$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/aa/ea4455-7836-44c4-b2a3-2ece04e185c2/1/3O9Y1M-jVUP4SIonVuaSTmR7RYk.mft File: 3O9Y1M-jVUP4SIonVuaSTmR7RYk.mft (raw, json) Hash identifier: nYriWSBiDxys2h/4UhejLp1K8WKGuLHo5H8qdL30d/8= Subject key identifier: 3C:C6:AD:13:C0:F8:0F:E2:0C:13:1E:EE:99:73:01:A6:C7:47:7B:A1 Authority key identifier: DC:EF:58:D4:CF:A3:55:43:F8:48:8A:27:56:E6:92:4E:64:7B:45:89 Certificate issuer: /CN=dcef58d4cfa35543f8488a2756e6924e647b4589 Certificate serial: 019872CF593A83D2CB7C141C0D9945FFB140 Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/3O9Y1M-jVUP4SIonVuaSTmR7RYk.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/aa/ea4455-7836-44c4-b2a3-2ece04e185c2/1/3O9Y1M-jVUP4SIonVuaSTmR7RYk.mft Manifest number: 1589 Signing time: Mon 04 Aug 2025 02:00:48 +0000 Manifest this update: Mon 04 Aug 2025 02:00:48 +0000 Manifest next update: Tue 05 Aug 2025 02:00:48 +0000 Files and hashes: 1: 3O9Y1M-jVUP4SIonVuaSTmR7RYk.crl (hash: bDRinirAVXC8EBVmqG3q4NiB3i94ZULmHZkfvvPz2ic=) 2: 41fVJkrPbHKQA079D4QVuoSoMHA.roa (hash: sr+TybZqUtIImaDgTqztSGD1XE6oloq4BZ2M4Xpg+u0=) 3: 4pf6JhZ2ZrbzDs3KIhxGjElBlaw.roa (hash: vXT1uBYUu9e7P+u/IiXkrVdl2Zw3UbzSeW2UWFK34Jw=) 4: 6klSWkjjUTbGuPtDfN8cALab9cs.roa (hash: sdgQjkXScGhQKnR4al8+skMwfxtoqagBTslhZkfSKNY=) 5: B3w7E9gvZEzFwMrG99Xq-T1MEBw.roa (hash: X2c/+qNKKXp5+FBng9aKxlFFZbDBWHiqkfhHgQbP6bg=) 6: C2H1BSmYMIrZggVB3V-MZ8CR5SY.roa (hash: MAmDjDLmFQyW+O4vZbG4q4tWTwrvQlayeoQlXr+Fu/8=) 7: DJ2HKm_1c1O48zC-cc12FURV1-w.roa (hash: odPYR1sTJx4nskAcxBKfAydZplTxWpbfAnjmQhPzJX8=) 8: GmlPqmYgpg61oCrtTG9RzmgTZRQ.roa (hash: lOFhsoN8S3GIIvzatAuS7mkyT16CCVPA77MjKa8aWWc=) 9: RZCNuFYkMVfet6khSeCWtqT4r3s.roa (hash: bz5sfARWaL0oWhzQTAMOexVtHrjfBeAF+vBi8eYpl/U=) 10: Sn1YHf-JTelJa8AbFEu9eCrJc-Y.roa (hash: 4RQ4/nSSdbUjaSMtOe+F2ienAydzSYTXwrbRmuUcEJY=) 11: UE3TFsD19f6wQr0gTHDaiwhGdqA.roa (hash: h9a9K3MMF0WQfDnzSvLb5P+n54cp7dIKew88pGDYldk=) 12: VicyF_0e_bvvcn0fKM8q40zu1n8.roa (hash: C5AQCG/2PEYP519Z6IOs4YDYOnLl0s41qulpvbJvJ4g=) 13: _HxOSGDLp42EFmYvwzkWMgsUDRc.roa (hash: ld3Ed4rdMoSUbT+R2+5BJt8zZUTSFFBqMJ22iFdBG+s=) 14: cHLxjuzlgoGDINIVaFsru4PZ9BE.roa (hash: o3eUI2kqgbIKISwJ6D+XZ6uUN50wRiiahX5yY1sTPn4=) 15: lknEfiAWsTgVxunxpJ4Cim6vi_Y.roa (hash: 9nT6QBaPn6YGSLcfszLUc2cPb60rXG8wS9MlLTeVBhw=) 16: mdB3D_zcc3ZMQewiv3J0UZ_sUlo.roa (hash: NsB59ITpkzoeK9pRuPozIMWrvt6Lae+60ChrUSCRg50=) 17: mjTSWLEuvIRJ-mDUVhSblHWE7N4.roa (hash: rmzWSKN3Yb/xA6p/q8UxEXQjDhun2rkoNnE76zOjZHo=) 18: pxtXnWk-oYZ7Qby89ddSCgu91ts.roa (hash: RB8UdezmP543bft1AFoJ1CEu6eopqGc7lCF9jSa1eTc=) 19: q74_W6xdG6goIDi1c08_8gJ6uTE.roa (hash: pxdR0KPAM6OXX14ayHaIWzZB+fjREFkJhs6uGstYGhI=) 20: r3Ck7fpoOKp57Mk1jJgw8XHWAxg.roa (hash: jDsvxvKf5uFW/4bW6b3NOwjRJy48sDgwtQTJJofZqGM=) 21: v99_kaWjoTKnpnOcBogb8Emjk4M.roa (hash: unshnZnS3tg5XPSrGj9Iy+gxnhESQoD/3z5Y8oIxogo=) 22: y38_fk_dl6De5uovg7WKuAzPolA.roa (hash: PsHTMj/SkJczqFC8znjT596YhybynG/bm1yXYsS6Cxs=) 23: z6d9djVL2RnXuevi6Ot8E8e62tc.roa (hash: o9Kh9fFp+5NbfQXFw6W0ABs1khVR+g751jXSLlxLU4c=) 24: zUeLco_9U8ifNR5PMJI3zpijW74.roa (hash: 3lduL1beP27BPGmbMBwONs6g5YeSTXx0lXyH1JulpN4=) Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/aa/ea4455-7836-44c4-b2a3-2ece04e185c2/1/3O9Y1M-jVUP4SIonVuaSTmR7RYk.crl rsync://rpki.ripe.net/repository/DEFAULT/aa/ea4455-7836-44c4-b2a3-2ece04e185c2/1/3O9Y1M-jVUP4SIonVuaSTmR7RYk.mft rsync://rpki.ripe.net/repository/DEFAULT/3O9Y1M-jVUP4SIonVuaSTmR7RYk.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Tue 05 Aug 2025 02:00:48 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:98:72:cf:59:3a:83:d2:cb:7c:14:1c:0d:99:45:ff:b1:40 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=dcef58d4cfa35543f8488a2756e6924e647b4589 Validity Not Before: Aug 4 02:00:48 2025 GMT Not After : Aug 5 02:00:48 2025 GMT Subject: CN=3cc6ad13c0f80fe20c131eee997301a6c7477ba1 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:ed:6c:31:a9:fa:ca:06:ed:1c:29:df:8b:d6:51: 1e:f7:7d:eb:33:66:56:a0:b9:38:78:c0:e4:a6:1a: 11:30:0a:aa:6f:79:2d:08:d4:a1:cf:d7:76:a4:c3: 85:ca:b2:1d:e1:ae:ab:45:36:8a:88:32:3e:4b:44: 8e:78:8c:47:35:36:0a:52:c1:7d:8e:ae:15:8b:2f: 9f:a2:34:4a:d2:95:80:12:6c:6c:ef:44:d9:f2:9f: cf:aa:0e:b0:fb:6a:69:16:2a:47:63:de:fc:6d:f9: f1:d5:51:b2:e0:f2:e9:ce:da:8c:22:e9:9c:a7:72: 21:d4:14:6a:4d:ba:2d:0d:b1:b7:e9:cc:d6:5c:b9: 3a:e3:8c:02:c1:b8:2f:62:d8:a9:ef:b4:b2:e5:1b: 01:07:56:10:bf:11:1d:53:45:b4:93:c3:15:fd:15: 66:d5:a5:c7:ea:e5:8a:64:db:15:95:26:c8:d8:65: 12:f9:dc:57:f4:05:e7:8c:06:c6:cf:88:86:01:aa: e3:bd:36:cc:48:77:1f:e9:42:f1:68:92:17:86:b6: 51:f7:95:f7:61:49:22:a6:37:8e:f7:ab:a0:de:5b: c1:4f:91:d0:e2:32:a5:db:c0:ca:a5:a9:c5:e5:cd: f9:de:b8:48:4a:c5:f7:28:d7:99:23:ae:4f:d5:1b: 54:27 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 3C:C6:AD:13:C0:F8:0F:E2:0C:13:1E:EE:99:73:01:A6:C7:47:7B:A1 X509v3 Authority Key Identifier: keyid:DC:EF:58:D4:CF:A3:55:43:F8:48:8A:27:56:E6:92:4E:64:7B:45:89 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/3O9Y1M-jVUP4SIonVuaSTmR7RYk.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/aa/ea4455-7836-44c4-b2a3-2ece04e185c2/1/3O9Y1M-jVUP4SIonVuaSTmR7RYk.mft X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/aa/ea4455-7836-44c4-b2a3-2ece04e185c2/1/3O9Y1M-jVUP4SIonVuaSTmR7RYk.