$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/c4/4f701a-ed6f-47c8-bf73-f4c5fc3ca2c4/1/opAORlWrNJpGMrFAcZ3JcjBDFyU.mft File: opAORlWrNJpGMrFAcZ3JcjBDFyU.mft (raw, json) Hash identifier: OCNq+Q8c5C9h6Ok6ty+TdIfQOsIp01wzfEXLBdAtAoQ= Subject key identifier: DE:6B:80:CB:D2:18:22:CF:A5:EE:86:43:0C:CF:22:4F:E9:5A:58:4C Authority key identifier: A2:90:0E:46:55:AB:34:9A:46:32:B1:40:71:9D:C9:72:30:43:17:25 Certificate issuer: /CN=a2900e4655ab349a4632b140719dc97230431725 Certificate serial: 019A5074B8205C23B5298C18DDEA1D1CC488 Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/opAORlWrNJpGMrFAcZ3JcjBDFyU.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/c4/4f701a-ed6f-47c8-bf73-f4c5fc3ca2c4/1/opAORlWrNJpGMrFAcZ3JcjBDFyU.mft Manifest number: 171E Signing time: Tue 04 Nov 2025 20:00:17 +0000 Manifest this update: Tue 04 Nov 2025 20:00:17 +0000 Manifest next update: Wed 05 Nov 2025 20:00:17 +0000 Files and hashes: 1: 0UXplScy_6bUua8Xwkci_CpGwkM.roa (hash: GRvkp2Rt8JLqAH5NPvZRPj7s1HlR19kYp/7XCNsxyNE=) 2: 14gXO5PLi0LoZ0DYGh9KK795laQ.roa (hash: EARGMMjNyaWuZ1stJfG6h12JcDBEupf11Ssao/d8baM=) 3: 8loW5HN3rlQsgDTApUmX4zxMYVo.roa (hash: LKWZ8SK1V+gZE1QR5SYwO3Jiw4zJ7265yXeEGQlZ8zw=) 4: Ah3KLJm-LKDPU2A-ukfbltAbHHE.roa (hash: swE4PQqkYwr3g++5aj4+DHREVDMSOVCdaIbmuqijBx8=) 5: DDAn0V8SSoUAqqE5fzd6yTf6vio.roa (hash: rVCSbprtHlhgRB9AzbTbTHTH0ZbS3aC9A5gq4r3O14U=) 6: Ptk1juvR6AU_vl6lr4RswBAQK74.roa (hash: 7usWDVylXyYylG7CWiaUKOpGSZfMt4/Ahvv6lHEknXQ=) 7: gH9l_Olu7Z11QNfATlwel8_lHng.roa (hash: Qy7a8ybAWRGH/C9L4lBi8o0qao1M7eUnSgkK9WeGPzo=) 8: kwOU6n2U0tlOOT5S3nqF-ntVFYQ.roa (hash: tJWykZcdes0s9amE0to1DThjyvp5rw7kHFWEXdqGdBw=) 9: opAORlWrNJpGMrFAcZ3JcjBDFyU.crl (hash: LCzSIH7eJXZ69oeC8Fw7BdbxvOJZ9uLAjgl2B2LD0z0=) 10: u3fVEc-RK0U4DFHiTlygDyKj4rI.roa (hash: Us98OeKKFK/pD4hLHv0TSn5RO0cC7LOagG2XI+ndne0=) Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/c4/4f701a-ed6f-47c8-bf73-f4c5fc3ca2c4/1/opAORlWrNJpGMrFAcZ3JcjBDFyU.crl rsync://rpki.ripe.net/repository/DEFAULT/c4/4f701a-ed6f-47c8-bf73-f4c5fc3ca2c4/1/opAORlWrNJpGMrFAcZ3JcjBDFyU.mft rsync://rpki.ripe.net/repository/DEFAULT/opAORlWrNJpGMrFAcZ3JcjBDFyU.