$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/c8/5759f6-93e2-4029-a49f-35ba267ded3b/1/DnX7T1KoKdE24pqaAlxjbRmuMo4.mft File: DnX7T1KoKdE24pqaAlxjbRmuMo4.mft (raw, json) Hash identifier: aiQCGxDnSaL3YZD/apjNoCYoGZUbWykupvSbU4Ygrxo= Subject key identifier: CA:8D:A7:F5:BF:88:39:DC:8A:3A:B1:69:F3:E7:F5:7F:9E:FB:48:63 Authority key identifier: 0E:75:FB:4F:52:A8:29:D1:36:E2:9A:9A:02:5C:63:6D:19:AE:32:8E Certificate issuer: /CN=0e75fb4f52a829d136e29a9a025c636d19ae328e Certificate serial: 019A4DE197FAE5EFF61774C3A6AFFD285789 Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/DnX7T1KoKdE24pqaAlxjbRmuMo4.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/c8/5759f6-93e2-4029-a49f-35ba267ded3b/1/DnX7T1KoKdE24pqaAlxjbRmuMo4.mft Manifest number: 0A5F Signing time: Tue 04 Nov 2025 08:00:21 +0000 Manifest this update: Tue 04 Nov 2025 08:00:21 +0000 Manifest next update: Wed 05 Nov 2025 08:00:21 +0000 Files and hashes: 1: 2i2Vy05Tg_e1ak_1Uk12CnilxHg.roa (hash: NqduqZJuAkmB6MV5SKQihh3yDbwkeeFnfpDnTNMY130=) 2: 73x2Y8rtkrW56QrQQDyvuiFLG40.roa (hash: oxRcUfzeJXkoQZbB0gN4SvScUE5rLGzaBI9pXSTycUY=) 3: 9V0vcgO-bdJZakQILqcfcNUVDzs.roa (hash: rTVAfA+3goVyX4gfp8i16RQoEb4IWxA+yVUwUEUJp9c=) 4: 9wVDQpp0z04zwfoESc_S5u9etZ0.roa (hash: +x8r2JMNLKJOL0pGTh/MSwGY9V5+DOeggrdlCFNLMkg=) 5: DEEKMObjh2dv97ksxPHzfvJBIUE.roa (hash: g8hI8D0q/fLifbYomnOLeWF4o33+VutdXsr+kOmxBJU=) 6: DnX7T1KoKdE24pqaAlxjbRmuMo4.crl (hash: FMjnEzQ1vDrXGSC0RzG2tm2SrdeJwxjsRBipyV6XAZE=) 7: GZgpng6Ot_FGRMQou9o62VcEekY.roa (hash: LX9b2Js5i118pOJ0Nzr+pm+rZAe5EZDelGHWiSHQOWA=) 8: KX36I7dSkLFi2aH0eqBcDdn1RlA.roa (hash: uMMjk83OkXZQb4cTo6pJ1weYcZ0/vJkq+xb1gidjyYA=) 9: OjaH7K6CfyojVS6c46fulaH1p-M.roa (hash: +oZE9RnQm2ybyt6c5+lMZS7HBhz+F/aKH1dTBent0OM=) 10: WggPonyi31b-yIkSaCuExsTR9U0.roa (hash: tkUrHPw54S3hnUlb390kJ2ECtbQXaVRTzWQhKus6rlQ=) 11: cJ1rW8VClyRweGHbeEMtWBhnXAQ.roa (hash: xDtfcFeuvoc7H53dx6XMFpyYCc4Qq+FPUImWBrlN+70=) 12: fkiMonxbwz3kZc8YkJyvn2qIywM.roa (hash: fqrrGCyxmQcRYifeeyyNsSENvJ1MUubmLT6QjBEi5nc=) 13: hirG0wCdPPp74UU2BJCRBx2I3xI.roa (hash: NoA4bfTe2eDgcbMz4bkkr7hReCXWcPMZ0ab/qV2+EuU=) 14: yQ91zssiLccRHA5nLDLCbHVrzwY.roa (hash: jHNMPrDscbkXMeLXgNIGaBErBrBnGqdgI+yTuRlxq7Q=) 15: yohJslaqJeqxG9ZdmhfVBivAGaE.roa (hash: SxCXBWVxQCB+hqHsFFhyla2B81f/O/PjbQmRobaYZP8=) Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/c8/5759f6-93e2-4029-a49f-35ba267ded3b/1/DnX7T1KoKdE24pqaAlxjbRmuMo4.crl rsync://rpki.ripe.net/repository/DEFAULT/c8/5759f6-93e2-4029-a49f-35ba267ded3b/1/DnX7T1KoKdE24pqaAlxjbRmuMo4.mft rsync://rpki.ripe.net/repository/DEFAULT/DnX7T1KoKdE24pqaAlxjbRmuMo4.