$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/3a/7cecc7-f63d-43fc-b219-3955959eaf81/1/RY0S8JUFPDWHa4i0doXWQ1Qh_PI.mft File: RY0S8JUFPDWHa4i0doXWQ1Qh_PI.mft (raw, json) Hash identifier: FRvadBIiuOApEnvmfxHLuNok5Io6MworFbCWVq1zLcI= Subject key identifier: BB:62:2F:9C:41:39:F6:F3:7E:A9:A2:FC:2B:1E:32:10:7D:E7:BF:1B Authority key identifier: 45:8D:12:F0:95:05:3C:35:87:6B:88:B4:76:85:D6:43:54:21:FC:F2 Certificate issuer: /CN=458d12f095053c35876b88b47685d6435421fcf2 Certificate serial: 019A4E4FA5FC7BBABDEC8DE2588B8E491108 Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/RY0S8JUFPDWHa4i0doXWQ1Qh_PI.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/3a/7cecc7-f63d-43fc-b219-3955959eaf81/1/RY0S8JUFPDWHa4i0doXWQ1Qh_PI.mft Manifest number: 171A Signing time: Tue 04 Nov 2025 10:00:33 +0000 Manifest this update: Tue 04 Nov 2025 10:00:33 +0000 Manifest next update: Wed 05 Nov 2025 10:00:33 +0000 Files and hashes: 1: 0bSG1GbQSr3JP2M9BW2A6zWEmWQ.roa (hash: m8/KEzPrRo4PqG3DFfILeyvmSqlK6Zrphut5P8ccG8c=) 2: 9lwL98-HDVBrZzYLRCpSdOAFXpo.roa (hash: Za/9eX9VNb3FiSxJk6MAE/CpFGWxRO5mjghE1elRivc=) 3: B0iUIhkwv2ZZdyXRyu9yUh7Z61o.roa (hash: F6O6OkDRyyyGqFimHsLztSYsh0AUNFPNkRW3jSPwvEw=) 4: I1EoUAseUd3MHO-sI_txqICBiwc.roa (hash: khM+HdjIw9WozXCqEk/wtCOtMrpNfxWXErjSXn8BT5M=) 5: KQ7nGqqdl8DwDw35UdDbOJPZhfY.roa (hash: 8pIf1gsysAeCO62ayw5k2bU+b1g8t0mrR6+zNCtTibQ=) 6: LS_oKjOyENRZwn9y786G7x_fDEc.roa (hash: qwrjawF9Z67WE+ivjm8mPIl3xqaLReHxca9+SNnwKPE=) 7: Pvub5ztTS47f0XG6tBZE9ngX8Rw.roa (hash: euQ5dqT6xwCfoTsPu9P7kfQ9UGdbPzkkEJWSyFwCBTw=) 8: RY0S8JUFPDWHa4i0doXWQ1Qh_PI.crl (hash: 7hc43tYANnBA5OJDEV4yAMkNVWxIe0BjvvhBgYhXQ20=) 9: lqxGizsVmZbvi7xpd3yzs2I4ILw.roa (hash: aTi4SECMvkjegR9/FyzL9HTmeGkM0AsiVgyipWCsYrY=) 10: sFnlwbiQ75y8_114DKwn3kP_iWc.roa (hash: dkHr9wKemXLLSQfaJK2+kCvWwELtA6u+nMBynz2rXgQ=) Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/3a/7cecc7-f63d-43fc-b219-3955959eaf81/1/RY0S8JUFPDWHa4i0doXWQ1Qh_PI.crl rsync://rpki.ripe.net/repository/DEFAULT/3a/7cecc7-f63d-43fc-b219-3955959eaf81/1/RY0S8JUFPDWHa4i0doXWQ1Qh_PI.mft rsync://rpki.ripe.net/repository/DEFAULT/RY0S8JUFPDWHa4i0doXWQ1Qh_PI.