$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/c3/1b4105-3471-4592-bf07-73fd3bc19aa7/1/_zFJJHOnjG_p9Tn5-n0iUlYKK34.mft File: _zFJJHOnjG_p9Tn5-n0iUlYKK34.mft (raw, json) Hash identifier: 5IibSuclCnLGIQ1cr/ZCUiwJsxVnbaFNiYc4m6zvCrQ= Subject key identifier: 0A:57:32:C3:9C:12:6A:BE:82:6C:43:F1:26:BD:7B:3D:8E:F5:F3:AC Authority key identifier: FF:31:49:24:73:A7:8C:6F:E9:F5:39:F9:FA:7D:22:52:56:0A:2B:7E Certificate issuer: /CN=ff31492473a78c6fe9f539f9fa7d2252560a2b7e Certificate serial: 019A4E86674BFFC04CE7F805C0EA5048D83D Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/_zFJJHOnjG_p9Tn5-n0iUlYKK34.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/c3/1b4105-3471-4592-bf07-73fd3bc19aa7/1/_zFJJHOnjG_p9Tn5-n0iUlYKK34.mft Manifest number: 16D4 Signing time: Tue 04 Nov 2025 11:00:22 +0000 Manifest this update: Tue 04 Nov 2025 11:00:22 +0000 Manifest next update: Wed 05 Nov 2025 11:00:22 +0000 Files and hashes: 1: F_cRK7_FuJ1SOPF-eStGPWamodQ.roa (hash: bwgPCaYQdCUVOLDgCvOHRKGxaq7IRtIbjKPrwDwOiGI=) 2: Itnfb5cOidqPHmrm9ItGmwZzqpE.roa (hash: iss4kvemyRAUGLNEu7CN/erlN+DUp3hzgmc3aCXZAfU=) 3: JaFKfYKslg0WUVhBG8hHu6LqTvw.roa (hash: 4GgDdTVxQxqewTP0EOz1RIPWIQ2EEWazgc1qxopxzyA=) 4: NiD2SDjoMC5kCqhJ0LqUs7rzMnw.roa (hash: 9+KHXzf6QQ6hX/XBCMhmaRntprEYELpBh7Oa+Qw01T4=) 5: ShXwELNENSFmGBdjnWGg5NqouYI.roa (hash: CvtdGpDGnIEThk2qtR3nRVqJ7XKDlnHvbjdMw3b5GEg=) 6: U6O4fPn6akIpWmgc4yJT0O6kLpo.roa (hash: yofA2VyhfSO3CESlgcLfFamVAKarRdUA7fzOcVSh6T0=) 7: _zFJJHOnjG_p9Tn5-n0iUlYKK34.crl (hash: bP5RMedO+AZ/FWpgT+E9vy0R+bonDLkce0dki6Hw294=) 8: ccs7nyLFaW5A18K4O1qhpOVnDF0.roa (hash: kVq8Rt+cDTCddUdzX9poi4CfmBkJSUYFh1PJxqkXE8A=) 9: u3VJR1_M7JzYx842qLGTM0en5V0.roa (hash: qbP/xDwKS1NUr1YSZhW1L+ZrVrT39XIk/W4+EAm8kOI=) 10: y4Nw6VYuIuUZOv6I685fKqZhbWQ.roa (hash: JM0RAslsFdrhEKUBmY+ywDM/Jo6q24Igd7pWLFOkC9Q=) 11: zIstcjB0l5dXMsxLJF-PmySyWoY.roa (hash: sZKTonBPo728p5sx2a7KurcsOwIi7QOOMBd8o6TZnS4=) Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/c3/1b4105-3471-4592-bf07-73fd3bc19aa7/1/_zFJJHOnjG_p9Tn5-n0iUlYKK34.crl rsync://rpki.ripe.net/repository/DEFAULT/c3/1b4105-3471-4592-bf07-73fd3bc19aa7/1/_zFJJHOnjG_p9Tn5-n0iUlYKK34.mft rsync://rpki.ripe.net/repository/DEFAULT/_zFJJHOnjG_p9Tn5-n0iUlYKK34.