$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/b1/4f211e-79d7-4504-9ead-871f9ed708e0/1/G6UaC8Dwr-u_bV2Sf-H5gW9SNS0.mft File: G6UaC8Dwr-u_bV2Sf-H5gW9SNS0.mft (raw, json) Hash identifier: Jmud8zkjBIZRMxZ4nUkXU33fvpe1eKPTG5LIZWSpls0= Subject key identifier: 9F:BF:B3:F4:3A:BB:E2:59:09:F4:A7:F6:A1:DC:B9:C1:49:CB:B7:5D Authority key identifier: 1B:A5:1A:0B:C0:F0:AF:EB:BF:6D:5D:92:7F:E1:F9:81:6F:52:35:2D Certificate issuer: /CN=1ba51a0bc0f0afebbf6d5d927fe1f9816f52352d Certificate serial: 019A50E322AA6E6C7A341EF9D771C396E70C Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/G6UaC8Dwr-u_bV2Sf-H5gW9SNS0.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/b1/4f211e-79d7-4504-9ead-871f9ed708e0/1/G6UaC8Dwr-u_bV2Sf-H5gW9SNS0.mft Manifest number: 12F1 Signing time: Tue 04 Nov 2025 22:00:54 +0000 Manifest this update: Tue 04 Nov 2025 22:00:54 +0000 Manifest next update: Wed 05 Nov 2025 22:00:54 +0000 Files and hashes: 1: 53SCy-BS6BPWUPWLo6Zwo7zYj7U.roa (hash: hcmIxv0Tq4ILIXkoyytgzjVrkSlA1EbanTY+o8bnAF0=) 2: DBze0gTqh5SDOw7x6hoGuoE8yr4.roa (hash: ZLoARLtI2IGjjdgEEhL+2Ku7l0nsKThYXfmPapH0dJU=) 3: G6UaC8Dwr-u_bV2Sf-H5gW9SNS0.crl (hash: bOn9Ft7k+k1lUgiPYBYO/wNvliVTpNw3rPw1Lj9K0XE=) 4: JEDgkveNrJ65vuQX11mg8UnyJUY.roa (hash: q6FNEl8CDSP0PRckpcDIVuz5w5t1HfMs8z/qUPyjC5I=) 5: KjkD8Cm8Nvn5kLoxMWRB37y0yGg.roa (hash: HwYwsaGRIKEpmjSBA+wSKugW77viLOfzOy52g+ZRvys=) 6: NcbkyJf0XrQlWSuaG_6rLIv8CEA.roa (hash: t1bpX5VtlqYKcE80al52Eab7HsC+sX2g/k7XldXhhvc=) 7: SAifF78qmhwobbNifv-ncSGKlCQ.roa (hash: /saAmnnB/hN9KICwUzdIN9J64c5nmcrdQQhBsyGdv1o=) 8: TpQ5Z-UdKferYkvwPdK8R7DUnj0.roa (hash: QghfP6CKI1HCADXXFPrgTYVwEH/4oteFqhbAKuXsWlY=) 9: il06Z06HBr4UubVDG3con6FSTJE.roa (hash: 6jxCobZPgi+fb0sp+gKSIVfeSMM4jnCmJ/PQ50Rwxgc=) 10: n3eGk4GZdLWL8rCKUegiOGKLLGE.roa (hash: T8Y25mtZcw8oW9dkDTGN7ilbRkb3BxSHEAwHzK4aavQ=) 11: wmru7gkbD0Q5jhTBil0o1n-XXZY.roa (hash: aLSYcM7LxiQjHNTeSZsVR17gcFojmK5wcKMA+W/GnL8=) 12: y1CrQxuvHr23V7lls5C194EsRDs.roa (hash: EpAbDQcFTvTrlLRJ1zIrH3uM7P6AB1uxGlDmxfGif9I=) Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/b1/4f211e-79d7-4504-9ead-871f9ed708e0/1/G6UaC8Dwr-u_bV2Sf-H5gW9SNS0.crl rsync://rpki.ripe.net/repository/DEFAULT/b1/4f211e-79d7-4504-9ead-871f9ed708e0/1/G6UaC8Dwr-u_bV2Sf-H5gW9SNS0.mft rsync://rpki.ripe.net/repository/DEFAULT/G6UaC8Dwr-u_bV2Sf-H5gW9SNS0.