$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/ed/428815-02b9-4606-b066-65d1567340fd/1/aZHFbxGnFxxhUyOXafVXvroQGC0.mft File: aZHFbxGnFxxhUyOXafVXvroQGC0.mft (raw, json) Hash identifier: ic45wuysa44ouvSOYL2kdTdQL2bQlWCUOtkKyOZfgAE= Subject key identifier: 06:66:3A:73:5F:C7:65:69:48:B1:EC:FA:D8:B4:C3:D5:FC:D7:19:03 Authority key identifier: 69:91:C5:6F:11:A7:17:1C:61:53:23:97:69:F5:57:BE:BA:10:18:2D Certificate issuer: /CN=6991c56f11a7171c6153239769f557beba10182d Certificate serial: 01987E6641688531CBEDCAE8DA186B6BF0D1 Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/aZHFbxGnFxxhUyOXafVXvroQGC0.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/ed/428815-02b9-4606-b066-65d1567340fd/1/aZHFbxGnFxxhUyOXafVXvroQGC0.mft Manifest number: 0989 Signing time: Wed 06 Aug 2025 08:01:27 +0000 Manifest this update: Wed 06 Aug 2025 08:01:27 +0000 Manifest next update: Thu 07 Aug 2025 08:01:27 +0000 Files and hashes: 1: 0ZnUbFz494YaFYXrrvpst6o3vps.roa (hash: OVgxGJmRNj8L4Akc46yjqXSfo2J2UzOCk6rafbqc2OA=) 2: 2R9OObFNaEDkANSZ-coBJRfRpcg.roa (hash: PuD3VMT0jUQBkYxsd7Ldnl6ZWhsJPerlMMUp2zMDWgw=) 3: 3B48XSzrqRQbODZNf87x_kjUhNo.roa (hash: y14T24Ofee6GJVa1mI4/7qxhdq0jl8KEydSAoin8Qhg=) 4: 4Big0S_3eVdxzCi9Q5-ZazqY78k.roa (hash: MZj2ZauIX6SjNg/AhkH3xRZrKv7KoBeknyWj0YQB2/w=) 5: 5KCmcBzgBtGKXXIdhXDGwgQX-Nc.roa (hash: 3MBj03+qouTWcvDDud6sW23ZkQ0DtRDfsHdVwPfcmzA=) 6: BnuRCNG1wcVZgzYhH3AO0QDn6nc.roa (hash: MelnLA0AceokIL7fTEiXdw1iO6Uw+ZhvD5k8pRZYCyE=) 7: GzbjpWWbs-1PqotRsV09E9K9Lz4.roa (hash: DPdOn5R31znLhVjpEt/89hnY5IoUTo1sHiV7ubrKX6Q=) 8: IR0N93wyt194hpjTT9eshHBGwCY.roa (hash: hm8stnovqLivJRd1Zt72YsNy0Lv8colWOGD8fUtYhVw=) 9: Ipr3KewOoeNwtKcMjwWhhMZ4XGk.roa (hash: 3JCwXXZ0yyhMNw7g8hWZGcEbqAf0RiAf0XwSMEKW1/k=) 10: KulVakBvwbVv5xXObvn_Py6ECrk.roa (hash: LBTjWC3x61Ugle7Tbb8SnIfRkRrHBdl2y6NzyWWyUR8=) 11: LiReZTb5eM73wM_EtDaxcTNj4Uc.roa (hash: VxzmF2kcB0hEh+Og8NMqll1d/dM5T/PwiOdBSWMF9+w=) 12: NdAX7Rrn7y-KonnG7TF23wCnJFU.roa (hash: 1r3koUbwGBNgbjNaxMGO8L4AUL4EQ4uI3dkO8TUFqEA=) 13: NxKKuEIzsEe5p3RwQBZ8j63Lsc4.roa (hash: mOT2nWmKWDEZ1VeM86bS3Qx+tjUuZhaB/QcxGF5t7y4=) 14: OxLywK9-WD8ykiaZCQkg8aVcCjY.roa (hash: iXcObwE6BigOurV7fYooDfgc8zyVyQ+nTBGFkUMqd08=) 15: PGgQA4lq16a2A-WgJ_ri64lGsRE.roa (hash: Q6QSZCDfq8qNTpDtgedLOR/KuDwL2RUnCSAMtaotxEg=) 16: Qjyx-VfeYJzhQ64OO3GeexbDjpo.roa (hash: rj+IOmmZrJFH/pGr6IiDQ9M39qURzS3Ek11UjeILldM=) 17: US4urt8SGYSwI0nrEmSfY23OtMo.roa (hash: WGkLaX+bRS10FeqEfnkw5XXJQ/dEDlUw6wG2fIeU7p0=) 18: UbTczMXH1DXAp6Y4rzAMo0-vjMY.roa (hash: /5fKT3FRRFYWFa0s/Qas8JVmnywA6hIsUQs3iIAfCSc=) 19: V9MunteQeVICf2ICr71lxQH0Fho.roa (hash: eyd5tdJUMOhtnb51XXGrnbSnVth9KptYyQQSksmwF/U=) 20: Xk5tmPIosW8yWOoBE4vC97DKTmI.roa (hash: n+WSuCldCqJF0J/zIrAAsy8W1NaktFT44ojEQwTF8/A=) 21: Y8kVBgTTg77JqceZAx8eeOkuigc.roa (hash: IFdbCND0Hr2WHlrHfsppyOn82/Cdt+j+/f3Y4nRrJM0=) 22: ZiD-MY3nOuLXzR9RDg6huulrUtA.roa (hash: psjzBFQxt80JPQCyicrTYbpG7+HkCyyCB+fL0q+8TEU=) 23: a75rOpjpaPa3RoX99f00xHpyQQk.roa (hash: pBUN5kZ0kemGdrUfIg4JmP66bIvq4vhJcqUtu9xb4uk=) 24: aZHFbxGnFxxhUyOXafVXvroQGC0.crl (hash: kAlhqw1RjYIA7HaEC6xG+vUnqtWrA+uMynhybqnXAhc=) 25: cxoHocYfpOLbmWm9vZdeuztX1mM.roa (hash: n6b1cBbTDRO9vvH+MGVzzJhRTNkNJBd2SHTwJhIHGMM=) 26: gt8flTD_zJibygdA8dyeuF1l6X4.roa (hash: aubI8iptMgWbWF9zUBH11nChoCQulzBZponMqronaCU=) 27: h8jROV5bQoENdkPdOHcG_4qWdVY.roa (hash: glJfimln9Noz47bXSrY5ZJrPDNDjmCoZp6sAhb5XR58=) 28: mqFZ_6poK042LnYArfefb64YNZQ.roa (hash: z+bsA4ZcDvX2JPMlTZwVkKpOQPowKJ3wnhxnQ/pVUXU=) 29: r72MZC6TP9HFp69hVblH2z8aLDw.roa (hash: 60a58tQ14AuL0odo9HIWNyGRLIp51J3Om0fY3oCEnBg=) 30: wyYtlqseGv6gXQkCTy30WJ-H2eE.roa (hash: 0/U6xWPb4mk6ryPiHh563SCZx0Tww+D7flQW+39Amak=) Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/ed/428815-02b9-4606-b066-65d1567340fd/1/aZHFbxGnFxxhUyOXafVXvroQGC0.crl rsync://rpki.ripe.net/repository/DEFAULT/ed/428815-02b9-4606-b066-65d1567340fd/1/aZHFbxGnFxxhUyOXafVXvroQGC0.mft rsync://rpki.ripe.net/repository/DEFAULT/aZHFbxGnFxxhUyOXafVXvroQGC0.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Thu 07 Aug 2025 08:00:28 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:98:7e:66:41:68:85:31:cb:ed:ca:e8:da:18:6b:6b:f0:d1 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=6991c56f11a7171c6153239769f557beba10182d Validity Not Before: Aug 6 08:01:27 2025 GMT Not After : Aug 7 08:01:27 2025 GMT Subject: CN=06663a735fc7656948b1ecfad8b4c3d5fcd71903 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:b9:7d:34:42:f4:71:ff:e2:59:8c:87:c1:51:ca: c4:62:3c:03:8c:83:f5:a9:61:13:47:3b:8d:cd:b8: 0f:04:34:3c:72:37:7e:d5:0e:66:48:7d:cc:eb:e5: a1:35:0c:cb:64:44:ba:ca:d9:15:85:67:c1:32:82: c9:33:f6:c4:af:8f:5d:63:72:5c:9f:2c:fb:5f:05: 03:8d:b2:e7:b3:11:f3:21:0e:21:0b:3a:a4:12:18: 90:0a:cc:95:fe:0f:fc:66:b8:6d:74:5b:84:ed:60: a3:53:62:9e:8f:7f:5e:bf:10:de:0e:95:61:b8:d7: 46:49:36:d5:cc:d2:24:2f:39:5b:33:51:db:76:45: 8d:51:c7:5b:a8:ac:3f:2f:c6:fe:11:ca:e2:5c:5e: 2c:95:9e:c1:6d:0f:79:ed:a0:ab:c0:3d:dc:e2:be: 51:ec:c2:86:b4:ce:fc:5a:b5:79:5e:8c:15:d9:1c: d2:4d:35:d7:39:28:99:23:13:7a:e2:dd:fa:a8:c0: 6f:6f:2a:05:43:db:43:4a:a2:9a:5e:74:df:35:6f: 85:d6:06:6d:65:a4:79:5b:58:05:fb:8f:87:2f:9e: 38:51:13:c2:7c:cc:7a:7d:60:4d:44:22:a9:0b:9d: 2e:df:b7:eb:f4:40:09:9a:a2:32:42:01:2e:fb:33: 5a:95 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 06:66:3A:73:5F:C7:65:69:48:B1:EC:FA:D8:B4:C3:D5:FC:D7:19:03 X509v3 Authority Key Identifier: keyid:69:91:C5:6F:11:A7:17:1C:61:53:23:97:69:F5:57:BE:BA:10:18:2D X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/aZHFbxGnFxxhUyOXafVXvroQGC0.