$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/bd/cbcf68-7cbf-47f0-82ee-5760efbcc654/1/sa8S9cp1ySKkql2stJwEqTI39O0.mft File: sa8S9cp1ySKkql2stJwEqTI39O0.mft (raw, json) Hash identifier: 17cCiHE4GMLXmyKpCe/OUmKGnDPALAas72/+agLYXys= Subject key identifier: 4E:C8:20:5B:BC:88:D7:73:DA:E6:8A:F2:75:6A:02:F7:52:06:B1:F4 Authority key identifier: B1:AF:12:F5:CA:75:C9:22:A4:AA:5D:AC:B4:9C:04:A9:32:37:F4:ED Certificate issuer: /CN=b1af12f5ca75c922a4aa5dacb49c04a93237f4ed Certificate serial: 019A5074A47A90CB035152BC938833645644 Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/sa8S9cp1ySKkql2stJwEqTI39O0.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/bd/cbcf68-7cbf-47f0-82ee-5760efbcc654/1/sa8S9cp1ySKkql2stJwEqTI39O0.mft Manifest number: 1310 Signing time: Tue 04 Nov 2025 20:00:12 +0000 Manifest this update: Tue 04 Nov 2025 20:00:12 +0000 Manifest next update: Wed 05 Nov 2025 20:00:12 +0000 Files and hashes: 1: 0Masll6bbXJowlWVdStYbs2tx6E.roa (hash: Rro7robf4OQi2SafD/+wvUIv6rGO8rIKSIcGQQxuDhQ=) 2: GbtphNgjK0vdnL4zh4ndNFpMq98.roa (hash: u7HLBqxJEFs0R6rzUwZQDioPq2mneZLMKiZ7WWFYBQg=) 3: HIdYT19grrvIrsLvbv9c-RyNoYM.roa (hash: gMWRLPsAhHALB5C0CyTnC2YpfuJ8OqfVcPAvIC+/69E=) 4: OUt5ZB5ErN_qim9RPT1gdy6_fsA.roa (hash: jUTt0o3pm+pyLvb6Ukj+eNNJ2nE69gsAdM4+2ox59R8=) 5: R_OlpiLM8AchN0LvgG-brNSPeok.roa (hash: Ha2jaeCRdAo3cD1S+TwOcwXV50R2/YikiY9fj+5QfSk=) 6: T-i1HnnAiZlugAgaa37LNPgeYyA.roa (hash: JZrI/oiF2iHcbj3PFgspIgoRlLncbc7mtmuIlUx+R6U=) 7: _SIVUqOCoAD9QAv9j_FoehRwqCQ.roa (hash: sSOjeJjB03HHhjQxuEaox3x4XiuehbGVKeOJQiC5f04=) 8: euxOi9Xp3n7AyiSfCEP-xOv9hDo.roa (hash: hqClLQ+yTS1bqIE58Fj5bi8zXosgwwjJT2D8au7VfQ0=) 9: jOUyMLPZrMuzuioMpl1NXAy1D0s.roa (hash: 1gb8evtP88wWeN9HxrerPINOz1+CcWlzI+mgwi1QVJ8=) 10: oTdRqWCGB_YZL-zzysNmCsUI8OU.roa (hash: Z3CxIW13t+FC0u78Ynw/b8NpKjP4IiiiZzM5isLuBQ4=) 11: opjBwsfQwaZJKVugJJ6MF-vgLQw.roa (hash: MNlxdTCVbR2yhgEH9HVAaomJahjdfDcmr5j99PJZjnc=) 12: orAKfjl1fXW4_m23ZUuKco1b-BY.roa (hash: SPzJt2ubmkoDTY2BGadUCK43CwJNkqbV55KtpGnjnsE=) 13: qjtTNxOEgSr0b6Weeb9JJHyFnhM.roa (hash: Eb0gxKs3qeMLVvYaIgIGm1oY4DsjaHktiucw1gfNHns=) 14: sa8S9cp1ySKkql2stJwEqTI39O0.crl (hash: lag4QxwUULbCSnZ6w/9HPzvJNCfMV9q/4BPRdSeOy/o=) Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/bd/cbcf68-7cbf-47f0-82ee-5760efbcc654/1/sa8S9cp1ySKkql2stJwEqTI39O0.crl rsync://rpki.ripe.net/repository/DEFAULT/bd/cbcf68-7cbf-47f0-82ee-5760efbcc654/1/sa8S9cp1ySKkql2stJwEqTI39O0.mft rsync://rpki.ripe.net/repository/DEFAULT/sa8S9cp1ySKkql2stJwEqTI39O0.