$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/cd/6168d7-946c-4574-91ea-82ad14555eaa/1/mCz4CcDj6OVVL50N0uJ-DdLY2r4.mft File: mCz4CcDj6OVVL50N0uJ-DdLY2r4.mft (raw, json) Hash identifier: BKrmTX1Vv+Y1eCWJYH1d56b1HehXxj87Lr5+0Lq/N94= Subject key identifier: 01:B2:A7:4F:FF:45:C0:6E:90:F6:B0:9A:B9:08:B0:1D:91:1F:A9:C8 Authority key identifier: 98:2C:F8:09:C0:E3:E8:E5:55:2F:9D:0D:D2:E2:7E:0D:D2:D8:DA:BE Certificate issuer: /CN=982cf809c0e3e8e5552f9d0dd2e27e0dd2d8dabe Certificate serial: 019872CFD456AB93377191074805A2573E45 Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/mCz4CcDj6OVVL50N0uJ-DdLY2r4.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/cd/6168d7-946c-4574-91ea-82ad14555eaa/1/mCz4CcDj6OVVL50N0uJ-DdLY2r4.mft Manifest number: 16E9 Signing time: Mon 04 Aug 2025 02:01:19 +0000 Manifest this update: Mon 04 Aug 2025 02:01:19 +0000 Manifest next update: Tue 05 Aug 2025 02:01:19 +0000 Files and hashes: 1: 1-W8fXv0jttdWKlzJAXVxxYtpRug.roa (hash: gpIh638+Fcd1tAei50b0+8GVpPlev9wrd/g4gdASdjg=) 2: 1UWB6DiO5XdV3re-o8rnuoqA6Ms.roa (hash: acQwekWVQZ/8nvJFITjzBnRus/D8fEtyc11Q6KELe7w=) 3: 21_l98tMuuHtah8-s1GQ4s9w80o.roa (hash: kBh4jdwY3MGZ4Pq8reV1XfNIfs+7zVu2WLUGJ+5lgvc=) 4: 4w30D5KawwaEKeLXCLppZs-985Y.roa (hash: D2Lwmoer5qGID/4i5fsaA6M5CcgJmrhikqoV9diBlTk=) 5: 584_8-MCCtntQOfvULwWZs9O7nE.roa (hash: 2qpHd4/GVV0NiG+wogJB5AQCeDp3yyLGq0zIUvBip28=) 6: Brhkd2-auvvZmCyvxy5ORhHeQ6E.roa (hash: g8WF2m4nW9TPwqD2pE0ddCjVXs1fr0m/MHPrZ/Qj2HI=) 7: CnHjgZKNSNMP8dJ_BtYZ7Xo4ZrM.roa (hash: FqQbIRpVOThM0L1uy/AMjORSqSUsS/5+snA6mZqlQAA=) 8: G5bYAs5-DWEC8k2PerkxyvzK3O8.roa (hash: 0wZ64Natb0gIUfylulMGJdNUBBW0kgaRtyK7K218h3k=) 9: IrnlAQa6M1A96HHiDasRUfVGqbQ.roa (hash: xgq5FcKSqvltS9tf8414o9TbLoeW+VIxwonV5uaPruw=) 10: LOKrZEDDVhVnSlJWlOLgQ5nPcM0.roa (hash: 2CeUB6HU9O6IboYshEwLG/p+jYhiKQ64ZtA5Y3idzrs=) 11: LbbsmkI3GqawDuN3XH6acheMxPw.roa (hash: BqWA3SYDAKLfoYVuIlyCld31iNDXkXCl/KtIv69jNUw=) 12: OOYkNDqqDn1Unj3M-yrjf_S9VlU.roa (hash: oCGvjVeC4FC9ueufaA6bhsrNhxHd2pd306IA0XGXLfs=) 13: QJvPeNzFvPANqEbfkIc8-3zDQLs.roa (hash: felyBGjLHZhYiBLtOS5vAZwi9iqRNucwfxHrWgkMpWA=) 