$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/cc/051fa2-c580-4a02-a186-e69f7a5d2d90/1/8P8sYimvdjqZ9TSaMlEN9KRSYUM.mft File: 8P8sYimvdjqZ9TSaMlEN9KRSYUM.mft (raw, json) Hash identifier: Wp0YYESRuYxBZU70oIkIY7M9/d/wF3ilnxTLnTkaK8Y= Subject key identifier: BC:CB:BC:7E:40:8A:45:BF:BE:F4:4B:E0:A6:4C:A0:64:4E:CD:4D:90 Authority key identifier: F0:FF:2C:62:29:AF:76:3A:99:F5:34:9A:32:51:0D:F4:A4:52:61:43 Certificate issuer: /CN=f0ff2c6229af763a99f5349a32510df4a4526143 Certificate serial: 019A507517319772B9D51FBAE56123254DE0 Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/8P8sYimvdjqZ9TSaMlEN9KRSYUM.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/cc/051fa2-c580-4a02-a186-e69f7a5d2d90/1/8P8sYimvdjqZ9TSaMlEN9KRSYUM.mft Manifest number: 1712 Signing time: Tue 04 Nov 2025 20:00:42 +0000 Manifest this update: Tue 04 Nov 2025 20:00:42 +0000 Manifest next update: Wed 05 Nov 2025 20:00:42 +0000 Files and hashes: 1: 00x2a7vYcUP_RgzqZlJDShLq9Do.roa (hash: cq08qt5t6pt7+g4zB6xtHZuctjeJqy9pw/L/lk8TYFo=) 2: 8P8sYimvdjqZ9TSaMlEN9KRSYUM.crl (hash: svmVWDjS4wQ6LO0YuUxBWGmKVqhvWZ+9L1PTpFQtpfs=) 3: KVMzJG-tiBiXKGfDbX7s-fqSUcs.roa (hash: izdiO/l04uY0Tl9GP7xbaa4HsWMYkrOgbs0SiG0a1K8=) 4: OBC2jp5FIHT7G9c2m1xsJUD2ivs.roa (hash: DrwuyysosoB70lBjSllnHo3rVU0U0NusilzO8tRi9Q0=) 5: OxF-ngX6YGUArZrbAYmh9hpGzkU.roa (hash: zhEaR7GNPbf+2lOaH8uFUPJFKzbpuLS5x4CvU7dkxPs=) 6: Q2Pg2GNHELVKyFoNgxOuT8YFvLY.roa (hash: DsyRU7FSw+3XDKbBM9HrtgkzYSVPnqWwqknbD6CWVSU=) 7: RO-InVXPYoHaB1ZpM-19yr94dQs.roa (hash: 8Y6VcUcgO4alufdIJ4djN2KAnB4AyYetp1VZzDDuyNk=) 8: TbcAJ-7kgZbLEMeBArn-aI2s0Oc.roa (hash: ebCgIhbDpPxtlRtDjitUarjC0W1nxe0ujpocy11Koxs=) 9: _gM5SG_4QQqKocZtcQPCR80SAmI.roa (hash: ee8TJS3VrEj5YXrt15hISXpN3dVXM3P5ROyjlVEMHSs=) 10: fG6If6WZh4pXAVRu1gEQ7wbPbEs.roa (hash: OIBSpF8oXZotrR8RVX6KacBPnJZCoNiFLIZ7aWyayQU=) 11: gfQeyx6Q7sjS4Xpny9IUQ8tQxLY.roa (hash: zrq/geD7ajZHxMLm7OvFbnGGXeIS14GfMNfAscurlR8=) Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/cc/051fa2-c580-4a02-a186-e69f7a5d2d90/1/8P8sYimvdjqZ9TSaMlEN9KRSYUM.crl rsync://rpki.ripe.net/repository/DEFAULT/cc/051fa2-c580-4a02-a186-e69f7a5d2d90/1/8P8sYimvdjqZ9TSaMlEN9KRSYUM.mft rsync://rpki.ripe.net/repository/DEFAULT/8P8sYimvdjqZ9TSaMlEN9KRSYUM.