$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/bb/32109e-24c9-4c88-a8e8-fdf6638d2c04/1/a8XefXJVt9WCYMZaEgsWTvEO-QM.mft File: a8XefXJVt9WCYMZaEgsWTvEO-QM.mft (raw, json) Hash identifier: dm213V2ssaHoSVKVRLqpmT3yCYS2jRFFwSIdIH8K9/g= Subject key identifier: AE:5E:1D:40:85:34:F7:A5:2C:4A:CF:13:47:85:A3:C6:81:59:FA:83 Authority key identifier: 6B:C5:DE:7D:72:55:B7:D5:82:60:C6:5A:12:0B:16:4E:F1:0E:F9:03 Certificate issuer: /CN=6bc5de7d7255b7d58260c65a120b164ef10ef903 Certificate serial: 019A52D1167FD50D808DE124561748071512 Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/a8XefXJVt9WCYMZaEgsWTvEO-QM.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/bb/32109e-24c9-4c88-a8e8-fdf6638d2c04/1/a8XefXJVt9WCYMZaEgsWTvEO-QM.mft Manifest number: 16EB Signing time: Wed 05 Nov 2025 07:00:25 +0000 Manifest this update: Wed 05 Nov 2025 07:00:25 +0000 Manifest next update: Thu 06 Nov 2025 07:00:25 +0000 Files and hashes: 1: 12ToQcSPt7mcdwlwu8cks0_4omc.roa (hash: Iyr2cE2tf2K+xaBK2dhfD2MWZhPJHAOvhdyF3JqR+/g=) 2: 2sbBAO7ATxHzEchFAB6gArPRZZY.roa (hash: UDJGL7lU9D2x+NFmBhQK2JHOpnmQvd/reJ4wMgvIZq8=) 3: 5ZYhCNxqOm04hmY0BhngKxN9rig.roa (hash: 83J35QD4/t+gUfggZnoS3qCNRY62Cfjrx/Jm442KIdY=) 4: CnBdxPcv8KTrt5XMCJCPewVSZRg.roa (hash: HTGJ4pleXKotSI8qqw3gOs/mMqVAW43VM+27Wir5axs=) 5: DNFKKqPzY2tTxyq4ZF-e6ESwWBk.roa (hash: ONyXaG/qy9WX6Bit7PbMeuasymNM8i3asJe1STaYw+o=) 6: HQby7lGCxVhcsYrFBxtLvu1Nq1s.roa (hash: OEoyOXMuUI9gzJHQlRaFw5QR3hyZ9zizJ0Zhg109soQ=) 7: KEB7URRNcLIkdHFl8_NaQFzoCUc.roa (hash: 8o0J9qbfKon/Y8q8sQm0uMymQ1kVnwb8u5ia9INGr/U=) 8: RVuh9Ovnia6HGIxuY5C4mqQkVzw.roa (hash: 7MdQXOdkGadK2Vo4n1LYddNyvg9R887clmJN5QnKDO0=) 9: _4iJCnTkrZTLi3Znw6No51nUp0U.roa (hash: q5ypixYuURsWaauidvKopOxQLyMvMh9Ff8agaEGE8Z8=) 10: a8XefXJVt9WCYMZaEgsWTvEO-QM.crl (hash: UocAM9Qs4DamVcX5sTfxkVs/zdBxfYPOsAjAAEtsBiM=) 11: egyYxAR3bwmsGgeknwOtvs63Vmw.roa (hash: XurIkmwZSfSrHBi1j2SOabRmxdimDBrxAVpSXYwSmK8=) 12: gCwZCj5y4eEHhiE3OdNG143EtPw.roa (hash: bJxdVgp0WUK1yUG+3MFHdMNTBJUCc3SJjDGJmr3bN5s=) 13: kWxL8-0FaQ5asnDLfivzWKH4-z8.roa (hash: aTbkIB4IPS1IGAIXN2uxEpuYorOcI3bZmMM6X6TsyjM=) Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/bb/32109e-24c9-4c88-a8e8-fdf6638d2c04/1/a8XefXJVt9WCYMZaEgsWTvEO-QM.crl rsync://rpki.ripe.net/repository/DEFAULT/bb/32109e-24c9-4c88-a8e8-fdf6638d2c04/1/a8XefXJVt9WCYMZaEgsWTvEO-QM.mft rsync://rpki.ripe.net/repository/DEFAULT/a8XefXJVt9WCYMZaEgsWTvEO-QM.