$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/c5/9ab42a-df92-4e42-9e33-5c5892afa487/1/8E6yBPNYAEeIIk4vsY5NXnS-v40.mft File: 8E6yBPNYAEeIIk4vsY5NXnS-v40.mft (raw, json) Hash identifier: +YupV2gQ33ikdC84xd7fBlbJRjzu2vS8u0nus5/0FmI= Subject key identifier: B0:51:BF:2A:CF:C0:BD:8D:E4:7C:0D:39:96:DD:2B:5E:AF:A9:55:B2 Authority key identifier: F0:4E:B2:04:F3:58:00:47:88:22:4E:2F:B1:8E:4D:5E:74:BE:BF:8D Certificate issuer: /CN=f04eb204f358004788224e2fb18e4d5e74bebf8d Certificate serial: 019A4D74630F43654F02CECE8BD6F86C9503 Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/8E6yBPNYAEeIIk4vsY5NXnS-v40.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/c5/9ab42a-df92-4e42-9e33-5c5892afa487/1/8E6yBPNYAEeIIk4vsY5NXnS-v40.mft Manifest number: 1130 Signing time: Tue 04 Nov 2025 06:01:04 +0000 Manifest this update: Tue 04 Nov 2025 06:01:04 +0000 Manifest next update: Wed 05 Nov 2025 06:01:04 +0000 Files and hashes: 1: 1gtsCJyHdZ_mz1Vmc6aYSOZRTug.roa (hash: i5FmepCDxpYMWJtIWumi8I2WhRPEkV925D+zrSFUKqc=) 2: 8E6yBPNYAEeIIk4vsY5NXnS-v40.crl (hash: iIeo+JMP16Jb2zLH2/gSZNu7g+bO42G+bjBw0jJafnM=) 3: AFN8OqvwZcsViNN-78O6BvKElME.roa (hash: gpOsJUC88/6LJdG6QKOWEGeO9P8/YN9o1I8OET+li9E=) 4: HzrOiNg5IGbvxaY6EJtaFTiPwJc.roa (hash: YVHrJ9qFMIVBjiboinqQXWeAb+UlfN0QhYG5EqTl3JU=) 5: KuzmOknbrD4Lg71OoDCO-y0GoDQ.roa (hash: L4TpWALjC8fwxZDKVNiQiJm1WAVC/DpX7t4BNMww1vk=) 6: N-Bn6UoZzfA4_e9vqjwupkidrwM.roa (hash: P0ucGjyfHx1AsSd/Hp9hPmA5fgW6WVVitbxsp2xrVOM=) 7: Xw6d5Q0Ua1XRZl5MjugABbqCL-g.roa (hash: 7lcJjOAWe6HvAJ8ku7/K4ZXcDrrbdwoOF4w1DXALzIA=) 8: hFAl1HVJl_9l3iGKDXy7Q3YLL-4.roa (hash: t3lebss2cDykApymCPDX/VFxLKKQQSAwSa+9uLLWAvg=) 9: ij6-YE2XVidboU68JMPVKequ6tg.roa (hash: YEMop9i5KBqo0Emc5LLaJ2ZkaUOlrtnZjcsi8p8jPuQ=) 10: lmLPjrfNDPS9XohB9eEXKDTvTVw.roa (hash: YUDeNZCjz7C+nv1yj/KNPiCOaWxteb6jP1PE6tH/qfc=) 11: vir9lXd95VlX33FtFKeYsF-pV7c.roa (hash: qWwJG4kSEBMq0oRm7MvhT+tJgjjEqP9pDam2i3CMe+g=) 12: vwnatcxNwSZQjN_EAgtCA6gLjGQ.roa (hash: is+QjkNRgmAAQFm1WLdb+VI9EY3XXeS9tjv/htKBkks=) 13: wOKO5BfevHhq6oErWALub8pu8xU.roa (hash: JFoG8SyIRYLSlAyJTBoEWjYzWkPzFQdNMJLWFlUmxRU=) Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/c5/9ab42a-df92-4e42-9e33-5c5892afa487/1/8E6yBPNYAEeIIk4vsY5NXnS-v40.crl rsync://rpki.ripe.net/repository/DEFAULT/c5/9ab42a-df92-4e42-9e33-5c5892afa487/1/8E6yBPNYAEeIIk4vsY5NXnS-v40.mft rsync://rpki.ripe.net/repository/DEFAULT/8E6yBPNYAEeIIk4vsY5NXnS-v40.