$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/32/153788-14b7-4551-9ade-6aea9057c800/1/rrZuxejyQF9vjUhuc_uCuN4N7g8.mft File: rrZuxejyQF9vjUhuc_uCuN4N7g8.mft (raw, json) Hash identifier: z1W57RQ9EvCfSgdOD2rCvt3OPEHKrPTF+kI937QZoGk= Subject key identifier: 91:FE:4C:9B:97:70:2C:77:2F:F9:9D:42:94:00:43:D4:1C:D4:8D:6C Authority key identifier: AE:B6:6E:C5:E8:F2:40:5F:6F:8D:48:6E:73:FB:82:B8:DE:0D:EE:0F Certificate issuer: /CN=aeb66ec5e8f2405f6f8d486e73fb82b8de0dee0f Certificate serial: 019A4FD042E3D08357AC3970A927C9AB6D60 Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/rrZuxejyQF9vjUhuc_uCuN4N7g8.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/32/153788-14b7-4551-9ade-6aea9057c800/1/rrZuxejyQF9vjUhuc_uCuN4N7g8.mft Manifest number: 1711 Signing time: Tue 04 Nov 2025 17:00:39 +0000 Manifest this update: Tue 04 Nov 2025 17:00:39 +0000 Manifest next update: Wed 05 Nov 2025 17:00:39 +0000 Files and hashes: 1: 0xAeo2a2iLttbU-9qLwxhP3W5ss.roa (hash: KCgM9KWWYMbjy0SQJWIlI1gevbRgwTSQjmHIQMhZOFo=) 2: 1GGtyTPgPlDy6MPQ5o0gS_2Q9UM.roa (hash: gOi5uzaamNISRfWC/jzX0CQnB58FX9BTQozvqpu683k=) 3: 1VO0RuZDCw_d3nrvSLXPJBFpELM.roa (hash: RVMlSLh90fckV0ULVrxGXrllRUKBMW1qpE2aUDAMp18=) 4: MHaB6YDK7hMFt-_1LMKEcRnolXY.roa (hash: HMU04XiVIqiavwZxk6eCzMS/VCWuh3NjcyT+luDuzS0=) 5: XFEEccbEsmiETxVTXsuQHob0Ig8.roa (hash: gNVdhv6luqDbEY/yZdldKTkFqgtu7cFYTeubRvuYlMs=) 6: XYvBe2DkMF52qzkhOJvtRBiIQio.roa (hash: vc4GpSOFPSWnmLVNnXKMqCyW7C32uripWcLl8WvCvmE=) 7: cgoioMwhBMFnR_o18uz7lh61zXU.roa (hash: muq8Pq9FVp8y13ZY1OD1P/qR19HpxP198AkqSx2L6EM=) 8: rrZuxejyQF9vjUhuc_uCuN4N7g8.crl (hash: HRyFGkzv3ryBqgiPysk3AglJxo4+Xqyg+MDQeEH5ack=) 9: s1oFGEPvL8IMjYASLXkMEl3bONc.roa (hash: ID8ZOvyObfK0KrvTgF7I419RUO3QA/UAdGzXegtjwU0=) 10: upooLs-mDkOyiBT2fNGHj5cQ7E4.roa (hash: cglav+FWNX7UNTqPwwJsYgYuI7r/rTbr7vfv4F0chKo=) 11: vVMu6Hcqt_WNniCkUUd49xRBXDg.roa (hash: PFqhmo3voRuIoBNZ1c/3YzTjWO4jWVlUC05kdiWQzXU=) 12: vzw_vkrK3T6hMf3CfVO_XMRDNQY.roa (hash: TyRzYsx0I5A5DgLqk0b56yUe558XEXu6adROBLfEbBY=) Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/32/153788-14b7-4551-9ade-6aea9057c800/1/rrZuxejyQF9vjUhuc_uCuN4N7g8.crl rsync://rpki.ripe.net/repository/DEFAULT/32/153788-14b7-4551-9ade-6aea9057c800/1/rrZuxejyQF9vjUhuc_uCuN4N7g8.mft rsync://rpki.ripe.net/repository/DEFAULT/rrZuxejyQF9vjUhuc_uCuN4N7g8.