$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/07/0c6f47-4713-4471-b08f-a4213c93f1f7/1/cG06u7R4t07yre-bt8QzbjQRHVE.mft File: cG06u7R4t07yre-bt8QzbjQRHVE.mft (raw, json) Hash identifier: xNVBbRIRVXc8munmGLaTD7S0HXM+uEEaUlNfXcSMWBM= Subject key identifier: D3:4F:A0:63:5B:2C:B5:E3:F9:71:30:84:1E:E4:F2:74:DC:FF:2C:9D Authority key identifier: 70:6D:3A:BB:B4:78:B7:4E:F2:AD:EF:9B:B7:C4:33:6E:34:11:1D:51 Certificate issuer: /CN=706d3abbb478b74ef2adef9bb7c4336e34111d51 Certificate serial: 019A4EBD45C1AEA0DEB1E8A11F687C773F5A Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/cG06u7R4t07yre-bt8QzbjQRHVE.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/07/0c6f47-4713-4471-b08f-a4213c93f1f7/1/cG06u7R4t07yre-bt8QzbjQRHVE.mft Manifest number: 10F4 Signing time: Tue 04 Nov 2025 12:00:18 +0000 Manifest this update: Tue 04 Nov 2025 12:00:18 +0000 Manifest next update: Wed 05 Nov 2025 12:00:18 +0000 Files and hashes: 1: 1-DdA-do2aUnfFDViNUxhUDqFzbE.roa (hash: BKYK/ZWsPHxxlNPF0PEHOjs0OjsXKAGuBICEBJN+sBU=) 2: PquNLopkqyd1FPkE6lVSuFZAhHk.roa (hash: cueg/ECXevtubCCHF8NReS6so4hgNR13sPfAmLWyFN8=) 3: SKahOuz63VxzF7gsfLLtP4-dwsQ.roa (hash: tgpfEWxbjIJhXJgvlYzjtjMs+efIHb2DWjDR4Pl22YM=) 4: Y87LNPXwYxzM1KbDSMEARR-tLxU.roa (hash: Hc9P0WIM13wsCCDXXb34wAtaFccE9wg34ig8vLvBeGY=) 5: cG06u7R4t07yre-bt8QzbjQRHVE.crl (hash: XjwXplmftg4GAQdWa7z3vrAwbQg5kPAKnlUWn6uckiQ=) 6: dj7XdZh5KETFPQnDms3UxXnRXC4.roa (hash: EpSZ3YEAtJm35+lis2XvA9ik+aj1Kz53yBaF/oXDmdQ=) 7: nq4bzy4h6lHvAq7WfQfvLT3Lcxs.roa (hash: AUW0hCwolQea98JTwSo4ol+MpnG7tQ7XKxKB7k262zg=) 8: pnzGJ4U9axy4lLwZnaehAwpRVaQ.roa (hash: rLQUf7uZTpB79YDcuBoB9yRmzU3aEUgIa9XP7frMy3M=) 9: rIEcC1yrrtWRE_-aC4aiNaHlF0w.roa (hash: RIIBfBGrMJNxseu/gjjvLy+xu6nPcaesVv59+v9lv30=) 10: wF16Isbo0PTlUouJULLf9fQs6Jw.roa (hash: ujnMHiwDZPQLz7IHlGLCJr2Hydzywx1acJmP/oG/nU8=) Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/07/0c6f47-4713-4471-b08f-a4213c93f1f7/1/cG06u7R4t07yre-bt8QzbjQRHVE.crl rsync://rpki.ripe.net/repository/DEFAULT/07/0c6f47-4713-4471-b08f-a4213c93f1f7/1/cG06u7R4t07yre-bt8QzbjQRHVE.mft rsync://rpki.ripe.net/repository/DEFAULT/cG06u7R4t07yre-bt8QzbjQRHVE.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Wed 05 Nov 2025 09:00:03 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9a:4e:bd:45:c1:ae:a0:de:b1:e8:a1:1f:68:7c:77:3f:5a Signature Algorithm: sha256WithRSAEncryption Issuer: CN=706d3abbb478b74ef2adef9bb7c4336e34111d51 Validity Not Before: Nov 4 12:00:18 2025 GMT Not After : Nov 5 12:00:18 2025 GMT Subject: CN=d34fa0635b2cb5e3f97130841ee4f274dcff2c9d Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:ca:e5:7f:f6:0e:ee:9a:04:7d:f0:4f:d0:b6:5b: 5c:30:ac:55:55:93:83:e2:4d:d1:2f:30:e2:a1:cc: 35:d3:0f:0b:b6:1d:f3:a0:2c:e2:ca:e1:1a:99:27: 35:63:69:d3:0d:61:30:a1:98:6a:76:e5:5b:22:95: 65:3c:bd:cd:2b:12:44:48:ad:e1:34:75:16:88:49: 1e:90:cd:84:f8:61:d9:f6:08:ee:a9:cd:96:c5:44: 67:12:69:c6:17:c7:d0:31:22:92:73:09:86:92:d8: 11:87:8d:14:b7:48:ae:f9:20:6a:48:66:a9:dd:71: 55:df:49:5c:65:65:58:80:8b:d0:ef:31:ca:29:d7: 5a:e9:19:4d:9b:fc:2c:5d:ee:14:ad:46:14:06:04: dd:ea:ad:cc:32:f6:4f:61:7b:0b:7c:ec:7c:a0:c3: a7:23:8e:d2:ea:49:0d:00:b3:64:cc:80:ab:22:9a: 18:c9:e2:fe:c1:5f:32:be:e1:7e:e2:ff:96:6e:88: 2e:2d:e6:5e:c9:b9:0e:19:b1:06:7a:57:f9:f4:a7: 72:ec:55:75:16:fe:31:c9:f7:4c:f3:b7:7e:79:f8: ca:13:1d:3d:2c:0f:3d:c7:66:e8:b8:5d:79:b4:43: d0:cf:40:f6:59:ee:6a:f3:34:ed:0f:8f:ff:e5:2c: fc:af Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: D3:4F:A0:63:5B:2C:B5:E3:F9:71:30:84:1E:E4:F2:74:DC:FF:2C:9D X509v3 Authority Key Identifier: keyid:70:6D:3A:BB:B4:78:B7:4E:F2:AD:EF:9B:B7:C4:33:6E:34:11:1D:51 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/cG06u7R4t07yre-bt8QzbjQRHVE.