$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/bd/c7ee9e-b5bf-4c2d-a983-dee3ed497aee/1/Ben8oKhYT-scEjGQcUIwYbCP5FY.mft File: Ben8oKhYT-scEjGQcUIwYbCP5FY.mft (raw, json) Hash identifier: jn0AiJFCZEKsqzh4SRup+ewKMHX1fqttOb/c+36Nzxc= Subject key identifier: 15:2A:92:D5:9F:0E:46:CB:11:4D:68:99:E9:A3:84:92:DF:A8:0F:55 Authority key identifier: 05:E9:FC:A0:A8:58:4F:EB:1C:12:31:90:71:42:30:61:B0:8F:E4:56 Certificate issuer: /CN=05e9fca0a8584feb1c12319071423061b08fe456 Certificate serial: 019A51F598F44F06273BFDCE5B8212041F0A Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/Ben8oKhYT-scEjGQcUIwYbCP5FY.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/bd/c7ee9e-b5bf-4c2d-a983-dee3ed497aee/1/Ben8oKhYT-scEjGQcUIwYbCP5FY.mft Manifest number: 0F1D Signing time: Wed 05 Nov 2025 03:00:41 +0000 Manifest this update: Wed 05 Nov 2025 03:00:41 +0000 Manifest next update: Thu 06 Nov 2025 03:00:41 +0000 Files and hashes: 1: 4JQtl6CjZI4Ed81VYmD8y3s93nc.roa (hash: DNWzfbgNl38BTmSJIdFxCJ7U9WCYuq21jLucbQaekUg=) 2: BL3LZfi-f3ywcf3FmAmJwnbzASI.roa (hash: DVAE75CLKTBw2pzOs2zlkLoQMMQUvF717xgboLC73+I=) 3: Ben8oKhYT-scEjGQcUIwYbCP5FY.crl (hash: KxstgOwWtEkFsVipFEVpgXBXcEhSZBuqXB0xtk/+oDk=) 4: DeACqwGcvIcEJ9pagEhHd4n2i_M.roa (hash: WPp0dLB9p4cnbOnLtVE+B38AXmBSQMpiDZZIvPoqViw=) 5: FMfF0PRqbPl1Xgf7uetPmo11RwY.roa (hash: Nmk2r9tNYQqNw9x7igBvoQ88flRwtwnRPqDYVBzi6Zk=) 6: Q146qaaxZ1xmkBzI32xjl700K7Q.roa (hash: Dmot/z3pbyFtlPpe5Va8TlDgzImhsPNQJ1rELTx4Aro=) 7: XNBwXrAiwZu96uMUjODQvvz_Bzw.roa (hash: mCW8/M59wIOxOS0wM2q/LR+3KGIdWjCxHtDVDd4aiCU=) 8: Z4WfPAHr0U4HuMsBXDWE11AR6SY.roa (hash: nIFqFX+PoOUUY+ho0HNN5VDHjMoLJi/JVpJHhVS9zMY=) 9: fETfH_XiNbseiVsjZA2HM6Af2jI.roa (hash: uyRqpIalZYJdXa3YW/3/Z8wVH+1oAHTZduFpskFWKhg=) 10: foM10PwLyaHwLhfbaJzkwnbAE_w.roa (hash: DIaKJkxL7f9BTL5/9GbSSi0rXtJN9gz1NV5M8HRodzE=) 11: phO7epvCoYFhkG0dTV5RtGTfFoE.roa (hash: jkhzkXF+DB42uMow0dB8LWjmxEVbOyoIZtbBsaP8XFo=) 12: rS554DqYgNK00lANZV007fZTVkM.roa (hash: 3SSYULxYvCw8XOXXkyZRjzf+FifSR5lE3jD5NyjPQ0I=) 13: uZ82HsSJfJMX-injZJkIBGdxGBY.roa (hash: mT1BefewYqT0QULFBWTWCpATALXi+6J6LGgvQIVpGhI=) 14: wacKSVeFcrTyL4jcOjnOwrcddYQ.roa (hash: n1rU/BStziAQk9f5pDE6L63EitmHb6FHEduDthm4TxU=) 15: ytwdpN2_MmIz-ujAGkeOSyxFnQQ.roa (hash: Q1K4a50MOqKpSRbaxfZO8lYsK/lxhMtlTC8aBU8fdHU=) Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/bd/c7ee9e-b5bf-4c2d-a983-dee3ed497aee/1/Ben8oKhYT-scEjGQcUIwYbCP5FY.crl rsync://rpki.ripe.net/repository/DEFAULT/bd/c7ee9e-b5bf-4c2d-a983-dee3ed497aee/1/Ben8oKhYT-scEjGQcUIwYbCP5FY.mft rsync://rpki.ripe.net/repository/DEFAULT/Ben8oKhYT-scEjGQcUIwYbCP5FY.