$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/4f/9437a2-07e6-4e6a-aa3f-965d6d603bfa/1/1-CVUqFakIrBhrmTFd2MPkdQIzUo.mft File: 1-CVUqFakIrBhrmTFd2MPkdQIzUo.mft (raw, json) Hash identifier: bWY6khj2jN8C77H1IdzeqVXdfZXdzSsntF+KBnlk37w= Subject key identifier: 1B:C4:08:83:BF:85:3C:81:04:61:58:CD:08:B0:A7:F6:34:66:FF:7F Authority key identifier: F8:25:54:A8:56:A4:22:B0:61:AE:64:C5:77:63:0F:91:D4:08:CD:4A Certificate issuer: /CN=f82554a856a422b061ae64c577630f91d408cd4a Certificate serial: 019A4DAA87B70C3509C25AE83B9FB0924DA9 Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/1-CVUqFakIrBhrmTFd2MPkdQIzUo.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/4f/9437a2-07e6-4e6a-aa3f-965d6d603bfa/1/1-CVUqFakIrBhrmTFd2MPkdQIzUo.mft Manifest number: 1712 Signing time: Tue 04 Nov 2025 07:00:12 +0000 Manifest this update: Tue 04 Nov 2025 07:00:12 +0000 Manifest next update: Wed 05 Nov 2025 07:00:12 +0000 Files and hashes: 1: 1-CVUqFakIrBhrmTFd2MPkdQIzUo.crl (hash: tbARlzS4BZxowLcXEp75/kC+zHMDa2nOc/jmQx7idQY=) 2: 8yyknMa8Qa7eji2_-25NgjHMwAs.roa (hash: 6EA1L4yNjiFkAAM6t2iZAA7ze8SV3lMCUhKNPg3vBUQ=) 3: 9QjCjG8fGXKK3KT9GGHW6MAVJzE.roa (hash: fSpz8n2jWyy0I2DDmxohRpaljlrP9nL5ZtLGzLKYuXU=) 4: H7En3yY1mH2yRYS167HpwA6AL5Q.roa (hash: FPJfC/52NavOyoGt4vZ9gio4MoEgpYKiZrTtURDieXE=) 5: K4UoliAJDnPT2oq72AyXanTYwdo.roa (hash: +5dNWwnlyTnn33FOhd8BsjDiWGBw/K7XK9sbIa7ROKQ=) 6: aWWA3-Hs7ng_GCTHIDmwQ5Rjbdg.roa (hash: isC8RltnKP3pjrz7ZvAls/aB0WZTll6Skvt9xKP3UkI=) 7: fPjaiW_RQVaw1K0jco_QmLpGo5s.roa (hash: agQGyFSnSoUI1Vx0MTRN/i+hHcE0hyBre8ShGUX7keA=) 8: lv4HmOqEkoJhmZ694ZcdnLwYlAM.roa (hash: jNXlLdUizmlPS7y4NkIFg6Z2F2lK4SSREn91C27cUCo=) 9: sERIvqHcZj2yU32m6o5QSyQReME.roa (hash: cfxbkVfwNX0hfImDTJjGC48Jbi/ZuYY11AKoePEqH8k=) 10: zTLxL4slk5kZQfWpH_PY-TD7nNM.roa (hash: tzDHOIgeKhCjAOTBNpSwMn6WduYNfsmvzrDJbeHe5/Y=) Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/4f/9437a2-07e6-4e6a-aa3f-965d6d603bfa/1/1-CVUqFakIrBhrmTFd2MPkdQIzUo.crl rsync://rpki.ripe.net/repository/DEFAULT/4f/9437a2-07e6-4e6a-aa3f-965d6d603bfa/1/1-CVUqFakIrBhrmTFd2MPkdQIzUo.mft rsync://rpki.ripe.net/repository/DEFAULT/1-CVUqFakIrBhrmTFd2MPkdQIzUo.