$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/1a/4f336b-4a79-4425-9556-be45f0d2abbb/1/nLJc5VDk2b2gW9XUXItro3Qwu7o.mft File: nLJc5VDk2b2gW9XUXItro3Qwu7o.mft (raw, json) Hash identifier: 2Agj5JiXafSt1SbelX9C/KdddqZbj0qN/RfaBPol2bI= Subject key identifier: 70:3A:4B:34:00:19:4A:CB:BC:8A:93:05:45:4C:04:30:BC:FF:94:44 Authority key identifier: 9C:B2:5C:E5:50:E4:D9:BD:A0:5B:D5:D4:5C:8B:6B:A3:74:30:BB:BA Certificate issuer: /CN=9cb25ce550e4d9bda05bd5d45c8b6ba37430bbba Certificate serial: 019A4D05F12468E5880E127FDDF053FC5078 Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/nLJc5VDk2b2gW9XUXItro3Qwu7o.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/1a/4f336b-4a79-4425-9556-be45f0d2abbb/1/nLJc5VDk2b2gW9XUXItro3Qwu7o.mft Manifest number: 10D9 Signing time: Tue 04 Nov 2025 04:00:26 +0000 Manifest this update: Tue 04 Nov 2025 04:00:26 +0000 Manifest next update: Wed 05 Nov 2025 04:00:26 +0000 Files and hashes: 1: 5twkGWnpZ3caWcoF0F7nZ3MnxRQ.roa (hash: Hj9ctK8yUmftQlZpCOc5gcL4pBH+76rKw29EPYTV1fY=) 2: 6t_-rwl5vkceJUl9xfuErIgk5XQ.roa (hash: UgA7/ParQEm4RUB+nS1eICM0VcT/VJB2T/2XjYuyjiU=) 3: CcOTWwBfhnDK4i-Cl6vgTQ1Ne6Q.roa (hash: 0gfOeo67IeexaN6S4XXz6/wYaUsrA1sXsSwqEGJjGB8=) 4: Kkr4WQTbiLrBJjIFNHmfQjqdMFs.roa (hash: AX2E33mALAyiSH2uL+jaoucILuyqIMUcyM5PTXw0LYA=) 5: XDROFBDLzXZk58Wa7Gj_bxIFP24.roa (hash: oEZB4Wy5f3UZqEPOPaZ8r51Wy4lzW93yWdCW8EWeAw0=) 6: fsRjNoJDy9POHF18ZkBOzQiMl94.roa (hash: pTBEz/UhwNCD7057vDv5QDiSVRnDRK75JX++XfB+B70=) 7: iXL5qQtRrkVLG9gYfHh5fVQ7T3g.roa (hash: /S4PPFIysWBHzoFOGmeyMQ0/WpKIWbdNqRJ+yMWrBac=) 8: lIqtXZgZb6FK3xchEu_KzpPH9HY.roa (hash: EF/nDh6v7FHlrVK+Jno0NvRyT9dpjTxvni+KKTpPgho=) 9: nLJc5VDk2b2gW9XUXItro3Qwu7o.crl (hash: tmw/GQ0zE30LRQ7QKMI8ZdPBD5d6PTFGtByKYa6rmZo=) 10: uHCer9bSYtAYzAW97IkYAtxT0oY.roa (hash: pEZrL5HUVwpESwP8P9Avj4b8s7dLWZdI+MAnQfTy42g=) 11: zLYfKKvwZksRC-Mec9uQxezCf-I.roa (hash: 7jSn1GJtzfCE3yqBQcJd/SMTsqwM51FfYe/cCLi5Z4A=) 12: zS2PBrD2vmlXLTrGFHERr-Tg3sM.roa (hash: ZKfnpYOgYarKcHUc2HZAGzDoCt3IGKzpVqNwP6NLT/8=) Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/1a/4f336b-4a79-4425-9556-be45f0d2abbb/1/nLJc5VDk2b2gW9XUXItro3Qwu7o.crl rsync://rpki.ripe.net/repository/DEFAULT/1a/4f336b-4a79-4425-9556-be45f0d2abbb/1/nLJc5VDk2b2gW9XUXItro3Qwu7o.mft rsync://rpki.ripe.net/repository/DEFAULT/nLJc5VDk2b2gW9XUXItro3Qwu7o.