$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/48/6b22e6-352f-4e88-827b-d78d5631d7f6/1/mGihmSu4A33egdDIzcBpX87hfCc.mft File: mGihmSu4A33egdDIzcBpX87hfCc.mft (raw, json) Hash identifier: ktXYVlg1l+HEA1zJ70Poj12S0oS8QeBkdcog4a1LLeE= Subject key identifier: EE:6B:C3:DA:65:00:53:9B:F3:42:F8:01:7A:5E:B1:61:24:12:DE:20 Authority key identifier: 98:68:A1:99:2B:B8:03:7D:DE:81:D0:C8:CD:C0:69:5F:CE:E1:7C:27 Certificate issuer: /CN=9868a1992bb8037dde81d0c8cdc0695fcee17c27 Certificate serial: 019A4EF4FE4163DE4D6157BC59DA9DD2A72A Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/mGihmSu4A33egdDIzcBpX87hfCc.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/48/6b22e6-352f-4e88-827b-d78d5631d7f6/1/mGihmSu4A33egdDIzcBpX87hfCc.mft Manifest number: 1111 Signing time: Tue 04 Nov 2025 13:01:09 +0000 Manifest this update: Tue 04 Nov 2025 13:01:09 +0000 Manifest next update: Wed 05 Nov 2025 13:01:09 +0000 Files and hashes: 1: 9_JhIw-bjUbjcsXjaRSJlNBXD-s.roa (hash: Hm59eKak2mRBLnGzAb7+vw2g+CNCplTmTg9aukFT0JE=) 2: Cm5DqrbsctqFvXQRRyRwNPG00IY.roa (hash: O06PA3Ks3knW3J57m8lSN/Hv9kQ6nHGAf+goTnk1j04=) 3: FPzxN2ymmUH78y5haV0PaZXdLVY.roa (hash: DdUQ7lpUro6lEFuSiN9fKQg9b9UllNMKrwO6ynxkjos=) 4: JPO6PlbO7T2lxOXw7VKbRM2Ge5Q.roa (hash: kV6T9GvL2JmIx9RKefMlHDbvnYr8DiGL3xFPvQ3Jx8U=) 5: JfmWtf32dZhRVwJQ1ZtKQrQQAfg.roa (hash: ucBbFh4z7Smi+4uRRA6FLN/GqDjNQS+yFNEoMPGwvug=) 6: VQJlRnI_FsEKIbEWGLyhLwP0NtM.roa (hash: onaEyOz4ocmnu3HOOu4gakiggdji6MdLGBGGPS11inY=) 7: ZBv1VZ75Z-edNoZRcvYjkb7NpN8.roa (hash: WTUxj+sidK096ykp4PAhTaXWq6bYZtjXmE5iUhcAutU=) 8: a0GKpzKa2l-eFBlKQIWeWorMYWE.roa (hash: ToDMarZPFqTg+Vik2NKe1VnAgzMIR0HHOC5Xh17RUK0=) 9: aEXJ-GLDzjyP60FhTQdWJ8Fvt7E.roa (hash: 0YpF7CPYi6PyoAg9TvQlat07FWQyIu8cHA137q7nQSc=) 10: bmd97yvzsY5Yo2HfnEE_aGsiLVw.roa (hash: rBbiHBTIds8AVFd6SWdPqBeLyfTxB+l6zirCVR5u1u4=) 11: mGihmSu4A33egdDIzcBpX87hfCc.crl (hash: gm3PterMEcBod/RaKMXvkxekgGwEqKt5IqPdqlkkGaQ=) 12: pygxQHbvGZKVLzuvUJnRE055Ymk.roa (hash: jTpMpBKEIx8o2FyniDrKdnhuTZAZvNKL8hZwfmfGnMs=) 13: qYL6kaPJ2b0Ev5p7Oziqiiv4qTc.roa (hash: WBI5DwkHHee0G2mSopIcnWotDs7K8/Lvby/GArK324A=) 14: vY3Y3etrniGVDWVqa-wGwlb4wOM.roa (hash: 3iBpAllkx0+u9qLlhBtBBscqzISkhr+UuWv9+CbK7ew=) 15: yQafrAusZTwTPZBFL3M0qrFQZ04.roa (hash: Bj+Dm5K+2i3MwGi4viuLKNvUn9KDeSK+/ogiA8Pwh18=) 16: zsat_Kz6NAhfzEasx4a9lQm7pnc.roa (hash: iKI5HEcwbfP2kx1h4h3ET7Ssp+IpbRLbrY2f8G6eDr4=) Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/48/6b22e6-352f-4e88-827b-d78d5631d7f6/1/mGihmSu4A33egdDIzcBpX87hfCc.crl rsync://rpki.ripe.net/repository/DEFAULT/48/6b22e6-352f-4e88-827b-d78d5631d7f6/1/mGihmSu4A33egdDIzcBpX87hfCc.mft rsync://rpki.ripe.net/repository/DEFAULT/mGihmSu4A33egdDIzcBpX87hfCc.