$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/5f/b4d75d-953a-4036-9839-57cd68d9cb4e/1/_2mO6y5J_LX5xlqZhXrynOBmQdk.mft File: _2mO6y5J_LX5xlqZhXrynOBmQdk.mft (raw, json) Hash identifier: tcpvXaovwDJWQ7K+QWsrmkn7B4nMWUPRVMrBadSnv7s= Subject key identifier: F3:79:94:67:78:56:EE:DB:5A:DC:C3:C4:08:75:BB:75:31:5F:9E:FA Authority key identifier: FF:69:8E:EB:2E:49:FC:B5:F9:C6:5A:99:85:7A:F2:9C:E0:66:41:D9 Certificate issuer: /CN=ff698eeb2e49fcb5f9c65a99857af29ce06641d9 Certificate serial: 019A4DE1EE646DF5DC0C657CD3C1D3EDECEA Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/_2mO6y5J_LX5xlqZhXrynOBmQdk.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/5f/b4d75d-953a-4036-9839-57cd68d9cb4e/1/_2mO6y5J_LX5xlqZhXrynOBmQdk.mft Manifest number: 1717 Signing time: Tue 04 Nov 2025 08:00:43 +0000 Manifest this update: Tue 04 Nov 2025 08:00:43 +0000 Manifest next update: Wed 05 Nov 2025 08:00:43 +0000 Files and hashes: 1: 0nspkNZBD4AF3c6BuZHawbNEn4s.roa (hash: uIJdsMvT5D3zL8bAjl80cE2Pwz5BnxnpyFyZ11QSq50=) 2: 54-UEvGfxV4WPcy4WxLxIFxxE-U.roa (hash: ojna0RnGjI7OjDPWs+roB1Amf6WKyl5pMZi5IPEPWP8=) 3: 5Tf-mqxbzy7qofAM2dNl7l1t3mU.roa (hash: 6mVr252OaOJiHsmGk/+j0aXnhIUGcpjMKQ+02iLXgcA=) 4: HIpztZT__B_f9n2gN6auamR5pIU.roa (hash: rJY52okWB1TeezbKU/iuTbv7tjIWb1W5p6bbeWIcdzo=) 5: LuyH1oX8EXWypVZ7iAaDpvRYVVc.roa (hash: PwqXxZGK4PUOy9TXRGdRnGJ0Q9f2SZmolPNVfAk0WgM=) 6: NkdsfBqVz48X5H2Y1WQJSu8vlt4.roa (hash: tuiwHFcQQ4SB/tCeR0sJ8nBN9XREzDRoO1cXDj6kEqo=) 7: UjPxDMGW7lYqCuTCh7JHOA6hizY.roa (hash: ANkRdXMj6bkHEGkvb/XWLCpMoxX6nYg0dbetuBTbz8U=) 8: _2mO6y5J_LX5xlqZhXrynOBmQdk.crl (hash: D9/r4KxdLklEUOLS2Jahq74QSSia6HEeO1u2e9oh8+M=) 9: jqfbqOe3Dnj2fXOhZ9LOHypCFAI.roa (hash: /x0Hcf4qFuhf8+J5QzDuB3C52+I2nDMc1dbR/JkR1Cw=) 10: meQ5SBMnqJBkFHe-JOcEGhCsKFY.roa (hash: TMc5toGudrJJLzHO6dJLOGc8MvIeTEaZ3Nzvom9Ftsw=) Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/5f/b4d75d-953a-4036-9839-57cd68d9cb4e/1/_2mO6y5J_LX5xlqZhXrynOBmQdk.crl rsync://rpki.ripe.net/repository/DEFAULT/5f/b4d75d-953a-4036-9839-57cd68d9cb4e/1/_2mO6y5J_LX5xlqZhXrynOBmQdk.mft rsync://rpki.ripe.net/repository/DEFAULT/_2mO6y5J_LX5xlqZhXrynOBmQdk.