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Wed 05 Nov 2025 04:00:26 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9a:4d:05:f1:24:68:e5:88:0e:12:7f:dd:f0:53:fc:50:78 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=9cb25ce550e4d9bda05bd5d45c8b6ba37430bbba Validity Not Before: Nov 4 04:00:26 2025 GMT Not After : Nov 5 04:00:26 2025 GMT Subject: CN=703a4b3400194acbbc8a9305454c0430bcff9444 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:d3:e5:c9:e7:ca:b3:2c:89:04:13:63:89:e6:f7: 3a:5c:11:22:39:c6:e2:d2:4b:a9:91:12:b8:91:de: ca:b2:57:c7:9f:13:fa:af:82:84:19:4a:3e:6f:8c: c4:12:37:8b:e5:63:22:2c:b9:16:e5:a0:f0:10:34: c3:a0:6e:23:bb:f9:cf:5c:01:34:6e:cb:73:54:b9: 84:1d:88:13:2b:f1:28:48:f5:0a:6d:96:9e:a8:ee: 1b:19:3b:7d:b1:ef:09:65:55:d0:2d:76:7f:f3:ec: 86:8c:ef:0d:29:f5:93:73:d4:cb:e2:56:67:df:53: ac:35:db:d7:66:57:c4:24:35:3c:89:b1:02:0e:46: fd:50:f0:b7:97:ee:a2:0e:bb:00:d8:a3:75:a5:bd: 78:13:d0:fc:88:4d:ec:9f:cd:28:5f:8e:49:f0:46: e3:14:e1:a8:ee:60:e9:3c:79:30:f2:5a:6f:16:47: cf:55:a6:9f:0a:35:d6:e0:ef:80:02:d2:ae:e9:03: 63:db:d5:f1:42:fd:6b:2d:66:fa:c5:0d:97:22:0e: 21:eb:cc:8f:b0:d5:93:f2:e8:0d:5f:20:06:1f:02: a7:ad:a9:70:8d:4c:96:af:44:ff:cf:84:6b:7e:a9: 24:77:c0:54:d1:f8:8c:84:65:b9:f7:ff:6d:a9:eb: a5:0f Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 70:3A:4B:34:00:19:4A:CB:BC:8A:93:05:45:4C:04:30:BC:FF:94:44 X509v3 Authority Key Identifier: keyid:9C:B2:5C:E5:50:E4:D9:BD:A0:5B:D5:D4:5C:8B:6B:A3:74:30:BB:BA X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/nLJc5VDk2b2gW9XUXItro3Qwu7o.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/1a/4f336b-4a79-4425-9556-be45f0d2abbb/1/nLJc5VDk2b2gW9XUXItro3Qwu7o.mft X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/1a/4f336b-4a79-4425-9556-be45f0d2abbb/1/nLJc5VDk2b2gW9XUXItro3Qwu7o.