14: TrJv_8fKTcS_JBhUlD0AOoYAAQA.roa (hash: f2kfoia7LPQzOEBZN5rSYHh6gWQLd4Eepwr2rpiJk9c=) 15: UlqMdzKNjKKz7GVAWhNQ0GeC6iE.roa (hash: vyjrNuYYOAehZPhyITO+Q5uPp2e1fJC2nVGYypgHEhg=) 16: WJhqTCUN_AjGjAYRDp33eZN0BY4.roa (hash: 06Htmns2yq5ClkGiqHYQcD9sTifSqYU3RXoOiPSPCkE=) 17: azJgsmdTDF3ELk-I19mAROWoKeE.roa (hash: oh/dgWtIFhqfW7S9fR3cOqTRk0csYkiTH2ALt2aoNhQ=) 18: eChAGDbdQGMbx-CgEa8ktTddF6A.roa (hash: WaY78nyI3A8kBY4pFd0TG8ZJI0s+NCkhF+OV6SV5Crw=) 19: gN00iWVZ4X9ImdixtPXeB88eR_k.roa (hash: DPVgneYPbYS00UaxJyd5C7zkqYJRRcPWgn4xBTn6bHk=) 20: gnHztlWIUEkbfP_VpJDgy1aZ-q8.roa (hash: 8IEq5Il4ymKT0XR1RNf3aEeBm7YPqbccSq4VWhr/cXU=) 21: mCz4CcDj6OVVL50N0uJ-DdLY2r4.crl (hash: xNs+vW1K3tSOuM7/L4N/UnfkBuuLbQu+yRLk3CIh7aw=) 22: owD2F5PTIfIuOH1ResHlD6bHqfw.roa (hash: FwwD5nwDxuakINFZYh01TzvwO9abW6HL7q42RgazHtQ=) 23: qjM14mHgk1Edy0idzb8PcMe4oBE.roa (hash: pcsI+0E79qmlWXPdLST7nM+67d24tKTfwvx2fxrvqMw=) 24: s5Ai9g5eYYL8Bgx7ZWiTovq-xxE.roa (hash: BtApyhPvW43mqLBFeRPcKdPRw6DTk5KYzme6TZtVXns=) 25: sW7iMiWbwjQZ4JTr9eqMstrH0fY.roa (hash: fl3fF4gUVsev8QdVZnLOIu5u/5rzRWGxzrZRrAPXabs=) 26: tdG4gwbiCDTl2DZU4EFrqi-57Fc.roa (hash: HXWAwqtUcnHFWl+ei5dmWCUQV5Bz5IiYmO9iAB6ydxI=) 27: w23_TR4dcsNa31LTX8HVMLWRN_w.roa (hash: rfdkH9NAgBWGbrUS8/d8Rmrz5XY4u8KepKOXwjiNknw=) 28: wWRDfWHup1u0k3UjICPfUYIPuSY.roa (hash: yzH1M2v1GGWQRBkb4bWaRfefbh3n4eH1xoy+GhWge5A=) 29: wYxMdXSUEDjU1Cv3_j8xQDvi1yg.roa (hash: WyaQu0KrdFh/xZS6g5xHvbw77OL9Wai9qSXwo4Oty1g=) 30: xeXsIqRyNQ8tCJjLiS_SWkibat0.roa (hash: JByqNQHgtIum6mQVh/2h0Z7sUMkRsbp23RZvkf78Q8U=) 31: zA8L3Jvv9SEACC4CD6D8SPMP2Sk.roa (hash: Tngvw9PMaTEzEGc2VaqgRFM8azKZIG82ga5hio7GHN8=) Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/cd/6168d7-946c-4574-91ea-82ad14555eaa/1/mCz4CcDj6OVVL50N0uJ-DdLY2r4.crl rsync://rpki.ripe.net/repository/DEFAULT/cd/6168d7-946c-4574-91ea-82ad14555eaa/1/mCz4CcDj6OVVL50N0uJ-DdLY2r4.mft rsync://rpki.ripe.net/repository/DEFAULT/mCz4CcDj6OVVL50N0uJ-DdLY2r4.