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Wed 05 Nov 2025 09:00:03 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9a:4e:f4:fe:41:63:de:4d:61:57:bc:59:da:9d:d2:a7:2a Signature Algorithm: sha256WithRSAEncryption Issuer: CN=9868a1992bb8037dde81d0c8cdc0695fcee17c27 Validity Not Before: Nov 4 13:01:09 2025 GMT Not After : Nov 5 13:01:09 2025 GMT Subject: CN=ee6bc3da6500539bf342f8017a5eb1612412de20 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:ea:cd:12:a4:36:fc:d8:45:29:34:99:f3:72:ff: 3d:35:8c:39:4f:fe:f7:38:07:7e:14:87:06:25:24: 79:23:5b:5e:4a:cd:5a:08:2a:77:6f:2d:ba:33:bc: e4:95:de:e3:26:87:c4:37:d6:d0:83:c9:d9:2b:3f: c5:a4:88:b3:14:9d:1a:0f:cb:8b:4d:1c:9c:07:44: 54:25:d8:08:7f:e9:4b:f3:e3:64:35:e1:74:72:d3: 15:fa:78:9e:c5:d1:5b:85:f4:73:10:01:46:69:0b: 3c:70:e9:5e:ed:c4:e2:96:bc:6e:34:ca:2d:6a:bc: 94:50:e9:65:e3:e0:3c:54:04:6d:3e:b9:17:09:7f: 81:80:49:e3:c0:ee:97:d0:7d:50:c2:e5:cc:f4:bc: 29:8f:3d:d8:81:ce:95:5b:79:62:46:f7:13:c0:2f: de:3a:d3:3e:67:94:90:8c:a2:00:49:21:43:33:f3: 45:18:82:0e:7f:f7:77:54:71:36:4a:9c:21:6d:a2: 8c:67:63:86:49:fa:b0:cf:72:9c:c0:e6:0b:f2:d9: 07:e5:de:97:24:32:14:fa:57:15:4f:d1:85:4b:04: ae:0b:3d:0a:a9:66:e6:07:7f:44:ec:a8:5b:d7:99: 29:ad:ef:ce:f9:3f:18:ae:e1:82:2c:b9:65:ef:bf: 42:21 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: EE:6B:C3:DA:65:00:53:9B:F3:42:F8:01:7A:5E:B1:61:24:12:DE:20 X509v3 Authority Key Identifier: keyid:98:68:A1:99:2B:B8:03:7D:DE:81:D0:C8:CD:C0:69:5F:CE:E1:7C:27 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/mGihmSu4A33egdDIzcBpX87hfCc.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/48/6b22e6-352f-4e88-827b-d78d5631d7f6/1/mGihmSu4A33egdDIzcBpX87hfCc.mft X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/48/6b22e6-352f-4e88-827b-d78d5631d7f6/1/mGihmSu4A33egdDIzcBpX87hfCc.