$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/47/bc7078-1ee4-42f1-bc34-1d21d1bce3fe/1/I0tUsRmns-_xUwhbcxVQfNhROg8.mft File: I0tUsRmns-_xUwhbcxVQfNhROg8.mft (raw, json) Hash identifier: 6FDtmbJrMbHm3e7Qtmj2eWz+60rm8inY2xCxDbF8hQE= Subject key identifier: BD:4D:68:03:95:13:B1:EE:52:FA:57:2F:5C:C9:66:A5:69:AB:88:F0 Authority key identifier: 23:4B:54:B1:19:A7:B3:EF:F1:53:08:5B:73:15:50:7C:D8:51:3A:0F Certificate issuer: /CN=234b54b119a7b3eff153085b7315507cd8513a0f Certificate serial: 019A4DAB26A08D58A1BFDEFFAD332B228213 Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/I0tUsRmns-_xUwhbcxVQfNhROg8.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/47/bc7078-1ee4-42f1-bc34-1d21d1bce3fe/1/I0tUsRmns-_xUwhbcxVQfNhROg8.mft Manifest number: 0D4D Signing time: Tue 04 Nov 2025 07:00:53 +0000 Manifest this update: Tue 04 Nov 2025 07:00:53 +0000 Manifest next update: Wed 05 Nov 2025 07:00:53 +0000 Files and hashes: 1: 2tV1T5SBsSkKar1qXX5FYlQ_B9Q.roa (hash: mGLI3Jd52qgMG50087Vl0ag+Rgi85Yfd8348tK3nJlQ=) 2: 9CjEL92KVQbBIKjAH6PWgI9d9kA.roa (hash: CxlINazLO+svbCxijVW6/kRGdkNG420xQ9K3jp5I7bo=) 3: 9Q-K0yA0D9jdkGXn7ifhVh2hLe4.roa (hash: BhOE66QanPWqjjysyWqBU6hcSToV2kkgkpmWedK9Plo=) 4: BKpPZ6YhMA786wWelQvZ2FdIeg0.roa (hash: CY94cVx1ALq/cp1lEiwu3JzO7Vk53LXHozpiwU2ifHA=) 5: Gg5xBTPmG5wIfgvjDfofedqUN2I.roa (hash: 44BexOUoVzM2f1vahHLSGVHdqnL6HKMPG3ed5PmM4sw=) 6: I0tUsRmns-_xUwhbcxVQfNhROg8.crl (hash: e4HWa/fn1rKBTRAc/2DOReBBgKpfMgq1pre1tzN+yZ0=) 7: KfWHlYFQnzVI2dPuoiLZqsly00A.roa (hash: hXW7e+AyYxT2PE5t8wRUT3atz/+WaH8gt4XQgdBp/mU=) 8: LtctFlc4GRCf3PIlxO5Sz70Upcc.roa (hash: 9oaNZGvrfQP+yRIBwwcg5U7jui8/sOP7Dz6ZLTuPIgM=) 9: LxwAd59gPAFiSwQsp6U5bWHTUIA.roa (hash: sV/jv6UM3eB6Fepo8zmoDeIxV8A3Cp94EBt2zbiu7+M=) 10: M73NPvrSZwGhIOTA9SbUvHl1x90.roa (hash: ijksxiMRPCxOAqaVav7odzv/IiE5tQUZQM4rRqWGT00=) 11: P4Ngmm4fscIJdjrtcZXwEWC6af0.roa (hash: Dgr4uE36WEf5Xw9kH8tw5qMQ+ewLeqeUvdPupgorbKg=) 12: gspg21PC-Bi6SGHc2DwZhP3SxPE.roa (hash: za152yl/mt+IWnj6LxRFIHIPMleLO2z2bWoNpUAX6js=) 13: nppvTips8XGcmj9VgC_a0xkLzT8.roa (hash: +FXbEH/4T1tplmkgWcOzmoIVkqvQhGApNb34NJo2CWU=) 14: urBSbMAYWiUVjS4RHFmzGqwvjpw.roa (hash: rG62D9ZHzopifBP96CZirceLJDCthMyab0aYX69q+Bo=) 15: y9rvtnyXZQSaHcISGufCbgd9oMg.roa (hash: YtKgQZ+a37E4WaxSPAYmpHW8Z8QKRoCD8fhZcaauCRA=) Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/47/bc7078-1ee4-42f1-bc34-1d21d1bce3fe/1/I0tUsRmns-_xUwhbcxVQfNhROg8.crl rsync://rpki.ripe.net/repository/DEFAULT/47/bc7078-1ee4-42f1-bc34-1d21d1bce3fe/1/I0tUsRmns-_xUwhbcxVQfNhROg8.mft rsync://rpki.ripe.net/repository/DEFAULT/I0tUsRmns-_xUwhbcxVQfNhROg8.