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Wed 05 Nov 2025 16:49:02 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9a:4f:d0:42:e3:d0:83:57:ac:39:70:a9:27:c9:ab:6d:60 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=aeb66ec5e8f2405f6f8d486e73fb82b8de0dee0f Validity Not Before: Nov 4 17:00:39 2025 GMT Not After : Nov 5 17:00:39 2025 GMT Subject: CN=91fe4c9b97702c772ff99d42940043d41cd48d6c Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:be:e8:6a:19:b0:62:04:26:92:ea:78:19:63:8f: 7a:49:4a:ec:33:d4:72:ec:25:b2:32:55:05:91:5b: ed:e4:54:84:fd:7b:70:98:83:be:77:e6:a5:d5:38: f0:0c:54:11:06:2b:0e:b9:e4:d8:0d:00:9f:d7:a5: 36:72:53:ab:eb:61:70:06:bc:30:5c:ec:12:c1:36: 6b:6b:41:72:45:e4:c1:ef:14:25:ef:a5:e6:df:c3: 5c:c1:53:78:f2:19:32:da:e0:cf:03:4d:e7:0e:18: ab:92:b8:1e:f5:c4:ea:c9:50:fb:b4:33:b3:a4:36: f6:4f:f8:f1:b6:e6:04:05:55:47:74:7e:f7:de:12: 0b:83:fb:ff:82:c2:18:ed:b6:d2:7b:d5:bc:a1:8f: 3f:9c:7d:ce:ac:e0:2a:6b:e4:77:71:0a:a8:b3:f3: f3:63:6a:f8:2f:3d:bd:63:b0:fa:f7:87:15:10:e7: bc:b9:b3:e0:78:e4:3f:bb:0d:69:7e:78:01:2f:2d: ac:c9:7a:26:74:1b:a0:99:9c:81:8e:d5:aa:2a:11: c2:e4:ba:e6:70:7e:57:0d:12:33:49:cf:45:92:d5: c4:38:9f:c8:cd:4c:85:5b:fe:33:88:81:10:ff:7d: c5:77:5f:44:a1:2b:c0:f8:b7:a0:de:43:83:6d:9b: 74:81 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 91:FE:4C:9B:97:70:2C:77:2F:F9:9D:42:94:00:43:D4:1C:D4:8D:6C X509v3 Authority Key Identifier: keyid:AE:B6:6E:C5:E8:F2:40:5F:6F:8D:48:6E:73:FB:82:B8:DE:0D:EE:0F X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/rrZuxejyQF9vjUhuc_uCuN4N7g8.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/32/153788-14b7-4551-9ade-6aea9057c800/1/rrZuxejyQF9vjUhuc_uCuN4N7g8.mft X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/32/153788-14b7-4551-9ade-6aea9057c800/1/rrZuxejyQF9vjUhuc_uCuN4N7g8.