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Wed 05 Nov 2025 18:00:03 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9a:50:74:a4:7a:90:cb:03:51:52:bc:93:88:33:64:56:44 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=b1af12f5ca75c922a4aa5dacb49c04a93237f4ed Validity Not Before: Nov 4 20:00:12 2025 GMT Not After : Nov 5 20:00:12 2025 GMT Subject: CN=4ec8205bbc88d773dae68af2756a02f75206b1f4 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:9c:ba:37:a3:eb:c3:73:39:38:c0:4b:3e:9f:bd: da:1f:ff:ed:e7:40:bf:d7:1b:1e:8b:5a:27:10:21: 79:32:93:90:db:f5:65:08:1e:c1:b3:97:76:85:d2: d8:c6:8c:35:1c:de:d4:bf:b8:8f:b4:4e:c6:3a:d2: 70:30:b1:92:e3:b4:c0:0d:e0:89:c7:a9:1c:78:79: e5:93:5a:97:65:64:64:67:e1:50:67:27:d6:ef:40: 84:f5:32:36:29:50:cc:b9:08:b5:cc:20:68:d9:e8: 1d:40:31:1f:d8:ee:47:bf:bd:1d:7a:4d:47:8e:3e: 99:76:eb:4a:19:6c:e7:32:3a:0a:92:13:3a:c2:50: 17:d6:ee:84:b5:eb:3d:b2:d9:b3:4d:0e:ea:2e:2b: 6b:15:ae:60:8a:43:d4:29:19:44:06:ce:58:c8:9a: 3d:00:32:cc:3e:66:ce:e3:b8:84:19:45:82:71:7a: 8c:c0:bb:d6:b3:49:c4:57:3f:98:16:a1:4c:ce:54: d6:76:59:3e:6b:fa:1a:39:1a:1f:b5:a8:22:6b:d8: d2:7c:05:c4:4f:fd:ea:55:3d:bc:2b:23:88:63:ff: 83:90:f1:f6:bd:a3:b5:de:07:f7:4b:3a:a6:7a:eb: 88:27:39:f9:05:14:d7:0b:76:90:22:ad:94:ae:c3: 84:81 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 4E:C8:20:5B:BC:88:D7:73:DA:E6:8A:F2:75:6A:02:F7:52:06:B1:F4 X509v3 Authority Key Identifier: keyid:B1:AF:12:F5:CA:75:C9:22:A4:AA:5D:AC:B4:9C:04:A9:32:37:F4:ED X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/sa8S9cp1ySKkql2stJwEqTI39O0.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/bd/cbcf68-7cbf-47f0-82ee-5760efbcc654/1/sa8S9cp1ySKkql2stJwEqTI39O0.mft X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/bd/cbcf68-7cbf-47f0-82ee-5760efbcc654/1/sa8S9cp1ySKkql2stJwEqTI39O0.