$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/3a/05488f-f4e0-4e6c-94f5-3757539c2ac9/1/X32laK0Ce54knBPiI9MidpiBop8.mft File: X32laK0Ce54knBPiI9MidpiBop8.mft (raw, json) Hash identifier: xdWcsElJX4bpLgdKhfzViSwFEWzBLUFcbpMeLbuukm0= Subject key identifier: 6A:A3:D3:5D:31:59:B4:0B:B6:83:73:D7:F2:8E:68:BF:51:BC:16:79 Authority key identifier: 5F:7D:A5:68:AD:02:7B:9E:24:9C:13:E2:23:D3:22:76:98:81:A2:9F Certificate issuer: /CN=5f7da568ad027b9e249c13e223d322769881a29f Certificate serial: 019A4DA05048C43AC733059BB7337CECC17B Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/X32laK0Ce54knBPiI9MidpiBop8.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/3a/05488f-f4e0-4e6c-94f5-3757539c2ac9/1/X32laK0Ce54knBPiI9MidpiBop8.mft Manifest number: 0C90 Signing time: Tue 04 Nov 2025 06:49:03 +0000 Manifest this update: Tue 04 Nov 2025 06:49:03 +0000 Manifest next update: Wed 05 Nov 2025 06:49:03 +0000 Files and hashes: 1: 66fG4OzfuP_rz-H1BAqWJMDfdNw.roa (hash: VEFDrb5X8Gp76tKDMXEgzoMCqPdLTcKy/H0Vg6vUSxo=) 2: CiSXDCdW3LMwjv8iJ3B2mY7zojU.roa (hash: xoZ4D0sXI5qWTDuig3N1rhh1l7zRYo3/rWNsiYjXVLw=) 3: Dhg938LLNxihNYriqStR3oqs6Jg.roa (hash: Aj+6lvIDsodEZ6I55Us8ZFj5GtVjSmfFFjL8I/MfYqo=) 4: FFl5KMRT8B6N6uL-306UjuCK2YM.roa (hash: EbOaGkvqxbG56/oOr0evt5VmqCAqCpV5ZmpFaCqI7tQ=) 5: Ip8huaIK21qXcV1uFM12bMRhsAc.roa (hash: +deXUeKbtAB4FcOD/Fpx9fIrQPH8oKg+/d89Ce9TGGY=) 6: SVIT-fWz2Ki9EHDQlfqzIxpfVLE.roa (hash: RseVjDJ2Eg3rRrpcGWYYLelpMZ3JUHmet98PxhD+iYY=) 7: X32laK0Ce54knBPiI9MidpiBop8.crl (hash: 7Hjb/lIAMbN72wtY11BWAus/CTr9JNIPT4KH4utp2LA=) 8: XjVu2IyXljFzhSvYma_h3-clfVU.roa (hash: nT21YokFB5zQvbm3JPkkRJDjEHGU38C24xQDpQHQGAI=) 9: oSGRjgd5g7uxmIyMg55GeDp1lcQ.roa (hash: yVVI9w+n8DQ5LZ0pU0EZPfP/S8D3Imwu6pg6ds8XII0=) 10: s84uwW_-i_SHLp2X5wNbbXCbos0.roa (hash: XmZwP1Dphpy/OpROhUP0RXS2PeMw5xbgxdsjXIheFhc=) Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/3a/05488f-f4e0-4e6c-94f5-3757539c2ac9/1/X32laK0Ce54knBPiI9MidpiBop8.crl rsync://rpki.ripe.net/repository/DEFAULT/3a/05488f-f4e0-4e6c-94f5-3757539c2ac9/1/X32laK0Ce54knBPiI9MidpiBop8.mft rsync://rpki.ripe.net/repository/DEFAULT/X32laK0Ce54knBPiI9MidpiBop8.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Wed 05 Nov 2025 06:49:03 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9a:4d:a0:50:48:c4:3a:c7:33:05:9b:b7:33:7c:ec:c1:7b Signature Algorithm: sha256WithRSAEncryption Issuer: CN=5f7da568ad027b9e249c13e223d322769881a29f Validity Not Before: Nov 4 06:49:03 2025 GMT Not After : Nov 5 06:49:03 2025 GMT Subject: CN=6aa3d35d3159b40bb68373d7f28e68bf51bc1679 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:bf:29:ef:72:d6:5b:91:70:70:88:5d:f3:59:a8: ea:76:5a:29:e7:ac:4b:89:cb:e6:ac:2d:55:ad:49: d5:23:b4:08:eb:99:15:56:7e:03:96:0f:72:f3:f0: df:ea:c7:a4:c0:71:c3:51:25:27:b9:f4:5e:df:c2: 1b:c9:a7:b9:8d:86:42:86:f5:49:9a:4d:84:35:a4: 58:a6:b1:dc:2f:dd:26:40:14:d9:56:de:57:2d:7a: b1:1f:8c:f4:08:26:b5:3f:39:85:b4:19:46:83:dc: 0c:d3:92:6c:23:06:ce:a0:c3:ff:3b:9c:aa:ca:fd: 33:8b:3e:b2:cb:52:02:49:0a:22:c6:16:47:ab:4b: 80:29:54:fd:c6:5f:13:52:06:61:10:db:93:92:e0: 29:08:d3:75:05:6e:01:cd:b6:b0:b0:f6:d4:cc:3d: 12:d8:07:6c:22:45:c0:65:12:0b:74:77:70:3f:43: 67:ae:15:1b:1c:d8:ee:c8:97:12:21:f8:52:4c:57: 54:58:c9:94:57:10:28:80:3f:fd:95:74:bc:1f:ef: 86:3e:df:e8:18:47:a7:5e:39:ad:2c:92:f1:1d:77: 57:a6:62:59:7f:f1:fc:b9:5b:37:79:bd:79:33:82: 22:ab:7a:a5:65:e5:71:0c:da:5b:b1:7e:78:c2:2e: 49:af Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 6A:A3:D3:5D:31:59:B4:0B:B6:83:73:D7:F2:8E:68:BF:51:BC:16:79 X509v3 Authority Key Identifier: keyid:5F:7D:A5:68:AD:02:7B:9E:24:9C:13:E2:23:D3:22:76:98:81:A2:9F X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/X32laK0Ce54knBPiI9MidpiBop8.