$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/c8/ac5a56-163a-497a-9547-e3799ade9dfe/1/DJDDVuKGT0OJSFdENVXYtcA1KBk.mft File: DJDDVuKGT0OJSFdENVXYtcA1KBk.mft (raw, json) Hash identifier: 650+a6Rv0sjHwnSFv8w2d1oD0IR2ou1cXLFH5EFkgas= Subject key identifier: 2E:44:99:FB:27:1C:DC:A8:A3:04:BD:DB:27:5B:9D:2B:72:B2:5A:F9 Authority key identifier: 0C:90:C3:56:E2:86:4F:43:89:48:57:44:35:55:D8:B5:C0:35:28:19 Certificate issuer: /CN=0c90c356e2864f43894857443555d8b5c0352819 Certificate serial: 019A5150CAD0C0592694F66A377EBCA5BF47 Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/DJDDVuKGT0OJSFdENVXYtcA1KBk.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/c8/ac5a56-163a-497a-9547-e3799ade9dfe/1/DJDDVuKGT0OJSFdENVXYtcA1KBk.mft Manifest number: 172E Signing time: Wed 05 Nov 2025 00:00:40 +0000 Manifest this update: Wed 05 Nov 2025 00:00:40 +0000 Manifest next update: Thu 06 Nov 2025 00:00:40 +0000 Files and hashes: 1: 6EqmJwY45la03_mL9DqzIU_pULc.roa (hash: bAAWeDZY2eZUPUFFXbJVDE3ll20OGhbDr+oRfmrEiVM=) 2: 7Pzqe98aO4BoBrbjEM8VyT6sS1M.roa (hash: njNZ21C9pluyh9z/aL31IWofBM1v+N+fPmyvHPndCq0=) 3: 90MmzVO4MvLdyb-AJQYr53vSOsE.roa (hash: 5J/pNqbP4sJI9fRD38vzW+V+FYiLCJKVNSYkNzbkDm4=) 4: 9GHN6GSMWh16APWbnq7wDsfKnn8.roa (hash: JH6A2KPyYk6kU9S+YXzBoAozjZCx1I1/FQIb22szn8c=) 5: DJDDVuKGT0OJSFdENVXYtcA1KBk.crl (hash: X51sOEGp5DeqAqsoheItLNVGG0udatZL+OFRTG584T8=) 6: QQRJC_YG8r-4Cm4-FiDTcyGseMs.roa (hash: v9L1LzSv9+QS9AJyAVCgrR0utN6Qk2ha4KHx/OIWRBY=) 7: WkrrwVxryAtLhNFR70baemEuAlg.roa (hash: K4NmeKi3Gvie8qG+bJIFQiovPgNvmgaWKizo+ZLILv8=) 8: _eU7wK7pdUxRG2CXsHdjbv2SOXc.roa (hash: ZAIXppKunQur0KGtFLAbnwIeXUabVYHwA+qIIq12IRo=) 9: aTMRrwo9_4SayQ9D7LTyaVFK_Xc.roa (hash: +IcvkZ/Lt7dooQvX8ekK5PfLV+YRr5hiDK4PBIh/lAA=) 10: bMezNCNwdlOYbtIsPbacYgXs4mE.roa (hash: fCSTVZLdEaGUz9Qyuwvw4wOBBUSjrK0cS/P0VURH6XA=) 11: f4tVuHbbEEExw1FgkYA_xiEVeZI.roa (hash: Ra6FxwbKM9pTj1QpToOpemmcz8OHYU34i9ladkCeWIs=) 12: fYrpElZs1NsSNrkwEfo6WNxBdRU.roa (hash: w1Z5VCOxpqbNZVNnJiTQLVLUsMOtA4kiHusU/VADD9E=) 13: rytOjYktSxYttWQbNzKnWNHr8kE.roa (hash: yLxz3XA2NehPKva17aTVpf9d8xx7CPICWNJXYP6IG3U=) 14: wz4Rxi2T5RISNbtekZKZj5gg7co.roa (hash: ZkBZlEwEIE4xANMo9oJsaqTSQA+2tjjnLN93XVxIic4=) Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/c8/ac5a56-163a-497a-9547-e3799ade9dfe/1/DJDDVuKGT0OJSFdENVXYtcA1KBk.crl rsync://rpki.ripe.net/repository/DEFAULT/c8/ac5a56-163a-497a-9547-e3799ade9dfe/1/DJDDVuKGT0OJSFdENVXYtcA1KBk.mft rsync://rpki.ripe.net/repository/DEFAULT/DJDDVuKGT0OJSFdENVXYtcA1KBk.