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Wed 05 Nov 2025 09:00:03 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9a:4e:4f:a5:fc:7b:ba:bd:ec:8d:e2:58:8b:8e:49:11:08 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=458d12f095053c35876b88b47685d6435421fcf2 Validity Not Before: Nov 4 10:00:33 2025 GMT Not After : Nov 5 10:00:33 2025 GMT Subject: CN=bb622f9c4139f6f37ea9a2fc2b1e32107de7bf1b Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:d0:84:4f:8a:49:9f:93:4e:8b:50:a1:a9:73:ae: a8:aa:12:f6:a5:0f:33:2d:f3:fc:e6:82:02:e0:e8: b2:9c:55:05:bd:d1:78:6d:fa:7a:57:3e:a0:a0:b8: 43:71:ac:71:2a:29:7a:38:f6:69:74:f4:96:1a:ba: 41:23:54:77:0d:1e:12:85:93:19:30:99:44:c7:76: f1:a9:c5:b8:6c:5e:90:db:45:75:34:ec:b4:b9:67: 47:0a:3f:11:3d:96:70:b6:ce:65:c9:c8:77:c1:0f: 8d:3a:7b:45:ac:b5:c4:09:ad:dd:b7:15:08:3c:28: 2c:60:b0:f5:77:3b:9c:1d:a2:5d:46:03:90:24:6e: c0:18:e4:62:15:eb:19:8a:0d:70:bd:76:06:7e:58: 99:38:0a:6d:60:5c:42:52:ba:f0:3c:c3:ca:d4:f6: a0:59:da:0d:75:f8:8e:6a:bb:65:0b:c2:59:a9:5a: c2:45:ab:c2:91:b6:82:3b:d4:bb:57:91:fa:9d:4f: a2:6f:03:5e:16:35:5b:29:4b:4e:d5:fd:e2:8b:74: 4c:24:6d:fc:e6:62:cd:11:19:22:df:1f:ae:50:96: e3:6a:1e:aa:64:67:96:08:d7:74:3e:69:b6:9c:e3: 72:6e:ae:b8:20:8e:65:64:30:0c:2d:d5:45:55:a9: 6a:3d Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: BB:62:2F:9C:41:39:F6:F3:7E:A9:A2:FC:2B:1E:32:10:7D:E7:BF:1B X509v3 Authority Key Identifier: keyid:45:8D:12:F0:95:05:3C:35:87:6B:88:B4:76:85:D6:43:54:21:FC:F2 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/RY0S8JUFPDWHa4i0doXWQ1Qh_PI.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/3a/7cecc7-f63d-43fc-b219-3955959eaf81/1/RY0S8JUFPDWHa4i0doXWQ1Qh_PI.mft X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/3a/7cecc7-f63d-43fc-b219-3955959eaf81/1/RY0S8JUFPDWHa4i0doXWQ1Qh_PI.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 8d:6e:43:a7:08:8f:9c:01:ce:8f:7c:2f:a6:a1:ad:84:3d:4b: 62:8c:a0:a1:de:cd:7d:7c:c8:5f:c6:29:d3:3e:d9:04:62:99: 84:52:44:6b:e0:e8:cb:c4:e5:2c:c3:8a:f9:9c:4f:6e:bb:d9: f0:98:f6:78:a7:b5:25:f6:02:ac:ff:56:7a:e4:5f:b9:7d:2d: b7:79:d3:a5:b6:09:ab:56:af:b1:37:69:00:28:e7:7c:9a:89: 96:20:c5:a3:58:33:09:1b:2d:7d:ae:19:9a:4d:b5:90:2a:e3: 