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 18:3d:4c:17:22:dd:41:21:0b:3e:4a:3c:6d:33:d4:58:db:83: a1:1a:94:d1:9d:70:67:a1:ea:f2:f9:b7:fd:90:98:7c:17:aa: d1:d1:9b:6c:79:6e:d7:10:17:12:3f:74:da:60:3a:92:07:93: 81:e2:7e:72:65:54:c7:fa:e9:f8:12:7d:ff:c0:f9:9a:cd:9e: f8:f0:c3:90:08:03:f8:d7:7b:48:90:66:ea:77:1a:1c:b7:4f: 2a:3d:4c:3a:31:01:34:52:5a:5c:13:92:b6:9e:6b:92:17:51: 36:40:1e:97:e4:e2:d8:a4:aa:91:fc:ba:e2:b6:24:9e:16:c5: 18:c6:39:36:14:a7:08:e7:fd:da:f6:c8:14:fe:2f:10:8d:03: 6f:d6:b1:77:36:aa:88:ee:10:dc:58:06:56:9f:14:88:1b:17: 2e:89:d7:4d:9a:e3:72:b2:62:cd:bd:2e:cb:47:58:4b:8e:68: 79:80:8a:82:ec:7c:ce:7d:84:84:bf:30:b6:bc:4a:29:e7:db: 68:89:95:54:5d:1d:1e:8f:bc:56:66:0c:c8:39:8e:a7:dd:b9: 89:1a:01:11:81:8c:24:0c:c0:fc:2f:5b:ca:a2:29:da:0c:5f: f4:31:4e:80:59:c4:6c:a9:94:0d:cd:65:5b:98:f7:e9:00:53: ad:b7:20:b4 -----BEGIN CERTIFICATE----- MIIFFjCCA/6gAwIBAgISAZpQdKR6kMsDUVK8k4gzZFZEMA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKGIxYWYxMmY1Y2E3NWM5MjJhNGFhNWRhY2I0OWMwNGE5MzIz N2Y0ZWQwHhcNMjUxMTA0MjAwMDEyWhcNMjUxMTA1MjAwMDEyWjAzMTEwLwYDVQQD Eyg0ZWM4MjA1YmJjODhkNzczZGFlNjhhZjI3NTZhMDJmNzUyMDZiMWY0MIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAnLo3o+vDczk4wEs+n73aH//t50C/ 1xsei1onECF5MpOQ2/VlCB7Bs5d2hdLYxow1HN7Uv7iPtE7GOtJwMLGS47TADeCJ x6kceHnlk1qXZWRkZ+FQZyfW70CE9TI2KVDMuQi1zCBo2egdQDEf2O5Hv70dek1H jj6ZdutKGWznMjoKkhM6wlAX1u6Etes9stmzTQ7qLitrFa5gikPUKRlEBs5YyJo9 ADLMPmbO47iEGUWCcXqMwLvWs0nEVz+YFqFMzlTWdlk+a/oaORoftagia9jSfAXE T/3qVT28KyOIY/+DkPH2vaO13gf3SzqmeuuIJzn5BRTXC3aQIq2UrsOEgQIDAQAB o4ICIjCCAh4wHQYDVR0OBBYEFE7IIFu8iNdz2uaK8nVqAvdSBrH0MB8GA1UdIwQY MBaAFLGvEvXKdckipKpdrLScBKkyN/TtMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvc2E4UzljcDF5U0trcWwyc3RKd0VxVEkzOU8wLmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC9iZC9jYmNmNjgtN2NiZi00N2YwLTgyZWUt NTc2MGVmYmNjNjU0LzEvc2E4UzljcDF5U0trcWwyc3RKd0VxVEkzOU8wLm1mdDCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC9iZC9jYmNmNjgtN2NiZi00N2YwLTgyZWUtNTc2MGVmYmNjNjU0 LzEvc2E4UzljcDF5U0trcWwyc3RKd0VxVEkzOU8wLmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAGD1MFyLd QSELPko8bTPUWNuDoRqU0Z1wZ6Hq8vm3/ZCYfBeq0dGbbHlu1xAXEj902mA6kgeT geJ+cmVUx/rp+BJ9/8D5ms2e+PDDkAgD+Nd7SJBm6ncaHLdPKj1MOjEBNFJaXBOS tp5rkhdRNkAel+Ti2KSqkfy64rYknhbFGMY5NhSnCOf92vbIFP4vEI0Db9axdzaq iO4Q3FgGVp8UiBsXLonXTZrjcrJizb0uy0dYS45oeYCKgux8zn2EhL8wtrxKKefb aImVVF0dHo+8VmYMyDmOp925iRoBEYGMJAzA/C9byqIp2gxf9DFOgFnEbKmUDc1l W5j36QBTrbcgtA== -----END CERTIFICATE-----Generated at Wed Nov 5 02:17:33 2025 by rpki-client