$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/34/db1b48-1cc5-4833-93d9-b9464718ba37/1/c_IQ8SmaHgrucdwdeeX7EgktMKk.mft File: c_IQ8SmaHgrucdwdeeX7EgktMKk.mft (raw, json) Hash identifier: bJmpdb6QVPyNePFnOJAAZpcgRTYJdj+X4oq1iFoUDsM= Subject key identifier: 75:1A:12:D4:84:47:90:93:17:34:C2:62:81:FE:F9:E2:3C:AA:4E:34 Authority key identifier: 73:F2:10:F1:29:9A:1E:0A:EE:71:DC:1D:79:E5:FB:12:09:2D:30:A9 Certificate issuer: /CN=73f210f1299a1e0aee71dc1d79e5fb12092d30a9 Certificate serial: 019A4F626EC93EE73F4A957ED9B185D1640B Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/c_IQ8SmaHgrucdwdeeX7EgktMKk.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/34/db1b48-1cc5-4833-93d9-b9464718ba37/1/c_IQ8SmaHgrucdwdeeX7EgktMKk.mft Manifest number: 1734 Signing time: Tue 04 Nov 2025 15:00:42 +0000 Manifest this update: Tue 04 Nov 2025 15:00:42 +0000 Manifest next update: Wed 05 Nov 2025 15:00:42 +0000 Files and hashes: 1: 7v-L1KuWY_QeDJxKFVyRkWnFePQ.roa (hash: bVQczQ08ozX20fYuXzWGYS1jimxc5e2Qx5nVzF/4kuk=) 2: H74wGZKnnU6XEP7nVKoqw4XaEjE.roa (hash: zhm555s3zw/KlbcjZuumbYd6+z6n6717Q/inEo++9C0=) 3: KFKPGq8CDIQff00UekrfFEmWWU4.roa (hash: pndCMKJbI0Ffrf6VYH3lHviYtYItndyotazCLP7aZyE=) 4: TLCOp8VQQYT-sDLZMkb_dNE0wJI.roa (hash: 8TF1RbnrjzrAYcRglOW5PIK7TmKRhUoFu7HvQr3ZHoA=) 5: XfGBei_fvFP0LcnT4xlGOunfSHY.roa (hash: ApG5cEMi+MNJR6ahm8kTy/uN64zS0fv0zRdzd/i6biA=) 6: ZLCgOlPZ-adZViTKhsMv3BABRVQ.roa (hash: y37YnkCGLdmrEa4m8cGkKpYMZJFVaIJVqpcOQKXrYQA=) 7: ZrwHnbp0cmRv-8Aq-3dTrUs96b8.roa (hash: laG521bBX3KOp9w13a5/N7g1SD2gsHS2KdTqelNAv1g=) 8: c_IQ8SmaHgrucdwdeeX7EgktMKk.crl (hash: RIj4OP46g5fL5d9IFAZ2qhAxhsAqiwM18J7SgGSRv/8=) 9: fUiU9NND6NDkXeCCtG2FpkvLAtQ.roa (hash: BipzZjfv9NJLde/5SLk/7HBxUjct/iO+maQqs2utFTw=) 10: mJUNw4dhsVDBnFTg7x4G5Co4xf0.roa (hash: uA/rqJShT3FbqgkbYlEQFRj/7911uoTUqkA+K2PLe1c=) 11: nT9Kl7qa4avyYi6PobndNFEx2JI.roa (hash: 4NhOocRVxQsq48Sjltw5zBhFh6NiUij1mxelAtmoUp0=) Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/34/db1b48-1cc5-4833-93d9-b9464718ba37/1/c_IQ8SmaHgrucdwdeeX7EgktMKk.crl rsync://rpki.ripe.net/repository/DEFAULT/34/db1b48-1cc5-4833-93d9-b9464718ba37/1/c_IQ8SmaHgrucdwdeeX7EgktMKk.mft rsync://rpki.ripe.net/repository/DEFAULT/c_IQ8SmaHgrucdwdeeX7EgktMKk.