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Thu 06 Nov 2025 03:00:03 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9a:52:d1:16:7f:d5:0d:80:8d:e1:24:56:17:48:07:15:12 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=6bc5de7d7255b7d58260c65a120b164ef10ef903 Validity Not Before: Nov 5 07:00:25 2025 GMT Not After : Nov 6 07:00:25 2025 GMT Subject: CN=ae5e1d408534f7a52c4acf134785a3c68159fa83 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:c0:02:a7:4e:21:f4:7b:3e:9c:49:eb:0b:17:ba: 34:94:c7:40:d1:12:6d:d6:8b:7a:ba:0e:69:15:4b: 0f:7a:04:59:30:bb:4d:19:49:e7:0b:bc:c0:0a:6d: 98:f7:b9:18:ce:bb:ef:27:f1:87:df:f4:20:80:22: ef:c9:aa:ee:36:95:93:dd:39:64:c9:66:38:dc:a3: 44:8c:07:2c:cd:f2:10:e5:68:82:98:b0:8a:f7:fe: e4:42:43:00:31:b8:89:f9:f4:0d:0f:4f:e3:8d:b4: 66:a8:fc:e6:ba:87:be:53:d9:55:ec:5b:56:65:2b: bd:c0:6d:3a:19:91:b0:12:7b:d7:7e:d2:33:5f:78: 5b:31:7c:ce:64:87:ab:77:42:b1:71:5f:ad:dc:76: 4f:12:22:23:56:15:56:99:10:69:a9:50:b9:44:21: 91:9e:59:72:6a:33:64:5e:ba:d7:6e:77:a7:6e:b5: 12:2e:22:5a:59:80:47:b3:d0:f8:25:93:d4:1b:98: 4e:0d:35:e8:fa:81:25:db:2d:73:71:b2:62:26:c2: 91:9a:a1:67:30:9f:29:2b:ee:1d:e2:4e:46:02:35: 2e:a9:dd:00:95:3f:0e:88:8f:9d:93:bb:eb:93:3b: 66:fe:fb:aa:26:77:8f:ae:3b:87:f5:47:20:32:4b: c1:63 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: AE:5E:1D:40:85:34:F7:A5:2C:4A:CF:13:47:85:A3:C6:81:59:FA:83 X509v3 Authority Key Identifier: keyid:6B:C5:DE:7D:72:55:B7:D5:82:60:C6:5A:12:0B:16:4E:F1:0E:F9:03 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/a8XefXJVt9WCYMZaEgsWTvEO-QM.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/bb/32109e-24c9-4c88-a8e8-fdf6638d2c04/1/a8XefXJVt9WCYMZaEgsWTvEO-QM.mft X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/bb/32109e-24c9-4c88-a8e8-fdf6638d2c04/1/a8XefXJVt9WCYMZaEgsWTvEO-QM.