$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/48/bc66d7-57ab-475d-96ba-89b6c32315c2/1/f2vRprBGJcVx2DD4eLHAI4JHQIw.mft File: f2vRprBGJcVx2DD4eLHAI4JHQIw.mft (raw, json) Hash identifier: 14VpjTxFa494RkSD8nrYZTGLx+NPj+FoYa7FR18gxN8= Subject key identifier: 68:74:0A:B1:CB:BD:83:14:8F:7B:3A:58:2D:0C:97:3E:AD:30:B8:F9 Authority key identifier: 7F:6B:D1:A6:B0:46:25:C5:71:D8:30:F8:78:B1:C0:23:82:47:40:8C Certificate issuer: /CN=7f6bd1a6b04625c571d830f878b1c0238247408c Certificate serial: 019A4F2B6C04899116F2A26B73B998B0BB78 Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/f2vRprBGJcVx2DD4eLHAI4JHQIw.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/48/bc66d7-57ab-475d-96ba-89b6c32315c2/1/f2vRprBGJcVx2DD4eLHAI4JHQIw.mft Manifest number: 05B0 Signing time: Tue 04 Nov 2025 14:00:37 +0000 Manifest this update: Tue 04 Nov 2025 14:00:37 +0000 Manifest next update: Wed 05 Nov 2025 14:00:37 +0000 Files and hashes: 1: 9RdZIw-S-FYoTEGCNtUVTMr1UI0.roa (hash: cuWu4zoZh39hHnMbQsbn1GavX5fkwgR9EpdjwPAYmFM=) 2: C36HYE9g7Segc4lKsITQsAPbk3A.roa (hash: xJXCT5dY3X53zr13t7CE1ukR4VVrDp6NvKtvl+FjEKs=) 3: J9sdBRndgWMXRbtrEj6DzAaduFM.roa (hash: 1mU1gIeMkOu38sOl5UhcF+y7DrqaJPBXlv7kx0JqTAw=) 4: K6r4JbxghClQGiOJgPHD3qM06uA.roa (hash: Z7BS3eMvEl2jFHcYWZaavqiGcVmavHPtMtk5iNM38S8=) 5: WLnNiHQkhlfgINfxpD2br98XvwA.roa (hash: meEdE8yNwOSarbCrMNr+5gmR/PbuI8v0hmQMO5QzIaA=) 6: f2vRprBGJcVx2DD4eLHAI4JHQIw.crl (hash: SHwM4Qk1NDLIG0CfHhDbMegoxnegnkuYbaxT+qPgyAo=) 7: jrWoUX2I08t96DUAzMXpfrjbImw.roa (hash: 5fZxekpC+R8XTkzuMqL1WK63VlO9GSurjZzzW/k5L60=) 8: nWYHniVnDldwYunEGsc0VWWiVYU.roa (hash: VRa9zgOVZdpaRaM8P3APLwpP4Czcpn3M9s3Qb5fNEps=) 9: pF_pVy2TIwjzEOlTFDghAKXtbzQ.roa (hash: hczSlLK7qtHA0sxQPsDXkLAUtpEz88IsWfA1PqBcBfA=) 10: sZTa8Qa0TVk8uF_RHqCxSF_1GR0.roa (hash: u/AILdLiccMU6aDdQlKIvISGgDYDPhdz3YzBRcZY5lA=) Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/48/bc66d7-57ab-475d-96ba-89b6c32315c2/1/f2vRprBGJcVx2DD4eLHAI4JHQIw.crl rsync://rpki.ripe.net/repository/DEFAULT/48/bc66d7-57ab-475d-96ba-89b6c32315c2/1/f2vRprBGJcVx2DD4eLHAI4JHQIw.mft rsync://rpki.ripe.net/repository/DEFAULT/f2vRprBGJcVx2DD4eLHAI4JHQIw.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Wed 05 Nov 2025 09:00:03 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9a:4f:2b:6c:04:89:91:16:f2:a2:6b:73:b9:98:b0:bb:78 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=7f6bd1a6b04625c571d830f878b1c0238247408c Validity Not Before: Nov 4 14:00:37 2025 GMT Not After : Nov 5 14:00:37 2025 GMT Subject: CN=68740ab1cbbd83148f7b3a582d0c973ead30b8f9 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:c8:d6:c5:24:2f:a5:15:37:5e:c8:66:7b:b5:46: 65:56:cb:b8:9b:b4:db:55:c9:65:dd:55:94:f7:c0: d8:a7:22:99:e0:13:17:b0:f4:11:9e:2c:5d:ba:52: b4:98:c9:c0:ad:6a:ff:d7:ce:af:cf:8d:b5:92:07: 9d:05:67:bd:1c:23:0c:cd:da:ad:0b:9d:85:0f:53: 02:16:8a:78:e1:ed:3d:c9:7f:38:d2:15:56:bc:75: 14:57:d8:61:57:6e:56:cd:91:c7:8f:89:c3:a7:da: 7f:90:99:1e:08:aa:f4:af:f8:3c:50:d3:d3:47:a1: 73:8f:2f:b6:55:58:27:30:4e:f4:8b:23:63:b1:02: d6:56:e9:22:bc:f6:1b:97:ed:33:d0:ca:a1:0c:d3: 3d:80:2d:a3:e5:ff:79:a6:0d:1f:1c:89:d0:95:cd: 04:0c:89:7e:fe:45:ae:ae:a5:59:99:08:76:ca:f8: 55:37:98:f6:6a:e2:9a:26:32:a4:3c:23:e7:c5:d8: b3:9a:86:e9:d5:bd:75:ad:8c:0e:af:22:db:19:0e: 59:10:59:20:f4:06:82:f3:52:6d:fe:c5:1f:2a:76: 31:23:67:9a:59:30:04:47:9f:d4:74:2a:4d:33:3b: 61:cb:99:6e:0c:55:48:50:14:b8:3d:f4:33:f5:97: bd:fb Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 68:74:0A:B1:CB:BD:83:14:8F:7B:3A:58:2D:0C:97:3E:AD:30:B8:F9 X509v3 Authority Key Identifier: keyid:7F:6B:D1:A6:B0:46:25:C5:71:D8:30:F8:78:B1:C0:23:82:47:40:8C X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/f2vRprBGJcVx2DD4eLHAI4JHQIw.