$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/c0/b70658-e1dc-4944-a06b-1c680adf7a26/1/02AMuv0m_uUGT8ifMB38jjwdPKU.mft File: 02AMuv0m_uUGT8ifMB38jjwdPKU.mft (raw, json) Hash identifier: C7TH0zh4YcHrk0Fb4Hkaqy7pGWjzX8mq0JpIci7cgpM= Subject key identifier: 76:6A:9A:72:72:B0:D5:62:09:7A:89:F5:56:EC:95:D6:E5:C2:04:B9 Authority key identifier: D3:60:0C:BA:FD:26:FE:E5:06:4F:C8:9F:30:1D:FC:8E:3C:1D:3C:A5 Certificate issuer: /CN=d3600cbafd26fee5064fc89f301dfc8e3c1d3ca5 Certificate serial: 019A503DB7F1D3DB6D4F030F5BA8B5DDA917 Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/02AMuv0m_uUGT8ifMB38jjwdPKU.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/c0/b70658-e1dc-4944-a06b-1c680adf7a26/1/02AMuv0m_uUGT8ifMB38jjwdPKU.mft Manifest number: 171E Signing time: Tue 04 Nov 2025 19:00:13 +0000 Manifest this update: Tue 04 Nov 2025 19:00:13 +0000 Manifest next update: Wed 05 Nov 2025 19:00:13 +0000 Files and hashes: 1: 02AMuv0m_uUGT8ifMB38jjwdPKU.crl (hash: D3y4P9DIsY6C24H/igW/tPzwrujxqF3tFITpyUXsJpM=) 2: 2WkxZ6d8ewxrLWO8WH12o0AY6xw.roa (hash: nbEjkYORzyFd58OrYmjVC1fHN4kRwapxAIIPY/slelc=) 3: AG97hJvhy0UeDTt3HIas70L9MWQ.roa (hash: CpGaF4KcigctK1KLFQXtXWhD0jjodHuaq3LolhI5NC8=) 4: EEkMm6nCb9R4YLtB4IXzgCR8OOM.roa (hash: 7A7HQmXagHkrgjRynPlWf1aNJTOS5cJM4PvFKY2czsg=) 5: Iy0xYJFVaSUpkc2TbsdezF59hPQ.roa (hash: yc/wxf6t0jomAnEf1S9R6mg0/BH4SO1UAudfyh2QjG4=) 6: JdavXfgS1C88UGPje2KGgh-CbRs.roa (hash: fsvo1+m2SxrjapW7ugn4l/vkPt8HqDS/T913gxJRh4I=) 7: KoO3sM7qwS5mA20IsKbDhxcTB1U.roa (hash: tjrHSpdKeLdJHbMSWc5OzlqZez0K6Pu4HPg+UKvTrTM=) 8: M-yd6Ugm4j37VvR5jMt-KNJrmEI.roa (hash: vqjDdTSN4DxJrQed7BY7JJ0opDc9Ee98YYBmwBxXED4=) 9: Nedx1_M66uIc0vDKNZQnQXlLIdM.roa (hash: zJ8+VfMNsVLvkhPB7kvPUzmVC3uoyAUluiAWRCM46n4=) 10: jLnip0BdB36NRqrdIhQucDZy8-A.roa (hash: PgGmCULcevmCru0Kv0QVroNMx8/gH95JrLZ6JaAFDWc=) Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/c0/b70658-e1dc-4944-a06b-1c680adf7a26/1/02AMuv0m_uUGT8ifMB38jjwdPKU.crl rsync://rpki.ripe.net/repository/DEFAULT/c0/b70658-e1dc-4944-a06b-1c680adf7a26/1/02AMuv0m_uUGT8ifMB38jjwdPKU.mft rsync://rpki.ripe.net/repository/DEFAULT/02AMuv0m_uUGT8ifMB38jjwdPKU.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Wed 05 Nov 2025 18:00:03 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9a:50:3d:b7:f1:d3:db:6d:4f:03:0f:5b:a8:b5:dd:a9:17 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=d3600cbafd26fee5064fc89f301dfc8e3c1d3ca5 Validity Not Before: Nov 4 19:00:13 2025 GMT Not After : Nov 5 19:00:13 2025 GMT Subject: CN=766a9a7272b0d562097a89f556ec95d6e5c204b9 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:a9:7a:a5:a4:36:5d:0a:fb:54:38:40:9d:33:81: c5:ff:3a:72:9b:da:b3:75:24:69:bb:5f:2f:77:bc: 1a:cf:3b:f9:9e:a7:f4:b8:bb:81:73:10:eb:85:56: e5:9d:e3:7b:3c:a5:5d:0d:e7:c9:c6:ea:87:f2:7b: 2b:66:f4:07:d1:a0:39:fe:07:a3:1a:66:26:55:65: 48:c5:22:aa:a5:96:36:5d:f1:fb:86:49:83:d6:fc: 84:20:9e:88:20:30:68:e4:78:ae:eb:f3:94:7e:4e: c6:63:d6:51:8f:0c:e2:fc:5d:d1:a1:6a:c5:e7:3c: 3e:78:4d:98:21:47:46:27:50:ca:cc:b2:c6:51:52: de:22:86:ab:b2:39:3f:f8:f0:76:61:3d:63:c6:98: c2:99:d6:e1:39:c1:88:1f:58:f4:a2:d0:7a:56:68: 51:cb:bb:0d:4a:5d:bc:98:8b:2e:b2:26:2d:74:d1: 3a:43:4a:43:19:44:2e:51:7a:21:18:b2:24:7c:23: 98:2c:1e:20:28:bf:1b:91:35:f5:21:8c:a4:61:dd: 75:23:e1:cf:89:ba:c1:69:e6:11:65:1a:9a:09:97: 54:76:39:36:3a:09:29:98:64:d2:de:08:02:89:c7: ce:0c:5a:bb:59:15:1d:66:f0:b6:83:5c:99:af:3e: 2a:cf Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 76:6A:9A:72:72:B0:D5:62:09:7A:89:F5:56:EC:95:D6:E5:C2:04:B9 X509v3 Authority Key Identifier: keyid:D3:60:0C:BA:FD:26:FE:E5:06:4F:C8:9F:30:1D:FC:8E:3C:1D:3C:A5 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/02AMuv0m_uUGT8ifMB38jjwdPKU.