$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/a4/dcdae6-d695-4266-ba9b-93b3a3696d96/1/5jGwgNTqb9Bham5wHHyBXW_4fAA.mft File: 5jGwgNTqb9Bham5wHHyBXW_4fAA.mft (raw, json) Hash identifier: vvBYP5b9TOfpXpx2IrOTmpFhXghaO2aoXjgj99W2lI4= Subject key identifier: 52:B5:57:82:0A:F8:9F:5A:B4:64:69:67:17:B8:9A:59:A2:0C:D2:A5 Authority key identifier: E6:31:B0:80:D4:EA:6F:D0:61:6A:6E:70:1C:7C:81:5D:6F:F8:7C:00 Certificate issuer: /CN=e631b080d4ea6fd0616a6e701c7c815d6ff87c00 Certificate serial: 019A51879EC6106DB6BDC81C12D78480DEDF Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/5jGwgNTqb9Bham5wHHyBXW_4fAA.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/a4/dcdae6-d695-4266-ba9b-93b3a3696d96/1/5jGwgNTqb9Bham5wHHyBXW_4fAA.mft Manifest number: 08D9 Signing time: Wed 05 Nov 2025 01:00:33 +0000 Manifest this update: Wed 05 Nov 2025 01:00:33 +0000 Manifest next update: Thu 06 Nov 2025 01:00:33 +0000 Files and hashes: 1: 36JMsnCTZ3dwGq1Ka9Cuddl862c.roa (hash: rxGSLpm5OrdXLa8c65qMAKh6CEoXBb/8Ki3iPQlCtp4=) 2: 5jGwgNTqb9Bham5wHHyBXW_4fAA.crl (hash: kNWKPMXeR4Sm3r38tAXgwljmhvIVDMrsDHlx5l4rp9k=) 3: 8rKYK-iYG1qg8KyjX_ZfdJFjUJo.roa (hash: 6c5KWPrXXMji3H6W3aAMo6TC6fKptrhCcp/hd4gp2T0=) 4: 9qt_AxGF-iefTgTj9gP8JXPuDuE.roa (hash: dzLOUtBgexrBsG0CJE0tpFxhbM0NWc5a6JMvh5ssT/c=) 5: Gx61TcX_jg_POohtFk3y578RK3s.roa (hash: cdRA7EEe8Z56qv2cSGc980wpIss1qxURTPJYCEyx71I=) 6: LzZkWrTJKB_nRLE2CHcTnYb72Ak.roa (hash: bDGvw/cq/31+ME9ha7pMFsDpy5ZNw/W2wJW0IhefjPs=) 7: RnK86UmIAp-Vf8TMZLM03XjM-aE.roa (hash: tadpJcfzMaehdbJngFohNz6vat40laG6LyK588h2pfQ=) 8: TH1GQt5phoccIVru2X6WLJ52OMs.roa (hash: lBAEWmb8yHalrh5kruZJueiLdM1gxTgfao1k6b840VY=) 9: ZJprrbhKMAT5LtByVt0jo1FSWOs.roa (hash: nZtkV2GPrU6rUiWBvWUJ+IXzV+B3ZnqxZo9hlzMGkqE=) 10: dVeJBp__tKyi8xuuXGDrr7L9rpA.roa (hash: pavqcGgA7qNjgp+uyhIxt8IASt/7r1r3IBQvQqb7v/c=) 11: mJWGLM8T_1at8gmBKfytV80xCsY.roa (hash: nBO32lhSvSUXg7lebbqssrsekQToM8cKNZVTOaKe1bQ=) Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/a4/dcdae6-d695-4266-ba9b-93b3a3696d96/1/5jGwgNTqb9Bham5wHHyBXW_4fAA.crl rsync://rpki.ripe.net/repository/DEFAULT/a4/dcdae6-d695-4266-ba9b-93b3a3696d96/1/5jGwgNTqb9Bham5wHHyBXW_4fAA.mft rsync://rpki.ripe.net/repository/DEFAULT/5jGwgNTqb9Bham5wHHyBXW_4fAA.