$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/3e/01d411-d915-4277-8fe2-76b0dda2bf3e/1/1-tcQDnftkRnWbiMhu2cR1-dgmCs.mft File: 1-tcQDnftkRnWbiMhu2cR1-dgmCs.mft (raw, json) Hash identifier: TceSHVKITygzdoNZhSunioAqCjSW7fLvorrW5YriBYQ= Subject key identifier: 57:09:06:F1:6C:45:00:91:50:1D:7C:16:91:C2:8A:DA:7E:7F:03:AA Authority key identifier: FA:D7:10:0E:77:ED:91:19:D6:6E:23:21:BB:67:11:D7:E7:60:98:2B Certificate issuer: /CN=fad7100e77ed9119d66e2321bb6711d7e760982b Certificate serial: 019A4EF57A3E7BEB34F4757CF2FA5F8BB142 Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/1-tcQDnftkRnWbiMhu2cR1-dgmCs.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/3e/01d411-d915-4277-8fe2-76b0dda2bf3e/1/1-tcQDnftkRnWbiMhu2cR1-dgmCs.mft Manifest number: 171E Signing time: Tue 04 Nov 2025 13:01:41 +0000 Manifest this update: Tue 04 Nov 2025 13:01:41 +0000 Manifest next update: Wed 05 Nov 2025 13:01:41 +0000 Files and hashes: 1: 1-tcQDnftkRnWbiMhu2cR1-dgmCs.crl (hash: c+RbWnmTTkbznupy5mwQtJVl8CaT0fxTQLQu68+IwgQ=) 2: 37k0nU6z7XRQ-nu_xSBO_wlWXs8.roa (hash: 31J9GQWFPTW55AXU0wB19k0rwdAvuXpa9Hqq0bbm5q0=) 3: Ml6MKIuGs5X6FYCoibWIrDM8sZw.roa (hash: sr8ii208yixvZe4Nt1vf4FirRpNYMo5v1lAxQmPyK4E=) 4: NeK3VE5xIVumcURQvZORGSezPug.roa (hash: Kyuhso1DU/JY4Cd8KqltzS/UkVVtl7rIX1KuhxLgmkQ=) 5: SAShV7Cx-3cRFcPWPoHPU7seh9k.roa (hash: lzRGc/kfVkESt27Rk5Rm2MTThTLX4bNiPJvrX6OzG4s=) 6: TWLMxWYadUOjpfWSoRjdz4gkQVQ.roa (hash: eJJWCwgtvt1cLj2rlNHb1YuUwHOAuKtSsp+SGbWPUGI=) 7: U2YIuXAyUCZOsR4Cw5PSPdwaU0s.roa (hash: gWdVxjtR19wt31Bo3G5JO46Z63mY8LolhR8kTQQgD5Q=) 8: WvZhz4-xli7Jg3AjUEb09s8yIcg.roa (hash: nyDmjCwaWeBGV6O57JlcDsH1rd4TtVrk7nDHN+GYZDc=) 9: kSLVwGt_NyDYhkUM69fkyKqLKhE.roa (hash: 4uQpl4b7ipDKF9oMjr4f401/xIMAMkUuha8dHxAMb/k=) 10: mNj5xv9nGXpe1PGynvCZZnjrBHA.roa (hash: TkkqknjW6haSUV3elF7SSi1mf8BrofgKNJO9r7Ncf54=) Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/3e/01d411-d915-4277-8fe2-76b0dda2bf3e/1/1-tcQDnftkRnWbiMhu2cR1-dgmCs.crl rsync://rpki.ripe.net/repository/DEFAULT/3e/01d411-d915-4277-8fe2-76b0dda2bf3e/1/1-tcQDnftkRnWbiMhu2cR1-dgmCs.mft rsync://rpki.ripe.net/repository/DEFAULT/1-tcQDnftkRnWbiMhu2cR1-dgmCs.