$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/d5/86e32b-f067-450f-b67c-3aa150a92ab7/1/rnNsr92267jXx2lD9KJx4DhRCqk.mft File: rnNsr92267jXx2lD9KJx4DhRCqk.mft (raw, json) Hash identifier: X/7b71qkn+N9iXz/vjBFqNN1W51pgcM6bgQ/J5GZx4I= Subject key identifier: FC:63:FC:BA:DA:1C:30:C0:DA:96:E7:0B:6D:4C:1D:17:26:9D:C8:EC Authority key identifier: AE:73:6C:AF:DD:B6:EB:B8:D7:C7:69:43:F4:A2:71:E0:38:51:0A:A9 Certificate issuer: /CN=ae736cafddb6ebb8d7c76943f4a271e038510aa9 Certificate serial: 019A4E18DC3CB35F84340457F93DA78C3CC4 Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/rnNsr92267jXx2lD9KJx4DhRCqk.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/d5/86e32b-f067-450f-b67c-3aa150a92ab7/1/rnNsr92267jXx2lD9KJx4DhRCqk.mft Manifest number: 15D0 Signing time: Tue 04 Nov 2025 09:00:43 +0000 Manifest this update: Tue 04 Nov 2025 09:00:43 +0000 Manifest next update: Wed 05 Nov 2025 09:00:43 +0000 Files and hashes: 1: 1-qo2IZfSQe_p35VuNGg4c_fEmc.roa (hash: ZNytEtjJE3PoSw4fLaCNFgz51wqNOEOmou9bPPKVA2c=) 2: 2ax4rXEQA4dV7JremBmC0hQtaug.roa (hash: R/IKnZobJlpQGcUf505T2eKyq/irMcu2IrwltIWV+u4=) 3: D7oUSyhrzSWYYWl3XhQsUS72Yg4.roa (hash: gFrsONax/RUGkygvJXfVvu2wc5r7m/Z6tusuo2v3M6g=) 4: JOxitDZrH06_7gdJfTN1yzrI7bs.roa (hash: I4I1UDRrHD91eVymVzkfYVMUc8wdJt2DaDwRY1upCck=) 5: OBaSZfmehcZUBqMMFijQNwThNdI.roa (hash: 7APqv18WVWke1FDylnRooW5eMht73lWY6YprLban2L8=) 6: PZIj01LldFateFu3od4_Vnbh84Q.roa (hash: ecoXbiPRWhHOY6nEuRa20dSVzR4wCTgLp8nw9UHReAg=) 7: XukASID4vdHx7vc_ang5UnSgHH8.roa (hash: DxLEWXez2e/d5+PqlJRiByRJ5SsEhSAc9iljhU9E7yk=) 8: j5-XW5coEbjIakLbav-a-xkoxss.roa (hash: 3PeUPnbjaNU5eTMyl99skfbBuUv7EoDvaqaX+1+rQl4=) 9: rnNsr92267jXx2lD9KJx4DhRCqk.crl (hash: f5Ew7MCw9WVwy0RCP2XxWqnzpF5neH4253ks+IKPNQ4=) 10: zZkIW74qXtltgoLUxRfnjX8t5Bg.roa (hash: CVMBCJyn+beuTJEHswvGuHQF9hMYEJm+xn7R7IlaPlY=) Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/d5/86e32b-f067-450f-b67c-3aa150a92ab7/1/rnNsr92267jXx2lD9KJx4DhRCqk.crl rsync://rpki.ripe.net/repository/DEFAULT/d5/86e32b-f067-450f-b67c-3aa150a92ab7/1/rnNsr92267jXx2lD9KJx4DhRCqk.mft rsync://rpki.ripe.net/repository/DEFAULT/rnNsr92267jXx2lD9KJx4DhRCqk.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Wed 05 Nov 2025 09:00:03 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9a:4e:18:dc:3c:b3:5f:84:34:04:57:f9:3d:a7:8c:3c:c4 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=ae736cafddb6ebb8d7c76943f4a271e038510aa9 Validity Not Before: Nov 4 09:00:43 2025 GMT Not After : Nov 5 09:00:43 2025 GMT Subject: CN=fc63fcbada1c30c0da96e70b6d4c1d17269dc8ec Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:c4:c3:8e:f5:2e:00:2c:1a:06:11:29:1e:a1:44: e9:d3:cf:d8:43:7e:fc:09:cd:24:ca:40:59:0e:6e: 03:ef:81:03:61:2b:d3:01:be:e1:d7:54:b9:69:78: d4:7d:58:a9:e9:b7:92:c4:1c:be:15:85:6d:c2:cb: ed:00:b0:38:26:03:fb:56:e9:08:0a:c4:86:f3:71: 21:8b:8a:d4:91:cb:48:a3:ca:fd:2f:1c:c2:a6:f6: 84:5b:58:ab:b5:84:d6:a4:cb:64:14:d8:d3:11:05: 1d:f0:11:97:73:c3:9f:02:cf:a4:fe:4e:f2:4a:2a: 0e:7b:94:15:17:31:f1:84:f1:db:f9:44:cd:ae:30: 31:8a:7e:16:b2:36:a8:60:df:65:52:b5:fa:78:b4: 3b:07:73:06:82:a6:71:de:d8:a6:14:77:c0:6e:5c: 18:37:ff:13:45:92:81:8d:c5:24:0e:5e:51:1a:9a: 93:32:7b:db:4e:45:b5:a4:cd:52:c8:4d:c5:91:fb: 27:37:79:63:ee:ad:b2:8a:54:ae:c7:18:0a:63:d9: 97:0c:06:ed:85:e1:24:13:0e:8a:b0:63:12:bb:fc: 1d:39:09:46:d1:0e:a6:ae:ca:6e:12:90:64:29:aa: 36:47:04:5a:63:93:f7:fb:98:36:35:9c:52:24:b7: b6:d9 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: FC:63:FC:BA:DA:1C:30:C0:DA:96:E7:0B:6D:4C:1D:17:26:9D:C8:EC X509v3 Authority Key Identifier: keyid:AE:73:6C:AF:DD:B6:EB:B8:D7:C7:69:43:F4:A2:71:E0:38:51:0A:A9 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/rnNsr92267jXx2lD9KJx4DhRCqk.