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Wed 05 Nov 2025 22:37:02 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9a:51:f5:98:f4:4f:06:27:3b:fd:ce:5b:82:12:04:1f:0a Signature Algorithm: sha256WithRSAEncryption Issuer: CN=05e9fca0a8584feb1c12319071423061b08fe456 Validity Not Before: Nov 5 03:00:41 2025 GMT Not After : Nov 6 03:00:41 2025 GMT Subject: CN=152a92d59f0e46cb114d6899e9a38492dfa80f55 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:9b:a6:01:15:22:a3:71:0b:09:4b:44:76:47:b6: 18:3f:08:2a:8e:45:cb:d4:68:a4:8e:29:75:17:c8: 0b:ff:12:a5:4a:9e:01:1f:be:f9:9f:71:35:2e:c2: 9b:dd:53:28:19:71:59:bc:5a:e3:03:00:ca:1a:f2: 7c:0e:e6:2b:74:d9:ae:aa:a1:05:ee:63:29:51:ac: 96:71:d0:35:0b:08:31:fb:e6:b6:a8:e3:55:97:57: ed:d8:04:73:d0:13:af:20:f1:ff:ac:08:19:a1:9d: 7d:34:b9:11:43:c5:52:c8:9f:1f:4e:14:25:0c:28: bd:d5:00:90:22:36:47:9c:47:47:14:7d:30:a2:72: f6:9a:4f:57:76:e3:9c:eb:5a:2a:8e:7f:66:08:04: ed:1d:54:e7:2d:2c:c6:33:0b:c7:30:55:74:e0:da: 2b:94:c2:e1:67:79:bf:68:ac:99:fd:07:9e:f1:9b: 50:17:85:19:d2:21:0a:bf:32:ea:48:7b:83:fe:d6: 21:cf:ad:4e:03:77:f7:f7:19:62:40:d9:03:e2:28: b7:41:c7:cf:9a:27:22:25:a9:78:fa:e3:b8:d7:42: 33:86:9b:5f:c5:ba:5b:4f:d0:62:5a:ef:0e:53:b1: 3f:20:c5:c1:28:e3:78:e9:8f:96:c1:0d:12:b3:4b: 66:bf Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 15:2A:92:D5:9F:0E:46:CB:11:4D:68:99:E9:A3:84:92:DF:A8:0F:55 X509v3 Authority Key Identifier: keyid:05:E9:FC:A0:A8:58:4F:EB:1C:12:31:90:71:42:30:61:B0:8F:E4:56 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/Ben8oKhYT-scEjGQcUIwYbCP5FY.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/bd/c7ee9e-b5bf-4c2d-a983-dee3ed497aee/1/Ben8oKhYT-scEjGQcUIwYbCP5FY.mft X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/bd/c7ee9e-b5bf-4c2d-a983-dee3ed497aee/1/Ben8oKhYT-scEjGQcUIwYbCP5FY.