90:f7:d2:9c:c5:3b:5a:0d:25:31:5c:89:4c:b3:02:67:57:0c: fd:d3:92:9b:7d:03:cb:b5:62:c7:c5:d6:18:61:a0:bb:04:07: 50:16:51:d6:de:52:f9:5d:56:90:88:7c:b3:86:5a:64:0a:2f: 31:5d:3a:14:6f:e3:19:e6:55:a8:c9:4e:16:d5:25:f8:f5:a2: 5a:02:b3:e8:1a:3d:79:e8:21:dd:75:c2:4d:16:54:e1:3f:da: fd:87:11:0d:b5:8c:53:7f:b5:dc:59:ff:94:e2:b0:c6:26:c2: 78:44:4d:44:cd:88:bf:55:a4:0b:76:08:76:a4:eb:39:0d:23: 04:10:61:9b:87:f0:2d:df:dc:81:88:0c:71:81:ee:5b:e8:f0: e7:79:39:73 -----BEGIN CERTIFICATE----- MIIFFjCCA/6gAwIBAgISAZpOT6X8e7q97I3iWIuOSREIMA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKDQ1OGQxMmYwOTUwNTNjMzU4NzZiODhiNDc2ODVkNjQzNTQy MWZjZjIwHhcNMjUxMTA0MTAwMDMzWhcNMjUxMTA1MTAwMDMzWjAzMTEwLwYDVQQD EyhiYjYyMmY5YzQxMzlmNmYzN2VhOWEyZmMyYjFlMzIxMDdkZTdiZjFiMIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEA0IRPikmfk06LUKGpc66oqhL2pQ8z LfP85oIC4OiynFUFvdF4bfp6Vz6goLhDcaxxKil6OPZpdPSWGrpBI1R3DR4ShZMZ MJlEx3bxqcW4bF6Q20V1NOy0uWdHCj8RPZZwts5lych3wQ+NOntFrLXECa3dtxUI PCgsYLD1dzucHaJdRgOQJG7AGORiFesZig1wvXYGfliZOAptYFxCUrrwPMPK1Pag WdoNdfiOartlC8JZqVrCRavCkbaCO9S7V5H6nU+ibwNeFjVbKUtO1f3ii3RMJG38 5mLNERki3x+uUJbjah6qZGeWCNd0Pmm2nONybq64II5lZDAMLdVFValqPQIDAQAB o4ICIjCCAh4wHQYDVR0OBBYEFLtiL5xBOfbzfqmi/CseMhB9578bMB8GA1UdIwQY MBaAFEWNEvCVBTw1h2uItHaF1kNUIfzyMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvUlkwUzhKVUZQRFdIYTRpMGRvWFdRMVFoX1BJLmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC8zYS83Y2VjYzctZjYzZC00M2ZjLWIyMTkt Mzk1NTk1OWVhZjgxLzEvUlkwUzhKVUZQRFdIYTRpMGRvWFdRMVFoX1BJLm1mdDCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC8zYS83Y2VjYzctZjYzZC00M2ZjLWIyMTktMzk1NTk1OWVhZjgx LzEvUlkwUzhKVUZQRFdIYTRpMGRvWFdRMVFoX1BJLmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAjW5DpwiP nAHOj3wvpqGthD1LYoygod7NfXzIX8Yp0z7ZBGKZhFJEa+Doy8TlLMOK+ZxPbrvZ 8Jj2eKe1JfYCrP9WeuRfuX0tt3nTpbYJq1avsTdpACjnfJqJliDFo1gzCRstfa4Z mk21kCrjkPfSnMU7Wg0lMVyJTLMCZ1cM/dOSm30Dy7Vix8XWGGGguwQHUBZR1t5S +V1WkIh8s4ZaZAovMV06FG/jGeZVqMlOFtUl+PWiWgKz6Bo9eegh3XXCTRZU4T/a /YcRDbWMU3+13Fn/lOKwxibCeERNRM2Iv1WkC3YIdqTrOQ0jBBBhm4fwLd/cgYgM cYHuW+jw53k5cw== -----END CERTIFICATE-----Generated at Tue Nov 4 14:50:47 2025 by rpki-client