$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/57/3b51b8-10c6-438b-a120-15f13e3f7d85/1/2Cy0PKPAxXgWzuNgR40M-IIgf9I.mft File: 2Cy0PKPAxXgWzuNgR40M-IIgf9I.mft (raw, json) Hash identifier: s6qH4m4bwu6G55HPIZ6ZKIRlkx6cac5/SA8A1ZLX4RM= Subject key identifier: 1B:7D:BC:1B:F3:E1:D7:04:6F:01:11:01:ED:64:7D:B3:B6:EB:91:FF Authority key identifier: D8:2C:B4:3C:A3:C0:C5:78:16:CE:E3:60:47:8D:0C:F8:82:20:7F:D2 Certificate issuer: /CN=d82cb43ca3c0c57816cee360478d0cf882207fd2 Certificate serial: 019A4E4F7680829FDCDC6ACDCAADA03CCC70 Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/2Cy0PKPAxXgWzuNgR40M-IIgf9I.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/57/3b51b8-10c6-438b-a120-15f13e3f7d85/1/2Cy0PKPAxXgWzuNgR40M-IIgf9I.mft Manifest number: 05BF Signing time: Tue 04 Nov 2025 10:00:21 +0000 Manifest this update: Tue 04 Nov 2025 10:00:21 +0000 Manifest next update: Wed 05 Nov 2025 10:00:21 +0000 Files and hashes: 1: 2Cy0PKPAxXgWzuNgR40M-IIgf9I.crl (hash: Bq9JRMUbmShkKNTZSxKUblrsMdfBWnyOOtHFtOgGDbg=) 2: 3NKK36OzbyCVvAW6QnBXCk0vC-E.roa (hash: gHjjORGkqgV1v9V5gvG+Gu8C2uJp9VohURGk9hhqXCY=) 3: 56KKt4BpkIwEHMFmq2QXksA-2io.roa (hash: 54GcazY6u68JnZUu56e7FZCBJWXeMImZQ8ihkRRuFTc=) 4: DWnysDNu_v7yNNJ1aIjDqps-5LM.roa (hash: JPD53SzaSyMUMEmsWnAbUrfvGclz72WlfPM6q3RIsCk=) 5: SOWcqaYhZ7YX4OOHhJe96In9itw.roa (hash: UaSEArJ4Ty/99oB9k6ZnmXrGKJLGr0L+yE1xo+K6dEg=) 6: X3vNtvsomO27Kd2vA5pm18uPmdU.roa (hash: qr4mzjHU/2+nlh+IYLU51D2SlEL1XSnDydpL/wjE4BM=) 7: f7lR2qdNzNhMHZctwhySnx52rh8.roa (hash: uc/3dtcmzwA7XSJMfP+6pPiS8XT6tGwBC3iJr2Zlmhg=) 8: kcbMP36K9zR3OAqVvtstfD6Qc1E.roa (hash: kKzo7D93m1wQVJ52FPItkIqrFxN6fMh/dyqt/5KaXWw=) 9: ksCUkPPXGRQEiQCKOl3Wp67HpYk.roa (hash: Fa0gD5gnN233i5uopk4/0YW9tKdVwYrJaJzPk4e1vT4=) 10: p8WEIwXo7Clnw_lkUVuyGNIeOvM.roa (hash: Ur1mz6OTaNWSYai5Ah9bPYej/Ck8pv/XZW+9ZEpR3q8=) 11: r9xTyNget5zcXlE9TLs7M3SNT04.roa (hash: AESrTW2Rp0Ova6EIN8mRWsiWri5RUSzYkj7e2h2UwnM=) 12: wBcaC1_PamN7lirmMN3fzCp6jH4.roa (hash: G/3j6WArnTAj7/DCB5dCgU40hqdUmgoP9O96RyuFd1M=) 13: wWRwvyrn-LAOgtkAhCo3MlchYWQ.roa (hash: Uba3h/vRuJ26W0MxcGsxkEurmXFyfeD+ONZVIUG7QEM=) 14: xQ1rwm6oO8jHA9kZhQvVDEfMToU.roa (hash: rR/azYUh2GUL8HTdYkb3GDWX8S5vRgxNHhornEovZ9o=) Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/57/3b51b8-10c6-438b-a120-15f13e3f7d85/1/2Cy0PKPAxXgWzuNgR40M-IIgf9I.crl rsync://rpki.ripe.net/repository/DEFAULT/57/3b51b8-10c6-438b-a120-15f13e3f7d85/1/2Cy0PKPAxXgWzuNgR40M-IIgf9I.mft rsync://rpki.ripe.net/repository/DEFAULT/2Cy0PKPAxXgWzuNgR40M-IIgf9I.