNB/wa1uBbMDCP16ELaz+Q0L0GTnc/wHeaX0o=) 6: 7NoekW-HkxHn4P8-jBcdVtp5hPY.roa (hash: y374UyHAmZutF/EVdVEF8nRMAlnmcdvOeQf/dEszG8Q=) 7: 7_Pam1zCWMSxN35Hg3GoolAI0gM.roa (hash: lswJSDHwS490ZDhaMLtu12CoEJf1WU4AZd47lIYMptI=) 8: 7qa40nir5wFq2isGcTz2sDzsh0E.roa (hash: P1yq7a1eR7Cp2asOxbQ/DVqg+NZ3IgYJdW9DNRFrZbc=) 9: CIRls3stTp9BOjHce35suioz25Y.crl (hash: LnZxJlVjCihWgw8iQwky0m7LFyZn2Eqm0dcG0nRPpOo=) 10: DQ9Y2TKIQQfnAkl5dD1WYgGZfTI.roa (hash: i3PppcVXNlfJ81Wt3dyqjPX5lC6AsicinQTUdq1qZBE=) 11: E41iAo-YhWo417aVu3UFCXW5I0U.roa (hash: FPYq7/mqqnQsvVNvJMzlmLszXu5+IG0MN3SMAMVazpQ=) 12: FmMgP7ha8iX2FfDMIFk9KP0qkts.roa (hash: Ro1xRk0724SJQafKJQzEcvMjFfbM36IbDNwvGX/5JdQ=) 13: GnQoHq2ALkHnA-1hM45uzLeJnlg.roa (hash: 56wbhZ1KfSgNZ2QOQ2O1i7JWNQODxAT5JXlghcuIe+0=) 14: IBa2FfCm0NXr_jkTnl9W4lKJHbQ.roa (hash: g/fWzUMptSij5CbXIEyMw6oyGmVps6iOuy9vK1HPOHA=) 15: IROFoAzRYfAyAuh137ZUKRo16o0.roa (hash: pE3NB8j3VAGJYXXKqsPuAAxosijoArjuXWM4LMmqg5s=) 16: Ky7-IIoUxS2nkoMTtc2TskJ66E8.roa (hash: aBQvir0AeVNqf2KXlMbnVl1gTuEzmgYVgZi2Q3VfSPw=) 17: MOhuKkKFUOCJzvGkfVg3ZmGMV9g.roa (hash: GRcY4hPKLNCKWz8KxAbe1WQmkZqEk9LZq4sJ8uzaP8k=) 18: OzfjIdhzh7gpL6YR6SckdfTkc-4.roa (hash: qjn8XFFM1Wpyy8tyUnVazb1P7nlXBpVe5zicqRab8VA=) 19: RkVV0EjcjxNBWcvA8hIWquuWiTE.roa (hash: gg70g49DwuFI9SyU14ctAnLmER/u5gvtmm3cshRekd4=) 20: U9NaOvKZniiNhl5zE3KqQScFT6c.roa (hash: i2z1+tj2AfSPC//fYo07n/HYknAsXyAjlQF2God3G58=) 21: Uj8njsPYdgRZYjZt_ospB351jos.roa (hash: LYqRDwSI7zwNyZiE9YMTNwUElSgWURvGf1f5eOoJElY=) 22: al4U2JPxxiid9aONoVxE42bXtsM.roa (hash: XIfhyTCn1Ywozl9yi5YvzH2FdKI/ST5gD2VgyepHB5A=) 23: exlEKANutgG_vDp1CnyhUG3YUe8.roa (hash: NHAlDoUxYtYveHw9TLM5p3WftexDT/jlIeiCrEjifQ4=) 24: f59xenCUDXDDeMwa_nEJN7nMCGQ.roa (hash: QsZCsEt6m6rV691+Xfz+nKfAfIU4tpPtr3jZyy6Pr0s=) 25: ogNihGVYrghH8grukZGii0-MTnU.roa (hash: PiM4u+yLk8KHyPfyWC4NVbt1Xw2USY1e7QTVDT2W4t0=) 26: vyLjFvSuQm0_pQih6LiAdYCNY9c.roa (hash: /6CYLPOjXexhIIIeJnrGjEKoKdtpezbqkCXs7RqU3FI=) 27: zB4DK4xuq1XzyMGQt0yUpiCH1mI.roa (hash: lAQP8m8UapwTe64UInkYcZkWzCw4ZGMoLx8CAM1NvV8=) 28: zwB_NfcfrW5dDlELOTYJqzX4fyk.roa (hash: 4XzyrpXgUs2LsFTwoqCbEmzvuAsR3qmjgxRr13yBpIs=) Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/3d/3e2b18-55c9-4180-8c6e-2c7086fded93/1/CIRls3stTp9BOjHce35suioz25Y.crl rsync://rpki.ripe.net/repository/DEFAULT/3d/3e2b18-55c9-4180-8c6e-2c7086fded93/1/CIRls3stTp9BOjHce35suioz25Y.mft rsync://rpki.ripe.net/repository/DEFAULT/CIRls3stTp9BOjHce35suioz25Y.