$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/4e/822400-3248-4702-b29b-a1b7ceefa16c/1/1-GUbEZTxLpjnDT2njv5N0kZ81CM.mft File: 1-GUbEZTxLpjnDT2njv5N0kZ81CM.mft (raw, json) Hash identifier: Si6VpIkWEmm3CqLO+aOU2YrfWFXszjVd53RBge7Fs08= Subject key identifier: 05:1F:7C:0D:2F:9E:CA:4A:C1:35:56:33:B5:2D:9E:02:20:5E:52:00 Authority key identifier: F8:65:1B:11:94:F1:2E:98:E7:0D:3D:A7:8E:FE:4D:D2:46:7C:D4:23 Certificate issuer: /CN=f8651b1194f12e98e70d3da78efe4dd2467cd423 Certificate serial: 019A518767E80406171D9D0D74ED3C249EB2 Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/1-GUbEZTxLpjnDT2njv5N0kZ81CM.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/4e/822400-3248-4702-b29b-a1b7ceefa16c/1/1-GUbEZTxLpjnDT2njv5N0kZ81CM.mft Manifest number: 173C Signing time: Wed 05 Nov 2025 01:00:19 +0000 Manifest this update: Wed 05 Nov 2025 01:00:19 +0000 Manifest next update: Thu 06 Nov 2025 01:00:19 +0000 Files and hashes: 1: 1-GUbEZTxLpjnDT2njv5N0kZ81CM.crl (hash: 3+SNXIwU8cwxBcpsXACcSqPW9xMc5dmKoLjhmYjK9aE=) 2: 2Q7Citj0p3OdcVl7uqhsISED7cM.roa (hash: E8M0IO3Gnci/Jg+ekOq1tdi+rV0u7bvfLxQV6E+5KVA=) 3: 3hqHxrvg3mzouwJIaLoLL_1aNOk.roa (hash: drAUMdvTeG+q3QoTZVXvlX6+e/XeTGI2FRMHejM5978=) 4: IvUzmjfbrcAfjWuG5bEXnsKARX0.roa (hash: n6VtpGGacFVSIXviiCkhoox8/pF8W1r+IL34+q5ydvQ=) 5: UdGuE2Gyay0X3Zt4q22vWPkwoSY.roa (hash: nlcyfBPqkJaOzfcIWqCIaFS2zyTBpHfF2/864QcqW28=) 6: Wt480qXVmMwEOAd2PwO3BIY-yQ8.roa (hash: ZoHaxK2Mo9GKYjgUd0e4MjoyY0dURGfiyktgIwjh6+8=) 7: _JxuUmQNn1m3KtCimjG9Vgr7i_M.roa (hash: hJQU6rbuZYGS1pkrfUwG7QwSC6DVL5unzpcEQ2Wukds=) 8: hkpjjAx2DE4nxJX8muiagvMf5-U.roa (hash: mjZ4UF9NabA85FX7we/nz5hALtUkEeudaC8FfNN02Rw=) 9: meb9WVVNYbUZtDoy7aw2n1DbXn0.roa (hash: A50uxX8uLtTa/WN+Skz9Umq+gxTofH2FJfLXImSmNB8=) 10: pI6FbZ3beDoELJVrqbqsS-eA55Q.roa (hash: k5ogl8ORSJKmhZc2f7455EiPwKHwGnOlPzlYfPE0Sh0=) 11: rY3YaEfNR8aK_Auk0z3q4MtQKGY.roa (hash: n8nvB0B+rc4j1I8LugdLmK4QQWr+nH8/CQl43jdxd20=) 12: y5m_rHh94hm7s_roT6tgjV0bYFM.roa (hash: 4v/VMYzi1Xi6KW+Q8k5KPuzBpu8zE8jLazu2ptlLL50=) Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/4e/822400-3248-4702-b29b-a1b7ceefa16c/1/1-GUbEZTxLpjnDT2njv5N0kZ81CM.crl rsync://rpki.ripe.net/repository/DEFAULT/4e/822400-3248-4702-b29b-a1b7ceefa16c/1/1-GUbEZTxLpjnDT2njv5N0kZ81CM.mft rsync://rpki.ripe.net/repository/DEFAULT/1-GUbEZTxLpjnDT2njv5N0kZ81CM.