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 53:41:db:55:64:ca:ea:c6:e4:99:16:45:49:9a:4f:6d:d1:3f: 01:66:3f:4c:f6:36:04:17:bf:91:47:e8:4f:04:11:fa:4d:dd: f4:ce:51:51:d9:72:04:85:fa:cf:4f:6d:44:49:42:19:69:83: f6:67:4b:c9:e2:a5:97:78:10:64:7e:ea:45:d9:72:79:c0:7d: 4c:20:3e:56:69:a1:21:e9:e0:4e:6d:94:4c:2e:d6:b4:e9:b4: 8c:3e:0e:f8:99:fb:fe:b9:a5:1a:43:b2:bd:2e:a0:a0:34:ba: 18:fd:fb:59:4f:e7:04:b4:b7:96:a7:31:7c:ac:f2:c4:2b:6b: c5:ac:0b:5c:73:2f:e6:ac:94:cc:9f:29:f7:19:0a:33:18:81: 91:c7:ba:65:02:09:f1:34:3b:87:75:2c:57:ae:81:a8:bf:9f: 84:e4:43:38:5f:87:fa:24:3c:e7:d8:88:9a:c5:3a:44:3b:0e: e6:98:d8:f8:8a:56:10:87:69:5b:58:7a:9a:c1:9b:fe:ff:58: e1:d4:d1:0d:4b:33:64:aa:c6:2e:ac:e8:9d:a3:c4:06:56:67: 3d:28:9d:3c:53:6c:cc:67:a9:ab:76:6c:89:89:54:7a:db:4f: 14:3b:ee:bb:de:e6:c2:9f:40:f0:7f:43:ca:c2:12:56:3d:1f: 7b:0f:bd:91 -----BEGIN CERTIFICATE----- MIIFFjCCA/6gAwIBAgISAZpNBfEkaOWIDhJ/3fBT/FB4MA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKDljYjI1Y2U1NTBlNGQ5YmRhMDViZDVkNDVjOGI2YmEzNzQz MGJiYmEwHhcNMjUxMTA0MDQwMDI2WhcNMjUxMTA1MDQwMDI2WjAzMTEwLwYDVQQD Eyg3MDNhNGIzNDAwMTk0YWNiYmM4YTkzMDU0NTRjMDQzMGJjZmY5NDQ0MIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEA0+XJ58qzLIkEE2OJ5vc6XBEiOcbi 0kupkRK4kd7KslfHnxP6r4KEGUo+b4zEEjeL5WMiLLkW5aDwEDTDoG4ju/nPXAE0 bstzVLmEHYgTK/EoSPUKbZaeqO4bGTt9se8JZVXQLXZ/8+yGjO8NKfWTc9TL4lZn 31OsNdvXZlfEJDU8ibECDkb9UPC3l+6iDrsA2KN1pb14E9D8iE3sn80oX45J8Ebj FOGo7mDpPHkw8lpvFkfPVaafCjXW4O+AAtKu6QNj29XxQv1rLWb6xQ2XIg4h68yP sNWT8ugNXyAGHwKnralwjUyWr0T/z4Rrfqkkd8BU0fiMhGW59/9tqeulDwIDAQAB o4ICIjCCAh4wHQYDVR0OBBYEFHA6SzQAGUrLvIqTBUVMBDC8/5REMB8GA1UdIwQY MBaAFJyyXOVQ5Nm9oFvV1FyLa6N0MLu6MA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvbkxKYzVWRGsyYjJnVzlYVVhJdHJvM1F3dTdvLmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC8xYS80ZjMzNmItNGE3OS00NDI1LTk1NTYt YmU0NWYwZDJhYmJiLzEvbkxKYzVWRGsyYjJnVzlYVVhJdHJvM1F3dTdvLm1mdDCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC8xYS80ZjMzNmItNGE3OS00NDI1LTk1NTYtYmU0NWYwZDJhYmJi LzEvbkxKYzVWRGsyYjJnVzlYVVhJdHJvM1F3dTdvLmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAU0HbVWTK 6sbkmRZFSZpPbdE/AWY/TPY2BBe/kUfoTwQR+k3d9M5RUdlyBIX6z09tRElCGWmD 9mdLyeKll3gQZH7qRdlyecB9TCA+VmmhIengTm2UTC7WtOm0jD4O+Jn7/rmlGkOy vS6goDS6GP37WU/nBLS3lqcxfKzyxCtrxawLXHMv5qyUzJ8p9xkKMxiBkce6ZQIJ 8TQ7h3UsV66BqL+fhORDOF+H+iQ859iImsU6RDsO5pjY+IpWEIdpW1h6msGb/v9Y 4dTRDUszZKrGLqzonaPEBlZnPSidPFNszGepq3ZsiYlUettPFDvuu97mwp9A8H9D ysISVj0few+9kQ== -----END CERTIFICATE-----Generated at Tue Nov 4 10:52:36 2025 by rpki-client