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/c0/b70658-e1dc-4944-a06b-1c680adf7a26/1/02AMuv0m_uUGT8ifMB38jjwdPKU.mft X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/c0/b70658-e1dc-4944-a06b-1c680adf7a26/1/02AMuv0m_uUGT8ifMB38jjwdPKU.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 29:5c:2b:64:ca:64:74:af:90:cb:14:3e:f9:34:49:f6:96:02: fb:da:96:e5:f6:38:38:20:9b:73:ed:f1:63:d5:fa:26:5a:44: 7a:21:f7:aa:70:08:d8:9f:12:93:33:1b:43:13:de:fa:3d:d3: 42:1a:0c:d0:74:f0:18:84:71:30:5e:4c:0d:28:2a:33:b7:4f: eb:68:4b:ba:94:06:a7:ee:11:69:ad:82:c3:9e:27:01:59:4f: ce:d3:bf:31:b2:eb:60:8c:b4:d3:ef:5c:ef:b9:4e:ff:99:46: 73:f0:88:bb:88:68:69:2c:46:b0:7c:0e:10:6b:f7:6a:d8:21: 5a:c2:ca:46:c4:0e:b8:28:0f:4f:d6:6d:4f:8e:87:d2:60:2c: cc:e3:0f:50:49:88:8e:d8:21:18:be:f6:35:23:e0:50:4d:a7: ce:3f:12:ad:5b:74:c8:9c:39:af:c5:14:6e:54:1d:5c:fb:4a: 32:17:9e:55:8a:64:a6:c1:74:83:80:76:8f:1c:e5:9f:3c:02: 76:59:0a:31:83:f8:49:ce:8d:8a:d6:c1:e5:cc:7a:7f:c5:be: 43:c2:8e:c4:95:dd:48:c1:41:13:17:cc:77:6e:b5:fb:72:9d: 10:c0:ab:ec:77:36:a5:d5:73:09:e3:52:54:53:e2:0c:19:06: 1a:57:15:89 -----BEGIN CERTIFICATE----- MIIFFjCCA/6gAwIBAgISAZpQPbfx09ttTwMPW6i13akXMA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKGQzNjAwY2JhZmQyNmZlZTUwNjRmYzg5ZjMwMWRmYzhlM2Mx ZDNjYTUwHhcNMjUxMTA0MTkwMDEzWhcNMjUxMTA1MTkwMDEzWjAzMTEwLwYDVQQD Eyg3NjZhOWE3MjcyYjBkNTYyMDk3YTg5ZjU1NmVjOTVkNmU1YzIwNGI5MIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAqXqlpDZdCvtUOECdM4HF/zpym9qz dSRpu18vd7wazzv5nqf0uLuBcxDrhVblneN7PKVdDefJxuqH8nsrZvQH0aA5/gej GmYmVWVIxSKqpZY2XfH7hkmD1vyEIJ6IIDBo5Hiu6/OUfk7GY9ZRjwzi/F3RoWrF 5zw+eE2YIUdGJ1DKzLLGUVLeIoarsjk/+PB2YT1jxpjCmdbhOcGIH1j0otB6VmhR y7sNSl28mIsusiYtdNE6Q0pDGUQuUXohGLIkfCOYLB4gKL8bkTX1IYykYd11I+HP ibrBaeYRZRqaCZdUdjk2OgkpmGTS3ggCicfODFq7WRUdZvC2g1yZrz4qzwIDAQAB o4ICIjCCAh4wHQYDVR0OBBYEFHZqmnJysNViCXqJ9VbsldblwgS5MB8GA1UdIwQY MBaAFNNgDLr9Jv7lBk/InzAd/I48HTylMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvMDJBTXV2MG1fdVVHVDhpZk1CMzhqandkUEtVLmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC9jMC9iNzA2NTgtZTFkYy00OTQ0LWEwNmIt MWM2ODBhZGY3YTI2LzEvMDJBTXV2MG1fdVVHVDhpZk1CMzhqandkUEtVLm1mdDCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC9jMC9iNzA2NTgtZTFkYy00OTQ0LWEwNmItMWM2ODBhZGY3YTI2 LzEvMDJBTXV2MG1fdVVHVDhpZk1CMzhqandkUEtVLmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAKVwrZMpk dK+QyxQ++TRJ9pYC+9qW5fY4OCCbc+3xY9X6JlpEeiH3qnAI2J8SkzMbQxPe+j3T QhoM0HTwGIRxMF5MDSgqM7dP62hLupQGp+4Raa2Cw54nAVlPztO/MbLrYIy00+9c 77lO/5lGc/CIu4hoaSxGsHwOEGv3atghWsLKRsQOuCgPT9ZtT46H0mAszOMPUEmI jtghGL72NSPgUE2nzj8SrVt0yJw5r8UUblQdXPtKMheeVYpkpsF0g4B2jxzlnzwC dlkKMYP4Sc6NitbB5cx6f8W+Q8KOxJXdSMFBExfMd261+3KdEMCr7Hc2pdVzCeNS VFPiDBkGGlcViQ== -----END CERTIFICATE-----Generated at Wed Nov 5 02:55:45 2025 by rpki-client