$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/ac/f3549f-18f7-48b0-901d-25cc9d6cfbb9/1/I0Rtp6cLznc-wrwWVarjDDwYQSw.mft File: I0Rtp6cLznc-wrwWVarjDDwYQSw.mft (raw, json) Hash identifier: rk6E6FZIuh3ytkYSOpyHnHQi/Cr9pUpcYjIqOJz+260= Subject key identifier: FC:8E:3F:D5:58:4E:AF:D9:35:DA:4E:EF:84:89:D8:39:69:DA:C0:BA Authority key identifier: 23:44:6D:A7:A7:0B:CE:77:3E:C2:BC:16:55:AA:E3:0C:3C:18:41:2C Certificate issuer: /CN=23446da7a70bce773ec2bc1655aae30c3c18412c Certificate serial: 019A4F62388C264D3B972312BDF54CE2F5ED Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/I0Rtp6cLznc-wrwWVarjDDwYQSw.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/ac/f3549f-18f7-48b0-901d-25cc9d6cfbb9/1/I0Rtp6cLznc-wrwWVarjDDwYQSw.mft Manifest number: 14CD Signing time: Tue 04 Nov 2025 15:00:28 +0000 Manifest this update: Tue 04 Nov 2025 15:00:28 +0000 Manifest next update: Wed 05 Nov 2025 15:00:28 +0000 Files and hashes: 1: 1-DmgZ4SOp-NyMxLpBYaEtj39Pdc.roa (hash: moNVW0pEVWJfvkZEJ959J7HVzxYxrRxeZe7wePoILkM=) 2: 1-YvBQ0BXrsF-NI7ubQxbzvPVuzg.roa (hash: eYRmazTnlT6QkpTc8BcLL4cZu0o6zfLVuHBleuRca74=) 3: FwySP1jVKL7DmmlRNwZnvOJofjw.roa (hash: F8V8HLYupPXjwfMEbx0g1ieMP6WPPz1HmoVO8jTtRCg=) 4: I0Rtp6cLznc-wrwWVarjDDwYQSw.crl (hash: 3pd3/0BucYUlXi4ncWp0iTGO7YwdFA0qBiUePWBUOEI=) 5: Xu2K8fW-gQnYV7VE3ISwB8N68f8.roa (hash: NKQq6ePbr62hGHn3QtTkpNNxc85cdItsXJmI3/Mzf2w=) 6: bXcsNUMfdZBR3tv1r8dI-NGTxGI.roa (hash: nSyMcXVhj3Lt4TUfuUh042NUrc5IpwBc7m8EmxqlbJw=) 7: d_P2C7-8KzXEXKrYSD9DOI8LiWE.roa (hash: Yd4prnJa4gstJKWN3oZHIXfbfrVyLQkl2GQSNyCI7uQ=) 8: k5bIb9MZd-l_B-bxXKNoMlRDovA.roa (hash: bpuvw96upd8j55DJW2izTXwq0PIjcaMc/13PHw88j0I=) 9: leUb75eQIxyb-VxN49MBjH1YF7k.roa (hash: kyA2+f/9l+pKqkl9Or57N7CwCtWEqE5/Far2bCfSZ4I=) 10: pqM1u8SkS4zcFQvrBhQWpXPMYCA.roa (hash: ZvRrYdTYDz9FJEg1Ikh5qg9AfwzK1a1b92vZCCUcbys=) 11: qV9uaYW0EJ9RfJ2uJjNKqD5z7XA.roa (hash: 8zBVfYPjKnKjKryP+fVFU4l51KGHl1B5bpWFMv1A9Mk=) 12: sDrv6ds57QYfp4Z_4o5IpblURKI.roa (hash: Y8MxO27e+WV4vIqzW7fZxZuurHymmQUKVTNCec7B22g=) 13: wFX7xPpJ7yA033Ye7jyB7b5hfrY.roa (hash: cWLM1VzdX6e7FN9H2A5u+k5ZkEsPKCYG7CFbFvNUR/k=) 14: xxa6C-pa80quO5ROYbjP391EF1Y.roa (hash: kO5NzNIL7QO5wmPmlUrjQ/tzsh5UuDfcIRoRWEvLEF8=) Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/ac/f3549f-18f7-48b0-901d-25cc9d6cfbb9/1/I0Rtp6cLznc-wrwWVarjDDwYQSw.crl rsync://rpki.ripe.net/repository/DEFAULT/ac/f3549f-18f7-48b0-901d-25cc9d6cfbb9/1/I0Rtp6cLznc-wrwWVarjDDwYQSw.mft rsync://rpki.ripe.net/repository/DEFAULT/I0Rtp6cLznc-wrwWVarjDDwYQSw.