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/48/bc66d7-57ab-475d-96ba-89b6c32315c2/1/f2vRprBGJcVx2DD4eLHAI4JHQIw.mft X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/48/bc66d7-57ab-475d-96ba-89b6c32315c2/1/f2vRprBGJcVx2DD4eLHAI4JHQIw.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption a4:ce:2f:95:34:89:9f:ef:b8:4c:56:69:84:50:cc:17:1d:0e: 26:7b:46:93:97:38:48:cd:4e:26:6f:93:1e:42:40:b9:ee:81: 6f:c0:42:eb:26:32:f0:3d:1f:be:67:8c:de:ff:ab:cc:9f:7c: c5:34:b0:a8:27:ac:4f:34:e8:9b:99:a0:45:00:6d:24:1a:74: f7:97:a4:0c:a4:a4:13:0d:eb:29:7c:1f:0f:0a:20:5d:6c:ca: f2:55:bb:e1:2b:1a:7b:3f:a5:ff:22:db:8a:1a:a9:c6:fd:6d: 16:52:8c:3a:6e:23:b9:e3:42:56:e6:5b:41:18:12:46:52:94: 5b:8b:7c:48:93:e6:33:f2:93:2c:02:5c:cf:76:a9:f6:dd:7e: 06:0b:12:b9:d3:3a:0f:58:1f:a0:ba:74:91:57:3c:92:3c:b4: 32:92:05:a7:f0:85:89:69:0c:77:a9:a2:c9:cb:24:8d:27:6a: 86:ad:15:e4:b1:ef:48:7b:ea:01:6f:c2:2e:64:6f:f3:06:e9: 1f:3d:31:de:59:b9:89:c7:1c:2d:30:49:f0:03:8d:c1:31:5b: b0:f7:0c:08:e5:80:e1:2d:b9:b0:2a:9d:2d:0d:6a:3a:99:96: 82:ef:49:ae:4f:fe:de:9f:5a:ba:cd:f0:15:f6:31:99:46:f5: 07:c2:4d:fe -----BEGIN CERTIFICATE----- MIIFFjCCA/6gAwIBAgISAZpPK2wEiZEW8qJrc7mYsLt4MA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKDdmNmJkMWE2YjA0NjI1YzU3MWQ4MzBmODc4YjFjMDIzODI0 NzQwOGMwHhcNMjUxMTA0MTQwMDM3WhcNMjUxMTA1MTQwMDM3WjAzMTEwLwYDVQQD Eyg2ODc0MGFiMWNiYmQ4MzE0OGY3YjNhNTgyZDBjOTczZWFkMzBiOGY5MIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAyNbFJC+lFTdeyGZ7tUZlVsu4m7Tb Vcll3VWU98DYpyKZ4BMXsPQRnixdulK0mMnArWr/186vz421kgedBWe9HCMMzdqt C52FD1MCFop44e09yX840hVWvHUUV9hhV25WzZHHj4nDp9p/kJkeCKr0r/g8UNPT R6Fzjy+2VVgnME70iyNjsQLWVukivPYbl+0z0MqhDNM9gC2j5f95pg0fHInQlc0E DIl+/kWurqVZmQh2yvhVN5j2auKaJjKkPCPnxdizmobp1b11rYwOryLbGQ5ZEFkg 9AaC81Jt/sUfKnYxI2eaWTAER5/UdCpNMzthy5luDFVIUBS4PfQz9Ze9+wIDAQAB o4ICIjCCAh4wHQYDVR0OBBYEFGh0CrHLvYMUj3s6WC0Mlz6tMLj5MB8GA1UdIwQY MBaAFH9r0aawRiXFcdgw+HixwCOCR0CMMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvZjJ2UnByQkdKY1Z4MkRENGVMSEFJNEpIUUl3LmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC80OC9iYzY2ZDctNTdhYi00NzVkLTk2YmEt ODliNmMzMjMxNWMyLzEvZjJ2UnByQkdKY1Z4MkRENGVMSEFJNEpIUUl3Lm1mdDCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC80OC9iYzY2ZDctNTdhYi00NzVkLTk2YmEtODliNmMzMjMxNWMy LzEvZjJ2UnByQkdKY1Z4MkRENGVMSEFJNEpIUUl3LmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEApM4vlTSJ n++4TFZphFDMFx0OJntGk5c4SM1OJm+THkJAue6Bb8BC6yYy8D0fvmeM3v+rzJ98 xTSwqCesTzTom5mgRQBtJBp095ekDKSkEw3rKXwfDwogXWzK8lW74Ssaez+l/yLb ihqpxv1tFlKMOm4jueNCVuZbQRgSRlKUW4t8SJPmM/KTLAJcz3ap9t1+BgsSudM6 D1gfoLp0kVc8kjy0MpIFp/CFiWkMd6miycskjSdqhq0V5LHvSHvqAW/CLmRv8wbp Hz0x3lm5icccLTBJ8AONwTFbsPcMCOWA4S25sCqdLQ1qOpmWgu9Jrk/+3p9aus3w FfYxmUb1B8JN/g== -----END CERTIFICATE-----Generated at Tue Nov 4 19:12:31 2025 by rpki-client