$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/4f/53a947-fd03-4014-9827-c5d8950818ec/1/_0TbrKVtrDGUAfaKUNkX9UJGEa0.mft File: _0TbrKVtrDGUAfaKUNkX9UJGEa0.mft (raw, json) Hash identifier: KpjbF1sffcHDKR4aV66lmBbE2juVb/ObO1GEYERF6oo= Subject key identifier: B5:54:27:CE:A4:CB:E7:E2:25:3A:9E:3C:B8:47:48:DF:1C:35:01:DD Authority key identifier: FF:44:DB:AC:A5:6D:AC:31:94:01:F6:8A:50:D9:17:F5:42:46:11:AD Certificate issuer: /CN=ff44dbaca56dac319401f68a50d917f5424611ad Certificate serial: 019A4E867042DDA737DC90A79682102DEF33 Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/_0TbrKVtrDGUAfaKUNkX9UJGEa0.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/4f/53a947-fd03-4014-9827-c5d8950818ec/1/_0TbrKVtrDGUAfaKUNkX9UJGEa0.mft Manifest number: 0F21 Signing time: Tue 04 Nov 2025 11:00:24 +0000 Manifest this update: Tue 04 Nov 2025 11:00:24 +0000 Manifest next update: Wed 05 Nov 2025 11:00:24 +0000 Files and hashes: 1: 1-cpyjHU8WHBS-JnYyweRG_JlxsQ.roa (hash: Bc2YUgBN1eHG7yUrAAjgkxLZbgg1NrbTbKbM93kzdXo=) 2: 23cjywgox101LeW5GrrQWi4IHG0.roa (hash: uYyFedbey5ChPUlaasPp5Y63DNZ1EjHPXUKggcmyWcA=) 3: 2nquZxIjKuCQeOgojOXW1X_s_QM.roa (hash: jFRO0lP11v/Hnir4mOKoo6txSwXFruzZ7RBet4hmmmk=) 4: 7-RqEu_RBz9mfOLDtCp7Hvp-HNA.roa (hash: VgV4hIvu8+OJHYszRf2pjeepXfzTOT8zOwDWfq2EnHU=) 5: QQQnQcpvGBf2C-BzCpjUlxD_kV0.roa (hash: 3oCmUMut8zjGqT5v8Ibyl5GG5ZNBsCX2Q1FPnCYPFwc=) 6: _0TbrKVtrDGUAfaKUNkX9UJGEa0.crl (hash: SU9lTznUnC6FSJ9gYyH0FKvEhNxGD7ZIbX81aKkY9VM=) 7: gIx-NvwmPwDjbwzrImEaevKFMi8.roa (hash: qVqkRd3AaQOFICZgsJ5zunJ8w7waJ2c1Sms4AJtjCl4=) 8: ppAoQzBvkq40zC0EL5uD3rotFu0.roa (hash: Fsva3Oy+naUuk39OzwSFPk2YxYI4ZzeZHu5IhfbnzWM=) 9: wvlIJaBXdAerQ4c5dRBxRunJgjQ.roa (hash: JyQWbotgOXPXDAJ2gTdNj+PiW7DZmyYe59ktU38Qs6o=) 10: zwQeVe6KjT7mK7CzDjhb-oUfUeY.roa (hash: RDrcDVJwzADiTPiX9sXWISoKDjj7Zx0CdydUNeF8j6Q=) Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/4f/53a947-fd03-4014-9827-c5d8950818ec/1/_0TbrKVtrDGUAfaKUNkX9UJGEa0.crl rsync://rpki.ripe.net/repository/DEFAULT/4f/53a947-fd03-4014-9827-c5d8950818ec/1/_0TbrKVtrDGUAfaKUNkX9UJGEa0.mft rsync://rpki.ripe.net/repository/DEFAULT/_0TbrKVtrDGUAfaKUNkX9UJGEa0.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Wed 05 Nov 2025 09:00:03 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9a:4e:86:70:42:dd:a7:37:dc:90:a7:96:82:10:2d:ef:33 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=ff44dbaca56dac319401f68a50d917f5424611ad Validity Not Before: Nov 4 11:00:24 2025 GMT Not After : Nov 5 11:00:24 2025 GMT Subject: CN=b55427cea4cbe7e2253a9e3cb84748df1c3501dd Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:a1:54:a4:e7:b6:ba:03:27:65:f1:65:db:4f:0d: be:b6:fc:f7:3b:5a:f0:8a:ea:c8:2c:c8:9b:27:93: 01:62:42:f9:99:97:30:5e:9c:70:f7:3f:5f:1a:99: 49:fc:81:25:6b:1e:19:17:68:1f:4d:10:47:a8:16: b4:49:35:b9:83:36:78:29:62:1b:77:2d:77:54:31: b9:16:ed:34:bd:4b:2d:f8:74:c5:d7:f4:ce:40:78: 1c:d7:7f:c7:ea:2a:74:cb:3e:1e:ba:e2:90:08:0c: 8c:8e:9b:ac:52:6a:31:3e:f5:33:18:53:30:15:1a: 4e:e1:46:64:cf:30:49:83:10:9b:26:24:a0:23:6b: ba:c6:96:06:c9:df:5b:93:24:0a:2a:8b:16:ef:b7: 3f:e7:a9:19:77:67:66:f6:d5:5d:85:8a:3d:d1:89: da:35:6d:52:df:45:e0:b3:0c:c7:d1:f7:fc:b6:d9: 5b:aa:3a:51:8e:dd:81:c6:09:3e:41:5a:d5:c3:53: ad:75:04:50:cf:e1:21:51:83:05:82:d6:e0:59:12: 08:e3:49:b3:b5:cc:f3:f2:c5:5c:a2:8a:28:c7:38: 73:46:61:e1:02:d3:8f:88:c6:28:00:b3:9e:10:bd: b6:7b:b2:af:63:3f:4a:a9:9d:1e:3e:23:3a:62:a8: c4:77 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: B5:54:27:CE:A4:CB:E7:E2:25:3A:9E:3C:B8:47:48:DF:1C:35:01:DD X509v3 Authority Key Identifier: keyid:FF:44:DB:AC:A5:6D:AC:31:94:01:F6:8A:50:D9:17:F5:42:46:11:AD X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/_0TbrKVtrDGUAfaKUNkX9UJGEa0.