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Wed 05 Nov 2025 06:01:04 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9a:4d:74:63:0f:43:65:4f:02:ce:ce:8b:d6:f8:6c:95:03 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=f04eb204f358004788224e2fb18e4d5e74bebf8d Validity Not Before: Nov 4 06:01:04 2025 GMT Not After : Nov 5 06:01:04 2025 GMT Subject: CN=b051bf2acfc0bd8de47c0d3996dd2b5eafa955b2 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:a2:26:88:62:d0:02:73:57:d4:96:ee:df:5c:e3: ae:0b:50:23:42:d0:01:55:ad:6e:15:bb:f0:83:46: bc:b0:aa:1f:5c:31:16:a8:84:ff:ff:c2:6f:f7:eb: 34:5f:a8:ce:a0:19:4e:cc:d8:21:c4:81:86:bf:72: cc:f3:5c:9e:fd:1b:a9:59:0d:e1:4c:24:fb:a8:1b: 42:60:ee:84:8d:ad:11:e5:a3:cc:aa:b1:37:02:e6: 3d:19:4e:ab:f8:64:60:85:95:2b:21:ef:af:18:38: ad:50:b8:a7:7e:0d:c3:a2:dc:5a:75:47:5d:06:17: 0a:73:36:6c:1d:b3:d1:81:61:21:c9:aa:3e:4c:e0: cc:ff:e1:a1:1e:95:5e:53:6e:61:e5:4b:67:e0:91: 32:c9:98:2e:9f:8a:cc:af:2f:9c:c1:cd:1e:50:75: 81:38:00:e1:f3:9d:d0:18:89:02:ed:c2:84:2e:69: 67:00:e5:15:ad:4a:49:6d:a0:95:21:59:83:58:0f: e2:fc:a9:7a:e9:1a:90:c5:f5:26:8c:3e:d7:ff:76: 9b:cd:f6:35:d7:f0:4b:bd:85:d1:2d:55:1b:4a:60: 12:d9:a9:51:f6:95:5a:e0:90:ae:0a:ee:93:73:22: 3c:17:ab:be:22:85:0d:8b:8b:f5:9c:f0:15:2f:18: f5:ab Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: B0:51:BF:2A:CF:C0:BD:8D:E4:7C:0D:39:96:DD:2B:5E:AF:A9:55:B2 X509v3 Authority Key Identifier: keyid:F0:4E:B2:04:F3:58:00:47:88:22:4E:2F:B1:8E:4D:5E:74:BE:BF:8D X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/8E6yBPNYAEeIIk4vsY5NXnS-v40.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/c5/9ab42a-df92-4e42-9e33-5c5892afa487/1/8E6yBPNYAEeIIk4vsY5NXnS-v40.mft X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/c5/9ab42a-df92-4e42-9e33-5c5892afa487/1/8E6yBPNYAEeIIk4vsY5NXnS-v40.