$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/22/dab420-0de3-4321-9c09-6b5f68522a7d/1/p-4YLZxDpc5waN_Zunqo7ZDl4Lo.mft File: p-4YLZxDpc5waN_Zunqo7ZDl4Lo.mft (raw, json) Hash identifier: tEvUl74Wc4w19YqxksmVa0K8Le8IhxQ0iJZcWNVv2v8= Subject key identifier: 5B:10:BA:4F:61:99:30:E4:57:AD:35:74:E3:50:38:D5:E1:7D:0D:91 Authority key identifier: A7:EE:18:2D:9C:43:A5:CE:70:68:DF:D9:BA:7A:A8:ED:90:E5:E0:BA Certificate issuer: /CN=a7ee182d9c43a5ce7068dfd9ba7aa8ed90e5e0ba Certificate serial: 019A4F62AEB616D234FE3D74551842C0AD06 Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/p-4YLZxDpc5waN_Zunqo7ZDl4Lo.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/22/dab420-0de3-4321-9c09-6b5f68522a7d/1/p-4YLZxDpc5waN_Zunqo7ZDl4Lo.mft Manifest number: 1727 Signing time: Tue 04 Nov 2025 15:00:58 +0000 Manifest this update: Tue 04 Nov 2025 15:00:58 +0000 Manifest next update: Wed 05 Nov 2025 15:00:58 +0000 Files and hashes: 1: 6VFvznM1ivuDVDr2-zJ8Rc9HL4c.roa (hash: YFFcoS2pkj0ppsY1suyM7N1UBbz37UF87GS5rHAetLM=) 2: HG0sxwCI7w4fkh8VU0N2fcVMuLU.roa (hash: 1EixzIypMSg7Afd2h1TllH/pBszhQ8LEEsFtCe9BNAQ=) 3: SF9inl-Z2UBEp7L7rHoMTP2o47I.roa (hash: OJPpBVtZqLTjhkxtA0o0cIzlBYqPE/6vDiaXNk1Wf6s=) 4: YkO14vUX3HHLD5m73eeF94u-z9Y.roa (hash: myJ7UTUt7mcT9gjy0mgRP7jrD85IU3fMUws/RpMjTT4=) 5: ays9--_IW8JzhtfNk76o0BfVsHs.roa (hash: m+8N0lTDKN6USUkq7MoOzNst+iEzsskPzpKLc4PITjQ=) 6: bTtf1_C9R2Bt4xdvshIG3OCVSD0.roa (hash: Z47R6cDRJGZAaj0MeG+895zHqKHcV33MIM2W9d4hC9E=) 7: c-pova8C1uulibxroeJZUgkQnv8.roa (hash: OvhwnSV+pVkr5UA9RfkEZJQ3n/9Mm7Ihqgy3rKhknz8=) 8: cdiLy2n18Y-vOIkFViZGUd7RsKM.roa (hash: /+RvQbcmllMNKfEXhyM/QGFxvrK6kosbr0fHB6H8FyU=) 9: dVPbIRfsnF_eS0blJ9Y7zNoUs7k.roa (hash: ShygWBXCmOMXv5YpTJlMJ5UYglgVh9DDoGkuss6YEGo=) 10: obNE3NdMVlCy0XPf9mK-g4oa9eg.roa (hash: 7NjsanTWQOoFeSktyUJvcMuLG2S6+z5IgmOffiI6238=) 11: p-4YLZxDpc5waN_Zunqo7ZDl4Lo.crl (hash: pnzGBPabOjkrwMb4pD7l5btRmTLdSppIxkKVtSgI0HQ=) 12: un7p1oX6IuixEnJw52S1lgp4k0A.roa (hash: zhKv5DC0Mh83opPQLWP9MGfrzkdDgqEhOQ8/1xd2cZA=) 13: vXPdTshBqnn4ghgMByB7XXaLYRA.roa (hash: f07bhqR7ZOptfaHvf20BCw3ge0IxK37mw/76h6jHsI0=) Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/22/dab420-0de3-4321-9c09-6b5f68522a7d/1/p-4YLZxDpc5waN_Zunqo7ZDl4Lo.crl rsync://rpki.ripe.net/repository/DEFAULT/22/dab420-0de3-4321-9c09-6b5f68522a7d/1/p-4YLZxDpc5waN_Zunqo7ZDl4Lo.mft rsync://rpki.ripe.net/repository/DEFAULT/p-4YLZxDpc5waN_Zunqo7ZDl4Lo.