$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/c4/11e5b3-43aa-4279-9441-7e8c6d4d9bef/1/_97EpGpubk-aktC6Lgs6tWWL4b0.mft File: _97EpGpubk-aktC6Lgs6tWWL4b0.mft (raw, json) Hash identifier: e4zrmrAxow6bSOXvnKEX/Ndlw+XXwH3XGiRbk+qLuo4= Subject key identifier: E4:C1:00:1D:59:23:04:36:32:53:56:54:4A:82:DA:80:AD:0C:8F:6D Authority key identifier: FF:DE:C4:A4:6A:6E:6E:4F:9A:92:D0:BA:2E:0B:3A:B5:65:8B:E1:BD Certificate issuer: /CN=ffdec4a46a6e6e4f9a92d0ba2e0b3ab5658be1bd Certificate serial: 019A4EBD3C0F11A4F9E216F8E0482A739940 Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/_97EpGpubk-aktC6Lgs6tWWL4b0.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/c4/11e5b3-43aa-4279-9441-7e8c6d4d9bef/1/_97EpGpubk-aktC6Lgs6tWWL4b0.mft Manifest number: 172A Signing time: Tue 04 Nov 2025 12:00:15 +0000 Manifest this update: Tue 04 Nov 2025 12:00:15 +0000 Manifest next update: Wed 05 Nov 2025 12:00:15 +0000 Files and hashes: 1: 9LGSNE38RZCTyouOtHVx3qVP6lw.roa (hash: ugV2YTVWDidN8y0vBVq2PfGkhQx7PuXVEwNoZCBbGX8=) 2: OsAkT1Bjc6Bx57ink5LVscASSVM.roa (hash: Me3jYRS4jKNnlOdyWwLlCaXNsCc57NzdmZ5lT79t3Rw=) 3: RmwlFKm2A6wCOU2tiPLTSzuhAA8.roa (hash: NB+w6tJSmFPHFd2FMxkqFpCOapIk+qQqzfmt3QzOsMk=) 4: UobB1JoTOzUGFpCCZFbxasjgqAA.roa (hash: ms0cbPIRl6WuE78I/a1I+geJkM+CYYhZiVIqQ6+fwVY=) 5: VHd5a_VapfxG7J2dY8XaTIvUAnI.roa (hash: qmUiIRsWjUguSkm/l6NKSA85XaSwk7dvLg/NHHYCogc=) 6: VuROyrWs92eKXOizp2Q-0fnpLR0.roa (hash: fMjWZ/dM7054cYWsnjZNa6zVf7FPSoCGvOyM76Sl6Mc=) 7: VxRGHdP__z9RHajqH60awAUqQgg.roa (hash: tIdE9ZmAuCmbV7t2it8DIWQnm6yvOgpE7cprrHK2On0=) 8: _97EpGpubk-aktC6Lgs6tWWL4b0.crl (hash: CxT6Fot90tDe5moAedcC14g1xs4ck6PdIcNPyXfeOQA=) 9: iB5O2Dv_O9SgoFmPn7K4puMBzos.roa (hash: K+etiy0pRWQK1jSmyGFXzRfY6HxDEmZPOQqgSoVB5WI=) 10: pJnO9Ba6alCVKMIllyGL5_n-nHo.roa (hash: cF7/LpWh8txlnJKiWf+FQfbAzOZvclLDIIzD8uyNUD0=) 11: vWqmka3oaZQE1cXhvhKJIPN3ikY.roa (hash: wwmYNtR3Cqpxb6sHd4D0z140EddAwpyxzJ7dHxOqth4=) 12: zwTIjW4kVksFhIqqz0Hm86Td_eI.roa (hash: 4Gmw/YEt79d2ifSjcQjjCNUl4cViPsDbJFWDQ996oV4=) Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/c4/11e5b3-43aa-4279-9441-7e8c6d4d9bef/1/_97EpGpubk-aktC6Lgs6tWWL4b0.crl rsync://rpki.ripe.net/repository/DEFAULT/c4/11e5b3-43aa-4279-9441-7e8c6d4d9bef/1/_97EpGpubk-aktC6Lgs6tWWL4b0.mft rsync://rpki.ripe.net/repository/DEFAULT/_97EpGpubk-aktC6Lgs6tWWL4b0.