$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/bd/1fd0a6-4517-4a0b-b3c9-12ec22c9c5a2/1/MkdKx8qF4JwtSLM-e_Zvjtdk3g8.mft File: MkdKx8qF4JwtSLM-e_Zvjtdk3g8.mft (raw, json) Hash identifier: 6Cr+mIV+G1uqb/Aw+S0xqFoEBcDIl4wAG7NXmWskaTI= Subject key identifier: E0:65:42:EC:82:EA:AF:F7:3A:96:27:E3:4F:25:B2:35:2E:2C:DA:73 Authority key identifier: 32:47:4A:C7:CA:85:E0:9C:2D:48:B3:3E:7B:F6:6F:8E:D7:64:DE:0F Certificate issuer: /CN=32474ac7ca85e09c2d48b33e7bf66f8ed764de0f Certificate serial: 019A4F99604970C1A380F6E50D527584622A Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/MkdKx8qF4JwtSLM-e_Zvjtdk3g8.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/bd/1fd0a6-4517-4a0b-b3c9-12ec22c9c5a2/1/MkdKx8qF4JwtSLM-e_Zvjtdk3g8.mft Manifest number: 1735 Signing time: Tue 04 Nov 2025 16:00:43 +0000 Manifest this update: Tue 04 Nov 2025 16:00:43 +0000 Manifest next update: Wed 05 Nov 2025 16:00:43 +0000 Files and hashes: 1: 08x65D62xajmjuWxGOGX--5GFZ4.roa (hash: ku01TCluM3ObD1DEPpsLr/8jGhA1O5espf/zteTKSkk=) 2: 1-fxNLZQMykWE3SLBLsEKwibzn3o.roa (hash: U9t8UfOKITE6D0gBLc/Dtn9zr6EfXzJkxHJL0LBQvTo=) 3: FDmDvOACHulfshItBSDCX5mBYSQ.roa (hash: aexzHKGvD/WM+wZ6/qx7vyWxEHAqx7gswtzEcmCk74k=) 4: FzyJ-A4chBzu8lQqhpLh4dfVe9s.roa (hash: kikBFtCVFZZA5yK1FlsJJ2Y15ol/mIm/K3+f2pwmt3Q=) 5: JRfXlKgZScSlnAP9_s4mWUCHMzI.roa (hash: Yofq9QzaUqxyhMLfnSLcXXtmS3vz0xWVOjl3kItQ1gM=) 6: MkdKx8qF4JwtSLM-e_Zvjtdk3g8.crl (hash: mqmpTB2PuRPxRA0mliLI4MFyTx0TX3PNXok50oQv/v8=) 7: RV1rjCwSnXKPzqWOYcizuue6Tmw.roa (hash: ZJyuiQwoYun/WqH4NVoy2nm760NToV5F7bd+tbvhpZI=) 8: UI2cnhatNs5ZeysmslxEpLBSTew.roa (hash: axZPCQgEFKrONNIyjteNC+Y0RYmX6khaCS5yj1K7lFE=) 9: XIqtTjvuJ5glY39EaIP6KmILhoo.roa (hash: oyK+JoJZ3ZJXn7BAWGpujgyfoF5xI3Ds91YiwWdI2PE=) 10: XwhTClSP1UI8joFe2laQDXk_PGU.roa (hash: Vu9nNK134kjM8iGZdGpKi0T5ZrLtuDBr7FKT4joBB3w=) 11: b_MAVuI29oBciIh7vGGq0NJVEzc.roa (hash: hDxp3S5bhbbLqI6OACypq5MMFaQlI+7lCsYe3tJ2F9c=) 12: dOfaSe3fIYIhGR1xcwXjfUk3OeI.roa (hash: uz8UfxMH6M1zEnn7EFrd8TVCQANQpajV/Ux4YkN59Jk=) 13: ivBw7pb2lERE4O4pT70f-IjK-H8.roa (hash: 9+du4uvg6+sqYU99LVsbimMbdhpdO5ppSVPQO3/HDIY=) 14: vaL0J_r43BzBTm5r8Bo75j0pTF8.roa (hash: 75FzmVXUE4MjGcr9LiSgeGxgqkVwVmsZ6mF1xXYO59Y=) 15: zhtRFI1IbB8hGc_SM2h4CISUl7A.roa (hash: bLD1C+K9v2CYIV0aCijm7HOS8Af4YKVs8VztsZsW80w=) Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/bd/1fd0a6-4517-4a0b-b3c9-12ec22c9c5a2/1/MkdKx8qF4JwtSLM-e_Zvjtdk3g8.crl rsync://rpki.ripe.net/repository/DEFAULT/bd/1fd0a6-4517-4a0b-b3c9-12ec22c9c5a2/1/MkdKx8qF4JwtSLM-e_Zvjtdk3g8.mft rsync://rpki.ripe.net/repository/DEFAULT/MkdKx8qF4JwtSLM-e_Zvjtdk3g8.