$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/3f/18c498-2171-4e1c-8d80-a6c49eb28287/1/dOPDNpcglLGowT1BgWhX0Zejquk.mft File: dOPDNpcglLGowT1BgWhX0Zejquk.mft (raw, json) Hash identifier: W5zldD8tYJaiAp08nIg4nJNtrT1W1ntdpBDAtyjFH6k= Subject key identifier: D1:BB:2C:84:35:54:9F:30:5C:97:7A:F5:A2:7E:B9:E8:31:FE:74:FE Authority key identifier: 74:E3:C3:36:97:20:94:B1:A8:C1:3D:41:81:68:57:D1:97:A3:AA:E9 Certificate issuer: /CN=74e3c336972094b1a8c13d41816857d197a3aae9 Certificate serial: 019A51875BDCD2FBB5C7D30EE6BE5A48ED4F Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/dOPDNpcglLGowT1BgWhX0Zejquk.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/3f/18c498-2171-4e1c-8d80-a6c49eb28287/1/dOPDNpcglLGowT1BgWhX0Zejquk.mft Manifest number: 1433 Signing time: Wed 05 Nov 2025 01:00:16 +0000 Manifest this update: Wed 05 Nov 2025 01:00:16 +0000 Manifest next update: Thu 06 Nov 2025 01:00:16 +0000 Files and hashes: 1: 1jpCyAps9bajWpTTNjuuJqkvGNw.roa (hash: QdNF4dszmqN93C6OMT7lYcdmskEQt8kQtHTCFEeRLK4=) 2: 5TFH_eW2qIWRYXLPVqdNkYBm8RY.roa (hash: NHd1FZ0Cj9dSpCZXcpxcSuivwawk/XLiDV5hFVcK8gs=) 3: B-IzhwSKXhHkz88nSETOGD9yRG4.roa (hash: YnLpp9fGmyMsduAjb3ebFR0Lsy/94n7A+dxRiyz9BXo=) 4: LfVA7yFSUE0qhq_HYTK38H6PAlY.roa (hash: Kppg3VjpkBzGqtZq9DRkl+9W1VehTNUgM7T4eg/Jh/E=) 5: OI1U9tyTexI3zFMxN2_p-wXJb6Q.roa (hash: jEa8AhX1E/rcgU1N48+cRpXUd91VJFk6ahzuPB4XKow=) 6: UWwzSZwnxpR_r3Y4D6vttKdBBVs.roa (hash: 7svZa4xV7+uz3XJCftME26l72YGSUBkSe+OkDk5Vluk=) 7: VJ6MDr9v2VTJjopln-NK2ojxFwc.roa (hash: aCjSF+Bt+cDnTvcdibhV9s05hQuvY9LCYp3eMrgD2Ks=) 8: YOcpXFVJRTJW2caFAPTppkNQBuk.roa (hash: bsMm8G8+2Vegzn+c1SqEObi1wuYbeOXaQ994ZEYf674=) 9: a1U9llCdwrEqU4GkcwBsuwGny80.roa (hash: x9+7kA4QQzpZS4+gdNTWeXV2Ehq7i5FwV0w3Ws0zS7A=) 10: bilxvgHa_ortWdZiJoCPu9q2EO4.roa (hash: l/1X47j3OP5z+Rp05LuTXjyl7yZpgOm/aXT90ziTHDc=) 11: btX-zAe_zEJQ3ltM7sZKTKWNtzU.roa (hash: FXQNguGpvehosedHQRjCf06rJkvh5KY35ySN2Wig1dE=) 12: dOPDNpcglLGowT1BgWhX0Zejquk.crl (hash: SgN4nMGQIyHUdnBw1CsWW0sVX19VDqq72pChVp6YCZo=) 13: leLN7dUwqNQXTkicjPodaPNaHrA.roa (hash: /TZBYmyqPdbIBcWc+Ubi8mL2e3Sg1zgKUo/8XZMZsK8=) 14: ltEUPJ59iMmxTdNEYLGbM1Yq6jY.roa (hash: 4OyHOUV/gpG2mHKMCDQGjjKuCFHSFtOInlqympBF1Os=) 15: pzyfVcqGqM8oIh9yspKnplAOyo4.roa (hash: hsiUYyCYakxAYsQctvaT1faoOH457ARGeeeeMVZVUZk=) Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/3f/18c498-2171-4e1c-8d80-a6c49eb28287/1/dOPDNpcglLGowT1BgWhX0Zejquk.crl rsync://rpki.ripe.net/repository/DEFAULT/3f/18c498-2171-4e1c-8d80-a6c49eb28287/1/dOPDNpcglLGowT1BgWhX0Zejquk.mft rsync://rpki.ripe.net/repository/DEFAULT/dOPDNpcglLGowT1BgWhX0Zejquk.