$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/4a/8b1fac-5a21-4848-a66a-10bb4579d528/1/CnMngF3yD7XB1vTokHR0PK6ySvc.mft File: CnMngF3yD7XB1vTokHR0PK6ySvc.mft (raw, json) Hash identifier: apOMmfI9XSwlf3flgtG47XJCkdRX/kxRv9BUhnBu4h0= Subject key identifier: 4E:A6:AF:D8:CC:D3:DA:B0:C5:00:92:0E:67:5A:49:E7:39:5E:AE:98 Authority key identifier: 0A:73:27:80:5D:F2:0F:B5:C1:D6:F4:E8:90:74:74:3C:AE:B2:4A:F7 Certificate issuer: /CN=0a7327805df20fb5c1d6f4e89074743caeb24af7 Certificate serial: 019A4E18AB23772A54DCA2713684A228FEE3 Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/CnMngF3yD7XB1vTokHR0PK6ySvc.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/4a/8b1fac-5a21-4848-a66a-10bb4579d528/1/CnMngF3yD7XB1vTokHR0PK6ySvc.mft Manifest number: 1723 Signing time: Tue 04 Nov 2025 09:00:30 +0000 Manifest this update: Tue 04 Nov 2025 09:00:30 +0000 Manifest next update: Wed 05 Nov 2025 09:00:30 +0000 Files and hashes: 1: 3xGVSc_p5dXZsjTjmDrPRPF-GQ4.roa (hash: 4UVd3ifNRlf9XqdwKXxRMAnZJE++WGkvCW0VWsS8y5s=) 2: AXI0xi2qyLNJTikoPIbIYoXGSqM.roa (hash: J6dTdi70cC+Xgn0MoRDsaTnvDGyEQm26GOPrxZ/rg18=) 3: CQxWaB1OicMMrqXCoQ0fopCoxdU.roa (hash: WjfHWnkqbfHKaqxUShNyRq++rhQwjg3tNVjy17YQNc4=) 4: CnMngF3yD7XB1vTokHR0PK6ySvc.crl (hash: 8ldw4FB0+Fs/5LLMR79q0f/NMAxFm9B/asIbOZN/Izc=) 5: Fu5puXi31mF44yAqLLOREudBdx8.roa (hash: EMVvFm7Cz6Rus7+EIIREeW1t+m4c2GaLdfO+T3Vrwg8=) 6: GopMrpyToOz7hTEn02tSlWTChNc.roa (hash: PWyNZm9NNDQb4vDrYexwTILfoeBvuqO0/ZesnD+rBMg=) 7: QY3FsKWsHL7VlMduaclRNJ3pt_U.roa (hash: H5vPCo3lKDFJhLJsXdyGxkbSr+CZKxnZxfEUf2naVGc=) 8: Zla6xxqlwjD5HGAN16Pzo29Tijg.roa (hash: XT7/Z4sfo6kElFtdLFq3BhRYhs4vxj89ZfDzgHu8Ge4=) 9: hnMtsx259zWb5DPTAskFt19vieA.roa (hash: IS/K0LmABWhq/hUi5ijfbnkS8QGQcUBWRW0f7gTisD4=) 10: ydOhopDpEgxJrzwZy5o2ywKpW8w.roa (hash: cGNA9jtDwM6OD4vlqV4K4uD26uy/JQnhTPG3oY/YMmA=) Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/4a/8b1fac-5a21-4848-a66a-10bb4579d528/1/CnMngF3yD7XB1vTokHR0PK6ySvc.crl rsync://rpki.ripe.net/repository/DEFAULT/4a/8b1fac-5a21-4848-a66a-10bb4579d528/1/CnMngF3yD7XB1vTokHR0PK6ySvc.mft rsync://rpki.ripe.net/repository/DEFAULT/CnMngF3yD7XB1vTokHR0PK6ySvc.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Wed 05 Nov 2025 09:00:03 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9a:4e:18:ab:23:77:2a:54:dc:a2:71:36:84:a2:28:fe:e3 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=0a7327805df20fb5c1d6f4e89074743caeb24af7 Validity Not Before: Nov 4 09:00:30 2025 GMT Not After : Nov 5 09:00:30 2025 GMT Subject: CN=4ea6afd8ccd3dab0c500920e675a49e7395eae98 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:df:3d:66:b0:fd:f4:0f:b9:99:fc:64:10:67:11: e2:88:a3:8a:bc:dc:42:2f:2c:a3:37:1e:5d:ec:f3: 8a:fe:ee:82:bc:f0:d1:52:d4:28:e2:1c:45:1b:8f: 6b:93:23:13:27:8e:22:bf:da:9b:9d:90:3a:4d:48: 2a:72:6f:ae:2d:82:da:28:cf:ad:2f:ec:e7:ad:e5: 20:a7:59:01:cf:49:d9:62:cd:1c:e7:9b:1f:81:bf: 4b:14:74:f5:03:17:5c:59:db:d5:45:75:fb:9a:90: df:91:ed:fc:c6:d2:eb:ec:64:23:66:ed:b5:99:3b: f1:fa:43:79:02:86:e6:c8:69:97:63:cc:14:6c:bd: c5:7a:82:7a:90:3c:e6:f7:20:66:64:1e:27:6a:d6: 6b:27:0f:25:f7:7a:fc:da:fa:2c:b8:af:0b:86:3b: 56:77:09:ff:14:8c:98:f3:0d:8a:12:e5:d2:e7:be: 7b:15:f1:01:f7:eb:ab:db:76:2e:64:6b:71:8f:eb: b5:17:52:1b:ce:de:8c:de:e5:73:21:7f:5a:19:9c: 0e:27:29:15:79:98:38:62:02:ae:fd:76:44:8c:c4: 27:f6:38:19:5f:2b:1c:64:eb:a4:0f:b3:61:50:c3: f7:fd:c9:00:fd:15:fe:70:e1:31:81:1f:ea:e4:85: 92:83 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 4E:A6:AF:D8:CC:D3:DA:B0:C5:00:92:0E:67:5A:49:E7:39:5E:AE:98 X509v3 Authority Key Identifier: keyid:0A:73:27:80:5D:F2:0F:B5:C1:D6:F4:E8:90:74:74:3C:AE:B2:4A:F7 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/CnMngF3yD7XB1vTokHR0PK6ySvc.