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/4f/53a947-fd03-4014-9827-c5d8950818ec/1/_0TbrKVtrDGUAfaKUNkX9UJGEa0.mft X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/4f/53a947-fd03-4014-9827-c5d8950818ec/1/_0TbrKVtrDGUAfaKUNkX9UJGEa0.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 28:09:b5:92:d9:ff:cd:03:90:34:79:38:48:b5:41:6b:3c:58: 53:e7:d2:10:92:5b:1f:44:c6:59:c3:f5:e2:d6:7b:25:f9:8a: b0:9e:5e:b7:90:44:e8:f4:37:90:cb:1f:af:46:27:45:2e:be: 12:ea:e5:4a:fa:67:5a:8b:21:cb:eb:fa:de:b4:a0:9b:5c:a2: 52:d2:39:03:9a:aa:a8:d1:43:91:db:6b:66:e5:a9:ef:18:1f: 42:ac:fe:e5:29:14:f9:80:f2:8b:67:40:b1:09:2a:32:cf:e1: 59:5b:06:b7:01:2c:50:21:a2:a3:3f:27:42:5a:e1:55:23:83: d2:8d:54:cd:dc:72:b0:ee:c7:41:1d:2a:72:b8:95:c4:74:a9: f7:a9:fb:ee:d3:3f:ba:50:f2:7d:f8:94:63:5a:7a:f7:76:a2: ac:86:78:7f:b0:aa:86:58:4b:bb:04:67:79:cc:b7:c3:a4:be: 9a:41:b7:f6:22:cc:99:6d:b7:e3:06:21:0e:4b:36:fc:fe:49: c5:e1:28:c4:77:a9:0c:06:45:7e:87:c1:4f:97:a1:af:a3:14: ad:32:03:be:7a:7b:2e:50:05:05:b4:22:4b:4d:34:03:3e:81: b3:d3:51:ce:14:ec:25:90:94:00:50:57:b1:74:52:16:12:9d: 0e:8c:15:9f -----BEGIN CERTIFICATE----- MIIFFjCCA/6gAwIBAgISAZpOhnBC3ac33JCnloIQLe8zMA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKGZmNDRkYmFjYTU2ZGFjMzE5NDAxZjY4YTUwZDkxN2Y1NDI0 NjExYWQwHhcNMjUxMTA0MTEwMDI0WhcNMjUxMTA1MTEwMDI0WjAzMTEwLwYDVQQD EyhiNTU0MjdjZWE0Y2JlN2UyMjUzYTllM2NiODQ3NDhkZjFjMzUwMWRkMIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAoVSk57a6Aydl8WXbTw2+tvz3O1rw iurILMibJ5MBYkL5mZcwXpxw9z9fGplJ/IElax4ZF2gfTRBHqBa0STW5gzZ4KWIb dy13VDG5Fu00vUst+HTF1/TOQHgc13/H6ip0yz4euuKQCAyMjpusUmoxPvUzGFMw FRpO4UZkzzBJgxCbJiSgI2u6xpYGyd9bkyQKKosW77c/56kZd2dm9tVdhYo90Yna NW1S30XgswzH0ff8ttlbqjpRjt2Bxgk+QVrVw1OtdQRQz+EhUYMFgtbgWRII40mz tczz8sVcooooxzhzRmHhAtOPiMYoALOeEL22e7KvYz9KqZ0ePiM6YqjEdwIDAQAB o4ICIjCCAh4wHQYDVR0OBBYEFLVUJ86ky+fiJTqePLhHSN8cNQHdMB8GA1UdIwQY MBaAFP9E26ylbawxlAH2ilDZF/VCRhGtMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvXzBUYnJLVnRyREdVQWZhS1VOa1g5VUpHRWEwLmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC80Zi81M2E5NDctZmQwMy00MDE0LTk4Mjct YzVkODk1MDgxOGVjLzEvXzBUYnJLVnRyREdVQWZhS1VOa1g5VUpHRWEwLm1mdDCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC80Zi81M2E5NDctZmQwMy00MDE0LTk4MjctYzVkODk1MDgxOGVj LzEvXzBUYnJLVnRyREdVQWZhS1VOa1g5VUpHRWEwLmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAKAm1ktn/ zQOQNHk4SLVBazxYU+fSEJJbH0TGWcP14tZ7JfmKsJ5et5BE6PQ3kMsfr0YnRS6+ EurlSvpnWoshy+v63rSgm1yiUtI5A5qqqNFDkdtrZuWp7xgfQqz+5SkU+YDyi2dA sQkqMs/hWVsGtwEsUCGioz8nQlrhVSOD0o1UzdxysO7HQR0qcriVxHSp96n77tM/ ulDyffiUY1p693airIZ4f7CqhlhLuwRnecy3w6S+mkG39iLMmW234wYhDks2/P5J xeEoxHepDAZFfofBT5ehr6MUrTIDvnp7LlAFBbQiS000Az6Bs9NRzhTsJZCUAFBX sXRSFhKdDowVnw== -----END CERTIFICATE-----Generated at Tue Nov 4 16:40:10 2025 by rpki-client