$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/90/9d9192-273c-4ca9-b2ba-fa9cb51cd0f1/1/ayM9dVCLToXMz0Q0mny3AxmNHSY.mft File: ayM9dVCLToXMz0Q0mny3AxmNHSY.mft (raw, json) Hash identifier: VEQSRWWasznQnji8BapPfFlSxNYws4P84HitX4VOwfs= Subject key identifier: AE:3C:A3:6E:8B:19:54:5D:3B:0F:65:B4:98:AB:F6:9A:47:57:4D:9D Authority key identifier: 6B:23:3D:75:50:8B:4E:85:CC:CF:44:34:9A:7C:B7:03:19:8D:1D:26 Certificate issuer: /CN=6b233d75508b4e85cccf44349a7cb703198d1d26 Certificate serial: 01987BD2A36651925B7A55336F3CF19447E0 Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/ayM9dVCLToXMz0Q0mny3AxmNHSY.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/90/9d9192-273c-4ca9-b2ba-fa9cb51cd0f1/1/ayM9dVCLToXMz0Q0mny3AxmNHSY.mft Manifest number: 1382 Signing time: Tue 05 Aug 2025 20:00:58 +0000 Manifest this update: Tue 05 Aug 2025 20:00:58 +0000 Manifest next update: Wed 06 Aug 2025 20:00:58 +0000 Files and hashes: 1: 2cIKXah99bs326V7_K2_ATU1wCc.roa (hash: 8U7vy7F8tH1dtIEl5RJoquiwlVH7Dw2C2urkmS/8Z1s=) 2: 3Q5YOz_BI10ve__t3IetYuqaGUA.roa (hash: ZILL1qGL3E11+bnE750yzGJ+LQfFTIO6h5xfluweBiQ=) 3: AjBp57cbFRBUIwIaXhNlUU4xc9Y.roa (hash: ZV9AX+FvWa4YVP0u/DD5byIthcNtHTveftQNUrL/KbI=) 4: CDcE_vqm19Y_w1U_nUrldF-Ugs0.roa (hash: xI3BVyx2LWN6Xd4vh4ettZDFc5P8efBg+uxBmnTHoxk=) 5: MWVrNJSe74q7kEhW6qS8QXcSrrc.roa (hash: SMPMCny2Jv5HoImrcf2XEmoMCaHU3khczb0z6CCQ9uc=) 6: ONBLhs2q3EPNBcKzjuUXI9NfDXk.roa (hash: 02TEqjTXH1kKdBwPOe/Fj5S0NZ7Hp7pCF4TDcYi4oGk=) 7: ZkxRUMGE9CQRvySfgcJj3kHytZg.roa (hash: UKRx7jBVZPPDl6SgbH7t7Qygyz8pBsSIfl7nu9h+mgg=) 8: aB6sxL1ZlKSQNpa4jL29xIkPi_I.roa (hash: zA0AFONbK9br9fZoJVU4SW6cugn1tuIJBYSB1Nl3/G8=) 9: ayM9dVCLToXMz0Q0mny3AxmNHSY.crl (hash: 6b6DAUkE/ZlwNmtoe6KKTA33LE9Y7CSuP+F6QzIU7WY=) 10: fZeNbyH5ujZlgqfP9AgorOMXohA.roa (hash: Dn0aZqCRGKt2adMmUTTsiPmw4Pp+E7zhFHoCHO312UY=) 11: fb3lzsKRuT3DqmRVbbR-BGF4wXU.roa (hash: pxuBhHoXzqbakdVTx6L5TNOxX98HDl41yiAFcXSWT3Q=) 12: hEZZKQJ28Km_5UhH3cpxvYkLLZU.roa (hash: +vaYxbzQEi6M9mf3DyKNxFAOI6eLzddsZf7cVFe2WCE=) 13: hUM0lQ0ODj8Qil7w4D2sZvQVB4w.roa (hash: 8bKnMQhqygeFZmPwESYE+kESImBLAc2qmeTscpnWZ2s=) 14: hZs6PbiV1FHRQvgoNjIWkApb1x4.roa (hash: slbvJPVch+dH2HvE/UBBZulZ2jCavWoY4Ccie6OcAiU=) 15: itqdYmGsrfepmyYSKCd1c5R77js.roa (hash: W2/G8eoM3IFmeLBvMWU5XzC6g/z37f1zNFuZs/37yXE=) 16: lUA4Psv--QayOhT_SsZZvDZxilM.roa (hash: YGf2R2IX409XBgVvc7ca6dAQRj+o7jLte4H3tVm4ZpY=) 17: nPdGgeG-9wHMZBn1oHFY2TrIyd4.roa (hash: ixNDdEbsReVkHb4nZt1NyyQNAMSP0+ayTT4IyJE76/4=) 18: np9eNjgoLA0jYeMYnFqjApZ6K1s.roa (hash: rFv0HF9ou+nHz2ggvRQ0cKKf/+Wgihlq0XkCRw5GtV4=) 19: u5pfngYD-0MqXeQ11DbdTP8EwmU.roa (hash: xtu5m2bHnGuokc2D/B489MeQCUa3PeUYpTlbCBj8908=) Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/90/9d9192-273c-4ca9-b2ba-fa9cb51cd0f1/1/ayM9dVCLToXMz0Q0mny3AxmNHSY.crl rsync://rpki.ripe.net/repository/DEFAULT/90/9d9192-273c-4ca9-b2ba-fa9cb51cd0f1/1/ayM9dVCLToXMz0Q0mny3AxmNHSY.mft rsync://rpki.ripe.net/repository/DEFAULT/ayM9dVCLToXMz0Q0mny3AxmNHSY.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Wed 06 Aug 2025 20:00:58 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:98:7b:d2:a3:66:51:92:5b:7a:55:33:6f:3c:f1:94:47:e0 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=6b233d75508b4e85cccf44349a7cb703198d1d26 Validity Not Before: Aug 5 20:00:58 2025 GMT Not After : Aug 6 20:00:58 2025 GMT Subject: CN=ae3ca36e8b19545d3b0f65b498abf69a47574d9d Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:96:a3:2a:d3:98:13:a9:d9:7c:03:3d:b5:10:6e: c9:ed:02:cc:33:1a:a1:3a:c9:a4:2b:37:a8:54:29: 31:fe:ff:ac:5e:2b:63:9e:6b:1f:8b:7a:1a:0e:3c: 1b:40:ce:7a:77:4a:e9:2a:2c:39:91:f7:b6:76:c0: 2a:28:38:29:cd:ee:06:bd:a6:b5:4a:1e:9e:38:d3: 09:89:da:c9:e1:22:38:b7:47:93:9c:d9:e0:f7:28: c3:4e:b8:86:30:a7:26:22:70:dd:03:e6:e3:43:d3: 0f:06:aa:fd:66:0d:58:a7:68:43:ee:7e:d2:17:8d: a5:eb:24:87:b9:08:40:ac:9d:07:d2:89:25:17:bd: b3:e7:cb:b4:ff:a9:3a:49:70:01:73:66:df:8c:c0: 06:1e:00:98:c5:15:1c:32:3f:d0:04:7d:3e:ac:80: 41:2c:c6:4d:46:8b:95:3b:22:24:05:79:06:52:0a: a0:26:6e:e9:5d:a9:70:34:37:d9:55:f7:3c:79:12: 49:fd:3c:ae:4b:9d:bb:8a:ce:8d:8f:3b:58:3e:08: c2:a2:a6:bd:4f:8d:2f:46:4d:b9:f4:db:ec:3e:9b: e1:00:22:de:79:4f:00:86:87:3c:7c:d3:a0:00:46: 29:a7:fd:1c:7c:e2:4b:86:50:68:a0:79:8b:fc:b0: 41:59 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: AE:3C:A3:6E:8B:19:54:5D:3B:0F:65:B4:98:AB:F6:9A:47:57:4D:9D X509v3 Authority Key Identifier: keyid:6B:23:3D:75:50:8B:4E:85:CC:CF:44:34:9A:7C:B7:03:19:8D:1D:26 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/ayM9dVCLToXMz0Q0mny3AxmNHSY.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/90/9d9192-273c-4ca9-b2ba-fa9cb51cd0f1/1/ayM9dVCLToXMz0Q0mny3AxmNHSY.mft X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/90/9d9192-273c-4ca9-b2ba-fa9cb51cd0f1/1/ayM9dVCLToXMz0Q0mny3AxmNHSY.