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Wed 05 Nov 2025 08:00:21 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9a:4d:e1:97:fa:e5:ef:f6:17:74:c3:a6:af:fd:28:57:89 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=0e75fb4f52a829d136e29a9a025c636d19ae328e Validity Not Before: Nov 4 08:00:21 2025 GMT Not After : Nov 5 08:00:21 2025 GMT Subject: CN=ca8da7f5bf8839dc8a3ab169f3e7f57f9efb4863 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:a6:ed:00:76:38:82:e8:c5:2a:97:89:12:16:86: 69:8d:b7:1e:cf:e7:f5:c3:6c:df:53:8f:1d:5f:06: 33:a2:ed:83:03:78:52:b4:99:74:70:1f:6b:77:58: 51:2f:68:4e:12:ad:9a:91:66:2c:0d:9c:03:10:cb: 65:f0:a2:63:84:79:de:65:84:82:d3:c5:ab:fd:02: 41:b4:28:95:a6:e6:7d:d1:f6:65:3b:51:2b:e3:07: f1:5c:9f:a1:64:be:5e:04:64:b5:c1:72:95:a4:f5: 7d:7a:a6:02:f5:be:cd:7c:13:da:b5:50:23:0c:7f: 32:4c:a2:b7:e9:86:5c:c1:ec:66:c1:3e:88:28:b3: e6:32:3f:d1:d4:58:52:09:29:b0:fd:69:b6:8b:31: 48:3a:62:49:e0:7f:27:f3:b8:12:ce:a6:aa:33:7c: 63:9f:c8:0d:21:d1:06:8b:68:a3:46:90:03:ce:dc: a1:51:25:ac:13:a3:d2:93:18:8d:32:5b:a6:c8:93: 04:05:b9:c9:05:d9:ba:cf:d1:13:e6:d8:20:c5:94: 60:bf:d3:4a:4d:73:9c:76:94:ea:04:94:db:39:6d: 21:0d:f5:0c:9f:21:fc:6e:1e:ab:dd:31:5d:04:6e: 0e:75:ea:06:f5:b3:93:d2:ca:3c:1d:50:63:d6:fb: 10:99 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: CA:8D:A7:F5:BF:88:39:DC:8A:3A:B1:69:F3:E7:F5:7F:9E:FB:48:63 X509v3 Authority Key Identifier: keyid:0E:75:FB:4F:52:A8:29:D1:36:E2:9A:9A:02:5C:63:6D:19:AE:32:8E X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/DnX7T1KoKdE24pqaAlxjbRmuMo4.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/c8/5759f6-93e2-4029-a49f-35ba267ded3b/1/DnX7T1KoKdE24pqaAlxjbRmuMo4.mft X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/c8/5759f6-93e2-4029-a49f-35ba267ded3b/1/DnX7T1KoKdE24pqaAlxjbRmuMo4.