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Mon 04 Aug 2025 18:00:28 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:98:72:cf:d4:56:ab:93:37:71:91:07:48:05:a2:57:3e:45 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=982cf809c0e3e8e5552f9d0dd2e27e0dd2d8dabe Validity Not Before: Aug 4 02:01:19 2025 GMT Not After : Aug 5 02:01:19 2025 GMT Subject: CN=01b2a74fff45c06e90f6b09ab908b01d911fa9c8 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:b2:61:9f:f1:e6:ce:6a:c8:ff:ad:f1:7b:93:3f: 03:f7:51:1c:53:a7:cd:e4:a6:c9:a4:9f:ed:40:46: 7c:0c:f5:57:71:cf:b0:23:c6:30:9c:27:cb:5d:79: fe:de:18:43:d4:89:ad:4e:6b:0d:5c:5e:d7:26:ed: 6f:5d:1e:66:0d:59:dd:20:ef:3c:5d:97:1c:15:2b: 9e:15:b7:d5:76:6f:8b:2d:92:fb:99:79:4c:9e:49: a8:4a:32:a6:a6:77:f9:dd:8c:38:ac:d1:b3:a8:e1: 52:93:67:06:b2:09:b2:6e:2e:42:77:cf:f6:cb:1f: d3:f5:56:fe:8b:ac:26:db:d0:4d:78:18:26:9e:f8: e9:6c:c7:81:57:ff:e1:d3:a1:b8:a5:6e:42:5b:99: 0c:82:86:ec:a1:4f:1c:a1:ff:ac:be:41:7a:53:22: bc:75:4e:d2:7c:b8:24:95:20:cd:7b:00:42:e0:02: 1a:29:28:76:17:b2:89:01:82:ec:74:ff:a3:9f:89: ab:1c:b7:09:9b:f1:0e:44:59:67:e3:91:27:70:8b: d8:41:fb:fc:0d:48:fc:3c:30:3c:a6:24:82:ac:07: bd:d2:a0:cd:d6:e9:86:83:02:ae:e9:e7:d4:a1:59: 28:f5:0d:91:38:15:32:38:69:77:54:15:0d:d2:08: 5d:71 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 01:B2:A7:4F:FF:45:C0:6E:90:F6:B0:9A:B9:08:B0:1D:91:1F:A9:C8 X509v3 Authority Key Identifier: keyid:98:2C:F8:09:C0:E3:E8:E5:55:2F:9D:0D:D2:E2:7E:0D:D2:D8:DA:BE X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/mCz4CcDj6OVVL50N0uJ-DdLY2r4.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/cd/6168d7-946c-4574-91ea-82ad14555eaa/1/mCz4CcDj6OVVL50N0uJ-DdLY2r4.mft X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/cd/6168d7-946c-4574-91ea-82ad14555eaa/1/mCz4CcDj6OVVL50N0uJ-DdLY2r4.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 65:82:37:ae:ea:ec:f8:e3:6b:99:ea:96:d7:7e:95:3c:6a:73: b8:bf:03:b3:02:40:2e:f0:3c:87:51:80:7c:f2:5f:2a:20:f9: 33:a3:67:25:20:d2:90:05:68:fa:d9:e2:31:27:26:34:ec:45: 0e:11:4b:ec:27:ec:2c:55:f9:76:97:b2:b0:ad:19:c2:d5:54: c9:60:df:09:d3:38:6f:8b:f4:bb:c1:24:ea:59:88:4f:3a:4d: c3:f0:03:3b:7d:35:95:83:09:95:d3:2d:be:1f:08:62:9c:71: 7f:e6:4d:28:43:82:53:03:29:58:d2:5b:ea:c3:c0:7e:5c:d1: e0:fb:4b:e5:fa:74:bb:37:ca:2a:68:71:d9:43:a4:ae:73:e6: 12:f7:30:00:fa:a1:21:b4:0c:c3:cc:c5:05:65:4b:4f:52:de: 28:f7:c5:c2:79:27:82:bd:4c:2f:3c:ea:cd:87:3a:82:95:6b: 98:db:35:a4:01:16:2d:17:4a:d0:d8:f5:2c:fe:2d:0b:b2:26: f1:85:ae:f9:e4:a1:f3:10:d0:26:5e:97:d3:41:33:8c:79:06: a9:8b:03:08:b6:a5:e6:92:22:3d:ed:c0:82:3b:b2:15:87:88: 35:a5:d9:38:28:18:4a:cb:cc:11:6a:d6:1b:55:fd:4c:4a:56: ab:17:c7:d3 -----BEGIN CERTIFICATE----- MIIFFjCCA/6gAwIBAgISAZhyz9RWq5M3cZEHSAWiVz5FMA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKDk4MmNmODA5YzBlM2U4ZTU1NTJmOWQwZGQyZTI3ZTBkZDJk OGRhYmUwHhcNMjUwODA0MDIwMTE5WhcNMjUwODA1MDIwMTE5WjAzMTEwLwYDVQQD EygwMWIyYTc0ZmZmNDVjMDZlOTBmNmIwOWFiOTA4YjAxZDkxMWZhOWM4MIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAsmGf8ebOasj/rfF7kz8D91EcU6fN 5KbJpJ/tQEZ8DPVXcc+wI8YwnCfLXXn+3hhD1ImtTmsNXF7XJu1vXR5mDVndIO88 XZccFSueFbfVdm+LLZL7mXlMnkmoSjKmpnf53Yw4rNGzqOFSk2cGsgmybi5Cd8/2 yx/T9Vb+i6wm29BNeBgmnvjpbMeBV//h06G4pW5CW5kMgobsoU8cof+svkF6UyK8 dU7SfLgklSDNewBC4AIaKSh2F7KJAYLsdP+jn4mrHLcJm/EORFln45EncIvYQfv8 DUj8PDA8piSCrAe90qDN1umGgwKu6efUoVko9Q2ROBUyOGl3VBUN0ghdcQIDAQAB o4ICIjCCAh4wHQYDVR0OBBYEFAGyp0//RcBukPawmrkIsB2RH6nIMB8GA1UdIwQY MBaAFJgs+AnA4+jlVS+dDdLifg3S2Nq+MA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvbUN6NENjRGo2T1ZWTDUwTjB1Si1EZExZMnI0LmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC9jZC82MTY4ZDctOTQ2Yy00NTc0LTkxZWEt ODJhZDE0NTU1ZWFhLzEvbUN6NENjRGo2T1ZWTDUwTjB1Si1EZExZMnI0Lm1mdDCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC9jZC82MTY4ZDctOTQ2Yy00NTc0LTkxZWEtODJhZDE0NTU1ZWFh LzEvbUN6NENjRGo2T1ZWTDUwTjB1Si1EZExZMnI0LmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAZYI3rurs +ONrmeqW136VPGpzuL8DswJALvA8h1GAfPJfKiD5M6NnJSDSkAVo+tniMScmNOxF DhFL7CfsLFX5dpeysK0ZwtVUyWDfCdM4b4v0u8Ek6lmITzpNw/ADO301lYMJldMt vh8IYpxxf+ZNKEOCUwMpWNJb6sPAflzR4PtL5fp0uzfKKmhx2UOkrnPmEvcwAPqh IbQMw8zFBWVLT1LeKPfFwnkngr1MLzzqzYc6gpVrmNs1pAEWLRdK0Nj1LP4tC7Im 8YWu+eSh8xDQJl6X00EzjHkGqYsDCLal5pIiPe3AgjuyFYeINaXZOCgYSsvMEWrW G1X9TEpWqxfH0w== -----END CERTIFICATE-----Generated at Mon Aug 4 03:57:57 2025 by rpki-client