$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/28/972db6-770f-4462-9fc7-ee9b9517f2ec/1/dXzv42s_zGikLAr_gdFEmA8yd38.mft File: dXzv42s_zGikLAr_gdFEmA8yd38.mft (raw, json) Hash identifier: ALqWWZ22hgfyPZ/wLaQCYsRkwyu1zInb934TmxziMc0= Subject key identifier: 46:87:56:FE:B8:60:1C:14:BC:E3:15:05:39:5E:32:E5:A2:D4:6F:1A Authority key identifier: 75:7C:EF:E3:6B:3F:CC:68:A4:2C:0A:FF:81:D1:44:98:0F:32:77:7F Certificate issuer: /CN=757cefe36b3fcc68a42c0aff81d144980f32777f Certificate serial: 019A4EDB6CD746BBFDB762F0D79D01FF47EE Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/dXzv42s_zGikLAr_gdFEmA8yd38.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/28/972db6-770f-4462-9fc7-ee9b9517f2ec/1/dXzv42s_zGikLAr_gdFEmA8yd38.mft Manifest number: 0E62 Signing time: Tue 04 Nov 2025 12:33:14 +0000 Manifest this update: Tue 04 Nov 2025 12:33:14 +0000 Manifest next update: Wed 05 Nov 2025 12:33:14 +0000 Files and hashes: 1: 2MnJb6c5YnNQ1zVgyuJ_IZ3n2QI.roa (hash: k/m6yvyjLdB8+4uEbTkqM+WRV4cgI1Ugl2bD6WkY+xM=) 2: 4Yl_3VM-kdroRBsz7nPcb_MfTYo.roa (hash: 2xScy0N/ISEI1qEUmAbHyPZ6hI9GPPFsgivLJsiPGzo=) 3: AsZ4lIlUC0d5mfRed_ShT3RnpBQ.roa (hash: W7NsqtDHS3yDz7/Se2vS6CdoOqQMP8fqf009dcbuclU=) 4: LPKpfkMJen9TUH4ZfxgOzxqHkNU.roa (hash: ING4rNZCefT1Q8B8npudHtyqQQUdosJKFpOv34aIHJk=) 5: MUsQigUUD2skKaCxyUsENnVfQc0.roa (hash: jiSuFC22L+bIpKGlJw58reJLq1BBaex8I+CdJw/e78g=) 6: N1rTidaACgh8Wl5J2g45GZumvQs.roa (hash: btCaFx/Jws6uzlXHydN6cLSWM9L6FDcS4ymcYrWP048=) 7: UVAz1jDT3iVOFvSm2qO2EdM6DgI.roa (hash: BgGgY29/jzHM3rW+5X9NXDmgQhNrFZgHRGbC0+SNOiA=) 8: dXzv42s_zGikLAr_gdFEmA8yd38.crl (hash: OdUrxI0KBLLeYhKpV4NPr+INaTnid4/EhlCrE/05q4o=) 9: h4SH4jbcO_QrPdA2Gh6nPhcu90k.roa (hash: i2GmF/BWsi8T4gmbicuCkuelb7temf0e4pvjoHHSntA=) 10: pEFNfAg8nkFQ7szOFzgGqxU8A9I.roa (hash: lNi497sBRC4Xkg5Gl71AZlaivWTnykL+9yjiUscMI7I=) 11: ugpSKfU4cI4BHNBN_7iW8XaPfSI.roa (hash: db0tkxspHpe7xqGkGEEw5zEcWk0GCNRtkvpsh9z8Yis=) Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/28/972db6-770f-4462-9fc7-ee9b9517f2ec/1/dXzv42s_zGikLAr_gdFEmA8yd38.crl rsync://rpki.ripe.net/repository/DEFAULT/28/972db6-770f-4462-9fc7-ee9b9517f2ec/1/dXzv42s_zGikLAr_gdFEmA8yd38.mft rsync://rpki.ripe.net/repository/DEFAULT/dXzv42s_zGikLAr_gdFEmA8yd38.