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Wed 05 Nov 2025 22:37:02 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9a:51:87:9e:c6:10:6d:b6:bd:c8:1c:12:d7:84:80:de:df Signature Algorithm: sha256WithRSAEncryption Issuer: CN=e631b080d4ea6fd0616a6e701c7c815d6ff87c00 Validity Not Before: Nov 5 01:00:33 2025 GMT Not After : Nov 6 01:00:33 2025 GMT Subject: CN=52b557820af89f5ab464696717b89a59a20cd2a5 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:8e:41:82:10:ab:c2:6e:9a:38:eb:2a:a5:2c:f1: 3f:94:b7:af:36:15:fb:85:aa:bc:44:6f:c7:d4:ff: c5:ab:b0:45:3f:2a:f8:15:d8:c2:41:e1:80:6d:5b: 6b:36:bc:e9:aa:f5:63:f9:34:b1:29:9a:83:13:bc: b7:cc:75:58:04:80:0f:cc:aa:77:e5:a6:80:92:8e: 45:fb:c2:3f:28:3d:e0:0c:50:94:e8:32:68:f4:3b: f7:a2:dd:57:d0:70:a0:ed:6f:36:01:d0:3b:a9:87: d0:ad:df:85:61:22:bd:22:a9:9b:6f:28:42:5d:b4: 3a:1f:d3:9e:c1:72:2e:82:9b:44:4e:1d:a5:ac:4e: ce:f9:5c:e8:ca:f9:2b:b1:71:b4:12:44:fb:65:4e: 24:21:0c:4f:db:dc:53:71:05:f7:35:a6:bf:8f:bc: e1:af:81:52:4a:fb:c4:82:d8:70:0f:eb:9d:ca:40: 78:a2:8a:1e:47:8b:b2:9d:69:4d:1a:bf:62:43:9d: ba:a3:8c:2c:a6:6d:74:73:39:c3:41:16:0d:7c:08: a4:32:f0:52:c9:fd:38:aa:43:2c:1e:bf:e0:84:6d: 39:56:1f:2a:2b:0a:c6:14:4f:87:6a:04:9a:95:66: c8:2b:cc:5e:42:99:26:fa:92:56:e6:28:3a:fd:14: 62:fd Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 52:B5:57:82:0A:F8:9F:5A:B4:64:69:67:17:B8:9A:59:A2:0C:D2:A5 X509v3 Authority Key Identifier: keyid:E6:31:B0:80:D4:EA:6F:D0:61:6A:6E:70:1C:7C:81:5D:6F:F8:7C:00 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/5jGwgNTqb9Bham5wHHyBXW_4fAA.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/a4/dcdae6-d695-4266-ba9b-93b3a3696d96/1/5jGwgNTqb9Bham5wHHyBXW_4fAA.mft X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/a4/dcdae6-d695-4266-ba9b-93b3a3696d96/1/5jGwgNTqb9Bham5wHHyBXW_4fAA.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 7a:0a:8b:e8:7e:54:0d:d5:07:cc:cd:df:53:47:42:c6:53:07: 2e:a1:aa:28:7a:5f:0b:33:b1:7a:43:b6:ff:3e:a6:ef:e9:bd: e0:13:e2:6f:c2:a4:f0:bb:be:4b:29:f6:02:ce:1e:0e:80:68: f4:f0:2c:4d:4a:3b:6b:b9:da:7f:a4:e5:76:4d:ee:e0:96:8b: 1b:e3:3e:2e:67:0d:83:f1:3d:fe:09:37:44:50:6b:a6:e6:a2: 