$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/b1/7703ef-2422-437c-b93d-595e0bf5c613/1/MmN4f9D5SzeBPu8WvIE3Qj7j_vM.mft File: MmN4f9D5SzeBPu8WvIE3Qj7j_vM.mft (raw, json) Hash identifier: V0cUQg0AZoIQoxRqAm4a5VPJysGrwvgjyqFWRqI4hdQ= Subject key identifier: 81:89:4B:25:32:38:50:9E:97:B1:52:0A:B0:31:DC:6C:CE:A4:4C:55 Authority key identifier: 32:63:78:7F:D0:F9:4B:37:81:3E:EF:16:BC:81:37:42:3E:E3:FE:F3 Certificate issuer: /CN=3263787fd0f94b37813eef16bc8137423ee3fef3 Certificate serial: 019A4DAB21A518684605F351C39A4410B4D4 Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/MmN4f9D5SzeBPu8WvIE3Qj7j_vM.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/b1/7703ef-2422-437c-b93d-595e0bf5c613/1/MmN4f9D5SzeBPu8WvIE3Qj7j_vM.mft Manifest number: 174D Signing time: Tue 04 Nov 2025 07:00:52 +0000 Manifest this update: Tue 04 Nov 2025 07:00:52 +0000 Manifest next update: Wed 05 Nov 2025 07:00:52 +0000 Files and hashes: 1: 3NU_jczsTwLqoaX-lCYDIDK-xK4.roa (hash: 8Hfke+9D8re50lqI3eIcpPcn6OSj6q+EHma6Ds52QuY=) 2: 6EzBdLMFhAHXtGoqOgo2hhkKxsE.roa (hash: 6BZyqWO3dBV2T/D/HQLLEXL8wtnsNJxMwYYKl/DQzgM=) 3: 6ef47TXoBdfjKnlsNsow8DBixKo.roa (hash: CJVWo8/zfulxwmsfO0I8Hpt8eJudz4hqVHD23gptH10=) 4: GiScTXLFDlSkFEEGri5P1vz6Sho.roa (hash: uMhctxLibeY+IpaWynfmNEbttAIjD24+B1IvRH31TQ8=) 5: KbQ--oBtSgvSfZVrBwQ6M553Hwk.roa (hash: NJgK04btjY64hOecbKh54mIt3v+Yqupp2O5zCZPtgv0=) 6: MmN4f9D5SzeBPu8WvIE3Qj7j_vM.crl (hash: /z06o0XecalYLzPTEzoZvhuH0ZJBVO5wezbZKfQ/mvM=) 7: NTZZF4vSmOFfwF5M5O7eO7oF9Vg.roa (hash: FRVNS4KDdnoHo7IUiUNOad62U9M1nGPEQFofB/xcUyw=) 8: Oi1LQnm4lsa7_1hR1J20jJ6vxNI.roa (hash: SY2CzV8LXx9B2pkUZksUiYNXDfeS5dNBeKSh1IfycAI=) 9: kwOAwgiCOUhVNtJRBCQb6ZiqnBQ.roa (hash: atWOmjTzujEHbunSba5esKgGqowchxKn3GSwQ9XKCbA=) 10: nb4wfQ7FzEgUQNDsTQT1rI6C1P0.roa (hash: XbtW2pGYp04EBEIcviRAYkU8I+ewGGN4xhpRClBs10Q=) 11: pZHCAjsk0quEKKapLoBOB8SLyYU.roa (hash: PkFYd+Uy2SwEBC/xRtpP2pJp1/vhJ01S2mfX0UJzqmk=) 12: zo7mxq2v2o0aNKJKvVs8XzMAoSo.roa (hash: hDK25txovgb427j58Xr748zftbcgjP77JZ1VaXHts3o=) Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/b1/7703ef-2422-437c-b93d-595e0bf5c613/1/MmN4f9D5SzeBPu8WvIE3Qj7j_vM.crl rsync://rpki.ripe.net/repository/DEFAULT/b1/7703ef-2422-437c-b93d-595e0bf5c613/1/MmN4f9D5SzeBPu8WvIE3Qj7j_vM.mft rsync://rpki.ripe.net/repository/DEFAULT/MmN4f9D5SzeBPu8WvIE3Qj7j_vM.