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Tue 05 Aug 2025 12:00:29 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:98:74:f4:fa:6d:1d:22:d8:22:37:7b:d0:ff:26:23:b6:37 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=088465b37b2d4e9f413a31dc7b7e6cba2a33db96 Validity Not Before: Aug 4 12:01:08 2025 GMT Not After : Aug 5 12:01:08 2025 GMT Subject: CN=78d928caef40b3d819e00293310e5174874e9309 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:cf:6e:a3:07:29:92:a6:2b:d6:57:fa:de:48:9c: 52:a8:c0:18:f8:54:4c:c5:72:84:20:71:24:f6:76: 62:ee:cb:a2:30:f3:ca:42:16:5d:d7:8d:43:75:2b: 77:0b:69:43:e5:cf:39:17:c4:ad:c6:a5:9d:59:b0: 69:75:e4:e2:33:3f:1f:89:19:04:7e:42:e2:44:70: 90:0c:73:ec:7f:4c:c3:6c:19:42:12:31:bf:b5:95: 28:bf:0f:04:d6:8a:e8:3f:8b:ad:1b:61:da:7e:45: 6b:ce:f6:4a:9a:17:ef:53:65:80:02:65:c4:3d:e4: c7:15:2f:fe:87:59:db:1e:14:5c:55:fa:01:e0:69: 27:7b:57:ae:95:d2:f1:c0:3d:22:9f:dc:dc:fc:b6: 36:0c:00:4e:57:f9:9e:04:7f:e9:3e:45:8e:89:0d: a8:a0:b0:4d:ca:9a:d8:ea:bf:41:b1:d1:1b:59:d0: fd:01:fd:f7:bb:e1:76:26:33:85:73:b8:19:68:36: 3f:26:89:82:91:a4:38:98:ff:d0:d8:6b:ad:f6:60: 26:bc:a5:c3:0c:db:7d:74:af:d7:08:87:30:b9:03: f0:58:6c:df:ca:e8:8c:a7:3d:67:68:e3:8e:c6:be: 1c:b3:4b:80:45:c5:25:22:11:bf:89:e0:6a:4c:6d: 5b:0d Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 78:D9:28:CA:EF:40:B3:D8:19:E0:02:93:31:0E:51:74:87:4E:93:09 X509v3 Authority Key Identifier: keyid:08:84:65:B3:7B:2D:4E:9F:41:3A:31:DC:7B:7E:6C:BA:2A:33:DB:96 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/CIRls3stTp9BOjHce35suioz25Y.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/3d/3e2b18-55c9-4180-8c6e-2c7086fded93/1/CIRls3stTp9BOjHce35suioz25Y.mft X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/3d/3e2b18-55c9-4180-8c6e-2c7086fded93/1/CIRls3stTp9BOjHce35suioz25Y.