$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/4b/f8a5d1-260a-46a4-a8e4-283fe54a6f2f/1/pM6WQKPvL-oZN0rY-Z9CPXqnx2s.mft File: pM6WQKPvL-oZN0rY-Z9CPXqnx2s.mft (raw, json) Hash identifier: tQuC0Ssoh1U2cyLNJa6yz4DcXYY9FExwKJ+nbZuj7bk= Subject key identifier: DF:71:BF:3C:37:9B:8D:B0:CE:81:48:17:9A:8B:B2:FF:8A:8B:AB:80 Authority key identifier: A4:CE:96:40:A3:EF:2F:EA:19:37:4A:D8:F9:9F:42:3D:7A:A7:C7:6B Certificate issuer: /CN=a4ce9640a3ef2fea19374ad8f99f423d7aa7c76b Certificate serial: 019A50AB85B2E92F4514DB34568F671C7FB7 Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/pM6WQKPvL-oZN0rY-Z9CPXqnx2s.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/4b/f8a5d1-260a-46a4-a8e4-283fe54a6f2f/1/pM6WQKPvL-oZN0rY-Z9CPXqnx2s.mft Manifest number: 13E8 Signing time: Tue 04 Nov 2025 21:00:09 +0000 Manifest this update: Tue 04 Nov 2025 21:00:09 +0000 Manifest next update: Wed 05 Nov 2025 21:00:09 +0000 Files and hashes: 1: 3MQ1Zm2jB8qgOjCAc_a0v-3nM_o.roa (hash: T4pVm2mU2N5el1g2HcnlglhN57e23NLVS7ny7NzSBL0=) 2: 4SEUaFHVUAL3abRJwnhpLcw21dk.roa (hash: Nz767QGxnFH79p/BW/8MOsNM3RviNN1Kvy4GgZgMyGs=) 3: FCFfx3p7hHCFHlKPZobVJyLJ5MI.roa (hash: 6JV0xEEqdwivRbZdMI4zo4Wpa9PWQK4gKoasAD6odWU=) 4: IYmUJK1vApyWT119wps-ukf2n9E.roa (hash: w1dWdBHD/FLi3tR98pk3iJlbhc1nR22X1Pwn/kqhO/0=) 5: KcuMI0SBvL5BPuYJm6BH3vJKAQ0.roa (hash: s0e2eWUrZQW14pJCqfjgMZ+ViTFNuU9345bizVg0sKY=) 6: MSrSUIwYGP5OzMFaA9dwr3mO4jY.roa (hash: OHzV5kP6uhO1eFoIB7t+WKfJjHs90j+a/iXQqOXuv30=) 7: N7C2a3H5ML3ydyNI5IDIoJ6m-6U.roa (hash: FJm0Nzs6ME/1+LojcQZMLdUu/cBqlxKE16Bs75fFFLw=) 8: Nf1rHETWcCnhWhR_uM_9B2P3jb8.roa (hash: pBdKIUwSvvQqLJChVbTbSEDRXa+Ll262+ax9ivbZD0o=) 9: OFTgwkdKspRJ_TvSv6vgx_ckdLQ.roa (hash: b7UPAbBCKcuRworqLaxy25e9Gx9nfc4PaZocWvp2h84=) 10: P7ti_IIQ8gSBeG-YTlNJsuFqQ_I.roa (hash: KrffniQ2i0hPMizjKFAUVE1GuQq0ig8NP7gMfdrW5so=) 11: RzvDJbgMFFQ3RXZZowAtkGpvaYQ.roa (hash: pXgfU5zLGpdaPENK8y9IOVL5xtiIt9Fk8RRzx12JQUw=) 12: WToItz8al9Sw1IRtEOUm1ku1TzY.roa (hash: cD3Nf3okXGtPiYuFOkPnzfMJHgIYmW52aVmaOwxOEN0=) 13: dcAEUZ_ghRVpaUYo3WWA9zUPe9U.roa (hash: AsvsdGamYH2cSArWOQT5cvLOD/2t8gp5MEnt/aWjLII=) 14: pM6WQKPvL-oZN0rY-Z9CPXqnx2s.crl (hash: 8VldlwNA0oWLTEYOsxk3jIOXA8iJQPc7yegVlD4rSlQ=) 15: sVCQlL9zy4ci5k4im_qh1UgQSao.roa (hash: tXiv/i4AXQDYnVQqrjLO82vwz0zcYS5lORUFrc1ytqg=) Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/4b/f8a5d1-260a-46a4-a8e4-283fe54a6f2f/1/pM6WQKPvL-oZN0rY-Z9CPXqnx2s.crl rsync://rpki.ripe.net/repository/DEFAULT/4b/f8a5d1-260a-46a4-a8e4-283fe54a6f2f/1/pM6WQKPvL-oZN0rY-Z9CPXqnx2s.mft rsync://rpki.ripe.net/repository/DEFAULT/pM6WQKPvL-oZN0rY-Z9CPXqnx2s.