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Wed 05 Nov 2025 08:00:43 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9a:4d:e1:ee:64:6d:f5:dc:0c:65:7c:d3:c1:d3:ed:ec:ea Signature Algorithm: sha256WithRSAEncryption Issuer: CN=ff698eeb2e49fcb5f9c65a99857af29ce06641d9 Validity Not Before: Nov 4 08:00:43 2025 GMT Not After : Nov 5 08:00:43 2025 GMT Subject: CN=f37994677856eedb5adcc3c40875bb75315f9efa Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:d4:8b:1f:f9:5a:01:d8:55:c0:37:4d:a7:bc:34: e9:a2:71:4c:97:6e:df:2c:b7:c8:4a:21:75:a2:b7: 28:03:e9:0a:fa:41:c2:28:4f:49:c9:64:d8:ce:96: 6b:71:8c:60:de:d0:db:e6:8e:f3:48:60:5c:ce:cc: d9:92:3c:e8:c6:54:4f:54:b0:01:54:fd:17:b5:9c: a5:28:8e:f7:b2:5c:b6:93:9f:b7:86:f8:c0:56:b9: 77:90:33:3d:ab:6e:d8:fe:55:1b:eb:85:84:0e:95: eb:cc:cf:ac:38:5c:94:c1:b1:3a:df:e8:15:39:21: 00:f3:0e:0e:52:28:51:f9:3d:fb:d9:ee:05:b2:8f: 8d:25:26:be:f1:ce:bb:4f:26:8e:48:a5:97:95:7e: 84:3c:91:fb:8b:c7:98:e4:cc:74:c4:08:0b:b2:46: 3a:29:65:f1:65:2c:45:87:85:56:f2:bc:2b:b9:01: 2b:e5:6b:b7:45:6c:12:39:43:4f:57:fe:13:31:f7: 4b:93:a7:c1:52:5e:41:6e:25:59:b7:0b:fc:c8:36: 6e:7e:69:44:a0:d7:11:9e:5c:5e:73:ea:03:1e:85: e7:78:06:2a:68:cb:04:0f:0d:15:c6:e6:6a:c5:c3: 65:98:c9:88:03:ad:a6:3d:a3:3e:03:57:a3:2d:ab: 99:71 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: F3:79:94:67:78:56:EE:DB:5A:DC:C3:C4:08:75:BB:75:31:5F:9E:FA X509v3 Authority Key Identifier: keyid:FF:69:8E:EB:2E:49:FC:B5:F9:C6:5A:99:85:7A:F2:9C:E0:66:41:D9 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/_2mO6y5J_LX5xlqZhXrynOBmQdk.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/5f/b4d75d-953a-4036-9839-57cd68d9cb4e/1/_2mO6y5J_LX5xlqZhXrynOBmQdk.mft X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/5f/b4d75d-953a-4036-9839-57cd68d9cb4e/1/_2mO6y5J_LX5xlqZhXrynOBmQdk.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 3d:82:a9:d8:d5:99:01:96:9a:7e:4e:59:69:87:f2:74:a5:66: f6:17:bb:2d:1d:ba:73:48:56:eb:6b:29:a7:d7:6c:5c:f3:9b: 52:8b:6d:49:4c:18:00:1a:0a:13:01:a3:43:bc:b9:e7:0f:b0: da:32:84:b1:d8:d3:53:cc:ad:7e:cc:f3:c4:13:17:3d:2b:a5: d7:e0:b8:0a:af:f7:d8:d9:d0:e9:e1:38:b3:ed:2f:ad:fc:d3: ac:72:7d:35:77:6d:56:6b:89:87:d6:64:26:9c:09:c8:6f:23: a7:d0:19:47:12:2c:70:25:f4:1b:0b:55:5a:f5:dc:31:57:df: ba:32:71:71:ab:4a:0d:50:b4:8c:c9:a0:3e:ef:03:d8:4f:53: 8d:15:66:0a:12:86:27:fc:6e:a9:05:a6:62:e5:cb:14:ce:80: 67:ec:07:32:eb:75:d4:a2:46:c9:24:ed:dd:e2:d2:40:83:03: 0e:9a:a2:a8:d0:dc:d2:e8:0f:66:f9:db:25:ae:77:d9:d6:62: 74:da:65:c0:83:5a:81:d8:d4:aa:18:d9:94:ba:5f:9d:33:5c: 93:8e:e7:db:17:4e:b7:3e:69:ab:ae:99:4a:a9:ee:b9:42:ec: b8:1b:d1:a3:a5:29:db:66:65:d0:a9:70:c0:e5:bf:c9:d1:c3: 68:5d:7b:c1 -----BEGIN CERTIFICATE----- MIIFFjCCA/6gAwIBAgISAZpN4e5kbfXcDGV808HT7ezqMA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKGZmNjk4ZWViMmU0OWZjYjVmOWM2NWE5OTg1N2FmMjljZTA2 NjQxZDkwHhcNMjUxMTA0MDgwMDQzWhcNMjUxMTA1MDgwMDQzWjAzMTEwLwYDVQQD EyhmMzc5OTQ2Nzc4NTZlZWRiNWFkY2MzYzQwODc1YmI3NTMxNWY5ZWZhMIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEA1Isf+VoB2FXAN02nvDTponFMl27f LLfISiF1orcoA+kK+kHCKE9JyWTYzpZrcYxg3tDb5o7zSGBczszZkjzoxlRPVLAB VP0XtZylKI73sly2k5+3hvjAVrl3kDM9q27Y/lUb64WEDpXrzM+sOFyUwbE63+gV OSEA8w4OUihR+T372e4Fso+NJSa+8c67TyaOSKWXlX6EPJH7i8eY5Mx0xAgLskY6 KWXxZSxFh4VW8rwruQEr5Wu3RWwSOUNPV/4TMfdLk6fBUl5BbiVZtwv8yDZufmlE oNcRnlxec+oDHoXneAYqaMsEDw0VxuZqxcNlmMmIA62mPaM+A1ejLauZcQIDAQAB o4ICIjCCAh4wHQYDVR0OBBYEFPN5lGd4Vu7bWtzDxAh1u3UxX576MB8GA1UdIwQY MBaAFP9pjusuSfy1+cZamYV68pzgZkHZMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvXzJtTzZ5NUpfTFg1eGxxWmhYcnluT0JtUWRrLmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC81Zi9iNGQ3NWQtOTUzYS00MDM2LTk4Mzkt NTdjZDY4ZDljYjRlLzEvXzJtTzZ5NUpfTFg1eGxxWmhYcnluT0JtUWRrLm1mdDCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC81Zi9iNGQ3NWQtOTUzYS00MDM2LTk4MzktNTdjZDY4ZDljYjRl LzEvXzJtTzZ5NUpfTFg1eGxxWmhYcnluT0JtUWRrLmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAPYKp2NWZ AZaafk5ZaYfydKVm9he7LR26c0hW62spp9dsXPObUottSUwYABoKEwGjQ7y55w+w 2jKEsdjTU8ytfszzxBMXPSul1+C4Cq/32NnQ6eE4s+0vrfzTrHJ9NXdtVmuJh9Zk JpwJyG8jp9AZRxIscCX0GwtVWvXcMVffujJxcatKDVC0jMmgPu8D2E9TjRVmChKG J/xuqQWmYuXLFM6AZ+wHMut11KJGySTt3eLSQIMDDpqiqNDc0ugPZvnbJa532dZi dNplwINagdjUqhjZlLpfnTNck47n2xdOtz5pq66ZSqnuuULsuBvRo6Up22Zl0Klw wOW/ydHDaF17wQ== -----END CERTIFICATE-----Generated at Tue Nov 4 10:45:15 2025 by rpki-client