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 76:3e:87:90:1a:36:97:2a:88:32:a6:dd:a1:28:ac:fc:03:28: 9c:5b:a5:1e:cb:b6:8b:c5:e0:ab:5f:1b:3e:e8:1b:82:f8:60: 5f:2c:eb:f0:68:2c:c6:55:9d:22:19:6f:49:50:be:a1:25:1f: 5f:f3:be:fa:eb:74:f3:86:49:1a:b5:66:72:dd:a6:af:50:78: e8:15:bc:99:36:9c:ef:db:fe:5e:7c:24:77:89:90:7e:f4:5a: 0c:5a:18:1e:62:a4:90:16:96:9c:84:4d:cb:e1:42:e4:69:40: 12:35:56:2e:84:5d:84:59:cd:08:05:2f:23:17:a9:f7:dd:a3: df:b3:73:b9:a2:b3:ea:ff:0b:c6:e0:b3:c9:7e:fd:2a:cc:f6: 00:83:42:3f:6b:89:a8:87:47:f1:c3:88:6d:e9:91:91:b1:32: 4b:73:7a:ba:1c:13:0f:58:e2:21:48:48:55:7a:49:e6:ac:b5: 25:27:0b:55:81:62:4a:e5:ae:87:5b:49:b7:ac:d6:f5:0a:52: 6f:e6:9a:91:8a:d2:b7:bb:d1:a7:c6:7d:f8:81:bc:b3:01:47: 78:33:30:8f:72:f5:f6:a0:9f:a9:2a:d3:61:1a:9a:8b:66:65: f2:70:95:62:59:ee:19:30:8e:78:95:32:0d:8a:d0:c8:8b:75: 2c:9b:5c:a2 -----BEGIN CERTIFICATE----- MIIFFjCCA/6gAwIBAgISAZh09PptHSLYIjd70P8mI7Y3MA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKDA4ODQ2NWIzN2IyZDRlOWY0MTNhMzFkYzdiN2U2Y2JhMmEz M2RiOTYwHhcNMjUwODA0MTIwMTA4WhcNMjUwODA1MTIwMTA4WjAzMTEwLwYDVQQD Eyg3OGQ5MjhjYWVmNDBiM2Q4MTllMDAyOTMzMTBlNTE3NDg3NGU5MzA5MIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAz26jBymSpivWV/reSJxSqMAY+FRM xXKEIHEk9nZi7suiMPPKQhZd141DdSt3C2lD5c85F8StxqWdWbBpdeTiMz8fiRkE fkLiRHCQDHPsf0zDbBlCEjG/tZUovw8E1oroP4utG2HafkVrzvZKmhfvU2WAAmXE PeTHFS/+h1nbHhRcVfoB4Gkne1euldLxwD0in9zc/LY2DABOV/meBH/pPkWOiQ2o oLBNyprY6r9BsdEbWdD9Af33u+F2JjOFc7gZaDY/JomCkaQ4mP/Q2Gut9mAmvKXD DNt9dK/XCIcwuQPwWGzfyuiMpz1naOOOxr4cs0uARcUlIhG/ieBqTG1bDQIDAQAB o4ICIjCCAh4wHQYDVR0OBBYEFHjZKMrvQLPYGeACkzEOUXSHTpMJMB8GA1UdIwQY MBaAFAiEZbN7LU6fQTox3Ht+bLoqM9uWMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvQ0lSbHMzc3RUcDlCT2pIY2UzNXN1aW96MjVZLmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC8zZC8zZTJiMTgtNTVjOS00MTgwLThjNmUt MmM3MDg2ZmRlZDkzLzEvQ0lSbHMzc3RUcDlCT2pIY2UzNXN1aW96MjVZLm1mdDCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC8zZC8zZTJiMTgtNTVjOS00MTgwLThjNmUtMmM3MDg2ZmRlZDkz LzEvQ0lSbHMzc3RUcDlCT2pIY2UzNXN1aW96MjVZLmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAdj6HkBo2 lyqIMqbdoSis/AMonFulHsu2i8Xgq18bPugbgvhgXyzr8GgsxlWdIhlvSVC+oSUf X/O++ut084ZJGrVmct2mr1B46BW8mTac79v+Xnwkd4mQfvRaDFoYHmKkkBaWnIRN y+FC5GlAEjVWLoRdhFnNCAUvIxep992j37NzuaKz6v8LxuCzyX79Ksz2AINCP2uJ qIdH8cOIbemRkbEyS3N6uhwTD1jiIUhIVXpJ5qy1JScLVYFiSuWuh1tJt6zW9QpS b+aakYrSt7vRp8Z9+IG8swFHeDMwj3L19qCfqSrTYRqai2Zl8nCVYlnuGTCOeJUy DYrQyIt1LJtcog== -----END CERTIFICATE-----Generated at Mon Aug 4 18:31:02 2025 by rpki-client