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Wed 05 Nov 2025 15:00:28 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9a:4f:62:38:8c:26:4d:3b:97:23:12:bd:f5:4c:e2:f5:ed Signature Algorithm: sha256WithRSAEncryption Issuer: CN=23446da7a70bce773ec2bc1655aae30c3c18412c Validity Not Before: Nov 4 15:00:28 2025 GMT Not After : Nov 5 15:00:28 2025 GMT Subject: CN=fc8e3fd5584eafd935da4eef8489d83969dac0ba Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:9b:83:e4:c9:66:be:ad:45:f3:10:41:2e:b2:a4: 1d:bc:00:64:48:e7:21:31:19:0b:33:ba:c1:17:96: 86:bd:57:be:ef:52:d9:5e:c2:c8:6d:d5:46:f4:c4: db:19:20:16:e4:ed:c7:ed:e7:90:69:7c:a1:36:cb: 1d:fb:e9:36:17:68:6f:91:4a:45:c9:34:de:7a:f7: c0:a2:bc:1d:b9:cc:98:54:9c:79:81:53:b8:e1:3a: 4c:0c:99:ea:64:f4:ff:3b:fe:50:e3:56:60:d6:b1: d2:f2:ca:a8:1b:6e:2f:e1:fd:64:d0:5e:42:aa:f4: 7f:28:bd:3d:ef:46:b7:56:ee:34:da:14:e9:bf:dc: 16:fc:e5:09:5c:de:4c:ff:d9:a4:0d:1a:03:03:ee: 5f:7f:6d:5c:63:21:1d:a1:67:f8:4b:cc:a7:d5:14: 43:92:b7:27:e6:9c:1b:dd:65:b9:e7:53:c7:07:40: 9d:21:3a:a8:d5:7e:62:c8:30:ce:eb:ae:33:50:79: d0:09:a1:05:b6:d9:6f:71:c3:22:fb:78:f1:de:b8: c2:42:03:ce:8a:db:41:5b:fe:e1:23:96:42:66:f2: dc:8e:d1:b9:bd:fd:58:2a:ff:a9:47:82:d9:ba:77: b9:87:ad:6d:a2:93:fa:22:16:3f:46:26:5f:47:9d: cd:a1 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: FC:8E:3F:D5:58:4E:AF:D9:35:DA:4E:EF:84:89:D8:39:69:DA:C0:BA X509v3 Authority Key Identifier: keyid:23:44:6D:A7:A7:0B:CE:77:3E:C2:BC:16:55:AA:E3:0C:3C:18:41:2C X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/I0Rtp6cLznc-wrwWVarjDDwYQSw.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/ac/f3549f-18f7-48b0-901d-25cc9d6cfbb9/1/I0Rtp6cLznc-wrwWVarjDDwYQSw.mft X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/ac/f3549f-18f7-48b0-901d-25cc9d6cfbb9/1/I0Rtp6cLznc-wrwWVarjDDwYQSw.