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Thu 06 Nov 2025 01:00:16 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9a:51:87:5b:dc:d2:fb:b5:c7:d3:0e:e6:be:5a:48:ed:4f Signature Algorithm: sha256WithRSAEncryption Issuer: CN=74e3c336972094b1a8c13d41816857d197a3aae9 Validity Not Before: Nov 5 01:00:16 2025 GMT Not After : Nov 6 01:00:16 2025 GMT Subject: CN=d1bb2c8435549f305c977af5a27eb9e831fe74fe Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:c7:1d:de:90:70:4b:30:c6:eb:9d:2f:d4:39:7a: b5:03:f9:f8:a6:d4:ba:33:5e:50:37:5c:0a:7a:f8: 02:00:ba:ba:9f:1a:47:4f:88:fa:2b:ea:61:30:a6: ee:c1:3c:7c:37:c7:6d:a7:c6:05:0b:c0:d4:a8:ab: 23:d3:70:cc:48:2e:33:c2:c3:eb:c0:80:3b:dd:02: 87:10:48:cc:8c:85:79:78:df:fd:a6:4a:5a:72:ec: 17:b0:ae:23:07:f4:a2:95:a3:b4:6d:57:2b:8f:8f: 06:c9:d7:1d:63:2e:e4:bc:f1:96:fc:8a:15:20:a1: 01:e6:7f:1f:c2:17:55:3a:2b:ae:ca:b6:ee:86:5f: 69:8f:65:d8:c0:de:c1:b2:d0:bb:6d:80:75:cd:9d: 72:b9:d6:21:7b:aa:6d:e6:57:f3:0e:ea:11:53:6a: 7b:89:6c:98:50:cf:a3:e0:59:ed:b1:63:b9:17:aa: c7:8f:d1:03:3f:9f:b6:68:d4:46:29:53:81:c8:72: f1:da:2f:0e:34:c4:22:0d:ce:e1:d8:27:db:9d:87: 5b:2c:e2:ef:4e:ea:6f:f7:60:2b:34:d8:b3:fa:79: 99:f9:65:01:57:b5:94:a4:b3:96:f3:b1:34:46:3d: 3d:a2:dc:15:8e:84:b6:4f:62:e8:26:58:e7:09:6b: ad:a5 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: D1:BB:2C:84:35:54:9F:30:5C:97:7A:F5:A2:7E:B9:E8:31:FE:74:FE X509v3 Authority Key Identifier: keyid:74:E3:C3:36:97:20:94:B1:A8:C1:3D:41:81:68:57:D1:97:A3:AA:E9 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/dOPDNpcglLGowT1BgWhX0Zejquk.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/3f/18c498-2171-4e1c-8d80-a6c49eb28287/1/dOPDNpcglLGowT1BgWhX0Zejquk.mft X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/3f/18c498-2171-4e1c-8d80-a6c49eb28287/1/dOPDNpcglLGowT1BgWhX0Zejquk.