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Thu 06 Nov 2025 01:00:19 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9a:51:87:67:e8:04:06:17:1d:9d:0d:74:ed:3c:24:9e:b2 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=f8651b1194f12e98e70d3da78efe4dd2467cd423 Validity Not Before: Nov 5 01:00:19 2025 GMT Not After : Nov 6 01:00:19 2025 GMT Subject: CN=051f7c0d2f9eca4ac1355633b52d9e02205e5200 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:9c:fb:34:99:46:fb:4f:25:fd:cc:4f:0c:54:83: 78:ad:03:88:23:36:12:98:d2:8d:9d:6a:50:1e:ec: 87:cb:53:ec:54:ac:31:5a:40:96:73:fa:92:73:a1: 70:3d:cb:af:9b:be:e6:a5:88:22:e1:ca:e8:f6:f6: 5c:97:57:a2:f8:b0:b8:7e:14:57:8b:cb:86:d8:31: 4a:9c:b5:1c:a1:5f:0e:35:6f:89:14:79:2b:73:a5: 46:d5:f0:11:33:d4:bb:23:8e:3e:64:2f:88:19:19: ab:5c:c8:21:f7:a2:dd:6f:be:d8:31:7f:3a:8c:05: 0c:0f:a3:38:1f:70:99:b4:a4:27:ff:65:c4:b8:78: 02:6e:bb:7e:07:a1:52:dc:35:7e:b6:42:e8:d5:2a: a4:e2:0b:2b:55:24:85:1e:fa:8a:4e:fb:35:d7:87: a6:47:d7:3c:c9:9f:05:30:9a:60:da:6c:39:cb:57: fc:0c:31:b5:4e:d3:a6:af:48:c8:12:50:a7:2a:e4: 91:d0:7b:1a:66:2d:6d:6e:fb:ed:a2:f1:8d:8a:16: 7e:fd:80:52:6e:02:fd:5e:d4:72:78:d4:60:18:8d: 6b:5d:6c:03:9e:d7:fd:4a:ba:2f:d2:de:5e:72:a8: 7c:24:c4:11:a3:37:63:4f:94:dd:55:4b:fe:1e:23: ac:cb Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 05:1F:7C:0D:2F:9E:CA:4A:C1:35:56:33:B5:2D:9E:02:20:5E:52:00 X509v3 Authority Key Identifier: keyid:F8:65:1B:11:94:F1:2E:98:E7:0D:3D:A7:8E:FE:4D:D2:46:7C:D4:23 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/1-GUbEZTxLpjnDT2njv5N0kZ81CM.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/4e/822400-3248-4702-b29b-a1b7ceefa16c/1/1-GUbEZTxLpjnDT2njv5N0kZ81CM.mft X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/4e/822400-3248-4702-b29b-a1b7ceefa16c/1/1-GUbEZTxLpjnDT2njv5N0kZ81CM.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 20:90:32:6a:52:7b:c8:f0:b1:f1:4a:35:39:0f:68:a2:e6:4c: cd:30:19:0e:64:02:ea:fd:14:7a:3d:a9:f5:18:2c:ec:60:08: cc:5c:91:b7:8b:4c:4a:68:32:3d:ef:92:c9:e5:dd:fa:1a:50: 38:29:ff:f1:45:3c:1a:0f:87:2f:3c:8d:62:78:81:35:fa:f3: 52:44:02:5a:60:7e:b7:d7:0c:98:3e:50:6c:31:6b:97:7d:0e: 9a:b1:44:5f:a7:f9:c7:02:b6:ec:63:b0:f0:76:a5:42:9e:ec: 7d:e2:2d:c9:69:a1:7a:e9:22:e6:95:ca:dc:66:e9:aa:16:88: 