$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/61/f92e2a-e1e4-487d-9acc-ed1f30cc1c57/1/h3e1s29m4TxDiMmTTaUHhWUV0HM.mft File: h3e1s29m4TxDiMmTTaUHhWUV0HM.mft (raw, json) Hash identifier: ZbZfuqxZVwzvO8R3IFlTIL89uMqT210PyKgqgKN/5II= Subject key identifier: 52:78:3B:35:5F:7D:21:FA:E3:CB:2B:C1:2C:46:06:D7:CD:16:82:EF Authority key identifier: 87:77:B5:B3:6F:66:E1:3C:43:88:C9:93:4D:A5:07:85:65:15:D0:73 Certificate issuer: /CN=8777b5b36f66e13c4388c9934da507856515d073 Certificate serial: 019A50E3E4B217D46CD2C5AD2E7C3DD779FC Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/h3e1s29m4TxDiMmTTaUHhWUV0HM.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/61/f92e2a-e1e4-487d-9acc-ed1f30cc1c57/1/h3e1s29m4TxDiMmTTaUHhWUV0HM.mft Manifest number: 171B Signing time: Tue 04 Nov 2025 22:01:43 +0000 Manifest this update: Tue 04 Nov 2025 22:01:43 +0000 Manifest next update: Wed 05 Nov 2025 22:01:43 +0000 Files and hashes: 1: A6JGXr1SyvHwPS6KzQQ8jkJldSU.roa (hash: VUYWyhNS6ep9E7uE71FApUlIqX9LiZIrh4n1ahAsDso=) 2: TWqw0MHPHKoktRTg5xIAtx78yEM.roa (hash: PUFyi4vEY3nAKmSSQP1jmjE/95RjFLcOq0y69mlpJOM=) 3: V8TNai625jKsZmcQ_WZGrCSKrE4.roa (hash: vysxGoIRN63RAVmh7o1GuXI9idOSf2H3bNvDZcwjEdY=) 4: e6_LhXTjf-f7BeHN6H1yNQzFGts.roa (hash: li+C+e/TyH8gT/zIILB28hzFIhULplGnnZiYiHV9ZRc=) 5: gSW8bbfsJ2jQqNlN9dZhEGJFXP8.roa (hash: vU4Z2mH5UQmCsli4v0J2JenJSa7jKRcKq2cUWRszffQ=) 6: h3e1s29m4TxDiMmTTaUHhWUV0HM.crl (hash: lz6q8cNGr/SandOMXDEv5EFZ3LCdFFhRCj3+6dsNEm8=) 7: i0jLZUHWlEbTjItngq0hMz6l6J0.roa (hash: +fs8xaq1rUOg67Y/1DC1FdTxOQepuB3UaDQqJ+epLzo=) 8: mYsvImsoUU3Ub9pNivjve1CZzdk.roa (hash: 6hty2hcbqDF/bBkU2gmepu7xCrLxFUdqyzgzAZcFQt8=) 9: mcMvNLDOLrmNQ78kKv9_JRA7DZE.roa (hash: VPPZszck1h4O1z0bSD4PbxyUsa9F/mGv1ZkFIvAMZag=) 10: rIHZb_5Mc64A87xwROb5WoKPTaQ.roa (hash: h28IpYVJGdPeChoNExuao8goV9hXIxbKmOle/GHbji8=) Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/61/f92e2a-e1e4-487d-9acc-ed1f30cc1c57/1/h3e1s29m4TxDiMmTTaUHhWUV0HM.crl rsync://rpki.ripe.net/repository/DEFAULT/61/f92e2a-e1e4-487d-9acc-ed1f30cc1c57/1/h3e1s29m4TxDiMmTTaUHhWUV0HM.mft rsync://rpki.ripe.net/repository/DEFAULT/h3e1s29m4TxDiMmTTaUHhWUV0HM.