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Wed 05 Nov 2025 09:00:03 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9a:4e:86:67:4b:ff:c0:4c:e7:f8:05:c0:ea:50:48:d8:3d Signature Algorithm: sha256WithRSAEncryption Issuer: CN=ff31492473a78c6fe9f539f9fa7d2252560a2b7e Validity Not Before: Nov 4 11:00:22 2025 GMT Not After : Nov 5 11:00:22 2025 GMT Subject: CN=0a5732c39c126abe826c43f126bd7b3d8ef5f3ac Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:91:6d:60:93:40:5b:03:d0:ba:41:0b:b2:2c:7b: 98:25:4b:62:79:6d:2f:ad:b9:17:6d:d1:b8:e1:ef: 13:17:05:b7:f5:66:5e:b3:f9:33:38:c6:ac:76:37: 72:5b:a7:30:c4:be:d1:4c:c5:3c:71:75:13:0c:c2: 8b:ad:29:e5:3f:e0:58:b2:b9:60:c0:14:e2:22:3e: e7:33:8c:d0:c0:a3:c4:93:57:68:af:d6:b5:21:77: be:ef:bb:9a:66:d3:7c:6f:7b:07:1d:22:50:86:f9: 50:34:29:a5:86:61:4d:22:b3:f0:de:c9:4b:50:c4: b7:e4:eb:d2:ca:78:f4:23:8b:33:21:20:f9:5a:cb: 9f:c1:d5:81:92:08:cd:7f:48:f9:f5:38:9e:bf:9b: 93:45:c7:ee:c8:3c:97:28:8f:e0:1d:df:63:7c:8e: 61:27:92:8a:0e:3b:a4:b5:eb:15:6c:b8:ec:b7:34: 27:5e:42:9d:04:5c:11:39:a3:51:ec:df:51:7a:ce: c2:64:c9:33:f5:9d:0e:61:45:96:ea:38:bc:d2:90: 54:33:b0:56:14:8a:48:21:a6:42:f4:8c:d0:d0:6b: 75:6c:ce:ce:3f:ba:a2:a9:db:7a:d6:eb:23:1f:8e: 33:ad:80:4d:a3:e8:ee:47:fa:85:44:7c:37:b9:bb: 5b:e1 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 0A:57:32:C3:9C:12:6A:BE:82:6C:43:F1:26:BD:7B:3D:8E:F5:F3:AC X509v3 Authority Key Identifier: keyid:FF:31:49:24:73:A7:8C:6F:E9:F5:39:F9:FA:7D:22:52:56:0A:2B:7E X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/_zFJJHOnjG_p9Tn5-n0iUlYKK34.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/c3/1b4105-3471-4592-bf07-73fd3bc19aa7/1/_zFJJHOnjG_p9Tn5-n0iUlYKK34.mft X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/c3/1b4105-3471-4592-bf07-73fd3bc19aa7/1/_zFJJHOnjG_p9Tn5-n0iUlYKK34.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 19:10:ad:a2:ea:05:51:66:c6:71:04:26:f1:22:43:22:05:d0: 0f:4f:a3:34:87:d2:71:34:b8:fb:b2:3f:59:96:af:79:e5:78: 98:59:dc:d1:52:96:80:ba:9c:d2:07:98:d9:36:81:61:4e:2b: 7e:e7:0a:4a:01:e6:ce:00:3d:cc:c9:dd:df:30:04:e9:bf:4f: dc:d0:b2:40:7c:d1:d1:08:98:d8:25:fa:09:89:1d:d2:d8:57: 