$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/bb/b4b150-dbb8-465f-8155-e4419b64212e/1/8FIRKM9jSqavp-9S1THz_NVWKPk.mft File: 8FIRKM9jSqavp-9S1THz_NVWKPk.mft (raw, json) Hash identifier: Sg6OTrJeGENQ5gaw4t2I/8r/g8R/B87w6D1xMrJDFQI= Subject key identifier: D0:95:CF:AD:09:0D:CD:5D:F6:25:73:D5:AB:DC:07:E9:87:C0:4C:88 Authority key identifier: F0:52:11:28:CF:63:4A:A6:AF:A7:EF:52:D5:31:F3:FC:D5:56:28:F9 Certificate issuer: /CN=f0521128cf634aa6afa7ef52d531f3fcd55628f9 Certificate serial: 019A4EF48044C8A5DEA3AB602843DDB459FD Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/8FIRKM9jSqavp-9S1THz_NVWKPk.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/bb/b4b150-dbb8-465f-8155-e4419b64212e/1/8FIRKM9jSqavp-9S1THz_NVWKPk.mft Manifest number: 1716 Signing time: Tue 04 Nov 2025 13:00:37 +0000 Manifest this update: Tue 04 Nov 2025 13:00:37 +0000 Manifest next update: Wed 05 Nov 2025 13:00:37 +0000 Files and hashes: 1: 0vpioq7e7IBvU0f7txi-wExHAPw.roa (hash: lCvUWIuH8RdERCkztaN1NhfYOchJDmj9ywnhD1WG0qs=) 2: 1-t-clxlx4vHi76xBwGIh0Y5orug.roa (hash: WGphFqEzeHYQfivrVaHRtOvOzzhN/PDKxrZlm3FuIDA=) 3: 4CCEdgNV-fGWUC_aGHxQwbUsOKQ.roa (hash: zTRmkFZkHzwf+QYURy5/v5Sjyovq0HLSmOwtNQ48L/c=) 4: 8FIRKM9jSqavp-9S1THz_NVWKPk.crl (hash: nKtnvQbmpvg2qDd2TUVEzN2ahECc3D08ftltWW8H6EU=) 5: 9oOMh0CjqydkdSKEbK66nXXsu4E.roa (hash: qQJNJWud5A2R6q9LElC5WdsYynVdzga12kQWDH61mWo=) 6: AoQYABlbiRY1s0Gu3McHV58zrpk.roa (hash: 9zDAXKdytFg/3YwoUton7cniFW2Ja9ArE5tJ2skkn+c=) 7: OdGF_e17lYBOCmXmsk6hkXdf7b4.roa (hash: mFKHbPekFFY75D3Eu+1fU9mzEnOZ9+rJaeHup24zW3Q=) 8: PFyByii-LGzRSy90jiJ5mw1207A.roa (hash: gIS/3e5ejAqBGpUPti4f7RxoNdrem0KAE6vwjMubh3s=) 9: Qkq_75MjyviWe2NqgT_-Mwn9gnM.roa (hash: wJb9fi2vDIIR6voDYxFFRDUWuFkEQa98zP1PFmkzpXs=) 10: ScwFXX2rYjT7naQciVMaotJ-UfM.roa (hash: X8Vp96ZEvVObF+OkcOx9P04g9HBNU6my6Pc/b9LR72Y=) 11: rh7_88ku0NVEacOTg4kYRNyhUIs.roa (hash: Uz863y1lKUf+O+OGV8gNQDxIpi4RBI83I9R9FXt5Xp4=) 12: u37q8oxj6d2YnoBLY1VE3CqS2g0.roa (hash: QV9HVDjMgl4TBfOFPjFKF+CTfrUEm6XmvkI/fobJGaM=) Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/bb/b4b150-dbb8-465f-8155-e4419b64212e/1/8FIRKM9jSqavp-9S1THz_NVWKPk.crl rsync://rpki.ripe.net/repository/DEFAULT/bb/b4b150-dbb8-465f-8155-e4419b64212e/1/8FIRKM9jSqavp-9S1THz_NVWKPk.mft rsync://rpki.ripe.net/repository/DEFAULT/8FIRKM9jSqavp-9S1THz_NVWKPk.