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/4a/8b1fac-5a21-4848-a66a-10bb4579d528/1/CnMngF3yD7XB1vTokHR0PK6ySvc.mft X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/4a/8b1fac-5a21-4848-a66a-10bb4579d528/1/CnMngF3yD7XB1vTokHR0PK6ySvc.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption c8:ac:89:c4:d8:88:6a:f1:ba:c8:ff:34:59:58:f2:f6:25:6b: 19:44:2e:c4:24:bd:f1:80:d9:9b:fd:83:0b:57:d6:39:87:14: 70:d5:f5:1b:da:86:e2:e8:53:1d:67:c0:d5:6b:4a:df:6d:b7: af:75:ed:fd:e5:21:dd:13:94:26:dd:2a:ef:48:1e:41:4a:a4: 37:9e:94:db:4e:d5:64:59:94:8e:f9:d4:42:d5:75:32:4f:9b: 1b:a4:fc:0a:b1:92:c6:65:d8:46:fc:85:a6:17:e4:92:99:ca: 2b:68:20:cc:ea:1e:24:a8:ed:76:34:29:41:e2:3b:3e:b5:54: d0:aa:51:74:15:94:59:51:f0:c1:58:90:a9:4f:fb:2f:1a:de: 42:60:e8:4f:92:bd:5b:13:ce:9d:69:a1:fa:e0:65:f6:12:42: 13:af:c3:98:bb:c3:f6:40:6a:33:2c:bd:67:20:5e:84:91:8b: d6:a2:74:e4:ae:d5:51:55:6b:80:ea:3d:6f:6c:2a:4e:bb:0a: 12:0d:3b:56:64:cd:a0:09:06:b1:37:d3:d7:f4:ba:41:7a:69: c8:01:47:41:8a:f1:11:86:54:4b:a2:1b:15:33:1b:41:88:89: c8:a0:63:5f:38:c1:28:74:0a:a2:da:b1:32:5c:60:70:84:f3: 0e:9d:4f:d0 -----BEGIN CERTIFICATE----- MIIFFjCCA/6gAwIBAgISAZpOGKsjdypU3KJxNoSiKP7jMA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKDBhNzMyNzgwNWRmMjBmYjVjMWQ2ZjRlODkwNzQ3NDNjYWVi MjRhZjcwHhcNMjUxMTA0MDkwMDMwWhcNMjUxMTA1MDkwMDMwWjAzMTEwLwYDVQQD Eyg0ZWE2YWZkOGNjZDNkYWIwYzUwMDkyMGU2NzVhNDllNzM5NWVhZTk4MIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEA3z1msP30D7mZ/GQQZxHiiKOKvNxC LyyjNx5d7POK/u6CvPDRUtQo4hxFG49rkyMTJ44iv9qbnZA6TUgqcm+uLYLaKM+t L+znreUgp1kBz0nZYs0c55sfgb9LFHT1AxdcWdvVRXX7mpDfke38xtLr7GQjZu21 mTvx+kN5AobmyGmXY8wUbL3FeoJ6kDzm9yBmZB4natZrJw8l93r82vosuK8LhjtW dwn/FIyY8w2KEuXS5757FfEB9+ur23YuZGtxj+u1F1Ibzt6M3uVzIX9aGZwOJykV eZg4YgKu/XZEjMQn9jgZXyscZOukD7NhUMP3/ckA/RX+cOExgR/q5IWSgwIDAQAB o4ICIjCCAh4wHQYDVR0OBBYEFE6mr9jM09qwxQCSDmdaSec5Xq6YMB8GA1UdIwQY MBaAFApzJ4Bd8g+1wdb06JB0dDyuskr3MA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvQ25NbmdGM3lEN1hCMXZUb2tIUjBQSzZ5U3ZjLmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC80YS84YjFmYWMtNWEyMS00ODQ4LWE2NmEt MTBiYjQ1NzlkNTI4LzEvQ25NbmdGM3lEN1hCMXZUb2tIUjBQSzZ5U3ZjLm1mdDCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC80YS84YjFmYWMtNWEyMS00ODQ4LWE2NmEtMTBiYjQ1NzlkNTI4 LzEvQ25NbmdGM3lEN1hCMXZUb2tIUjBQSzZ5U3ZjLmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAyKyJxNiI avG6yP80WVjy9iVrGUQuxCS98YDZm/2DC1fWOYcUcNX1G9qG4uhTHWfA1WtK3223 r3Xt/eUh3ROUJt0q70geQUqkN56U207VZFmUjvnUQtV1Mk+bG6T8CrGSxmXYRvyF phfkkpnKK2ggzOoeJKjtdjQpQeI7PrVU0KpRdBWUWVHwwViQqU/7LxreQmDoT5K9 WxPOnWmh+uBl9hJCE6/DmLvD9kBqMyy9ZyBehJGL1qJ05K7VUVVrgOo9b2wqTrsK Eg07VmTNoAkGsTfT1/S6QXppyAFHQYrxEYZUS6IbFTMbQYiJyKBjXzjBKHQKotqx MlxgcITzDp1P0A== -----END CERTIFICATE-----Generated at Tue Nov 4 14:51:11 2025 by rpki-client