$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/d4/8c5f5a-804b-4df6-827b-c7ccd7943106/1/nZibOZjhn8APhnDPbJ10AXFc808.mft File: nZibOZjhn8APhnDPbJ10AXFc808.mft (raw, json) Hash identifier: 2F9zznrKm2qRfSZKo98Hxhh5ZImI0eH09THnJLO2gew= Subject key identifier: E2:CF:C3:B7:AE:92:B9:E8:FF:73:EA:F5:A5:D7:77:62:8F:94:6C:80 Authority key identifier: 9D:98:9B:39:98:E1:9F:C0:0F:86:70:CF:6C:9D:74:01:71:5C:F3:4F Certificate issuer: /CN=9d989b3998e19fc00f8670cf6c9d7401715cf34f Certificate serial: 019A5187C5A7510A2B2D4F8C43E09086E998 Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/nZibOZjhn8APhnDPbJ10AXFc808.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/d4/8c5f5a-804b-4df6-827b-c7ccd7943106/1/nZibOZjhn8APhnDPbJ10AXFc808.mft Manifest number: 0202 Signing time: Wed 05 Nov 2025 01:00:43 +0000 Manifest this update: Wed 05 Nov 2025 01:00:43 +0000 Manifest next update: Thu 06 Nov 2025 01:00:43 +0000 Files and hashes: 1: 2d84iaAy9peqMc8uPtiQJUVpqhA.roa (hash: XonhU7MQtuyMxgxQYBP6Y8GxbPwqjebSF5A8W+e+9Dk=) 2: 7dhCE4YFHCUjlqkpkZY7lO72jeU.roa (hash: U8fxbXZIOaigGsLrKkx21Oe8R/4CGL6VvmyMHjpBRGE=) 3: EzmgW5SIzKZhd3gcqi5vbAQspRs.roa (hash: 9GSjRSh1NRSv4vNrPQJMwH5N/rEwdp6boN/thonioHA=) 4: OWURZZQfXBLCjrMIo9lI7C6_8rU.roa (hash: mhkt0q1UgZZPM01b3Aszei1MJkXP1Fj7gDNO1ZQ7Zg0=) 5: Oi5y3oR-zAeDQVQqnqlub4mxZBY.roa (hash: wiW5g0XVDHNy1QPGb/8FJ3EhNGUt4wPgRz1ROLxdqCE=) 6: SWb9dWC7dX_rwlK0omJMc3wlDks.roa (hash: LsnTgIHVTvCHjZWRXF28FLY3Qh1KmfRKmu1wsQo8XRo=) 7: Vkn5Fjc1blCjW36pRVzcI2dLeRM.roa (hash: b4zxuu0+PWf6Y2gL35zDWaLiEcfMZ+LL8pUvtmTR45E=) 8: VtA0sYtoBS8bGZyWtELDxZdV15w.roa (hash: qr5xc7yY1HYHlnNGTTUy5XqyOe3bNLkhXLhBpl8oti4=) 9: XqFMryLIw1x1QzwoXKE2TA0QsD8.roa (hash: 4jdqgSKXalwNBkWrPQkzkWpgRaMNA4FVpS3FsC5tqMU=) 10: YzR4bVvYuilSAsgyIIG5IHRToDw.roa (hash: aeoTN5jE2adPRR+yahq8zhU6/6Zb1ls1gStL9w3wSCY=) 11: lcQi5Bm9eFSfTGrvmV8ciQpCrmk.roa (hash: RYrQUk3+RUhAVWqgU4UejdbJ0Pp8G4DFGkckRr+4ALw=) 12: nK63OUw5HovdmnJOU8TA3IOqFXc.roa (hash: At6fl1NEh3tU3v5PbKWMv3k4BjWoFVeGE3Mdg5kqGAA=) 13: nZibOZjhn8APhnDPbJ10AXFc808.crl (hash: 3w68/LCeoQ3kKWbR+lfqx5P6w+Npkg2msAc3Pc1+EYg=) Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/d4/8c5f5a-804b-4df6-827b-c7ccd7943106/1/nZibOZjhn8APhnDPbJ10AXFc808.crl rsync://rpki.ripe.net/repository/DEFAULT/d4/8c5f5a-804b-4df6-827b-c7ccd7943106/1/nZibOZjhn8APhnDPbJ10AXFc808.mft rsync://rpki.ripe.net/repository/DEFAULT/nZibOZjhn8APhnDPbJ10AXFc808.