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Wed 05 Nov 2025 09:00:03 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9a:4e:f4:80:44:c8:a5:de:a3:ab:60:28:43:dd:b4:59:fd Signature Algorithm: sha256WithRSAEncryption Issuer: CN=f0521128cf634aa6afa7ef52d531f3fcd55628f9 Validity Not Before: Nov 4 13:00:37 2025 GMT Not After : Nov 5 13:00:37 2025 GMT Subject: CN=d095cfad090dcd5df62573d5abdc07e987c04c88 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:bd:b3:97:0c:9e:8d:cf:04:c7:51:9d:e5:b1:54: 39:15:1f:e5:60:82:fd:58:04:fe:88:5b:0b:cd:8b: 69:4a:8a:41:eb:4e:d6:3e:fd:7b:b6:7f:cf:8d:9b: 75:d4:19:fe:d0:41:56:02:59:22:6e:5d:ba:50:a8: 07:75:71:67:d2:ac:32:c6:ea:85:ef:c6:04:2c:02: 59:ee:f6:a3:ec:e4:de:34:41:13:18:8b:c0:78:0f: 1b:76:2a:68:63:99:b0:77:06:6f:2f:41:47:21:02: d9:e7:f9:f6:db:fb:51:cf:db:c3:0f:7e:71:02:da: 16:2b:11:47:25:12:9c:65:62:d2:e8:48:eb:ff:f8: 65:7d:07:55:aa:fd:97:6c:60:67:ad:bd:53:b5:38: eb:d2:06:3f:02:cf:27:3a:38:38:47:72:9a:39:48: ee:28:67:1f:96:32:97:c1:99:c9:c1:6b:8a:8d:42: a8:0d:83:83:1b:8c:8d:d0:a6:ca:70:0a:41:c4:3a: 6c:6b:87:c2:1d:b3:f4:26:c1:e6:c5:02:20:f8:a4: 23:34:39:16:4c:c7:d9:3f:5b:c8:7e:c0:d7:97:8c: 6c:25:23:27:bd:1b:07:38:2e:1b:82:3a:97:01:eb: 2f:a1:7a:ee:41:4f:ec:e9:07:b6:18:03:5c:f7:fb: 23:b9 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: D0:95:CF:AD:09:0D:CD:5D:F6:25:73:D5:AB:DC:07:E9:87:C0:4C:88 X509v3 Authority Key Identifier: keyid:F0:52:11:28:CF:63:4A:A6:AF:A7:EF:52:D5:31:F3:FC:D5:56:28:F9 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/8FIRKM9jSqavp-9S1THz_NVWKPk.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/bb/b4b150-dbb8-465f-8155-e4419b64212e/1/8FIRKM9jSqavp-9S1THz_NVWKPk.mft X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/bb/b4b150-dbb8-465f-8155-e4419b64212e/1/8FIRKM9jSqavp-9S1THz_NVWKPk.