$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/c9/40498e-d1c0-484c-abcb-61e7f40d5dd6/1/rr85Ti8bJRyI2YiocWEIRYB4bvU.mft File: rr85Ti8bJRyI2YiocWEIRYB4bvU.mft (raw, json) Hash identifier: oH7MEAtKlcIkWlbHtrtLVuhtazwtdkraOFjDfW9APuA= Subject key identifier: 8B:2B:75:7A:9F:F4:08:F3:68:6B:A0:CC:56:7A:30:92:8D:C7:EB:43 Authority key identifier: AE:BF:39:4E:2F:1B:25:1C:88:D9:88:A8:71:61:08:45:80:78:6E:F5 Certificate issuer: /CN=aebf394e2f1b251c88d988a87161084580786ef5 Certificate serial: 019A5119ECD8DEE717EF4B2740055FB9C103 Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/rr85Ti8bJRyI2YiocWEIRYB4bvU.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/c9/40498e-d1c0-484c-abcb-61e7f40d5dd6/1/rr85Ti8bJRyI2YiocWEIRYB4bvU.mft Manifest number: 1726 Signing time: Tue 04 Nov 2025 23:00:44 +0000 Manifest this update: Tue 04 Nov 2025 23:00:44 +0000 Manifest next update: Wed 05 Nov 2025 23:00:44 +0000 Files and hashes: 1: 0M_CHtTZz2ksD2BrxQYB5GYr6Qs.roa (hash: pjePI9MMIzsxZCozr1MX0ua7tggMW3H280y5yB3P7S0=) 2: 1-_mCNfP9_HNiBcEsvWHOFnGkC9I.roa (hash: JsQNy89vRBMXhfgHBZLMyPK1KVQmDn747eH7PkqTbv4=) 3: 499vYtwuw8upiAA2ubHtry-MPMw.roa (hash: Z3mdQWlNWDCy7MpQvjVwxOFHXRgVUsKCd9CYyZydkdQ=) 4: BV9MkYw-noIEhqphKumJe_rAYPw.roa (hash: cTycQR7uMvIZ+ka9U/Z707XPur1pq5RdGRaj9s/WBEk=) 5: C9bq6HqiO8wvPt8Ohvw7Ya0CzfI.roa (hash: eBedAMyLvvyEc8yS2VDwWUUS44f1pIhLP9yn06vWvAA=) 6: L3ZGNHnhgVbtJA6v9_KfCLPdQu4.roa (hash: tRfv/CcITA5fhGSfuor8bEI1B/6QYSwrTAH88Vxz5+8=) 7: c_qSQSef9yQq7ko-zsOrz05POQI.roa (hash: FNYiHqlJ6193udyi9UzOaM0voKaXuvqgwAhp2rGz6i4=) 8: rq3_2EMmh0cv5ivlO8JPPUeogQc.roa (hash: 9kTdzZUfT/wSfRhG2PTu31/f9X4NTLfSEK/53blCYJ4=) 9: rr85Ti8bJRyI2YiocWEIRYB4bvU.crl (hash: mRriY9HAPCk7rehO9MYiiknAMOaxbdkkR5gOksY58nE=) 10: uFaCHWPgxrsotozK3-PvWIlEI14.roa (hash: E71w1Kj/9g7CI68LBGPMUUdmv1Dhxwi441Gs522xPmQ=) Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/c9/40498e-d1c0-484c-abcb-61e7f40d5dd6/1/rr85Ti8bJRyI2YiocWEIRYB4bvU.crl rsync://rpki.ripe.net/repository/DEFAULT/c9/40498e-d1c0-484c-abcb-61e7f40d5dd6/1/rr85Ti8bJRyI2YiocWEIRYB4bvU.mft rsync://rpki.ripe.net/repository/DEFAULT/rr85Ti8bJRyI2YiocWEIRYB4bvU.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Wed 05 Nov 2025 18:00:03 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9a:51:19:ec:d8:de:e7:17:ef:4b:27:40:05:5f:b9:c1:03 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=aebf394e2f1b251c88d988a87161084580786ef5 Validity Not Before: Nov 4 23:00:44 2025 GMT Not After : Nov 5 23:00:44 2025 GMT Subject: CN=8b2b757a9ff408f3686ba0cc567a30928dc7eb43 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:bb:ec:d3:2d:7e:91:b7:8b:c1:2e:4c:2a:5f:cf: 5b:a7:25:36:d5:f0:a6:ca:3e:0a:39:8c:ac:08:06: a0:66:7c:dd:be:09:74:a8:51:4c:b9:3c:15:6a:dd: a0:67:f8:8a:cf:55:c6:43:0d:6f:09:b3:80:db:d6: 0b:d6:4e:c3:2d:66:a7:f1:bf:ad:85:d2:71:80:5a: 54:03:38:aa:79:23:d4:79:c0:d6:d9:c3:b6:00:f9: c9:2b:fa:66:e7:b1:9b:f3:58:e6:ac:a4:97:f1:20: 20:7b:8b:3f:0f:25:e0:7a:aa:a4:9d:7f:e5:b7:e6: 4d:96:00:f7:ba:bb:fd:14:3c:eb:e5:c3:7e:a0:ef: 95:41:7d:58:e3:b1:2f:59:5a:55:ca:2e:1a:ba:60: f7:95:ff:b8:28:f0:e0:f2:d2:75:7e:15:2d:b0:31: c7:48:f1:49:20:ab:9d:52:f8:f9:07:19:cd:9e:e6: fd:45:7e:79:d0:7e:ea:48:1c:b3:25:44:07:3a:b8: b3:f0:3f:70:5a:20:59:65:c7:ea:47:90:57:9c:64: 3d:d8:70:e5:ab:6c:ac:8f:28:d0:b5:4f:b0:0d:e1: 76:35:1e:7c:21:83:21:22:b3:39:91:98:82:90:ae: ff:86:c3:93:9a:ea:9b:11:6a:92:75:d9:a8:74:84: f2:c5 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 8B:2B:75:7A:9F:F4:08:F3:68:6B:A0:CC:56:7A:30:92:8D:C7:EB:43 X509v3 Authority Key Identifier: keyid:AE:BF:39:4E:2F:1B:25:1C:88:D9:88:A8:71:61:08:45:80:78:6E:F5 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/rr85Ti8bJRyI2YiocWEIRYB4bvU.