$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/b8/db1aca-2659-42a3-a631-9a1295f02f2e/1/c_mGx3Bb2AjBsC69dU-_qRgH6bY.mft File: c_mGx3Bb2AjBsC69dU-_qRgH6bY.mft (raw, json) Hash identifier: kVINHmw/migBt2J9onrnupfm0Nvbjq1MmU9trp7LVYM= Subject key identifier: C4:E8:39:3C:16:E6:CC:DA:BB:4C:91:04:DF:D7:76:34:80:FC:19:32 Authority key identifier: 73:F9:86:C7:70:5B:D8:08:C1:B0:2E:BD:75:4F:BF:A9:18:07:E9:B6 Certificate issuer: /CN=73f986c7705bd808c1b02ebd754fbfa91807e9b6 Certificate serial: 019A4E18B8BDA478DB9550F6C44F5760A401 Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/c_mGx3Bb2AjBsC69dU-_qRgH6bY.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/b8/db1aca-2659-42a3-a631-9a1295f02f2e/1/c_mGx3Bb2AjBsC69dU-_qRgH6bY.mft Manifest number: 1715 Signing time: Tue 04 Nov 2025 09:00:34 +0000 Manifest this update: Tue 04 Nov 2025 09:00:34 +0000 Manifest next update: Wed 05 Nov 2025 09:00:34 +0000 Files and hashes: 1: 0PiYBdxARRXjKJ5FesVWJAu_FMA.roa (hash: w4vAM6MoKtVTj5z9YUnQQ55u8WtiSlBeHs3CzkimFHA=) 2: DKpd0FWoSa9JOhnTSUeOAHEojFQ.roa (hash: pJjsYkDAabv/EkTWBVq7tQJ2cKhCWbGhb3faDIO/OsQ=) 3: GqOUJDMk-IFQdrsD-fU9eu4Qyek.roa (hash: pmdKsVvhyhUrb6RefnEOlCVulb4+abNUam2FCZO1InY=) 4: a-p1UhUt4t3M5odJCGB7R5m1rzM.roa (hash: 2U39CobRw9KssePwQXfRPFLNg8MC7aWq6D0bgHVvK7A=) 5: c_mGx3Bb2AjBsC69dU-_qRgH6bY.crl (hash: wBmTH7GWnP9WoNJtYfNfpOXYVNnBR7duNRBgTe3aIGE=) 6: f0HMDLVx5t59P591PrAxrNnUs2c.roa (hash: /wxFlOgstgeKK54T7FynNE0uD4UjWWlnpZIecJhWOqM=) 7: h4W-VjJcy1QFeMUrhU0dF3Ixqa0.roa (hash: 5B5X7otDiidFA+PB/Jg+nfAWrr9IuoZCHyarTdrsmt0=) 8: jdGQJIZnkRjBDTTHnu0krS57iP8.roa (hash: e+2axTWyygbixhenSw9GiW7DCvps0Y82zf10NziEjRo=) 9: xyxr3pfItv9o4W3QbYDO6voIQ0Q.roa (hash: 8cnzmry/1ExM44UYvG1JFsqTRR1vf8KTHcvSzmwD5MY=) 10: yDomHUFVSb_vaV7A7wWb5nAhjlc.roa (hash: yYYELV3m9YlCfoig7ujzEpQib6RUtY2OkBAFEppcwPU=) Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/b8/db1aca-2659-42a3-a631-9a1295f02f2e/1/c_mGx3Bb2AjBsC69dU-_qRgH6bY.crl rsync://rpki.ripe.net/repository/DEFAULT/b8/db1aca-2659-42a3-a631-9a1295f02f2e/1/c_mGx3Bb2AjBsC69dU-_qRgH6bY.mft rsync://rpki.ripe.net/repository/DEFAULT/c_mGx3Bb2AjBsC69dU-_qRgH6bY.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Wed 05 Nov 2025 09:00:03 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9a:4e:18:b8:bd:a4:78:db:95:50:f6:c4:4f:57:60:a4:01 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=73f986c7705bd808c1b02ebd754fbfa91807e9b6 Validity Not Before: Nov 4 09:00:34 2025 GMT Not After : Nov 5 09:00:34 2025 GMT Subject: CN=c4e8393c16e6ccdabb4c9104dfd7763480fc1932 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:af:29:8d:3d:b1:23:26:b3:5a:84:38:57:db:d6: 09:27:e7:0c:7b:53:ab:67:ac:a8:56:fa:39:7f:ca: 9b:a3:66:72:98:a6:71:5a:4d:58:89:22:0d:3b:e4: 91:42:d5:ba:7e:6a:63:60:8b:2d:fb:f5:4e:e2:2f: c2:e9:03:5b:5d:85:fc:a1:65:b9:66:d2:4b:24:e9: e2:22:d0:36:82:1f:00:10:f4:62:a6:71:dc:9d:35: 18:4b:dd:93:e4:a7:0d:1e:5b:4e:c6:37:06:4e:bd: 97:7e:1d:2d:b8:a3:82:37:e7:4b:2c:03:61:da:e5: 4c:fd:50:89:2e:a0:66:4c:06:8c:e1:fe:c2:73:78: 32:e9:98:1b:26:cd:98:f0:7e:01:ef:a9:6c:9f:02: d3:9d:f9:a2:82:08:f4:90:60:f1:cd:09:7f:49:76: 2e:40:b8:f1:fe:6d:cd:5b:bc:0d:f6:45:d1:8b:2e: 70:79:0e:c8:33:a1:29:19:34:8e:31:2a:d7:95:eb: f1:d8:ab:c6:7b:4e:21:b8:1a:c4:c9:d5:8d:bb:40: 0e:42:cd:ba:fa:0e:c5:d0:03:81:3e:a7:5b:8d:c9: 26:77:12:1a:71:9f:25:47:59:ad:50:b4:9c:9c:f8: 48:55:e6:9a:cc:99:cc:49:ec:33:be:b5:96:bd:ba: 37:05 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: C4:E8:39:3C:16:E6:CC:DA:BB:4C:91:04:DF:D7:76:34:80:FC:19:32 X509v3 Authority Key Identifier: keyid:73:F9:86:C7:70:5B:D8:08:C1:B0:2E:BD:75:4F:BF:A9:18:07:E9:B6 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/c_mGx3Bb2AjBsC69dU-_qRgH6bY.