$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/1c/b20d83-612c-4b62-97a3-1a5e5f191bfa/1/MH2IfALgfJ5HTR-OIQScqmzj-9M.mft File: MH2IfALgfJ5HTR-OIQScqmzj-9M.mft (raw, json) Hash identifier: Y0xCTt/eMr4lbpzXOVGNkBTjppQL1gdTGGpnBY7kMRI= Subject key identifier: 3F:BC:BD:08:83:39:B4:71:3A:9D:75:22:8E:46:85:14:1F:70:78:22 Authority key identifier: 30:7D:88:7C:02:E0:7C:9E:47:4D:1F:8E:21:04:9C:AA:6C:E3:FB:D3 Certificate issuer: /CN=307d887c02e07c9e474d1f8e21049caa6ce3fbd3 Certificate serial: 019A4DE166C27F1C2CCD940657CBBDD6F31B Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/MH2IfALgfJ5HTR-OIQScqmzj-9M.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/1c/b20d83-612c-4b62-97a3-1a5e5f191bfa/1/MH2IfALgfJ5HTR-OIQScqmzj-9M.mft Manifest number: 1710 Signing time: Tue 04 Nov 2025 08:00:08 +0000 Manifest this update: Tue 04 Nov 2025 08:00:08 +0000 Manifest next update: Wed 05 Nov 2025 08:00:08 +0000 Files and hashes: 1: Go3D60IftVT7kBobBk8HTq_r6wY.roa (hash: /aH1VuqUtHMC947Kt5tr1ajHSrdHN60XTYZiPes2dOU=) 2: JKKr0NwqKrBRfO9-TNMA6fKjebU.roa (hash: +prVLn/SSNSb/SQ4BmX9heAxTyq0XNrqnNVcVb/zNYQ=) 3: MH2IfALgfJ5HTR-OIQScqmzj-9M.crl (hash: qFBrtCU9Tsrl6bA+kpV4HHtzzeiOOzxxBDlhV9xtPJc=) 4: OrdWNePRO-azuf-x7WJ0gNqkZc8.roa (hash: ehZsJBwER/Ak+kPEJiQOXw5pziTKWHwzzGUWq4oZM/c=) 5: Q3_mv-tF2Z1EHDZHaZk8mJMN1bk.roa (hash: oXSPeYLnMI9gMBulzyR8eDJwfmPdLhgYhc4vqS0U/tE=) 6: S2TXSI-3n25IfgGnM4uuJwml268.roa (hash: DAgFF4qJxC/k8JOz+sB1Q1cvXx4PDaouIru4SXZXgbU=) 7: UJuJe34B0guqTgOl--QOCgSYvZE.roa (hash: c2O3pbkk6z+NjOLR47vzvdpTF+ZJKIik+rzOAO3mk2Y=) 8: bR8kj_c2TPqFFFMT255K3OTqBTI.roa (hash: mIG3JTVdQTlKmcdrQlCtE5KtfNee8F1irJglkfAd6/0=) 9: e_JO57HIUgxnL2zZw_SZRKtvz2k.roa (hash: kYzJL9upOKUtQTqnQ+rXijBf3P483K+T+FEi6SAaLE0=) 10: qkn09gGw9_pYS22v_SrDemeIoJI.roa (hash: OSIoNd4NerHm/MUfEqmcXlQFZ/K6gwLw7wnqNHc3YTQ=) Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/1c/b20d83-612c-4b62-97a3-1a5e5f191bfa/1/MH2IfALgfJ5HTR-OIQScqmzj-9M.crl rsync://rpki.ripe.net/repository/DEFAULT/1c/b20d83-612c-4b62-97a3-1a5e5f191bfa/1/MH2IfALgfJ5HTR-OIQScqmzj-9M.mft rsync://rpki.ripe.net/repository/DEFAULT/MH2IfALgfJ5HTR-OIQScqmzj-9M.