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Wed 05 Nov 2025 18:00:03 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9a:51:50:ca:d0:c0:59:26:94:f6:6a:37:7e:bc:a5:bf:47 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=0c90c356e2864f43894857443555d8b5c0352819 Validity Not Before: Nov 5 00:00:40 2025 GMT Not After : Nov 6 00:00:40 2025 GMT Subject: CN=2e4499fb271cdca8a304bddb275b9d2b72b25af9 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:9e:b4:7d:92:59:fb:fc:01:02:c1:f6:4a:cf:2e: 28:24:57:c3:7a:93:c9:a4:f3:85:cc:51:02:91:9a: 48:40:1e:0b:28:bf:34:8e:28:95:0a:1d:2b:fd:33: 0c:cd:84:02:9d:3c:5b:54:58:3a:df:37:8c:18:b3: c3:ca:99:c7:56:c6:db:43:fd:c9:6f:9f:65:86:35: 2f:e1:cf:86:02:d8:0c:30:00:38:04:c8:6b:7f:f5: b3:6c:88:90:46:ec:5b:d2:f4:a3:1b:6d:15:ee:87: aa:01:e6:5e:39:29:f0:a6:f5:21:71:6a:23:83:b6: ba:d4:37:22:96:3e:f6:fc:fa:9e:01:bf:b9:e8:f4: e2:7c:85:29:6b:d6:50:2f:9f:0a:f7:76:07:e4:a3: 6c:2b:b0:d8:fe:57:0d:72:f1:85:cc:e0:51:83:2c: bc:d2:ef:3a:17:56:ab:ed:6c:e2:db:2d:1d:fb:d1: 6c:b9:b7:70:ce:76:6d:a5:c1:63:68:90:2a:d5:d6: d0:4d:db:2a:3c:ea:75:f0:07:84:db:36:69:b8:83: 88:d0:e0:b6:6c:7d:0d:6a:44:4c:61:86:b1:a9:a4: fe:48:d0:ec:25:b4:d9:98:ac:95:87:9e:74:fe:f9: 5e:59:b1:cb:eb:c5:8b:51:8d:ca:25:e8:cd:0f:21: 1c:21 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 2E:44:99:FB:27:1C:DC:A8:A3:04:BD:DB:27:5B:9D:2B:72:B2:5A:F9 X509v3 Authority Key Identifier: keyid:0C:90:C3:56:E2:86:4F:43:89:48:57:44:35:55:D8:B5:C0:35:28:19 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/DJDDVuKGT0OJSFdENVXYtcA1KBk.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/c8/ac5a56-163a-497a-9547-e3799ade9dfe/1/DJDDVuKGT0OJSFdENVXYtcA1KBk.mft X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/c8/ac5a56-163a-497a-9547-e3799ade9dfe/1/DJDDVuKGT0OJSFdENVXYtcA1KBk.