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Wed 05 Nov 2025 09:00:03 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9a:4e:4f:76:80:82:9f:dc:dc:6a:cd:ca:ad:a0:3c:cc:70 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=d82cb43ca3c0c57816cee360478d0cf882207fd2 Validity Not Before: Nov 4 10:00:21 2025 GMT Not After : Nov 5 10:00:21 2025 GMT Subject: CN=1b7dbc1bf3e1d7046f011101ed647db3b6eb91ff Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:92:1f:e6:9a:ab:07:72:cc:d9:04:12:b7:33:03: 50:b3:fa:1b:5e:60:e3:a4:31:b5:41:96:d2:15:08: e2:29:74:f5:ad:c9:aa:0a:b3:26:eb:dd:5a:dd:b3: 01:c7:3b:d4:70:bd:c6:02:99:8e:8c:e4:9b:33:a1: 52:23:c2:df:1d:bc:7a:11:cc:1a:98:21:5a:4b:90: 1c:76:52:55:40:05:be:54:97:67:12:11:bc:5b:e9: 57:0f:df:96:38:30:6e:cf:96:0b:6d:c7:9f:95:f1: 2a:83:3b:dd:12:c7:ef:4d:ec:69:41:26:78:f3:cf: 42:dc:20:63:6c:b9:c0:80:03:f2:92:30:a6:35:5b: 61:d4:7f:d1:b6:d1:be:de:12:ab:43:fd:e0:ea:56: ed:b6:40:30:d5:7f:02:34:be:50:b3:11:49:29:a9: 41:a0:08:8e:c2:c1:21:a6:57:ec:75:4c:80:3c:b4: 11:63:be:9c:a6:5a:a3:f9:6f:6f:d6:af:f6:c2:ba: 8c:c2:6f:bb:91:a8:fd:b1:32:38:ce:9c:a8:34:ce: 39:31:6c:84:da:ac:82:a1:16:ed:31:c9:f7:5b:ca: b4:2a:c3:93:59:70:d6:a9:57:b9:f5:c5:fd:15:56: 17:84:40:7f:3d:53:22:ee:6c:3c:f0:2d:91:bc:22: d1:13 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 1B:7D:BC:1B:F3:E1:D7:04:6F:01:11:01:ED:64:7D:B3:B6:EB:91:FF X509v3 Authority Key Identifier: keyid:D8:2C:B4:3C:A3:C0:C5:78:16:CE:E3:60:47:8D:0C:F8:82:20:7F:D2 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/2Cy0PKPAxXgWzuNgR40M-IIgf9I.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/57/3b51b8-10c6-438b-a120-15f13e3f7d85/1/2Cy0PKPAxXgWzuNgR40M-IIgf9I.mft X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/57/3b51b8-10c6-438b-a120-15f13e3f7d85/1/2Cy0PKPAxXgWzuNgR40M-IIgf9I.