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 2f:81:a1:da:33:56:05:86:21:a6:f3:04:5c:69:ff:6e:5a:43: f5:03:44:29:ff:27:84:60:bf:6c:44:cb:84:05:50:6c:57:96: d6:7e:11:9f:b7:b2:0e:7f:ac:ac:7d:7e:09:49:44:6f:3b:b2: c0:7c:88:a3:04:29:c7:b6:f9:c4:07:c4:93:a8:cc:d8:53:67: 92:99:c3:3c:d3:a3:30:b0:dc:37:3a:dd:0c:cf:70:c1:13:8a: 9d:fc:f6:51:45:95:fd:04:41:2d:a2:71:8b:24:54:b7:ce:d6: 61:5e:12:1b:68:e9:74:a4:67:91:1c:79:14:fa:d6:25:f3:07: 17:81:8f:eb:2a:8d:f7:81:ee:72:5c:76:49:b2:c8:6e:06:5f: 13:c5:74:5a:a7:e9:1a:d9:37:d1:d0:53:b2:6d:4a:53:11:a3: e5:98:59:73:3e:b9:04:7f:44:90:0a:91:1b:d3:aa:9f:23:7c: 23:f4:54:7b:7e:4a:96:2b:62:a5:be:70:a2:e1:0c:8e:bd:56: 9a:66:aa:34:00:3a:c4:7b:8a:5f:41:8d:46:01:5b:e2:5a:c2: de:46:39:b9:96:03:eb:c2:73:d8:c2:ca:03:52:4f:64:d4:73: b2:4d:3f:e6:b3:21:f5:9d:ed:24:55:b5:e3:cd:b6:e6:e8:9b: 1d:55:8d:be -----BEGIN CERTIFICATE----- MIIFFjCCA/6gAwIBAgISAZpP0ELj0INXrDlwqSfJq21gMA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKGFlYjY2ZWM1ZThmMjQwNWY2ZjhkNDg2ZTczZmI4MmI4ZGUw ZGVlMGYwHhcNMjUxMTA0MTcwMDM5WhcNMjUxMTA1MTcwMDM5WjAzMTEwLwYDVQQD Eyg5MWZlNGM5Yjk3NzAyYzc3MmZmOTlkNDI5NDAwNDNkNDFjZDQ4ZDZjMIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAvuhqGbBiBCaS6ngZY496SUrsM9Ry 7CWyMlUFkVvt5FSE/XtwmIO+d+al1TjwDFQRBisOueTYDQCf16U2clOr62FwBrww XOwSwTZra0FyReTB7xQl76Xm38NcwVN48hky2uDPA03nDhirkrge9cTqyVD7tDOz pDb2T/jxtuYEBVVHdH733hILg/v/gsIY7bbSe9W8oY8/nH3OrOAqa+R3cQqos/Pz Y2r4Lz29Y7D694cVEOe8ubPgeOQ/uw1pfngBLy2syXomdBugmZyBjtWqKhHC5Lrm cH5XDRIzSc9FktXEOJ/IzUyFW/4ziIEQ/33Fd19EoSvA+Leg3kODbZt0gQIDAQAB o4ICIjCCAh4wHQYDVR0OBBYEFJH+TJuXcCx3L/mdQpQAQ9Qc1I1sMB8GA1UdIwQY MBaAFK62bsXo8kBfb41IbnP7grjeDe4PMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvcnJadXhlanlRRjl2alVodWNfdUN1TjRON2c4LmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC8zMi8xNTM3ODgtMTRiNy00NTUxLTlhZGUt NmFlYTkwNTdjODAwLzEvcnJadXhlanlRRjl2alVodWNfdUN1TjRON2c4Lm1mdDCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC8zMi8xNTM3ODgtMTRiNy00NTUxLTlhZGUtNmFlYTkwNTdjODAw LzEvcnJadXhlanlRRjl2alVodWNfdUN1TjRON2c4LmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAL4Gh2jNW BYYhpvMEXGn/blpD9QNEKf8nhGC/bETLhAVQbFeW1n4Rn7eyDn+srH1+CUlEbzuy wHyIowQpx7b5xAfEk6jM2FNnkpnDPNOjMLDcNzrdDM9wwROKnfz2UUWV/QRBLaJx iyRUt87WYV4SG2jpdKRnkRx5FPrWJfMHF4GP6yqN94Huclx2SbLIbgZfE8V0Wqfp Gtk30dBTsm1KUxGj5ZhZcz65BH9EkAqRG9OqnyN8I/RUe35Klitipb5wouEMjr1W mmaqNAA6xHuKX0GNRgFb4lrC3kY5uZYD68Jz2MLKA1JPZNRzsk0/5rMh9Z3tJFW1 48225uibHVWNvg== -----END CERTIFICATE-----Generated at Tue Nov 4 20:32:22 2025 by rpki-client