$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/77/9fab5c-e138-4ef6-8799-b0b35a34e388/1/j8aWRkV6i_jvlWm5tCfp8sRi5W4.mft File: j8aWRkV6i_jvlWm5tCfp8sRi5W4.mft (raw, json) Hash identifier: 8QCU6npFLC7htUzDS4ZMhJid4ss2Q45fD0ZcVPsPT34= Subject key identifier: BD:86:C3:3E:53:86:4B:A7:62:24:AD:90:12:BF:2D:EA:7B:26:69:C8 Authority key identifier: 8F:C6:96:46:45:7A:8B:F8:EF:95:69:B9:B4:27:E9:F2:C4:62:E5:6E Certificate issuer: /CN=8fc69646457a8bf8ef9569b9b427e9f2c462e56e Certificate serial: 019879E4799EB35D2109F057FAFEAA573073 Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/j8aWRkV6i_jvlWm5tCfp8sRi5W4.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/77/9fab5c-e138-4ef6-8799-b0b35a34e388/1/j8aWRkV6i_jvlWm5tCfp8sRi5W4.mft Manifest number: 11A4 Signing time: Tue 05 Aug 2025 11:01:13 +0000 Manifest this update: Tue 05 Aug 2025 11:01:13 +0000 Manifest next update: Wed 06 Aug 2025 11:01:13 +0000 Files and hashes: 1: 33CUfDLiP8hMW8-xKnh5gWXZm9w.roa (hash: Bh9+3b8fWDJobwnZ5uEge8oWIc5s9pLu/K/Qpm494l0=) 2: 37WDsJgS29ArcL4Cmhv4wwYMgFc.roa (hash: AXUUOGrTgb1EkHkLKG0Np5XXpArC+TW3abI6bwcRXy8=) 3: 3CVACMkjOKX6-b1oYxgcNccTkbQ.roa (hash: oAgVFBEKc1//7g3wqbj5gkZ/UVTRfzyZPaC1dYdUEqY=) 4: 8Pql3WWXWEFRERRDmVMGD4G9M-A.roa (hash: Ou+GeKB9aMm7s/S9nX0yfjyzbehhUnphSDoiUeT/MCo=) 5: 8sf3AriWeoOoKb2ZrL9ruFI5-yU.roa (hash: akXe86mXNL4F4xYmekk3EuMAOLAD/RcPwHK74zX/QY0=) 6: 9a6AdkqAs0vIWdMjgvg0SfIEVG8.roa (hash: 3MZg0XXsOYdVObhOBprmqJ/8u/fpWKxyx3HFfsb7hhc=) 7: AmHkvm73L7WuRs2OBkCuUN3ylao.roa (hash: mk6A7F32UtKijP2YOQDh8IbbK8Vw0IDJK2YgMl3UZWk=) 8: Gkj-_sNoI1_V4Aq0AR967JJ7iIA.roa (hash: D6alHFBw87PSRUedkFujLNRW9+yoaIFCiBA4D58vz5s=) 9: H9HhLY73Vk4PBLowFwmqq8qnEvs.roa (hash: yboN6O4NEwN/9jtzcqVhwL7Xp6BAuM4oUmdLAuSlRZc=) 10: MakxThxT5UsU25fCDQKlS5KLtpA.roa (hash: l4AKksay049W9B075Nvia/rqmIQrOxBlcCFqa/jsrsw=) 11: VuwmrfCYeX-5-G3EACirZwyCtzg.roa (hash: 1HbLhGjSO6WtBBMMxb8oy/0MhfWurHjl8dezIem0SBE=) 12: a_gWGAH_HkQq48s4xebSJs8e9SM.roa (hash: /PN+oDh7g+uIG4/Jaj9EAzn6xGtetecKxsI53eVsu+k=) 13: bwAG82vgu_-f3Xus3V_4NK2WQyQ.roa (hash: qly2qjfn5eyWDXm67Zp4c9WaqGquHK1Au5pP/Lwhj6U=) 14: fczn2jh4ajq3X4s1Mo_fsWXXm34.roa (hash: J5rtauXxpoCURr4ah9LdMnYQCXOtCScxCM8XbJ0ALGA=) 15: j8aWRkV6i_jvlWm5tCfp8sRi5W4.crl (hash: 3iNtitZ+lXbwtfgTm2bMcwkA8F27o79GvVn8dpMG/XE=) 16: qSSwvFyukku__Xfha7NX-KNKilU.roa (hash: /YidgkIq90t9kIOCAgVZgfxaifzNpJSznlRbFAd8dbE=) 17: tUXcljwuTzZu2HFVE--E_B3XnQ4.roa (hash: Gfw3NzI90kBuKsp8o/a8mrst3zcJzAdSNtNsY8SwJUA=) 18: tgzOB-X3X9hQIl9WIvEW-sVk2TA.roa (hash: dct8dEsqnpkwRMNVp0z4oU64+Yxl27f7QQdtJgkmALY=) 19: xrtDAIk3vWJYXPnZVXMHaoJfbQs.roa (hash: u3EOwyWtPWjn//AFUgWdQ3LoVgi+BzUJpSJKyhN9AL0=) Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/77/9fab5c-e138-4ef6-8799-b0b35a34e388/1/j8aWRkV6i_jvlWm5tCfp8sRi5W4.crl rsync://rpki.ripe.net/repository/DEFAULT/77/9fab5c-e138-4ef6-8799-b0b35a34e388/1/j8aWRkV6i_jvlWm5tCfp8sRi5W4.mft rsync://rpki.ripe.net/repository/DEFAULT/j8aWRkV6i_jvlWm5tCfp8sRi5W4.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Wed 06 Aug 2025 11:01:13 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:98:79:e4:79:9e:b3:5d:21:09:f0:57:fa:fe:aa:57:30:73 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=8fc69646457a8bf8ef9569b9b427e9f2c462e56e Validity Not Before: Aug 5 11:01:13 2025 GMT Not After : Aug 6 11:01:13 2025 GMT Subject: CN=bd86c33e53864ba76224ad9012bf2dea7b2669c8 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:e1:c7:e3:9f:07:45:42:28:b0:2d:0c:8d:23:00: d4:c0:36:ab:58:95:41:62:88:7f:e4:74:9a:bb:65: 1b:3e:e9:c6:57:87:fe:02:47:df:2b:b5:d6:37:eb: f8:28:0e:e4:06:d9:78:21:08:af:2b:f0:21:98:1d: 76:4b:d0:fc:83:85:4e:20:b8:52:32:56:70:01:ec: 2d:d2:bf:9a:4d:87:71:06:10:dd:c2:90:13:ee:03: 09:3d:0b:9b:2f:ce:2f:cd:6d:bd:0f:05:bd:e0:ff: e0:ff:62:74:f8:96:57:02:61:94:e2:ec:bd:1b:ba: ce:68:c9:07:c8:d9:18:dd:48:cc:8a:6b:7c:36:5a: 8d:dc:66:fd:3a:a3:f8:94:22:68:23:dc:20:ba:a5: 42:e2:95:b2:30:92:ef:76:fc:b5:a7:1c:d7:26:01: 10:35:79:f3:fd:ee:f1:0c:a7:76:6d:00:b9:bd:42: 94:32:03:a8:27:51:9d:3b:44:c3:7f:e6:df:6d:a1: b3:d6:0c:eb:a8:96:2f:76:8a:81:4b:8c:37:2e:32: ae:12:91:ff:22:71:36:1c:e5:28:38:ae:58:fd:f2: 9e:23:4b:5a:b6:1e:64:02:e8:34:5e:57:e8:ed:45: ec:5c:05:a5:d9:3d:21:11:7d:09:c6:f6:24:f3:c9: 31:e7 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: BD:86:C3:3E:53:86:4B:A7:62:24:AD:90:12:BF:2D:EA:7B:26:69:C8 X509v3 Authority Key Identifier: keyid:8F:C6:96:46:45:7A:8B:F8:EF:95:69:B9:B4:27:E9:F2:C4:62:E5:6E X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/j8aWRkV6i_jvlWm5tCfp8sRi5W4.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/77/9fab5c-e138-4ef6-8799-b0b35a34e388/1/j8aWRkV6i_jvlWm5tCfp8sRi5W4.mft X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/77/9fab5c-e138-4ef6-8799-b0b35a34e388/1/j8aWRkV6i_jvlWm5tCfp8sRi5W4.