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Thu 06 Nov 2025 01:00:43 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9a:51:87:c5:a7:51:0a:2b:2d:4f:8c:43:e0:90:86:e9:98 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=9d989b3998e19fc00f8670cf6c9d7401715cf34f Validity Not Before: Nov 5 01:00:43 2025 GMT Not After : Nov 6 01:00:43 2025 GMT Subject: CN=e2cfc3b7ae92b9e8ff73eaf5a5d777628f946c80 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:b9:d7:f2:5a:cf:fb:a3:76:8c:ef:a8:97:cc:33: f1:66:ce:f4:4c:55:14:02:27:2f:4d:d7:6f:c2:07: da:f1:e6:dc:23:c1:7e:2a:79:1c:0a:c2:2a:d9:50: 1c:05:c6:ea:d2:98:16:13:ed:fa:f5:99:f1:f4:c7: 00:41:60:5d:64:05:2c:29:78:a0:b0:36:02:cf:3d: a9:59:97:4c:c6:53:c4:ff:ee:c5:55:aa:9f:11:e7: 69:f0:01:14:74:11:be:f0:07:2c:9a:4c:c3:c5:dc: 55:27:7b:72:86:56:3d:fd:ce:d6:bf:6e:1e:9d:66: d1:8a:b9:58:87:67:ef:ee:6f:f0:c4:cc:a0:cf:cd: ac:6e:8c:62:40:8b:86:4f:9b:8c:ff:4e:cc:5a:cd: 0a:20:fe:18:61:ed:4e:4e:01:37:a5:61:b3:5a:22: 1e:73:04:41:1c:07:c9:ae:c4:82:66:b3:71:76:e8: 49:38:c4:09:1a:a9:cc:e4:d9:d8:38:55:bd:7d:d5: ca:30:01:ac:ca:8c:5c:49:90:c2:a3:6b:b7:1d:12: a0:15:b4:69:95:58:f2:06:a0:07:e5:4c:2c:6e:ae: 06:06:34:ac:8a:f8:3e:2e:94:f4:90:51:00:b0:b0: 34:5d:91:eb:45:66:f5:06:f9:1a:6f:72:72:33:dd: 78:47 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: E2:CF:C3:B7:AE:92:B9:E8:FF:73:EA:F5:A5:D7:77:62:8F:94:6C:80 X509v3 Authority Key Identifier: keyid:9D:98:9B:39:98:E1:9F:C0:0F:86:70:CF:6C:9D:74:01:71:5C:F3:4F X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/nZibOZjhn8APhnDPbJ10AXFc808.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/d4/8c5f5a-804b-4df6-827b-c7ccd7943106/1/nZibOZjhn8APhnDPbJ10AXFc808.mft X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/d4/8c5f5a-804b-4df6-827b-c7ccd7943106/1/nZibOZjhn8APhnDPbJ10AXFc808.