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Wed 05 Nov 2025 09:00:03 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9a:4e:db:6c:d7:46:bb:fd:b7:62:f0:d7:9d:01:ff:47:ee Signature Algorithm: sha256WithRSAEncryption Issuer: CN=757cefe36b3fcc68a42c0aff81d144980f32777f Validity Not Before: Nov 4 12:33:14 2025 GMT Not After : Nov 5 12:33:14 2025 GMT Subject: CN=468756feb8601c14bce31505395e32e5a2d46f1a Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:cf:fe:58:55:e7:20:90:af:2d:e3:56:7f:27:a2: 3e:aa:bf:12:41:3f:30:37:de:1c:b6:ac:29:54:24: 2a:9d:f3:b4:d9:16:0b:71:00:07:f4:c5:58:f9:d8: 8e:2d:38:1d:0a:f6:75:d9:cf:69:13:b5:01:bc:a0: 4c:96:32:f2:9f:76:2d:90:6f:2d:75:7e:56:77:66: 2d:fd:dd:3f:e5:0f:e8:16:85:c6:36:9f:49:bb:26: 91:3c:d7:4a:52:c3:b4:25:5d:31:07:4c:be:36:45: 39:25:7c:8b:7c:34:d2:1f:5c:e2:13:96:ce:fc:78: 01:03:5f:5a:13:ef:98:3a:cd:64:a5:fc:c2:21:40: 26:6f:e4:83:f5:d0:54:ac:3e:69:43:be:18:1b:3a: 87:1f:24:8d:d5:c1:ad:08:66:eb:7c:42:73:4a:86: bc:e0:22:de:e8:9a:44:d5:40:9d:1c:31:9e:bd:e7: 42:f7:69:fe:3e:3e:98:27:8c:1e:ea:85:2a:69:94: 63:7b:c4:55:b4:57:b9:53:66:02:0d:71:0f:ae:fc: 0c:e1:d3:a8:da:b2:9c:34:f7:cc:51:ef:19:bb:a0: 44:e1:34:37:b9:b9:22:95:0f:cd:ed:08:0f:34:7d: 02:57:2b:c1:6c:8b:33:a6:b4:6e:f5:06:e3:f3:af: 84:ad Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 46:87:56:FE:B8:60:1C:14:BC:E3:15:05:39:5E:32:E5:A2:D4:6F:1A X509v3 Authority Key Identifier: keyid:75:7C:EF:E3:6B:3F:CC:68:A4:2C:0A:FF:81:D1:44:98:0F:32:77:7F X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/dXzv42s_zGikLAr_gdFEmA8yd38.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/28/972db6-770f-4462-9fc7-ee9b9517f2ec/1/dXzv42s_zGikLAr_gdFEmA8yd38.mft X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/28/972db6-770f-4462-9fc7-ee9b9517f2ec/1/dXzv42s_zGikLAr_gdFEmA8yd38.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 48:1f:5d:86:e9:38:82:3c:89:f5:03:12:27:76:e8:84:23:5f: 80:b5:1b:8a:9f:e6:fb:f6:9d:01:4c:67:82:30:0f:f7:fa:7d: cb:f1:b2:78:b8:2a:d4:0b:ea:74:0d:ff:e3:34:e8:ea:94:b4: c0:84:ca:aa:37:17:8f:c4:1b:13:72:e6:22:36:b8:c5:d6:ff: 70:29:57:a4:27:52:03:99:d0:d4:f7:ff:4c:88:73:9d:b4:87: 