81:5d:e6:65:61:65:16:aa:60:42:3a:c2:40:83:e5:36:e0:93: f2:23:d9:d0:9f:6f:04:5b:af:3b:93:2b:e2:60:ab:33:1f:aa: 02:86:ef:7b:77:15:f3:4c:5e:36:b3:6c:ee:c4:ed:de:48:b8: 88:0f:c0:f6:c2:f8:fc:d7:1f:fc:86:f6:b4:11:4f:1e:a6:c6: 5a:da:98:09:ac:7f:81:2b:74:20:ce:6b:a2:b7:ca:96:b0:6f: f2:bb:83:89:fe:b7:ff:e5:10:85:0f:28:0b:8f:82:4f:5f:05: 17:62:f5:bd:1c:d3:c2:ae:c8:1f:2f:9d:86:49:09:75:c4:ac: 54:6a:7a:1e:3b:a8:75:ac:ef:b0:26:f7:47:e4:6e:0d:ed:fc: 28:13:5a:33:e6:4f:23:8f:f7:44:6a:a1:6c:1f:c3:46:0c:e5: 66:30:3a:40 -----BEGIN CERTIFICATE----- MIIFFjCCA/6gAwIBAgISAZpRh57GEG22vcgcEteEgN7fMA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKGU2MzFiMDgwZDRlYTZmZDA2MTZhNmU3MDFjN2M4MTVkNmZm ODdjMDAwHhcNMjUxMTA1MDEwMDMzWhcNMjUxMTA2MDEwMDMzWjAzMTEwLwYDVQQD Eyg1MmI1NTc4MjBhZjg5ZjVhYjQ2NDY5NjcxN2I4OWE1OWEyMGNkMmE1MIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAjkGCEKvCbpo46yqlLPE/lLevNhX7 haq8RG/H1P/Fq7BFPyr4FdjCQeGAbVtrNrzpqvVj+TSxKZqDE7y3zHVYBIAPzKp3 5aaAko5F+8I/KD3gDFCU6DJo9Dv3ot1X0HCg7W82AdA7qYfQrd+FYSK9IqmbbyhC XbQ6H9OewXIugptETh2lrE7O+VzoyvkrsXG0EkT7ZU4kIQxP29xTcQX3Naa/j7zh r4FSSvvEgthwD+udykB4oooeR4uynWlNGr9iQ526o4wspm10cznDQRYNfAikMvBS yf04qkMsHr/ghG05Vh8qKwrGFE+HagSalWbIK8xeQpkm+pJW5ig6/RRi/QIDAQAB o4ICIjCCAh4wHQYDVR0OBBYEFFK1V4IK+J9atGRpZxe4mlmiDNKlMB8GA1UdIwQY MBaAFOYxsIDU6m/QYWpucBx8gV1v+HwAMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvNWpHd2dOVHFiOUJoYW01d0hIeUJYV180ZkFBLmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC9hNC9kY2RhZTYtZDY5NS00MjY2LWJhOWIt OTNiM2EzNjk2ZDk2LzEvNWpHd2dOVHFiOUJoYW01d0hIeUJYV180ZkFBLm1mdDCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC9hNC9kY2RhZTYtZDY5NS00MjY2LWJhOWItOTNiM2EzNjk2ZDk2 LzEvNWpHd2dOVHFiOUJoYW01d0hIeUJYV180ZkFBLmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAegqL6H5U DdUHzM3fU0dCxlMHLqGqKHpfCzOxekO2/z6m7+m94BPib8Kk8Lu+Syn2As4eDoBo 9PAsTUo7a7naf6Tldk3u4JaLG+M+LmcNg/E9/gk3RFBrpuaigV3mZWFlFqpgQjrC QIPlNuCT8iPZ0J9vBFuvO5Mr4mCrMx+qAobve3cV80xeNrNs7sTt3ki4iA/A9sL4 /Ncf/Ib2tBFPHqbGWtqYCax/gSt0IM5rorfKlrBv8ruDif63/+UQhQ8oC4+CT18F F2L1vRzTwq7IHy+dhkkJdcSsVGp6HjuodazvsCb3R+RuDe38KBNaM+ZPI4/3RGqh bB/DRgzlZjA6QA== -----END CERTIFICATE-----Generated at Wed Nov 5 05:12:30 2025 by rpki-client