$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/33/0d0755-1897-47ef-8df7-8cf41cafdce2/1/9dmpKCydJUfFZmNPO6zMvPJYiCc.mft File: 9dmpKCydJUfFZmNPO6zMvPJYiCc.mft (raw, json) Hash identifier: JNG+CdS/BV2M1GeTRXInSbSRpdvi0ke8bY9JUdfwGfY= Subject key identifier: DA:42:D8:66:BD:FA:EC:05:A8:ED:F9:33:5D:F7:E6:E0:43:CA:CF:81 Authority key identifier: F5:D9:A9:28:2C:9D:25:47:C5:66:63:4F:3B:AC:CC:BC:F2:58:88:27 Certificate issuer: /CN=f5d9a9282c9d2547c566634f3bacccbcf2588827 Certificate serial: 019A4E4F9279AFC81703FD63B33F1DCF8B55 Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/9dmpKCydJUfFZmNPO6zMvPJYiCc.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/33/0d0755-1897-47ef-8df7-8cf41cafdce2/1/9dmpKCydJUfFZmNPO6zMvPJYiCc.mft Manifest number: 0D2D Signing time: Tue 04 Nov 2025 10:00:28 +0000 Manifest this update: Tue 04 Nov 2025 10:00:28 +0000 Manifest next update: Wed 05 Nov 2025 10:00:28 +0000 Files and hashes: 1: 2fQddCIl-7Oq1WuhVFDb_ItwFWs.roa (hash: G5bUTFThyurFxXPOBBEBFBWKjBkZ0p5sb4xbB9qr44M=) 2: 37QCkG1k9gzLrRMVOTELOapS-4Y.roa (hash: fObIS1yLlqyANULO1cGplwcB5m0pXnjdZmigUly+6NA=) 3: 9dmpKCydJUfFZmNPO6zMvPJYiCc.crl (hash: rPhNve6sCzwId28m98NUsubBET4mRDzn6gYbVfuWBqQ=) 4: C8rZpiwRRKp7HiBYnxrXRCtzNP4.roa (hash: /a2qXNrKqG5G3jKSkvjhWWJd/4eBrgaawytg7M/VZPQ=) 5: LSwSqqfM6NE3bwsbhZVRM0BePVo.roa (hash: QYxJg9ZEhl4RnY/Twn9fuIOL/2nBIyTko4sjPdP5IhA=) 6: SyqNMF-ydxJR2kxngWZW5-SrEy0.roa (hash: KeocIUb7cPGt5yIgR1YWAUH1gGZjpJ9norLt8H3zU6Q=) 7: gAIi2RzKXjXCtYGsVRw03pRZYeU.roa (hash: PvQsJF0P/z+mLUrW2+GtvSyLdhymARBFgfCdxNsU3JE=) 8: hkqOX4mECokeZ3ChLO-NkzoKVG0.roa (hash: jDSI0Vi3uJHnivxkTcLJyUGbXo6jl9OF+5YD1t9wHog=) 9: xEaq7kolhQn1OmIod6QQM1Gthtk.roa (hash: IC+2lUW0/0ySDq3Q6puBeGjrJpCDJAXfXz5IauHoRHE=) 10: yZE684PU1B3lT-aKA30arKwyTEI.roa (hash: isFNdgWP0HVp5O76X23OI/gh9YCy0xYVcwqK0QPMZ60=) Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/33/0d0755-1897-47ef-8df7-8cf41cafdce2/1/9dmpKCydJUfFZmNPO6zMvPJYiCc.crl rsync://rpki.ripe.net/repository/DEFAULT/33/0d0755-1897-47ef-8df7-8cf41cafdce2/1/9dmpKCydJUfFZmNPO6zMvPJYiCc.mft rsync://rpki.ripe.net/repository/DEFAULT/9dmpKCydJUfFZmNPO6zMvPJYiCc.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Wed 05 Nov 2025 09:00:03 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9a:4e:4f:92:79:af:c8:17:03:fd:63:b3:3f:1d:cf:8b:55 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=f5d9a9282c9d2547c566634f3bacccbcf2588827 Validity Not Before: Nov 4 10:00:28 2025 GMT Not After : Nov 5 10:00:28 2025 GMT Subject: CN=da42d866bdfaec05a8edf9335df7e6e043cacf81 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:99:e6:8f:84:62:27:f6:7f:1b:6f:a1:12:99:b2: 18:f5:75:c2:b9:8d:ca:3f:f0:37:26:4a:48:79:da: cf:ce:c6:70:0a:bf:f1:ae:52:c1:2e:a6:1b:16:05: 75:b7:06:b8:aa:7e:f8:1c:cd:67:55:b8:ec:a4:1e: 2e:1d:f5:5c:f4:a1:a5:f1:07:dd:96:09:43:4f:54: 5c:6f:f0:59:62:ef:8a:c5:bd:38:7c:a4:7b:44:df: 82:bf:24:11:b7:64:28:16:53:16:e2:e7:e6:f6:ac: 6b:8f:0d:30:6c:fa:53:69:39:4a:f8:ee:81:ff:f2: 41:d0:da:8e:f0:93:3d:54:06:0a:09:7e:54:89:ff: c2:9d:c5:60:c3:9c:4a:d8:fc:30:99:af:8a:3e:61: 17:8d:bd:bb:dd:7e:9f:dc:b6:da:d3:12:bb:fc:0c: eb:bd:89:75:5f:52:66:68:54:67:4c:43:d2:ea:af: da:1a:00:dc:98:5f:bb:e3:3c:89:c8:9f:fd:03:23: 3d:9b:5a:b4:ef:08:b6:08:86:a5:de:30:35:7a:f2: 8e:85:25:62:b2:b4:60:0e:ab:f9:08:94:d6:01:c6: 26:7f:3e:f7:fd:3a:a6:9c:39:47:46:b7:10:e8:30: 95:8d:34:ed:9d:12:27:86:5d:b8:c2:19:f0:4b:b9: 14:37 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: DA:42:D8:66:BD:FA:EC:05:A8:ED:F9:33:5D:F7:E6:E0:43:CA:CF:81 X509v3 Authority Key Identifier: keyid:F5:D9:A9:28:2C:9D:25:47:C5:66:63:4F:3B:AC:CC:BC:F2:58:88:27 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/9dmpKCydJUfFZmNPO6zMvPJYiCc.