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 12:99:e8:72:4c:71:7b:9d:32:23:44:d5:7a:4b:b0:5c:b6:68: 2a:82:70:52:a1:e1:4a:7a:ea:00:44:91:4e:5f:48:b7:3c:09: b2:27:65:77:21:84:64:49:c3:27:d5:e0:9a:6c:cd:a9:db:aa: 10:60:9b:ca:bd:31:7a:9a:17:d8:d8:9e:e0:32:66:2c:ed:f5: cd:5f:c9:e6:0f:ef:85:05:20:ba:1f:20:ca:0a:21:21:fc:34: ca:0f:c2:3e:f5:c4:6b:c6:38:f9:10:b6:82:5f:68:ac:e0:13: 2b:7f:9d:36:8f:d7:e9:ef:28:f8:e9:98:da:d0:fd:61:e9:c9: 17:15:ad:fa:2e:86:3e:d1:e3:86:cf:88:e4:04:15:85:ce:b6: f9:91:41:d5:5f:68:18:9e:92:63:b4:34:78:a3:e9:27:f7:6a: d7:48:40:c7:f9:c6:74:af:90:88:ec:d6:2a:43:6c:04:8a:8c: 36:60:50:75:62:57:c1:b8:3a:b3:0c:3b:e8:44:14:2f:f1:98: 66:c4:02:ec:75:40:21:7a:69:7f:d2:0b:f4:15:2c:02:00:4d: 21:b9:6b:45:ff:92:fa:01:fb:73:d2:1c:14:c1:56:1d:a6:40: bd:a8:49:d9:53:bb:78:5e:93:1c:98:78:82:e5:8a:1c:5b:d6: 92:08:8a:9f -----BEGIN CERTIFICATE----- MIIFFjCCA/6gAwIBAgISAZh70qNmUZJbelUzbzzxlEfgMA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKDZiMjMzZDc1NTA4YjRlODVjY2NmNDQzNDlhN2NiNzAzMTk4 ZDFkMjYwHhcNMjUwODA1MjAwMDU4WhcNMjUwODA2MjAwMDU4WjAzMTEwLwYDVQQD EyhhZTNjYTM2ZThiMTk1NDVkM2IwZjY1YjQ5OGFiZjY5YTQ3NTc0ZDlkMIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAlqMq05gTqdl8Az21EG7J7QLMMxqh OsmkKzeoVCkx/v+sXitjnmsfi3oaDjwbQM56d0rpKiw5kfe2dsAqKDgpze4Gvaa1 Sh6eONMJidrJ4SI4t0eTnNng9yjDTriGMKcmInDdA+bjQ9MPBqr9Zg1Yp2hD7n7S F42l6ySHuQhArJ0H0oklF72z58u0/6k6SXABc2bfjMAGHgCYxRUcMj/QBH0+rIBB LMZNRouVOyIkBXkGUgqgJm7pXalwNDfZVfc8eRJJ/TyuS527is6NjztYPgjCoqa9 T40vRk259NvsPpvhACLeeU8Ahoc8fNOgAEYpp/0cfOJLhlBooHmL/LBBWQIDAQAB o4ICIjCCAh4wHQYDVR0OBBYEFK48o26LGVRdOw9ltJir9ppHV02dMB8GA1UdIwQY MBaAFGsjPXVQi06FzM9ENJp8twMZjR0mMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvYXlNOWRWQ0xUb1hNejBRMG1ueTNBeG1OSFNZLmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC85MC85ZDkxOTItMjczYy00Y2E5LWIyYmEt ZmE5Y2I1MWNkMGYxLzEvYXlNOWRWQ0xUb1hNejBRMG1ueTNBeG1OSFNZLm1mdDCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC85MC85ZDkxOTItMjczYy00Y2E5LWIyYmEtZmE5Y2I1MWNkMGYx LzEvYXlNOWRWQ0xUb1hNejBRMG1ueTNBeG1OSFNZLmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAEpnockxx e50yI0TVekuwXLZoKoJwUqHhSnrqAESRTl9ItzwJsidldyGEZEnDJ9XgmmzNqduq EGCbyr0xepoX2Nie4DJmLO31zV/J5g/vhQUguh8gygohIfw0yg/CPvXEa8Y4+RC2 gl9orOATK3+dNo/X6e8o+OmY2tD9YenJFxWt+i6GPtHjhs+I5AQVhc62+ZFB1V9o GJ6SY7Q0eKPpJ/dq10hAx/nGdK+QiOzWKkNsBIqMNmBQdWJXwbg6sww76EQUL/GY ZsQC7HVAIXppf9IL9BUsAgBNIblrRf+S+gH7c9IcFMFWHaZAvahJ2VO7eF6THJh4 guWKHFvWkgiKnw== -----END CERTIFICATE-----Generated at Wed Aug 6 06:06:14 2025 by rpki-client