$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/44/cb7b21-335c-42ca-859e-73428f9c7bff/1/tFmZiZ920uLkzN_IF_mHnPrAa74.mft File: tFmZiZ920uLkzN_IF_mHnPrAa74.mft (raw, json) Hash identifier: M5RTE6BNDVu0Yl9hny+Cmcrv4OnR/X78eZMPzgfgVgQ= Subject key identifier: 0A:E1:F5:D2:5A:83:A2:1F:61:D2:CE:07:81:C7:44:54:3F:C2:57:6B Authority key identifier: B4:59:99:89:9F:76:D2:E2:E4:CC:DF:C8:17:F9:87:9C:FA:C0:6B:BE Certificate issuer: /CN=b45999899f76d2e2e4ccdfc817f9879cfac06bbe Certificate serial: 019A4F9346B8392197E489DF390E1D787909 Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/tFmZiZ920uLkzN_IF_mHnPrAa74.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/44/cb7b21-335c-42ca-859e-73428f9c7bff/1/tFmZiZ920uLkzN_IF_mHnPrAa74.mft Manifest number: 0FD3 Signing time: Tue 04 Nov 2025 15:54:03 +0000 Manifest this update: Tue 04 Nov 2025 15:54:03 +0000 Manifest next update: Wed 05 Nov 2025 15:54:03 +0000 Files and hashes: 1: 2LtUkcgkIuZhBK0wGfDHXpO90Fg.roa (hash: fHYbhPRLNrvgqYDM43jt9s30bh16kQSVsBZ1CH2USmQ=) 2: 6SHuayDCb_08mqBJTOUzFTsfjuw.roa (hash: l0vui4Z61D+6w4eHGOqnX6EDthpEADIAOWmuDi43beU=) 3: GnoVV1PtMRC2jUfUFiPdzHxlxwU.roa (hash: lk6jGrozVKQ/8B+Qe2uINFFR8sFLolbJMCGzGH2bMm8=) 4: JM31mtO5D2YgJ4vv854uYIYUqZM.roa (hash: BpH5iTmkS7Cb31Ji5qcbFt49GmCtp8bFyAoPiv8gypY=) 5: NSzWrjRXn4HjfrL5mu4iDEF2ZKM.roa (hash: 68u8eq1g4Qd3vK6iv6ViZSMZ7p+lDJUxXvgGZjFl+cA=) 6: S8FtCCfZ1FmftDX0CD2Xw7-p6Wk.roa (hash: RzNOfkejq6IuxeHN6MGvFtgPwE/5FEzBG277ohzwVgw=) 7: ViKQAjbjoPYnrdJgXbxuRJZ2JQ0.roa (hash: sWcoLNpiycy3qZmgDh7RC3B1pLSPMX74VG0McMDKWD4=) 8: bVwdAY_3tzeIYh1lGjq9dC2K998.roa (hash: Cy+JJP0r30GikInnGPQvx8BcElRVxD8+sorOU6VuUOU=) 9: kzkxlAjNluX99z1bTtF79HY_wp4.roa (hash: TFi7zUlhEhQqH665vNFOO2zhHl+RI/6mE+V//oHUM0w=) 10: tFmZiZ920uLkzN_IF_mHnPrAa74.crl (hash: KLYiZD8bucFuI9RjIyTs931LDhZgOxpJ7foQP/aGqLE=) Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/44/cb7b21-335c-42ca-859e-73428f9c7bff/1/tFmZiZ920uLkzN_IF_mHnPrAa74.crl rsync://rpki.ripe.net/repository/DEFAULT/44/cb7b21-335c-42ca-859e-73428f9c7bff/1/tFmZiZ920uLkzN_IF_mHnPrAa74.mft rsync://rpki.ripe.net/repository/DEFAULT/tFmZiZ920uLkzN_IF_mHnPrAa74.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Wed 05 Nov 2025 15:54:03 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9a:4f:93:46:b8:39:21:97:e4:89:df:39:0e:1d:78:79:09 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=b45999899f76d2e2e4ccdfc817f9879cfac06bbe Validity Not Before: Nov 4 15:54:03 2025 GMT Not After : Nov 5 15:54:03 2025 GMT Subject: CN=0ae1f5d25a83a21f61d2ce0781c744543fc2576b Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:c6:be:27:93:0b:95:f4:67:b0:56:ae:a5:fb:04: 01:d6:97:10:4e:d3:16:10:91:36:09:36:b0:b6:34: 8c:94:b1:01:2d:e8:17:11:21:d1:d0:5b:42:41:40: 95:b6:76:ea:df:99:38:32:b1:5d:19:69:d4:c9:17: 7d:d7:8d:95:01:9b:2c:44:26:ec:f4:10:93:c5:6a: 5c:28:47:8c:68:2c:71:c7:05:30:9a:97:43:a8:20: 44:86:d0:1e:56:a9:b1:3e:fb:b1:05:bc:ea:d4:35: 23:e5:34:76:0a:20:bc:b8:f3:bd:7b:4e:c9:4b:60: d4:48:c7:55:0e:2c:19:a4:30:8f:eb:ce:28:38:42: 42:45:1c:30:8d:1f:16:aa:b0:eb:d3:e4:d4:d6:5f: e9:2f:e8:9d:01:02:8a:0b:97:b9:88:68:31:67:7b: e9:d9:0e:2e:59:cc:4b:41:34:3a:be:a5:7e:6a:a5: d0:71:f5:fc:cc:c0:4f:47:73:63:8b:54:11:f4:2f: e1:2b:63:2c:73:eb:85:6e:6a:ad:cd:6a:35:85:20: d2:07:3c:f3:cb:72:6e:84:3a:8e:6a:d1:6d:53:1f: cc:7e:04:f9:cc:9a:8c:fe:6b:8d:83:45:11:0d:55: 32:bd:c2:6e:bf:d3:80:b3:83:fa:e7:99:60:b3:94: c7:e5 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 0A:E1:F5:D2:5A:83:A2:1F:61:D2:CE:07:81:C7:44:54:3F:C2:57:6B X509v3 Authority Key Identifier: keyid:B4:59:99:89:9F:76:D2:E2:E4:CC:DF:C8:17:F9:87:9C:FA:C0:6B:BE X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/tFmZiZ920uLkzN_IF_mHnPrAa74.