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Wed 05 Nov 2025 15:00:58 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9a:4f:62:ae:b6:16:d2:34:fe:3d:74:55:18:42:c0:ad:06 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=a7ee182d9c43a5ce7068dfd9ba7aa8ed90e5e0ba Validity Not Before: Nov 4 15:00:58 2025 GMT Not After : Nov 5 15:00:58 2025 GMT Subject: CN=5b10ba4f619930e457ad3574e35038d5e17d0d91 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:b1:1f:dd:20:f7:a7:47:f5:83:60:ce:f5:fb:bf: 28:59:90:19:0e:51:1e:4f:2b:28:b7:8e:26:bf:17: 9a:e9:fd:8f:a9:7d:e8:b8:45:46:f9:37:2f:91:dc: 11:1a:ae:1e:e8:fe:31:7a:1a:c6:71:32:8b:7b:6f: a7:cf:73:76:a8:25:28:3e:23:74:2e:49:16:f0:6b: 93:c6:1f:f7:74:46:14:5f:1f:19:c8:82:e3:67:ec: 72:fc:e9:84:a5:5b:03:4a:bd:ec:ac:4e:0b:4b:d4: 8b:6f:f5:4b:93:cf:ed:9f:00:8e:07:c3:d8:38:5e: 63:03:cd:b1:cf:57:e0:72:ff:d6:57:ab:8c:b0:f9: 5f:9d:cd:55:e2:a6:5c:91:b4:7b:41:ed:c5:8a:f2: d3:8d:86:36:48:dd:f4:28:ef:df:7c:6c:9e:de:db: b2:9b:5d:cf:9b:40:46:e0:3e:38:a7:cf:6a:e6:25: 69:33:3e:57:85:42:39:46:39:1c:0c:6d:76:96:fa: 88:43:eb:d1:32:bf:6f:75:94:0c:5a:eb:71:72:6f: 93:26:e8:cb:84:0d:de:f1:34:ee:bb:79:2a:a4:e0: 49:bc:17:70:85:41:a8:a2:5a:36:c0:e3:36:ed:51: 98:6c:11:b3:79:87:b6:f7:26:46:f4:33:79:0c:69: 03:9b Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 5B:10:BA:4F:61:99:30:E4:57:AD:35:74:E3:50:38:D5:E1:7D:0D:91 X509v3 Authority Key Identifier: keyid:A7:EE:18:2D:9C:43:A5:CE:70:68:DF:D9:BA:7A:A8:ED:90:E5:E0:BA X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/p-4YLZxDpc5waN_Zunqo7ZDl4Lo.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/22/dab420-0de3-4321-9c09-6b5f68522a7d/1/p-4YLZxDpc5waN_Zunqo7ZDl4Lo.mft X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/22/dab420-0de3-4321-9c09-6b5f68522a7d/1/p-4YLZxDpc5waN_Zunqo7ZDl4Lo.