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 09:5d:76:44:6a:8d:6b:3c:ee:db:37:43:ae:09:e7:26:a5:52: 2a:bb:ac:5c:cd:4c:cd:e0:50:4e:c7:16:b2:36:77:10:44:ca: 88:f3:44:0a:0f:95:9d:f3:03:2b:10:3b:8d:17:e5:f4:a9:92: ed:67:f3:37:b8:48:b2:82:cd:c7:1a:bd:32:80:90:36:8d:86: 6d:ca:51:f6:e1:5e:7c:56:e3:bb:d7:14:50:6d:57:b6:d7:af: dc:7b:96:6c:b4:61:82:c2:24:ca:93:89:13:35:12:a5:08:23: 3c:8e:50:13:6f:94:5f:b5:63:39:89:07:42:0d:12:cc:da:5e: 89:de:53:8e:ac:5d:6f:54:a5:51:79:e3:ac:90:7f:bf:1f:e7: 26:a1:86:a9:5c:7c:2d:c8:0b:19:72:b3:3d:c4:3b:71:58:ec: 4a:f9:a2:6e:f8:a9:eb:d9:81:91:92:0e:95:b5:99:38:7d:e0: 1a:66:64:b9:7d:65:c6:37:2c:97:93:4f:b3:4c:72:ec:76:64: 80:e0:8f:75:95:a6:07:2d:8a:42:c7:70:cd:a8:29:34:b7:f7: f2:f1:c4:59:d1:0c:00:68:56:45:99:9b:c9:98:f2:ab:bc:e1: 75:fa:84:64:94:2f:db:52:c0:3f:23:30:92:eb:6a:6a:9a:0c: 04:4d:e8:6c -----BEGIN CERTIFICATE----- MIIFFjCCA/6gAwIBAgISAZpO9P5BY95NYVe8Wdqd0qcqMA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKDk4NjhhMTk5MmJiODAzN2RkZTgxZDBjOGNkYzA2OTVmY2Vl MTdjMjcwHhcNMjUxMTA0MTMwMTA5WhcNMjUxMTA1MTMwMTA5WjAzMTEwLwYDVQQD EyhlZTZiYzNkYTY1MDA1MzliZjM0MmY4MDE3YTVlYjE2MTI0MTJkZTIwMIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEA6s0SpDb82EUpNJnzcv89NYw5T/73 OAd+FIcGJSR5I1teSs1aCCp3by26M7zkld7jJofEN9bQg8nZKz/FpIizFJ0aD8uL TRycB0RUJdgIf+lL8+NkNeF0ctMV+niexdFbhfRzEAFGaQs8cOle7cTilrxuNMot aryUUOll4+A8VARtPrkXCX+BgEnjwO6X0H1QwuXM9Lwpjz3Ygc6VW3liRvcTwC/e OtM+Z5SQjKIASSFDM/NFGIIOf/d3VHE2SpwhbaKMZ2OGSfqwz3KcwOYL8tkH5d6X JDIU+lcVT9GFSwSuCz0KqWbmB39E7Khb15kpre/O+T8YruGCLLll779CIQIDAQAB o4ICIjCCAh4wHQYDVR0OBBYEFO5rw9plAFOb80L4AXpesWEkEt4gMB8GA1UdIwQY MBaAFJhooZkruAN93oHQyM3AaV/O4XwnMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvbUdpaG1TdTRBMzNlZ2RESXpjQnBYODdoZkNjLmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC80OC82YjIyZTYtMzUyZi00ZTg4LTgyN2It ZDc4ZDU2MzFkN2Y2LzEvbUdpaG1TdTRBMzNlZ2RESXpjQnBYODdoZkNjLm1mdDCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC80OC82YjIyZTYtMzUyZi00ZTg4LTgyN2ItZDc4ZDU2MzFkN2Y2 LzEvbUdpaG1TdTRBMzNlZ2RESXpjQnBYODdoZkNjLmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEACV12RGqN azzu2zdDrgnnJqVSKrusXM1MzeBQTscWsjZ3EETKiPNECg+VnfMDKxA7jRfl9KmS 7WfzN7hIsoLNxxq9MoCQNo2GbcpR9uFefFbju9cUUG1Xttev3HuWbLRhgsIkypOJ EzUSpQgjPI5QE2+UX7VjOYkHQg0SzNpeid5Tjqxdb1SlUXnjrJB/vx/nJqGGqVx8 LcgLGXKzPcQ7cVjsSvmibvip69mBkZIOlbWZOH3gGmZkuX1lxjcsl5NPs0xy7HZk gOCPdZWmBy2KQsdwzagpNLf38vHEWdEMAGhWRZmbyZjyq7zhdfqEZJQv21LAPyMw kutqapoMBE3obA== -----END CERTIFICATE-----Generated at Tue Nov 4 14:53:26 2025 by rpki-client