$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/ca/4a9cc4-2b9a-4ef2-a33a-872b3710c2a1/1/ge7UCROD2e1AVtn07_fSYi3c4gU.mft File: ge7UCROD2e1AVtn07_fSYi3c4gU.mft (raw, json) Hash identifier: HwmaZz5Xfgi/1AYQvBN6LoA5+SJ4xNcDRKtNy9SsQ6A= Subject key identifier: 2A:6A:18:A5:0F:B4:4A:F5:4F:A2:D6:86:11:02:A9:C0:27:06:B9:75 Authority key identifier: 81:EE:D4:09:13:83:D9:ED:40:56:D9:F4:EF:F7:D2:62:2D:DC:E2:05 Certificate issuer: /CN=81eed4091383d9ed4056d9f4eff7d2622ddce205 Certificate serial: 019A5074CB7A71D7DDF7B611EFE371EA3C66 Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/ge7UCROD2e1AVtn07_fSYi3c4gU.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/ca/4a9cc4-2b9a-4ef2-a33a-872b3710c2a1/1/ge7UCROD2e1AVtn07_fSYi3c4gU.mft Manifest number: 1728 Signing time: Tue 04 Nov 2025 20:00:22 +0000 Manifest this update: Tue 04 Nov 2025 20:00:22 +0000 Manifest next update: Wed 05 Nov 2025 20:00:22 +0000 Files and hashes: 1: 1-FVNiQvWEXUQsyhSP2mXL7ZeFhI.roa (hash: h2VWp4VUz/KwikufobsIYuUTWP+PbubtA5kM1+IYNJ4=) 2: 2R3GYbP40kVDselx86gqI7AglgU.roa (hash: XLRcU1O670injcbZzqHBcbGiFZGa7M1Rl5LjE453GkQ=) 3: FIfoAXaxpYLmDe5rWtbqnwoZyG4.roa (hash: McAx354GUPfDHZvpRDVZ7JLef+rbJmvzLHPw8ZCGP3g=) 4: GTiO-SupitdTmKiZ_HKcU4MJuTk.roa (hash: +PZAxnriWNXJlrxxhGkuM8aqghAi9SsDw/xLwTjAVR8=) 5: XF9ImwV6WWJIs0xQcjK4t7jAy60.roa (hash: cqd2xtXIiuriNNQV4wixCocQ/6vU5JsRpBkdhH+9z5k=) 6: f6ghH_7B3PzM3ktCIJpbMer11MQ.roa (hash: gQOe3jDJjm6Z8U0Sg1BUTciGU/YhoqXEIyyDOVhhKCY=) 7: ge7UCROD2e1AVtn07_fSYi3c4gU.crl (hash: jrRqH6fj/PrdIIjfXNK9GRWQDuczZ6euLDEEs4gRtGo=) 8: qWZ64G_gV6r1a1VTWhYwuR9ilIk.roa (hash: SNBGanOggO8FdGYV/GuiVAQ6b34zKk2VTZJhKLFl+04=) 9: uhgMFZw8rs0tJvJzvMK6WeU68F0.roa (hash: qV6k2QQIZBdjD0SstNGQRZVonpUjQ86it1wpOl33iLI=) 10: xb_V8FoCziLwhsNf2nDbMavL4CE.roa (hash: FYXyUhIT7c2rjGPzDYmHZI9gN0Jm7MertTGE0IiU5ck=) Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/ca/4a9cc4-2b9a-4ef2-a33a-872b3710c2a1/1/ge7UCROD2e1AVtn07_fSYi3c4gU.crl rsync://rpki.ripe.net/repository/DEFAULT/ca/4a9cc4-2b9a-4ef2-a33a-872b3710c2a1/1/ge7UCROD2e1AVtn07_fSYi3c4gU.mft rsync://rpki.ripe.net/repository/DEFAULT/ge7UCROD2e1AVtn07_fSYi3c4gU.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Wed 05 Nov 2025 18:00:03 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9a:50:74:cb:7a:71:d7:dd:f7:b6:11:ef:e3:71:ea:3c:66 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=81eed4091383d9ed4056d9f4eff7d2622ddce205 Validity Not Before: Nov 4 20:00:22 2025 GMT Not After : Nov 5 20:00:22 2025 GMT Subject: CN=2a6a18a50fb44af54fa2d6861102a9c02706b975 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:a2:a8:c7:e9:aa:91:b5:17:44:07:de:b8:3c:51: e3:7a:ed:1b:4c:5f:01:3d:49:94:a5:61:f1:7e:64: bf:db:b0:32:0c:f8:43:4d:0b:ec:81:84:f5:08:b1: 70:88:0c:d6:f0:04:4e:72:88:1e:4e:2a:60:71:3f: bd:af:68:e7:53:20:c9:31:78:42:f7:98:54:6a:0d: c3:b2:90:7d:20:c8:fe:4f:90:24:97:5e:d1:52:99: d0:09:64:e6:5d:03:e9:91:6e:17:96:8d:db:df:d7: 99:5a:26:dc:67:69:95:7b:9d:ee:b7:36:e3:5b:22: f6:ef:4b:59:a8:94:a9:87:58:84:fd:18:63:21:06: 50:17:85:31:1f:e1:4b:d2:d1:41:41:f3:d1:58:3c: ae:e5:f1:ae:db:5a:04:81:a5:d1:e5:c1:5b:62:26: 51:0e:cd:7b:62:b9:c3:5b:33:85:87:9b:8a:30:7b: b5:b4:fe:dd:b7:c2:66:f7:1f:51:51:e0:93:15:54: 7b:87:c0:df:21:a4:99:40:c1:d6:12:0d:cc:83:e3: 78:30:cf:7a:31:bb:34:86:bd:90:38:d4:f5:cc:99: dc:90:5f:e6:d3:ce:43:06:38:f1:48:34:28:88:5e: ae:f6:9c:ff:66:30:96:6a:7e:20:53:44:af:6f:f9: ea:f5 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 2A:6A:18:A5:0F:B4:4A:F5:4F:A2:D6:86:11:02:A9:C0:27:06:B9:75 X509v3 Authority Key Identifier: keyid:81:EE:D4:09:13:83:D9:ED:40:56:D9:F4:EF:F7:D2:62:2D:DC:E2:05 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/ge7UCROD2e1AVtn07_fSYi3c4gU.