$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/d1/789caf-c8d2-419e-ae04-691422311729/1/8MEEBBaR3DhPOxqM35XJZijqba8.mft File: 8MEEBBaR3DhPOxqM35XJZijqba8.mft (raw, json) Hash identifier: Sa56xXDKwJPA88nvz7FGqgZIAxNKZFoCIGS1SoFsS3Q= Subject key identifier: A9:39:7A:61:24:3C:71:72:DA:C1:C4:A6:80:A4:F9:18:41:28:46:43 Authority key identifier: F0:C1:04:04:16:91:DC:38:4F:3B:1A:8C:DF:95:C9:66:28:EA:6D:AF Certificate issuer: /CN=f0c104041691dc384f3b1a8cdf95c96628ea6daf Certificate serial: 019A4F2AFCB33D7C75850A699E26216E8EF8 Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/8MEEBBaR3DhPOxqM35XJZijqba8.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/d1/789caf-c8d2-419e-ae04-691422311729/1/8MEEBBaR3DhPOxqM35XJZijqba8.mft Manifest number: 16C3 Signing time: Tue 04 Nov 2025 14:00:08 +0000 Manifest this update: Tue 04 Nov 2025 14:00:08 +0000 Manifest next update: Wed 05 Nov 2025 14:00:08 +0000 Files and hashes: 1: 1-jVAuwl23O0NOs1-bK6yeNscKls.roa (hash: Uvxs615yu+WEWoRFMHOzorsioWG8H9U4nAbzC8roX+c=) 2: 8MEEBBaR3DhPOxqM35XJZijqba8.crl (hash: Bgux3C+r98oMn15KdqRNpJJzpaYAH72QWRIN03h/UlQ=) 3: Hl-LGslDYIhPlAkXHQHVv-RvB0w.roa (hash: O2E13yhrehXyHLH26oeDji6bWmBZEWAoPwvjmCy5UcQ=) 4: KeGOh-2gcusv29keikRHiEVKS4s.roa (hash: QrPYIqt13xYHx5UZtiEmzISVzXSCi7pxjFZqjccXxgI=) 5: PCT5Mgh2BfqwgaWaY02UF5LaLEs.roa (hash: XaBzd5GEKaiXR6sIMeiAlmk2HwlM0MvOxOjSag3QaY4=) 6: asCMHwRsfFwCKLi99bMyFo21krk.roa (hash: utShPNIu2DvLofXXWk5YOZ1a0OQi1aHbqM+BbMHKgoE=) 7: euk47PXoK5T6-tp0xVlaMzoR2zU.roa (hash: ELFMwMZ6NBCdcRDyZO9f72nzLI4WiJG57xVHtBVDcdU=) 8: fs_wxLugKiT_ydUrQOwGSh335rY.roa (hash: Q5dvvgKthsbcb9JzHMCTpI33x4XiWX2kEMaFSL83EKo=) 9: s-NcW6l6hXn5NOmuFXHN7mTAqcY.roa (hash: Ec6KZfarDMvuXKyozJ8ogUajfjL0rcRRpwLDmiHket8=) 10: xs5EMPFexMMDbg6ZozpAr6uWE70.roa (hash: qg/QvTawYThYqecFxjzESCzrgezKdtEVEc1jID0tLZg=) Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/d1/789caf-c8d2-419e-ae04-691422311729/1/8MEEBBaR3DhPOxqM35XJZijqba8.crl rsync://rpki.ripe.net/repository/DEFAULT/d1/789caf-c8d2-419e-ae04-691422311729/1/8MEEBBaR3DhPOxqM35XJZijqba8.mft rsync://rpki.ripe.net/repository/DEFAULT/8MEEBBaR3DhPOxqM35XJZijqba8.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Wed 05 Nov 2025 14:00:08 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9a:4f:2a:fc:b3:3d:7c:75:85:0a:69:9e:26:21:6e:8e:f8 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=f0c104041691dc384f3b1a8cdf95c96628ea6daf Validity Not Before: Nov 4 14:00:08 2025 GMT Not After : Nov 5 14:00:08 2025 GMT Subject: CN=a9397a61243c7172dac1c4a680a4f91841284643 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:b2:14:ad:13:7e:c9:66:05:51:6b:d1:13:de:33: 43:88:98:88:84:c9:be:d9:cb:ed:7c:1c:26:eb:94: ae:8a:5e:d9:6a:6d:f8:c0:59:12:4d:6b:aa:65:6c: 6d:98:f3:ff:79:08:e6:c2:97:34:a2:79:e7:a2:54: b8:fe:40:5c:df:fe:38:71:20:f0:5a:5b:27:5b:25: 56:3d:89:63:1a:ef:63:5b:29:a8:69:d1:d0:f6:44: 37:e9:27:36:95:0b:5c:91:8c:2d:66:cf:1b:c0:0f: 9e:1c:fc:ef:e5:b4:a2:d6:5b:2e:77:d4:9a:b1:04: 1c:97:49:98:62:0f:db:01:1b:87:a0:45:fc:57:24: 9c:89:15:6d:c9:72:99:d0:a5:54:9a:ed:c5:28:57: e6:40:87:b3:c9:a9:ed:d6:57:82:ae:78:69:be:e0: 8a:d7:b8:d1:6a:7b:85:02:c3:6d:31:29:88:09:0d: 28:7c:73:3c:d9:ff:bc:78:3f:eb:79:8a:d2:29:cc: 1a:1c:04:e2:61:81:70:59:ba:79:e2:7a:f4:fb:da: c9:d1:73:18:6d:56:a1:aa:b4:6a:96:c9:dd:42:36: a1:4a:ed:81:fb:88:53:32:f9:b6:4b:61:32:e6:b7: 93:d4:41:74:01:fd:d9:40:46:ac:4d:10:3a:02:cc: dd:39 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: A9:39:7A:61:24:3C:71:72:DA:C1:C4:A6:80:A4:F9:18:41:28:46:43 X509v3 Authority Key Identifier: keyid:F0:C1:04:04:16:91:DC:38:4F:3B:1A:8C:DF:95:C9:66:28:EA:6D:AF X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/8MEEBBaR3DhPOxqM35XJZijqba8.