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Wed 05 Nov 2025 18:00:03 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9a:50:75:17:31:97:72:b9:d5:1f:ba:e5:61:23:25:4d:e0 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=f0ff2c6229af763a99f5349a32510df4a4526143 Validity Not Before: Nov 4 20:00:42 2025 GMT Not After : Nov 5 20:00:42 2025 GMT Subject: CN=bccbbc7e408a45bfbef44be0a64ca0644ecd4d90 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:cc:3e:d1:2a:7e:fd:e6:09:7c:cc:4d:ac:7a:2f: 59:3a:2f:8f:b2:92:20:c3:10:d2:25:ed:2f:69:b6: 27:5c:da:dc:17:b5:c7:6a:2f:ed:82:8f:2d:06:6d: 69:0d:1a:06:3a:80:3d:8d:82:bf:a8:93:5f:da:79: f0:7d:74:59:83:2c:1e:c2:75:2c:2e:59:62:b5:fa: 7a:d0:9f:bf:49:02:a4:1a:a1:19:8f:67:ea:49:6a: 28:46:19:06:02:9b:ea:24:de:88:76:33:f2:44:74: cf:2f:23:e8:68:cc:b0:ff:b7:97:26:8a:e4:83:fe: 4f:c5:aa:92:5a:26:ac:9d:24:75:8a:a8:5d:ba:3a: 9f:00:a5:35:b9:2a:b2:15:a0:f2:ce:e6:b1:9d:5d: 22:5f:1c:fe:fa:b8:aa:55:a8:4a:91:c5:fc:c4:48: 22:c5:22:61:2d:2f:25:20:cb:97:8a:29:11:99:7e: db:ae:9c:f9:14:d5:f6:1b:63:7c:d9:29:94:0d:52: 7d:b9:cd:49:c3:5e:2d:e2:04:4a:3a:3d:30:27:cc: 16:1c:e2:2d:f9:1b:87:36:db:bf:34:46:db:0b:62: 79:87:21:93:60:e9:00:16:ad:bf:7a:84:fc:68:81: 2a:6d:13:e4:66:ab:34:56:02:d5:38:71:2b:f8:b9: f5:a1 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: BC:CB:BC:7E:40:8A:45:BF:BE:F4:4B:E0:A6:4C:A0:64:4E:CD:4D:90 X509v3 Authority Key Identifier: keyid:F0:FF:2C:62:29:AF:76:3A:99:F5:34:9A:32:51:0D:F4:A4:52:61:43 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/8P8sYimvdjqZ9TSaMlEN9KRSYUM.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/cc/051fa2-c580-4a02-a186-e69f7a5d2d90/1/8P8sYimvdjqZ9TSaMlEN9KRSYUM.mft X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/cc/051fa2-c580-4a02-a186-e69f7a5d2d90/1/8P8sYimvdjqZ9TSaMlEN9KRSYUM.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 8f:1e:bc:3e:41:ce:37:51:f7:f6:2a:4c:33:1a:30:da:29:54: f9:ec:90:43:2f:c9:45:07:ed:5f:d2:75:27:43:f3:e0:c4:cd: 41:0c:65:94:d8:64:d3:df:0a:37:3d:76:af:3a:50:24:5a:a5: 35:77:57:92:56:60:69:b9:56:57:5d:a3:24:91:44:ea:fc:5c: c1:16:1e:42:16:d3:f9:c6:b1:fd:e8:e7:ef:48:18:6b:fd:26: 