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Wed 05 Nov 2025 07:00:53 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9a:4d:ab:26:a0:8d:58:a1:bf:de:ff:ad:33:2b:22:82:13 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=234b54b119a7b3eff153085b7315507cd8513a0f Validity Not Before: Nov 4 07:00:53 2025 GMT Not After : Nov 5 07:00:53 2025 GMT Subject: CN=bd4d68039513b1ee52fa572f5cc966a569ab88f0 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:a3:61:2c:dd:51:df:2e:96:dc:a1:01:f8:d0:bf: e4:a6:bc:b4:68:bc:c5:66:99:59:31:00:02:f3:10: 9b:5b:b1:ba:b7:3e:03:c5:b6:fd:ad:de:1c:31:51: b7:59:4e:02:5a:5a:8b:76:0e:7a:f2:0a:89:f8:fb: 89:ab:ee:fa:c3:9c:b4:7f:f5:f9:c6:df:ba:02:fb: a1:f7:cc:82:92:e9:2c:1d:95:ef:ba:f0:8b:98:78: 6c:dd:08:5d:02:9b:bd:52:50:c1:1e:c7:e3:f5:e4: 7d:bd:ca:f6:89:f4:9d:d0:28:07:21:4a:87:58:bf: 17:ca:f5:8b:e7:2f:51:66:42:9c:14:c4:75:ad:a7: 32:aa:41:11:77:b2:ed:ff:fe:af:20:63:c5:e6:ff: ac:64:bb:7c:2e:c0:f5:70:c5:b3:c1:c8:eb:83:82: 7b:a5:42:31:1c:80:75:d8:71:88:e1:2c:b4:47:26: 61:ec:bf:45:80:67:c9:2e:eb:77:ee:7b:4e:8d:01: 30:4c:12:cc:5f:e3:ea:49:56:93:0e:f9:6f:89:99: b4:23:91:8b:63:b3:bb:ce:dd:90:5d:53:8c:aa:c5: cb:94:bf:06:47:eb:85:dc:8e:88:65:f3:c6:f3:07: 78:dd:c1:b1:52:bf:48:38:9f:83:ae:d2:aa:c1:49: 98:f3 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: BD:4D:68:03:95:13:B1:EE:52:FA:57:2F:5C:C9:66:A5:69:AB:88:F0 X509v3 Authority Key Identifier: keyid:23:4B:54:B1:19:A7:B3:EF:F1:53:08:5B:73:15:50:7C:D8:51:3A:0F X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/I0tUsRmns-_xUwhbcxVQfNhROg8.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/47/bc7078-1ee4-42f1-bc34-1d21d1bce3fe/1/I0tUsRmns-_xUwhbcxVQfNhROg8.mft X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/47/bc7078-1ee4-42f1-bc34-1d21d1bce3fe/1/I0tUsRmns-_xUwhbcxVQfNhROg8.