$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/53/e8cb44-a954-4672-b9a4-a49e5c6633bd/1/1-sy7cqqYhKW_jQ51dAShfl4jMiw.mft File: 1-sy7cqqYhKW_jQ51dAShfl4jMiw.mft (raw, json) Hash identifier: u6Y+1Od92hDKAzdfTc45aN2Wo1MrssOVmVC6KMKIzLc= Subject key identifier: 5E:87:94:8F:42:FC:58:05:2F:58:33:7F:21:B3:63:6F:E7:1B:BA:F5 Authority key identifier: FA:CC:BB:72:AA:98:84:A5:BF:8D:0E:75:74:04:A1:7E:5E:23:32:2C Certificate issuer: /CN=faccbb72aa9884a5bf8d0e757404a17e5e23322c Certificate serial: 019A4E4FFDB64E41AB5FE380A70DE6D9194D Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/1-sy7cqqYhKW_jQ51dAShfl4jMiw.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/53/e8cb44-a954-4672-b9a4-a49e5c6633bd/1/1-sy7cqqYhKW_jQ51dAShfl4jMiw.mft Manifest number: 1726 Signing time: Tue 04 Nov 2025 10:00:56 +0000 Manifest this update: Tue 04 Nov 2025 10:00:56 +0000 Manifest next update: Wed 05 Nov 2025 10:00:56 +0000 Files and hashes: 1: 0OeAqS6vX3gO6vvCqqj93y9hg-0.roa (hash: 4e6GVSZZmDnDLgJOl3djtnEbqT5lDhaJq4dAZ/qU/lk=) 2: 1-sy7cqqYhKW_jQ51dAShfl4jMiw.crl (hash: JZPF3iyeaDdBoxFCLsniDBEvhFmalACwlzxFXtmV2HY=) 3: 3ezvkbNYlAAPTTtiMpMfAXi1MZc.roa (hash: vAEGRwBdpnrHv/YkIQBOy6F594hqpTCRBhtvpnyCndE=) 4: B9T2tEPkzR3I7bfjqMLpjqVmqX0.roa (hash: jvG6Kma4d2VGMYtzkdxrMtFkS2r5Ue1ZSeSqhiErA3k=) 5: IHhv8_mZDx6A2j-F31Pdu0k8CrY.roa (hash: STtIVy8Sw+YzG++4aOUBuN18lGWUI/cMQ7xzdEE/ceE=) 6: NBa1UmmcofJztBL8pTAUTjZFH0k.roa (hash: 86hIGHbzSCBjbpNQmq5AwTHYQV5MFxXejgndiQ6r1LA=) 7: VO1QZo2vfxheLbeFL1rejYxNYBI.roa (hash: FCnZcb/OtfouViKRapPfAgcT5IF02/4Osl8N+1EzEnE=) 8: Wc2-UHBTfF-XHLzgQS0SwCmvlB0.roa (hash: 7aSWc04NFLdsEACjlaycXN0TGgVCRx18P8RZa+kCQIU=) 9: cUk9gF1NAvXhh8uQPdgOvohfLq4.roa (hash: kUG38NhhNKk78iTPsGRqnyUiXKkoTEwb6ImAUIs7EvU=) 10: doz6pIZLFsQi2mYQNJFMwi6P3-w.roa (hash: cmXkx2OZFz2XattOJlW1YfABpPcx3f/r/UMGYZNOMGI=) 11: ioa7P1e1SCYd3BcfFxtI-9P6P2k.roa (hash: 1p7OVkFIK8eU+7iB9pcEKKjlG4sNNxXEXZnDzToZ8Ac=) 12: pCc_cSWUTGqBPQv4cw6oAWrJ3Dw.roa (hash: 592DXKAG5uM8BEJZmdLRa+vW+5yO7qDryAvPgg1YlKU=) 13: pVMgUdSHj0nlaCG6yBmxCGoOV48.roa (hash: iYu6/b1RnNkG7/TqQe3ysX2HEttIbsgucDRlivFMstY=) 14: udVjWjtCw8-mpprcmzafPsXqAEg.roa (hash: 4jYyql/ul3ChaZUGCo2qkL0DtI4tuS2kYKNXsqMrYh4=) Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/53/e8cb44-a954-4672-b9a4-a49e5c6633bd/1/1-sy7cqqYhKW_jQ51dAShfl4jMiw.crl rsync://rpki.ripe.net/repository/DEFAULT/53/e8cb44-a954-4672-b9a4-a49e5c6633bd/1/1-sy7cqqYhKW_jQ51dAShfl4jMiw.mft rsync://rpki.ripe.net/repository/DEFAULT/1-sy7cqqYhKW_jQ51dAShfl4jMiw.