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/33/0d0755-1897-47ef-8df7-8cf41cafdce2/1/9dmpKCydJUfFZmNPO6zMvPJYiCc.mft X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/33/0d0755-1897-47ef-8df7-8cf41cafdce2/1/9dmpKCydJUfFZmNPO6zMvPJYiCc.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 23:b9:e9:0f:6c:b8:3e:42:64:fc:dd:5d:56:c0:8e:3d:d7:77: 2a:5d:eb:9e:84:89:03:9f:82:95:14:01:9a:95:22:a3:98:47: 09:94:81:c7:61:a6:82:7b:27:2c:e4:20:8a:a5:97:95:82:22: 5f:3a:13:03:36:6d:dc:c3:37:44:b2:63:35:de:32:01:f1:3c: 2f:1f:eb:08:a0:d3:d6:72:15:47:a5:ac:e5:e6:c7:6d:04:cf: e3:98:09:0a:15:cc:87:3f:da:82:bf:7b:1d:aa:4e:a8:1b:bb: 5e:79:e1:60:d2:ed:b1:52:b7:f7:4e:8c:c3:ee:3e:79:56:17: 75:9e:50:a4:01:5b:c8:5a:7b:c4:2c:96:fc:91:02:29:88:5b: 3a:26:fb:67:55:d1:d0:1d:e6:66:8a:06:76:1b:78:89:1b:78: b9:09:50:ac:26:70:56:a7:b8:07:d2:4e:e7:aa:22:32:a1:70: 67:11:67:4a:ab:3a:e4:44:81:9e:22:53:86:73:38:58:c7:51: 59:42:84:b2:ae:27:22:89:14:62:3e:2f:37:5c:c5:83:95:06: 0f:51:b7:76:15:21:99:0f:dd:54:5a:2b:3c:9f:08:db:02:42: e1:15:a7:9e:66:00:72:ff:bb:d7:c5:ef:45:3e:15:10:51:65: 12:5d:5e:c1 -----BEGIN CERTIFICATE----- MIIFFjCCA/6gAwIBAgISAZpOT5J5r8gXA/1jsz8dz4tVMA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKGY1ZDlhOTI4MmM5ZDI1NDdjNTY2NjM0ZjNiYWNjY2JjZjI1 ODg4MjcwHhcNMjUxMTA0MTAwMDI4WhcNMjUxMTA1MTAwMDI4WjAzMTEwLwYDVQQD EyhkYTQyZDg2NmJkZmFlYzA1YThlZGY5MzM1ZGY3ZTZlMDQzY2FjZjgxMIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAmeaPhGIn9n8bb6ESmbIY9XXCuY3K P/A3JkpIedrPzsZwCr/xrlLBLqYbFgV1twa4qn74HM1nVbjspB4uHfVc9KGl8Qfd lglDT1Rcb/BZYu+Kxb04fKR7RN+CvyQRt2QoFlMW4ufm9qxrjw0wbPpTaTlK+O6B //JB0NqO8JM9VAYKCX5Uif/CncVgw5xK2Pwwma+KPmEXjb273X6f3Lba0xK7/Azr vYl1X1JmaFRnTEPS6q/aGgDcmF+74zyJyJ/9AyM9m1q07wi2CIal3jA1evKOhSVi srRgDqv5CJTWAcYmfz73/TqmnDlHRrcQ6DCVjTTtnRInhl24whnwS7kUNwIDAQAB o4ICIjCCAh4wHQYDVR0OBBYEFNpC2Ga9+uwFqO35M1335uBDys+BMB8GA1UdIwQY MBaAFPXZqSgsnSVHxWZjTzuszLzyWIgnMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvOWRtcEtDeWRKVWZGWm1OUE82ek12UEpZaUNjLmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC8zMy8wZDA3NTUtMTg5Ny00N2VmLThkZjct OGNmNDFjYWZkY2UyLzEvOWRtcEtDeWRKVWZGWm1OUE82ek12UEpZaUNjLm1mdDCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC8zMy8wZDA3NTUtMTg5Ny00N2VmLThkZjctOGNmNDFjYWZkY2Uy LzEvOWRtcEtDeWRKVWZGWm1OUE82ek12UEpZaUNjLmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAI7npD2y4 PkJk/N1dVsCOPdd3Kl3rnoSJA5+ClRQBmpUio5hHCZSBx2GmgnsnLOQgiqWXlYIi XzoTAzZt3MM3RLJjNd4yAfE8Lx/rCKDT1nIVR6Ws5ebHbQTP45gJChXMhz/agr97 HapOqBu7XnnhYNLtsVK3906Mw+4+eVYXdZ5QpAFbyFp7xCyW/JECKYhbOib7Z1XR 0B3mZooGdht4iRt4uQlQrCZwVqe4B9JO56oiMqFwZxFnSqs65ESBniJThnM4WMdR WUKEsq4nIokUYj4vN1zFg5UGD1G3dhUhmQ/dVForPJ8I2wJC4RWnnmYAcv+718Xv RT4VEFFlEl1ewQ== -----END CERTIFICATE-----Generated at Tue Nov 4 14:24:08 2025 by rpki-client