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/d5/86e32b-f067-450f-b67c-3aa150a92ab7/1/rnNsr92267jXx2lD9KJx4DhRCqk.mft X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/d5/86e32b-f067-450f-b67c-3aa150a92ab7/1/rnNsr92267jXx2lD9KJx4DhRCqk.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 6f:89:64:eb:19:24:09:70:85:99:6e:54:45:ec:59:89:37:af: ef:26:f0:17:89:03:80:b3:e3:d5:29:66:18:00:50:3a:24:9b: 79:79:81:05:a3:58:be:e9:ec:81:df:f3:77:b9:87:49:4b:9c: 87:69:b1:ed:36:b5:ad:f1:74:0c:fb:b7:29:e2:ae:3d:dd:70: a3:b9:67:d4:06:f7:cd:07:df:87:0d:ce:54:73:a2:37:cd:f2: 16:e1:78:c7:88:3e:b0:b5:1f:c9:ff:c7:23:ba:bb:e2:5a:1a: b5:2c:0e:d1:c5:20:3d:09:14:99:9e:04:9a:d7:45:c2:78:9f: 76:30:35:22:78:37:0e:3c:15:ea:80:f8:c8:1d:74:1a:fc:e8: 5a:15:91:cc:35:fe:92:57:06:09:2e:67:33:58:3b:a2:a2:71: 60:4e:05:49:94:b3:b3:1a:8b:11:1a:8e:4e:0d:99:6f:a4:1a: ff:4c:a6:11:9e:63:56:7e:66:16:b5:40:37:ef:4a:70:6e:3f: 78:56:33:cf:a5:83:d3:c9:23:ac:2d:ee:cd:1d:31:31:87:a3: 4e:b8:93:8e:34:12:7c:6a:0f:2e:1b:b4:57:dc:80:19:09:a6: 77:bb:fd:d9:ca:3d:ae:13:9b:41:14:90:05:97:08:66:0b:8d: 2b:59:d0:34 -----BEGIN CERTIFICATE----- MIIFFjCCA/6gAwIBAgISAZpOGNw8s1+ENARX+T2njDzEMA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKGFlNzM2Y2FmZGRiNmViYjhkN2M3Njk0M2Y0YTI3MWUwMzg1 MTBhYTkwHhcNMjUxMTA0MDkwMDQzWhcNMjUxMTA1MDkwMDQzWjAzMTEwLwYDVQQD EyhmYzYzZmNiYWRhMWMzMGMwZGE5NmU3MGI2ZDRjMWQxNzI2OWRjOGVjMIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAxMOO9S4ALBoGESkeoUTp08/YQ378 Cc0kykBZDm4D74EDYSvTAb7h11S5aXjUfVip6beSxBy+FYVtwsvtALA4JgP7VukI CsSG83Ehi4rUkctIo8r9LxzCpvaEW1irtYTWpMtkFNjTEQUd8BGXc8OfAs+k/k7y SioOe5QVFzHxhPHb+UTNrjAxin4WsjaoYN9lUrX6eLQ7B3MGgqZx3timFHfAblwY N/8TRZKBjcUkDl5RGpqTMnvbTkW1pM1SyE3FkfsnN3lj7q2yilSuxxgKY9mXDAbt heEkEw6KsGMSu/wdOQlG0Q6mrspuEpBkKao2RwRaY5P3+5g2NZxSJLe22QIDAQAB o4ICIjCCAh4wHQYDVR0OBBYEFPxj/LraHDDA2pbnC21MHRcmncjsMB8GA1UdIwQY MBaAFK5zbK/dtuu418dpQ/SiceA4UQqpMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvcm5Oc3I5MjI2N2pYeDJsRDlLSng0RGhSQ3FrLmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC9kNS84NmUzMmItZjA2Ny00NTBmLWI2N2Mt M2FhMTUwYTkyYWI3LzEvcm5Oc3I5MjI2N2pYeDJsRDlLSng0RGhSQ3FrLm1mdDCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC9kNS84NmUzMmItZjA2Ny00NTBmLWI2N2MtM2FhMTUwYTkyYWI3 LzEvcm5Oc3I5MjI2N2pYeDJsRDlLSng0RGhSQ3FrLmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAb4lk6xkk CXCFmW5URexZiTev7ybwF4kDgLPj1SlmGABQOiSbeXmBBaNYvunsgd/zd7mHSUuc h2mx7Ta1rfF0DPu3KeKuPd1wo7ln1Ab3zQffhw3OVHOiN83yFuF4x4g+sLUfyf/H I7q74loatSwO0cUgPQkUmZ4EmtdFwnifdjA1Ing3DjwV6oD4yB10GvzoWhWRzDX+ klcGCS5nM1g7oqJxYE4FSZSzsxqLERqOTg2Zb6Qa/0ymEZ5jVn5mFrVAN+9KcG4/ eFYzz6WD08kjrC3uzR0xMYejTriTjjQSfGoPLhu0V9yAGQmmd7v92co9rhObQRSQ BZcIZguNK1nQNA== -----END CERTIFICATE-----Generated at Tue Nov 4 10:43:52 2025 by rpki-client