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 6d:42:8e:10:31:3a:75:f0:2e:16:50:6c:72:55:2a:f2:65:74: e2:e2:00:10:00:6e:5c:62:a3:86:37:fd:c8:49:d1:c5:8a:08: fc:55:61:3b:db:0c:0c:29:80:3f:4b:68:90:25:f8:2c:da:57: 15:6f:6a:9f:43:d6:9e:02:fb:b1:a1:3e:3d:1f:6c:1d:8e:9d: 8a:56:7f:60:c5:8d:95:da:99:43:6f:7a:21:08:57:ea:bb:4a: 83:af:12:27:da:23:f4:01:29:56:fb:2a:55:6f:f5:c7:30:a6: 7a:4e:d5:4d:93:6b:93:ee:a8:9f:98:93:38:16:66:39:a8:fa: a6:49:e0:33:50:96:8e:88:40:0a:8e:80:3a:21:cd:28:0c:62: 06:e2:89:0b:c3:e7:f3:fa:66:b8:63:bd:f7:00:a6:e5:17:1d: 5e:18:45:1c:89:59:08:d2:1d:a0:07:f1:a1:39:cd:6a:3e:ab: 33:a0:10:93:c5:c9:80:a5:fc:09:4b:47:48:5e:b7:bc:f2:94: 82:30:f3:b7:a3:ec:cf:e8:cb:15:f7:89:27:36:42:06:15:8a: cc:9f:4f:1d:e7:66:3b:e6:c1:11:d3:cc:7f:95:e3:eb:4f:88: ab:df:5e:6b:50:dc:f3:4b:36:39:52:f3:32:f2:c9:af:57:58: be:63:ee:72 -----BEGIN CERTIFICATE----- MIIFFjCCA/6gAwIBAgISAZpN4Zf65e/2F3TDpq/9KFeJMA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKDBlNzVmYjRmNTJhODI5ZDEzNmUyOWE5YTAyNWM2MzZkMTlh ZTMyOGUwHhcNMjUxMTA0MDgwMDIxWhcNMjUxMTA1MDgwMDIxWjAzMTEwLwYDVQQD EyhjYThkYTdmNWJmODgzOWRjOGEzYWIxNjlmM2U3ZjU3ZjllZmI0ODYzMIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEApu0AdjiC6MUql4kSFoZpjbcez+f1 w2zfU48dXwYzou2DA3hStJl0cB9rd1hRL2hOEq2akWYsDZwDEMtl8KJjhHneZYSC 08Wr/QJBtCiVpuZ90fZlO1Er4wfxXJ+hZL5eBGS1wXKVpPV9eqYC9b7NfBPatVAj DH8yTKK36YZcwexmwT6IKLPmMj/R1FhSCSmw/Wm2izFIOmJJ4H8n87gSzqaqM3xj n8gNIdEGi2ijRpADztyhUSWsE6PSkxiNMlumyJMEBbnJBdm6z9ET5tggxZRgv9NK TXOcdpTqBJTbOW0hDfUMnyH8bh6r3TFdBG4OdeoG9bOT0so8HVBj1vsQmQIDAQAB o4ICIjCCAh4wHQYDVR0OBBYEFMqNp/W/iDncijqxafPn9X+e+0hjMB8GA1UdIwQY MBaAFA51+09SqCnRNuKamgJcY20ZrjKOMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvRG5YN1QxS29LZEUyNHBxYUFseGpiUm11TW80LmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC9jOC81NzU5ZjYtOTNlMi00MDI5LWE0OWYt MzViYTI2N2RlZDNiLzEvRG5YN1QxS29LZEUyNHBxYUFseGpiUm11TW80Lm1mdDCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC9jOC81NzU5ZjYtOTNlMi00MDI5LWE0OWYtMzViYTI2N2RlZDNi LzEvRG5YN1QxS29LZEUyNHBxYUFseGpiUm11TW80LmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAbUKOEDE6 dfAuFlBsclUq8mV04uIAEABuXGKjhjf9yEnRxYoI/FVhO9sMDCmAP0tokCX4LNpX FW9qn0PWngL7saE+PR9sHY6dilZ/YMWNldqZQ296IQhX6rtKg68SJ9oj9AEpVvsq VW/1xzCmek7VTZNrk+6on5iTOBZmOaj6pkngM1CWjohACo6AOiHNKAxiBuKJC8Pn 8/pmuGO99wCm5RcdXhhFHIlZCNIdoAfxoTnNaj6rM6AQk8XJgKX8CUtHSF63vPKU gjDzt6Psz+jLFfeJJzZCBhWKzJ9PHedmO+bBEdPMf5Xj60+Iq99ea1Dc80s2OVLz MvLJr1dYvmPucg== -----END CERTIFICATE-----Generated at Tue Nov 4 14:42:15 2025 by rpki-client