$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/28/ebbac9-fee7-4f3b-8cd5-7a41254eaaca/1/tyWIwA7vcVgJ61_dbWcXzCjA36w.mft File: tyWIwA7vcVgJ61_dbWcXzCjA36w.mft (raw, json) Hash identifier: SkLObjSvOrbIf4udwo31lMj5mjiUNfXeuEIgtY4tLRA= Subject key identifier: 74:C7:47:70:C9:6A:ED:C8:E8:3C:C2:E3:DC:47:65:D8:B0:B5:A9:6D Authority key identifier: B7:25:88:C0:0E:EF:71:58:09:EB:5F:DD:6D:67:17:CC:28:C0:DF:AC Certificate issuer: /CN=b72588c00eef715809eb5fdd6d6717cc28c0dfac Certificate serial: 019A4DE21CDB5637F69D30139606B8BBB5B7 Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/tyWIwA7vcVgJ61_dbWcXzCjA36w.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/28/ebbac9-fee7-4f3b-8cd5-7a41254eaaca/1/tyWIwA7vcVgJ61_dbWcXzCjA36w.mft Manifest number: 171F Signing time: Tue 04 Nov 2025 08:00:55 +0000 Manifest this update: Tue 04 Nov 2025 08:00:55 +0000 Manifest next update: Wed 05 Nov 2025 08:00:55 +0000 Files and hashes: 1: 30BxK6_jpie3YrLCVwh_L1trwzk.roa (hash: X9FbkEMlA2QphV+O7rBHZ0meCsmOLXe9r7nPMvJuQcE=) 2: Dbj9xuGjig4FQD4z5CtOr-cvTeI.roa (hash: Kh8CzaShn4hw0xJ/eT2H0TnUMB7Vdu0F94Rtfvnict8=) 3: EuktsmR6HvXm2m5YsC5Wyo5ecw4.roa (hash: JZi+DlaPt3ZWFPrgsMEzdF/6HYunSwsq7ugQUzVGcAU=) 4: F-P_HvBB3WeH7KniyH81o28KKbo.roa (hash: 8sYaDjHEHJUFW2fXpmzCzQDMt9L045SyDdjIlOEUNco=) 5: Il7zmHjI6jj-0rEtM_yBLvYuye4.roa (hash: de+WYdahLIsSTArl8Hy+qPN/PBIbGPDv82xXs+xKdZY=) 6: WBOYQCAoKRyLsa6JAYAHwgmZIqI.roa (hash: lyZfLnKwP7kxcM63676+jKHGePevi3n5oMgldGNu5qA=) 7: WR7z7m7JZCweB81LV8VsoLwZDDI.roa (hash: n+zNUpOUwgPN3iy+Ul6bCia4Bw0P9Lb0d3EbTWyw+/I=) 8: eNRtwGVQ1VdkNKBRZ8o9uf4Ec24.roa (hash: syspd0kan424RvhNNvOMRktLryIova5s5SuLnxOMs4I=) 9: inKVgfg6tkDW3-Ko2Fj1q9U9rjM.roa (hash: m3IZ4E9iTFBEvHgMwMmb/F3F5jQFINfkwm1zng7j3wE=) 10: jmu-RUwAGlfdjyuIX4pdgwp2S_c.roa (hash: 0w/XwzNScEN/vprJx5SJRgxW5WArgctvQM2YSDSFtog=) 11: tLlGubJJap72E2l8gRh9Uuu4S8A.roa (hash: jBh5pu7FnbvAeJHH3DMpIfaMMsMyb9LyPf0qd9sE/90=) 12: tyWIwA7vcVgJ61_dbWcXzCjA36w.crl (hash: IgrZrCEnhB+UHcOr224OE3RBgT20AMSoJv+kPtmboLo=) Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/28/ebbac9-fee7-4f3b-8cd5-7a41254eaaca/1/tyWIwA7vcVgJ61_dbWcXzCjA36w.crl rsync://rpki.ripe.net/repository/DEFAULT/28/ebbac9-fee7-4f3b-8cd5-7a41254eaaca/1/tyWIwA7vcVgJ61_dbWcXzCjA36w.mft rsync://rpki.ripe.net/repository/DEFAULT/tyWIwA7vcVgJ61_dbWcXzCjA36w.