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Wed 05 Nov 2025 22:01:43 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9a:50:e3:e4:b2:17:d4:6c:d2:c5:ad:2e:7c:3d:d7:79:fc Signature Algorithm: sha256WithRSAEncryption Issuer: CN=8777b5b36f66e13c4388c9934da507856515d073 Validity Not Before: Nov 4 22:01:43 2025 GMT Not After : Nov 5 22:01:43 2025 GMT Subject: CN=52783b355f7d21fae3cb2bc12c4606d7cd1682ef Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:ba:27:b3:4d:ac:1a:f5:56:90:6e:cf:4b:61:10: b3:98:84:87:98:bb:ec:04:b1:2c:5b:eb:22:a2:05: 0a:b4:aa:95:6c:bb:cc:49:3b:45:63:6d:9c:47:85: db:d9:e1:fe:df:d7:12:8f:dc:0f:43:ca:7c:74:73: 44:6c:44:f6:de:fc:ca:63:f1:64:44:91:22:d7:ab: 4d:f2:b5:75:b5:ec:dc:fc:1e:30:89:38:27:71:b5: a8:75:64:9e:70:51:d3:a0:d7:ab:2f:cb:2f:9b:12: 26:79:34:44:d2:1c:fa:e5:14:4f:3f:5a:09:e6:20: d8:ee:7a:6a:f4:6d:76:57:22:a9:ed:e1:6e:0b:2c: 9b:d5:cc:c1:07:2e:a9:92:56:ae:c6:b5:a7:83:cd: 6c:8c:31:55:1b:23:c3:ef:35:bb:a1:03:7c:e4:a0: 11:2d:b8:2d:e8:fe:70:a4:8b:71:5e:cc:03:a8:53: 1e:16:44:99:dd:04:7b:88:b0:44:fa:b7:91:f7:db: fc:ce:33:33:3f:41:ca:32:b5:08:9f:ed:65:29:1c: 2a:c0:c7:61:2a:0d:1d:bf:43:82:02:5f:42:fa:4b: 82:fe:74:7b:ee:8f:67:33:4f:c7:03:22:74:5f:08: 2a:da:3f:61:db:64:16:d7:f8:b2:e0:5f:a6:2b:bd: bb:5f Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 52:78:3B:35:5F:7D:21:FA:E3:CB:2B:C1:2C:46:06:D7:CD:16:82:EF X509v3 Authority Key Identifier: keyid:87:77:B5:B3:6F:66:E1:3C:43:88:C9:93:4D:A5:07:85:65:15:D0:73 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/h3e1s29m4TxDiMmTTaUHhWUV0HM.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/61/f92e2a-e1e4-487d-9acc-ed1f30cc1c57/1/h3e1s29m4TxDiMmTTaUHhWUV0HM.mft X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/61/f92e2a-e1e4-487d-9acc-ed1f30cc1c57/1/h3e1s29m4TxDiMmTTaUHhWUV0HM.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 38:cc:9e:f2:70:e7:59:1e:e7:a1:36:58:51:1e:74:0a:b6:3a: b0:c6:6d:59:d5:af:2e:1d:7f:2c:26:5e:77:b8:b3:03:55:23: 45:71:e5:c9:42:1c:7d:d3:47:ac:a9:cf:7a:50:15:30:bd:bd: dd:ba:d5:2a:3e:da:9d:f4:b8:3c:6c:4a:4c:7f:19:f4:a5:9b: a6:52:79:9c:a7:e4:db:cc:9b:90:2e:9b:47:0d:3c:70:a9:1e: 77:cf:18:7d:31:65:59:de:dd:83:f6:fa:6c:e8:a8:da:23:d1: d0:21:78:9e:79:13:74:1b:b4:02:93:1b:73:8c:fb:c9:87:b0: eb:25:de:58:96:f2:4a:a4:ed:8d:89:79:0a:08:38:28:c8:6f: 4b:18:f8:5f:32:69:9f:ca:65:6e:5f:08:6e:03:0f:46:8d:c5: 99:a8:85:dd:94:b7:68:79:f0:42:c7:55:ce:17:30:a1:f1:88: 2e:7f:e6:4b:40:f6:55:c9:21:1f:2f:ae:86:5c:76:c6:29:11: 44:12:46:7a:53:81:c2:ba:71:9b:f7:a8:6a:f5:19:b1:ca:f8: 4e:84:7c:b7:07:c7:d3:1d:03:ab:80:e6:ac:40:5d:a2:a8:b7: eb:3f:de:43:a7:bf:b8:d2:76:54:9b:78:6c:bc:8b:90:1c:8c: d7:11:49:2c -----BEGIN CERTIFICATE----- MIIFFjCCA/6gAwIBAgISAZpQ4+SyF9Rs0sWtLnw913n8MA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKDg3NzdiNWIzNmY2NmUxM2M0Mzg4Yzk5MzRkYTUwNzg1NjUx NWQwNzMwHhcNMjUxMTA0MjIwMTQzWhcNMjUxMTA1MjIwMTQzWjAzMTEwLwYDVQQD Eyg1Mjc4M2IzNTVmN2QyMWZhZTNjYjJiYzEyYzQ2MDZkN2NkMTY4MmVmMIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAuiezTawa9VaQbs9LYRCzmISHmLvs BLEsW+siogUKtKqVbLvMSTtFY22cR4Xb2eH+39cSj9wPQ8p8dHNEbET23vzKY/Fk RJEi16tN8rV1tezc/B4wiTgncbWodWSecFHToNerL8svmxImeTRE0hz65RRPP1oJ 5iDY7npq9G12VyKp7eFuCyyb1czBBy6pklauxrWng81sjDFVGyPD7zW7oQN85KAR Lbgt6P5wpItxXswDqFMeFkSZ3QR7iLBE+reR99v8zjMzP0HKMrUIn+1lKRwqwMdh Kg0dv0OCAl9C+kuC/nR77o9nM0/HAyJ0Xwgq2j9h22QW1/iy4F+mK727XwIDAQAB o4ICIjCCAh4wHQYDVR0OBBYEFFJ4OzVffSH648srwSxGBtfNFoLvMB8GA1UdIwQY MBaAFId3tbNvZuE8Q4jJk02lB4VlFdBzMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvaDNlMXMyOW00VHhEaU1tVFRhVUhoV1VWMEhNLmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC82MS9mOTJlMmEtZTFlNC00ODdkLTlhY2Mt ZWQxZjMwY2MxYzU3LzEvaDNlMXMyOW00VHhEaU1tVFRhVUhoV1VWMEhNLm1mdDCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC82MS9mOTJlMmEtZTFlNC00ODdkLTlhY2MtZWQxZjMwY2MxYzU3 LzEvaDNlMXMyOW00VHhEaU1tVFRhVUhoV1VWMEhNLmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAOMye8nDn WR7noTZYUR50CrY6sMZtWdWvLh1/LCZed7izA1UjRXHlyUIcfdNHrKnPelAVML29 3brVKj7anfS4PGxKTH8Z9KWbplJ5nKfk28ybkC6bRw08cKked88YfTFlWd7dg/b6 bOio2iPR0CF4nnkTdBu0ApMbc4z7yYew6yXeWJbySqTtjYl5Cgg4KMhvSxj4XzJp n8plbl8IbgMPRo3FmaiF3ZS3aHnwQsdVzhcwofGILn/mS0D2VckhHy+uhlx2xikR RBJGelOBwrpxm/eoavUZscr4ToR8twfH0x0Dq4DmrEBdoqi36z/eQ6e/uNJ2VJt4 bLyLkByM1xFJLA== -----END CERTIFICATE-----Generated at Wed Nov 5 06:53:43 2025 by rpki-client