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/ed/428815-02b9-4606-b066-65d1567340fd/1/aZHFbxGnFxxhUyOXafVXvroQGC0.mft X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/ed/428815-02b9-4606-b066-65d1567340fd/1/aZHFbxGnFxxhUyOXafVXvroQGC0.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 27:49:48:b8:ad:4b:32:63:91:f2:41:06:f4:b9:22:0b:ae:68: 34:a3:87:ea:bd:13:e2:dc:64:39:70:37:64:ac:83:52:1c:83: ec:ed:ea:26:ce:d7:b1:1d:d4:56:cb:5b:47:5f:be:1e:c5:66: 26:53:33:01:68:bd:33:35:38:b9:88:18:72:1e:ba:16:7c:28: f2:6b:05:1e:37:5f:2f:67:2c:70:f3:c7:04:71:13:da:7b:fe: 69:57:7a:e4:2e:17:c3:f9:b1:73:93:6c:a4:70:43:17:c1:fc: 0d:99:29:a1:0f:7b:42:35:76:74:9b:85:56:42:a8:a8:9d:d2: 0a:0a:f5:f9:b0:a9:f6:98:51:c9:b4:d8:9e:92:cb:f9:38:fe: 61:b8:c6:07:c8:c1:0e:16:92:c9:90:5a:8d:36:da:01:55:36: 96:eb:f2:d9:c5:b5:e5:48:51:5c:46:0b:ab:91:db:e1:a6:37: 37:ba:56:fe:58:70:e7:e5:55:e0:aa:08:ab:51:24:bd:e4:1b: a2:d2:10:9a:bc:c5:6d:2f:5e:c1:9b:b6:3d:2f:43:7c:35:90: b3:7c:6d:29:7b:5d:ed:f2:f7:c2:79:e7:27:f7:50:9d:6a:a2: 3d:6a:4b:c1:5f:84:08:c3:79:25:38:29:2b:4e:13:06:97:25: 33:29:e8:0b -----BEGIN CERTIFICATE----- MIIFFjCCA/6gAwIBAgISAZh+ZkFohTHL7cro2hhra/DRMA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKDY5OTFjNTZmMTFhNzE3MWM2MTUzMjM5NzY5ZjU1N2JlYmEx MDE4MmQwHhcNMjUwODA2MDgwMTI3WhcNMjUwODA3MDgwMTI3WjAzMTEwLwYDVQQD EygwNjY2M2E3MzVmYzc2NTY5NDhiMWVjZmFkOGI0YzNkNWZjZDcxOTAzMIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAuX00QvRx/+JZjIfBUcrEYjwDjIP1 qWETRzuNzbgPBDQ8cjd+1Q5mSH3M6+WhNQzLZES6ytkVhWfBMoLJM/bEr49dY3Jc nyz7XwUDjbLnsxHzIQ4hCzqkEhiQCsyV/g/8ZrhtdFuE7WCjU2Kej39evxDeDpVh uNdGSTbVzNIkLzlbM1HbdkWNUcdbqKw/L8b+EcriXF4slZ7BbQ957aCrwD3c4r5R 7MKGtM78WrV5XowV2RzSTTXXOSiZIxN64t36qMBvbyoFQ9tDSqKaXnTfNW+F1gZt ZaR5W1gF+4+HL544URPCfMx6fWBNRCKpC50u37fr9EAJmqIyQgEu+zNalQIDAQAB o4ICIjCCAh4wHQYDVR0OBBYEFAZmOnNfx2VpSLHs+ti0w9X81xkDMB8GA1UdIwQY MBaAFGmRxW8RpxccYVMjl2n1V766EBgtMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvYVpIRmJ4R25GeHhoVXlPWGFmVlh2cm9RR0MwLmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC9lZC80Mjg4MTUtMDJiOS00NjA2LWIwNjYt NjVkMTU2NzM0MGZkLzEvYVpIRmJ4R25GeHhoVXlPWGFmVlh2cm9RR0MwLm1mdDCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC9lZC80Mjg4MTUtMDJiOS00NjA2LWIwNjYtNjVkMTU2NzM0MGZk LzEvYVpIRmJ4R25GeHhoVXlPWGFmVlh2cm9RR0MwLmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAJ0lIuK1L MmOR8kEG9LkiC65oNKOH6r0T4txkOXA3ZKyDUhyD7O3qJs7XsR3UVstbR1++HsVm JlMzAWi9MzU4uYgYch66Fnwo8msFHjdfL2cscPPHBHET2nv+aVd65C4Xw/mxc5Ns pHBDF8H8DZkpoQ97QjV2dJuFVkKoqJ3SCgr1+bCp9phRybTYnpLL+Tj+YbjGB8jB DhaSyZBajTbaAVU2luvy2cW15UhRXEYLq5Hb4aY3N7pW/lhw5+VV4KoIq1EkveQb otIQmrzFbS9ewZu2PS9DfDWQs3xtKXtd7fL3wnnnJ/dQnWqiPWpLwV+ECMN5JTgp K04TBpclMynoCw== -----END CERTIFICATE-----Generated at Wed Aug 6 10:13:54 2025 by rpki-client