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/c9/40498e-d1c0-484c-abcb-61e7f40d5dd6/1/rr85Ti8bJRyI2YiocWEIRYB4bvU.mft X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/c9/40498e-d1c0-484c-abcb-61e7f40d5dd6/1/rr85Ti8bJRyI2YiocWEIRYB4bvU.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 1b:20:af:95:5b:8e:04:c7:88:bc:83:90:09:2b:52:8a:fd:5e: bb:a2:c1:9f:ee:e0:de:21:ee:fd:4a:5b:72:a9:6f:7e:87:4d: 06:0d:05:b8:ab:3e:74:f1:1b:e7:f0:19:3a:ff:c0:39:01:a8: d2:2e:6f:df:4c:d5:52:ad:50:9e:86:27:54:f0:ce:4f:a5:35: a4:fd:43:ef:fd:80:6b:38:90:e8:c2:42:df:b2:f8:ae:95:e1: 3c:92:05:80:38:35:e6:ae:bb:f5:ae:d4:07:d9:8c:d9:be:f8: e1:a2:f0:b0:7a:59:3e:68:69:15:95:7a:0a:80:36:76:bf:e7: b6:a8:6f:e8:02:59:65:cc:3a:bf:6f:0f:e1:d8:08:90:b4:a5: 14:4b:06:01:37:bd:37:50:28:56:3f:56:93:51:53:8c:88:18: 67:e0:74:ef:52:45:97:98:9c:1e:94:89:7f:01:36:c3:78:7f: c7:1d:2c:0c:b3:77:b8:6b:ee:44:05:b1:01:77:bf:27:2a:5e: 18:bf:99:09:80:3f:e1:83:ad:dc:b5:9d:f4:c3:de:64:ce:49: 44:9f:ce:f5:04:22:45:65:70:17:5f:3c:ab:57:bc:74:5a:1e: 71:6d:b1:1f:93:23:00:9f:b3:5e:1a:20:5d:92:ba:d3:32:1f: 46:33:dd:e2 -----BEGIN CERTIFICATE----- MIIFFjCCA/6gAwIBAgISAZpRGezY3ucX70snQAVfucEDMA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKGFlYmYzOTRlMmYxYjI1MWM4OGQ5ODhhODcxNjEwODQ1ODA3 ODZlZjUwHhcNMjUxMTA0MjMwMDQ0WhcNMjUxMTA1MjMwMDQ0WjAzMTEwLwYDVQQD Eyg4YjJiNzU3YTlmZjQwOGYzNjg2YmEwY2M1NjdhMzA5MjhkYzdlYjQzMIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAu+zTLX6Rt4vBLkwqX89bpyU21fCm yj4KOYysCAagZnzdvgl0qFFMuTwVat2gZ/iKz1XGQw1vCbOA29YL1k7DLWan8b+t hdJxgFpUAziqeSPUecDW2cO2APnJK/pm57Gb81jmrKSX8SAge4s/DyXgeqqknX/l t+ZNlgD3urv9FDzr5cN+oO+VQX1Y47EvWVpVyi4aumD3lf+4KPDg8tJ1fhUtsDHH SPFJIKudUvj5BxnNnub9RX550H7qSByzJUQHOriz8D9wWiBZZcfqR5BXnGQ92HDl q2ysjyjQtU+wDeF2NR58IYMhIrM5kZiCkK7/hsOTmuqbEWqSddmodITyxQIDAQAB o4ICIjCCAh4wHQYDVR0OBBYEFIsrdXqf9AjzaGugzFZ6MJKNx+tDMB8GA1UdIwQY MBaAFK6/OU4vGyUciNmIqHFhCEWAeG71MA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvcnI4NVRpOGJKUnlJMllpb2NXRUlSWUI0YnZVLmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC9jOS80MDQ5OGUtZDFjMC00ODRjLWFiY2It NjFlN2Y0MGQ1ZGQ2LzEvcnI4NVRpOGJKUnlJMllpb2NXRUlSWUI0YnZVLm1mdDCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC9jOS80MDQ5OGUtZDFjMC00ODRjLWFiY2ItNjFlN2Y0MGQ1ZGQ2 LzEvcnI4NVRpOGJKUnlJMllpb2NXRUlSWUI0YnZVLmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAGyCvlVuO BMeIvIOQCStSiv1eu6LBn+7g3iHu/UpbcqlvfodNBg0FuKs+dPEb5/AZOv/AOQGo 0i5v30zVUq1QnoYnVPDOT6U1pP1D7/2AaziQ6MJC37L4rpXhPJIFgDg15q679a7U B9mM2b744aLwsHpZPmhpFZV6CoA2dr/ntqhv6AJZZcw6v28P4dgIkLSlFEsGATe9 N1AoVj9Wk1FTjIgYZ+B071JFl5icHpSJfwE2w3h/xx0sDLN3uGvuRAWxAXe/Jype GL+ZCYA/4YOt3LWd9MPeZM5JRJ/O9QQiRWVwF188q1e8dFoecW2xH5MjAJ+zXhog XZK60zIfRjPd4g== -----END CERTIFICATE-----Generated at Wed Nov 5 03:40:53 2025 by rpki-client