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Wed 05 Nov 2025 10:00:56 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9a:4e:4f:fd:b6:4e:41:ab:5f:e3:80:a7:0d:e6:d9:19:4d Signature Algorithm: sha256WithRSAEncryption Issuer: CN=faccbb72aa9884a5bf8d0e757404a17e5e23322c Validity Not Before: Nov 4 10:00:56 2025 GMT Not After : Nov 5 10:00:56 2025 GMT Subject: CN=5e87948f42fc58052f58337f21b3636fe71bbaf5 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:be:3d:4e:b0:a5:27:8f:d0:61:99:27:de:f9:ef: eb:01:7c:92:23:e6:22:b7:41:d4:0f:52:5f:36:17: 58:6c:d2:61:65:5d:a3:b6:a5:ea:1a:90:01:90:44: 1b:08:73:27:46:ae:20:d8:da:bc:fd:17:00:ea:64: 31:86:4b:7c:63:f8:aa:00:20:cf:28:56:3e:41:9c: 44:e5:e8:71:12:9b:06:e3:f2:23:11:cb:d6:a7:3b: bd:34:7a:ad:3a:10:a1:ac:9e:a0:c8:00:e8:da:ee: ff:e9:a3:db:30:ab:8b:bf:b7:12:c2:f9:f6:08:13: 5b:00:fa:74:5e:bb:ad:3f:e6:df:a5:7e:2e:4b:ed: 61:6b:b1:54:8f:3b:42:b0:8d:70:11:04:f5:90:79: 74:d8:99:0b:fb:e6:56:fa:c7:3e:19:92:5d:ff:c7: 84:18:b5:75:32:0d:ac:c8:f2:da:e7:50:26:ef:23: b7:68:83:e8:98:41:57:4e:f5:3c:ea:64:99:d3:8a: 3d:83:6c:84:c0:2e:d6:8d:ef:d9:04:af:db:cc:e2: 43:fb:07:52:cd:01:b5:7a:84:9b:cf:1e:3f:68:dd: af:7e:53:1a:d1:be:ca:48:ec:be:35:ac:08:7c:fc: 59:5a:0e:a6:41:25:3b:46:68:e1:8e:e5:4f:ad:c0: 6b:15 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 5E:87:94:8F:42:FC:58:05:2F:58:33:7F:21:B3:63:6F:E7:1B:BA:F5 X509v3 Authority Key Identifier: keyid:FA:CC:BB:72:AA:98:84:A5:BF:8D:0E:75:74:04:A1:7E:5E:23:32:2C X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/1-sy7cqqYhKW_jQ51dAShfl4jMiw.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/53/e8cb44-a954-4672-b9a4-a49e5c6633bd/1/1-sy7cqqYhKW_jQ51dAShfl4jMiw.mft X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/53/e8cb44-a954-4672-b9a4-a49e5c6633bd/1/1-sy7cqqYhKW_jQ51dAShfl4jMiw.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 94:a9:80:7b:51:88:d2:47:5a:7a:13:1b:50:43:8e:55:67:f5: 68:a6:63:8b:72:85:4c:ab:31:61:d7:e1:c1:47:fd:ae:b3:ff: 1d:98:d8:7a:d2:63:cd:10:ef:73:07:e5:5d:f4:c1:9a:4d:38: 22:aa:fe:15:cd:d9:33:18:dc:3b:08:18:77:21:12:54:fe:fd: d8:c9:5a:26:bb:9b:71:b5:dd:29:5a:26:51:4d:02:64:3a:d1: 73:2c:28:c2:9c:cf:df:83:6c:00:f7:48:a8:95:e3:bb:1c:9b: 