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 60:5c:50:c9:32:ae:63:f6:68:64:71:79:68:f9:ff:f4:24:c7: 96:da:14:d0:bb:e7:97:63:64:60:d7:6a:6d:32:40:94:11:1e: 65:5d:68:64:ea:27:8c:a6:5b:48:2f:00:7b:84:f7:84:6f:63: ba:82:47:11:a2:9d:75:da:07:f3:ef:71:d3:1a:35:39:97:06: c1:8c:e2:17:88:49:d4:ba:b3:23:7a:21:01:fc:55:a8:1d:72: 2e:bf:d2:1c:d2:0a:81:6e:3f:ab:91:ee:18:1b:9d:0b:e7:dc: 7d:1c:7e:3c:5d:7d:ac:a2:b4:94:1c:ca:e2:a9:a5:e7:82:27: 54:f7:56:d6:d2:b8:75:d7:27:11:34:7c:07:b9:a9:ae:76:c6: 01:96:67:40:15:dc:e4:4b:c0:d4:ad:46:ca:c7:a5:8a:7d:e4: b9:1d:61:e7:8c:76:a7:94:82:fd:59:c1:58:be:82:99:50:64: 93:5a:4d:12:f3:03:e4:b2:b3:fd:eb:36:63:43:6c:6b:f9:7f: b5:a5:ef:34:dc:e3:de:f8:8f:f9:e4:4a:44:13:4c:06:1e:50: f4:6b:22:fe:c8:f1:9f:f9:d5:d6:5c:0c:48:f7:5d:9e:b4:d6: 16:3b:2f:f6:91:f2:a2:18:b3:34:5c:29:97:12:61:74:a0:e9: d2:6e:94:cc -----BEGIN CERTIFICATE----- MIIFFjCCA/6gAwIBAgISAZpNqyagjVihv97/rTMrIoITMA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKDIzNGI1NGIxMTlhN2IzZWZmMTUzMDg1YjczMTU1MDdjZDg1 MTNhMGYwHhcNMjUxMTA0MDcwMDUzWhcNMjUxMTA1MDcwMDUzWjAzMTEwLwYDVQQD EyhiZDRkNjgwMzk1MTNiMWVlNTJmYTU3MmY1Y2M5NjZhNTY5YWI4OGYwMIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAo2Es3VHfLpbcoQH40L/kpry0aLzF ZplZMQAC8xCbW7G6tz4Dxbb9rd4cMVG3WU4CWlqLdg568gqJ+PuJq+76w5y0f/X5 xt+6Avuh98yCkuksHZXvuvCLmHhs3QhdApu9UlDBHsfj9eR9vcr2ifSd0CgHIUqH WL8XyvWL5y9RZkKcFMR1racyqkERd7Lt//6vIGPF5v+sZLt8LsD1cMWzwcjrg4J7 pUIxHIB12HGI4Sy0RyZh7L9FgGfJLut37ntOjQEwTBLMX+PqSVaTDvlviZm0I5GL Y7O7zt2QXVOMqsXLlL8GR+uF3I6IZfPG8wd43cGxUr9IOJ+DrtKqwUmY8wIDAQAB o4ICIjCCAh4wHQYDVR0OBBYEFL1NaAOVE7HuUvpXL1zJZqVpq4jwMB8GA1UdIwQY MBaAFCNLVLEZp7Pv8VMIW3MVUHzYUToPMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvSTB0VXNSbW5zLV94VXdoYmN4VlFmTmhST2c4LmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC80Ny9iYzcwNzgtMWVlNC00MmYxLWJjMzQt MWQyMWQxYmNlM2ZlLzEvSTB0VXNSbW5zLV94VXdoYmN4VlFmTmhST2c4Lm1mdDCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC80Ny9iYzcwNzgtMWVlNC00MmYxLWJjMzQtMWQyMWQxYmNlM2Zl LzEvSTB0VXNSbW5zLV94VXdoYmN4VlFmTmhST2c4LmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAYFxQyTKu Y/ZoZHF5aPn/9CTHltoU0Lvnl2NkYNdqbTJAlBEeZV1oZOonjKZbSC8Ae4T3hG9j uoJHEaKdddoH8+9x0xo1OZcGwYziF4hJ1LqzI3ohAfxVqB1yLr/SHNIKgW4/q5Hu GBudC+fcfRx+PF19rKK0lBzK4qml54InVPdW1tK4ddcnETR8B7mprnbGAZZnQBXc 5EvA1K1Gyselin3kuR1h54x2p5SC/VnBWL6CmVBkk1pNEvMD5LKz/es2Y0Nsa/l/ taXvNNzj3viP+eRKRBNMBh5Q9Gsi/sjxn/nV1lwMSPddnrTWFjsv9pHyohizNFwp lxJhdKDp0m6UzA== -----END CERTIFICATE-----Generated at Tue Nov 4 14:54:44 2025 by rpki-client