$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/b8/4f6985-b94a-47cc-a300-6f2cf4f03ceb/1/2x1uukY7dWSr-uk4tG7UcYfeDsA.mft File: 2x1uukY7dWSr-uk4tG7UcYfeDsA.mft (raw, json) Hash identifier: CkIUQQiFNkUEeoYOFz1hQhQxH9YRYL5Bewgq0IGWd2c= Subject key identifier: EC:B5:B9:D8:1A:BF:1D:10:7F:2B:DC:7E:61:50:B7:D2:39:A7:58:87 Authority key identifier: DB:1D:6E:BA:46:3B:75:64:AB:FA:E9:38:B4:6E:D4:71:87:DE:0E:C0 Certificate issuer: /CN=db1d6eba463b7564abfae938b46ed47187de0ec0 Certificate serial: 019A4EF54842BFC47B4BC393C48BB8DA1D79 Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/2x1uukY7dWSr-uk4tG7UcYfeDsA.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/b8/4f6985-b94a-47cc-a300-6f2cf4f03ceb/1/2x1uukY7dWSr-uk4tG7UcYfeDsA.mft Manifest number: 0A30 Signing time: Tue 04 Nov 2025 13:01:28 +0000 Manifest this update: Tue 04 Nov 2025 13:01:28 +0000 Manifest next update: Wed 05 Nov 2025 13:01:28 +0000 Files and hashes: 1: 2x1uukY7dWSr-uk4tG7UcYfeDsA.crl (hash: Rzdg8s5HCLFDe+WFpwHZFjjAs6aaY4p25WUVYzRRd2M=) 2: 6UnLf-WfoW9sr8JO9S3jMv6qGIA.roa (hash: 2bd+YNQSpktsNSy1cZJWllJsfSQnRwhxzclMAXA57Ro=) 3: 87iBXWDpSIwRDGkwc7K8UhWgGyI.roa (hash: GnB7PMQFypZjuArzdsmg92AtM/uSLFw3faYH5HVQkIw=) 4: GCvMpFjTox7n5FmOa5IgrXeN2Mo.roa (hash: Y53wvi3S7ITug5cC6QdZKUB+NY5xkHHiQyyYmB7inpo=) 5: GxPqJ9WQ-DKd_9ctcg8-12jFGZ0.roa (hash: KATN8CFnbRX1tzVerM2G5h88BqUwwD5kvjL2DX0FIcw=) 6: MKXJ66CRttluCaD2As6acb3eAwI.roa (hash: A1bSrmMEPbiNQFfUVIkOSltYihJGIH6EUwYcLxbC5P4=) 7: cHT0qzGhhZWWUdosb7dz_r29LkI.roa (hash: LL8UCKvFFQoG00GXqpjxb1DBAQ64iWVLzPMwKvO00IA=) 8: gr1d5o3sHGA3VWu-8KVK6b7UyM4.roa (hash: GHLuG9O5AVwW61aYh11UvqNMmcEewfjv/mRXgyvZ4yg=) 9: meKHpovGdB4bkHh1XXR1ExLPB-w.roa (hash: fUS6khGidxNfptHJmzXmdTQGgfqFk4mALBHny815Klg=) 10: nPeZE7NjK8v1X9W6OWWQV8CL9dk.roa (hash: i5DQUMA7TTXDg8w9uPAc9gbe3ID2PYonRIJFljEMgcM=) Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/b8/4f6985-b94a-47cc-a300-6f2cf4f03ceb/1/2x1uukY7dWSr-uk4tG7UcYfeDsA.crl rsync://rpki.ripe.net/repository/DEFAULT/b8/4f6985-b94a-47cc-a300-6f2cf4f03ceb/1/2x1uukY7dWSr-uk4tG7UcYfeDsA.mft rsync://rpki.ripe.net/repository/DEFAULT/2x1uukY7dWSr-uk4tG7UcYfeDsA.