$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/d1/96436c-f6fa-40ba-a27c-fb1030651067/1/2-arjgxG6EG0TSucawO7ZfViHbE.mft File: 2-arjgxG6EG0TSucawO7ZfViHbE.mft (raw, json) Hash identifier: pgDWLlXJJAWftR+2DLu8jNw6q0oApMD9zHwf+qLbOJ0= Subject key identifier: 91:87:9F:DD:5D:EE:73:74:EB:C0:9E:E2:21:20:C5:4C:B1:68:30:AE Authority key identifier: DB:E6:AB:8E:0C:46:E8:41:B4:4D:2B:9C:6B:03:BB:65:F5:62:1D:B1 Certificate issuer: /CN=dbe6ab8e0c46e841b44d2b9c6b03bb65f5621db1 Certificate serial: 019A5006E4D1F9C02186FB8EFC510353F2BC Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/2-arjgxG6EG0TSucawO7ZfViHbE.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/d1/96436c-f6fa-40ba-a27c-fb1030651067/1/2-arjgxG6EG0TSucawO7ZfViHbE.mft Manifest number: 172C Signing time: Tue 04 Nov 2025 18:00:20 +0000 Manifest this update: Tue 04 Nov 2025 18:00:20 +0000 Manifest next update: Wed 05 Nov 2025 18:00:20 +0000 Files and hashes: 1: 1F-PLkJeZsd5BhbWomZg7cLPFrk.roa (hash: yrygGJcoXqVH2Jg8Juj5GnPuSpfNJREHSoSijlooIac=) 2: 2-arjgxG6EG0TSucawO7ZfViHbE.crl (hash: cBXeIW9dX+nezpbLWCfmJd4T+CtHKu/dQNgd/quuN/Q=) 3: 28-uwfDVLpaahAp5_g4gOqonJRE.roa (hash: ZiFvqyNcFNQjj1MRiXrgYLhWSDf2EOuub9eyPgFwZ5w=) 4: 3PFyhkeygxSnr9lo2JsKv8zzptA.roa (hash: q1R0erCPFvF5C0+eg74kijSUxdckHy4082+SsXMgLoI=) 5: 5gCvrLecynoNlZqqecgbQQFoRrQ.roa (hash: 9K+m38Q0PxPs98dlo8mOUJqX2gTHhK0yh4taoKPklF4=) 6: Hgi1HuyOIm-pDNTXBi7SDeMMv54.roa (hash: 4I6w4WrI+TeCpJfBFE/CPemODRHx6exn+BxP4Gc/fZ4=) 7: VTFmKW5oJe_aki7x1urblkP0Fyc.roa (hash: 2MZuFdP6pQLocFIUqAzsdUT8olNA1CbFEwyUxslWUHU=) 8: WuMjl-VoG-q9mOfKlozyoU3i5Zc.roa (hash: gMQYLpr2E7Od3N3zIX37zoUdKHUCId0XHkWxbn/9Hs4=) 9: Y-ggvECpJ-TUj9BMaNxFVHCG_mk.roa (hash: yHJbvycQTABXHTmwKw5e8PRSEFVUISxjCDtnqSPXNps=) 10: czt3GQhHtSmOo6RJuvFMFQAKSGo.roa (hash: XJWzfiETobcimR26X1Pa8klzjoq9ZGkjfUnqI+42fs0=) 11: eL6yX2gKmuR54LoAuIUZEONKX3g.roa (hash: Wq/KgDr2vwlpid8VQStYJgjmPQjXNNh76BSl9DIrTcE=) 12: hBf-hoIhETw06OBRpv7F1WdTrE8.roa (hash: LSEM+beBKj2xu4gyMsUhzku59BFOyI6BOdyKq1jM8vA=) 13: ps-3dIi4E3kjzYMhNLY6gSZjzEI.roa (hash: AimvrgTPnFzv1TtjV/eH/9wijMpIF0IeujrL4F6J9qw=) 14: vWlItCBxAXeKE8gJX96SzwOKVyc.roa (hash: Y2Q+VHBMvY4aKyxjSWnm9nXu79hw6C2astvb5J8gRi4=) Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/d1/96436c-f6fa-40ba-a27c-fb1030651067/1/2-arjgxG6EG0TSucawO7ZfViHbE.crl rsync://rpki.ripe.net/repository/DEFAULT/d1/96436c-f6fa-40ba-a27c-fb1030651067/1/2-arjgxG6EG0TSucawO7ZfViHbE.mft rsync://rpki.ripe.net/repository/DEFAULT/2-arjgxG6EG0TSucawO7ZfViHbE.