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Wed 05 Nov 2025 08:00:08 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9a:4d:e1:66:c2:7f:1c:2c:cd:94:06:57:cb:bd:d6:f3:1b Signature Algorithm: sha256WithRSAEncryption Issuer: CN=307d887c02e07c9e474d1f8e21049caa6ce3fbd3 Validity Not Before: Nov 4 08:00:08 2025 GMT Not After : Nov 5 08:00:08 2025 GMT Subject: CN=3fbcbd088339b4713a9d75228e4685141f707822 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:ad:c0:24:00:e2:fd:6d:8f:90:32:55:6e:03:89: 07:9d:7f:b9:3a:0d:ce:be:96:0c:cb:5d:ee:b8:74: f0:f0:17:4b:7d:99:f9:85:c0:21:f5:0a:0d:14:a3: 48:00:1d:05:d8:ca:51:b5:cb:c1:36:27:76:20:4e: 5e:76:64:7a:be:2d:f5:06:56:0e:21:a0:fe:1f:18: 04:e7:df:ba:0b:7b:b9:48:d5:b1:7c:22:e0:eb:76: 51:58:91:eb:53:e0:a0:18:00:7c:d0:ef:1e:c9:ac: f3:70:d3:22:8a:d8:ef:57:ed:41:54:db:45:84:19: 11:25:ee:13:7f:03:5e:2b:e3:f1:e2:8a:e7:2c:e2: da:7d:8d:66:77:5c:82:58:55:7f:c0:e0:4c:7f:dd: 13:e2:5e:17:3a:ab:4a:58:37:1c:c9:08:fc:1b:67: 66:6e:40:a4:81:05:db:4a:58:f4:50:69:2d:e6:bd: 58:91:7d:66:10:90:0f:29:e9:a8:ba:5c:79:af:e7: 95:44:78:3e:11:9a:ee:4a:dc:31:c3:73:bb:93:5d: ce:d2:31:ff:c6:cb:c5:6a:d5:f1:d7:7f:3a:b0:b4: f5:5b:26:f8:8e:ae:23:a4:9f:09:33:a4:79:b6:30: 8d:01:e8:36:1c:2e:eb:d1:0a:2d:6f:ee:49:ac:96: cf:a3 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 3F:BC:BD:08:83:39:B4:71:3A:9D:75:22:8E:46:85:14:1F:70:78:22 X509v3 Authority Key Identifier: keyid:30:7D:88:7C:02:E0:7C:9E:47:4D:1F:8E:21:04:9C:AA:6C:E3:FB:D3 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/MH2IfALgfJ5HTR-OIQScqmzj-9M.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/1c/b20d83-612c-4b62-97a3-1a5e5f191bfa/1/MH2IfALgfJ5HTR-OIQScqmzj-9M.mft X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/1c/b20d83-612c-4b62-97a3-1a5e5f191bfa/1/MH2IfALgfJ5HTR-OIQScqmzj-9M.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 68:bd:75:96:ba:d1:2a:4f:cd:b6:7c:40:fd:77:4b:9a:ef:3b: a4:1e:34:46:d2:93:a4:25:45:49:30:54:86:1f:87:24:9c:f7: 16:03:6d:3a:c5:6c:1f:ee:68:35:dd:80:96:c8:fa:eb:3f:e5: 44:85:1a:c8:4d:d8:58:db:95:38:37:9d:1a:c3:7c:76:5d:49: d6:31:9f:69:90:cd:65:b0:a3:c0:fc:b4:04:33:b4:f0:c9:e8: cb:43:78:f4:a6:0f:f9:31:8b:01:c8:12:1d:ba:d0:65:df:68: f1:55:bf:14:0b:de:6f:be:01:95:d3:68:94:0d:42:eb:11:cf: 71:00:0c:d7:c3:3a:c3:30:b4:5a:70:4a:ba:d2:be:70:27:e2: 2b:d7:4d:c0:1b:d0:47:9b:df:6c:93:85:85:84:e1:97:e1:67: ed:36:f3:8c:b9:3c:b9:c7:b1:e0:96:6f:c5:c1:29:d7:e5:04: 81:22:70:8f:eb:74:59:43:66:04:cd:6d:4c:7e:58:f5:d2:75: 34:d9:8a:31:4b:54:b5:44:c7:92:bd:ae:15:1f:b0:2e:36:ae: c2:cd:1d:2a:10:be:3d:c0:09:96:6f:e6:56:41:12:be:b1:b0: d8:9a:c9:14:46:ef:d8:49:c9:64:5d:d5:25:4b:c7:a4:99:26: 3a:36:4d:46 -----BEGIN CERTIFICATE----- MIIFFjCCA/6gAwIBAgISAZpN4WbCfxwszZQGV8u91vMbMA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKDMwN2Q4ODdjMDJlMDdjOWU0NzRkMWY4ZTIxMDQ5Y2FhNmNl M2ZiZDMwHhcNMjUxMTA0MDgwMDA4WhcNMjUxMTA1MDgwMDA4WjAzMTEwLwYDVQQD EygzZmJjYmQwODgzMzliNDcxM2E5ZDc1MjI4ZTQ2ODUxNDFmNzA3ODIyMIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEArcAkAOL9bY+QMlVuA4kHnX+5Og3O vpYMy13uuHTw8BdLfZn5hcAh9QoNFKNIAB0F2MpRtcvBNid2IE5edmR6vi31BlYO IaD+HxgE59+6C3u5SNWxfCLg63ZRWJHrU+CgGAB80O8eyazzcNMiitjvV+1BVNtF hBkRJe4TfwNeK+Px4ornLOLafY1md1yCWFV/wOBMf90T4l4XOqtKWDccyQj8G2dm bkCkgQXbSlj0UGkt5r1YkX1mEJAPKemoulx5r+eVRHg+EZruStwxw3O7k13O0jH/ xsvFatXx1386sLT1Wyb4jq4jpJ8JM6R5tjCNAeg2HC7r0Qotb+5JrJbPowIDAQAB o4ICIjCCAh4wHQYDVR0OBBYEFD+8vQiDObRxOp11Io5GhRQfcHgiMB8GA1UdIwQY MBaAFDB9iHwC4HyeR00fjiEEnKps4/vTMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvTUgySWZBTGdmSjVIVFItT0lRU2NxbXpqLTlNLmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC8xYy9iMjBkODMtNjEyYy00YjYyLTk3YTMt MWE1ZTVmMTkxYmZhLzEvTUgySWZBTGdmSjVIVFItT0lRU2NxbXpqLTlNLm1mdDCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC8xYy9iMjBkODMtNjEyYy00YjYyLTk3YTMtMWE1ZTVmMTkxYmZh LzEvTUgySWZBTGdmSjVIVFItT0lRU2NxbXpqLTlNLmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAaL11lrrR Kk/NtnxA/XdLmu87pB40RtKTpCVFSTBUhh+HJJz3FgNtOsVsH+5oNd2Alsj66z/l RIUayE3YWNuVODedGsN8dl1J1jGfaZDNZbCjwPy0BDO08Mnoy0N49KYP+TGLAcgS HbrQZd9o8VW/FAveb74BldNolA1C6xHPcQAM18M6wzC0WnBKutK+cCfiK9dNwBvQ R5vfbJOFhYThl+Fn7TbzjLk8ucex4JZvxcEp1+UEgSJwj+t0WUNmBM1tTH5Y9dJ1 NNmKMUtUtUTHkr2uFR+wLjauws0dKhC+PcAJlm/mVkESvrGw2JrJFEbv2EnJZF3V JUvHpJkmOjZNRg== -----END CERTIFICATE-----Generated at Tue Nov 4 14:50:19 2025 by rpki-client