$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/2c/73beeb-6a05-4cca-86be-acfc3d2c2522/1/tsFn36mIKyqo-EWV9YqXwwXKQ8U.mft File: tsFn36mIKyqo-EWV9YqXwwXKQ8U.mft (raw, json) Hash identifier: HPn9q4n72OGmJlShsOK/BqZQlOt4Fpbfx+hXqsQLybs= Subject key identifier: F2:0E:2F:4B:D7:CB:25:2E:13:7D:95:E8:FA:2F:08:34:05:A3:1B:D3 Authority key identifier: B6:C1:67:DF:A9:88:2B:2A:A8:F8:45:95:F5:8A:97:C3:05:CA:43:C5 Certificate issuer: /CN=b6c167dfa9882b2aa8f84595f58a97c305ca43c5 Certificate serial: 019A4D3CC53F7062E383F1154D4E0CDFFE29 Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/tsFn36mIKyqo-EWV9YqXwwXKQ8U.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/2c/73beeb-6a05-4cca-86be-acfc3d2c2522/1/tsFn36mIKyqo-EWV9YqXwwXKQ8U.mft Manifest number: 1716 Signing time: Tue 04 Nov 2025 05:00:19 +0000 Manifest this update: Tue 04 Nov 2025 05:00:19 +0000 Manifest next update: Wed 05 Nov 2025 05:00:19 +0000 Files and hashes: 1: 668BLkySdWDDmr5lSsB-YtLZ80Q.roa (hash: wAlTOv+x5XHci96XsqbLWx0e5eMWTNKBMvsGMhRIW5g=) 2: CaGm-a6CxApZqirxxCCZ9rx1aiM.roa (hash: in3Qvj8lVIdQByC2i0yNl5XLhAZsdDWoJ0Q3xc4mK5w=) 3: G7X7b_-2524mL2utRjqA_p3x1ko.roa (hash: eNBADPehKuBiSWTNdfZV2c/hvceCYObCQ47OijZj/IM=) 4: Ha2aIsE24z_1EZsUwFVaBMCEfdM.roa (hash: xkTrIuXJyp+z7TixxHSY5VnwKcm94LBvzrBz6XRQmHA=) 5: U4BB4H7P7Xc6wcR_Q3KuEg8MoBI.roa (hash: QxEX5rbeLCQiv5QJ1QrJpxAQPPcED/CkB9BmO957WyU=) 6: ZGbxcZi9cS52WoJdVb-r0w_TFVk.roa (hash: UaSAvffUeAya0sIHPIbsIDALMTsblptod9P+M2JwLlw=) 7: _JHDbAZ2ATmmU2h8LNTts0pQdRw.roa (hash: ydLyrnNRvtcOwVHilzuoONY7T6CbRsMdyLBgcqYGqyo=) 8: sCoMzCi05UrDFtmTnulnnY6R09o.roa (hash: ZM5RYx3VNWn9QHDFDvEBjHCFQTlKZaYcsLAypuanz3s=) 9: tPcgE7Dec0le1j4-lCiliZGhMhA.roa (hash: rqY7E+ZB4onuPYp0NQezTIDslFC1HqRDysd/HXAkW7Y=) 10: tsFn36mIKyqo-EWV9YqXwwXKQ8U.crl (hash: ionTiU2+Q4lDWsJvqFLAbEhaMOiCl8rxAQKIwaSTaUM=) Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/2c/73beeb-6a05-4cca-86be-acfc3d2c2522/1/tsFn36mIKyqo-EWV9YqXwwXKQ8U.crl rsync://rpki.ripe.net/repository/DEFAULT/2c/73beeb-6a05-4cca-86be-acfc3d2c2522/1/tsFn36mIKyqo-EWV9YqXwwXKQ8U.mft rsync://rpki.ripe.net/repository/DEFAULT/tsFn36mIKyqo-EWV9YqXwwXKQ8U.