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 2a:63:63:38:35:a9:96:c3:31:2a:cd:05:e2:0d:46:71:91:fd: 6f:61:06:f3:d6:06:e1:ef:86:47:78:a4:03:e1:f3:95:f3:0d: ea:4c:60:b7:bc:76:7d:22:b3:0c:a1:40:a7:68:ed:2f:8f:90: 48:7a:c8:d9:b0:cb:64:55:f8:35:fe:3e:1e:9e:58:f5:5a:0c: 91:14:76:f0:1c:57:91:55:d9:5a:c4:92:c3:9a:3f:87:25:22: fc:e7:dc:ca:15:30:97:dc:a3:7b:fb:30:16:3d:1c:f0:77:98: a3:87:ab:a0:b6:4d:67:88:ed:f8:6f:f6:f6:57:79:b8:14:c4: b1:6d:1d:46:6e:78:f5:9a:24:db:47:3c:53:83:58:0e:4e:ec: 60:b8:59:ed:13:9f:4f:84:67:b0:63:f7:82:00:73:d9:11:ac: a1:73:8d:6d:f7:dd:fa:ca:7d:e1:51:33:aa:bc:8b:61:5b:8d: 4c:01:cc:69:8a:f3:5e:93:93:39:b5:06:3d:66:b0:4a:e7:6c: 65:9b:76:9a:d9:77:d8:bd:45:ce:8a:44:da:3a:fa:91:93:cd: 0d:7a:d8:6b:fb:00:c0:83:1a:cd:10:b0:1e:76:c4:82:68:a9: 63:10:0f:68:d1:19:5a:b3:11:9d:2c:37:11:30:4a:ad:9c:45: b8:e4:79:9c -----BEGIN CERTIFICATE----- MIIFFjCCA/6gAwIBAgISAZpPYjiMJk07lyMSvfVM4vXtMA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKDIzNDQ2ZGE3YTcwYmNlNzczZWMyYmMxNjU1YWFlMzBjM2Mx ODQxMmMwHhcNMjUxMTA0MTUwMDI4WhcNMjUxMTA1MTUwMDI4WjAzMTEwLwYDVQQD EyhmYzhlM2ZkNTU4NGVhZmQ5MzVkYTRlZWY4NDg5ZDgzOTY5ZGFjMGJhMIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAm4PkyWa+rUXzEEEusqQdvABkSOch MRkLM7rBF5aGvVe+71LZXsLIbdVG9MTbGSAW5O3H7eeQaXyhNssd++k2F2hvkUpF yTTeevfAorwducyYVJx5gVO44TpMDJnqZPT/O/5Q41Zg1rHS8sqoG24v4f1k0F5C qvR/KL0970a3Vu402hTpv9wW/OUJXN5M/9mkDRoDA+5ff21cYyEdoWf4S8yn1RRD krcn5pwb3WW551PHB0CdITqo1X5iyDDO664zUHnQCaEFttlvccMi+3jx3rjCQgPO ittBW/7hI5ZCZvLcjtG5vf1YKv+pR4LZune5h61topP6IhY/RiZfR53NoQIDAQAB o4ICIjCCAh4wHQYDVR0OBBYEFPyOP9VYTq/ZNdpO74SJ2Dlp2sC6MB8GA1UdIwQY MBaAFCNEbaenC853PsK8FlWq4ww8GEEsMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvSTBSdHA2Y0x6bmMtd3J3V1ZhcmpERHdZUVN3LmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC9hYy9mMzU0OWYtMThmNy00OGIwLTkwMWQt MjVjYzlkNmNmYmI5LzEvSTBSdHA2Y0x6bmMtd3J3V1ZhcmpERHdZUVN3Lm1mdDCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC9hYy9mMzU0OWYtMThmNy00OGIwLTkwMWQtMjVjYzlkNmNmYmI5 LzEvSTBSdHA2Y0x6bmMtd3J3V1ZhcmpERHdZUVN3LmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAKmNjODWp lsMxKs0F4g1GcZH9b2EG89YG4e+GR3ikA+HzlfMN6kxgt7x2fSKzDKFAp2jtL4+Q SHrI2bDLZFX4Nf4+Hp5Y9VoMkRR28BxXkVXZWsSSw5o/hyUi/OfcyhUwl9yje/sw Fj0c8HeYo4eroLZNZ4jt+G/29ld5uBTEsW0dRm549Zok20c8U4NYDk7sYLhZ7ROf T4RnsGP3ggBz2RGsoXONbffd+sp94VEzqryLYVuNTAHMaYrzXpOTObUGPWawSuds ZZt2mtl32L1FzopE2jr6kZPNDXrYa/sAwIMazRCwHnbEgmipYxAPaNEZWrMRnSw3 ETBKrZxFuOR5nA== -----END CERTIFICATE-----Generated at Tue Nov 4 19:53:20 2025 by rpki-client