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Wed 05 Nov 2025 09:00:03 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9a:4e:bd:3c:0f:11:a4:f9:e2:16:f8:e0:48:2a:73:99:40 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=ffdec4a46a6e6e4f9a92d0ba2e0b3ab5658be1bd Validity Not Before: Nov 4 12:00:15 2025 GMT Not After : Nov 5 12:00:15 2025 GMT Subject: CN=e4c1001d59230436325356544a82da80ad0c8f6d Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:c0:1c:36:65:06:8b:53:25:4d:97:ec:1d:82:e9: 97:b7:26:e0:0a:9e:cd:b3:bc:62:67:38:44:9c:cb: 50:dd:3b:ff:e1:df:01:57:09:aa:7c:08:a2:a3:b0: 63:cc:0e:c9:1b:27:26:4a:ad:a6:13:2f:37:fa:76: 06:77:6d:5b:0e:59:3a:1b:1e:4c:07:d9:9f:b9:7a: 69:7a:98:0c:d5:5c:b9:e3:ce:6f:01:d9:ae:5e:02: 79:9e:c2:2b:b4:92:50:10:d9:6e:c1:8b:e1:49:81: 3c:d7:38:cb:af:f8:07:72:88:dd:27:b1:ec:6d:5c: 08:a5:1b:ea:24:e5:26:77:3e:04:4f:91:04:d4:85: fc:53:27:73:1b:ee:8a:80:a6:7a:92:a3:01:c9:aa: f8:34:de:5f:6f:38:f1:d2:1a:af:89:ef:aa:18:be: 30:3f:5f:a2:ec:28:aa:2d:9e:37:24:b4:f9:d9:11: 7f:d6:97:0b:ee:12:e9:a5:2e:f6:9f:31:e6:c5:35: c4:00:1f:d8:31:01:91:82:25:c7:68:3c:b6:60:0f: 8b:ae:5f:ce:98:d8:9f:22:be:8f:0e:75:7e:d6:22: e1:c8:f3:d7:40:26:a6:36:17:01:f9:04:1f:e4:d0: d2:a9:2a:98:13:9c:c4:83:00:e8:e5:09:fe:2f:65: 6f:8f Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: E4:C1:00:1D:59:23:04:36:32:53:56:54:4A:82:DA:80:AD:0C:8F:6D X509v3 Authority Key Identifier: keyid:FF:DE:C4:A4:6A:6E:6E:4F:9A:92:D0:BA:2E:0B:3A:B5:65:8B:E1:BD X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/_97EpGpubk-aktC6Lgs6tWWL4b0.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/c4/11e5b3-43aa-4279-9441-7e8c6d4d9bef/1/_97EpGpubk-aktC6Lgs6tWWL4b0.mft X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/c4/11e5b3-43aa-4279-9441-7e8c6d4d9bef/1/_97EpGpubk-aktC6Lgs6tWWL4b0.