58:6f:47:48:84:56:8d:c3:94:e7:09:b1:33:c4:f9:3c:6b:5d: 40:d3:20:23:5b:9d:90:7f:0c:6b:f2:89:6c:2b:ca:43:43:2a: 8d:b4:23:1c:1f:b5:e9:22:f0:4b:e7:9c:ec:1f:f9:44:ba:db: a3:cc:cb:53:4e:4d:07:38:fe:fd:75:fd:31:fc:ed:56:e0:cf: 92:e0:7a:9f:45:75:f4:4f:49:6e:92:73:fa:e8:13:fc:c7:18: 14:df:59:62:af:5a:f0:0b:35:ed:ec:66:30:2e:4c:be:26:38: bb:a5:e3:de:b3:5e:8d:9c:34:36:e4:e9:ef:a8:a8:53:c7:6f: fe:1e:6f:b0 -----BEGIN CERTIFICATE----- MIIFGTCCBAGgAwIBAgISAZpRh2foBAYXHZ0NdO08JJ6yMA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKGY4NjUxYjExOTRmMTJlOThlNzBkM2RhNzhlZmU0ZGQyNDY3 Y2Q0MjMwHhcNMjUxMTA1MDEwMDE5WhcNMjUxMTA2MDEwMDE5WjAzMTEwLwYDVQQD EygwNTFmN2MwZDJmOWVjYTRhYzEzNTU2MzNiNTJkOWUwMjIwNWU1MjAwMIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAnPs0mUb7TyX9zE8MVIN4rQOIIzYS mNKNnWpQHuyHy1PsVKwxWkCWc/qSc6FwPcuvm77mpYgi4cro9vZcl1ei+LC4fhRX i8uG2DFKnLUcoV8ONW+JFHkrc6VG1fARM9S7I44+ZC+IGRmrXMgh96Ldb77YMX86 jAUMD6M4H3CZtKQn/2XEuHgCbrt+B6FS3DV+tkLo1Sqk4gsrVSSFHvqKTvs114em R9c8yZ8FMJpg2mw5y1f8DDG1TtOmr0jIElCnKuSR0HsaZi1tbvvtovGNihZ+/YBS bgL9XtRyeNRgGI1rXWwDntf9Srov0t5ecqh8JMQRozdjT5TdVUv+HiOsywIDAQAB o4ICJTCCAiEwHQYDVR0OBBYEFAUffA0vnspKwTVWM7UtngIgXlIAMB8GA1UdIwQY MBaAFPhlGxGU8S6Y5w09p47+TdJGfNQjMA4GA1UdDwEB/wQEAwIHgDBlBggrBgEF BQcBAQRZMFcwVQYIKwYBBQUHMAKGSXJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvMS1HVWJFWlR4THBqbkRUMm5qdjVOMGtaODFDTS5jZXIw gY4GCCsGAQUFBwELBIGBMH8wfQYIKwYBBQUHMAuGcXJzeW5jOi8vcnBraS5yaXBl Lm5ldC9yZXBvc2l0b3J5L0RFRkFVTFQvNGUvODIyNDAwLTMyNDgtNDcwMi1iMjli LWExYjdjZWVmYTE2Yy8xLzEtR1ViRVpUeExwam5EVDJuanY1TjBrWjgxQ00ubWZ0 MIGCBgNVHR8EezB5MHegdaBzhnFyc3luYzovL3Jwa2kucmlwZS5uZXQvcmVwb3Np dG9yeS9ERUZBVUxULzRlLzgyMjQwMC0zMjQ4LTQ3MDItYjI5Yi1hMWI3Y2VlZmEx NmMvMS8xLUdVYkVaVHhMcGpuRFQybmp2NU4wa1o4MUNNLmNybDAYBgNVHSABAf8E DjAMMAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgAC BQAwFQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAIJAy alJ7yPCx8Uo1OQ9oouZMzTAZDmQC6v0Uej2p9Rgs7GAIzFyRt4tMSmgyPe+SyeXd +hpQOCn/8UU8Gg+HLzyNYniBNfrzUkQCWmB+t9cMmD5QbDFrl30OmrFEX6f5xwK2 7GOw8HalQp7sfeItyWmheuki5pXK3GbpqhaIWG9HSIRWjcOU5wmxM8T5PGtdQNMg I1udkH8Ma/KJbCvKQ0MqjbQjHB+16SLwS+ec7B/5RLrbo8zLU05NBzj+/XX9Mfzt VuDPkuB6n0V19E9JbpJz+ugT/McYFN9ZYq9a8As17exmMC5MviY4u6Xj3rNejZw0 NuTp76ioU8dv/h5vsA== -----END CERTIFICATE-----Generated at Wed Nov 5 11:13:19 2025 by rpki-client