4c:94:db:bb:52:9c:fb:aa:f4:67:50:06:cb:f3:8f:1b:91:cc: 94:2c:55:a0:87:27:3b:db:dc:b1:7c:2b:85:ac:bb:35:81:3a: 25:d8:7c:42:dd:a6:5a:7f:ae:fc:d6:0e:71:ce:f2:5b:a7:a0: 87:0d:4a:1e:ba:e2:f2:54:58:5d:2f:b3:a4:6c:59:ed:a1:50: 36:1c:79:61:69:3b:cb:bc:f5:2d:3a:88:52:94:dc:40:28:3e: 9c:ab:58:bb:65:6a:95:fb:ad:a1:55:af:b1:e8:88:eb:30:5c: 43:bb:e1:cd:f7:92:8d:b0:4d:6f:8a:cd:60:f3:48:66:1e:3a: 20:ae:dc:f9:45:ee:78:8b:a2:0a:3c:4e:fb:dd:e5:cd:f1:e3: c9:8d:e4:00:ae:aa:75:2a:04:13:62:6d:a1:6d:01:a6:48:69: bf:b0:25:7b -----BEGIN CERTIFICATE----- MIIFFjCCA/6gAwIBAgISAZpOhmdL/8BM5/gFwOpQSNg9MA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKGZmMzE0OTI0NzNhNzhjNmZlOWY1MzlmOWZhN2QyMjUyNTYw YTJiN2UwHhcNMjUxMTA0MTEwMDIyWhcNMjUxMTA1MTEwMDIyWjAzMTEwLwYDVQQD EygwYTU3MzJjMzljMTI2YWJlODI2YzQzZjEyNmJkN2IzZDhlZjVmM2FjMIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAkW1gk0BbA9C6QQuyLHuYJUtieW0v rbkXbdG44e8TFwW39WZes/kzOMasdjdyW6cwxL7RTMU8cXUTDMKLrSnlP+BYsrlg wBTiIj7nM4zQwKPEk1dor9a1IXe+77uaZtN8b3sHHSJQhvlQNCmlhmFNIrPw3slL UMS35OvSynj0I4szISD5WsufwdWBkgjNf0j59Tiev5uTRcfuyDyXKI/gHd9jfI5h J5KKDjuktesVbLjstzQnXkKdBFwROaNR7N9Res7CZMkz9Z0OYUWW6ji80pBUM7BW FIpIIaZC9IzQ0Gt1bM7OP7qiqdt61usjH44zrYBNo+juR/qFRHw3ubtb4QIDAQAB o4ICIjCCAh4wHQYDVR0OBBYEFApXMsOcEmq+gmxD8Sa9ez2O9fOsMB8GA1UdIwQY MBaAFP8xSSRzp4xv6fU5+fp9IlJWCit+MA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvX3pGSkpIT25qR19wOVRuNS1uMGlVbFlLSzM0LmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC9jMy8xYjQxMDUtMzQ3MS00NTkyLWJmMDct NzNmZDNiYzE5YWE3LzEvX3pGSkpIT25qR19wOVRuNS1uMGlVbFlLSzM0Lm1mdDCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC9jMy8xYjQxMDUtMzQ3MS00NTkyLWJmMDctNzNmZDNiYzE5YWE3 LzEvX3pGSkpIT25qR19wOVRuNS1uMGlVbFlLSzM0LmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAGRCtouoF UWbGcQQm8SJDIgXQD0+jNIfScTS4+7I/WZaveeV4mFnc0VKWgLqc0geY2TaBYU4r fucKSgHmzgA9zMnd3zAE6b9P3NCyQHzR0QiY2CX6CYkd0thXTJTbu1Kc+6r0Z1AG y/OPG5HMlCxVoIcnO9vcsXwrhay7NYE6Jdh8Qt2mWn+u/NYOcc7yW6eghw1KHrri 8lRYXS+zpGxZ7aFQNhx5YWk7y7z1LTqIUpTcQCg+nKtYu2VqlfutoVWvseiI6zBc Q7vhzfeSjbBNb4rNYPNIZh46IK7c+UXueIuiCjxO+93lzfHjyY3kAK6qdSoEE2Jt oW0Bpkhpv7Alew== -----END CERTIFICATE-----Generated at Tue Nov 4 18:20:04 2025 by rpki-client