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 3f:c6:a7:b4:48:70:56:bd:e8:35:41:3d:2f:aa:35:a8:16:9f: a0:01:6c:f3:93:c0:75:c1:bb:98:0c:a2:9c:a7:8b:0f:92:ae: ef:e6:d8:9f:30:5f:f6:72:7c:07:0e:40:29:42:a8:20:b7:d2: a6:e9:a3:5e:f2:d2:ab:90:7f:6b:e1:19:d6:db:95:5c:f9:e2: 3b:ff:56:48:cd:ba:a7:4b:24:82:d3:5c:12:14:d1:19:53:3b: ac:ad:dc:1a:c0:40:e5:35:87:3b:da:a6:c5:08:22:e0:a8:8e: 12:b6:9a:77:ba:d8:2f:02:1f:64:8f:f3:d3:a7:f9:62:88:5b: bf:62:11:85:f9:b6:4c:5c:62:1b:9b:b6:7d:c5:2a:fd:a2:20: c8:49:9f:4c:63:60:14:09:4a:85:ca:3b:c1:67:b2:c2:43:7f: 95:28:a1:c2:0b:a7:bb:7b:df:a2:80:9a:d4:2a:12:41:dd:51: 5b:6e:d9:a6:7f:2a:99:16:f1:e4:7e:f3:12:fe:5f:e9:72:15: e9:da:19:0c:57:02:00:11:fe:91:9c:00:9f:a6:25:29:4a:51: 85:69:d4:7f:dc:34:1b:dd:4d:b7:53:a3:1d:97:56:81:cd:a0: 3f:63:4e:f5:a0:fd:ba:d4:f1:af:c9:51:5c:da:a0:4b:01:f1: 36:ad:b5:f2 -----BEGIN CERTIFICATE----- MIIFFjCCA/6gAwIBAgISAZpOvTwPEaT54hb44Egqc5lAMA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKGZmZGVjNGE0NmE2ZTZlNGY5YTkyZDBiYTJlMGIzYWI1NjU4 YmUxYmQwHhcNMjUxMTA0MTIwMDE1WhcNMjUxMTA1MTIwMDE1WjAzMTEwLwYDVQQD EyhlNGMxMDAxZDU5MjMwNDM2MzI1MzU2NTQ0YTgyZGE4MGFkMGM4ZjZkMIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAwBw2ZQaLUyVNl+wdgumXtybgCp7N s7xiZzhEnMtQ3Tv/4d8BVwmqfAiio7BjzA7JGycmSq2mEy83+nYGd21bDlk6Gx5M B9mfuXppepgM1Vy5485vAdmuXgJ5nsIrtJJQENluwYvhSYE81zjLr/gHcojdJ7Hs bVwIpRvqJOUmdz4ET5EE1IX8UydzG+6KgKZ6kqMByar4NN5fbzjx0hqvie+qGL4w P1+i7CiqLZ43JLT52RF/1pcL7hLppS72nzHmxTXEAB/YMQGRgiXHaDy2YA+Lrl/O mNifIr6PDnV+1iLhyPPXQCamNhcB+QQf5NDSqSqYE5zEgwDo5Qn+L2VvjwIDAQAB o4ICIjCCAh4wHQYDVR0OBBYEFOTBAB1ZIwQ2MlNWVEqC2oCtDI9tMB8GA1UdIwQY MBaAFP/exKRqbm5PmpLQui4LOrVli+G9MA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvXzk3RXBHcHViay1ha3RDNkxnczZ0V1dMNGIwLmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC9jNC8xMWU1YjMtNDNhYS00Mjc5LTk0NDEt N2U4YzZkNGQ5YmVmLzEvXzk3RXBHcHViay1ha3RDNkxnczZ0V1dMNGIwLm1mdDCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC9jNC8xMWU1YjMtNDNhYS00Mjc5LTk0NDEtN2U4YzZkNGQ5YmVm LzEvXzk3RXBHcHViay1ha3RDNkxnczZ0V1dMNGIwLmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAP8antEhw Vr3oNUE9L6o1qBafoAFs85PAdcG7mAyinKeLD5Ku7+bYnzBf9nJ8Bw5AKUKoILfS pumjXvLSq5B/a+EZ1tuVXPniO/9WSM26p0skgtNcEhTRGVM7rK3cGsBA5TWHO9qm xQgi4KiOEraad7rYLwIfZI/z06f5Yohbv2IRhfm2TFxiG5u2fcUq/aIgyEmfTGNg FAlKhco7wWeywkN/lSihwgunu3vfooCa1CoSQd1RW27Zpn8qmRbx5H7zEv5f6XIV 6doZDFcCABH+kZwAn6YlKUpRhWnUf9w0G91Nt1OjHZdWgc2gP2NO9aD9utTxr8lR XNqgSwHxNq218g== -----END CERTIFICATE-----Generated at Tue Nov 4 14:41:29 2025 by rpki-client