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Wed 05 Nov 2025 07:00:12 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9a:4d:aa:87:b7:0c:35:09:c2:5a:e8:3b:9f:b0:92:4d:a9 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=f82554a856a422b061ae64c577630f91d408cd4a Validity Not Before: Nov 4 07:00:12 2025 GMT Not After : Nov 5 07:00:12 2025 GMT Subject: CN=1bc40883bf853c81046158cd08b0a7f63466ff7f Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:a7:fe:ea:07:13:e7:75:24:69:13:74:4e:be:2f: 0c:bb:49:fe:d4:f9:a6:51:20:2c:30:ec:96:14:76: 0f:a0:db:8e:e5:3b:2c:9b:73:f2:f5:b2:71:3a:6c: f8:47:f9:73:e8:f1:28:50:b5:8d:e5:72:fd:fb:61: 62:60:91:3b:9a:bb:66:55:d4:37:83:84:f4:e8:f6: 18:80:df:6a:8d:dc:be:2e:60:d4:b0:74:9d:44:db: e6:7d:be:cb:fc:47:73:c9:dd:c9:f0:f5:27:a8:2a: e6:51:82:85:66:32:2f:a6:c9:b9:1a:70:fc:b7:38: 24:56:bc:cd:de:9b:dc:01:8c:b5:76:a0:b1:2c:c2: d8:11:e0:51:ea:9f:d9:35:23:25:31:cc:10:3b:b9: 63:32:6a:56:1a:7e:4a:f8:c7:de:f3:c2:a7:6e:53: f8:fb:b7:ca:c5:8d:90:94:4c:85:34:a1:6d:ab:c9: e0:33:6a:5d:4e:f8:18:8b:a3:65:5f:06:6e:cb:a0: 46:37:34:19:1b:01:a9:67:c9:66:d6:da:66:fc:39: 79:48:de:d2:78:09:80:2d:f8:e3:15:c7:f6:64:62: 00:c8:bf:65:27:e9:f0:66:5a:71:f5:10:4c:86:cd: 24:57:21:f6:11:e4:e5:b4:ea:d9:10:df:13:ac:bf: 9c:13 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 1B:C4:08:83:BF:85:3C:81:04:61:58:CD:08:B0:A7:F6:34:66:FF:7F X509v3 Authority Key Identifier: keyid:F8:25:54:A8:56:A4:22:B0:61:AE:64:C5:77:63:0F:91:D4:08:CD:4A X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/1-CVUqFakIrBhrmTFd2MPkdQIzUo.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/4f/9437a2-07e6-4e6a-aa3f-965d6d603bfa/1/1-CVUqFakIrBhrmTFd2MPkdQIzUo.mft X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/4f/9437a2-07e6-4e6a-aa3f-965d6d603bfa/1/1-CVUqFakIrBhrmTFd2MPkdQIzUo.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 5a:09:6a:0e:29:0e:12:1c:d9:5a:6f:c6:48:a6:26:87:60:ce: 43:c5:6b:48:85:00:e3:da:ee:94:b5:98:71:c6:66:c5:a4:72: 17:ad:1f:47:f3:79:82:73:32:61:3a:8f:f4:1e:3c:5d:7b:38: fa:1d:8e:48:cd:40:3c:ba:ee:c9:85:b3:3d:9b:1f:50:24:66: 4b:55:b9:18:be:43:84:50:80:14:6e:f3:35:ca:93:4b:10:dd: 13:e7:f2:59:2b:dc:89:8b:d2:47:89:a8:57:91:bc:1f:13:ba: f8:ca:70:07:33:36:ff:5c:18:46:4d:d8:b5:b0:5e:9d:ae:3d: a3:b6:f8:cc:87:94:80:a0:64:b6:3a:5d:24:f8:f7:86:c9:0d: 