$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/a2/2d5bdf-5265-49b8-8afe-2b920bde3990/1/9RNpzL-GsehOGutG5tM20591Kuc.mft File: 9RNpzL-GsehOGutG5tM20591Kuc.mft (raw, json) Hash identifier: vYPuAH/rLULxmQ9E50xDCORes0bi34oKvL3MGoJ9jQE= Subject key identifier: EB:80:37:67:35:F2:A8:4E:DE:8E:DA:71:2A:B0:CF:13:8C:18:BE:95 Authority key identifier: F5:13:69:CC:BF:86:B1:E8:4E:1A:EB:46:E6:D3:36:D3:9F:75:2A:E7 Certificate issuer: /CN=f51369ccbf86b1e84e1aeb46e6d336d39f752ae7 Certificate serial: 019A4F991C1BAEBBA81D3EE82357A5268C60 Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/9RNpzL-GsehOGutG5tM20591Kuc.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/a2/2d5bdf-5265-49b8-8afe-2b920bde3990/1/9RNpzL-GsehOGutG5tM20591Kuc.mft Manifest number: 1798 Signing time: Tue 04 Nov 2025 16:00:25 +0000 Manifest this update: Tue 04 Nov 2025 16:00:25 +0000 Manifest next update: Wed 05 Nov 2025 16:00:25 +0000 Files and hashes: 1: 1-qPRcE8DIck4EKZK0daL9Ft_loc.roa (hash: S6gdYRKBsEHwYSMO807MAbdCMYPB9AZjrQBtmWuu2RQ=) 2: 2It_I9J9BgRnnQT5C-V712e3yx4.roa (hash: ESMa8M4XpFdW7jSu8zHJhrebxwQNF93LMCKBGt+hLE4=) 3: 9RNpzL-GsehOGutG5tM20591Kuc.crl (hash: fNzt2mZU44uTlKznymmcpUrbBgCOvYSc2yBEs+7tKe4=) 4: DSxMowOlSTC_MwVM7KlgQMPQNrE.roa (hash: nlhxWq37E/ratvBd5zCucB9L6gUR7nqV3LRV9tj9pbU=) 5: KnjyYVOU3YLigPxZRgN4AIoHUvQ.roa (hash: RKZNdSizbytDBkbsChEKMTDt0/k1bzP9vgLbksKhVuw=) 6: PueZ2Saibe_grnff0WyfuKxQBLM.roa (hash: ASz9qPcsScVDhnrxdRTZGa/ifE1te7I/3UbW2qncNLQ=) 7: bIOnLPyVT4HMkOF207Y-bxFgW_o.roa (hash: sgHv3RFNqOpH2R7wPkXbngTzHaihOut0tmB1GHo2cvM=) 8: iNeJPd86ukMD5LJRKI03IcI4aR8.roa (hash: zF30P8QynaOrv8qAmVAHNi6YCjV5/lmN6BVFSTJGcBU=) 9: qzQ58HKI-mgBoaOFTgfx4_Ity54.roa (hash: uVfHYpeJ9lif56v5ovpl9hgZmP0798jrrH58ViAFwNI=) 10: rSXDYdDhtGY6mAhj2Yx5dAMm9XY.roa (hash: FCFQH85pPvPZL6nivkLqilRYIo7O5H0KAY3npTX/SAo=) Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/a2/2d5bdf-5265-49b8-8afe-2b920bde3990/1/9RNpzL-GsehOGutG5tM20591Kuc.crl rsync://rpki.ripe.net/repository/DEFAULT/a2/2d5bdf-5265-49b8-8afe-2b920bde3990/1/9RNpzL-GsehOGutG5tM20591Kuc.mft rsync://rpki.ripe.net/repository/DEFAULT/9RNpzL-GsehOGutG5tM20591Kuc.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Wed 05 Nov 2025 16:00:25 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9a:4f:99:1c:1b:ae:bb:a8:1d:3e:e8:23:57:a5:26:8c:60 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=f51369ccbf86b1e84e1aeb46e6d336d39f752ae7 Validity Not Before: Nov 4 16:00:25 2025 GMT Not After : Nov 5 16:00:25 2025 GMT Subject: CN=eb80376735f2a84ede8eda712ab0cf138c18be95 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:cc:0e:a7:b4:d9:07:e2:22:d2:fa:a6:f5:e2:82: 03:9f:0f:fb:4c:26:74:85:c5:47:5d:13:a2:82:04: d4:31:ce:40:e1:32:fb:d5:30:d7:68:cb:75:a7:b9: a3:31:d9:d4:11:36:ff:0b:77:e7:b8:93:71:37:e8: a5:70:2a:49:94:c1:0f:67:22:02:7d:6e:c8:c2:e8: 1a:7a:9d:f4:43:55:27:0b:cc:7f:5d:c0:3a:aa:95: 79:c3:7f:26:5e:df:1c:bc:38:e5:3d:31:e8:bf:83: 64:80:a3:ef:55:4e:09:de:b5:7e:89:89:98:17:d9: f1:83:d9:32:18:32:ac:6f:b2:ec:a4:6c:52:de:ee: cb:fd:89:1c:ad:a1:f4:98:f9:ed:3d:97:45:de:b6: 72:e9:33:e4:19:6d:83:64:bb:58:1e:65:14:23:cd: 18:43:2d:55:6d:6b:0b:00:21:9a:2a:b6:87:eb:7b: 74:9a:7f:51:7b:5a:6e:81:6c:b3:11:4e:51:a8:d2: a0:76:cc:db:c3:f1:97:6a:5d:55:dc:59:00:d2:7c: 67:02:c0:29:1f:2a:34:cf:74:bd:15:35:2f:ea:91: a4:1d:ad:2a:23:65:6c:21:61:7e:3f:59:d1:31:d6: 0c:9e:d7:5a:14:98:d2:8e:68:82:dc:82:4f:00:97: 01:45 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: EB:80:37:67:35:F2:A8:4E:DE:8E:DA:71:2A:B0:CF:13:8C:18:BE:95 X509v3 Authority Key Identifier: keyid:F5:13:69:CC:BF:86:B1:E8:4E:1A:EB:46:E6:D3:36:D3:9F:75:2A:E7 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/9RNpzL-GsehOGutG5tM20591Kuc.