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/ca/4a9cc4-2b9a-4ef2-a33a-872b3710c2a1/1/ge7UCROD2e1AVtn07_fSYi3c4gU.mft X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/ca/4a9cc4-2b9a-4ef2-a33a-872b3710c2a1/1/ge7UCROD2e1AVtn07_fSYi3c4gU.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 53:5d:eb:e3:22:9e:08:c5:78:f0:09:f9:e6:05:8a:fc:d3:26: cb:12:63:60:69:ff:a2:5a:4a:47:6a:5c:c1:7f:6a:b2:db:08: 3a:82:2e:ae:d1:a6:f9:45:46:95:91:cd:a6:29:30:ce:ba:3c: 16:83:bb:61:c0:26:15:7f:12:9b:1a:c3:eb:0a:9c:a1:79:19: ed:57:a2:33:05:fe:59:c3:8e:42:f6:96:5d:68:3b:99:f2:33: 64:3b:04:39:df:dd:ce:fa:77:56:2f:88:a6:a0:43:63:b4:39: d9:f9:c2:e6:64:f7:8e:62:bd:cc:32:1b:18:ca:66:fa:63:4a: 13:fc:98:94:d8:d7:8e:06:a9:40:27:69:76:3c:ab:39:cf:25: 55:d8:c3:46:35:c5:94:0e:67:bd:e5:61:5a:c5:13:f4:be:b4: 89:c7:c8:13:e3:15:4b:e4:02:35:ad:42:e4:8d:b1:47:be:44: 7c:74:c9:ce:0d:a6:84:30:2d:d4:1b:6b:a5:5b:b3:e5:2d:55: de:ad:30:94:04:30:44:01:fb:2b:19:21:22:5e:e8:5d:df:3c: 56:bb:5c:69:1f:b6:54:41:06:a0:2a:e6:1e:49:3e:8e:38:bf: d0:71:f9:ed:89:f0:4e:5a:0c:b9:a2:2b:d5:6a:69:98:59:60: 10:79:7b:1f -----BEGIN CERTIFICATE----- MIIFFjCCA/6gAwIBAgISAZpQdMt6cdfd97YR7+Nx6jxmMA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKDgxZWVkNDA5MTM4M2Q5ZWQ0MDU2ZDlmNGVmZjdkMjYyMmRk Y2UyMDUwHhcNMjUxMTA0MjAwMDIyWhcNMjUxMTA1MjAwMDIyWjAzMTEwLwYDVQQD EygyYTZhMThhNTBmYjQ0YWY1NGZhMmQ2ODYxMTAyYTljMDI3MDZiOTc1MIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAoqjH6aqRtRdEB964PFHjeu0bTF8B PUmUpWHxfmS/27AyDPhDTQvsgYT1CLFwiAzW8AROcogeTipgcT+9r2jnUyDJMXhC 95hUag3DspB9IMj+T5Akl17RUpnQCWTmXQPpkW4Xlo3b39eZWibcZ2mVe53utzbj WyL270tZqJSph1iE/RhjIQZQF4UxH+FL0tFBQfPRWDyu5fGu21oEgaXR5cFbYiZR Ds17YrnDWzOFh5uKMHu1tP7dt8Jm9x9RUeCTFVR7h8DfIaSZQMHWEg3Mg+N4MM96 Mbs0hr2QONT1zJnckF/m085DBjjxSDQoiF6u9pz/ZjCWan4gU0Svb/nq9QIDAQAB o4ICIjCCAh4wHQYDVR0OBBYEFCpqGKUPtEr1T6LWhhECqcAnBrl1MB8GA1UdIwQY MBaAFIHu1AkTg9ntQFbZ9O/30mIt3OIFMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvZ2U3VUNST0QyZTFBVnRuMDdfZlNZaTNjNGdVLmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC9jYS80YTljYzQtMmI5YS00ZWYyLWEzM2Et ODcyYjM3MTBjMmExLzEvZ2U3VUNST0QyZTFBVnRuMDdfZlNZaTNjNGdVLm1mdDCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC9jYS80YTljYzQtMmI5YS00ZWYyLWEzM2EtODcyYjM3MTBjMmEx LzEvZ2U3VUNST0QyZTFBVnRuMDdfZlNZaTNjNGdVLmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAU13r4yKe CMV48An55gWK/NMmyxJjYGn/olpKR2pcwX9qstsIOoIurtGm+UVGlZHNpikwzro8 FoO7YcAmFX8SmxrD6wqcoXkZ7VeiMwX+WcOOQvaWXWg7mfIzZDsEOd/dzvp3Vi+I pqBDY7Q52fnC5mT3jmK9zDIbGMpm+mNKE/yYlNjXjgapQCdpdjyrOc8lVdjDRjXF lA5nveVhWsUT9L60icfIE+MVS+QCNa1C5I2xR75EfHTJzg2mhDAt1BtrpVuz5S1V 3q0wlAQwRAH7KxkhIl7oXd88VrtcaR+2VEEGoCrmHkk+jji/0HH57YnwTloMuaIr 1WppmFlgEHl7Hw== -----END CERTIFICATE-----Generated at Wed Nov 5 00:51:28 2025 by rpki-client