7d:98:13:7d:9e:91:51:de:f4:f6:22:ee:58:bf:97:cc:6f:cc: 33:88:72:44:45:95:15:76:c5:75:d2:65:69:90:5f:bc:5b:e1: 5f:1d:48:02:8d:bd:aa:c0:93:e8:76:cc:02:d0:e0:a2:05:51: 7a:63:6d:05:3f:92:90:61:79:99:56:b4:4f:36:81:31:03:e8: 09:c5:3c:8b:cc:9f:1e:b5:63:91:c7:55:d7:97:c4:51:3c:5d: 1f:98:a8:b6:3d:fc:76:8a:6e:48:af:90:6c:5e:dc:68:32:5c: 06:75:20:0d:b9:85:f9:2f:e9:8c:f1:f2:0b:90:26:cf:4d:12: fd:f7:76:03:78:63:ba:c2:80:0e:81:39:c4:7b:9f:ff:de:61: d4:15:11:5f:d5:3e:b3:0c:79:6a:ad:6b:76:f8:39:17:e5:cd: e3:f6:0d:e4 -----BEGIN CERTIFICATE----- MIIFFjCCA/6gAwIBAgISAZpO22zXRrv9t2Lw150B/0fuMA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKDc1N2NlZmUzNmIzZmNjNjhhNDJjMGFmZjgxZDE0NDk4MGYz Mjc3N2YwHhcNMjUxMTA0MTIzMzE0WhcNMjUxMTA1MTIzMzE0WjAzMTEwLwYDVQQD Eyg0Njg3NTZmZWI4NjAxYzE0YmNlMzE1MDUzOTVlMzJlNWEyZDQ2ZjFhMIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAz/5YVecgkK8t41Z/J6I+qr8SQT8w N94ctqwpVCQqnfO02RYLcQAH9MVY+diOLTgdCvZ12c9pE7UBvKBMljLyn3YtkG8t dX5Wd2Yt/d0/5Q/oFoXGNp9JuyaRPNdKUsO0JV0xB0y+NkU5JXyLfDTSH1ziE5bO /HgBA19aE++YOs1kpfzCIUAmb+SD9dBUrD5pQ74YGzqHHySN1cGtCGbrfEJzSoa8 4CLe6JpE1UCdHDGevedC92n+Pj6YJ4we6oUqaZRje8RVtFe5U2YCDXEPrvwM4dOo 2rKcNPfMUe8Zu6BE4TQ3ubkilQ/N7QgPNH0CVyvBbIszprRu9Qbj86+ErQIDAQAB o4ICIjCCAh4wHQYDVR0OBBYEFEaHVv64YBwUvOMVBTleMuWi1G8aMB8GA1UdIwQY MBaAFHV87+NrP8xopCwK/4HRRJgPMnd/MA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvZFh6djQyc196R2lrTEFyX2dkRkVtQTh5ZDM4LmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC8yOC85NzJkYjYtNzcwZi00NDYyLTlmYzct ZWU5Yjk1MTdmMmVjLzEvZFh6djQyc196R2lrTEFyX2dkRkVtQTh5ZDM4Lm1mdDCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC8yOC85NzJkYjYtNzcwZi00NDYyLTlmYzctZWU5Yjk1MTdmMmVj LzEvZFh6djQyc196R2lrTEFyX2dkRkVtQTh5ZDM4LmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEASB9dhuk4 gjyJ9QMSJ3bohCNfgLUbip/m+/adAUxngjAP9/p9y/GyeLgq1AvqdA3/4zTo6pS0 wITKqjcXj8QbE3LmIja4xdb/cClXpCdSA5nQ1Pf/TIhznbSHfZgTfZ6RUd709iLu WL+XzG/MM4hyREWVFXbFddJlaZBfvFvhXx1IAo29qsCT6HbMAtDgogVRemNtBT+S kGF5mVa0TzaBMQPoCcU8i8yfHrVjkcdV15fEUTxdH5iotj38dopuSK+QbF7caDJc BnUgDbmF+S/pjPHyC5Amz00S/fd2A3hjusKADoE5xHuf/95h1BURX9U+swx5aq1r dvg5F+XN4/YN5A== -----END CERTIFICATE-----Generated at Tue Nov 4 17:56:19 2025 by rpki-client