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 91:5b:6b:0c:5c:8f:a2:6b:24:66:fa:e5:b6:55:e9:95:ea:5f: 19:c8:0e:0b:cd:c3:76:f9:93:e8:5d:b7:bf:ae:03:a2:70:8f: 41:37:dd:06:91:8d:3a:1a:2b:87:f3:8c:21:51:83:61:17:b2: e5:f7:12:cd:96:73:58:c6:c0:5e:b4:c6:f9:71:14:c3:40:41: 87:10:95:2b:34:59:15:3c:de:43:0a:e2:6c:41:d2:1e:bf:20: bd:dd:c2:03:b9:c1:ff:64:0f:94:96:90:16:6f:87:0a:dc:32: 69:f6:b4:fb:df:c1:9d:30:e5:8e:79:09:ae:e2:a7:32:fe:5f: 05:c0:c2:ea:1e:20:c0:2b:f9:4d:88:e9:9b:05:8d:bc:20:bd: 22:b0:6f:86:7b:af:63:b2:b1:f3:b6:5d:01:d0:f6:dc:9a:e8: 32:f8:cf:41:21:1d:57:b2:d5:45:29:1b:a5:6d:1c:be:ff:de: a2:6c:3e:0d:a9:a9:68:66:68:27:73:92:00:43:e8:f2:cf:7b: f8:63:97:41:62:cd:76:f8:f2:d2:04:b3:f9:b0:bb:bb:98:37: db:df:5d:21:d8:b8:4b:7b:77:13:d0:8b:29:5c:ee:1e:b4:ce: 8b:2e:5f:6d:5c:14:50:d4:1c:03:26:cf:74:ba:07:40:49:be: 31:e0:a0:87 -----BEGIN CERTIFICATE----- MIIFFjCCA/6gAwIBAgISAZpRh8WnUQorLU+MQ+CQhumYMA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKDlkOTg5YjM5OThlMTlmYzAwZjg2NzBjZjZjOWQ3NDAxNzE1 Y2YzNGYwHhcNMjUxMTA1MDEwMDQzWhcNMjUxMTA2MDEwMDQzWjAzMTEwLwYDVQQD EyhlMmNmYzNiN2FlOTJiOWU4ZmY3M2VhZjVhNWQ3Nzc2MjhmOTQ2YzgwMIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAudfyWs/7o3aM76iXzDPxZs70TFUU AicvTddvwgfa8ebcI8F+KnkcCsIq2VAcBcbq0pgWE+369Znx9McAQWBdZAUsKXig sDYCzz2pWZdMxlPE/+7FVaqfEedp8AEUdBG+8AcsmkzDxdxVJ3tyhlY9/c7Wv24e nWbRirlYh2fv7m/wxMygz82sboxiQIuGT5uM/07MWs0KIP4YYe1OTgE3pWGzWiIe cwRBHAfJrsSCZrNxduhJOMQJGqnM5NnYOFW9fdXKMAGsyoxcSZDCo2u3HRKgFbRp lVjyBqAH5Uwsbq4GBjSsivg+LpT0kFEAsLA0XZHrRWb1Bvkab3JyM914RwIDAQAB o4ICIjCCAh4wHQYDVR0OBBYEFOLPw7eukrno/3Pq9aXXd2KPlGyAMB8GA1UdIwQY MBaAFJ2YmzmY4Z/AD4Zwz2yddAFxXPNPMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvblppYk9aamhuOEFQaG5EUGJKMTBBWEZjODA4LmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC9kNC84YzVmNWEtODA0Yi00ZGY2LTgyN2It YzdjY2Q3OTQzMTA2LzEvblppYk9aamhuOEFQaG5EUGJKMTBBWEZjODA4Lm1mdDCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC9kNC84YzVmNWEtODA0Yi00ZGY2LTgyN2ItYzdjY2Q3OTQzMTA2 LzEvblppYk9aamhuOEFQaG5EUGJKMTBBWEZjODA4LmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAkVtrDFyP omskZvrltlXplepfGcgOC83DdvmT6F23v64DonCPQTfdBpGNOhorh/OMIVGDYRey 5fcSzZZzWMbAXrTG+XEUw0BBhxCVKzRZFTzeQwribEHSHr8gvd3CA7nB/2QPlJaQ Fm+HCtwyafa0+9/BnTDljnkJruKnMv5fBcDC6h4gwCv5TYjpmwWNvCC9IrBvhnuv Y7Kx87ZdAdD23JroMvjPQSEdV7LVRSkbpW0cvv/eomw+DampaGZoJ3OSAEPo8s97 +GOXQWLNdvjy0gSz+bC7u5g3299dIdi4S3t3E9CLKVzuHrTOiy5fbVwUUNQcAybP dLoHQEm+MeCghw== -----END CERTIFICATE-----Generated at Wed Nov 5 09:09:47 2025 by rpki-client