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Wed 05 Nov 2025 09:00:03 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9a:4f:99:60:49:70:c1:a3:80:f6:e5:0d:52:75:84:62:2a Signature Algorithm: sha256WithRSAEncryption Issuer: CN=32474ac7ca85e09c2d48b33e7bf66f8ed764de0f Validity Not Before: Nov 4 16:00:43 2025 GMT Not After : Nov 5 16:00:43 2025 GMT Subject: CN=e06542ec82eaaff73a9627e34f25b2352e2cda73 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:ca:85:ae:2c:28:f6:90:e2:c0:49:3b:43:b0:be: e5:2a:e3:25:51:3a:27:78:93:93:66:7e:f7:ac:b1: aa:69:b7:28:bd:54:56:64:a5:07:a6:c7:37:ab:ab: c8:ab:63:d5:09:ce:ff:7f:ee:6f:45:fd:48:1c:80: 69:89:77:4e:74:2f:09:3c:15:ed:c7:6c:0d:4f:81: eb:97:45:07:a2:72:7a:1d:42:f0:40:c2:f2:a3:c0: 49:f6:23:b2:c0:1e:94:81:53:1c:ac:bd:b8:e4:5a: 22:41:1d:e0:0c:d9:ef:0d:f1:38:48:c5:b7:67:ae: 13:b9:43:d1:6c:f5:80:4d:8d:24:80:99:a5:d9:24: 1a:e9:4c:b4:9b:6d:fc:0f:70:d4:c6:a1:10:7c:d6: e9:f3:fc:94:4d:e5:b5:b8:64:21:66:5e:4d:f3:2b: 8e:da:74:98:03:49:07:2a:86:c3:51:d8:32:80:93: 04:1e:8d:c5:2e:95:d4:a4:9a:f4:b8:3b:ae:ed:05: 38:fe:46:6d:a3:fd:2d:a1:f3:6c:ea:77:2f:0b:b1: bb:c6:b8:5b:54:9f:da:a9:9e:2a:c0:ae:67:68:fe: d2:6f:89:11:bd:af:ff:35:74:c5:e4:4a:27:65:05: 5f:2e:88:c1:50:23:55:59:e2:82:69:69:b1:82:b5: 9d:e7 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: E0:65:42:EC:82:EA:AF:F7:3A:96:27:E3:4F:25:B2:35:2E:2C:DA:73 X509v3 Authority Key Identifier: keyid:32:47:4A:C7:CA:85:E0:9C:2D:48:B3:3E:7B:F6:6F:8E:D7:64:DE:0F X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/MkdKx8qF4JwtSLM-e_Zvjtdk3g8.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/bd/1fd0a6-4517-4a0b-b3c9-12ec22c9c5a2/1/MkdKx8qF4JwtSLM-e_Zvjtdk3g8.mft X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/bd/1fd0a6-4517-4a0b-b3c9-12ec22c9c5a2/1/MkdKx8qF4JwtSLM-e_Zvjtdk3g8.