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Wed 05 Nov 2025 09:00:03 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9a:4e:f5:48:42:bf:c4:7b:4b:c3:93:c4:8b:b8:da:1d:79 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=db1d6eba463b7564abfae938b46ed47187de0ec0 Validity Not Before: Nov 4 13:01:28 2025 GMT Not After : Nov 5 13:01:28 2025 GMT Subject: CN=ecb5b9d81abf1d107f2bdc7e6150b7d239a75887 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:95:21:d5:f5:90:4d:c6:a9:d3:76:5a:e4:3d:c2: ce:e0:27:2b:4f:32:45:a1:c7:f3:1c:00:ea:02:e3: b9:9c:29:74:ba:1c:67:5e:d0:a9:19:47:62:f9:8c: a5:62:09:c7:13:50:cf:58:1a:02:a4:1c:0e:d8:0c: a0:31:1c:6c:f4:5a:0d:d5:96:f8:bd:fe:bb:b1:80: 70:66:71:e8:57:64:86:77:77:32:ea:3d:2c:3b:c4: 75:39:f2:d9:48:a1:03:ef:08:51:c1:63:c8:cb:fe: 45:da:15:e0:54:54:a4:76:49:ad:04:3b:f3:9a:c7: 86:42:72:68:86:f3:b9:a6:10:72:b6:a3:9b:45:57: 39:b0:0c:91:5c:c6:67:7d:f5:85:98:ec:f4:b0:3e: 71:31:fc:6c:48:dc:31:9c:57:78:ee:aa:4b:9d:6b: b0:d2:da:56:4b:b6:1f:46:54:e6:a3:62:a6:db:09: e3:e2:5d:54:2f:2b:5b:e5:5d:27:7e:ba:e2:dc:2f: eb:27:9e:05:69:f0:ea:17:e7:90:0c:81:c7:a0:1c: 32:f3:cd:be:16:f1:2a:14:73:3b:b9:7c:2a:3e:87: 60:d9:13:8e:83:b5:e8:df:4f:81:48:fd:64:ad:02: 3d:3c:62:e9:d6:85:3a:91:db:b4:99:bf:36:67:ee: f3:3b Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: EC:B5:B9:D8:1A:BF:1D:10:7F:2B:DC:7E:61:50:B7:D2:39:A7:58:87 X509v3 Authority Key Identifier: keyid:DB:1D:6E:BA:46:3B:75:64:AB:FA:E9:38:B4:6E:D4:71:87:DE:0E:C0 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/2x1uukY7dWSr-uk4tG7UcYfeDsA.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/b8/4f6985-b94a-47cc-a300-6f2cf4f03ceb/1/2x1uukY7dWSr-uk4tG7UcYfeDsA.mft X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/b8/4f6985-b94a-47cc-a300-6f2cf4f03ceb/1/2x1uukY7dWSr-uk4tG7UcYfeDsA.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption b8:81:26:5a:00:30:98:bf:c8:77:0d:f0:d1:1b:c1:11:d3:82: 86:65:cb:56:1d:6d:92:21:ed:48:6d:17:b9:88:65:d6:a7:76: 6a:61:8d:69:b9:1f:cc:02:4e:6e:1b:0c:11:8d:3e:4a:a5:da: 70:5a:74:b2:ea:c0:8d:03:2f:cb:80:9b:ba:94:6b:01:11:e3: 76:94:7c:17:69:c0:ed:31:c9:db:bb:1b:b1:9f:11:92:58:5f: 7f:cf:15:da:f0:3e:82:6e:bb:d2:53:8a:6b:ac:d3:a8:0d:33: 