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Wed 05 Nov 2025 08:00:55 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9a:4d:e2:1c:db:56:37:f6:9d:30:13:96:06:b8:bb:b5:b7 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=b72588c00eef715809eb5fdd6d6717cc28c0dfac Validity Not Before: Nov 4 08:00:55 2025 GMT Not After : Nov 5 08:00:55 2025 GMT Subject: CN=74c74770c96aedc8e83cc2e3dc4765d8b0b5a96d Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:bb:10:1c:d5:59:1e:47:79:29:29:b6:4d:e8:87: 68:ad:cb:eb:4d:7b:b2:39:d2:65:37:22:7f:9e:a0: 0d:02:86:a0:de:e0:f3:e4:0b:c4:c4:5b:12:e6:32: 1a:e5:6a:4d:e4:3b:ee:24:af:8b:a6:d4:66:66:23: 3e:5b:3b:54:6c:72:0a:c5:20:1e:6b:d5:56:d4:19: b7:17:34:da:e2:5a:22:ad:e9:20:71:5c:cf:7d:f7: 7c:d6:d6:a0:3d:03:6f:e7:0d:22:ea:5e:25:69:6b: e5:12:34:48:57:5c:b9:09:d8:08:ed:b5:5a:ec:b4: 0e:72:55:34:8a:19:e2:82:e2:34:f9:cc:98:aa:5f: d4:c2:7a:ee:32:16:b4:f6:09:00:9a:64:f0:f3:23: ab:07:1a:30:02:c9:fa:cb:46:ff:db:16:da:69:f0: 91:09:80:95:73:62:fc:31:10:4e:45:a6:29:cf:67: f9:2b:58:47:dc:dd:83:13:24:cd:dd:61:1a:72:1e: 70:ae:87:54:3e:29:bd:cb:e7:dc:f6:e2:90:61:e0: 1e:6b:67:df:3d:f4:e9:9d:17:09:cc:82:d0:f0:e8: f8:c6:86:02:d6:df:1a:30:05:d0:bb:29:d0:c3:e7: ab:77:e6:27:d5:97:f2:09:e7:e1:c1:1f:3c:86:8c: dd:d3 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 74:C7:47:70:C9:6A:ED:C8:E8:3C:C2:E3:DC:47:65:D8:B0:B5:A9:6D X509v3 Authority Key Identifier: keyid:B7:25:88:C0:0E:EF:71:58:09:EB:5F:DD:6D:67:17:CC:28:C0:DF:AC X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/tyWIwA7vcVgJ61_dbWcXzCjA36w.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/28/ebbac9-fee7-4f3b-8cd5-7a41254eaaca/1/tyWIwA7vcVgJ61_dbWcXzCjA36w.mft X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/28/ebbac9-fee7-4f3b-8cd5-7a41254eaaca/1/tyWIwA7vcVgJ61_dbWcXzCjA36w.