$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/5f/b9884b-6fc5-4b3e-b1e8-e01e94124674/1/2o8F44Q1F88JccK_nN3d1icX5Sw.mft File: 2o8F44Q1F88JccK_nN3d1icX5Sw.mft (raw, json) Hash identifier: QaOt8d7uQ1ilZ2SJOVRfo9wAFUkBZPHeHYLmhsTxZoU= Subject key identifier: E9:0A:AC:EC:42:4C:5F:30:C1:DD:16:65:CF:9B:14:42:31:60:FC:FF Authority key identifier: DA:8F:05:E3:84:35:17:CF:09:71:C2:BF:9C:DD:DD:D6:27:17:E5:2C Certificate issuer: /CN=da8f05e3843517cf0971c2bf9cddddd62717e52c Certificate serial: 019A4EBD5A3A540AE942ED7100742CBCB3DE Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/2o8F44Q1F88JccK_nN3d1icX5Sw.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/5f/b9884b-6fc5-4b3e-b1e8-e01e94124674/1/2o8F44Q1F88JccK_nN3d1icX5Sw.mft Manifest number: 09EC Signing time: Tue 04 Nov 2025 12:00:23 +0000 Manifest this update: Tue 04 Nov 2025 12:00:23 +0000 Manifest next update: Wed 05 Nov 2025 12:00:23 +0000 Files and hashes: 1: 0uOd6pkbVcZjPk-Kbr-5tFBqZCU.roa (hash: xqBleUY4Z9zq7UyMqOMWy7ryf9KoBj1PjfY1uJWx7sk=) 2: 2o8F44Q1F88JccK_nN3d1icX5Sw.crl (hash: wOAm/z4bkC96BhNzRDqj72IMMVB2ldGOykbaZao0Y7Q=) 3: 6fo87MmGE1UjtxclnRa9qrk6UGM.roa (hash: pci8N0GbpCHAxgqqnFxgDiIt1lIp8+ssI2b4Yf5Rg+E=) 4: 8qpcVnGYsLxwTiVc5wTV5dRFK4k.roa (hash: RbWUZtrPDR/A3Nx2zGfdIax0nOuzV8AAA7cnBdypxWc=) 5: Hax2CM_u8tv_Y_4IhciZMhkDl3c.roa (hash: e9PckbluSyyzMKimJgtpYDPOMt/2roevlfetav7K+BQ=) 6: KvD4Pa3lfXKcjfgVEMsuUlxyqpQ.roa (hash: BVkdPRLTcswZV+vMxoNSYxQYWyflcpgaedXCE6/uDRk=) 7: RR9CZyYi6n9Q08SG7w4DsIQSJqE.roa (hash: N5pZ5HpdV+sU2XpEoXlts+Mklu638CuRARvFwE/FmiI=) 8: nx5Oe8_eex0Lfmh8SN1I5-K_L0c.roa (hash: aN95mG0hj7PK2XyXWR+TAHvEHR+mZTfAc87764WjQ2c=) 9: qOO5dT9W5xkoHAQL601E08xwv24.roa (hash: 1FhIPAsVstrUOOgTU9C0JI4gYu/byZYWA//QylDnCnw=) 10: sUb0Zw8pjJl8ScoJeLuqD9laegA.roa (hash: pDiLmEvZRUyivCYPJwe74TSCfaSqIBI4xYENdV2R1wk=) 11: zKcHHqm6nAgqTE-C4TiY0X7SueI.roa (hash: iZfl8ZghJZguA4a9LNsQfxENOVNQqLvAQQCUSQMWqeU=) Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/5f/b9884b-6fc5-4b3e-b1e8-e01e94124674/1/2o8F44Q1F88JccK_nN3d1icX5Sw.crl rsync://rpki.ripe.net/repository/DEFAULT/5f/b9884b-6fc5-4b3e-b1e8-e01e94124674/1/2o8F44Q1F88JccK_nN3d1icX5Sw.mft rsync://rpki.ripe.net/repository/DEFAULT/2o8F44Q1F88JccK_nN3d1icX5Sw.