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 82:9c:60:44:97:3f:5d:ff:99:42:ae:a3:ca:19:6b:fa:f2:08: 56:a7:9e:26:18:7c:be:52:d0:12:72:0b:ab:46:ef:60:f8:a8: 97:73:37:59:05:04:35:d7:e2:c1:73:18:54:95:97:d2:97:3a: d1:3d:68:5e:67:88:60:68:32:de:d0:da:c3:26:2d:4a:7a:cb: 84:61:aa:59:d8:19:97:2f:a0:6a:56:52:59:84:a8:8b:73:05: 6a:45:73:1e:40:37:85:65:3e:1b:10:8b:6e:28:c8:8b:b6:04: 9a:6c:52:e6:2a:fc:cd:60:86:be:71:05:2a:6d:56:ef:bd:29: 26:98:88:58:f4:18:0c:63:67:d8:39:13:ac:96:ad:51:cb:0d: 1d:59:be:2d:78:70:7c:39:df:2c:08:22:92:fa:60:d1:90:b0: f1:b1:45:cb:f2:8d:06:34:ab:dd:34:4c:a1:e3:d1:3c:a4:0d: f3:af:d1:d9:47:57:d0:4b:40:a3:a9:c6:38:11:d1:da:c1:64: 68:e1:2f:6e:82:b8:80:74:10:c0:9a:64:87:1e:03:e8:74:5f: 52:4e:5f:43:2e:c7:5e:5b:2a:b7:aa:72:e1:09:22:d4:f3:63: 61:07:c5:49:6c:86:9b:a4:f8:d3:40:ce:05:a4:b8:11:4e:99: be:f5:c5:0f -----BEGIN CERTIFICATE----- MIIFFjCCA/6gAwIBAgISAZpRh1vc0vu1x9MO5r5aSO1PMA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKDc0ZTNjMzM2OTcyMDk0YjFhOGMxM2Q0MTgxNjg1N2QxOTdh M2FhZTkwHhcNMjUxMTA1MDEwMDE2WhcNMjUxMTA2MDEwMDE2WjAzMTEwLwYDVQQD EyhkMWJiMmM4NDM1NTQ5ZjMwNWM5NzdhZjVhMjdlYjllODMxZmU3NGZlMIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAxx3ekHBLMMbrnS/UOXq1A/n4ptS6 M15QN1wKevgCALq6nxpHT4j6K+phMKbuwTx8N8dtp8YFC8DUqKsj03DMSC4zwsPr wIA73QKHEEjMjIV5eN/9pkpacuwXsK4jB/SilaO0bVcrj48GydcdYy7kvPGW/IoV IKEB5n8fwhdVOiuuyrbuhl9pj2XYwN7BstC7bYB1zZ1yudYhe6pt5lfzDuoRU2p7 iWyYUM+j4FntsWO5F6rHj9EDP5+2aNRGKVOByHLx2i8ONMQiDc7h2CfbnYdbLOLv Tupv92ArNNiz+nmZ+WUBV7WUpLOW87E0Rj09otwVjoS2T2LoJljnCWutpQIDAQAB o4ICIjCCAh4wHQYDVR0OBBYEFNG7LIQ1VJ8wXJd69aJ+uegx/nT+MB8GA1UdIwQY MBaAFHTjwzaXIJSxqME9QYFoV9GXo6rpMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvZE9QRE5wY2dsTEdvd1QxQmdXaFgwWmVqcXVrLmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC8zZi8xOGM0OTgtMjE3MS00ZTFjLThkODAt YTZjNDllYjI4Mjg3LzEvZE9QRE5wY2dsTEdvd1QxQmdXaFgwWmVqcXVrLm1mdDCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC8zZi8xOGM0OTgtMjE3MS00ZTFjLThkODAtYTZjNDllYjI4Mjg3 LzEvZE9QRE5wY2dsTEdvd1QxQmdXaFgwWmVqcXVrLmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAgpxgRJc/ Xf+ZQq6jyhlr+vIIVqeeJhh8vlLQEnILq0bvYPiol3M3WQUENdfiwXMYVJWX0pc6 0T1oXmeIYGgy3tDawyYtSnrLhGGqWdgZly+galZSWYSoi3MFakVzHkA3hWU+GxCL bijIi7YEmmxS5ir8zWCGvnEFKm1W770pJpiIWPQYDGNn2DkTrJatUcsNHVm+LXhw fDnfLAgikvpg0ZCw8bFFy/KNBjSr3TRMoePRPKQN86/R2UdX0EtAo6nGOBHR2sFk aOEvboK4gHQQwJpkhx4D6HRfUk5fQy7HXlsqt6py4Qki1PNjYQfFSWyGm6T400DO BaS4EU6ZvvXFDw== -----END CERTIFICATE-----Generated at Wed Nov 5 11:08:26 2025 by rpki-client