$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/4a/768fdb-d1b5-4bef-bcbd-4924fa000b7c/1/pjvMbSX3R2-7PsM_bbw-nurZIhI.mft File: pjvMbSX3R2-7PsM_bbw-nurZIhI.mft (raw, json) Hash identifier: Y0AcgLeDOVNTAQQ86ENlDQ+UMWvSI7HblL7vEKqRFyc= Subject key identifier: 18:C5:C9:27:30:89:94:5C:EB:2E:17:19:76:D6:91:3D:AE:1F:4A:CF Authority key identifier: A6:3B:CC:6D:25:F7:47:6F:BB:3E:C3:3F:6D:BC:3E:9E:EA:D9:22:12 Certificate issuer: /CN=a63bcc6d25f7476fbb3ec33f6dbc3e9eead92212 Certificate serial: 019A51BED9E5166AC166A29F4FB07AE5ECCF Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/pjvMbSX3R2-7PsM_bbw-nurZIhI.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/4a/768fdb-d1b5-4bef-bcbd-4924fa000b7c/1/pjvMbSX3R2-7PsM_bbw-nurZIhI.mft Manifest number: 0A73 Signing time: Wed 05 Nov 2025 02:00:53 +0000 Manifest this update: Wed 05 Nov 2025 02:00:53 +0000 Manifest next update: Thu 06 Nov 2025 02:00:53 +0000 Files and hashes: 1: 5NFcVQOlS2SfRA9_dseHho-9-mc.roa (hash: swfI8aXvx2sxn3YOzxRnlDU7qvwOILHJAwX26Y3ztqI=) 2: 719PZLmeHqbujtRsKmvo5771XIo.roa (hash: bsKRuhzJIveVWiHQvKvv+dLt6oNf3d66tNY6ht9/C3A=) 3: 8WUQrdzKsEZUNzZ9k3E9ajfkd5s.roa (hash: Ixz0hSpVqJJ/oAfsncTGxOv3fHWBSaH9gBGjqTv8vpQ=) 4: FHXWFrj4nreKJjXTfDKCc6Y16Is.roa (hash: PfuW04ELrwKUUeQD8qGy+/BFhBo8C5J05OWPOUMFx5w=) 5: Ho4pDAaaconFe5cZ7ygze1a44Xo.roa (hash: 1pC6hpICFpbgfqlZn7adq2AVfLKO5t0AC5KWofkjFSE=) 6: Kd5CFoG07kPDgqUGQpHj24zQka8.roa (hash: +2s4BraFjLJP4x9hMH6DgHfMWVkWCLxuz2cF8ghToGs=) 7: NYJYw1BTKJV56akoY5ZQRJna-MA.roa (hash: brwHoHz9mi1vg8NUkbqZqqePDdu1Ej44xmauCwQ9Qac=) 8: TLEdQvZiEPlpX35O8B6oknJfuyE.roa (hash: AdjCtV/JftiFEQtyk78ssQUWpqAhZBfMUWjoyo3BngI=) 9: bBDQA2FLJ_ECVdU7EHt-KxOD160.roa (hash: CM/8Vww4ye+HJjMV9ADskpa9Umbg7xMEJd41meyzgaE=) 10: fBfhsJw2d6Op2y70b533dv-T4j4.roa (hash: B8cZmEngTY2Ne9QwtzyJ6aeIrWSAdYH7Des5rTXKgP4=) 11: pjvMbSX3R2-7PsM_bbw-nurZIhI.crl (hash: ozCocnF4wy7J7mWRdIn0R8letJ0tRgfiCtlMJ+xjfJw=) Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/4a/768fdb-d1b5-4bef-bcbd-4924fa000b7c/1/pjvMbSX3R2-7PsM_bbw-nurZIhI.crl rsync://rpki.ripe.net/repository/DEFAULT/4a/768fdb-d1b5-4bef-bcbd-4924fa000b7c/1/pjvMbSX3R2-7PsM_bbw-nurZIhI.mft rsync://rpki.ripe.net/repository/DEFAULT/pjvMbSX3R2-7PsM_bbw-nurZIhI.