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Wed 05 Nov 2025 18:00:03 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9a:50:ab:85:b2:e9:2f:45:14:db:34:56:8f:67:1c:7f:b7 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=a4ce9640a3ef2fea19374ad8f99f423d7aa7c76b Validity Not Before: Nov 4 21:00:09 2025 GMT Not After : Nov 5 21:00:09 2025 GMT Subject: CN=df71bf3c379b8db0ce8148179a8bb2ff8a8bab80 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:d1:46:de:a0:e2:26:e8:0c:8e:b1:36:55:05:49: ec:c8:43:2e:b2:19:7e:1a:85:a4:25:1a:7d:e4:e5: de:3f:4a:62:c1:04:e3:e2:f1:25:64:04:7e:84:2f: 9b:4c:da:89:3f:cc:92:a2:5e:f5:7a:7f:a5:ed:e7: 4f:2f:0c:65:78:d3:6b:41:9b:8c:1e:0f:1e:8b:37: fa:bd:ea:d2:a2:71:a5:26:c7:7c:c0:aa:a2:9f:d3: f1:9f:cd:b0:71:12:93:61:2a:c2:94:27:a8:e8:7b: 69:da:5d:24:7e:ab:44:07:b8:ad:07:61:dc:ac:d5: 83:1d:4c:e6:af:fa:dd:f9:d2:7e:16:85:16:37:de: 76:2f:ec:4d:b5:f7:0f:16:47:b1:27:af:b5:a5:c5: 2a:42:d1:ac:d0:de:e4:6b:60:c0:92:e2:64:db:b6: 98:bc:d0:38:97:ec:c4:b6:c7:bc:11:7c:e9:ac:93: 69:3a:be:55:d2:3d:a1:62:76:4c:39:2f:54:1c:68: 99:16:5a:ce:27:e9:31:01:e8:db:c5:a9:73:0d:4e: 76:4a:18:2c:40:a1:15:8b:79:c1:24:22:28:dd:c6: 33:cf:b2:80:fc:c8:27:3e:dd:03:e9:b4:58:08:da: 55:22:f0:3c:c6:f1:70:3f:ef:7c:52:2c:30:dd:0d: 18:3f Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: DF:71:BF:3C:37:9B:8D:B0:CE:81:48:17:9A:8B:B2:FF:8A:8B:AB:80 X509v3 Authority Key Identifier: keyid:A4:CE:96:40:A3:EF:2F:EA:19:37:4A:D8:F9:9F:42:3D:7A:A7:C7:6B X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/pM6WQKPvL-oZN0rY-Z9CPXqnx2s.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/4b/f8a5d1-260a-46a4-a8e4-283fe54a6f2f/1/pM6WQKPvL-oZN0rY-Z9CPXqnx2s.mft X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/4b/f8a5d1-260a-46a4-a8e4-283fe54a6f2f/1/pM6WQKPvL-oZN0rY-Z9CPXqnx2s.