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 12:54:96:43:6f:26:5f:6d:18:d9:dd:b2:c8:ef:72:1d:fe:b3: 93:59:9a:7a:bb:44:84:1b:f9:6b:c7:42:11:9e:39:8f:e0:56: 55:c0:43:0d:19:c1:d1:93:d2:fe:a9:04:a3:98:d3:6f:c0:2f: 5c:7b:3f:ae:1f:f9:e7:f7:f9:2a:5f:b6:31:5d:f2:2d:8b:1b: ba:5f:5c:21:67:18:48:ed:bc:1d:c3:3c:0a:e0:ef:77:64:b8: 12:dc:4f:8b:50:01:06:e4:95:f7:67:73:2a:67:80:f3:e4:8a: 4f:3b:77:e7:c6:e7:dd:68:da:67:13:a8:2c:63:3b:4b:67:99: d8:af:1c:02:95:29:15:21:38:43:ae:e9:1d:ec:d9:f8:13:d7: a3:46:2b:42:91:31:08:25:d7:67:10:26:a0:8d:c2:db:ee:66: 39:09:90:1e:90:dd:08:f4:98:75:e3:c1:f4:d2:eb:dc:fa:76: ba:40:ef:8f:5b:a7:d2:e5:da:d1:a8:d8:07:0e:e8:1a:b6:3c: b9:ff:09:4b:74:d3:77:ba:d1:a8:9c:af:f8:b7:18:64:ac:67: 3c:5c:55:f8:e3:99:c7:5d:de:f8:ab:54:e6:53:01:0f:5e:2b: c0:43:3a:66:e7:5a:27:d0:d1:47:db:2e:d5:11:07:79:d3:c5: 1a:f8:e7:ca -----BEGIN CERTIFICATE----- MIIFFjCCA/6gAwIBAgISAZpNdGMPQ2VPAs7Oi9b4bJUDMA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKGYwNGViMjA0ZjM1ODAwNDc4ODIyNGUyZmIxOGU0ZDVlNzRi ZWJmOGQwHhcNMjUxMTA0MDYwMTA0WhcNMjUxMTA1MDYwMTA0WjAzMTEwLwYDVQQD EyhiMDUxYmYyYWNmYzBiZDhkZTQ3YzBkMzk5NmRkMmI1ZWFmYTk1NWIyMIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAoiaIYtACc1fUlu7fXOOuC1AjQtAB Va1uFbvwg0a8sKofXDEWqIT//8Jv9+s0X6jOoBlOzNghxIGGv3LM81ye/RupWQ3h TCT7qBtCYO6Eja0R5aPMqrE3AuY9GU6r+GRghZUrIe+vGDitULinfg3DotxadUdd BhcKczZsHbPRgWEhyao+TODM/+GhHpVeU25h5Utn4JEyyZgun4rMry+cwc0eUHWB OADh853QGIkC7cKELmlnAOUVrUpJbaCVIVmDWA/i/Kl66RqQxfUmjD7X/3abzfY1 1/BLvYXRLVUbSmAS2alR9pVa4JCuCu6TcyI8F6u+IoUNi4v1nPAVLxj1qwIDAQAB o4ICIjCCAh4wHQYDVR0OBBYEFLBRvyrPwL2N5HwNOZbdK16vqVWyMB8GA1UdIwQY MBaAFPBOsgTzWABHiCJOL7GOTV50vr+NMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvOEU2eUJQTllBRWVJSWs0dnNZNU5YblMtdjQwLmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC9jNS85YWI0MmEtZGY5Mi00ZTQyLTllMzMt NWM1ODkyYWZhNDg3LzEvOEU2eUJQTllBRWVJSWs0dnNZNU5YblMtdjQwLm1mdDCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC9jNS85YWI0MmEtZGY5Mi00ZTQyLTllMzMtNWM1ODkyYWZhNDg3 LzEvOEU2eUJQTllBRWVJSWs0dnNZNU5YblMtdjQwLmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAElSWQ28m X20Y2d2yyO9yHf6zk1maertEhBv5a8dCEZ45j+BWVcBDDRnB0ZPS/qkEo5jTb8Av XHs/rh/55/f5Kl+2MV3yLYsbul9cIWcYSO28HcM8CuDvd2S4EtxPi1ABBuSV92dz KmeA8+SKTzt358bn3WjaZxOoLGM7S2eZ2K8cApUpFSE4Q67pHezZ+BPXo0YrQpEx CCXXZxAmoI3C2+5mOQmQHpDdCPSYdePB9NLr3Pp2ukDvj1un0uXa0ajYBw7oGrY8 uf8JS3TTd7rRqJyv+LcYZKxnPFxV+OOZx13e+KtU5lMBD14rwEM6ZudaJ9DRR9su 1REHedPFGvjnyg== -----END CERTIFICATE-----Generated at Tue Nov 4 14:21:24 2025 by rpki-client