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Wed 05 Nov 2025 18:00:03 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9a:50:06:e4:d1:f9:c0:21:86:fb:8e:fc:51:03:53:f2:bc Signature Algorithm: sha256WithRSAEncryption Issuer: CN=dbe6ab8e0c46e841b44d2b9c6b03bb65f5621db1 Validity Not Before: Nov 4 18:00:20 2025 GMT Not After : Nov 5 18:00:20 2025 GMT Subject: CN=91879fdd5dee7374ebc09ee22120c54cb16830ae Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:85:3f:22:31:fb:c9:f5:97:b7:c4:7f:ef:86:fb: 81:ec:34:bb:fc:bb:ba:53:c0:4f:c6:e9:7a:58:86: ad:af:30:ff:96:51:97:85:08:36:ca:98:9f:73:eb: 5e:6e:df:c5:b0:a9:fe:12:74:9e:f3:36:8b:a2:9a: 3a:d2:a3:68:90:3f:26:42:61:66:74:9a:9c:3c:60: 8c:c9:6d:be:89:4e:04:75:89:e5:90:26:83:b6:fd: 97:01:8f:12:61:13:c6:f2:63:ae:8c:ae:ef:98:7b: 7f:0e:0e:b4:56:c8:4c:e1:5e:c3:19:e6:fd:c1:6a: e5:19:69:e9:4f:06:6b:cb:c7:6b:d7:3a:37:ed:af: d9:13:19:75:9c:0d:bc:10:04:25:01:b8:74:52:21: 93:03:c4:f0:ab:e8:3b:cd:98:80:1d:48:da:f1:70: cd:89:57:56:97:c7:f5:52:5f:00:ac:07:57:4b:a7: 86:0b:2d:25:45:af:1a:0e:a1:85:73:89:76:39:e9: 6a:f3:23:af:b1:f3:b0:58:29:49:88:57:1e:c6:3f: bb:c8:c7:05:4a:89:b4:d1:8a:ab:0e:b1:d3:43:78: 1f:4e:86:64:0c:fc:62:86:0e:71:33:f0:74:8d:9a: 1c:c6:0f:ed:ec:21:49:5c:7b:45:eb:c1:7f:f9:e2: 31:65 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 91:87:9F:DD:5D:EE:73:74:EB:C0:9E:E2:21:20:C5:4C:B1:68:30:AE X509v3 Authority Key Identifier: keyid:DB:E6:AB:8E:0C:46:E8:41:B4:4D:2B:9C:6B:03:BB:65:F5:62:1D:B1 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/2-arjgxG6EG0TSucawO7ZfViHbE.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/d1/96436c-f6fa-40ba-a27c-fb1030651067/1/2-arjgxG6EG0TSucawO7ZfViHbE.mft X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/d1/96436c-f6fa-40ba-a27c-fb1030651067/1/2-arjgxG6EG0TSucawO7ZfViHbE.