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/3a/05488f-f4e0-4e6c-94f5-3757539c2ac9/1/X32laK0Ce54knBPiI9MidpiBop8.mft X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/3a/05488f-f4e0-4e6c-94f5-3757539c2ac9/1/X32laK0Ce54knBPiI9MidpiBop8.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 7e:fc:31:e1:70:56:d2:ee:cc:14:5a:6d:1d:1a:b8:cb:36:32: 1c:0f:1d:67:b4:4e:00:54:1c:20:d7:a1:70:92:a7:c5:a7:94: f3:8b:d8:d3:b2:e9:49:9a:be:63:81:5d:01:eb:44:dd:ad:de: cb:4d:9f:52:de:f9:30:2f:06:90:ff:74:d1:51:fd:06:8f:55: e6:01:0d:38:53:86:23:a5:ec:10:ff:e2:a7:19:b6:aa:8d:39: fc:3a:f0:9e:22:b6:4d:66:76:f4:f6:10:50:a2:7e:3d:fd:c1: ff:7f:ed:3b:28:82:b3:7f:7b:db:e8:b3:a5:00:f5:bd:4c:1e: b7:6c:6f:e8:0c:17:ff:df:85:6c:55:78:09:d4:06:17:6f:10: bd:48:e7:27:98:24:1d:b1:a9:99:65:da:93:41:ea:96:d9:67: 31:4f:93:d9:28:6c:ef:eb:62:6d:cd:77:dc:d4:1d:fb:9e:cf: d1:9a:49:a1:a1:4d:b2:6c:bc:7a:f8:17:eb:5b:ea:8a:5c:47: 20:a1:ea:8a:37:f5:d4:29:2b:61:36:62:dd:6b:bc:4b:cb:a2: 08:22:64:bb:e4:d5:ca:c7:3e:fb:61:9b:8b:90:49:ed:b6:36: ba:5e:43:29:e7:ea:43:72:25:88:0c:6f:52:79:bf:41:bd:04: 7b:dc:f0:8f -----BEGIN CERTIFICATE----- MIIFFjCCA/6gAwIBAgISAZpNoFBIxDrHMwWbtzN87MF7MA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKDVmN2RhNTY4YWQwMjdiOWUyNDljMTNlMjIzZDMyMjc2OTg4 MWEyOWYwHhcNMjUxMTA0MDY0OTAzWhcNMjUxMTA1MDY0OTAzWjAzMTEwLwYDVQQD Eyg2YWEzZDM1ZDMxNTliNDBiYjY4MzczZDdmMjhlNjhiZjUxYmMxNjc5MIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAvynvctZbkXBwiF3zWajqdlop56xL icvmrC1VrUnVI7QI65kVVn4Dlg9y8/Df6sekwHHDUSUnufRe38Ibyae5jYZChvVJ mk2ENaRYprHcL90mQBTZVt5XLXqxH4z0CCa1PzmFtBlGg9wM05JsIwbOoMP/O5yq yv0ziz6yy1ICSQoixhZHq0uAKVT9xl8TUgZhENuTkuApCNN1BW4BzbawsPbUzD0S 2AdsIkXAZRILdHdwP0NnrhUbHNjuyJcSIfhSTFdUWMmUVxAogD/9lXS8H++GPt/o GEenXjmtLJLxHXdXpmJZf/H8uVs3eb15M4Iiq3qlZeVxDNpbsX54wi5JrwIDAQAB o4ICIjCCAh4wHQYDVR0OBBYEFGqj010xWbQLtoNz1/KOaL9RvBZ5MB8GA1UdIwQY MBaAFF99pWitAnueJJwT4iPTInaYgaKfMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvWDMybGFLMENlNTRrbkJQaUk5TWlkcGlCb3A4LmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC8zYS8wNTQ4OGYtZjRlMC00ZTZjLTk0ZjUt Mzc1NzUzOWMyYWM5LzEvWDMybGFLMENlNTRrbkJQaUk5TWlkcGlCb3A4Lm1mdDCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC8zYS8wNTQ4OGYtZjRlMC00ZTZjLTk0ZjUtMzc1NzUzOWMyYWM5 LzEvWDMybGFLMENlNTRrbkJQaUk5TWlkcGlCb3A4LmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAfvwx4XBW 0u7MFFptHRq4yzYyHA8dZ7ROAFQcINehcJKnxaeU84vY07LpSZq+Y4FdAetE3a3e y02fUt75MC8GkP900VH9Bo9V5gENOFOGI6XsEP/ipxm2qo05/DrwniK2TWZ29PYQ UKJ+Pf3B/3/tOyiCs3972+izpQD1vUwet2xv6AwX/9+FbFV4CdQGF28QvUjnJ5gk HbGpmWXak0HqltlnMU+T2Shs7+tibc133NQd+57P0ZpJoaFNsmy8evgX61vqilxH IKHqijf11CkrYTZi3Wu8S8uiCCJku+TVysc++2Gbi5BJ7bY2ul5DKefqQ3IliAxv Unm/Qb0Ee9zwjw== -----END CERTIFICATE-----Generated at Tue Nov 4 10:45:18 2025 by rpki-client