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Wed 05 Nov 2025 18:00:03 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9a:50:74:b8:20:5c:23:b5:29:8c:18:dd:ea:1d:1c:c4:88 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=a2900e4655ab349a4632b140719dc97230431725 Validity Not Before: Nov 4 20:00:17 2025 GMT Not After : Nov 5 20:00:17 2025 GMT Subject: CN=de6b80cbd21822cfa5ee86430ccf224fe95a584c Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:a7:b7:ff:9f:40:01:ce:0a:28:a2:67:8d:f5:32: ca:4b:6d:14:35:14:d1:19:59:24:51:82:f3:55:fd: 5d:2a:56:b6:8c:b8:3e:74:be:44:aa:8d:4d:3b:d3: d6:61:cd:89:f7:9c:17:28:42:b2:9f:d4:04:7d:32: 2e:ec:29:f2:26:fe:e3:66:83:ad:dc:ef:74:0a:d3: a8:68:99:02:7c:80:4c:b6:ec:1f:20:e6:7d:3f:43: 6c:91:6c:db:c9:62:08:bd:c4:a2:66:ea:6a:85:31: f9:0f:df:d0:52:4b:bf:ce:00:08:88:e1:4d:9b:29: fb:7a:93:b6:6b:eb:01:44:b1:80:3c:45:32:cf:d9: 14:04:26:44:51:ac:56:70:e3:8d:aa:08:36:a1:8f: 96:b0:13:20:a6:3b:c7:05:1b:bb:66:b5:99:c5:af: 75:02:00:e0:64:41:ea:bf:fe:da:60:a4:8c:f8:c8: f3:d8:92:c4:06:0c:22:77:3e:23:3c:a8:7d:3e:8c: 0c:4f:5b:08:95:cb:91:8c:b1:89:e0:2d:93:6d:95: 16:0a:a6:45:a1:33:80:4f:87:07:88:eb:1c:6b:e8: 6d:a2:3e:78:2f:4c:5c:7f:dc:3a:d3:ba:47:b2:17: 4a:8b:8b:a9:0c:87:de:4d:2d:c0:32:01:93:2b:d1: a3:5f Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: DE:6B:80:CB:D2:18:22:CF:A5:EE:86:43:0C:CF:22:4F:E9:5A:58:4C X509v3 Authority Key Identifier: keyid:A2:90:0E:46:55:AB:34:9A:46:32:B1:40:71:9D:C9:72:30:43:17:25 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/opAORlWrNJpGMrFAcZ3JcjBDFyU.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/c4/4f701a-ed6f-47c8-bf73-f4c5fc3ca2c4/1/opAORlWrNJpGMrFAcZ3JcjBDFyU.mft X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/c4/4f701a-ed6f-47c8-bf73-f4c5fc3ca2c4/1/opAORlWrNJpGMrFAcZ3JcjBDFyU.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 20:75:52:5d:98:80:d7:35:dc:9b:cb:34:a3:7b:6e:eb:ec:0e: 1c:46:41:56:c5:ba:89:78:43:37:39:ac:54:ef:16:d9:93:1f: 22:fc:70:cb:d1:d6:e6:7e:5e:5d:76:63:1c:bb:48:ba:d4:3b: 4c:2e:82:fe:b3:0e:d5:cf:6b:85:0e:03:19:e7:67:1f:4e:05: 30:f7:06:2d:20:0c:bf:1e:60:1c:b2:18:2f:b8:24:56:d6:9d: 78:48:49:16:33:75:48:55:7a:bc:49:d2:a3:d0:2e:72:a4:b0: 