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 73:d0:be:ec:3a:25:82:66:93:9c:af:50:39:a6:f5:93:df:ed: 64:84:7a:9c:b3:9f:43:3f:18:bb:55:01:67:dc:1a:c0:8e:61: 63:71:8c:6e:56:a3:2f:8d:be:e4:43:38:84:12:8e:e4:88:f6: 9b:7f:22:e4:d9:a2:90:08:64:bc:e5:be:78:98:67:95:57:d3: 5e:27:bc:7a:9d:47:59:db:c1:d1:64:a0:92:31:3d:24:51:eb: 76:2e:36:7d:51:a5:5a:7f:75:d8:41:33:62:51:df:23:8d:5f: df:dc:ca:83:88:ee:32:6b:39:ee:f1:79:28:5a:62:6e:f3:d0: 93:10:be:69:77:df:7c:4d:40:90:fb:0c:9d:3e:4a:11:13:32: a2:bb:c8:12:5d:4b:0e:dd:ba:c4:47:33:8e:46:40:22:8c:10: 6b:1c:a2:f2:25:3d:1c:bb:a3:41:eb:c8:ca:20:49:b9:a6:07: bc:68:ce:db:1e:19:cd:6d:8c:e2:b6:52:ce:40:d7:9f:68:07: 92:5b:36:39:8f:99:9b:3c:76:0c:a7:c7:c7:d7:3f:7c:84:35: f5:72:8f:e3:32:ae:16:b1:f8:9a:01:a9:ce:bd:44:15:2f:19: 4f:36:5d:e2:d2:20:de:da:7d:64:25:28:6c:58:f6:6a:cf:a8: 07:13:2f:55 -----BEGIN CERTIFICATE----- MIIFFjCCA/6gAwIBAgISAZpOT3aAgp/c3GrNyq2gPMxwMA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKGQ4MmNiNDNjYTNjMGM1NzgxNmNlZTM2MDQ3OGQwY2Y4ODIy MDdmZDIwHhcNMjUxMTA0MTAwMDIxWhcNMjUxMTA1MTAwMDIxWjAzMTEwLwYDVQQD EygxYjdkYmMxYmYzZTFkNzA0NmYwMTExMDFlZDY0N2RiM2I2ZWI5MWZmMIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAkh/mmqsHcszZBBK3MwNQs/obXmDj pDG1QZbSFQjiKXT1rcmqCrMm691a3bMBxzvUcL3GApmOjOSbM6FSI8LfHbx6Ecwa mCFaS5AcdlJVQAW+VJdnEhG8W+lXD9+WODBuz5YLbceflfEqgzvdEsfvTexpQSZ4 889C3CBjbLnAgAPykjCmNVth1H/RttG+3hKrQ/3g6lbttkAw1X8CNL5QsxFJKalB oAiOwsEhplfsdUyAPLQRY76cplqj+W9v1q/2wrqMwm+7kaj9sTI4zpyoNM45MWyE 2qyCoRbtMcn3W8q0KsOTWXDWqVe59cX9FVYXhEB/PVMi7mw88C2RvCLREwIDAQAB o4ICIjCCAh4wHQYDVR0OBBYEFBt9vBvz4dcEbwERAe1kfbO265H/MB8GA1UdIwQY MBaAFNgstDyjwMV4Fs7jYEeNDPiCIH/SMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvMkN5MFBLUEF4WGdXenVOZ1I0ME0tSUlnZjlJLmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC81Ny8zYjUxYjgtMTBjNi00MzhiLWExMjAt MTVmMTNlM2Y3ZDg1LzEvMkN5MFBLUEF4WGdXenVOZ1I0ME0tSUlnZjlJLm1mdDCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC81Ny8zYjUxYjgtMTBjNi00MzhiLWExMjAtMTVmMTNlM2Y3ZDg1 LzEvMkN5MFBLUEF4WGdXenVOZ1I0ME0tSUlnZjlJLmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAc9C+7Dol gmaTnK9QOab1k9/tZIR6nLOfQz8Yu1UBZ9wawI5hY3GMblajL42+5EM4hBKO5Ij2 m38i5NmikAhkvOW+eJhnlVfTXie8ep1HWdvB0WSgkjE9JFHrdi42fVGlWn912EEz YlHfI41f39zKg4juMms57vF5KFpibvPQkxC+aXfffE1AkPsMnT5KERMyorvIEl1L Dt26xEczjkZAIowQaxyi8iU9HLujQevIyiBJuaYHvGjO2x4ZzW2M4rZSzkDXn2gH kls2OY+Zmzx2DKfHx9c/fIQ19XKP4zKuFrH4mgGpzr1EFS8ZTzZd4tIg3tp9ZCUo bFj2as+oBxMvVQ== -----END CERTIFICATE-----Generated at Tue Nov 4 14:52:22 2025 by rpki-client