$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/c5/888869-7a65-415b-b68f-5484402ceb7a/1/sMIK4drMoxgVsnRwKSfBpanbx7M.mft File: sMIK4drMoxgVsnRwKSfBpanbx7M.mft (raw, json) Hash identifier: 8E8NUajtBjHi9TLmItqPyXl/qg2gg2mYpoFpGeVlbDU= Subject key identifier: BD:B2:15:C6:00:D6:7B:E3:26:14:82:0A:24:54:C6:64:5D:76:FB:CB Authority key identifier: B0:C2:0A:E1:DA:CC:A3:18:15:B2:74:70:29:27:C1:A5:A9:DB:C7:B3 Certificate issuer: /CN=b0c20ae1dacca31815b274702927c1a5a9dbc7b3 Certificate serial: 019A4F6209DA42B88337B93AF80CEC44D0B1 Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/sMIK4drMoxgVsnRwKSfBpanbx7M.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/c5/888869-7a65-415b-b68f-5484402ceb7a/1/sMIK4drMoxgVsnRwKSfBpanbx7M.mft Manifest number: 1720 Signing time: Tue 04 Nov 2025 15:00:16 +0000 Manifest this update: Tue 04 Nov 2025 15:00:16 +0000 Manifest next update: Wed 05 Nov 2025 15:00:16 +0000 Files and hashes: 1: BO-bzW2V5HfZnpDWCOZRREj0_aA.roa (hash: bBvM5GD33JW26g6UBHC38zwmrN/wxvFNIrA/ZVP1z3g=) 2: D2VP3boIbKOt_7fZmoGwBMd0j_E.roa (hash: 5B9i3Ekd388l3dq3yF+uoTeTOTbzf9g6nU3q4mHoYKI=) 3: KDntMwv7lfN57GwH3c-ooOZ7MV8.roa (hash: N8ZIBiU8gH7tSdeMv2oT8+5VHr8ZvOaPGXUGzn1qd6o=) 4: MKXE3l_kRrUK-SEa0SjlnZgrzOY.roa (hash: qB75ATBjq0bvGr3VuX9ZJkiNF1i/cky+GUiK1V7um9s=) 5: OMLGm3M8AukdVmECZgGAm5oBI6w.roa (hash: NhtCtzcMBYjPL2amj6HhHMrktNr+dPVzL27OzOSW9VY=) 6: QhEieVCa4VzXwRS2R-uT3VD69zA.roa (hash: g7EksG6Y5xUVpGTxJtSk1SiYEQY9x4uAiGIMcbCmQ/k=) 7: T_vGm-YR8rSAG_LKyG-LL0j3jZY.roa (hash: ctLCD3mPPm9ORV/MIVYXQC7GReMvIOdcov6IyRw8Un0=) 8: VT5Wd_pqOJ9dH5ke9coXfMElArk.roa (hash: fLcCO/2FWRaPE55k8VUjCjI94f4/oSwtLUtlY9+MVT8=) 9: ZwvgwSFitJnn0NI2TLMjAG1OYEI.roa (hash: 3EAQTTBdwC0en0ttbPcWmRtInqoUrBVPVbUH2J6E2Tg=) 10: i2Cr6PSWUcoNruWdbdR97Em0Dh4.roa (hash: kTy26coV3ftFQPHtpIaAlqr+Ns/2fmpdvjWPntGul4A=) 11: sMIK4drMoxgVsnRwKSfBpanbx7M.crl (hash: +ZZ4+TC32sdyG1dj7ZIQwnvuYa0XK+DfN/fUUY/fmyk=) Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/c5/888869-7a65-415b-b68f-5484402ceb7a/1/sMIK4drMoxgVsnRwKSfBpanbx7M.crl rsync://rpki.ripe.net/repository/DEFAULT/c5/888869-7a65-415b-b68f-5484402ceb7a/1/sMIK4drMoxgVsnRwKSfBpanbx7M.mft rsync://rpki.ripe.net/repository/DEFAULT/sMIK4drMoxgVsnRwKSfBpanbx7M.