87:45:42:db:84:26:2d:4c:5b:46:1b:bf:ba:ce:90:99:7e:f5: 71:65:b7:d3:f4:a6:8f:aa:12:24:ab:e6:0e:9a:ba:df:6b:aa: b9:8a:6f:f1:4e:8c:7a:44:8d:3e:80:0e:ed:72:e3:c5:b1:00: 21:9d:3c:aa:bc:16:eb:0e:ee:de:59:db:7c:34:41:00:db:0e: fa:1a:79:b8:66:ea:f0:a1:98:45:75:50:bc:80:3e:63:07:5e: 03:62:4e:a1:3d:64:11:0d:e6:d3:48:6a:dd:ac:30:70:15:6c: 33:de:3c:30:19:35:39:2a:de:74:c8:3f:62:ad:d5:09:5b:91: 4a:71:ba:e2:5b:c9:dc:f2:b8:2b:8e:65:22:a0:2c:6d:d9:e4: 5e:12:45:27 -----BEGIN CERTIFICATE----- MIIFFjCCA/6gAwIBAgISAZpO9UhCv8R7S8OTxIu42h15MA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKGRiMWQ2ZWJhNDYzYjc1NjRhYmZhZTkzOGI0NmVkNDcxODdk ZTBlYzAwHhcNMjUxMTA0MTMwMTI4WhcNMjUxMTA1MTMwMTI4WjAzMTEwLwYDVQQD EyhlY2I1YjlkODFhYmYxZDEwN2YyYmRjN2U2MTUwYjdkMjM5YTc1ODg3MIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAlSHV9ZBNxqnTdlrkPcLO4CcrTzJF ocfzHADqAuO5nCl0uhxnXtCpGUdi+YylYgnHE1DPWBoCpBwO2AygMRxs9FoN1Zb4 vf67sYBwZnHoV2SGd3cy6j0sO8R1OfLZSKED7whRwWPIy/5F2hXgVFSkdkmtBDvz mseGQnJohvO5phBytqObRVc5sAyRXMZnffWFmOz0sD5xMfxsSNwxnFd47qpLnWuw 0tpWS7YfRlTmo2Km2wnj4l1ULytb5V0nfrri3C/rJ54FafDqF+eQDIHHoBwy882+ FvEqFHM7uXwqPodg2ROOg7Xo30+BSP1krQI9PGLp1oU6kdu0mb82Z+7zOwIDAQAB o4ICIjCCAh4wHQYDVR0OBBYEFOy1udgavx0QfyvcfmFQt9I5p1iHMB8GA1UdIwQY MBaAFNsdbrpGO3Vkq/rpOLRu1HGH3g7AMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvMngxdXVrWTdkV1NyLXVrNHRHN1VjWWZlRHNBLmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC9iOC80ZjY5ODUtYjk0YS00N2NjLWEzMDAt NmYyY2Y0ZjAzY2ViLzEvMngxdXVrWTdkV1NyLXVrNHRHN1VjWWZlRHNBLm1mdDCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC9iOC80ZjY5ODUtYjk0YS00N2NjLWEzMDAtNmYyY2Y0ZjAzY2Vi LzEvMngxdXVrWTdkV1NyLXVrNHRHN1VjWWZlRHNBLmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAuIEmWgAw mL/Idw3w0RvBEdOChmXLVh1tkiHtSG0XuYhl1qd2amGNabkfzAJObhsMEY0+SqXa cFp0surAjQMvy4CbupRrARHjdpR8F2nA7THJ27sbsZ8Rklhff88V2vA+gm670lOK a6zTqA0zh0VC24QmLUxbRhu/us6QmX71cWW30/Smj6oSJKvmDpq632uquYpv8U6M ekSNPoAO7XLjxbEAIZ08qrwW6w7u3lnbfDRBANsO+hp5uGbq8KGYRXVQvIA+Ywde A2JOoT1kEQ3m00hq3awwcBVsM948MBk1OSredMg/Yq3VCVuRSnG64lvJ3PK4K45l IqAsbdnkXhJFJw== -----END CERTIFICATE-----Generated at Tue Nov 4 14:42:02 2025 by rpki-client