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 61:08:dc:e7:29:aa:b7:7c:06:54:bd:10:2d:22:4f:cd:8e:2c: 76:5e:e6:e9:0d:dd:b7:88:50:c9:fd:77:95:86:fa:6b:89:fe: 2b:3f:d2:0f:09:13:32:6e:77:f9:29:ec:9d:98:97:b1:64:fe: a7:74:24:d2:6b:aa:8a:8b:f6:4b:cd:c9:79:cc:30:45:98:4a: d8:be:53:a3:c8:60:1f:fb:6e:86:13:f0:6a:ec:dd:95:7d:9a: 04:e1:d7:7a:f7:c1:1f:63:f0:15:39:31:e0:5c:22:fc:14:be: f4:54:59:35:02:3e:19:c4:00:57:77:ef:13:c8:e0:dd:aa:28: 30:80:19:df:84:1b:a6:86:ae:e4:22:44:23:81:95:1d:43:6f: 07:88:84:99:c8:64:3d:7a:a9:3c:b7:b8:b2:02:da:8c:bb:4c: f7:82:39:97:88:60:29:10:89:bf:c3:c2:a8:af:72:b5:33:e1: 5c:b0:08:06:01:7f:16:6d:be:2f:72:bd:26:93:41:4b:f3:36: d4:99:d4:e1:f8:71:02:7b:cd:20:b9:4b:7d:2b:4a:a6:bc:e1: 9f:02:2a:f6:09:45:c0:40:99:c4:9f:37:53:01:2f:47:fd:25: 06:62:bf:a0:8e:75:4b:15:58:ff:e0:89:20:59:b1:1f:8a:ba: 3f:d4:68:f6 -----BEGIN CERTIFICATE----- MIIFFjCCA/6gAwIBAgISAZpO9IBEyKXeo6tgKEPdtFn9MA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKGYwNTIxMTI4Y2Y2MzRhYTZhZmE3ZWY1MmQ1MzFmM2ZjZDU1 NjI4ZjkwHhcNMjUxMTA0MTMwMDM3WhcNMjUxMTA1MTMwMDM3WjAzMTEwLwYDVQQD EyhkMDk1Y2ZhZDA5MGRjZDVkZjYyNTczZDVhYmRjMDdlOTg3YzA0Yzg4MIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAvbOXDJ6NzwTHUZ3lsVQ5FR/lYIL9 WAT+iFsLzYtpSopB607WPv17tn/PjZt11Bn+0EFWAlkibl26UKgHdXFn0qwyxuqF 78YELAJZ7vaj7OTeNEETGIvAeA8bdipoY5mwdwZvL0FHIQLZ5/n22/tRz9vDD35x AtoWKxFHJRKcZWLS6Ejr//hlfQdVqv2XbGBnrb1TtTjr0gY/As8nOjg4R3KaOUju KGcfljKXwZnJwWuKjUKoDYODG4yN0KbKcApBxDpsa4fCHbP0JsHmxQIg+KQjNDkW TMfZP1vIfsDXl4xsJSMnvRsHOC4bgjqXAesvoXruQU/s6Qe2GANc9/sjuQIDAQAB o4ICIjCCAh4wHQYDVR0OBBYEFNCVz60JDc1d9iVz1avcB+mHwEyIMB8GA1UdIwQY MBaAFPBSESjPY0qmr6fvUtUx8/zVVij5MA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvOEZJUktNOWpTcWF2cC05UzFUSHpfTlZXS1BrLmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC9iYi9iNGIxNTAtZGJiOC00NjVmLTgxNTUt ZTQ0MTliNjQyMTJlLzEvOEZJUktNOWpTcWF2cC05UzFUSHpfTlZXS1BrLm1mdDCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC9iYi9iNGIxNTAtZGJiOC00NjVmLTgxNTUtZTQ0MTliNjQyMTJl LzEvOEZJUktNOWpTcWF2cC05UzFUSHpfTlZXS1BrLmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAYQjc5ymq t3wGVL0QLSJPzY4sdl7m6Q3dt4hQyf13lYb6a4n+Kz/SDwkTMm53+SnsnZiXsWT+ p3Qk0muqiov2S83JecwwRZhK2L5To8hgH/tuhhPwauzdlX2aBOHXevfBH2PwFTkx 4Fwi/BS+9FRZNQI+GcQAV3fvE8jg3aooMIAZ34Qbpoau5CJEI4GVHUNvB4iEmchk PXqpPLe4sgLajLtM94I5l4hgKRCJv8PCqK9ytTPhXLAIBgF/Fm2+L3K9JpNBS/M2 1JnU4fhxAnvNILlLfStKprzhnwIq9glFwECZxJ83UwEvR/0lBmK/oI51SxVY/+CJ IFmxH4q6P9Ro9g== -----END CERTIFICATE-----Generated at Tue Nov 4 18:00:25 2025 by rpki-client