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Wed 05 Nov 2025 22:37:02 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9a:51:be:d9:e5:16:6a:c1:66:a2:9f:4f:b0:7a:e5:ec:cf Signature Algorithm: sha256WithRSAEncryption Issuer: CN=a63bcc6d25f7476fbb3ec33f6dbc3e9eead92212 Validity Not Before: Nov 5 02:00:53 2025 GMT Not After : Nov 6 02:00:53 2025 GMT Subject: CN=18c5c9273089945ceb2e171976d6913dae1f4acf Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:90:c5:94:9f:9a:bb:39:6e:ab:2c:2e:88:a3:e0: 06:22:38:bb:63:94:f0:2b:7c:93:02:40:ce:ae:96: 5c:03:65:d4:b3:f6:4b:0b:56:b3:be:1b:30:31:45: b5:4f:e9:77:8e:4d:b9:19:b5:13:38:75:bf:fd:1e: f2:4b:07:93:f6:28:09:c3:a0:8e:51:79:63:64:ab: 4c:70:8e:4c:03:dd:9b:61:bf:e1:a5:6c:21:44:d6: 15:c2:e8:88:d5:4c:c4:da:67:3e:ea:8a:3e:b7:11: 92:1e:b7:be:e8:e0:a3:49:ed:bb:40:7e:c4:48:5c: f8:f1:b5:9b:a8:b8:4d:3d:19:48:70:85:b7:35:81: ca:17:12:74:ba:c6:4d:7a:89:f0:f7:21:55:c2:fe: d4:28:3e:5f:52:03:0a:f1:ba:ac:b7:e8:b6:27:54: 3a:73:01:9e:4e:a3:c6:8a:f4:e0:c1:97:03:f8:52: 1e:8c:ff:2e:54:de:99:76:b1:b5:8e:da:01:53:38: 20:d2:b6:6b:59:83:24:6b:9c:35:1f:a0:53:06:f9: a4:44:d2:d4:20:bb:91:bb:88:04:13:38:fd:21:71: ba:1e:36:71:c5:a7:57:ce:61:08:0d:a8:9f:30:73: e3:24:2f:3f:e8:83:67:68:71:39:24:4c:71:42:bc: b2:e3 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 18:C5:C9:27:30:89:94:5C:EB:2E:17:19:76:D6:91:3D:AE:1F:4A:CF X509v3 Authority Key Identifier: keyid:A6:3B:CC:6D:25:F7:47:6F:BB:3E:C3:3F:6D:BC:3E:9E:EA:D9:22:12 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/pjvMbSX3R2-7PsM_bbw-nurZIhI.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/4a/768fdb-d1b5-4bef-bcbd-4924fa000b7c/1/pjvMbSX3R2-7PsM_bbw-nurZIhI.mft X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/4a/768fdb-d1b5-4bef-bcbd-4924fa000b7c/1/pjvMbSX3R2-7PsM_bbw-nurZIhI.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 49:d3:47:67:46:a0:88:a9:cb:b9:ff:32:19:90:d8:52:81:18: 8b:df:22:7e:6b:5a:ef:b4:42:42:f8:b9:90:8a:6b:ab:34:89: 20:82:58:7b:bd:62:1b:e6:53:54:51:40:24:dc:0d:32:20:0a: 94:09:8a:4b:ab:6e:aa:81:70:10:95:4b:f6:8a:7d:f2:61:9a: a1:e0:d1:7a:b0:b8:0b:ed:00:1f:1c:af:2b:6d:93:d0:51:4d: 