$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/0f/ba0bd3-b365-4461-8ffa-1f5431e2a5af/1/1M4r8AAc1DDpJ3-wDtGr5RwLXHw.mft File: 1M4r8AAc1DDpJ3-wDtGr5RwLXHw.mft (raw, json) Hash identifier: a8f4lGG7E9paZ+CDgjRzQm4YdTbCFkb9Ztktql/Fm6U= Subject key identifier: FE:8F:3D:75:C0:72:63:93:DB:7F:3A:A1:FD:33:85:4D:69:A0:A0:BF Authority key identifier: D4:CE:2B:F0:00:1C:D4:30:E9:27:7F:B0:0E:D1:AB:E5:1C:0B:5C:7C Certificate issuer: /CN=d4ce2bf0001cd430e9277fb00ed1abe51c0b5c7c Certificate serial: 019A4E4F60F63A796A5C13E760B3EDA92BA1 Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/1M4r8AAc1DDpJ3-wDtGr5RwLXHw.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/0f/ba0bd3-b365-4461-8ffa-1f5431e2a5af/1/1M4r8AAc1DDpJ3-wDtGr5RwLXHw.mft Manifest number: 03A7 Signing time: Tue 04 Nov 2025 10:00:16 +0000 Manifest this update: Tue 04 Nov 2025 10:00:16 +0000 Manifest next update: Wed 05 Nov 2025 10:00:16 +0000 Files and hashes: 1: 1M4r8AAc1DDpJ3-wDtGr5RwLXHw.crl (hash: A3CM1LbdI9L0yLXXZBNCGjoRwc04QTcO6/RK9NauU40=) 2: 3GUm_HsThPUJjf5Xl65FHt13AV8.roa (hash: Lhftb+taQ8v4bYwk3pVYGnzP3vZQbnGHWFTFTRUD1PM=) 3: 65uCTGHnj2d-ZMz37cNEU4MDVwU.roa (hash: YIZDFvb3SYhRXBIcle+tVLHY9SC8i/bp1JBNwsY9//E=) 4: B0NZnOPP2h8oD-RNqJ-Ta2yq_Fc.roa (hash: hPfH3C1Uf5sAxbquvsid9TZ9qowMzn90bG/96XgZCYg=) 5: Ft-8xYXFXF_pxWdqchjDObURQAQ.roa (hash: Bbe7isVG2thClqzLz0laVwUWwhKyZ8mXmscJ7ADBYEc=) 6: SO2aAnB4S5yHRruYM18XroAhS7s.roa (hash: Pz0dkuO54GBo11/DomEvI/BTZKCMV4IWlZC7klvn2ps=) 7: S_UvXYrcwi02mD9XS72xM5GP0XM.roa (hash: tDWixxPYWWKm64Sflrs16Hs5q2OnmoXj3QlJNoGIgAE=) 8: UF3Vre6C-2uWPd901r4ODYt5AHA.roa (hash: eNmvyxetTd0QVI6G0VkpJaSR8G25jRhf1MP+bDcaMic=) 9: oZWWF5zyx5ocTW76AkaqmRcZRbc.roa (hash: Md76ioroY7UyB9QPN3x3zrcMAb6sqenqdiEF83Lxjww=) 10: tBHwHHkIoWoPQB4e4ej-oFl2fGE.roa (hash: UbNA7/yGLRJmQHVEHqPxSSssDaT1D3EY/oLFfEqwR8s=) 11: wG4o-qI2-SFDukKFY7nO5neU430.roa (hash: yujHQG+kbMes0VhHuaufvfh3r/oBAVTjRJJ1+dXsMPA=) 12: zNBrt8b_ORyqQSO4aCrRbgzOM0k.roa (hash: JPrR5Q/6R3hbokDk+J7WmGsUILsQwl4oN4sTvCmroWc=) Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/0f/ba0bd3-b365-4461-8ffa-1f5431e2a5af/1/1M4r8AAc1DDpJ3-wDtGr5RwLXHw.crl rsync://rpki.ripe.net/repository/DEFAULT/0f/ba0bd3-b365-4461-8ffa-1f5431e2a5af/1/1M4r8AAc1DDpJ3-wDtGr5RwLXHw.mft rsync://rpki.ripe.net/repository/DEFAULT/1M4r8AAc1DDpJ3-wDtGr5RwLXHw.