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 76:32:21:4a:7a:e7:e8:ae:46:7e:cc:78:74:60:71:00:c9:39: 40:27:e7:b2:c6:3f:76:f6:7a:f6:01:eb:f1:46:cd:21:f3:c8: 03:53:fc:4e:93:7e:c5:92:6c:c2:b7:48:7a:9d:44:da:35:e3: 6a:42:e7:8d:c3:76:10:a8:77:c2:9f:5e:bd:c9:0a:0c:90:0a: cc:ae:3d:c9:4f:2d:b5:78:c9:d6:36:76:cf:24:c1:d0:a6:66: 62:63:70:81:8b:43:b9:16:c9:c3:64:3f:cd:7d:95:a0:c8:70: 41:e0:3e:8a:cf:6e:f3:58:01:f8:be:ce:8d:63:96:66:81:98: 75:ab:52:0a:0c:72:99:ce:5d:cd:d5:b2:99:c3:0c:46:35:3a: ce:f5:1a:53:c8:12:1a:5c:19:5c:47:45:5e:98:48:10:f7:57: dc:3b:7f:fe:43:20:61:35:c8:02:d1:ab:87:4a:99:e5:7d:6f: 6b:64:b8:39:11:8a:0e:ef:7e:6e:96:0a:ae:ba:11:72:c1:3a: a2:97:35:59:b9:20:f1:0e:47:03:6a:bb:cb:6a:c6:e7:90:1a: 8c:ff:e4:3a:4d:69:d9:8c:f8:f9:f9:f4:b2:68:d4:73:6f:50: d1:97:d6:c4:c1:ac:43:e4:a2:ba:5c:ea:90:46:cd:2f:26:ce: 4d:d2:88:f2 -----BEGIN CERTIFICATE----- MIIFFjCCA/6gAwIBAgISAZh55Hmes10hCfBX+v6qVzBzMA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKDhmYzY5NjQ2NDU3YThiZjhlZjk1NjliOWI0MjdlOWYyYzQ2 MmU1NmUwHhcNMjUwODA1MTEwMTEzWhcNMjUwODA2MTEwMTEzWjAzMTEwLwYDVQQD EyhiZDg2YzMzZTUzODY0YmE3NjIyNGFkOTAxMmJmMmRlYTdiMjY2OWM4MIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEA4cfjnwdFQiiwLQyNIwDUwDarWJVB Yoh/5HSau2UbPunGV4f+AkffK7XWN+v4KA7kBtl4IQivK/AhmB12S9D8g4VOILhS MlZwAewt0r+aTYdxBhDdwpAT7gMJPQubL84vzW29DwW94P/g/2J0+JZXAmGU4uy9 G7rOaMkHyNkY3UjMimt8NlqN3Gb9OqP4lCJoI9wguqVC4pWyMJLvdvy1pxzXJgEQ NXnz/e7xDKd2bQC5vUKUMgOoJ1GdO0TDf+bfbaGz1gzrqJYvdoqBS4w3LjKuEpH/ InE2HOUoOK5Y/fKeI0tath5kAug0Xlfo7UXsXAWl2T0hEX0JxvYk88kx5wIDAQAB o4ICIjCCAh4wHQYDVR0OBBYEFL2Gwz5ThkunYiStkBK/Lep7JmnIMB8GA1UdIwQY MBaAFI/GlkZFeov475VpubQn6fLEYuVuMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvajhhV1JrVjZpX2p2bFdtNXRDZnA4c1JpNVc0LmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC83Ny85ZmFiNWMtZTEzOC00ZWY2LTg3OTkt YjBiMzVhMzRlMzg4LzEvajhhV1JrVjZpX2p2bFdtNXRDZnA4c1JpNVc0Lm1mdDCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC83Ny85ZmFiNWMtZTEzOC00ZWY2LTg3OTktYjBiMzVhMzRlMzg4 LzEvajhhV1JrVjZpX2p2bFdtNXRDZnA4c1JpNVc0LmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAdjIhSnrn 6K5Gfsx4dGBxAMk5QCfnssY/dvZ69gHr8UbNIfPIA1P8TpN+xZJswrdIep1E2jXj akLnjcN2EKh3wp9evckKDJAKzK49yU8ttXjJ1jZ2zyTB0KZmYmNwgYtDuRbJw2Q/ zX2VoMhwQeA+is9u81gB+L7OjWOWZoGYdatSCgxymc5dzdWymcMMRjU6zvUaU8gS GlwZXEdFXphIEPdX3Dt//kMgYTXIAtGrh0qZ5X1va2S4ORGKDu9+bpYKrroRcsE6 opc1Wbkg8Q5HA2q7y2rG55AajP/kOk1p2Yz4+fn0smjUc29Q0ZfWxMGsQ+Siulzq kEbNLybOTdKI8g== -----END CERTIFICATE-----Generated at Tue Aug 5 17:08:39 2025 by rpki-client