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Wed 05 Nov 2025 15:00:16 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9a:4f:62:09:da:42:b8:83:37:b9:3a:f8:0c:ec:44:d0:b1 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=b0c20ae1dacca31815b274702927c1a5a9dbc7b3 Validity Not Before: Nov 4 15:00:16 2025 GMT Not After : Nov 5 15:00:16 2025 GMT Subject: CN=bdb215c600d67be32614820a2454c6645d76fbcb Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:c1:d2:ca:2e:f3:ba:22:d8:8f:48:25:d8:2b:06: 1a:cf:d8:d5:99:00:5e:b8:b7:89:a3:82:0a:29:a2: e1:15:e8:db:ff:79:f6:7b:46:c3:d5:c2:bb:e0:0c: 87:8a:ff:cf:2a:1d:de:16:b5:dd:92:5b:73:1a:23: e6:d0:ca:14:d8:f5:85:2e:81:12:19:21:24:db:0e: 7b:ae:30:47:08:73:d1:de:5e:cd:91:65:a5:06:ab: 45:c2:41:59:00:eb:4a:da:e3:40:55:90:48:af:05: 97:82:14:90:1d:f1:b2:3a:77:5a:d2:76:c9:6d:23: 53:1f:c0:05:ec:78:09:30:43:d2:58:de:b0:67:d7: aa:0e:ac:12:2d:39:d0:39:60:a4:39:09:f3:59:50: 5f:53:22:55:63:ce:7f:d6:53:66:df:c7:48:e0:b2: 65:2e:24:56:8f:4d:14:82:10:45:fb:95:60:4c:da: c9:f0:22:c5:41:b6:6d:3a:32:9f:06:3e:80:03:78: e1:f0:24:f2:a1:7a:a2:90:d3:b9:57:48:d7:73:5e: 3b:aa:f3:c0:0e:d9:d8:71:39:90:5f:ca:68:39:87: d6:29:99:7b:91:51:69:4e:ad:55:d0:31:9e:06:09: 36:4f:de:55:d3:5b:f1:d9:06:bf:a7:ca:94:37:91: 77:6d Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: BD:B2:15:C6:00:D6:7B:E3:26:14:82:0A:24:54:C6:64:5D:76:FB:CB X509v3 Authority Key Identifier: keyid:B0:C2:0A:E1:DA:CC:A3:18:15:B2:74:70:29:27:C1:A5:A9:DB:C7:B3 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/sMIK4drMoxgVsnRwKSfBpanbx7M.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/c5/888869-7a65-415b-b68f-5484402ceb7a/1/sMIK4drMoxgVsnRwKSfBpanbx7M.mft X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/c5/888869-7a65-415b-b68f-5484402ceb7a/1/sMIK4drMoxgVsnRwKSfBpanbx7M.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 09:ba:bc:0f:39:25:18:24:d5:d2:10:1c:8b:4d:86:e9:7a:71: 45:e2:65:1f:58:b9:e0:72:87:2e:4c:4f:24:76:2a:c4:92:65: 50:15:62:a5:1b:ec:9c:7b:74:0e:52:be:99:2d:f5:36:33:df: 0a:b7:1b:a2:95:b5:fc:47:eb:85:b6:23:91:49:8c:95:6e:ce: 2c:98:10:87:50:04:11:d0:bb:45:a5:70:21:0f:5f:69:8f:0a: 