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption aa:74:be:4e:ad:f4:b4:d2:85:c1:0a:76:55:c5:ce:8f:c2:54: d7:6a:4b:9a:e7:93:59:1d:8d:14:b5:8a:a7:20:1b:ce:0d:39: 6c:ce:d8:d8:c1:29:b3:c3:ed:1f:ad:b7:ae:01:84:47:b4:e6: 19:1b:93:75:3b:59:98:33:c1:5d:7c:1a:68:1f:41:c0:55:dd: 22:77:92:82:1d:9c:0f:cc:e8:ab:09:ad:6c:70:39:75:6b:f0: ba:ba:b8:30:a8:bb:7b:cf:3f:ca:5e:43:55:ce:b2:9c:10:fb: 79:7b:6c:5f:ed:21:4a:9c:7a:71:0e:47:fd:58:83:de:18:af: c2:25:a4:d1:d5:ba:fc:af:1d:f1:4b:ea:01:d4:ed:1e:6d:e5: a9:15:2a:63:f2:89:e8:8e:9d:41:ce:97:f7:6d:88:b8:55:29: f0:d2:2e:42:46:88:50:11:6f:65:36:df:fa:3a:2c:54:4c:d6: 13:99:62:ea:60:f5:59:75:84:17:66:1b:1c:51:4b:a8:4d:42: fc:16:89:4e:b1:82:ee:0f:4e:e2:7b:3e:c5:c5:a9:a8:7a:72: 49:83:d1:ab:a3:65:16:d1:1e:de:bb:21:c7:d3:1b:d6:f2:a5: 1e:38:9d:9d:a1:2b:28:5e:45:31:eb:7c:95:6f:d7:fb:61:07: 80:e0:c6:f7 -----BEGIN CERTIFICATE----- MIIFFjCCA/6gAwIBAgISAZpQq4Wy6S9FFNs0Vo9nHH+3MA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKGE0Y2U5NjQwYTNlZjJmZWExOTM3NGFkOGY5OWY0MjNkN2Fh N2M3NmIwHhcNMjUxMTA0MjEwMDA5WhcNMjUxMTA1MjEwMDA5WjAzMTEwLwYDVQQD EyhkZjcxYmYzYzM3OWI4ZGIwY2U4MTQ4MTc5YThiYjJmZjhhOGJhYjgwMIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEA0UbeoOIm6AyOsTZVBUnsyEMushl+ GoWkJRp95OXeP0piwQTj4vElZAR+hC+bTNqJP8ySol71en+l7edPLwxleNNrQZuM Hg8eizf6verSonGlJsd8wKqin9Pxn82wcRKTYSrClCeo6Htp2l0kfqtEB7itB2Hc rNWDHUzmr/rd+dJ+FoUWN952L+xNtfcPFkexJ6+1pcUqQtGs0N7ka2DAkuJk27aY vNA4l+zEtse8EXzprJNpOr5V0j2hYnZMOS9UHGiZFlrOJ+kxAejbxalzDU52Shgs QKEVi3nBJCIo3cYzz7KA/MgnPt0D6bRYCNpVIvA8xvFwP+98Uiww3Q0YPwIDAQAB o4ICIjCCAh4wHQYDVR0OBBYEFN9xvzw3m42wzoFIF5qLsv+Ki6uAMB8GA1UdIwQY MBaAFKTOlkCj7y/qGTdK2PmfQj16p8drMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvcE02V1FLUHZMLW9aTjByWS1aOUNQWHFueDJzLmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC80Yi9mOGE1ZDEtMjYwYS00NmE0LWE4ZTQt MjgzZmU1NGE2ZjJmLzEvcE02V1FLUHZMLW9aTjByWS1aOUNQWHFueDJzLm1mdDCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC80Yi9mOGE1ZDEtMjYwYS00NmE0LWE4ZTQtMjgzZmU1NGE2ZjJm LzEvcE02V1FLUHZMLW9aTjByWS1aOUNQWHFueDJzLmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAqnS+Tq30 tNKFwQp2VcXOj8JU12pLmueTWR2NFLWKpyAbzg05bM7Y2MEps8PtH623rgGER7Tm GRuTdTtZmDPBXXwaaB9BwFXdIneSgh2cD8zoqwmtbHA5dWvwurq4MKi7e88/yl5D Vc6ynBD7eXtsX+0hSpx6cQ5H/ViD3hivwiWk0dW6/K8d8UvqAdTtHm3lqRUqY/KJ 6I6dQc6X922IuFUp8NIuQkaIUBFvZTbf+josVEzWE5li6mD1WXWEF2YbHFFLqE1C /BaJTrGC7g9O4ns+xcWpqHpySYPRq6NlFtEe3rshx9Mb1vKlHjidnaErKF5FMet8 lW/X+2EHgODG9w== -----END CERTIFICATE-----Generated at Tue Nov 4 22:56:25 2025 by rpki-client