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Wed 05 Nov 2025 07:00:52 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9a:4d:ab:21:a5:18:68:46:05:f3:51:c3:9a:44:10:b4:d4 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=3263787fd0f94b37813eef16bc8137423ee3fef3 Validity Not Before: Nov 4 07:00:52 2025 GMT Not After : Nov 5 07:00:52 2025 GMT Subject: CN=81894b253238509e97b1520ab031dc6ccea44c55 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:93:c5:dd:5f:3b:94:5e:08:c3:be:85:f2:e8:27: 38:91:19:26:09:11:3b:21:d3:a6:3e:86:0b:e4:ca: 5a:4b:82:f6:32:2f:b8:6f:90:39:73:60:da:8c:31: 73:ba:be:8e:f6:26:f1:d0:44:b0:94:a1:be:cb:46: 6b:c6:b3:9f:d4:dd:00:72:42:a2:dc:bb:33:44:32: 71:8d:32:24:d3:90:c9:39:15:38:3e:d0:f3:14:56: b8:18:91:f0:c7:a4:35:17:af:ee:d2:05:2c:5f:3b: 89:7e:38:53:24:d8:3e:cb:3a:d6:34:c6:cb:f9:bb: 89:ba:a1:59:5e:33:ef:2b:a1:20:12:6e:2b:1d:0f: 9d:ff:8a:29:0d:91:c9:88:c3:d6:9f:4e:c0:b8:27: 71:48:db:6d:58:97:47:75:7a:70:7a:ac:09:2f:fc: f2:9b:b9:40:65:e0:47:ea:3b:03:1d:30:54:ee:4c: 5d:15:89:b2:cc:77:ed:ca:99:e5:8d:6f:82:a9:a0: 3b:27:9c:a9:05:94:66:a5:14:c8:94:c9:86:a0:47: ab:62:70:ff:11:56:fa:2d:9e:cd:d8:01:07:92:e0: 24:53:07:04:0f:89:51:c1:7e:bd:e2:12:71:33:17: a0:cb:e5:48:db:af:51:38:cd:ef:a1:0f:cd:5d:33: 12:7f Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 81:89:4B:25:32:38:50:9E:97:B1:52:0A:B0:31:DC:6C:CE:A4:4C:55 X509v3 Authority Key Identifier: keyid:32:63:78:7F:D0:F9:4B:37:81:3E:EF:16:BC:81:37:42:3E:E3:FE:F3 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/MmN4f9D5SzeBPu8WvIE3Qj7j_vM.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/b1/7703ef-2422-437c-b93d-595e0bf5c613/1/MmN4f9D5SzeBPu8WvIE3Qj7j_vM.mft X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/b1/7703ef-2422-437c-b93d-595e0bf5c613/1/MmN4f9D5SzeBPu8WvIE3Qj7j_vM.