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 38:f8:3b:49:45:1e:18:3c:8b:15:a1:50:71:6b:e8:28:c6:fb: 08:89:41:02:3c:48:17:64:9d:8b:30:78:82:58:83:52:2e:4b: 7a:94:87:e6:58:4c:e4:77:27:64:99:f0:81:28:4a:30:52:fc: 3b:c7:51:1a:14:6d:39:e2:20:14:b7:7e:c9:39:3e:6f:f7:a3: 6b:f2:37:20:5e:7d:c2:83:67:40:b8:29:fd:aa:db:2d:2f:e5: 84:3f:35:56:d3:34:48:3b:fc:ac:cf:69:0d:8f:7b:40:3e:21: 74:61:f0:9e:7a:7b:cf:74:c3:8f:f6:26:e9:65:e5:47:b0:92: 2c:da:3b:fe:c7:03:59:e1:7a:69:6f:f4:ce:f7:41:ef:6c:36: 68:00:69:a6:ef:69:8e:3b:f0:ae:c9:0e:3c:ca:7f:df:67:a7: 05:78:3e:a1:a5:7f:5e:ce:15:0d:9f:ff:c3:a2:2f:45:0d:d1: 37:7d:a1:f4:3d:25:43:70:e1:68:96:2a:21:af:9d:75:67:a7: dc:a8:73:55:ff:bc:87:cd:40:1a:b9:4e:74:62:35:61:11:1c: 1b:f5:30:b0:54:d2:46:8d:d7:f2:aa:8f:b0:32:96:ef:33:b8: 90:cb:da:fb:8c:c7:95:24:74:3f:d8:36:79:4d:90:3b:b9:a9: 46:57:a8:5d -----BEGIN CERTIFICATE----- MIIFFjCCA/6gAwIBAgISAZpQBuTR+cAhhvuO/FEDU/K8MA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKGRiZTZhYjhlMGM0NmU4NDFiNDRkMmI5YzZiMDNiYjY1ZjU2 MjFkYjEwHhcNMjUxMTA0MTgwMDIwWhcNMjUxMTA1MTgwMDIwWjAzMTEwLwYDVQQD Eyg5MTg3OWZkZDVkZWU3Mzc0ZWJjMDllZTIyMTIwYzU0Y2IxNjgzMGFlMIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAhT8iMfvJ9Ze3xH/vhvuB7DS7/Lu6 U8BPxul6WIatrzD/llGXhQg2ypifc+tebt/FsKn+EnSe8zaLopo60qNokD8mQmFm dJqcPGCMyW2+iU4EdYnlkCaDtv2XAY8SYRPG8mOujK7vmHt/Dg60VshM4V7DGeb9 wWrlGWnpTwZry8dr1zo37a/ZExl1nA28EAQlAbh0UiGTA8Twq+g7zZiAHUja8XDN iVdWl8f1Ul8ArAdXS6eGCy0lRa8aDqGFc4l2Oelq8yOvsfOwWClJiFcexj+7yMcF Som00YqrDrHTQ3gfToZkDPxihg5xM/B0jZocxg/t7CFJXHtF68F/+eIxZQIDAQAB o4ICIjCCAh4wHQYDVR0OBBYEFJGHn91d7nN068Ce4iEgxUyxaDCuMB8GA1UdIwQY MBaAFNvmq44MRuhBtE0rnGsDu2X1Yh2xMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvMi1hcmpneEc2RUcwVFN1Y2F3TzdaZlZpSGJFLmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC9kMS85NjQzNmMtZjZmYS00MGJhLWEyN2Mt ZmIxMDMwNjUxMDY3LzEvMi1hcmpneEc2RUcwVFN1Y2F3TzdaZlZpSGJFLm1mdDCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC9kMS85NjQzNmMtZjZmYS00MGJhLWEyN2MtZmIxMDMwNjUxMDY3 LzEvMi1hcmpneEc2RUcwVFN1Y2F3TzdaZlZpSGJFLmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAOPg7SUUe GDyLFaFQcWvoKMb7CIlBAjxIF2SdizB4gliDUi5LepSH5lhM5HcnZJnwgShKMFL8 O8dRGhRtOeIgFLd+yTk+b/eja/I3IF59woNnQLgp/arbLS/lhD81VtM0SDv8rM9p DY97QD4hdGHwnnp7z3TDj/Ym6WXlR7CSLNo7/scDWeF6aW/0zvdB72w2aABppu9p jjvwrskOPMp/32enBXg+oaV/Xs4VDZ//w6IvRQ3RN32h9D0lQ3DhaJYqIa+ddWen 3KhzVf+8h81AGrlOdGI1YREcG/UwsFTSRo3X8qqPsDKW7zO4kMva+4zHlSR0P9g2 eU2QO7mpRleoXQ== -----END CERTIFICATE-----Generated at Tue Nov 4 23:53:43 2025 by rpki-client