3e:30:c5:1c:3b:ea:94:22:30:0c:27:19:db:ed:55:92:11:fe: 16:65:72:d3:83:37:5e:ca:93:95:e8:f0:b2:15:ac:10:77:e2: 51:0b:25:4a:7c:e9:22:ba:a2:94:3e:ec:80:08:32:cc:cf:a1: a4:87:57:30:c6:fa:cf:19:64:d0:d7:28:96:b5:13:fb:69:c9: ac:4d:59:8d:dd:5b:32:85:12:3e:49:86:a5:45:b7:93:09:76: 16:70:f6:d4:8b:dc:39:16:25:27:fb:a2:ba:03:3b:1e:fc:f8: 9d:97:de:03:48:1e:16:b5:6c:1c:e2:a6:a7:ff:e4:1f:49:d5: 2a:d6:6b:9a:d5:46:5a:3b:b1:1c:9d:a7:60:ae:9e:33:1d:3d: 43:31:fc:06 -----BEGIN CERTIFICATE----- MIIFGTCCBAGgAwIBAgISAZpOT/22TkGrX+OApw3m2RlNMA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKGZhY2NiYjcyYWE5ODg0YTViZjhkMGU3NTc0MDRhMTdlNWUy MzMyMmMwHhcNMjUxMTA0MTAwMDU2WhcNMjUxMTA1MTAwMDU2WjAzMTEwLwYDVQQD Eyg1ZTg3OTQ4ZjQyZmM1ODA1MmY1ODMzN2YyMWIzNjM2ZmU3MWJiYWY1MIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAvj1OsKUnj9BhmSfe+e/rAXySI+Yi t0HUD1JfNhdYbNJhZV2jtqXqGpABkEQbCHMnRq4g2Nq8/RcA6mQxhkt8Y/iqACDP KFY+QZxE5ehxEpsG4/IjEcvWpzu9NHqtOhChrJ6gyADo2u7/6aPbMKuLv7cSwvn2 CBNbAPp0XrutP+bfpX4uS+1ha7FUjztCsI1wEQT1kHl02JkL++ZW+sc+GZJd/8eE GLV1Mg2syPLa51Am7yO3aIPomEFXTvU86mSZ04o9g2yEwC7Wje/ZBK/bzOJD+wdS zQG1eoSbzx4/aN2vflMa0b7KSOy+NawIfPxZWg6mQSU7RmjhjuVPrcBrFQIDAQAB o4ICJTCCAiEwHQYDVR0OBBYEFF6HlI9C/FgFL1gzfyGzY2/nG7r1MB8GA1UdIwQY MBaAFPrMu3KqmISlv40OdXQEoX5eIzIsMA4GA1UdDwEB/wQEAwIHgDBlBggrBgEF BQcBAQRZMFcwVQYIKwYBBQUHMAKGSXJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvMS1zeTdjcXFZaEtXX2pRNTFkQVNoZmw0ak1pdy5jZXIw gY4GCCsGAQUFBwELBIGBMH8wfQYIKwYBBQUHMAuGcXJzeW5jOi8vcnBraS5yaXBl Lm5ldC9yZXBvc2l0b3J5L0RFRkFVTFQvNTMvZThjYjQ0LWE5NTQtNDY3Mi1iOWE0 LWE0OWU1YzY2MzNiZC8xLzEtc3k3Y3FxWWhLV19qUTUxZEFTaGZsNGpNaXcubWZ0 MIGCBgNVHR8EezB5MHegdaBzhnFyc3luYzovL3Jwa2kucmlwZS5uZXQvcmVwb3Np dG9yeS9ERUZBVUxULzUzL2U4Y2I0NC1hOTU0LTQ2NzItYjlhNC1hNDllNWM2NjMz YmQvMS8xLXN5N2NxcVloS1dfalE1MWRBU2hmbDRqTWl3LmNybDAYBgNVHSABAf8E DjAMMAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgAC BQAwFQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAlKmA e1GI0kdaehMbUEOOVWf1aKZji3KFTKsxYdfhwUf9rrP/HZjYetJjzRDvcwflXfTB mk04Iqr+Fc3ZMxjcOwgYdyESVP792MlaJrubcbXdKVomUU0CZDrRcywowpzP34Ns APdIqJXjuxybPjDFHDvqlCIwDCcZ2+1VkhH+FmVy04M3XsqTlejwshWsEHfiUQsl SnzpIrqilD7sgAgyzM+hpIdXMMb6zxlk0NcolrUT+2nJrE1Zjd1bMoUSPkmGpUW3 kwl2FnD21IvcORYlJ/uiugM7Hvz4nZfeA0geFrVsHOKmp//kH0nVKtZrmtVGWjux HJ2nYK6eMx09QzH8Bg== -----END CERTIFICATE-----Generated at Tue Nov 4 19:57:51 2025 by rpki-client