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 52:4c:5f:f9:82:a0:9b:78:f5:b2:bc:9f:70:16:21:e3:a6:33: ab:b7:b0:62:fc:4c:14:ac:b9:66:2f:98:ce:17:6a:45:a3:a8: 0e:8f:55:24:6b:75:e3:b3:ec:55:e5:54:d5:69:1c:6e:64:a6: e4:b7:68:1a:c9:5f:5a:70:fd:a7:55:71:2c:29:76:a4:07:56: 5c:7f:c8:4d:a0:a3:ee:25:be:fa:5c:95:e6:c4:ab:db:5a:31: b1:c3:4d:dd:04:64:ef:58:d0:b6:94:c8:25:ae:df:a9:c2:cc: b3:13:98:0e:dd:3a:13:2f:4e:57:d4:ed:ee:a2:30:f1:63:72: e7:25:8b:87:1c:ce:71:c6:72:75:82:f6:26:ea:df:02:23:7f: 60:1f:46:6e:b2:a1:aa:0b:60:fb:c2:b9:67:dd:c1:ab:6e:9f: b9:fc:10:67:90:6d:c1:d5:45:5c:0e:8b:d4:d6:08:60:a4:6e: 2d:79:86:c0:b7:c1:b6:4a:72:7e:b8:ca:5b:3d:fc:68:ae:77: 79:7f:1c:7c:7e:14:4f:ab:7b:66:38:15:1d:e2:ac:49:2e:d3: c7:24:92:e1:86:7e:93:30:d7:0f:e3:2c:d7:2e:ad:b1:ce:9d: db:8b:85:2c:6a:c8:4b:8f:70:18:c9:06:f0:4a:62:79:75:2c: b4:80:63:ed -----BEGIN CERTIFICATE----- MIIFFjCCA/6gAwIBAgISAZpNqyGlGGhGBfNRw5pEELTUMA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKDMyNjM3ODdmZDBmOTRiMzc4MTNlZWYxNmJjODEzNzQyM2Vl M2ZlZjMwHhcNMjUxMTA0MDcwMDUyWhcNMjUxMTA1MDcwMDUyWjAzMTEwLwYDVQQD Eyg4MTg5NGIyNTMyMzg1MDllOTdiMTUyMGFiMDMxZGM2Y2NlYTQ0YzU1MIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAk8XdXzuUXgjDvoXy6Cc4kRkmCRE7 IdOmPoYL5MpaS4L2Mi+4b5A5c2DajDFzur6O9ibx0ESwlKG+y0ZrxrOf1N0AckKi 3LszRDJxjTIk05DJORU4PtDzFFa4GJHwx6Q1F6/u0gUsXzuJfjhTJNg+yzrWNMbL +buJuqFZXjPvK6EgEm4rHQ+d/4opDZHJiMPWn07AuCdxSNttWJdHdXpweqwJL/zy m7lAZeBH6jsDHTBU7kxdFYmyzHftypnljW+CqaA7J5ypBZRmpRTIlMmGoEerYnD/ EVb6LZ7N2AEHkuAkUwcED4lRwX694hJxMxegy+VI269ROM3voQ/NXTMSfwIDAQAB o4ICIjCCAh4wHQYDVR0OBBYEFIGJSyUyOFCel7FSCrAx3GzOpExVMB8GA1UdIwQY MBaAFDJjeH/Q+Us3gT7vFryBN0I+4/7zMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvTW1ONGY5RDVTemVCUHU4V3ZJRTNRajdqX3ZNLmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC9iMS83NzAzZWYtMjQyMi00MzdjLWI5M2Qt NTk1ZTBiZjVjNjEzLzEvTW1ONGY5RDVTemVCUHU4V3ZJRTNRajdqX3ZNLm1mdDCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC9iMS83NzAzZWYtMjQyMi00MzdjLWI5M2QtNTk1ZTBiZjVjNjEz LzEvTW1ONGY5RDVTemVCUHU4V3ZJRTNRajdqX3ZNLmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAUkxf+YKg m3j1sryfcBYh46Yzq7ewYvxMFKy5Zi+YzhdqRaOoDo9VJGt147PsVeVU1WkcbmSm 5LdoGslfWnD9p1VxLCl2pAdWXH/ITaCj7iW++lyV5sSr21oxscNN3QRk71jQtpTI Ja7fqcLMsxOYDt06Ey9OV9Tt7qIw8WNy5yWLhxzOccZydYL2JurfAiN/YB9GbrKh qgtg+8K5Z93Bq26fufwQZ5BtwdVFXA6L1NYIYKRuLXmGwLfBtkpyfrjKWz38aK53 eX8cfH4UT6t7ZjgVHeKsSS7TxySS4YZ+kzDXD+Ms1y6tsc6d24uFLGrIS49wGMkG 8EpieXUstIBj7Q== -----END CERTIFICATE-----Generated at Tue Nov 4 14:55:33 2025 by rpki-client