$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/c0/e45e30-e7d8-4fb8-90ad-f71038e967a4/1/tIUv-6fVfFqK-7bqW-r33-wMFFo.mft File: tIUv-6fVfFqK-7bqW-r33-wMFFo.mft (raw, json) Hash identifier: nq67eV7SzsT2WWLJZo1vSQPAwSvZfcQJlJZul5O58ng= Subject key identifier: 84:CF:88:90:A4:77:3E:1F:3E:F4:8A:63:C9:A8:BE:E1:7B:72:B2:44 Authority key identifier: B4:85:2F:FB:A7:D5:7C:5A:8A:FB:B6:EA:5B:EA:F7:DF:EC:0C:14:5A Certificate issuer: /CN=b4852ffba7d57c5a8afbb6ea5beaf7dfec0c145a Certificate serial: 019A4F5D42F5F2DF77F10E0542408E4ADCB0 Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/tIUv-6fVfFqK-7bqW-r33-wMFFo.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/c0/e45e30-e7d8-4fb8-90ad-f71038e967a4/1/tIUv-6fVfFqK-7bqW-r33-wMFFo.mft Manifest number: 1722 Signing time: Tue 04 Nov 2025 14:55:03 +0000 Manifest this update: Tue 04 Nov 2025 14:55:03 +0000 Manifest next update: Wed 05 Nov 2025 14:55:03 +0000 Files and hashes: 1: 2zBG6wv0zKBe2XlbGkfLL9rOdtY.roa (hash: lxNpEB+wfb/SASGgTTjYX3zTxUdrCP8FyxAXU//G0JE=) 2: 60ZaPiBpi8SxBTjOjQUT9FiEU2Q.roa (hash: +EenJI8/Zu0itO/r18F94M+NWWU8CW03dUIDwunEbUc=) 3: EU2O-Gd0BV713EAdFoGJuGMnLgQ.roa (hash: DIGhFlsty46rXCRlbLUopCZPIy0Ap7bO0kln0jsUUZQ=) 4: O3sXFCWDkxRLQArJVgciZYJOH2k.roa (hash: wEiLpu8rEygqvBvHCRoBqicZ9xgf2J+eV7J8nj+KxjA=) 5: ZjHl0XpQM8CCJz6Om67G0wOmvS4.roa (hash: xCetPcOL8RFsZEGexQBgMW05eQfuM1TVnSNp6oyXZtQ=) 6: d8mFLNhZassFfsIT0V6Pg-FoNgA.roa (hash: G1lxk+WJgE19vtZBUhgAhwauP4CikNyKzPmcQ0hwXlc=) 7: dEvm44MVXindQlOEmPEQUDFIhOs.roa (hash: dVgBBC/Rmim2eB3c1PNCO34aKUguzhPQDH4vqUewLA0=) 8: l1wLvb6NKoGEYg4t8n0m6fJ0nkM.roa (hash: ql0IO639qJqy1cMjdHcoEEjUejhdun3XvEvt+WT91vI=) 9: nf_J-Be6PvK26ukKjJl6IQe1MJY.roa (hash: 0NfHfYZttT9eDOJu1RyDhX+/FDw371Nzr/BlGE9d+BA=) 10: sAE-Hl68vnhnSeOEkdOvbCITI3s.roa (hash: +zv5NFL3GNnw57mEaHIY7DHrB2enuzSZniAXWNA14go=) 11: tIUv-6fVfFqK-7bqW-r33-wMFFo.crl (hash: pRF+uIL3V13s+7qj6PzV0cOiQtYsyk/+UMu6UVWPDvE=) Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/c0/e45e30-e7d8-4fb8-90ad-f71038e967a4/1/tIUv-6fVfFqK-7bqW-r33-wMFFo.crl rsync://rpki.ripe.net/repository/DEFAULT/c0/e45e30-e7d8-4fb8-90ad-f71038e967a4/1/tIUv-6fVfFqK-7bqW-r33-wMFFo.mft rsync://rpki.ripe.net/repository/DEFAULT/tIUv-6fVfFqK-7bqW-r33-wMFFo.