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/44/cb7b21-335c-42ca-859e-73428f9c7bff/1/tFmZiZ920uLkzN_IF_mHnPrAa74.mft X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/44/cb7b21-335c-42ca-859e-73428f9c7bff/1/tFmZiZ920uLkzN_IF_mHnPrAa74.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 07:9d:59:1f:23:84:0e:b9:7d:9a:09:ad:a9:e5:ba:52:1e:fe: 5c:76:b3:6b:95:3e:6d:46:e3:4e:ff:de:94:e8:8e:0c:22:fa: 20:d1:5d:2b:4a:cb:0f:00:2c:a4:40:a5:79:e2:ec:25:1c:f1: dd:62:3a:4d:86:70:01:6a:f7:34:5a:11:3d:14:41:0f:a4:6b: 87:0f:2f:13:fa:26:d0:88:0c:ad:6b:79:1c:0b:4a:22:27:a6: 25:c0:3c:12:18:a5:69:ea:1b:fc:64:dd:52:a2:bd:1b:f3:06: 42:7e:f1:c8:47:d0:ac:42:ba:47:87:0b:b3:0b:86:5e:32:8d: 92:67:c0:b5:60:07:83:3c:e8:44:55:ea:49:c3:fc:b8:48:e4: 9b:61:9b:61:a3:bf:51:5b:87:80:70:16:fa:18:d8:a2:eb:3c: 1a:5d:17:8c:e8:09:63:1d:f7:9a:69:71:7b:fa:e7:67:c5:47: 77:28:62:cd:02:d2:4a:ff:43:c5:97:8c:ab:4f:02:38:af:23: fd:8f:2a:43:a2:bc:e5:a7:c1:02:f7:b8:e9:a2:95:b0:80:11: 57:64:e9:a9:35:37:9a:9c:95:a1:d9:b6:cb:a5:72:4b:1f:d2: 44:4d:20:52:14:d7:a8:bd:6b:fb:8d:aa:15:a7:32:c1:5f:f5: 0b:15:18:48 -----BEGIN CERTIFICATE----- MIIFFjCCA/6gAwIBAgISAZpPk0a4OSGX5InfOQ4deHkJMA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKGI0NTk5OTg5OWY3NmQyZTJlNGNjZGZjODE3Zjk4NzljZmFj MDZiYmUwHhcNMjUxMTA0MTU1NDAzWhcNMjUxMTA1MTU1NDAzWjAzMTEwLwYDVQQD EygwYWUxZjVkMjVhODNhMjFmNjFkMmNlMDc4MWM3NDQ1NDNmYzI1NzZiMIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAxr4nkwuV9GewVq6l+wQB1pcQTtMW EJE2CTawtjSMlLEBLegXESHR0FtCQUCVtnbq35k4MrFdGWnUyRd9142VAZssRCbs 9BCTxWpcKEeMaCxxxwUwmpdDqCBEhtAeVqmxPvuxBbzq1DUj5TR2CiC8uPO9e07J S2DUSMdVDiwZpDCP684oOEJCRRwwjR8WqrDr0+TU1l/pL+idAQKKC5e5iGgxZ3vp 2Q4uWcxLQTQ6vqV+aqXQcfX8zMBPR3Nji1QR9C/hK2Msc+uFbmqtzWo1hSDSBzzz y3JuhDqOatFtUx/MfgT5zJqM/muNg0URDVUyvcJuv9OAs4P655lgs5TH5QIDAQAB o4ICIjCCAh4wHQYDVR0OBBYEFArh9dJag6IfYdLOB4HHRFQ/wldrMB8GA1UdIwQY MBaAFLRZmYmfdtLi5MzfyBf5h5z6wGu+MA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvdEZtWmlaOTIwdUxrek5fSUZfbUhuUHJBYTc0LmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC80NC9jYjdiMjEtMzM1Yy00MmNhLTg1OWUt NzM0MjhmOWM3YmZmLzEvdEZtWmlaOTIwdUxrek5fSUZfbUhuUHJBYTc0Lm1mdDCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC80NC9jYjdiMjEtMzM1Yy00MmNhLTg1OWUtNzM0MjhmOWM3YmZm LzEvdEZtWmlaOTIwdUxrek5fSUZfbUhuUHJBYTc0LmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAB51ZHyOE Drl9mgmtqeW6Uh7+XHaza5U+bUbjTv/elOiODCL6INFdK0rLDwAspECleeLsJRzx 3WI6TYZwAWr3NFoRPRRBD6Rrhw8vE/om0IgMrWt5HAtKIiemJcA8Ehilaeob/GTd UqK9G/MGQn7xyEfQrEK6R4cLswuGXjKNkmfAtWAHgzzoRFXqScP8uEjkm2GbYaO/ UVuHgHAW+hjYous8Gl0XjOgJYx33mmlxe/rnZ8VHdyhizQLSSv9DxZeMq08COK8j /Y8qQ6K85afBAve46aKVsIARV2TpqTU3mpyVodm2y6VySx/SRE0gUhTXqL1r+42q FacywV/1CxUYSA== -----END CERTIFICATE-----Generated at Tue Nov 4 23:56:27 2025 by rpki-client