4f:27:b3:37:60:70:63:ed:71:9b:6b:36:d4:7b:f1:89:3b:fa: 3d:e7:22:81:07:41:a2:16:ba:4f:0e:a9:bb:b6:7a:f0:e4:7f: a4:be:20:34:97:53:36:69:77:ce:aa:68:38:ae:26:d5:6a:8d: 44:fa:97:34:ec:4b:83:44:35:0c:e0:4d:4c:9d:d8:a5:83:24: b2:da:cb:9c:a8:24:b5:d1:9b:da:b4:42:32:10:c6:f8:74:ee: e4:03:c7:86:0a:49:0a:ae:68:1e:52:d6:04:91:3d:a7:52:f6: aa:37:c9:7c:79:81:0f:dc:9d:2f:df:e8:e5:89:b4:9b:9f:58: 89:dd:18:60:86:17:84:0b:3d:4f:10:82:62:ea:13:00:40:95: f6:4d:a9:88:62:44:29:bc:61:3a:fe:bc:b1:2e:c0:f5:e0:28: f1:b7:cc:f2 -----BEGIN CERTIFICATE----- MIIFFjCCA/6gAwIBAgISAZpQdRcxl3K51R+65WEjJU3gMA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKGYwZmYyYzYyMjlhZjc2M2E5OWY1MzQ5YTMyNTEwZGY0YTQ1 MjYxNDMwHhcNMjUxMTA0MjAwMDQyWhcNMjUxMTA1MjAwMDQyWjAzMTEwLwYDVQQD EyhiY2NiYmM3ZTQwOGE0NWJmYmVmNDRiZTBhNjRjYTA2NDRlY2Q0ZDkwMIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAzD7RKn795gl8zE2sei9ZOi+PspIg wxDSJe0vabYnXNrcF7XHai/tgo8tBm1pDRoGOoA9jYK/qJNf2nnwfXRZgywewnUs Lllitfp60J+/SQKkGqEZj2fqSWooRhkGApvqJN6IdjPyRHTPLyPoaMyw/7eXJork g/5PxaqSWiasnSR1iqhdujqfAKU1uSqyFaDyzuaxnV0iXxz++riqVahKkcX8xEgi xSJhLS8lIMuXiikRmX7brpz5FNX2G2N82SmUDVJ9uc1Jw14t4gRKOj0wJ8wWHOIt +RuHNtu/NEbbC2J5hyGTYOkAFq2/eoT8aIEqbRPkZqs0VgLVOHEr+Ln1oQIDAQAB o4ICIjCCAh4wHQYDVR0OBBYEFLzLvH5AikW/vvRL4KZMoGROzU2QMB8GA1UdIwQY MBaAFPD/LGIpr3Y6mfU0mjJRDfSkUmFDMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvOFA4c1lpbXZkanFaOVRTYU1sRU45S1JTWVVNLmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC9jYy8wNTFmYTItYzU4MC00YTAyLWExODYt ZTY5ZjdhNWQyZDkwLzEvOFA4c1lpbXZkanFaOVRTYU1sRU45S1JTWVVNLm1mdDCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC9jYy8wNTFmYTItYzU4MC00YTAyLWExODYtZTY5ZjdhNWQyZDkw LzEvOFA4c1lpbXZkanFaOVRTYU1sRU45S1JTWVVNLmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAjx68PkHO N1H39ipMMxow2ilU+eyQQy/JRQftX9J1J0Pz4MTNQQxllNhk098KNz12rzpQJFql NXdXklZgablWV12jJJFE6vxcwRYeQhbT+cax/ejn70gYa/0mTyezN2BwY+1xm2s2 1HvxiTv6PecigQdBoha6Tw6pu7Z68OR/pL4gNJdTNml3zqpoOK4m1WqNRPqXNOxL g0Q1DOBNTJ3YpYMkstrLnKgktdGb2rRCMhDG+HTu5APHhgpJCq5oHlLWBJE9p1L2 qjfJfHmBD9ydL9/o5Ym0m59Yid0YYIYXhAs9TxCCYuoTAECV9k2piGJEKbxhOv68 sS7A9eAo8bfM8g== -----END CERTIFICATE-----Generated at Wed Nov 5 04:21:14 2025 by rpki-client