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 83:ef:e9:7a:57:b7:77:99:68:8e:e1:13:5c:fa:5c:03:13:89: ce:09:87:5c:ef:76:a2:d4:e1:0e:0f:1a:79:ce:26:d4:0d:e9: 22:33:56:a9:7e:94:1d:32:70:f3:09:48:3b:84:1b:ba:9e:a2: b9:e2:c4:38:ac:1d:fc:cc:08:da:90:bb:92:4e:59:09:8d:d0: 59:af:04:e8:e7:de:2e:c3:2f:66:8c:38:7a:d5:0d:1d:1a:13: 41:22:0e:8e:57:8e:92:de:ec:c6:7a:21:8e:e2:45:47:bf:a4: 4f:de:25:d9:33:f1:cd:ea:ce:7a:1f:19:89:8c:96:14:3d:95: e4:ab:fb:bd:77:38:77:53:e8:fd:85:98:43:65:53:67:c9:8c: 7e:b0:c3:b0:1d:d3:98:46:0c:18:45:40:43:76:be:d5:dc:18: 7d:a0:76:f8:f0:70:a7:bf:03:e6:41:6d:23:31:a9:63:84:f8: d0:4e:46:cf:f4:42:06:b7:06:27:39:5a:39:0a:fe:42:1e:b0: 9e:bd:8e:5e:ac:3a:e2:32:da:b7:2d:5d:e1:56:7b:1a:7d:f2: b4:8d:fd:51:ac:79:8f:56:8e:ce:31:12:54:80:73:59:59:f3: 16:62:e1:1d:22:d4:32:1b:53:0b:f1:e5:56:8b:2b:78:25:d9: 57:e3:55:ad -----BEGIN CERTIFICATE----- MIIFFjCCA/6gAwIBAgISAZpPmWBJcMGjgPblDVJ1hGIqMA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKDMyNDc0YWM3Y2E4NWUwOWMyZDQ4YjMzZTdiZjY2ZjhlZDc2 NGRlMGYwHhcNMjUxMTA0MTYwMDQzWhcNMjUxMTA1MTYwMDQzWjAzMTEwLwYDVQQD EyhlMDY1NDJlYzgyZWFhZmY3M2E5NjI3ZTM0ZjI1YjIzNTJlMmNkYTczMIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAyoWuLCj2kOLASTtDsL7lKuMlUTon eJOTZn73rLGqabcovVRWZKUHpsc3q6vIq2PVCc7/f+5vRf1IHIBpiXdOdC8JPBXt x2wNT4Hrl0UHonJ6HULwQMLyo8BJ9iOywB6UgVMcrL245FoiQR3gDNnvDfE4SMW3 Z64TuUPRbPWATY0kgJml2SQa6Uy0m238D3DUxqEQfNbp8/yUTeW1uGQhZl5N8yuO 2nSYA0kHKobDUdgygJMEHo3FLpXUpJr0uDuu7QU4/kZto/0tofNs6ncvC7G7xrhb VJ/aqZ4qwK5naP7Sb4kRva//NXTF5EonZQVfLojBUCNVWeKCaWmxgrWd5wIDAQAB o4ICIjCCAh4wHQYDVR0OBBYEFOBlQuyC6q/3OpYn408lsjUuLNpzMB8GA1UdIwQY MBaAFDJHSsfKheCcLUizPnv2b47XZN4PMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvTWtkS3g4cUY0Snd0U0xNLWVfWnZqdGRrM2c4LmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC9iZC8xZmQwYTYtNDUxNy00YTBiLWIzYzkt MTJlYzIyYzljNWEyLzEvTWtkS3g4cUY0Snd0U0xNLWVfWnZqdGRrM2c4Lm1mdDCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC9iZC8xZmQwYTYtNDUxNy00YTBiLWIzYzktMTJlYzIyYzljNWEy LzEvTWtkS3g4cUY0Snd0U0xNLWVfWnZqdGRrM2c4LmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAg+/pele3 d5lojuETXPpcAxOJzgmHXO92otThDg8aec4m1A3pIjNWqX6UHTJw8wlIO4Qbup6i ueLEOKwd/MwI2pC7kk5ZCY3QWa8E6OfeLsMvZow4etUNHRoTQSIOjleOkt7sxnoh juJFR7+kT94l2TPxzerOeh8ZiYyWFD2V5Kv7vXc4d1Po/YWYQ2VTZ8mMfrDDsB3T mEYMGEVAQ3a+1dwYfaB2+PBwp78D5kFtIzGpY4T40E5Gz/RCBrcGJzlaOQr+Qh6w nr2OXqw64jLaty1d4VZ7Gn3ytI39Uax5j1aOzjESVIBzWVnzFmLhHSLUMhtTC/Hl VosreCXZV+NVrQ== -----END CERTIFICATE-----Generated at Tue Nov 4 18:00:11 2025 by rpki-client