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Wed 05 Nov 2025 18:00:03 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9a:50:e3:22:aa:6e:6c:7a:34:1e:f9:d7:71:c3:96:e7:0c Signature Algorithm: sha256WithRSAEncryption Issuer: CN=1ba51a0bc0f0afebbf6d5d927fe1f9816f52352d Validity Not Before: Nov 4 22:00:54 2025 GMT Not After : Nov 5 22:00:54 2025 GMT Subject: CN=9fbfb3f43abbe25909f4a7f6a1dcb9c149cbb75d Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:c1:a8:0c:27:b5:44:06:01:ab:2c:3c:31:14:90: f9:7c:7b:c1:1f:54:23:c8:ea:8d:c2:34:83:48:ae: 19:73:5e:15:ec:c7:e1:45:4c:be:21:90:57:6f:64: 74:73:38:ce:f6:16:12:6f:cd:2a:d3:19:6d:6c:d5: 3b:b4:7d:60:67:13:37:4e:c2:d2:45:c1:ca:90:66: c2:95:43:55:6e:0b:87:78:88:4e:b2:9d:6f:28:b4: d9:58:d4:66:90:d0:36:27:26:4e:35:48:86:9f:a3: 1b:19:9c:7a:70:7d:e5:6d:69:a3:2b:ad:a8:c8:04: 7c:7f:4c:ce:f2:20:eb:86:f7:8a:b6:7a:8e:44:d2: 26:d4:30:b0:82:65:b9:be:f8:44:fe:fa:02:88:48: bb:72:eb:e1:18:fc:84:8f:52:06:c0:ad:eb:0a:0b: a7:aa:09:3e:de:10:40:59:b7:b3:d1:f9:5b:0f:9c: da:50:fc:a0:d0:aa:35:af:29:09:ea:bc:7c:65:64: ea:35:98:c6:2d:29:55:72:08:b4:a8:25:72:a8:70: 7c:cf:08:b3:9b:9e:65:d4:81:7b:48:f0:2f:00:42: 90:e3:c6:63:60:6b:3b:44:ba:14:2c:bf:bc:d1:d2: 9b:c5:22:39:c4:72:e6:a4:a8:c1:47:c5:01:fa:75: cf:35 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 9F:BF:B3:F4:3A:BB:E2:59:09:F4:A7:F6:A1:DC:B9:C1:49:CB:B7:5D X509v3 Authority Key Identifier: keyid:1B:A5:1A:0B:C0:F0:AF:EB:BF:6D:5D:92:7F:E1:F9:81:6F:52:35:2D X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/G6UaC8Dwr-u_bV2Sf-H5gW9SNS0.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/b1/4f211e-79d7-4504-9ead-871f9ed708e0/1/G6UaC8Dwr-u_bV2Sf-H5gW9SNS0.mft X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/b1/4f211e-79d7-4504-9ead-871f9ed708e0/1/G6UaC8Dwr-u_bV2Sf-H5gW9SNS0.