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Wed 05 Nov 2025 14:55:03 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9a:4f:5d:42:f5:f2:df:77:f1:0e:05:42:40:8e:4a:dc:b0 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=b4852ffba7d57c5a8afbb6ea5beaf7dfec0c145a Validity Not Before: Nov 4 14:55:03 2025 GMT Not After : Nov 5 14:55:03 2025 GMT Subject: CN=84cf8890a4773e1f3ef48a63c9a8bee17b72b244 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:cd:d6:21:77:e4:58:8c:39:88:de:84:c3:4f:d9: b7:b7:5f:d4:99:17:0e:60:3b:8f:6a:89:63:7d:f6: 59:d3:1a:c7:67:b8:49:d3:5e:c6:a8:76:93:54:bd: 1b:03:20:52:f0:87:36:6c:cc:16:2e:04:e9:6e:d9: 21:2b:39:69:65:f3:fd:02:43:91:c7:e2:e8:27:f7: 87:4b:f8:cd:21:d3:a7:13:f8:0d:3f:e4:5c:ca:96: ac:97:88:7b:b0:6f:14:4b:07:92:23:c8:e1:a8:9b: ba:01:52:90:63:72:ca:05:33:8c:e8:b0:41:36:80: f6:55:12:51:a7:2b:4d:63:4c:68:ff:6f:db:7a:00: 91:ab:9a:8d:be:c6:38:a4:01:16:e8:eb:09:89:e2: 1d:f7:3e:84:06:fb:2b:ca:27:2d:dc:cf:62:af:15: 3d:12:fc:22:80:07:f3:ac:22:c5:3b:d1:60:c5:d6: b9:1d:aa:d1:d1:24:fe:93:2d:c2:7f:b4:aa:3f:52: 3c:c3:ba:82:66:83:00:cd:be:5c:5d:e4:aa:0a:69: bd:2b:26:79:cc:71:47:c3:84:85:94:8e:d1:61:67: 95:2f:0a:06:90:67:0f:b1:4f:13:7c:3d:d3:a5:81: 91:d4:df:b0:40:20:67:fe:46:c8:06:39:d3:74:98: 56:2b Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 84:CF:88:90:A4:77:3E:1F:3E:F4:8A:63:C9:A8:BE:E1:7B:72:B2:44 X509v3 Authority Key Identifier: keyid:B4:85:2F:FB:A7:D5:7C:5A:8A:FB:B6:EA:5B:EA:F7:DF:EC:0C:14:5A X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/tIUv-6fVfFqK-7bqW-r33-wMFFo.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/c0/e45e30-e7d8-4fb8-90ad-f71038e967a4/1/tIUv-6fVfFqK-7bqW-r33-wMFFo.mft X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/c0/e45e30-e7d8-4fb8-90ad-f71038e967a4/1/tIUv-6fVfFqK-7bqW-r33-wMFFo.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 90:76:69:fa:80:d2:b1:b2:4e:c9:92:ce:bb:2d:06:65:af:b9: 33:12:33:21:56:be:1a:34:a5:83:06:33:a5:17:38:9a:65:ea: a9:e9:be:08:c8:7b:42:c1:95:5c:e2:ba:36:03:a8:64:99:94: 8c:95:af:df:9e:64:f0:88:01:3b:54:30:1a:c1:7f:e2:52:d9: 34:c5:1a:c0:fe:33:e4:c5:ef:cd:ed:a4:03:73:91:cf:ce:f8: e7:8b:0d:f8:27:44:1c:a9:ec:f1:42:9b:5b:fd:07:ec:8e:82: d7:a5:d1:2d:55:8e:00:7f:f1:f1:b7:70:b5:05:44:67:77:d2: c9:bf:92:72:fa:b5:a3:4a:8a:f4:af:40:2b:d3:ae:ef:83:61: 5f:01:4f:cb:59:ca:dd:9f:da:1c:cd:d2:98:83:76:6e:fd:93: b5:2d:fd:22:cd:c9:fc:58:f0:36:b1:2d:5f:20:6f:91:a8:a7: a8:66:a3:0c:bb:6a:eb:96:e3:6a:27:e4:55:c6:a1:fc:19:61: 8c:fd:fd:33:48:88:da:01:a7:0b:e1:56:6e:ff:f8:0a:25:39: 28:e9:11:98:92:97:67:5e:61:cd:93:27:84:d6:cd:ce:65:84: 9a:63:a6:7d:e5:82:a9:3e:6d:dc:32:88:88:87:0b:38:78:2c: 3c:98:b7:1d -----BEGIN CERTIFICATE----- MIIFFjCCA/6gAwIBAgISAZpPXUL18t938Q4FQkCOStywMA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKGI0ODUyZmZiYTdkNTdjNWE4YWZiYjZlYTViZWFmN2RmZWMw YzE0NWEwHhcNMjUxMTA0MTQ1NTAzWhcNMjUxMTA1MTQ1NTAzWjAzMTEwLwYDVQQD Eyg4NGNmODg5MGE0NzczZTFmM2VmNDhhNjNjOWE4YmVlMTdiNzJiMjQ0MIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAzdYhd+RYjDmI3oTDT9m3t1/UmRcO YDuPaoljffZZ0xrHZ7hJ017GqHaTVL0bAyBS8Ic2bMwWLgTpbtkhKzlpZfP9AkOR x+LoJ/eHS/jNIdOnE/gNP+Rcypasl4h7sG8USweSI8jhqJu6AVKQY3LKBTOM6LBB NoD2VRJRpytNY0xo/2/begCRq5qNvsY4pAEW6OsJieId9z6EBvsryict3M9irxU9 EvwigAfzrCLFO9Fgxda5HarR0ST+ky3Cf7SqP1I8w7qCZoMAzb5cXeSqCmm9KyZ5 zHFHw4SFlI7RYWeVLwoGkGcPsU8TfD3TpYGR1N+wQCBn/kbIBjnTdJhWKwIDAQAB o4ICIjCCAh4wHQYDVR0OBBYEFITPiJCkdz4fPvSKY8movuF7crJEMB8GA1UdIwQY MBaAFLSFL/un1Xxaivu26lvq99/sDBRaMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvdElVdi02ZlZmRnFLLTdicVctcjMzLXdNRkZvLmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC9jMC9lNDVlMzAtZTdkOC00ZmI4LTkwYWQt ZjcxMDM4ZTk2N2E0LzEvdElVdi02ZlZmRnFLLTdicVctcjMzLXdNRkZvLm1mdDCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC9jMC9lNDVlMzAtZTdkOC00ZmI4LTkwYWQtZjcxMDM4ZTk2N2E0 LzEvdElVdi02ZlZmRnFLLTdicVctcjMzLXdNRkZvLmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAkHZp+oDS sbJOyZLOuy0GZa+5MxIzIVa+GjSlgwYzpRc4mmXqqem+CMh7QsGVXOK6NgOoZJmU jJWv355k8IgBO1QwGsF/4lLZNMUawP4z5MXvze2kA3ORz87454sN+CdEHKns8UKb W/0H7I6C16XRLVWOAH/x8bdwtQVEZ3fSyb+Scvq1o0qK9K9AK9Ou74NhXwFPy1nK 3Z/aHM3SmIN2bv2TtS39Is3J/FjwNrEtXyBvkainqGajDLtq65bjaifkVcah/Blh jP39M0iI2gGnC+FWbv/4CiU5KOkRmJKXZ15hzZMnhNbNzmWEmmOmfeWCqT5t3DKI iIcLOHgsPJi3HQ== -----END CERTIFICATE-----Generated at Tue Nov 4 22:41:32 2025 by rpki-client