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Wed 05 Nov 2025 09:00:03 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9a:4e:4f:60:f6:3a:79:6a:5c:13:e7:60:b3:ed:a9:2b:a1 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=d4ce2bf0001cd430e9277fb00ed1abe51c0b5c7c Validity Not Before: Nov 4 10:00:16 2025 GMT Not After : Nov 5 10:00:16 2025 GMT Subject: CN=fe8f3d75c0726393db7f3aa1fd33854d69a0a0bf Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:c9:b4:b0:81:48:b9:8f:6f:ad:97:81:2c:7a:e1: 1d:48:b6:81:f7:1a:f2:9a:81:02:c3:a6:a1:5a:44: ab:b9:1d:b0:42:1d:b4:54:86:bb:b8:69:1e:0c:c0: 68:e2:ce:8c:17:0f:54:6f:97:ee:90:4c:50:4b:b6: 06:47:b2:67:9f:7e:19:d4:6b:8e:a7:98:ba:3e:98: 98:8d:0c:4f:d1:92:a3:b1:3a:3a:aa:b0:7e:30:82: 52:ef:a1:de:c7:69:7a:14:92:e2:71:ea:bd:fa:1d: 4e:56:26:9b:e6:9b:33:24:fb:2c:d4:0c:b6:b5:c0: 99:98:82:14:da:19:af:80:bc:9a:2b:ff:36:80:d3: 43:29:27:56:44:c5:b3:6c:69:c9:5c:8c:7b:5c:25: 44:19:db:f5:58:bc:94:b5:ab:8e:78:a6:cc:4d:41: 38:75:b0:0e:5d:20:e9:49:99:e6:cd:6d:7f:4b:da: 6f:34:97:ea:81:27:ba:40:4b:62:9d:88:19:30:7e: 92:01:2a:f9:64:f4:29:94:79:3b:9e:27:8a:0c:be: 30:fb:f6:c3:5f:bc:3c:35:47:be:8f:f5:0e:fd:0a: b1:35:cb:82:15:2b:34:50:c6:59:4a:fd:72:ba:63: eb:a7:e0:0a:46:ee:3f:d9:7c:3e:0f:01:b9:e1:e9: 03:95 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: FE:8F:3D:75:C0:72:63:93:DB:7F:3A:A1:FD:33:85:4D:69:A0:A0:BF X509v3 Authority Key Identifier: keyid:D4:CE:2B:F0:00:1C:D4:30:E9:27:7F:B0:0E:D1:AB:E5:1C:0B:5C:7C X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/1M4r8AAc1DDpJ3-wDtGr5RwLXHw.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/0f/ba0bd3-b365-4461-8ffa-1f5431e2a5af/1/1M4r8AAc1DDpJ3-wDtGr5RwLXHw.mft X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/0f/ba0bd3-b365-4461-8ffa-1f5431e2a5af/1/1M4r8AAc1DDpJ3-wDtGr5RwLXHw.