$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/3f/2b2878-5b79-40f7-b4b5-356c4d7bb452/1/9sPgJ9LRwtNtfJVIZyJsg7ZetW8.mft File: 9sPgJ9LRwtNtfJVIZyJsg7ZetW8.mft (raw, json) Hash identifier: pLL8avAt9Qp/MP0uqBxbTycSY74Njj/tglxjHW6XCIs= Subject key identifier: 72:F3:59:6C:B3:2E:84:F4:C6:3C:60:B3:9C:94:E1:8D:02:B0:9D:70 Authority key identifier: F6:C3:E0:27:D2:D1:C2:D3:6D:7C:95:48:67:22:6C:83:B6:5E:B5:6F Certificate issuer: /CN=f6c3e027d2d1c2d36d7c954867226c83b65eb56f Certificate serial: 019A52D180974689D0EEF68EA37F0F0A10F7 Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/9sPgJ9LRwtNtfJVIZyJsg7ZetW8.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/3f/2b2878-5b79-40f7-b4b5-356c4d7bb452/1/9sPgJ9LRwtNtfJVIZyJsg7ZetW8.mft Manifest number: 0F29 Signing time: Wed 05 Nov 2025 07:00:52 +0000 Manifest this update: Wed 05 Nov 2025 07:00:52 +0000 Manifest next update: Thu 06 Nov 2025 07:00:52 +0000 Files and hashes: 1: 1-FnvQqT9mIqxipsRqFjYsNQSlBM.roa (hash: +uFY0K06aPvv+IH1erLogXQwEEO2k+DY8eNZLIXFHV4=) 2: 3gHc2sELy-q8GzBNb0pGNEAUeSU.roa (hash: +uoA4jjzPF6dggZHTrB3SBkyhtONGCYmRKaDkDvy7ys=) 3: 9sPgJ9LRwtNtfJVIZyJsg7ZetW8.crl (hash: OSms4ey/giNeZRsnLrjufEilWwGAOz770U3/KDnyUh8=) 4: EpH20P4xP3V2g4vErHJO-EvTAVU.roa (hash: jeooPDRiBjDAUPoIXhITPTt2zTmHZ7KLWf5fCQG5sIo=) 5: RMDB6gMXfrtTmWIrc-eFyDWvjA8.roa (hash: GVzUypSd1fZNP3R7rqeVrhxf+B3I3xeeeYXchU/dNhc=) 6: SI90qQvScrNKS-02paw66Vtte1g.roa (hash: CoRUrg+WB47FS25HKQ2HVa4e+itGukiRC6ZwlYviHec=) 7: VunL007YcgdB0SQwEVqZksZS8Fs.roa (hash: 216WPQB/uK03AqzN7nO6bEUvYIaYzP3vD9//CYpZtZI=) 8: mvmUvaM2JRysTq3IiKyyysU6GY8.roa (hash: dMiGawP2eEnw55fXqAakbpr7IIQ2Da7zAMRfk+xhjuE=) 9: xfkDaLGtqI9S0koDwH1ibKq86PQ.roa (hash: 9SMgRbgNtClui+eod+bviRGqIN366+5FDeHZRxM9wm0=) 10: yIehYePK6tLNgPSevPZc6yI-hyM.roa (hash: b4yVl+3Ck0JmNj4X3LbJqBzo9dAh1Vn8oWFOm89Ahv4=) Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/3f/2b2878-5b79-40f7-b4b5-356c4d7bb452/1/9sPgJ9LRwtNtfJVIZyJsg7ZetW8.crl rsync://rpki.ripe.net/repository/DEFAULT/3f/2b2878-5b79-40f7-b4b5-356c4d7bb452/1/9sPgJ9LRwtNtfJVIZyJsg7ZetW8.mft rsync://rpki.ripe.net/repository/DEFAULT/9sPgJ9LRwtNtfJVIZyJsg7ZetW8.