$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/29/cc8f4a-4c02-404b-8d93-2cde65f3112a/1/h74JMJcJfERX_1qj5Yk8jBVDJhI.mft File: h74JMJcJfERX_1qj5Yk8jBVDJhI.mft (raw, json) Hash identifier: I42HBP4scGnqR+rc27AE3p4O1jG6Gjplq0oLrKEjUEE= Subject key identifier: 12:19:E0:37:09:16:13:51:19:C2:89:F4:54:46:E3:75:23:16:28:BE Authority key identifier: 87:BE:09:30:97:09:7C:44:57:FF:5A:A3:E5:89:3C:8C:15:43:26:12 Certificate issuer: /CN=87be093097097c4457ff5aa3e5893c8c15432612 Certificate serial: 019A4D73BF6329817A6DDCF1566C54B046C0 Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/h74JMJcJfERX_1qj5Yk8jBVDJhI.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/29/cc8f4a-4c02-404b-8d93-2cde65f3112a/1/h74JMJcJfERX_1qj5Yk8jBVDJhI.mft Manifest number: 139C Signing time: Tue 04 Nov 2025 06:00:22 +0000 Manifest this update: Tue 04 Nov 2025 06:00:22 +0000 Manifest next update: Wed 05 Nov 2025 06:00:22 +0000 Files and hashes: 1: 58EBygRjdS7517jE8ijFSPfVOH4.roa (hash: 7YP7WUOPsrK23qXejFg0a6c2K8s3GbzwWCeuhRLXrr4=) 2: 6gQb_YrXJIkOy1ffV5AywwaDFKA.roa (hash: YBUcx/W2YYWfTW+ZfLh5vpIiC6jkcxCKGBt0nojo2Ok=) 3: CjTW9-CUmuY1lxZ8OqndS2FXSrY.roa (hash: 9DQ0LnRbHYpMYq+dl7Z0Jfv0Jx2DrmotGXluT5sxbiI=) 4: UYD_ol6L79u8glgaI6wKUZit3aI.roa (hash: Gf9BtC+mpY9FQr0OFj9WV8BSFzyS8ChMq/mXIibBTC4=) 5: YxuPih3fAlXVoEE31gDs9iD2i1w.roa (hash: x8butTOJLg1TuADmdhNJfjqeOtty4tQbuYOKyeZNAJI=) 6: cgfWhp9nnNlIFwxwBmM9ufcXLT8.roa (hash: d9o/0tEnmxkRdMrExtvCAvZnhgV08vpjue2h9xSnd5M=) 7: h74JMJcJfERX_1qj5Yk8jBVDJhI.crl (hash: ifmvYec9BbzZNpEhyaseGfUOupNcchTvGk2Ny0aAdCM=) 8: jS9AN5oD9gr_onzGTzL8xf4_tCg.roa (hash: L5WRngdm8hXH1GtO9dblNyDW24uvtXBx7hO8Cv9i3R8=) 9: l73XbGk7c4j4MjyLCnCZ2AhSa5g.roa (hash: zN4KADzvP9RDaA1coLbTnlm7K8otMtISf3HRhyFdP4I=) 10: zDYhvUbelcRpqpslUbRSgUjh_fg.roa (hash: oMqhUHMRnzSTRY98vl61orkGgfrk9poSjKlRD++vvbQ=) Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/29/cc8f4a-4c02-404b-8d93-2cde65f3112a/1/h74JMJcJfERX_1qj5Yk8jBVDJhI.crl rsync://rpki.ripe.net/repository/DEFAULT/29/cc8f4a-4c02-404b-8d93-2cde65f3112a/1/h74JMJcJfERX_1qj5Yk8jBVDJhI.mft rsync://rpki.ripe.net/repository/DEFAULT/h74JMJcJfERX_1qj5Yk8jBVDJhI.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Wed 05 Nov 2025 06:00:22 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9a:4d:73:bf:63:29:81:7a:6d:dc:f1:56:6c:54:b0:46:c0 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=87be093097097c4457ff5aa3e5893c8c15432612 Validity Not Before: Nov 4 06:00:22 2025 GMT Not After : Nov 5 06:00:22 2025 GMT Subject: CN=1219e0370916135119c289f45446e375231628be Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:9e:98:18:18:11:fd:72:88:02:4c:ea:8c:27:b5: 5c:62:b9:91:8e:5a:27:8f:07:34:93:3c:cc:72:22: 8d:4f:d7:aa:19:ea:45:a1:6e:86:63:27:71:41:36: a7:3f:36:91:cd:6d:29:1b:79:eb:79:79:24:9c:d4: d3:fd:24:0c:c7:d6:fb:bf:bd:f7:e5:65:1c:e1:b0: 9d:aa:9f:0a:82:a3:b0:1a:b1:8b:16:b8:1f:b5:89: 1f:c4:2d:d4:95:eb:c0:a0:89:f6:e8:36:f6:ff:5e: 85:78:95:71:53:0e:7a:78:ae:92:07:b2:f9:8f:22: 85:8a:67:01:f3:f8:b8:9e:e1:f3:8c:c2:15:65:24: ea:33:8d:8c:65:6d:a6:7c:90:b7:ee:18:8a:17:df: ed:1b:4a:20:7d:cf:2d:ff:5d:8f:19:24:58:2e:db: 88:32:7c:c3:88:c2:87:9e:d3:ba:88:b5:30:35:54: f0:87:a5:3a:48:f9:23:03:3d:52:a8:a3:9d:8f:bb: 21:aa:2f:11:2c:ec:35:0f:fc:46:7e:8d:73:ed:30: b6:36:2d:c5:06:3f:b1:6b:35:98:ac:b3:45:8d:25: aa:c2:b7:96:b6:11:0a:bf:b3:71:cb:35:05:fe:38: b0:63:95:85:aa:2a:27:48:bf:c0:12:a0:57:0f:95: f7:51 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 12:19:E0:37:09:16:13:51:19:C2:89:F4:54:46:E3:75:23:16:28:BE X509v3 Authority Key Identifier: keyid:87:BE:09:30:97:09:7C:44:57:FF:5A:A3:E5:89:3C:8C:15:43:26:12 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/h74JMJcJfERX_1qj5Yk8jBVDJhI.