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Wed 05 Nov 2025 15:00:42 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9a:4f:62:6e:c9:3e:e7:3f:4a:95:7e:d9:b1:85:d1:64:0b Signature Algorithm: sha256WithRSAEncryption Issuer: CN=73f210f1299a1e0aee71dc1d79e5fb12092d30a9 Validity Not Before: Nov 4 15:00:42 2025 GMT Not After : Nov 5 15:00:42 2025 GMT Subject: CN=751a12d4844790931734c26281fef9e23caa4e34 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:b7:24:ff:d8:2f:d6:33:5c:ee:33:2c:bf:aa:c5: 09:95:be:1f:ba:53:ca:31:29:ce:4e:18:e6:1b:53: e4:d6:fd:93:a1:99:4a:51:99:c3:6b:0a:bd:80:41: b4:5c:6b:be:5f:2a:70:fc:8a:49:ee:66:5f:a1:79: 66:82:28:91:a1:f5:09:f9:bf:08:45:c8:c3:d6:eb: c8:de:bc:5c:5f:4d:63:72:bf:38:3f:74:b9:31:8a: 21:76:45:8d:7e:f7:aa:57:92:f3:a9:82:22:cf:9b: 1f:ab:78:96:20:d7:58:00:09:0d:4d:01:71:f0:01: 6b:1f:55:cc:52:e1:20:07:68:99:5a:25:06:d8:8c: 1d:15:61:9b:ed:d6:72:c6:02:04:bf:9f:9c:d4:95: c2:21:71:6f:ca:ec:f2:e4:d5:b3:b2:f6:24:28:d4: b5:ec:0e:61:2d:a2:ca:da:bb:6c:c2:e2:dd:88:10: f0:7f:63:04:58:f8:69:64:63:39:a3:7f:f3:34:6e: dd:05:96:62:b1:ac:38:0a:6a:4c:86:f5:fb:13:51: d8:80:63:88:b9:6a:10:4a:97:ec:13:8a:4c:e0:65: 45:e2:cf:95:de:2b:a2:dd:a9:3c:23:62:12:ab:f2: 33:f9:f9:6c:96:06:f4:cb:b1:32:86:81:48:d0:db: 9a:c5 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 75:1A:12:D4:84:47:90:93:17:34:C2:62:81:FE:F9:E2:3C:AA:4E:34 X509v3 Authority Key Identifier: keyid:73:F2:10:F1:29:9A:1E:0A:EE:71:DC:1D:79:E5:FB:12:09:2D:30:A9 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/c_IQ8SmaHgrucdwdeeX7EgktMKk.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/34/db1b48-1cc5-4833-93d9-b9464718ba37/1/c_IQ8SmaHgrucdwdeeX7EgktMKk.mft X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/34/db1b48-1cc5-4833-93d9-b9464718ba37/1/c_IQ8SmaHgrucdwdeeX7EgktMKk.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 1d:0a:d4:05:04:92:fb:d2:b9:94:6f:c3:a6:c1:d1:a2:f8:51: cc:0b:fa:a8:a4:9d:d3:57:5f:03:a7:20:ff:b0:ee:4b:8b:33: bf:2e:8d:0e:ab:1b:9a:a5:37:25:31:47:ac:25:ce:39:3c:01: 62:60:9b:20:cd:24:3e:0d:fa:22:46:e5:8c:61:80:46:5b:ec: 20:27:f7:f8:72:56:52:9a:26:c7:88:92:9c:da:17:73:4b:f7: e1:8c:7c:40:06:23:3d:b2:38:33:2f:c7:c3:a5:f6:93:64:7d: 7f:eb:c3:d6:cb:d8:b2:5b:7e:0b:af:0d:05:8e:3b:1e:6e:03: 9d:42:a6:35:3c:b3:47:aa:58:90:d9:bb:ae:74:80:c1:5b:95: a9:e5:4b:e5:ec:92:07:03:ad:aa:a9:9b:67:ab:1e:81:33:5e: 09:13:3f:5a:ee:2a:70:4a:5d:4a:c8:a4:ab:ce:29:52:76:ef: 3d:ec:5a:83:dd:bf:33:bf:c7:2f:a4:ba:51:a1:ae:1e:f3:6b: a3:a8:6d:b7:dc:fa:ff:32:55:52:2c:64:e0:4c:bc:e1:66:3b: eb:c3:0b:2a:91:3d:17:6a:38:3f:7f:a4:67:c6:2e:cd:c1:ae: 18:83:b8:94:f9:af:08:8e:c5:e9:b0:76:ac:86:1e:9e:ce:ea: b6:80:4b:dc -----BEGIN CERTIFICATE----- MIIFFjCCA/6gAwIBAgISAZpPYm7JPuc/SpV+2bGF0WQLMA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKDczZjIxMGYxMjk5YTFlMGFlZTcxZGMxZDc5ZTVmYjEyMDky ZDMwYTkwHhcNMjUxMTA0MTUwMDQyWhcNMjUxMTA1MTUwMDQyWjAzMTEwLwYDVQQD Eyg3NTFhMTJkNDg0NDc5MDkzMTczNGMyNjI4MWZlZjllMjNjYWE0ZTM0MIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAtyT/2C/WM1zuMyy/qsUJlb4fulPK MSnOThjmG1Pk1v2ToZlKUZnDawq9gEG0XGu+Xypw/IpJ7mZfoXlmgiiRofUJ+b8I RcjD1uvI3rxcX01jcr84P3S5MYohdkWNfveqV5LzqYIiz5sfq3iWINdYAAkNTQFx 8AFrH1XMUuEgB2iZWiUG2IwdFWGb7dZyxgIEv5+c1JXCIXFvyuzy5NWzsvYkKNS1 7A5hLaLK2rtswuLdiBDwf2MEWPhpZGM5o3/zNG7dBZZisaw4CmpMhvX7E1HYgGOI uWoQSpfsE4pM4GVF4s+V3iui3ak8I2ISq/Iz+flslgb0y7EyhoFI0NuaxQIDAQAB o4ICIjCCAh4wHQYDVR0OBBYEFHUaEtSER5CTFzTCYoH++eI8qk40MB8GA1UdIwQY MBaAFHPyEPEpmh4K7nHcHXnl+xIJLTCpMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvY19JUThTbWFIZ3J1Y2R3ZGVlWDdFZ2t0TUtrLmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC8zNC9kYjFiNDgtMWNjNS00ODMzLTkzZDkt Yjk0NjQ3MThiYTM3LzEvY19JUThTbWFIZ3J1Y2R3ZGVlWDdFZ2t0TUtrLm1mdDCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC8zNC9kYjFiNDgtMWNjNS00ODMzLTkzZDktYjk0NjQ3MThiYTM3 LzEvY19JUThTbWFIZ3J1Y2R3ZGVlWDdFZ2t0TUtrLmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAHQrUBQSS +9K5lG/DpsHRovhRzAv6qKSd01dfA6cg/7DuS4szvy6NDqsbmqU3JTFHrCXOOTwB YmCbIM0kPg36IkbljGGARlvsICf3+HJWUpomx4iSnNoXc0v34Yx8QAYjPbI4My/H w6X2k2R9f+vD1svYslt+C68NBY47Hm4DnUKmNTyzR6pYkNm7rnSAwVuVqeVL5eyS BwOtqqmbZ6segTNeCRM/Wu4qcEpdSsikq84pUnbvPexag92/M7/HL6S6UaGuHvNr o6htt9z6/zJVUixk4Ey84WY768MLKpE9F2o4P3+kZ8YuzcGuGIO4lPmvCI7F6bB2 rIYens7qtoBL3A== -----END CERTIFICATE-----Generated at Tue Nov 4 22:22:22 2025 by rpki-client