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 88:b6:2b:c6:fd:e6:23:22:53:da:fc:6a:30:89:04:04:cb:1e: 0e:d3:da:36:3b:d8:5a:65:3a:cb:70:59:db:97:76:a4:0a:3f: b9:55:2e:fd:b8:f4:c7:5e:ca:52:aa:11:10:04:e1:8d:cc:a0: fb:23:0f:60:0c:85:eb:15:fb:22:0c:08:d0:ca:1a:44:08:81: 36:83:b8:0d:ff:b9:03:2d:88:d6:a2:b4:06:98:e3:b8:68:f0: 12:a8:75:ee:74:7d:7e:11:d4:bd:bb:6b:8f:b0:20:c2:f7:7f: d9:77:f8:81:9e:5c:28:ad:49:12:8d:08:1b:f1:ea:4e:25:c5: 38:14:0d:b9:6f:27:34:8f:09:8f:a9:78:48:e3:63:76:6b:67: 6d:33:9e:9f:e1:82:a9:54:bb:50:90:13:ee:52:ed:bf:ed:65: 7b:1e:0d:a7:81:c9:f1:13:82:df:4c:92:e6:84:02:01:0f:2d: eb:26:3f:e8:38:af:ab:3c:4a:d2:c3:c3:cf:3f:d9:14:d9:6c: f6:69:8d:44:74:8f:13:74:10:42:05:07:83:f2:38:9f:90:aa: 3f:f0:0c:74:3e:82:e0:cc:43:eb:1a:0c:1a:a0:a4:89:08:80: ac:a1:ea:53:7a:57:8a:2f:33:b7:f3:1e:59:fe:b6:b9:06:95: d9:b5:fe:60 -----BEGIN CERTIFICATE----- MIIFFjCCA/6gAwIBAgISAZpRUMrQwFkmlPZqN368pb9HMA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKDBjOTBjMzU2ZTI4NjRmNDM4OTQ4NTc0NDM1NTVkOGI1YzAz NTI4MTkwHhcNMjUxMTA1MDAwMDQwWhcNMjUxMTA2MDAwMDQwWjAzMTEwLwYDVQQD EygyZTQ0OTlmYjI3MWNkY2E4YTMwNGJkZGIyNzViOWQyYjcyYjI1YWY5MIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAnrR9kln7/AECwfZKzy4oJFfDepPJ pPOFzFECkZpIQB4LKL80jiiVCh0r/TMMzYQCnTxbVFg63zeMGLPDypnHVsbbQ/3J b59lhjUv4c+GAtgMMAA4BMhrf/WzbIiQRuxb0vSjG20V7oeqAeZeOSnwpvUhcWoj g7a61Dcilj72/PqeAb+56PTifIUpa9ZQL58K93YH5KNsK7DY/lcNcvGFzOBRgyy8 0u86F1ar7Wzi2y0d+9FsubdwznZtpcFjaJAq1dbQTdsqPOp18AeE2zZpuIOI0OC2 bH0NakRMYYaxqaT+SNDsJbTZmKyVh550/vleWbHL68WLUY3KJejNDyEcIQIDAQAB o4ICIjCCAh4wHQYDVR0OBBYEFC5EmfsnHNyoowS92ydbnStyslr5MB8GA1UdIwQY MBaAFAyQw1bihk9DiUhXRDVV2LXANSgZMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvREpERFZ1S0dUME9KU0ZkRU5WWFl0Y0ExS0JrLmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC9jOC9hYzVhNTYtMTYzYS00OTdhLTk1NDct ZTM3OTlhZGU5ZGZlLzEvREpERFZ1S0dUME9KU0ZkRU5WWFl0Y0ExS0JrLm1mdDCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC9jOC9hYzVhNTYtMTYzYS00OTdhLTk1NDctZTM3OTlhZGU5ZGZl LzEvREpERFZ1S0dUME9KU0ZkRU5WWFl0Y0ExS0JrLmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAiLYrxv3m IyJT2vxqMIkEBMseDtPaNjvYWmU6y3BZ25d2pAo/uVUu/bj0x17KUqoREAThjcyg +yMPYAyF6xX7IgwI0MoaRAiBNoO4Df+5Ay2I1qK0BpjjuGjwEqh17nR9fhHUvbtr j7Agwvd/2Xf4gZ5cKK1JEo0IG/HqTiXFOBQNuW8nNI8Jj6l4SONjdmtnbTOen+GC qVS7UJAT7lLtv+1lex4Np4HJ8ROC30yS5oQCAQ8t6yY/6DivqzxK0sPDzz/ZFNls 9mmNRHSPE3QQQgUHg/I4n5CqP/AMdD6C4MxD6xoMGqCkiQiArKHqU3pXii8zt/Me Wf62uQaV2bX+YA== -----END CERTIFICATE-----Generated at Wed Nov 5 02:11:11 2025 by rpki-client