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/29/cc8f4a-4c02-404b-8d93-2cde65f3112a/1/h74JMJcJfERX_1qj5Yk8jBVDJhI.mft X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/29/cc8f4a-4c02-404b-8d93-2cde65f3112a/1/h74JMJcJfERX_1qj5Yk8jBVDJhI.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 87:6e:e5:78:b6:cd:dc:a1:42:3d:70:e9:a4:87:31:8c:f4:6a: 2c:b1:22:42:73:c8:70:87:51:12:dd:7d:29:a2:a4:82:39:61: d8:c5:b8:f8:2f:a4:ed:ae:62:3c:a4:cd:dd:76:68:ca:ee:c7: 81:72:9a:68:8c:75:fe:d2:f6:85:a3:5a:06:ba:00:52:8a:93: ef:e1:63:de:b8:48:6d:d8:44:54:b4:9b:bd:08:ef:d9:19:ba: bc:99:da:5b:20:92:a0:fa:47:27:54:24:f8:3e:d8:bd:d5:8a: c4:e8:04:86:75:4a:0f:69:34:a6:56:3f:e6:34:48:91:d4:d7: 59:fc:57:99:48:fc:ca:96:b5:f5:e7:f7:c2:2d:dd:b6:d5:ea: 63:ef:e1:ca:b4:55:6b:d5:88:59:f5:42:48:18:7d:dd:1b:f0: 50:5b:bc:ce:3e:d2:97:9b:d9:37:a9:bb:bf:c8:a9:0a:93:72: 80:d5:20:e1:1e:3a:90:7b:e6:f0:32:e8:96:09:ad:83:02:d6: 66:e2:ae:a8:9b:67:73:db:94:2a:e4:e0:a2:31:9d:e5:dd:a0: 8e:83:9c:1c:aa:b2:0c:f1:ab:7d:32:fa:de:a7:c6:8d:e1:16: 49:54:8a:68:9b:89:b9:36:67:4a:cd:ef:9a:e4:3d:99:e9:17: 36:ab:1c:2e -----BEGIN CERTIFICATE----- MIIFFjCCA/6gAwIBAgISAZpNc79jKYF6bdzxVmxUsEbAMA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKDg3YmUwOTMwOTcwOTdjNDQ1N2ZmNWFhM2U1ODkzYzhjMTU0 MzI2MTIwHhcNMjUxMTA0MDYwMDIyWhcNMjUxMTA1MDYwMDIyWjAzMTEwLwYDVQQD EygxMjE5ZTAzNzA5MTYxMzUxMTljMjg5ZjQ1NDQ2ZTM3NTIzMTYyOGJlMIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAnpgYGBH9cogCTOqMJ7VcYrmRjlon jwc0kzzMciKNT9eqGepFoW6GYydxQTanPzaRzW0pG3nreXkknNTT/SQMx9b7v733 5WUc4bCdqp8KgqOwGrGLFrgftYkfxC3UlevAoIn26Db2/16FeJVxUw56eK6SB7L5 jyKFimcB8/i4nuHzjMIVZSTqM42MZW2mfJC37hiKF9/tG0ogfc8t/12PGSRYLtuI MnzDiMKHntO6iLUwNVTwh6U6SPkjAz1SqKOdj7shqi8RLOw1D/xGfo1z7TC2Ni3F Bj+xazWYrLNFjSWqwreWthEKv7NxyzUF/jiwY5WFqionSL/AEqBXD5X3UQIDAQAB o4ICIjCCAh4wHQYDVR0OBBYEFBIZ4DcJFhNRGcKJ9FRG43UjFii+MB8GA1UdIwQY MBaAFIe+CTCXCXxEV/9ao+WJPIwVQyYSMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvaDc0Sk1KY0pmRVJYXzFxajVZazhqQlZESmhJLmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC8yOS9jYzhmNGEtNGMwMi00MDRiLThkOTMt MmNkZTY1ZjMxMTJhLzEvaDc0Sk1KY0pmRVJYXzFxajVZazhqQlZESmhJLm1mdDCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC8yOS9jYzhmNGEtNGMwMi00MDRiLThkOTMtMmNkZTY1ZjMxMTJh LzEvaDc0Sk1KY0pmRVJYXzFxajVZazhqQlZESmhJLmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAh27leLbN 3KFCPXDppIcxjPRqLLEiQnPIcIdREt19KaKkgjlh2MW4+C+k7a5iPKTN3XZoyu7H gXKaaIx1/tL2haNaBroAUoqT7+Fj3rhIbdhEVLSbvQjv2Rm6vJnaWyCSoPpHJ1Qk +D7YvdWKxOgEhnVKD2k0plY/5jRIkdTXWfxXmUj8ypa19ef3wi3dttXqY+/hyrRV a9WIWfVCSBh93RvwUFu8zj7Sl5vZN6m7v8ipCpNygNUg4R46kHvm8DLolgmtgwLW ZuKuqJtnc9uUKuTgojGd5d2gjoOcHKqyDPGrfTL63qfGjeEWSVSKaJuJuTZnSs3v muQ9mekXNqscLg== -----END CERTIFICATE-----Generated at Tue Nov 4 14:41:47 2025 by rpki-client