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 4f:6e:24:58:94:78:f6:3d:77:21:82:53:a0:3e:af:6e:83:60: ca:4a:b2:f1:94:9c:b0:78:73:5a:d8:39:6b:59:50:35:d6:c1: 63:cc:55:e2:2c:40:4a:72:ff:8e:98:7b:95:91:f4:57:7a:4e: 9f:40:db:76:e3:55:14:59:a2:0b:63:2b:c2:05:d9:71:46:3d: 6a:82:b0:54:94:c9:8d:2a:e4:12:41:8d:3a:58:c2:d1:1e:8c: 34:0f:df:b0:7b:78:91:0a:1f:2c:f7:1c:d8:22:cc:25:f6:87: 2b:23:6d:68:3e:7f:ac:b5:e5:00:ce:7c:41:0c:da:a4:2b:f4: 06:f5:cc:a6:8e:dc:4f:8c:cd:08:ab:db:fa:e7:f4:20:8d:2c: 6c:42:06:65:87:c2:ee:2c:61:4d:5c:33:d7:1a:eb:81:c2:27: 7b:a5:ac:d0:2f:36:ca:a7:ca:88:14:94:ab:f7:6a:9d:24:5a: 8c:f2:d1:29:6b:fc:72:40:8a:dc:33:b4:fe:f4:8c:bc:50:4f: 0d:87:fd:5f:92:90:9e:04:df:4d:99:fb:71:9c:16:b1:56:ed: 9d:f7:4b:0b:a5:77:ea:e2:dd:94:b7:db:fc:8d:82:a1:24:cb: 9a:d6:b1:3e:ff:df:f2:82:10:b8:87:86:f0:62:f7:0f:27:92: 0d:ea:11:ef -----BEGIN CERTIFICATE----- MIIFFjCCA/6gAwIBAgISAZpR9Zj0TwYnO/3OW4ISBB8KMA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKDA1ZTlmY2EwYTg1ODRmZWIxYzEyMzE5MDcxNDIzMDYxYjA4 ZmU0NTYwHhcNMjUxMTA1MDMwMDQxWhcNMjUxMTA2MDMwMDQxWjAzMTEwLwYDVQQD EygxNTJhOTJkNTlmMGU0NmNiMTE0ZDY4OTllOWEzODQ5MmRmYTgwZjU1MIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAm6YBFSKjcQsJS0R2R7YYPwgqjkXL 1Gikjil1F8gL/xKlSp4BH775n3E1LsKb3VMoGXFZvFrjAwDKGvJ8DuYrdNmuqqEF 7mMpUayWcdA1Cwgx++a2qONVl1ft2ARz0BOvIPH/rAgZoZ19NLkRQ8VSyJ8fThQl DCi91QCQIjZHnEdHFH0wonL2mk9XduOc61oqjn9mCATtHVTnLSzGMwvHMFV04Nor lMLhZ3m/aKyZ/Qee8ZtQF4UZ0iEKvzLqSHuD/tYhz61OA3f39xliQNkD4ii3QcfP miciJal4+uO410IzhptfxbpbT9BiWu8OU7E/IMXBKON46Y+WwQ0Ss0tmvwIDAQAB o4ICIjCCAh4wHQYDVR0OBBYEFBUqktWfDkbLEU1omemjhJLfqA9VMB8GA1UdIwQY MBaAFAXp/KCoWE/rHBIxkHFCMGGwj+RWMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvQmVuOG9LaFlULXNjRWpHUWNVSXdZYkNQNUZZLmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC9iZC9jN2VlOWUtYjViZi00YzJkLWE5ODMt ZGVlM2VkNDk3YWVlLzEvQmVuOG9LaFlULXNjRWpHUWNVSXdZYkNQNUZZLm1mdDCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC9iZC9jN2VlOWUtYjViZi00YzJkLWE5ODMtZGVlM2VkNDk3YWVl LzEvQmVuOG9LaFlULXNjRWpHUWNVSXdZYkNQNUZZLmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAT24kWJR4 9j13IYJToD6vboNgykqy8ZScsHhzWtg5a1lQNdbBY8xV4ixASnL/jph7lZH0V3pO n0DbduNVFFmiC2MrwgXZcUY9aoKwVJTJjSrkEkGNOljC0R6MNA/fsHt4kQofLPcc 2CLMJfaHKyNtaD5/rLXlAM58QQzapCv0BvXMpo7cT4zNCKvb+uf0II0sbEIGZYfC 7ixhTVwz1xrrgcIne6Ws0C82yqfKiBSUq/dqnSRajPLRKWv8ckCK3DO0/vSMvFBP DYf9X5KQngTfTZn7cZwWsVbtnfdLC6V36uLdlLfb/I2CoSTLmtaxPv/f8oIQuIeG 8GL3DyeSDeoR7w== -----END CERTIFICATE-----Generated at Wed Nov 5 06:18:24 2025 by rpki-client