$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/3a/abe134-0093-4652-9057-4f4c9b343e90/1/0d4STg-K2059lXbOrjJfZo3SJLE.mft File: 0d4STg-K2059lXbOrjJfZo3SJLE.mft (raw, json) Hash identifier: 3+qJgcTyq2wmu3RrNDPWrfCP/+ip3g94r9Qb8bo4Yt0= Subject key identifier: 9F:42:7C:95:D0:E7:C5:64:2F:2F:F7:31:9C:71:7A:1A:D8:57:03:65 Authority key identifier: D1:DE:12:4E:0F:8A:DB:4E:7D:95:76:CE:AE:32:5F:66:8D:D2:24:B1 Certificate issuer: /CN=d1de124e0f8adb4e7d9576ceae325f668dd224b1 Certificate serial: 019A4DAA73ECB701A7009CE75597A6186A97 Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/0d4STg-K2059lXbOrjJfZo3SJLE.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/3a/abe134-0093-4652-9057-4f4c9b343e90/1/0d4STg-K2059lXbOrjJfZo3SJLE.mft Manifest number: 122F Signing time: Tue 04 Nov 2025 07:00:07 +0000 Manifest this update: Tue 04 Nov 2025 07:00:07 +0000 Manifest next update: Wed 05 Nov 2025 07:00:07 +0000 Files and hashes: 1: 0d4STg-K2059lXbOrjJfZo3SJLE.crl (hash: AdfZi0YajNqbm77aZHAT4ZV5pRr9kxesqLQPQwdXVzY=) 2: 6caVUV-TGB9bU55p1ya71OWBwvg.roa (hash: c0tRExOUVeBF8+Pq6PhYarD4KHj6+N7f0p/w2jdUK80=) 3: GE6nRoMuniMWGyv11YMLRPKemVU.roa (hash: RaYbPvfO1sHreb2/JnG9Opl+09YsllUwocY3Ihxf+gE=) 4: LFAtM68_QsypB1yZseRwlLJq2u4.roa (hash: /957wLIuErUNU/cVyq1KNPpSgWYbgRzlgVLc/r/yFdE=) 5: NAlGVYpV8OEmdD2nIMiqn334k0M.roa (hash: XrkbVPgrR7sOnmYGzDR8m+MZN8NJUZRQwjZqOHkM5b8=) 6: dNqRqY6tmtgccI8cx_uJ4tWqiZA.roa (hash: g+K2hBhsL/swaozLRy4ek/JzzpG8kCplNhlD1lsyOeY=) 7: g8zmfO2HPSEN8YUDrAkY2r7Nlqw.roa (hash: uAg57JMTD8oD+ghOOtfACvdQoLeAHc5YjQ/CuCFoViY=) 8: ghLUfufgx1VoBmbU1sZuk7NLdck.roa (hash: KlUf0BqZgjwHYa7TQ0G1F7PJPcSLF10z1HCqYwcsEU0=) 9: hacEV-MoLT8z9KwMPWss3cGE7Ak.roa (hash: /ljDI2bMRna9vPYEiWkrDiOeR+IfW8BnSxXE9Vp7xXE=) 10: xiZp6eivWb7x_d9W-WC8kwhVWsI.roa (hash: GvxU73beqXLMBxGmaGGngexgQ65uQMfsvmeuizGIl8o=) 11: yv08EH90nRPgnJ4aLVioWHP74iI.roa (hash: wfa+cbtIfXj/VcabZ84otkiskAuSmrS6+55fqOkIL+o=) Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/3a/abe134-0093-4652-9057-4f4c9b343e90/1/0d4STg-K2059lXbOrjJfZo3SJLE.crl rsync://rpki.ripe.net/repository/DEFAULT/3a/abe134-0093-4652-9057-4f4c9b343e90/1/0d4STg-K2059lXbOrjJfZo3SJLE.mft rsync://rpki.ripe.net/repository/DEFAULT/0d4STg-K2059lXbOrjJfZo3SJLE.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Wed 05 Nov 2025 07:00:07 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9a:4d:aa:73:ec:b7:01:a7:00:9c:e7:55:97:a6:18:6a:97 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=d1de124e0f8adb4e7d9576ceae325f668dd224b1 Validity Not Before: Nov 4 07:00:07 2025 GMT Not After : Nov 5 07:00:07 2025 GMT Subject: CN=9f427c95d0e7c5642f2ff7319c717a1ad8570365 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:c8:02:2a:e8:0e:1d:a5:e4:1c:ea:5e:fa:02:6c: 23:5c:e8:33:97:29:16:8b:15:da:77:65:ca:2a:36: b7:e4:89:2f:3c:8a:02:eb:7a:07:c1:8a:6f:64:ca: 4b:c4:4d:91:b2:24:76:15:7f:07:12:0c:2c:cc:81: 87:b1:b8:7f:da:f1:91:06:11:63:aa:3f:fe:12:94: a7:33:11:02:1d:40:c3:89:ea:e4:98:ba:ac:76:e3: d5:da:21:a2:06:e3:80:09:e7:46:8b:29:13:ec:f5: 3f:ae:ca:44:29:0e:5a:ae:a9:ea:d1:26:a0:1c:8a: ec:53:48:c7:91:e1:72:18:eb:cc:3d:0d:65:2e:13: 5c:e3:e4:00:d1:bb:58:43:4c:56:31:a3:2f:ab:dd: a5:7a:0f:95:a6:f6:e1:d9:00:9a:79:5c:19:8f:64: 73:86:30:30:b3:cc:70:f7:4e:58:79:93:1d:65:2f: 7e:42:18:fa:33:6e:39:73:75:32:25:bf:1e:90:a8: bd:90:94:01:e7:15:0e:5f:c7:82:b7:ef:57:a6:07: 73:5a:56:b7:09:d3:e1:cb:00:e5:a6:f9:f5:b5:af: 08:49:02:9b:07:6e:56:a3:e1:5a:00:0a:61:37:5e: 45:04:3d:3a:c4:74:6e:fc:2b:e5:6e:a5:cc:63:76: 95:a9 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 9F:42:7C:95:D0:E7:C5:64:2F:2F:F7:31:9C:71:7A:1A:D8:57:03:65 X509v3 Authority Key Identifier: keyid:D1:DE:12:4E:0F:8A:DB:4E:7D:95:76:CE:AE:32:5F:66:8D:D2:24:B1 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/0d4STg-K2059lXbOrjJfZo3SJLE.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/3a/abe134-0093-4652-9057-4f4c9b343e90/1/0d4STg-K2059lXbOrjJfZo3SJLE.mft X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/3a/abe134-0093-4652-9057-4f4c9b343e90/1/0d4STg-K2059lXbOrjJfZo3SJLE.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 41:31:03:13:0a:46:c3:a0:4f:c1:3b:fc:26:62:0a:7b:29:11: 7d:5b:13:3c:f3:58:62:81:12:a5:08:46:ca:92:bd:1c:04:e6: 01:c5:e8:e3:c0:6d:14:be:0e:f9:41:76:69:67:e1:7a:ba:3f: f4:37:ac:d6:04:a7:92:c0:ca:43:6b:44:15:dd:6f:64:d6:18: db:35:87:d9:9b:39:85:5f:9f:ac:2f:0c:2f:76:77:7d:68:cd: 57:4d:a4:41:66:4d:8d:81:29:a3:76:f0:0a:03:d3:9b:cf:52: 1d:b4:fd:ce:4d:0b:94:fe:66:23:26:90:13:73:1d:df:f9:73: 6d:4b:be:12:dd:8a:f0:b4:bc:57:17:ad:84:d6:c0:6f:91:24: 53:99:66:d1:0c:d6:d9:11:11:13:a6:87:e8:e0:52:47:98:94: 3e:77:10:47:12:e7:cf:85:75:36:68:d5:f3:bd:10:74:24:4a: d4:43:0c:71:4c:e6:c0:ab:30:76:1b:e6:dc:c0:a4:45:19:51: 6a:31:50:b5:02:b5:61:34:75:83:1e:45:18:6a:42:9e:ea:d9: b5:fd:d5:b7:72:26:b7:04:6a:57:58:f2:04:17:8d:c2:bd:c3: 64:2f:80:08:27:c8:63:ef:b6:4a:22:c6:bd:88:b5:80:a8:9a: 1e:40:11:1d -----BEGIN CERTIFICATE----- MIIFFjCCA/6gAwIBAgISAZpNqnPstwGnAJznVZemGGqXMA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKGQxZGUxMjRlMGY4YWRiNGU3ZDk1NzZjZWFlMzI1ZjY2OGRk MjI0YjEwHhcNMjUxMTA0MDcwMDA3WhcNMjUxMTA1MDcwMDA3WjAzMTEwLwYDVQQD Eyg5ZjQyN2M5NWQwZTdjNTY0MmYyZmY3MzE5YzcxN2ExYWQ4NTcwMzY1MIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAyAIq6A4dpeQc6l76AmwjXOgzlykW ixXad2XKKja35IkvPIoC63oHwYpvZMpLxE2RsiR2FX8HEgwszIGHsbh/2vGRBhFj qj/+EpSnMxECHUDDierkmLqsduPV2iGiBuOACedGiykT7PU/rspEKQ5arqnq0Sag HIrsU0jHkeFyGOvMPQ1lLhNc4+QA0btYQ0xWMaMvq92leg+Vpvbh2QCaeVwZj2Rz hjAws8xw905YeZMdZS9+Qhj6M245c3UyJb8ekKi9kJQB5xUOX8eCt+9XpgdzWla3 CdPhywDlpvn1ta8ISQKbB25Wo+FaAAphN15FBD06xHRu/CvlbqXMY3aVqQIDAQAB o4ICIjCCAh4wHQYDVR0OBBYEFJ9CfJXQ58VkLy/3MZxxehrYVwNlMB8GA1UdIwQY MBaAFNHeEk4PittOfZV2zq4yX2aN0iSxMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvMGQ0U1RnLUsyMDU5bFhiT3JqSmZabzNTSkxFLmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC8zYS9hYmUxMzQtMDA5My00NjUyLTkwNTct NGY0YzliMzQzZTkwLzEvMGQ0U1RnLUsyMDU5bFhiT3JqSmZabzNTSkxFLm1mdDCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC8zYS9hYmUxMzQtMDA5My00NjUyLTkwNTctNGY0YzliMzQzZTkw LzEvMGQ0U1RnLUsyMDU5bFhiT3JqSmZabzNTSkxFLmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAQTEDEwpG w6BPwTv8JmIKeykRfVsTPPNYYoESpQhGypK9HATmAcXo48BtFL4O+UF2aWfhero/ 9Des1gSnksDKQ2tEFd1vZNYY2zWH2Zs5hV+frC8ML3Z3fWjNV02kQWZNjYEpo3bw CgPTm89SHbT9zk0LlP5mIyaQE3Md3/lzbUu+Et2K8LS8VxethNbAb5EkU5lm0QzW 2RERE6aH6OBSR5iUPncQRxLnz4V1NmjV870QdCRK1EMMcUzmwKswdhvm3MCkRRlR ajFQtQK1YTR1gx5FGGpCnurZtf3Vt3ImtwRqV1jyBBeNwr3DZC+ACCfIY++2SiLG vYi1gKiaHkARHQ== -----END CERTIFICATE-----Generated at Tue Nov 4 14:24:31 2025 by rpki-client