15:65:c8:33:a2:92:a8:b3:81:59:b5:8c:07:42:cb:c6:1a:27: 99:8f:78:12:6e:d7:27:f5:51:52:ad:c0:56:f6:77:d4:3d:50: c2:85:fc:a5:08:2f:fa:96:35:94:b4:86:de:ac:32:43:2b:75: 80:9c:ae:2e:6d:01:fa:67:d6:b0:ae:9d:6f:2b:51:1d:96:a8: 12:bb:60:a2:1d:29:d2:a4:82:26:4f:ae:25:b0:47:dc:19:80: dd:25:2f:d5:f5:fe:c1:c4:6b:9b:4d:b3:5e:85:95:dc:83:58: ff:90:77:29:34:36:a4:d0:b8:8b:8a:25:7f:6c:79:09:0f:ce: ce:81:58:bc:45:c2:70:75:3e:bb:fb:8e:8e:55:a8:7c:6f:fd: 01:79:c8:87 -----BEGIN CERTIFICATE----- MIIFFjCCA/6gAwIBAgISAZpQdLggXCO1KYwY3eodHMSIMA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKGEyOTAwZTQ2NTVhYjM0OWE0NjMyYjE0MDcxOWRjOTcyMzA0 MzE3MjUwHhcNMjUxMTA0MjAwMDE3WhcNMjUxMTA1MjAwMDE3WjAzMTEwLwYDVQQD EyhkZTZiODBjYmQyMTgyMmNmYTVlZTg2NDMwY2NmMjI0ZmU5NWE1ODRjMIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAp7f/n0ABzgooomeN9TLKS20UNRTR GVkkUYLzVf1dKla2jLg+dL5Eqo1NO9PWYc2J95wXKEKyn9QEfTIu7CnyJv7jZoOt 3O90CtOoaJkCfIBMtuwfIOZ9P0NskWzbyWIIvcSiZupqhTH5D9/QUku/zgAIiOFN myn7epO2a+sBRLGAPEUyz9kUBCZEUaxWcOONqgg2oY+WsBMgpjvHBRu7ZrWZxa91 AgDgZEHqv/7aYKSM+Mjz2JLEBgwidz4jPKh9PowMT1sIlcuRjLGJ4C2TbZUWCqZF oTOAT4cHiOsca+htoj54L0xcf9w607pHshdKi4upDIfeTS3AMgGTK9GjXwIDAQAB o4ICIjCCAh4wHQYDVR0OBBYEFN5rgMvSGCLPpe6GQwzPIk/pWlhMMB8GA1UdIwQY MBaAFKKQDkZVqzSaRjKxQHGdyXIwQxclMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvb3BBT1JsV3JOSnBHTXJGQWNaM0pjakJERnlVLmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC9jNC80ZjcwMWEtZWQ2Zi00N2M4LWJmNzMt ZjRjNWZjM2NhMmM0LzEvb3BBT1JsV3JOSnBHTXJGQWNaM0pjakJERnlVLm1mdDCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC9jNC80ZjcwMWEtZWQ2Zi00N2M4LWJmNzMtZjRjNWZjM2NhMmM0 LzEvb3BBT1JsV3JOSnBHTXJGQWNaM0pjakJERnlVLmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAIHVSXZiA 1zXcm8s0o3tu6+wOHEZBVsW6iXhDNzmsVO8W2ZMfIvxwy9HW5n5eXXZjHLtIutQ7 TC6C/rMO1c9rhQ4DGednH04FMPcGLSAMvx5gHLIYL7gkVtadeEhJFjN1SFV6vEnS o9AucqSwFWXIM6KSqLOBWbWMB0LLxhonmY94Em7XJ/VRUq3AVvZ31D1QwoX8pQgv +pY1lLSG3qwyQyt1gJyuLm0B+mfWsK6dbytRHZaoErtgoh0p0qSCJk+uJbBH3BmA 3SUv1fX+wcRrm02zXoWV3INY/5B3KTQ2pNC4i4olf2x5CQ/OzoFYvEXCcHU+u/uO jlWofG/9AXnIhw== -----END CERTIFICATE-----Generated at Wed Nov 5 01:55:04 2025 by rpki-client