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Thu 06 Nov 2025 03:00:03 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9a:52:d1:80:97:46:89:d0:ee:f6:8e:a3:7f:0f:0a:10:f7 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=f6c3e027d2d1c2d36d7c954867226c83b65eb56f Validity Not Before: Nov 5 07:00:52 2025 GMT Not After : Nov 6 07:00:52 2025 GMT Subject: CN=72f3596cb32e84f4c63c60b39c94e18d02b09d70 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:ab:a5:a1:24:c4:f4:bc:33:d1:ce:13:15:9f:e1: 99:2a:ad:9c:b0:28:0d:dd:29:4d:e8:a4:d1:5f:0b: e9:54:1c:df:97:aa:14:90:47:f5:1e:cc:12:1e:92: 69:0a:1a:a9:04:90:be:07:95:07:5b:d5:1e:0e:a4: 75:bb:a0:57:bd:86:fb:1e:70:cf:e4:0a:09:4b:8a: 90:47:10:b8:e9:9f:39:fa:10:52:5d:3e:43:ba:6c: 4e:f3:33:08:04:47:ac:25:6b:96:16:e5:39:a0:cb: 39:0f:cc:eb:d6:9f:6a:20:b0:96:12:83:81:2a:34: 43:03:74:3b:3d:e5:f9:e5:f6:93:5b:8b:eb:db:b2: ff:99:0a:26:c9:ba:ba:d3:2d:a3:d2:1d:74:f5:2d: b3:7e:f0:78:ec:20:a8:41:b6:15:75:d4:b6:14:5f: b1:24:31:90:aa:8b:cc:f2:1a:3b:39:6a:46:59:3e: 34:86:54:27:69:93:13:25:a9:b2:a4:30:60:50:7c: 05:b2:29:72:45:56:48:81:39:c4:40:3d:e2:21:93: 03:fb:67:0b:5f:6b:df:7b:a0:f3:4c:bc:b8:ec:f4: 62:ba:0f:24:02:8b:c4:77:a1:04:fb:52:56:5a:c0: e2:35:19:71:50:26:a1:a2:a3:ac:ae:65:12:11:00: b2:f9 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 72:F3:59:6C:B3:2E:84:F4:C6:3C:60:B3:9C:94:E1:8D:02:B0:9D:70 X509v3 Authority Key Identifier: keyid:F6:C3:E0:27:D2:D1:C2:D3:6D:7C:95:48:67:22:6C:83:B6:5E:B5:6F X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/9sPgJ9LRwtNtfJVIZyJsg7ZetW8.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/3f/2b2878-5b79-40f7-b4b5-356c4d7bb452/1/9sPgJ9LRwtNtfJVIZyJsg7ZetW8.mft X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/3f/2b2878-5b79-40f7-b4b5-356c4d7bb452/1/9sPgJ9LRwtNtfJVIZyJsg7ZetW8.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 75:d8:41:7b:a9:48:e2:ba:d8:9e:6e:38:1e:d8:e2:a2:3f:ea: ae:57:36:7a:39:fd:84:c2:25:97:45:bf:d7:e0:fe:42:7e:68: cb:55:a8:46:0a:c3:44:fc:d0:f0:a3:09:97:92:11:f9:c5:1e: 5b:d7:1e:e6:d7:a1:ed:7a:dd:fe:31:d4:39:0b:b3:ba:96:f7: 97:df:49:59:75:ec:ef:9c:c6:e4:7a:c7:7e:17:b7:24:b2:5a: ae:6e:14:4b:19:4e:ab:f9:4f:67:69:78:6a:7e:61:58:21:86: 