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 69:5d:9a:4c:84:bd:ea:c2:79:6f:d4:dd:5e:e0:19:d3:ef:3f: d4:1d:3f:41:ed:a7:01:af:28:ee:46:57:17:58:96:4a:5a:64: b3:a0:7f:85:7d:a5:e5:5e:66:1b:71:7b:dc:62:00:c0:bc:e6: 54:c5:f7:2f:0c:e3:57:a3:57:9e:01:94:13:ed:e5:4e:1a:58: 62:a2:82:76:d6:ac:84:e3:e0:ed:f6:e7:f9:d5:1a:83:b4:20: a2:47:2a:23:e4:ee:75:41:49:01:a2:2f:15:0a:16:0f:d4:4c: 57:85:6e:a8:90:fc:ab:0b:84:5e:8d:d2:ff:ab:2c:e2:fa:2c: 57:13:62:c6:ba:49:f0:1c:e0:df:2b:70:c0:d3:8f:e6:7a:1b: f0:20:96:05:77:f8:f6:57:10:0c:84:d4:2e:51:51:02:42:7b: 5c:9b:d1:3e:0c:ec:44:f4:46:d0:a7:79:28:a8:18:f7:04:ae: a8:22:fd:2e:56:5f:55:22:c3:18:c5:6a:f5:1d:98:68:d0:19: d9:be:00:40:1c:e2:16:c2:a5:6d:c9:e6:e4:5b:e7:f4:d5:ff: 31:ab:f2:be:3f:1f:7e:f3:ab:b1:4b:16:b7:ae:6b:7a:4b:99: d2:c3:a3:44:e0:21:4c:0f:5a:33:db:f0:a3:22:92:91:a0:af: 93:5d:1f:6c -----BEGIN CERTIFICATE----- MIIFFjCCA/6gAwIBAgISAZpQ4yKqbmx6NB7513HDlucMMA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKDFiYTUxYTBiYzBmMGFmZWJiZjZkNWQ5MjdmZTFmOTgxNmY1 MjM1MmQwHhcNMjUxMTA0MjIwMDU0WhcNMjUxMTA1MjIwMDU0WjAzMTEwLwYDVQQD Eyg5ZmJmYjNmNDNhYmJlMjU5MDlmNGE3ZjZhMWRjYjljMTQ5Y2JiNzVkMIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAwagMJ7VEBgGrLDwxFJD5fHvBH1Qj yOqNwjSDSK4Zc14V7MfhRUy+IZBXb2R0czjO9hYSb80q0xltbNU7tH1gZxM3TsLS RcHKkGbClUNVbguHeIhOsp1vKLTZWNRmkNA2JyZONUiGn6MbGZx6cH3lbWmjK62o yAR8f0zO8iDrhveKtnqORNIm1DCwgmW5vvhE/voCiEi7cuvhGPyEj1IGwK3rCgun qgk+3hBAWbez0flbD5zaUPyg0Ko1rykJ6rx8ZWTqNZjGLSlVcgi0qCVyqHB8zwiz m55l1IF7SPAvAEKQ48ZjYGs7RLoULL+80dKbxSI5xHLmpKjBR8UB+nXPNQIDAQAB o4ICIjCCAh4wHQYDVR0OBBYEFJ+/s/Q6u+JZCfSn9qHcucFJy7ddMB8GA1UdIwQY MBaAFBulGgvA8K/rv21dkn/h+YFvUjUtMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvRzZVYUM4RHdyLXVfYlYyU2YtSDVnVzlTTlMwLmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC9iMS80ZjIxMWUtNzlkNy00NTA0LTllYWQt ODcxZjllZDcwOGUwLzEvRzZVYUM4RHdyLXVfYlYyU2YtSDVnVzlTTlMwLm1mdDCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC9iMS80ZjIxMWUtNzlkNy00NTA0LTllYWQtODcxZjllZDcwOGUw LzEvRzZVYUM4RHdyLXVfYlYyU2YtSDVnVzlTTlMwLmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAaV2aTIS9 6sJ5b9TdXuAZ0+8/1B0/Qe2nAa8o7kZXF1iWSlpks6B/hX2l5V5mG3F73GIAwLzm VMX3LwzjV6NXngGUE+3lThpYYqKCdtashOPg7fbn+dUag7QgokcqI+TudUFJAaIv FQoWD9RMV4VuqJD8qwuEXo3S/6ss4vosVxNixrpJ8Bzg3ytwwNOP5nob8CCWBXf4 9lcQDITULlFRAkJ7XJvRPgzsRPRG0Kd5KKgY9wSuqCL9LlZfVSLDGMVq9R2YaNAZ 2b4AQBziFsKlbcnm5Fvn9NX/Mavyvj8ffvOrsUsWt65rekuZ0sOjROAhTA9aM9vw oyKSkaCvk10fbA== -----END CERTIFICATE-----Generated at Wed Nov 5 02:09:55 2025 by rpki-client