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/07/0c6f47-4713-4471-b08f-a4213c93f1f7/1/cG06u7R4t07yre-bt8QzbjQRHVE.mft X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/07/0c6f47-4713-4471-b08f-a4213c93f1f7/1/cG06u7R4t07yre-bt8QzbjQRHVE.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption c3:54:b9:ad:50:6f:65:ac:e3:04:c4:f6:af:d8:1d:f7:9d:25: c6:f0:af:a7:85:50:1b:ac:38:59:e6:7d:47:31:cd:92:35:26: ff:ee:27:9b:32:63:dd:86:9c:52:99:a0:a0:50:8a:e7:e5:db: 83:40:ad:d3:6e:fd:63:59:70:8d:e8:e7:0b:26:f9:a7:b8:d2: 3e:df:0d:50:da:ee:f0:c5:41:51:d8:56:34:3d:b6:a9:cf:9e: 52:df:85:3b:b7:8f:d3:08:93:ab:20:c8:27:58:fe:0c:e6:a4: d4:94:a1:62:b8:f6:9a:31:9c:17:c9:d7:1e:7c:17:30:cf:39: ea:65:bd:3b:9e:99:c6:20:46:15:95:b1:3d:dc:89:63:6e:5b: 13:53:a8:76:10:61:02:7c:ef:f9:f1:7e:d5:b2:ff:74:a6:98: 61:95:29:13:ef:34:d4:11:da:36:08:27:5e:da:e2:cc:5e:3d: 01:8d:86:84:ca:31:56:d5:77:59:36:95:ca:96:78:84:d1:b2: 3f:f3:53:99:51:41:48:59:c1:4d:87:95:03:4e:f3:0d:94:cc: 70:31:68:b6:7d:81:cc:83:82:6c:f3:0d:1d:c0:37:d2:d4:a4: b5:18:b3:72:1e:4d:d3:88:fd:9f:4c:86:90:bb:b6:d3:35:2d: 80:5d:91:92 -----BEGIN CERTIFICATE----- MIIFFjCCA/6gAwIBAgISAZpOvUXBrqDeseihH2h8dz9aMA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKDcwNmQzYWJiYjQ3OGI3NGVmMmFkZWY5YmI3YzQzMzZlMzQx MTFkNTEwHhcNMjUxMTA0MTIwMDE4WhcNMjUxMTA1MTIwMDE4WjAzMTEwLwYDVQQD EyhkMzRmYTA2MzViMmNiNWUzZjk3MTMwODQxZWU0ZjI3NGRjZmYyYzlkMIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAyuV/9g7umgR98E/QtltcMKxVVZOD 4k3RLzDiocw10w8Lth3zoCziyuEamSc1Y2nTDWEwoZhqduVbIpVlPL3NKxJESK3h NHUWiEkekM2E+GHZ9gjuqc2WxURnEmnGF8fQMSKScwmGktgRh40Ut0iu+SBqSGap 3XFV30lcZWVYgIvQ7zHKKdda6RlNm/wsXe4UrUYUBgTd6q3MMvZPYXsLfOx8oMOn I47S6kkNALNkzICrIpoYyeL+wV8yvuF+4v+WboguLeZeybkOGbEGelf59Kdy7FV1 Fv4xyfdM87d+efjKEx09LA89x2bouF15tEPQz0D2We5q8zTtD4//5Sz8rwIDAQAB o4ICIjCCAh4wHQYDVR0OBBYEFNNPoGNbLLXj+XEwhB7k8nTc/yydMB8GA1UdIwQY MBaAFHBtOru0eLdO8q3vm7fEM240ER1RMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvY0cwNnU3UjR0MDd5cmUtYnQ4UXpialFSSFZFLmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC8wNy8wYzZmNDctNDcxMy00NDcxLWIwOGYt YTQyMTNjOTNmMWY3LzEvY0cwNnU3UjR0MDd5cmUtYnQ4UXpialFSSFZFLm1mdDCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC8wNy8wYzZmNDctNDcxMy00NDcxLWIwOGYtYTQyMTNjOTNmMWY3 LzEvY0cwNnU3UjR0MDd5cmUtYnQ4UXpialFSSFZFLmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAw1S5rVBv ZazjBMT2r9gd950lxvCvp4VQG6w4WeZ9RzHNkjUm/+4nmzJj3YacUpmgoFCK5+Xb g0Ct0279Y1lwjejnCyb5p7jSPt8NUNru8MVBUdhWND22qc+eUt+FO7eP0wiTqyDI J1j+DOak1JShYrj2mjGcF8nXHnwXMM856mW9O56ZxiBGFZWxPdyJY25bE1OodhBh Anzv+fF+1bL/dKaYYZUpE+801BHaNggnXtrizF49AY2GhMoxVtV3WTaVypZ4hNGy P/NTmVFBSFnBTYeVA07zDZTMcDFotn2BzIOCbPMNHcA30tSktRizch5N04j9n0yG kLu20zUtgF2Rkg== -----END CERTIFICATE-----Generated at Tue Nov 4 18:00:04 2025 by rpki-client