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 16:17:e6:5f:8c:52:e1:21:b9:04:91:7d:da:5a:36:52:a0:b4: 28:e9:eb:bb:55:8e:85:74:8c:f0:18:2d:dc:3b:7f:83:3c:d6: ae:ee:9b:99:3c:11:f9:5a:a5:d2:fa:ae:59:ed:50:2c:35:29: 71:c4:61:da:cb:8a:ef:47:56:be:95:2c:d4:a0:62:72:02:33: a8:5d:01:92:c5:2c:a1:ba:23:fb:8e:99:8c:7b:23:25:7b:32: d3:2a:b7:1b:0c:33:0a:a3:85:2d:8b:40:da:d5:84:96:ed:d3: 7c:33:14:f2:c3:e1:2e:7f:fa:e6:aa:c2:cb:0c:02:83:04:fc: 9b:ce:a1:db:28:c9:0a:50:a6:74:88:48:90:e6:01:47:36:75: d9:ea:21:89:4b:8d:4a:27:40:cc:91:88:fe:ab:51:98:a9:bd: 26:03:84:61:77:8c:53:94:cd:c3:67:2d:82:8a:a4:a6:5e:72: 7b:1c:11:5f:c2:14:32:d9:1e:16:22:d0:b6:e3:ba:b6:dd:a9: 8d:fd:83:b5:92:51:db:73:c3:6d:9c:53:91:60:1b:c2:72:82: f3:95:19:88:2a:3e:4d:f1:d5:36:ee:49:f8:ab:05:72:a7:17: 08:01:6f:9b:20:70:6b:35:88:72:58:50:07:29:9e:c3:7a:7d: 2c:04:f9:65 -----BEGIN CERTIFICATE----- MIIFFjCCA/6gAwIBAgISAZpOT2D2OnlqXBPnYLPtqSuhMA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKGQ0Y2UyYmYwMDAxY2Q0MzBlOTI3N2ZiMDBlZDFhYmU1MWMw YjVjN2MwHhcNMjUxMTA0MTAwMDE2WhcNMjUxMTA1MTAwMDE2WjAzMTEwLwYDVQQD EyhmZThmM2Q3NWMwNzI2MzkzZGI3ZjNhYTFmZDMzODU0ZDY5YTBhMGJmMIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAybSwgUi5j2+tl4EseuEdSLaB9xry moECw6ahWkSruR2wQh20VIa7uGkeDMBo4s6MFw9Ub5fukExQS7YGR7Jnn34Z1GuO p5i6PpiYjQxP0ZKjsTo6qrB+MIJS76Hex2l6FJLiceq9+h1OViab5pszJPss1Ay2 tcCZmIIU2hmvgLyaK/82gNNDKSdWRMWzbGnJXIx7XCVEGdv1WLyUtauOeKbMTUE4 dbAOXSDpSZnmzW1/S9pvNJfqgSe6QEtinYgZMH6SASr5ZPQplHk7nieKDL4w+/bD X7w8NUe+j/UO/QqxNcuCFSs0UMZZSv1yumPrp+AKRu4/2Xw+DwG54ekDlQIDAQAB o4ICIjCCAh4wHQYDVR0OBBYEFP6PPXXAcmOT2386of0zhU1poKC/MB8GA1UdIwQY MBaAFNTOK/AAHNQw6Sd/sA7Rq+UcC1x8MA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvMU00cjhBQWMxRERwSjMtd0R0R3I1UndMWEh3LmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC8wZi9iYTBiZDMtYjM2NS00NDYxLThmZmEt MWY1NDMxZTJhNWFmLzEvMU00cjhBQWMxRERwSjMtd0R0R3I1UndMWEh3Lm1mdDCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC8wZi9iYTBiZDMtYjM2NS00NDYxLThmZmEtMWY1NDMxZTJhNWFm LzEvMU00cjhBQWMxRERwSjMtd0R0R3I1UndMWEh3LmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAFhfmX4xS 4SG5BJF92lo2UqC0KOnru1WOhXSM8Bgt3Dt/gzzWru6bmTwR+Vql0vquWe1QLDUp ccRh2suK70dWvpUs1KBicgIzqF0BksUsoboj+46ZjHsjJXsy0yq3GwwzCqOFLYtA 2tWElu3TfDMU8sPhLn/65qrCywwCgwT8m86h2yjJClCmdIhIkOYBRzZ12eohiUuN SidAzJGI/qtRmKm9JgOEYXeMU5TNw2ctgoqkpl5yexwRX8IUMtkeFiLQtuO6tt2p jf2DtZJR23PDbZxTkWAbwnKC85UZiCo+TfHVNu5J+KsFcqcXCAFvmyBwazWIclhQ Bymew3p9LAT5ZQ== -----END CERTIFICATE-----Generated at Tue Nov 4 17:49:22 2025 by rpki-client