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Wed 05 Nov 2025 13:01:41 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9a:4e:f5:7a:3e:7b:eb:34:f4:75:7c:f2:fa:5f:8b:b1:42 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=fad7100e77ed9119d66e2321bb6711d7e760982b Validity Not Before: Nov 4 13:01:41 2025 GMT Not After : Nov 5 13:01:41 2025 GMT Subject: CN=570906f16c450091501d7c1691c28ada7e7f03aa Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:b9:54:67:2f:73:46:8d:4c:3c:90:5c:65:8c:f9: 96:9e:a0:e8:73:fb:72:bd:c2:bd:7b:37:2c:87:5e: ff:7a:3c:1f:31:96:62:7c:5a:ee:de:46:71:17:f0: aa:dc:b0:5c:3e:ca:c6:de:bd:76:2a:59:14:ad:b5: 0e:f7:ee:62:2c:04:dc:78:5c:26:e5:7c:fe:ce:d3: 43:ef:d0:7b:87:ac:ed:ec:9e:77:3d:09:48:79:05: 0b:5c:f4:6e:a5:24:48:b3:35:aa:9a:83:7d:38:05: 7e:a2:b9:e0:68:ce:09:f1:78:57:cd:8d:f5:19:6e: a5:c1:95:d1:2d:90:ea:f9:0f:b1:fc:6a:1c:b7:ff: d4:02:2e:80:09:a5:0b:fa:19:ae:0b:2d:c5:b6:8e: 18:5d:ae:00:41:28:e4:60:08:a2:dd:8a:42:ce:f0: 4a:c9:f0:bc:c7:4e:7e:58:85:55:89:d6:33:de:70: 97:76:a3:65:3e:61:bb:b9:de:4e:56:e3:48:2b:71: 00:0e:f2:73:02:b7:1f:93:c1:c1:e9:bd:68:55:fd: 41:d6:a4:0a:83:c5:ca:73:91:94:8a:8b:8d:c9:5c: fd:8e:41:87:cd:68:09:21:60:1c:1c:a7:83:8e:fb: c1:e3:2e:bd:70:55:d4:fc:f2:38:a4:c4:8a:a6:ea: 89:e1 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 57:09:06:F1:6C:45:00:91:50:1D:7C:16:91:C2:8A:DA:7E:7F:03:AA X509v3 Authority Key Identifier: keyid:FA:D7:10:0E:77:ED:91:19:D6:6E:23:21:BB:67:11:D7:E7:60:98:2B X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/1-tcQDnftkRnWbiMhu2cR1-dgmCs.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/3e/01d411-d915-4277-8fe2-76b0dda2bf3e/1/1-tcQDnftkRnWbiMhu2cR1-dgmCs.mft X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/3e/01d411-d915-4277-8fe2-76b0dda2bf3e/1/1-tcQDnftkRnWbiMhu2cR1-dgmCs.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 48:f3:a0:39:c7:c3:a3:15:92:a7:04:a3:c7:05:e1:f5:cf:c9: a2:58:7c:19:cd:bb:e9:49:5d:d2:bb:19:66:c1:ba:0e:a6:18: 94:ba:29:29:d8:f1:80:a3:2e:c0:78:76:32:51:d8:50:33:ae: 32:34:28:2b:45:89:0f:a9:38:08:2f:b3:4e:ed:ef:68:37:0d: 9a:d4:e7:71:4e:88:94:ef:d7:39:6a:ab:87:7b:cb:27:af:eb: b7:89:6b:d7:37:51:16:ec:42:cf:2c:6c:8a:5e:8e:5c:63:ff: 2a:3b:e7:f7:65:b1:4b:6f:8d:dc:19:70:75:ae:03:29:05:d4: 27:f6:68:72:22:da:e5:a4:c8:cf:67:d5:b5:7a:a0:84:34:3b: 82:2f:ea:e9:ac:fb:95:98:6e:9f:90:c6:e9:a5:33:cf:1c:ae: e9:ac:2e:4f:d1:6f:22:93:e3:ae:e3:e1:7a:4f:67:25:f5:db: ef:69:88:e3:37:ed:19:6c:6d:bd:30:32:d4:6d:e4:4e:2b:d5: 71:69:71:36:df:d7:d7:db:02:ce:49:cf:3e:1c:6b:ce:c1:18: 79:d5:ea:3c:f6:c2:6c:f1:9b:58:66:50:a5:fa:38:ba:17:fd: 4e:68:07:e2:cb:e3:4c:80:ff:ed:6f:99:de:c6:95:cc:7b:05: 34:94:ae:10 -----BEGIN CERTIFICATE----- MIIFGTCCBAGgAwIBAgISAZpO9Xo+e+s09HV88vpfi7FCMA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKGZhZDcxMDBlNzdlZDkxMTlkNjZlMjMyMWJiNjcxMWQ3ZTc2 MDk4MmIwHhcNMjUxMTA0MTMwMTQxWhcNMjUxMTA1MTMwMTQxWjAzMTEwLwYDVQQD Eyg1NzA5MDZmMTZjNDUwMDkxNTAxZDdjMTY5MWMyOGFkYTdlN2YwM2FhMIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAuVRnL3NGjUw8kFxljPmWnqDoc/ty vcK9ezcsh17/ejwfMZZifFru3kZxF/Cq3LBcPsrG3r12KlkUrbUO9+5iLATceFwm 5Xz+ztND79B7h6zt7J53PQlIeQULXPRupSRIszWqmoN9OAV+orngaM4J8XhXzY31 GW6lwZXRLZDq+Q+x/Goct//UAi6ACaUL+hmuCy3Fto4YXa4AQSjkYAii3YpCzvBK yfC8x05+WIVVidYz3nCXdqNlPmG7ud5OVuNIK3EADvJzArcfk8HB6b1oVf1B1qQK g8XKc5GUiouNyVz9jkGHzWgJIWAcHKeDjvvB4y69cFXU/PI4pMSKpuqJ4QIDAQAB o4ICJTCCAiEwHQYDVR0OBBYEFFcJBvFsRQCRUB18FpHCitp+fwOqMB8GA1UdIwQY MBaAFPrXEA537ZEZ1m4jIbtnEdfnYJgrMA4GA1UdDwEB/wQEAwIHgDBlBggrBgEF BQcBAQRZMFcwVQYIKwYBBQUHMAKGSXJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvMS10Y1FEbmZ0a1JuV2JpTWh1MmNSMS1kZ21Dcy5jZXIw gY4GCCsGAQUFBwELBIGBMH8wfQYIKwYBBQUHMAuGcXJzeW5jOi8vcnBraS5yaXBl Lm5ldC9yZXBvc2l0b3J5L0RFRkFVTFQvM2UvMDFkNDExLWQ5MTUtNDI3Ny04ZmUy LTc2YjBkZGEyYmYzZS8xLzEtdGNRRG5mdGtSbldiaU1odTJjUjEtZGdtQ3MubWZ0 MIGCBgNVHR8EezB5MHegdaBzhnFyc3luYzovL3Jwa2kucmlwZS5uZXQvcmVwb3Np dG9yeS9ERUZBVUxULzNlLzAxZDQxMS1kOTE1LTQyNzctOGZlMi03NmIwZGRhMmJm M2UvMS8xLXRjUURuZnRrUm5XYmlNaHUyY1IxLWRnbUNzLmNybDAYBgNVHSABAf8E DjAMMAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgAC BQAwFQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEASPOg OcfDoxWSpwSjxwXh9c/Jolh8Gc276Uld0rsZZsG6DqYYlLopKdjxgKMuwHh2MlHY UDOuMjQoK0WJD6k4CC+zTu3vaDcNmtTncU6IlO/XOWqrh3vLJ6/rt4lr1zdRFuxC zyxsil6OXGP/Kjvn92WxS2+N3Blwda4DKQXUJ/ZociLa5aTIz2fVtXqghDQ7gi/q 6az7lZhun5DG6aUzzxyu6awuT9FvIpPjruPhek9nJfXb72mI4zftGWxtvTAy1G3k TivVcWlxNt/X19sCzknPPhxrzsEYedXqPPbCbPGbWGZQpfo4uhf9TmgH4svjTID/ 7W+Z3saVzHsFNJSuEA== -----END CERTIFICATE-----Generated at Tue Nov 4 22:47:27 2025 by rpki-client