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 12:9b:2c:cd:a3:3f:dc:8a:e3:a8:78:f6:33:3c:f4:27:ca:98: 45:4e:98:c9:fb:db:ca:85:79:7f:00:ed:da:ad:49:9a:2c:50: 42:f8:0b:b0:78:22:4d:48:f1:1a:9b:11:20:37:d8:f7:87:90: cf:e7:4b:d8:6e:1b:ff:ba:69:2f:44:20:c8:db:82:df:01:da: 9d:7c:d5:a4:18:e2:52:1c:20:c1:07:a1:9f:5e:d3:0f:0d:2c: cb:31:97:d8:0b:46:66:18:84:e0:14:78:23:63:10:f4:06:84: ad:c9:cd:60:05:d4:f5:8b:ca:54:b5:b4:5e:d1:ec:b5:1a:54: 9e:58:9a:a1:50:40:37:48:72:33:5f:e9:0f:e6:e1:af:f2:84: f8:9e:2c:1c:93:5f:d1:44:9d:35:6a:7e:67:a0:7a:22:82:c4: 5f:d0:2d:a1:e9:0e:dd:62:b4:da:d9:0b:67:a7:26:1f:6a:dc: 7f:f5:e5:05:6c:76:52:5e:a0:7e:c5:99:57:a3:24:db:ad:54: 6f:ba:d8:76:6e:09:0f:a3:3b:9e:06:04:ee:a7:ba:32:1f:13: cb:aa:2d:20:bd:ed:f8:76:c1:3b:1a:0a:22:19:c7:dd:28:ea: 0e:e5:f7:b6:42:be:b1:d5:01:6f:2e:a8:ea:f5:d3:48:39:dc: d6:40:7b:09 -----BEGIN CERTIFICATE----- MIIFFjCCA/6gAwIBAgISAZpS0RZ/1Q2AjeEkVhdIBxUSMA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKDZiYzVkZTdkNzI1NWI3ZDU4MjYwYzY1YTEyMGIxNjRlZjEw ZWY5MDMwHhcNMjUxMTA1MDcwMDI1WhcNMjUxMTA2MDcwMDI1WjAzMTEwLwYDVQQD EyhhZTVlMWQ0MDg1MzRmN2E1MmM0YWNmMTM0Nzg1YTNjNjgxNTlmYTgzMIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAwAKnTiH0ez6cSesLF7o0lMdA0RJt 1ot6ug5pFUsPegRZMLtNGUnnC7zACm2Y97kYzrvvJ/GH3/QggCLvyaruNpWT3Tlk yWY43KNEjAcszfIQ5WiCmLCK9/7kQkMAMbiJ+fQND0/jjbRmqPzmuoe+U9lV7FtW ZSu9wG06GZGwEnvXftIzX3hbMXzOZIerd0KxcV+t3HZPEiIjVhVWmRBpqVC5RCGR nllyajNkXrrXbnenbrUSLiJaWYBHs9D4JZPUG5hODTXo+oEl2y1zcbJiJsKRmqFn MJ8pK+4d4k5GAjUuqd0AlT8OiI+dk7vrkztm/vuqJnePrjuH9UcgMkvBYwIDAQAB o4ICIjCCAh4wHQYDVR0OBBYEFK5eHUCFNPelLErPE0eFo8aBWfqDMB8GA1UdIwQY MBaAFGvF3n1yVbfVgmDGWhILFk7xDvkDMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvYThYZWZYSlZ0OVdDWU1aYUVnc1dUdkVPLVFNLmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC9iYi8zMjEwOWUtMjRjOS00Yzg4LWE4ZTgt ZmRmNjYzOGQyYzA0LzEvYThYZWZYSlZ0OVdDWU1aYUVnc1dUdkVPLVFNLm1mdDCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC9iYi8zMjEwOWUtMjRjOS00Yzg4LWE4ZTgtZmRmNjYzOGQyYzA0 LzEvYThYZWZYSlZ0OVdDWU1aYUVnc1dUdkVPLVFNLmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAEpsszaM/ 3IrjqHj2Mzz0J8qYRU6YyfvbyoV5fwDt2q1JmixQQvgLsHgiTUjxGpsRIDfY94eQ z+dL2G4b/7ppL0QgyNuC3wHanXzVpBjiUhwgwQehn17TDw0syzGX2AtGZhiE4BR4 I2MQ9AaErcnNYAXU9YvKVLW0XtHstRpUnliaoVBAN0hyM1/pD+bhr/KE+J4sHJNf 0USdNWp+Z6B6IoLEX9AtoekO3WK02tkLZ6cmH2rcf/XlBWx2Ul6gfsWZV6Mk261U b7rYdm4JD6M7ngYE7qe6Mh8Ty6otIL3t+HbBOxoKIhnH3SjqDuX3tkK+sdUBby6o 6vXTSDnc1kB7CQ== -----END CERTIFICATE-----Generated at Wed Nov 5 08:50:13 2025 by rpki-client