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Wed 05 Nov 2025 05:00:19 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9a:4d:3c:c5:3f:70:62:e3:83:f1:15:4d:4e:0c:df:fe:29 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=b6c167dfa9882b2aa8f84595f58a97c305ca43c5 Validity Not Before: Nov 4 05:00:19 2025 GMT Not After : Nov 5 05:00:19 2025 GMT Subject: CN=f20e2f4bd7cb252e137d95e8fa2f083405a31bd3 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:b9:bd:2e:2e:89:fa:07:27:d9:f5:04:46:cc:8d: 6a:6d:38:c7:17:10:b6:be:dd:05:e6:fd:18:7a:26: a6:0d:17:7c:c3:6e:da:df:5a:34:95:9f:d0:05:f3: 09:34:86:40:3e:43:4c:d3:a7:12:47:9a:5e:73:1e: e3:9e:6a:24:9e:b1:e8:d2:d9:1a:a1:b3:75:ea:7b: cb:96:77:f4:fc:10:c7:8c:fc:f0:a1:8f:20:32:3b: 48:1f:48:01:37:78:d9:fa:e2:04:2a:95:f6:7b:b6: d7:61:92:3d:fb:c3:a0:df:a4:63:72:22:c2:7b:ba: 45:f0:97:4d:51:20:08:6b:e9:26:0a:d3:05:75:b9: aa:b3:12:7b:88:4d:1e:7d:fe:55:0e:82:68:a0:df: a2:4c:9a:7f:19:8f:c5:84:07:4e:3a:64:13:25:6c: 3c:ac:4b:4d:50:a1:a9:5e:b2:57:42:c8:60:7b:e1: 89:f0:56:47:38:5a:b8:51:86:dc:10:87:f9:75:6b: 9d:28:b6:bb:6c:79:01:6b:ee:31:5f:ce:28:c5:0e: dd:0b:ef:27:a7:4c:98:1a:c0:3f:aa:4a:4e:9a:16: 9c:9e:f3:19:b9:3a:b8:bc:16:ff:ff:b6:ab:d7:a7: 2e:dd:1f:0c:75:04:d0:93:af:77:b4:df:a9:0b:3b: 0a:0b Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: F2:0E:2F:4B:D7:CB:25:2E:13:7D:95:E8:FA:2F:08:34:05:A3:1B:D3 X509v3 Authority Key Identifier: keyid:B6:C1:67:DF:A9:88:2B:2A:A8:F8:45:95:F5:8A:97:C3:05:CA:43:C5 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/tsFn36mIKyqo-EWV9YqXwwXKQ8U.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/2c/73beeb-6a05-4cca-86be-acfc3d2c2522/1/tsFn36mIKyqo-EWV9YqXwwXKQ8U.mft X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/2c/73beeb-6a05-4cca-86be-acfc3d2c2522/1/tsFn36mIKyqo-EWV9YqXwwXKQ8U.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 10:dc:1c:57:08:cb:e2:f1:c0:dd:45:7c:b8:8d:94:fc:5a:86: 7a:73:71:0f:59:30:97:23:1a:27:2e:aa:c4:2b:83:54:d7:d5: 9b:6c:24:0b:60:ea:3f:cd:53:7b:95:71:50:46:d0:67:04:46: cd:2a:d2:97:9c:00:e1:da:d9:aa:89:d3:ad:b7:18:22:74:44: 2b:29:7b:b6:2c:34:35:b6:53:51:79:48:0d:86:29:cb:ae:a1: 86:16:ec:7a:88:c5:ad:56:1d:05:43:d9:c2:68:0e:7b:88:f9: ea:85:44:94:d4:f8:23:00:18:4e:1a:3c:c7:f4:ea:a7:f0:c7: 0c:42:49:c5:ee:60:cd:2f:55:94:89:88:f7:ec:48:7f:0e:0c: 27:53:4f:7e:25:b7:23:e5:da:4b:5a:35:7b:8e:fc:ee:8a:4a: f8:88:35:36:8c:eb:24:e4:4a:7a:20:92:ba:42:9b:97:82:98: a8:2d:69:0f:ac:3b:fe:f6:b9:7d:f3:ed:ca:5b:7d:26:9c:b2: 61:14:97:93:f1:d3:fb:0d:a3:eb:fe:72:38:ec:35:9b:22:c5: fa:05:18:13:81:09:06:c8:39:24:85:2f:45:4d:d5:29:17:de: f7:c1:dc:e3:59:b1:48:11:f5:ee:70:c1:e3:06:81:af:87:d6: c5:42:8f:95 -----BEGIN CERTIFICATE----- MIIFFjCCA/6gAwIBAgISAZpNPMU/cGLjg/EVTU4M3/4pMA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKGI2YzE2N2RmYTk4ODJiMmFhOGY4NDU5NWY1OGE5N2MzMDVj YTQzYzUwHhcNMjUxMTA0MDUwMDE5WhcNMjUxMTA1MDUwMDE5WjAzMTEwLwYDVQQD EyhmMjBlMmY0YmQ3Y2IyNTJlMTM3ZDk1ZThmYTJmMDgzNDA1YTMxYmQzMIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAub0uLon6ByfZ9QRGzI1qbTjHFxC2 vt0F5v0YeiamDRd8w27a31o0lZ/QBfMJNIZAPkNM06cSR5pecx7jnmoknrHo0tka obN16nvLlnf0/BDHjPzwoY8gMjtIH0gBN3jZ+uIEKpX2e7bXYZI9+8Og36RjciLC e7pF8JdNUSAIa+kmCtMFdbmqsxJ7iE0eff5VDoJooN+iTJp/GY/FhAdOOmQTJWw8 rEtNUKGpXrJXQshge+GJ8FZHOFq4UYbcEIf5dWudKLa7bHkBa+4xX84oxQ7dC+8n p0yYGsA/qkpOmhacnvMZuTq4vBb//7ar16cu3R8MdQTQk693tN+pCzsKCwIDAQAB o4ICIjCCAh4wHQYDVR0OBBYEFPIOL0vXyyUuE32V6PovCDQFoxvTMB8GA1UdIwQY MBaAFLbBZ9+piCsqqPhFlfWKl8MFykPFMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvdHNGbjM2bUlLeXFvLUVXVjlZcVh3d1hLUThVLmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC8yYy83M2JlZWItNmEwNS00Y2NhLTg2YmUt YWNmYzNkMmMyNTIyLzEvdHNGbjM2bUlLeXFvLUVXVjlZcVh3d1hLUThVLm1mdDCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC8yYy83M2JlZWItNmEwNS00Y2NhLTg2YmUtYWNmYzNkMmMyNTIy LzEvdHNGbjM2bUlLeXFvLUVXVjlZcVh3d1hLUThVLmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAENwcVwjL 4vHA3UV8uI2U/FqGenNxD1kwlyMaJy6qxCuDVNfVm2wkC2DqP81Te5VxUEbQZwRG zSrSl5wA4drZqonTrbcYInREKyl7tiw0NbZTUXlIDYYpy66hhhbseojFrVYdBUPZ wmgOe4j56oVElNT4IwAYTho8x/Tqp/DHDEJJxe5gzS9VlImI9+xIfw4MJ1NPfiW3 I+XaS1o1e4787opK+Ig1NozrJORKeiCSukKbl4KYqC1pD6w7/va5ffPtylt9Jpyy YRSXk/HT+w2j6/5yOOw1myLF+gUYE4EJBsg5JIUvRU3VKRfe98Hc41mxSBH17nDB 4waBr4fWxUKPlQ== -----END CERTIFICATE-----Generated at Tue Nov 4 15:17:44 2025 by rpki-client