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Wed 05 Nov 2025 12:00:23 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9a:4e:bd:5a:3a:54:0a:e9:42:ed:71:00:74:2c:bc:b3:de Signature Algorithm: sha256WithRSAEncryption Issuer: CN=da8f05e3843517cf0971c2bf9cddddd62717e52c Validity Not Before: Nov 4 12:00:23 2025 GMT Not After : Nov 5 12:00:23 2025 GMT Subject: CN=e90aacec424c5f30c1dd1665cf9b14423160fcff Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:b6:fb:13:16:2b:34:f3:bd:04:0f:98:14:c0:38: 38:8e:3b:c1:a8:af:d7:6d:f4:6b:e4:fe:7e:8a:11: db:32:b0:2b:8e:83:cc:d4:80:d1:76:a5:48:25:a3: c8:91:1a:1a:4f:62:9c:01:a0:38:19:69:b7:98:c1: 01:4c:9a:0b:0e:5a:57:0f:fe:32:f6:48:e0:ad:8f: 8e:11:02:06:44:23:8f:cd:36:bd:86:8c:fd:6b:55: 5c:74:5f:67:74:ba:73:2a:d0:71:45:8d:df:ee:7b: 21:c5:6c:9c:8a:d7:44:03:88:d6:97:7d:8b:14:6f: f4:e3:1a:2c:a5:b9:e9:8a:3e:d3:18:9a:18:bc:8c: 80:22:6f:36:1d:e9:93:d6:81:92:db:c7:43:4e:39: 1c:45:42:f4:bc:3e:a7:c6:55:33:6b:16:d7:38:62: 3f:c9:10:0a:4a:60:12:b2:46:d3:2d:9c:61:89:6c: 19:d0:0f:f5:cb:b9:1e:8d:a0:c2:ee:d6:4f:ee:f8: a9:d8:ae:22:72:8b:b9:0d:56:76:c9:3a:9b:0b:63: a0:c9:32:4f:e6:7c:1d:c1:76:96:f6:4d:76:97:0d: a1:f7:90:d5:17:6a:9a:5a:99:71:c1:a5:5c:3d:a3: 0b:c6:cf:b8:e8:0e:0d:68:dc:e6:12:b3:7f:7b:a3: 8b:77 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: E9:0A:AC:EC:42:4C:5F:30:C1:DD:16:65:CF:9B:14:42:31:60:FC:FF X509v3 Authority Key Identifier: keyid:DA:8F:05:E3:84:35:17:CF:09:71:C2:BF:9C:DD:DD:D6:27:17:E5:2C X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/2o8F44Q1F88JccK_nN3d1icX5Sw.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/5f/b9884b-6fc5-4b3e-b1e8-e01e94124674/1/2o8F44Q1F88JccK_nN3d1icX5Sw.mft X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/5f/b9884b-6fc5-4b3e-b1e8-e01e94124674/1/2o8F44Q1F88JccK_nN3d1icX5Sw.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption c3:c4:4c:5a:8c:a6:29:13:4d:17:44:8f:d4:9e:b6:b6:ca:9c: 82:7b:eb:41:06:c5:6f:61:89:95:72:00:43:3f:98:27:62:0e: 3e:37:23:3a:4b:2d:49:c3:94:c5:3b:5c:89:69:d5:1e:f0:6a: 00:7a:4f:32:09:75:30:8c:49:08:e3:9a:3f:7b:8a:69:32:62: 05:0c:9a:61:c6:27:4d:32:31:e5:b8:98:24:29:9a:64:4a:40: 