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 59:3d:4a:f7:a9:0b:c7:e2:c2:5c:2d:65:82:29:f2:be:67:04: c6:b1:ca:05:6f:11:7b:3f:81:f1:bd:28:7d:89:18:93:2b:25: d7:ae:07:3a:02:06:38:da:b7:9d:76:86:9d:eb:17:f3:58:08: 72:6e:fa:8d:6c:d4:a0:b7:9b:8e:cb:40:26:af:38:13:0b:71: 02:37:fc:63:c0:73:08:9c:38:8e:ed:11:7c:f3:62:d9:63:8f: 71:21:b4:ea:07:bf:eb:66:7d:41:59:38:cd:37:2c:78:2d:e9: 8d:27:1a:a2:09:96:25:53:0a:62:f5:d7:2b:70:25:2c:b5:da: 0e:51:3f:4b:ff:71:2e:2f:bc:43:63:51:63:c1:e6:f0:d5:f6: 33:d3:9e:6a:b4:66:10:bc:91:c5:01:87:ca:d9:d8:54:fa:18: ea:e3:40:0d:e9:09:49:53:98:11:d1:6b:e9:4c:1c:18:6b:0a: e1:67:58:e2:33:8b:a3:84:83:91:41:ba:be:8d:17:f8:4f:88: 18:51:70:ae:16:16:9c:00:56:f7:75:d2:21:01:7f:b2:68:fe: fd:99:ae:fd:12:8f:d1:6d:e9:dc:e8:89:8a:79:01:6e:62:d6: 00:f8:ee:9d:06:0e:1c:f7:61:ed:4e:05:d2:e1:34:82:46:96: 97:49:33:54 -----BEGIN CERTIFICATE----- MIIFFjCCA/6gAwIBAgISAZpN4hzbVjf2nTATlga4u7W3MA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKGI3MjU4OGMwMGVlZjcxNTgwOWViNWZkZDZkNjcxN2NjMjhj MGRmYWMwHhcNMjUxMTA0MDgwMDU1WhcNMjUxMTA1MDgwMDU1WjAzMTEwLwYDVQQD Eyg3NGM3NDc3MGM5NmFlZGM4ZTgzY2MyZTNkYzQ3NjVkOGIwYjVhOTZkMIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAuxAc1VkeR3kpKbZN6IdorcvrTXuy OdJlNyJ/nqANAoag3uDz5AvExFsS5jIa5WpN5DvuJK+LptRmZiM+WztUbHIKxSAe a9VW1Bm3FzTa4loirekgcVzPffd81tagPQNv5w0i6l4laWvlEjRIV1y5CdgI7bVa 7LQOclU0ihniguI0+cyYql/UwnruMha09gkAmmTw8yOrBxowAsn6y0b/2xbaafCR CYCVc2L8MRBORaYpz2f5K1hH3N2DEyTN3WEach5wrodUPim9y+fc9uKQYeAea2ff PfTpnRcJzILQ8Oj4xoYC1t8aMAXQuynQw+erd+Yn1ZfyCefhwR88hozd0wIDAQAB o4ICIjCCAh4wHQYDVR0OBBYEFHTHR3DJau3I6DzC49xHZdiwtaltMB8GA1UdIwQY MBaAFLcliMAO73FYCetf3W1nF8wowN+sMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvdHlXSXdBN3ZjVmdKNjFfZGJXY1h6Q2pBMzZ3LmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC8yOC9lYmJhYzktZmVlNy00ZjNiLThjZDUt N2E0MTI1NGVhYWNhLzEvdHlXSXdBN3ZjVmdKNjFfZGJXY1h6Q2pBMzZ3Lm1mdDCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC8yOC9lYmJhYzktZmVlNy00ZjNiLThjZDUtN2E0MTI1NGVhYWNh LzEvdHlXSXdBN3ZjVmdKNjFfZGJXY1h6Q2pBMzZ3LmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAWT1K96kL x+LCXC1lginyvmcExrHKBW8Rez+B8b0ofYkYkysl164HOgIGONq3nXaGnesX81gI cm76jWzUoLebjstAJq84EwtxAjf8Y8BzCJw4ju0RfPNi2WOPcSG06ge/62Z9QVk4 zTcseC3pjScaogmWJVMKYvXXK3AlLLXaDlE/S/9xLi+8Q2NRY8Hm8NX2M9OearRm ELyRxQGHytnYVPoY6uNADekJSVOYEdFr6UwcGGsK4WdY4jOLo4SDkUG6vo0X+E+I GFFwrhYWnABW93XSIQF/smj+/Zmu/RKP0W3p3OiJinkBbmLWAPjunQYOHPdh7U4F 0uE0gkaWl0kzVA== -----END CERTIFICATE-----Generated at Tue Nov 4 17:54:36 2025 by rpki-client