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/b8/db1aca-2659-42a3-a631-9a1295f02f2e/1/c_mGx3Bb2AjBsC69dU-_qRgH6bY.mft X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/b8/db1aca-2659-42a3-a631-9a1295f02f2e/1/c_mGx3Bb2AjBsC69dU-_qRgH6bY.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 91:f1:9a:5d:e8:92:dc:d1:e2:aa:41:a8:50:53:18:0b:60:ba: b3:de:01:97:d0:ac:d8:f3:ba:b1:58:36:e8:d7:78:97:d9:6f: e2:c5:b5:57:e4:90:81:31:93:d1:3b:ca:e9:64:50:6e:14:ec: 18:b4:2a:65:57:d3:01:e4:5a:1a:f6:bc:07:89:a2:5f:0c:df: 26:10:68:f4:24:cf:47:9b:b5:e0:23:1d:e7:97:b9:d7:ec:56: 8c:6b:43:68:e9:37:52:ee:06:f3:cb:b0:d8:fc:ef:3d:02:ef: 64:98:6a:6f:56:31:df:f4:28:a1:07:34:7a:70:73:2d:af:f2: 08:5a:a1:ff:3d:35:3a:22:50:38:1d:c8:73:cd:e8:1a:c6:04: 81:ca:20:62:5f:a3:04:85:9b:7f:4f:d6:74:b0:17:39:e8:5a: af:db:39:6a:94:89:ef:59:c6:8e:e5:d4:f2:72:8e:10:c6:de: 5e:a6:be:74:de:49:ea:ca:7c:a5:1d:4b:30:28:49:f9:77:e1: ee:10:b4:70:77:e7:6a:5a:ea:71:78:3e:2b:ab:a7:a7:e1:47: 59:e2:93:ba:ba:8d:aa:6f:91:2e:a7:ef:4d:31:4c:d7:01:6d: f0:e9:c7:8f:00:74:d8:96:a1:ca:60:17:18:89:49:d6:01:39: 82:57:40:7d -----BEGIN CERTIFICATE----- MIIFFjCCA/6gAwIBAgISAZpOGLi9pHjblVD2xE9XYKQBMA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKDczZjk4NmM3NzA1YmQ4MDhjMWIwMmViZDc1NGZiZmE5MTgw N2U5YjYwHhcNMjUxMTA0MDkwMDM0WhcNMjUxMTA1MDkwMDM0WjAzMTEwLwYDVQQD EyhjNGU4MzkzYzE2ZTZjY2RhYmI0YzkxMDRkZmQ3NzYzNDgwZmMxOTMyMIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEArymNPbEjJrNahDhX29YJJ+cMe1Or Z6yoVvo5f8qbo2ZymKZxWk1YiSINO+SRQtW6fmpjYIst+/VO4i/C6QNbXYX8oWW5 ZtJLJOniItA2gh8AEPRipnHcnTUYS92T5KcNHltOxjcGTr2Xfh0tuKOCN+dLLANh 2uVM/VCJLqBmTAaM4f7Cc3gy6ZgbJs2Y8H4B76lsnwLTnfmiggj0kGDxzQl/SXYu QLjx/m3NW7wN9kXRiy5weQ7IM6EpGTSOMSrXlevx2KvGe04huBrEydWNu0AOQs26 +g7F0AOBPqdbjckmdxIacZ8lR1mtULScnPhIVeaazJnMSewzvrWWvbo3BQIDAQAB o4ICIjCCAh4wHQYDVR0OBBYEFMToOTwW5szau0yRBN/XdjSA/BkyMB8GA1UdIwQY MBaAFHP5hsdwW9gIwbAuvXVPv6kYB+m2MA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvY19tR3gzQmIyQWpCc0M2OWRVLV9xUmdINmJZLmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC9iOC9kYjFhY2EtMjY1OS00MmEzLWE2MzEt OWExMjk1ZjAyZjJlLzEvY19tR3gzQmIyQWpCc0M2OWRVLV9xUmdINmJZLm1mdDCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC9iOC9kYjFhY2EtMjY1OS00MmEzLWE2MzEtOWExMjk1ZjAyZjJl LzEvY19tR3gzQmIyQWpCc0M2OWRVLV9xUmdINmJZLmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAkfGaXeiS 3NHiqkGoUFMYC2C6s94Bl9Cs2PO6sVg26Nd4l9lv4sW1V+SQgTGT0TvK6WRQbhTs GLQqZVfTAeRaGva8B4miXwzfJhBo9CTPR5u14CMd55e51+xWjGtDaOk3Uu4G88uw 2PzvPQLvZJhqb1Yx3/QooQc0enBzLa/yCFqh/z01OiJQOB3Ic83oGsYEgcogYl+j BIWbf0/WdLAXOehar9s5apSJ71nGjuXU8nKOEMbeXqa+dN5J6sp8pR1LMChJ+Xfh 7hC0cHfnalrqcXg+K6unp+FHWeKTurqNqm+RLqfvTTFM1wFt8OnHjwB02JahymAX GIlJ1gE5gldAfQ== -----END CERTIFICATE-----Generated at Tue Nov 4 18:16:57 2025 by rpki-client