2f:85:bc:90:ba:0a:7a:73:dc:80:0f:d7:60:6b:77:d6:52:30: 0e:a6:32:c4:65:04:3a:37:9a:b8:92:f9:55:a3:ec:a0:32:2e: e8:93:9b:ac:1a:50:39:ed:8e:82:fd:ae:a7:dd:3e:da:a6:38: 52:42:56:67:a8:5e:da:9e:15:44:b0:b9:db:45:51:c0:81:4c: e0:87:f5:f6:a1:63:60:73:5e:14:21:0a:f4:0f:cf:69:76:63: ca:1a:53:55:7e:da:47:22:4c:0e:d8:f2:f6:d5:f5:81:3d:77: 07:fe:e7:0e:ef:d1:32:9a:19:e7:ff:dd:73:f6:51:15:fd:ad: cd:7e:6e:f0:85:4b:07:0b:26:49:c7:33:93:a2:77:e1:d7:cf: 78:1e:fa:25 -----BEGIN CERTIFICATE----- MIIFFjCCA/6gAwIBAgISAZpS0YCXRonQ7vaOo38PChD3MA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKGY2YzNlMDI3ZDJkMWMyZDM2ZDdjOTU0ODY3MjI2YzgzYjY1 ZWI1NmYwHhcNMjUxMTA1MDcwMDUyWhcNMjUxMTA2MDcwMDUyWjAzMTEwLwYDVQQD Eyg3MmYzNTk2Y2IzMmU4NGY0YzYzYzYwYjM5Yzk0ZTE4ZDAyYjA5ZDcwMIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAq6WhJMT0vDPRzhMVn+GZKq2csCgN 3SlN6KTRXwvpVBzfl6oUkEf1HswSHpJpChqpBJC+B5UHW9UeDqR1u6BXvYb7HnDP 5AoJS4qQRxC46Z85+hBSXT5DumxO8zMIBEesJWuWFuU5oMs5D8zr1p9qILCWEoOB KjRDA3Q7PeX55faTW4vr27L/mQomybq60y2j0h109S2zfvB47CCoQbYVddS2FF+x JDGQqovM8ho7OWpGWT40hlQnaZMTJamypDBgUHwFsilyRVZIgTnEQD3iIZMD+2cL X2vfe6DzTLy47PRiug8kAovEd6EE+1JWWsDiNRlxUCahoqOsrmUSEQCy+QIDAQAB o4ICIjCCAh4wHQYDVR0OBBYEFHLzWWyzLoT0xjxgs5yU4Y0CsJ1wMB8GA1UdIwQY MBaAFPbD4CfS0cLTbXyVSGcibIO2XrVvMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvOXNQZ0o5TFJ3dE50ZkpWSVp5SnNnN1pldFc4LmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC8zZi8yYjI4NzgtNWI3OS00MGY3LWI0YjUt MzU2YzRkN2JiNDUyLzEvOXNQZ0o5TFJ3dE50ZkpWSVp5SnNnN1pldFc4Lm1mdDCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC8zZi8yYjI4NzgtNWI3OS00MGY3LWI0YjUtMzU2YzRkN2JiNDUy LzEvOXNQZ0o5TFJ3dE50ZkpWSVp5SnNnN1pldFc4LmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAddhBe6lI 4rrYnm44Htjioj/qrlc2ejn9hMIll0W/1+D+Qn5oy1WoRgrDRPzQ8KMJl5IR+cUe W9ce5teh7Xrd/jHUOQuzupb3l99JWXXs75zG5HrHfhe3JLJarm4USxlOq/lPZ2l4 an5hWCGGL4W8kLoKenPcgA/XYGt31lIwDqYyxGUEOjeauJL5VaPsoDIu6JObrBpQ Oe2Ogv2up90+2qY4UkJWZ6he2p4VRLC520VRwIFM4If19qFjYHNeFCEK9A/PaXZj yhpTVX7aRyJMDtjy9tX1gT13B/7nDu/RMpoZ5//dc/ZRFf2tzX5u8IVLBwsmSccz k6J34dfPeB76JQ== -----END CERTIFICATE-----Generated at Wed Nov 5 10:36:18 2025 by rpki-client