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/a2/2d5bdf-5265-49b8-8afe-2b920bde3990/1/9RNpzL-GsehOGutG5tM20591Kuc.mft X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/a2/2d5bdf-5265-49b8-8afe-2b920bde3990/1/9RNpzL-GsehOGutG5tM20591Kuc.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 2a:9e:b7:9a:b6:4e:c2:bf:8d:f6:7b:6c:8b:ef:72:40:84:9e: 7b:98:cf:28:50:a1:e0:56:9f:5a:cc:e2:0b:eb:bd:a6:04:cf: 7e:f1:fc:7b:5f:21:77:5b:1c:2e:1d:24:46:4d:8f:fd:f3:f5: f5:cb:e4:59:b1:22:4d:02:49:aa:70:57:85:ff:34:ac:08:40: c2:67:05:59:43:cb:f1:94:41:a0:bb:3d:e2:de:aa:71:89:56: 4d:31:ab:2c:fa:48:98:4b:86:41:7d:52:32:7a:2e:5b:2d:c1: e7:eb:fb:ff:01:33:1e:10:d7:ab:c8:40:38:ba:22:6c:a3:8f: 32:82:07:9a:43:f9:db:49:11:d5:c0:ce:05:ea:c7:81:bb:f8: b7:15:ef:f7:a1:73:55:31:81:de:bf:c9:e8:23:58:d9:5e:0e: 25:dd:10:22:c4:d4:52:9b:a1:b6:1b:cc:4f:3f:b5:05:ff:7e: 38:12:4d:f7:cc:48:77:28:a6:bb:46:e9:64:75:ca:fb:8d:20: 0d:91:eb:52:ca:87:bb:22:98:39:44:49:31:c2:ba:7f:da:d7: d4:de:20:fc:f4:16:12:de:19:3a:91:ee:fa:8f:f0:df:42:20: 44:89:3c:db:13:ce:dc:5b:c8:51:a4:0b:4c:59:23:07:5f:77: 98:2d:f5:b4 -----BEGIN CERTIFICATE----- MIIFFjCCA/6gAwIBAgISAZpPmRwbrruoHT7oI1elJoxgMA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKGY1MTM2OWNjYmY4NmIxZTg0ZTFhZWI0NmU2ZDMzNmQzOWY3 NTJhZTcwHhcNMjUxMTA0MTYwMDI1WhcNMjUxMTA1MTYwMDI1WjAzMTEwLwYDVQQD EyhlYjgwMzc2NzM1ZjJhODRlZGU4ZWRhNzEyYWIwY2YxMzhjMThiZTk1MIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAzA6ntNkH4iLS+qb14oIDnw/7TCZ0 hcVHXROiggTUMc5A4TL71TDXaMt1p7mjMdnUETb/C3fnuJNxN+ilcCpJlMEPZyIC fW7Iwugaep30Q1UnC8x/XcA6qpV5w38mXt8cvDjlPTHov4NkgKPvVU4J3rV+iYmY F9nxg9kyGDKsb7LspGxS3u7L/YkcraH0mPntPZdF3rZy6TPkGW2DZLtYHmUUI80Y Qy1VbWsLACGaKraH63t0mn9Re1pugWyzEU5RqNKgdszbw/GXal1V3FkA0nxnAsAp Hyo0z3S9FTUv6pGkHa0qI2VsIWF+P1nRMdYMntdaFJjSjmiC3IJPAJcBRQIDAQAB o4ICIjCCAh4wHQYDVR0OBBYEFOuAN2c18qhO3o7acSqwzxOMGL6VMB8GA1UdIwQY MBaAFPUTacy/hrHoThrrRubTNtOfdSrnMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvOVJOcHpMLUdzZWhPR3V0RzV0TTIwNTkxS3VjLmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC9hMi8yZDViZGYtNTI2NS00OWI4LThhZmUt MmI5MjBiZGUzOTkwLzEvOVJOcHpMLUdzZWhPR3V0RzV0TTIwNTkxS3VjLm1mdDCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC9hMi8yZDViZGYtNTI2NS00OWI4LThhZmUtMmI5MjBiZGUzOTkw LzEvOVJOcHpMLUdzZWhPR3V0RzV0TTIwNTkxS3VjLmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAKp63mrZO wr+N9ntsi+9yQISee5jPKFCh4FafWsziC+u9pgTPfvH8e18hd1scLh0kRk2P/fP1 9cvkWbEiTQJJqnBXhf80rAhAwmcFWUPL8ZRBoLs94t6qcYlWTTGrLPpImEuGQX1S MnouWy3B5+v7/wEzHhDXq8hAOLoibKOPMoIHmkP520kR1cDOBerHgbv4txXv96Fz VTGB3r/J6CNY2V4OJd0QIsTUUpuhthvMTz+1Bf9+OBJN98xIdyimu0bpZHXK+40g DZHrUsqHuyKYOURJMcK6f9rX1N4g/PQWEt4ZOpHu+o/w30IgRIk82xPO3FvIUaQL TFkjB193mC31tA== -----END CERTIFICATE-----Generated at Tue Nov 4 23:09:52 2025 by rpki-client