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 71:a8:f6:e4:65:a7:d3:c4:49:ad:2e:c7:32:d9:56:f5:37:88: 96:f7:61:64:a5:e7:65:4b:62:fc:a5:63:7c:1e:25:67:ef:40: fd:79:a1:ec:95:68:f6:ce:10:5c:54:25:3c:60:33:1b:0d:f7: 07:13:89:02:e1:58:f4:a3:43:db:c7:58:7b:92:2e:39:83:a5: c2:70:40:8f:33:ff:04:0f:55:0f:2f:ea:65:a7:56:20:be:2e: 62:11:2a:21:e9:88:97:a6:de:7a:88:f2:e7:54:3e:65:fe:10: 1a:25:c2:ed:7a:1d:91:db:43:db:b0:6f:54:10:c3:69:b2:87: d3:95:1d:fb:58:2a:5f:09:b7:de:5e:54:01:13:c3:73:f3:33: 16:40:6b:52:d3:1c:16:f4:70:cb:1f:c4:ca:0c:75:85:f4:10: cb:c2:ee:6a:38:d7:bd:14:25:b3:61:f5:c3:22:5e:09:56:18: 7e:0f:1a:04:08:7d:38:b6:20:c5:5b:ef:ec:a4:94:5f:e0:de: 97:09:bb:c4:84:8d:36:34:4d:75:4e:7b:86:eb:1f:6f:d1:6d: 68:08:b4:78:c7:36:f4:15:1e:0b:6a:11:76:09:ae:01:ff:80: 10:cc:39:d1:0e:ea:b4:20:8f:1d:c4:4a:5c:c4:a0:61:92:dd: cf:9e:d0:e3 -----BEGIN CERTIFICATE----- MIIFFjCCA/6gAwIBAgISAZhyz1k6g9LLfBQcDZlF/7FAMA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKGRjZWY1OGQ0Y2ZhMzU1NDNmODQ4OGEyNzU2ZTY5MjRlNjQ3 YjQ1ODkwHhcNMjUwODA0MDIwMDQ4WhcNMjUwODA1MDIwMDQ4WjAzMTEwLwYDVQQD EygzY2M2YWQxM2MwZjgwZmUyMGMxMzFlZWU5OTczMDFhNmM3NDc3YmExMIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEA7WwxqfrKBu0cKd+L1lEe933rM2ZW oLk4eMDkphoRMAqqb3ktCNShz9d2pMOFyrId4a6rRTaKiDI+S0SOeIxHNTYKUsF9 jq4Viy+fojRK0pWAEmxs70TZ8p/Pqg6w+2ppFipHY978bfnx1VGy4PLpztqMIumc p3Ih1BRqTbotDbG36czWXLk644wCwbgvYtip77Sy5RsBB1YQvxEdU0W0k8MV/RVm 1aXH6uWKZNsVlSbI2GUS+dxX9AXnjAbGz4iGAarjvTbMSHcf6ULxaJIXhrZR95X3 YUkipjeO96ug3lvBT5HQ4jKl28DKpanF5c353rhISsX3KNeZI65P1RtUJwIDAQAB o4ICIjCCAh4wHQYDVR0OBBYEFDzGrRPA+A/iDBMe7plzAabHR3uhMB8GA1UdIwQY MBaAFNzvWNTPo1VD+EiKJ1bmkk5ke0WJMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvM085WTFNLWpWVVA0U0lvblZ1YVNUbVI3UllrLmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC9hYS9lYTQ0NTUtNzgzNi00NGM0LWIyYTMt MmVjZTA0ZTE4NWMyLzEvM085WTFNLWpWVVA0U0lvblZ1YVNUbVI3UllrLm1mdDCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC9hYS9lYTQ0NTUtNzgzNi00NGM0LWIyYTMtMmVjZTA0ZTE4NWMy LzEvM085WTFNLWpWVVA0U0lvblZ1YVNUbVI3UllrLmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAcaj25GWn 08RJrS7HMtlW9TeIlvdhZKXnZUti/KVjfB4lZ+9A/Xmh7JVo9s4QXFQlPGAzGw33 BxOJAuFY9KND28dYe5IuOYOlwnBAjzP/BA9VDy/qZadWIL4uYhEqIemIl6beeojy 51Q+Zf4QGiXC7XodkdtD27BvVBDDabKH05Ud+1gqXwm33l5UARPDc/MzFkBrUtMc FvRwyx/Eygx1hfQQy8LuajjXvRQls2H1wyJeCVYYfg8aBAh9OLYgxVvv7KSUX+De lwm7xISNNjRNdU57husfb9FtaAi0eMc29BUeC2oRdgmuAf+AEMw50Q7qtCCPHcRK XMSgYZLdz57Q4w== -----END CERTIFICATE-----Generated at Mon Aug 4 11:25:00 2025 by rpki-client