52:0c:2f:7d:2b:32:91:27:1c:0f:14:d1:bf:9d:f7:90:39:59: b4:4f:1a:ca:08:17:63:95:9a:4a:9d:1f:77:82:66:84:1b:94: ca:6b:84:a7:5c:ee:e3:38:f6:85:c4:7a:d6:58:af:d9:99:69: 1c:1d:e2:94:45:cd:85:b7:e6:84:4f:5e:bc:b9:e4:6f:da:86: 84:a4:d0:92:5c:b3:89:81:9e:f9:95:b2:d0:8a:b8:9d:5a:97: b3:6a:25:d6:43:2a:f2:c1:66:8e:b4:a4:47:8c:43:18:41:51: 3c:6f:89:06:5d:5e:97:49:1d:66:fd:8a:a6:d0:23:cf:24:a9: 89:97:27:db:c6:34:52:27:f9:b9:5c:53:33:b3:65:c2:8b:15: 42:25:6b:44:9a:98:7f:dc:17:18:ee:c6:00:fb:8f:d7:47:ba: d2:84:5d:a8 -----BEGIN CERTIFICATE----- MIIFFjCCA/6gAwIBAgISAZpRvtnlFmrBZqKfT7B65ezPMA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKGE2M2JjYzZkMjVmNzQ3NmZiYjNlYzMzZjZkYmMzZTllZWFk OTIyMTIwHhcNMjUxMTA1MDIwMDUzWhcNMjUxMTA2MDIwMDUzWjAzMTEwLwYDVQQD EygxOGM1YzkyNzMwODk5NDVjZWIyZTE3MTk3NmQ2OTEzZGFlMWY0YWNmMIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAkMWUn5q7OW6rLC6Io+AGIji7Y5Tw K3yTAkDOrpZcA2XUs/ZLC1azvhswMUW1T+l3jk25GbUTOHW//R7ySweT9igJw6CO UXljZKtMcI5MA92bYb/hpWwhRNYVwuiI1UzE2mc+6oo+txGSHre+6OCjSe27QH7E SFz48bWbqLhNPRlIcIW3NYHKFxJ0usZNeonw9yFVwv7UKD5fUgMK8bqst+i2J1Q6 cwGeTqPGivTgwZcD+FIejP8uVN6ZdrG1jtoBUzgg0rZrWYMka5w1H6BTBvmkRNLU ILuRu4gEEzj9IXG6HjZxxadXzmEIDaifMHPjJC8/6INnaHE5JExxQryy4wIDAQAB o4ICIjCCAh4wHQYDVR0OBBYEFBjFyScwiZRc6y4XGXbWkT2uH0rPMB8GA1UdIwQY MBaAFKY7zG0l90dvuz7DP228Pp7q2SISMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvcGp2TWJTWDNSMi03UHNNX2Jidy1udXJaSWhJLmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC80YS83NjhmZGItZDFiNS00YmVmLWJjYmQt NDkyNGZhMDAwYjdjLzEvcGp2TWJTWDNSMi03UHNNX2Jidy1udXJaSWhJLm1mdDCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC80YS83NjhmZGItZDFiNS00YmVmLWJjYmQtNDkyNGZhMDAwYjdj LzEvcGp2TWJTWDNSMi03UHNNX2Jidy1udXJaSWhJLmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEASdNHZ0ag iKnLuf8yGZDYUoEYi98ifmta77RCQvi5kIprqzSJIIJYe71iG+ZTVFFAJNwNMiAK lAmKS6tuqoFwEJVL9op98mGaoeDRerC4C+0AHxyvK22T0FFNUgwvfSsykSccDxTR v533kDlZtE8ayggXY5WaSp0fd4JmhBuUymuEp1zu4zj2hcR61liv2ZlpHB3ilEXN hbfmhE9evLnkb9qGhKTQklyziYGe+ZWy0Iq4nVqXs2ol1kMq8sFmjrSkR4xDGEFR PG+JBl1el0kdZv2KptAjzySpiZcn28Y0Uif5uVxTM7NlwosVQiVrRJqYf9wXGO7G APuP10e60oRdqA== -----END CERTIFICATE-----Generated at Wed Nov 5 06:17:45 2025 by rpki-client