97:0c:f7:f0:76:01:49:ad:60:6e:4c:7b:43:5f:16:9c:ef:40: 40:73:8b:2a:02:47:de:b0:8a:41:ef:04:99:fc:79:fa:b2:c1: d9:26:5c:55:08:45:74:f3:ad:1a:03:06:42:1d:c0:6d:d5:60: e8:8b:b1:b5:ec:18:29:c0:3f:31:ea:b5:6d:61:e5:3f:e4:ca: 63:54:10:b5:15:81:3b:07:bc:98:25:82:36:ad:d1:1a:31:42: 34:da:46:1a:c2:76:60:d9:86:5d:d9:12:10:44:65:31:39:86: 55:19:b1:cb:21:17:6d:6a:14:34:df:5f:40:6b:fa:64:f5:24: e0:c0:8a:d6:8a:e5:7d:ef:3d:e1:72:1b:8f:01:6b:fc:80:35: 17:a6:fd:19:d8:78:91:39:92:ae:bd:37:54:ef:b1:30:2a:19: 3d:85:61:15 -----BEGIN CERTIFICATE----- MIIFFjCCA/6gAwIBAgISAZpPYgnaQriDN7k6+AzsRNCxMA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKGIwYzIwYWUxZGFjY2EzMTgxNWIyNzQ3MDI5MjdjMWE1YTlk YmM3YjMwHhcNMjUxMTA0MTUwMDE2WhcNMjUxMTA1MTUwMDE2WjAzMTEwLwYDVQQD EyhiZGIyMTVjNjAwZDY3YmUzMjYxNDgyMGEyNDU0YzY2NDVkNzZmYmNiMIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAwdLKLvO6ItiPSCXYKwYaz9jVmQBe uLeJo4IKKaLhFejb/3n2e0bD1cK74AyHiv/PKh3eFrXdkltzGiPm0MoU2PWFLoES GSEk2w57rjBHCHPR3l7NkWWlBqtFwkFZAOtK2uNAVZBIrwWXghSQHfGyOnda0nbJ bSNTH8AF7HgJMEPSWN6wZ9eqDqwSLTnQOWCkOQnzWVBfUyJVY85/1lNm38dI4LJl LiRWj00UghBF+5VgTNrJ8CLFQbZtOjKfBj6AA3jh8CTyoXqikNO5V0jXc147qvPA DtnYcTmQX8poOYfWKZl7kVFpTq1V0DGeBgk2T95V01vx2Qa/p8qUN5F3bQIDAQAB o4ICIjCCAh4wHQYDVR0OBBYEFL2yFcYA1nvjJhSCCiRUxmRddvvLMB8GA1UdIwQY MBaAFLDCCuHazKMYFbJ0cCknwaWp28ezMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvc01JSzRkck1veGdWc25Sd0tTZkJwYW5ieDdNLmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC9jNS84ODg4NjktN2E2NS00MTViLWI2OGYt NTQ4NDQwMmNlYjdhLzEvc01JSzRkck1veGdWc25Sd0tTZkJwYW5ieDdNLm1mdDCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC9jNS84ODg4NjktN2E2NS00MTViLWI2OGYtNTQ4NDQwMmNlYjdh LzEvc01JSzRkck1veGdWc25Sd0tTZkJwYW5ieDdNLmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEACbq8Dzkl GCTV0hAci02G6XpxReJlH1i54HKHLkxPJHYqxJJlUBVipRvsnHt0DlK+mS31NjPf CrcbopW1/EfrhbYjkUmMlW7OLJgQh1AEEdC7RaVwIQ9faY8Klwz38HYBSa1gbkx7 Q18WnO9AQHOLKgJH3rCKQe8Emfx5+rLB2SZcVQhFdPOtGgMGQh3AbdVg6IuxtewY KcA/Meq1bWHlP+TKY1QQtRWBOwe8mCWCNq3RGjFCNNpGGsJ2YNmGXdkSEERlMTmG VRmxyyEXbWoUNN9fQGv6ZPUk4MCK1orlfe894XIbjwFr/IA1F6b9Gdh4kTmSrr03 VO+xMCoZPYVhFQ== -----END CERTIFICATE-----Generated at Tue Nov 4 20:26:01 2025 by rpki-client