7e:af:d3:7b:49:43:f6:35:67:88:22:bf:5f:18:9a:d1:c1:22: 6b:6e:b0:48:f3:99:f9:d7:45:4b:68:81:09:9b:76:2e:43:4f: 92:53:a0:e2:89:f4:2c:a9:e9:bf:65:4a:b0:25:15:e0:c6:74: 29:dc:99:29:1f:a6:c0:ab:d3:4b:7c:62:80:99:a7:4b:7b:e8: 10:b5:0a:6c:06:87:95:5b:f1:dd:1e:35:8d:ae:84:05:88:fc: 78:36:d9:8d:1a:b3:ea:e3:47:3c:fd:da:da:ec:82:a2:25:39: 64:8d:74:3b:e8:42:20:10:da:85:89:9e:12:a2:6b:e1:6c:2a: 8b:a9:e3:56:3b:3c:41:ed:ec:f0:a0:31:2d:a0:ba:de:80:10: 3b:42:b2:86:a3:40:e9:cb:38:c7:4a:8f:7b:2f:1c:15:5c:39: f3:ad:26:bd -----BEGIN CERTIFICATE----- MIIFFjCCA/6gAwIBAgISAZpOvVo6VArpQu1xAHQsvLPeMA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKGRhOGYwNWUzODQzNTE3Y2YwOTcxYzJiZjljZGRkZGQ2Mjcx N2U1MmMwHhcNMjUxMTA0MTIwMDIzWhcNMjUxMTA1MTIwMDIzWjAzMTEwLwYDVQQD EyhlOTBhYWNlYzQyNGM1ZjMwYzFkZDE2NjVjZjliMTQ0MjMxNjBmY2ZmMIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAtvsTFis0870ED5gUwDg4jjvBqK/X bfRr5P5+ihHbMrArjoPM1IDRdqVIJaPIkRoaT2KcAaA4GWm3mMEBTJoLDlpXD/4y 9kjgrY+OEQIGRCOPzTa9hoz9a1VcdF9ndLpzKtBxRY3f7nshxWycitdEA4jWl32L FG/04xospbnpij7TGJoYvIyAIm82HemT1oGS28dDTjkcRUL0vD6nxlUzaxbXOGI/ yRAKSmASskbTLZxhiWwZ0A/1y7kejaDC7tZP7vip2K4icou5DVZ2yTqbC2OgyTJP 5nwdwXaW9k12lw2h95DVF2qaWplxwaVcPaMLxs+46A4NaNzmErN/e6OLdwIDAQAB o4ICIjCCAh4wHQYDVR0OBBYEFOkKrOxCTF8wwd0WZc+bFEIxYPz/MB8GA1UdIwQY MBaAFNqPBeOENRfPCXHCv5zd3dYnF+UsMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvMm84RjQ0UTFGODhKY2NLX25OM2QxaWNYNVN3LmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC81Zi9iOTg4NGItNmZjNS00YjNlLWIxZTgt ZTAxZTk0MTI0Njc0LzEvMm84RjQ0UTFGODhKY2NLX25OM2QxaWNYNVN3Lm1mdDCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC81Zi9iOTg4NGItNmZjNS00YjNlLWIxZTgtZTAxZTk0MTI0Njc0 LzEvMm84RjQ0UTFGODhKY2NLX25OM2QxaWNYNVN3LmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAw8RMWoym KRNNF0SP1J62tsqcgnvrQQbFb2GJlXIAQz+YJ2IOPjcjOkstScOUxTtciWnVHvBq AHpPMgl1MIxJCOOaP3uKaTJiBQyaYcYnTTIx5biYJCmaZEpAfq/Te0lD9jVniCK/ Xxia0cEia26wSPOZ+ddFS2iBCZt2LkNPklOg4on0LKnpv2VKsCUV4MZ0KdyZKR+m wKvTS3xigJmnS3voELUKbAaHlVvx3R41ja6EBYj8eDbZjRqz6uNHPP3a2uyCoiU5 ZI10O+hCIBDahYmeEqJr4Wwqi6njVjs8Qe3s8KAxLaC63oAQO0KyhqNA6cs4x0qP ey8cFVw5860mvQ== -----END CERTIFICATE-----Generated at Tue Nov 4 22:38:35 2025 by rpki-client