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/d1/789caf-c8d2-419e-ae04-691422311729/1/8MEEBBaR3DhPOxqM35XJZijqba8.mft X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/d1/789caf-c8d2-419e-ae04-691422311729/1/8MEEBBaR3DhPOxqM35XJZijqba8.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 31:ce:b4:31:35:06:86:bd:b0:6c:a3:e1:de:db:9c:11:2a:0f: ac:6f:0f:4a:e7:7d:df:e4:ca:80:6e:2c:5e:dc:1d:8a:fb:80: 69:75:54:2b:a8:a7:80:52:96:0d:fc:55:70:67:f2:a1:d8:2e: 70:d6:86:0c:89:5a:90:56:8f:f6:78:3a:9a:2f:2a:7f:30:16: 91:0e:2e:be:79:b4:43:9c:e8:10:ed:d3:81:fd:28:2f:da:21: cf:55:46:10:ee:da:2e:94:ca:f0:8c:ea:0a:c7:b2:fd:38:5b: 11:e9:53:ee:ad:af:ff:62:2d:3f:4c:f0:79:46:f0:ab:b4:f9: a1:5f:3c:0f:b4:c7:04:7d:da:53:c4:b7:6d:7c:8a:37:ce:4f: 91:40:bb:4a:51:ce:22:f8:70:82:e1:5a:dd:d1:e5:b2:35:27: ea:22:99:d6:a0:da:b8:12:6b:a2:7d:bc:ed:33:fb:ed:ce:e0: 39:64:99:39:8e:d3:24:ff:57:2a:89:36:19:11:56:5c:3a:1e: 05:a8:e5:ad:c6:94:45:7d:ee:76:90:c4:97:76:26:e4:ce:1f: 26:c2:07:36:ef:41:d5:98:cf:17:8a:3c:66:ae:a4:2a:c5:e2: 45:41:81:75:06:a2:d1:a2:5d:30:f6:83:c4:5c:ed:04:19:47: 79:52:04:b5 -----BEGIN CERTIFICATE----- MIIFFjCCA/6gAwIBAgISAZpPKvyzPXx1hQppniYhbo74MA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKGYwYzEwNDA0MTY5MWRjMzg0ZjNiMWE4Y2RmOTVjOTY2Mjhl YTZkYWYwHhcNMjUxMTA0MTQwMDA4WhcNMjUxMTA1MTQwMDA4WjAzMTEwLwYDVQQD EyhhOTM5N2E2MTI0M2M3MTcyZGFjMWM0YTY4MGE0ZjkxODQxMjg0NjQzMIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAshStE37JZgVRa9ET3jNDiJiIhMm+ 2cvtfBwm65Suil7Zam34wFkSTWuqZWxtmPP/eQjmwpc0onnnolS4/kBc3/44cSDw WlsnWyVWPYljGu9jWymoadHQ9kQ36Sc2lQtckYwtZs8bwA+eHPzv5bSi1lsud9Sa sQQcl0mYYg/bARuHoEX8VySciRVtyXKZ0KVUmu3FKFfmQIezyant1leCrnhpvuCK 17jRanuFAsNtMSmICQ0ofHM82f+8eD/reYrSKcwaHATiYYFwWbp54nr0+9rJ0XMY bVahqrRqlsndQjahSu2B+4hTMvm2S2Ey5reT1EF0Af3ZQEasTRA6AszdOQIDAQAB o4ICIjCCAh4wHQYDVR0OBBYEFKk5emEkPHFy2sHEpoCk+RhBKEZDMB8GA1UdIwQY MBaAFPDBBAQWkdw4TzsajN+VyWYo6m2vMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvOE1FRUJCYVIzRGhQT3hxTTM1WEpaaWpxYmE4LmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC9kMS83ODljYWYtYzhkMi00MTllLWFlMDQt NjkxNDIyMzExNzI5LzEvOE1FRUJCYVIzRGhQT3hxTTM1WEpaaWpxYmE4Lm1mdDCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC9kMS83ODljYWYtYzhkMi00MTllLWFlMDQtNjkxNDIyMzExNzI5 LzEvOE1FRUJCYVIzRGhQT3hxTTM1WEpaaWpxYmE4LmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAMc60MTUG hr2wbKPh3tucESoPrG8PSud93+TKgG4sXtwdivuAaXVUK6ingFKWDfxVcGfyodgu cNaGDIlakFaP9ng6mi8qfzAWkQ4uvnm0Q5zoEO3Tgf0oL9ohz1VGEO7aLpTK8Izq Csey/ThbEelT7q2v/2ItP0zweUbwq7T5oV88D7THBH3aU8S3bXyKN85PkUC7SlHO IvhwguFa3dHlsjUn6iKZ1qDauBJron287TP77c7gOWSZOY7TJP9XKok2GRFWXDoe BajlrcaURX3udpDEl3Ym5M4fJsIHNu9B1ZjPF4o8Zq6kKsXiRUGBdQai0aJdMPaD xFztBBlHeVIEtQ== -----END CERTIFICATE-----Generated at Tue Nov 4 20:21:40 2025 by rpki-client