7e:90:54:e0:a8:74:28:32:10:35:41:2c:04:7b:22:81:22:1a: cc:35:a5:71:dc:03:b6:93:16:98:d9:33:00:02:c0:f0:b8:f2: e6:0b:21:be:ce:06:4c:fa:d7:92:7a:4d:fe:eb:a5:ad:5a:1c: b8:56:0d:f7:5f:60:39:8d:96:9e:46:ca:85:4c:77:67:bc:e9: ba:ec:8d:c5:99:29:9d:ed:54:65:11:27:b9:73:b8:1e:f5:2f: f8:43:a9:69:59:dc:ea:56:00:58:84:c7:09:10:2d:b3:89:a2: 75:42:17:0e -----BEGIN CERTIFICATE----- MIIFGTCCBAGgAwIBAgISAZpNqoe3DDUJwlroO5+wkk2pMA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKGY4MjU1NGE4NTZhNDIyYjA2MWFlNjRjNTc3NjMwZjkxZDQw OGNkNGEwHhcNMjUxMTA0MDcwMDEyWhcNMjUxMTA1MDcwMDEyWjAzMTEwLwYDVQQD EygxYmM0MDg4M2JmODUzYzgxMDQ2MTU4Y2QwOGIwYTdmNjM0NjZmZjdmMIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAp/7qBxPndSRpE3ROvi8Mu0n+1Pmm USAsMOyWFHYPoNuO5Tssm3Py9bJxOmz4R/lz6PEoULWN5XL9+2FiYJE7mrtmVdQ3 g4T06PYYgN9qjdy+LmDUsHSdRNvmfb7L/Edzyd3J8PUnqCrmUYKFZjIvpsm5GnD8 tzgkVrzN3pvcAYy1dqCxLMLYEeBR6p/ZNSMlMcwQO7ljMmpWGn5K+Mfe88KnblP4 +7fKxY2QlEyFNKFtq8ngM2pdTvgYi6NlXwZuy6BGNzQZGwGpZ8lm1tpm/Dl5SN7S eAmALfjjFcf2ZGIAyL9lJ+nwZlpx9RBMhs0kVyH2EeTltOrZEN8TrL+cEwIDAQAB o4ICJTCCAiEwHQYDVR0OBBYEFBvECIO/hTyBBGFYzQiwp/Y0Zv9/MB8GA1UdIwQY MBaAFPglVKhWpCKwYa5kxXdjD5HUCM1KMA4GA1UdDwEB/wQEAwIHgDBlBggrBgEF BQcBAQRZMFcwVQYIKwYBBQUHMAKGSXJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvMS1DVlVxRmFrSXJCaHJtVEZkMk1Qa2RRSXpVby5jZXIw gY4GCCsGAQUFBwELBIGBMH8wfQYIKwYBBQUHMAuGcXJzeW5jOi8vcnBraS5yaXBl Lm5ldC9yZXBvc2l0b3J5L0RFRkFVTFQvNGYvOTQzN2EyLTA3ZTYtNGU2YS1hYTNm LTk2NWQ2ZDYwM2JmYS8xLzEtQ1ZVcUZha0lyQmhybVRGZDJNUGtkUUl6VW8ubWZ0 MIGCBgNVHR8EezB5MHegdaBzhnFyc3luYzovL3Jwa2kucmlwZS5uZXQvcmVwb3Np dG9yeS9ERUZBVUxULzRmLzk0MzdhMi0wN2U2LTRlNmEtYWEzZi05NjVkNmQ2MDNi ZmEvMS8xLUNWVXFGYWtJckJocm1URmQyTVBrZFFJelVvLmNybDAYBgNVHSABAf8E DjAMMAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgAC BQAwFQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAWglq DikOEhzZWm/GSKYmh2DOQ8VrSIUA49rulLWYccZmxaRyF60fR/N5gnMyYTqP9B48 XXs4+h2OSM1APLruyYWzPZsfUCRmS1W5GL5DhFCAFG7zNcqTSxDdE+fyWSvciYvS R4moV5G8HxO6+MpwBzM2/1wYRk3YtbBena49o7b4zIeUgKBktjpdJPj3hskNfpBU 4Kh0KDIQNUEsBHsigSIazDWlcdwDtpMWmNkzAALA8Ljy5gshvs4GTPrXknpN/uul rVocuFYN919gOY2WnkbKhUx3Z7zpuuyNxZkpne1UZREnuXO4HvUv+EOpaVnc6lYA WITHCRAts4midUIXDg== -----END CERTIFICATE-----Generated at Tue Nov 4 14:52:19 2025 by rpki-client