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 90:00:c5:52:80:1a:17:3e:a7:f6:53:03:fa:aa:3c:41:bb:c2: 88:79:67:85:4e:88:0d:d1:99:f9:5e:40:cd:19:56:3b:c3:df: ef:5a:6c:67:f5:e6:b6:8e:6f:f1:8d:8d:17:57:6c:18:28:af: d2:ca:c2:83:59:ca:1d:7d:f6:18:e2:bd:c5:46:b5:73:f7:6f: cc:63:7b:14:0a:9b:18:8a:65:b3:15:2f:e1:dd:64:50:dd:9c: 0d:01:f3:9d:88:02:52:11:38:c1:69:d5:98:05:86:c0:6b:b8: a9:de:4e:d0:fa:b4:9e:f9:0b:f3:0d:8a:8d:4c:94:2e:58:9d: b5:5e:ef:35:0a:25:47:51:88:55:cb:98:56:01:49:77:ad:11: 0e:a8:fe:f1:21:42:ff:d2:bd:4e:0f:6c:4d:d5:17:93:8f:7b: 15:01:a9:44:07:75:2d:d1:f6:f1:ad:31:4f:eb:04:42:0b:dc: fc:e5:2f:ed:a0:c3:0c:83:94:02:48:a9:49:e1:e8:ec:56:6d: d6:44:c7:cc:7a:6d:bb:61:70:89:67:e4:80:10:e0:94:40:06: 25:08:14:11:86:70:f6:15:4f:d2:c2:53:d7:4a:7b:38:71:35: fe:77:37:03:38:a6:93:fb:01:ec:57:40:e4:6a:1f:09:04:77: 75:a6:fb:5e -----BEGIN CERTIFICATE----- MIIFFjCCA/6gAwIBAgISAZpPYq62FtI0/j10VRhCwK0GMA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKGE3ZWUxODJkOWM0M2E1Y2U3MDY4ZGZkOWJhN2FhOGVkOTBl NWUwYmEwHhcNMjUxMTA0MTUwMDU4WhcNMjUxMTA1MTUwMDU4WjAzMTEwLwYDVQQD Eyg1YjEwYmE0ZjYxOTkzMGU0NTdhZDM1NzRlMzUwMzhkNWUxN2QwZDkxMIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAsR/dIPenR/WDYM71+78oWZAZDlEe Tysot44mvxea6f2PqX3ouEVG+TcvkdwRGq4e6P4xehrGcTKLe2+nz3N2qCUoPiN0 LkkW8GuTxh/3dEYUXx8ZyILjZ+xy/OmEpVsDSr3srE4LS9SLb/VLk8/tnwCOB8PY OF5jA82xz1fgcv/WV6uMsPlfnc1V4qZckbR7Qe3FivLTjYY2SN30KO/ffGye3tuy m13Pm0BG4D44p89q5iVpMz5XhUI5RjkcDG12lvqIQ+vRMr9vdZQMWutxcm+TJujL hA3e8TTuu3kqpOBJvBdwhUGoolo2wOM27VGYbBGzeYe29yZG9DN5DGkDmwIDAQAB o4ICIjCCAh4wHQYDVR0OBBYEFFsQuk9hmTDkV601dONQONXhfQ2RMB8GA1UdIwQY MBaAFKfuGC2cQ6XOcGjf2bp6qO2Q5eC6MA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvcC00WUxaeERwYzV3YU5fWnVucW83WkRsNExvLmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC8yMi9kYWI0MjAtMGRlMy00MzIxLTljMDkt NmI1ZjY4NTIyYTdkLzEvcC00WUxaeERwYzV3YU5fWnVucW83WkRsNExvLm1mdDCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC8yMi9kYWI0MjAtMGRlMy00MzIxLTljMDktNmI1ZjY4NTIyYTdk LzEvcC00WUxaeERwYzV3YU5fWnVucW83WkRsNExvLmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAkADFUoAa Fz6n9lMD+qo8QbvCiHlnhU6IDdGZ+V5AzRlWO8Pf71psZ/Xmto5v8Y2NF1dsGCiv 0srCg1nKHX32GOK9xUa1c/dvzGN7FAqbGIplsxUv4d1kUN2cDQHznYgCUhE4wWnV mAWGwGu4qd5O0Pq0nvkL8w2KjUyULlidtV7vNQolR1GIVcuYVgFJd60RDqj+8SFC /9K9Tg9sTdUXk497FQGpRAd1LdH28a0xT+sEQgvc/OUv7aDDDIOUAkipSeHo7FZt 1kTHzHptu2FwiWfkgBDglEAGJQgUEYZw9hVP0sJT10p7OHE1/nc3Azimk/sB7FdA 5GofCQR3dab7Xg== -----END CERTIFICATE-----Generated at Tue Nov 4 23:33:43 2025 by rpki-client