$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/dc/c515c9-df08-426c-80e6-0367268ff871/1/CBt6IuUc-5z4QgXkRJmYrVXY8GU.mft File: CBt6IuUc-5z4QgXkRJmYrVXY8GU.mft (raw, json) Hash identifier: coAxYWP5dKXUSHrwZjXPN2daU9spZi1hNPPOhk3bIC0= Subject key identifier: 53:BA:B8:D8:A2:17:18:92:FA:4B:04:D8:96:1F:24:2E:B1:D2:67:25 Authority key identifier: 08:1B:7A:22:E5:1C:FB:9C:F8:42:05:E4:44:99:98:AD:55:D8:F0:65 Certificate issuer: /CN=081b7a22e51cfb9cf84205e4449998ad55d8f065 Certificate serial: 019A50AB98AB07E96071EB85BE88DD534F89 Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/CBt6IuUc-5z4QgXkRJmYrVXY8GU.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/dc/c515c9-df08-426c-80e6-0367268ff871/1/CBt6IuUc-5z4QgXkRJmYrVXY8GU.mft Manifest number: 1744 Signing time: Tue 04 Nov 2025 21:00:14 +0000 Manifest this update: Tue 04 Nov 2025 21:00:14 +0000 Manifest next update: Wed 05 Nov 2025 21:00:14 +0000 Files and hashes: 1: 0EWIFMkHOwPxXxJO-cVVnlFMV9M.roa (hash: H3HRfMwSGiaOC4hjRP3JPpolbe1iEtk1HgVt+tXcFJg=) 2: 1-LzJo-wqbXyMIW7dShaQShecG4A.roa (hash: zk5MBDVPSqfgXloU9IVz77yOOxCyNDA4FFF8iDzvQ0U=) 3: 1Q8S-F04ndhiDn0SGwOoAJvpcJE.roa (hash: C3Etga/0CnN14pA6mDGityRvYUsO547YlA3aweNBuiE=) 4: 1oBdMA7e2Z8U2Zj6DKxZPs9Fxrk.roa (hash: j4/Gl/mQufV5n5quU+YzE8lGK989RzijTqRKBSqxgrU=) 5: 5HzzPzyXFWUltUFIxz7A1OHGi7o.roa (hash: KdXF+S8JaHRcZ3Ivt3Pqt/DXcq9oRCgLGhDICrSfT58=) 6: 8-WV0KFzAJRQQFuP9I6yLavMsag.roa (hash: I9thkkCJIm1PtEdyWstVE+kMoQxLauXSjcbMKnMywsw=) 7: 9NRiEzWNWvOsqkkmj1H_nO4JtIA.roa (hash: M1EfpG0UAk+KXmH4YDb8gbqx8X4cMoL0D3M3L/57Gmk=) 8: CBt6IuUc-5z4QgXkRJmYrVXY8GU.crl (hash: MGYjWIZQeC6j8cqRGkUQA6TmapW3J5swLmUBq5vjefg=) 9: CdZHXMtiuXIYHPmoJY2aErxG8Z8.roa (hash: zau8aloWL7mHqdY4KBJaLbm12+SMJIeq7unHMUAtkpg=) 10: GnVxDQNRy4lZ_6dGRtjVD3G4cHQ.roa (hash: uewNPszrVAmQ8TC2z53P69rsch1KQGC60dIp6JPFrsU=) 11: M4I4vx1xHRyGLzdFv0m3WqQ7kbc.roa (hash: 2EMSvLZ8cjOngMWy3qqLP47J5l90EJ/AMLuHP59YgVk=) 12: XDAdp99VnBF7cnnsQ12OybJrT8Y.roa (hash: RlZg9LpMx3Sn+N/ygBjqDdQQDqiZuazZKwQVgxx0FBg=) 13: tjV22hyfL6sKASeEJo6Ke2cIRMg.roa (hash: j+NWMjI7+Df8SVOaL0Iyl9IZZ4H1LL2E359iqV63je4=) 14: zCJNwAHBT-OuD8JSwLlWmHeq2i0.roa (hash: xxcu2GFnZrIoRaIL254U2SP3O3E+qALgdaalLMmqYoY=) Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/dc/c515c9-df08-426c-80e6-0367268ff871/1/CBt6IuUc-5z4QgXkRJmYrVXY8GU.crl rsync://rpki.ripe.net/repository/DEFAULT/dc/c515c9-df08-426c-80e6-0367268ff871/1/CBt6IuUc-5z4QgXkRJmYrVXY8GU.mft rsync://rpki.ripe.net/repository/DEFAULT/CBt6IuUc-5z4QgXkRJmYrVXY8GU.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Wed 05 Nov 2025 18:00:03 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9a:50:ab:98:ab:07:e9:60:71:eb:85:be:88:dd:53:4f:89 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=081b7a22e51cfb9cf84205e4449998ad55d8f065 Validity Not Before: Nov 4 21:00:14 2025 GMT Not After : Nov 5 21:00:14 2025 GMT Subject: CN=53bab8d8a2171892fa4b04d8961f242eb1d26725 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:bd:9c:c8:5b:3d:a0:58:e4:8c:d6:62:a4:d2:f6: a3:93:fd:05:60:82:f3:b1:cf:47:ae:fa:9c:78:51: df:c7:c3:ed:54:90:58:6f:41:b1:9a:31:16:22:3c: 08:34:36:a1:f6:d4:9d:6a:34:a2:7c:98:4f:10:37: a1:4c:fd:4a:d8:9b:25:3b:57:1c:a6:72:7f:86:09: 54:b2:37:e1:08:d4:b7:b1:46:5e:bd:82:c2:9b:3f: 99:0c:27:2d:e6:e0:f9:5a:d1:5c:4d:f0:eb:3c:68: da:16:e0:e1:ab:ec:8a:fa:b6:dc:3e:7f:97:bc:b8: 8e:49:e4:62:46:a5:ae:03:91:5d:fd:d2:ce:5f:9f: 9c:99:68:73:a0:cd:b5:47:bc:be:b8:20:0a:f5:71: 56:5d:ef:4c:1f:66:6c:11:ec:57:65:4f:45:85:ac: 26:3d:e7:7e:a6:31:4b:a3:53:5f:d2:11:db:a7:ae: 48:10:1c:63:a2:c7:29:75:9f:68:73:7a:f9:a1:fb: db:e6:b1:91:8f:b2:95:81:1f:8c:7c:d7:9b:02:55: d9:e3:80:d4:bb:38:41:62:7a:98:78:2c:8b:c4:ea: d7:e9:af:2f:f9:35:e7:92:40:0f:2f:2f:2c:42:5d: ac:ce:60:e6:bf:36:b5:a3:36:ca:0b:1c:9f:22:3e: 97:8f Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 53:BA:B8:D8:A2:17:18:92:FA:4B:04:D8:96:1F:24:2E:B1:D2:67:25 X509v3 Authority Key Identifier: keyid:08:1B:7A:22:E5:1C:FB:9C:F8:42:05:E4:44:99:98:AD:55:D8:F0:65 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/CBt6IuUc-5z4QgXkRJmYrVXY8GU.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/dc/c515c9-df08-426c-80e6-0367268ff871/1/CBt6IuUc-5z4QgXkRJmYrVXY8GU.mft X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/dc/c515c9-df08-426c-80e6-0367268ff871/1/CBt6IuUc-5z4QgXkRJmYrVXY8GU.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 0c:5e:07:68:8f:67:54:71:d7:44:06:5b:f3:d5:ec:0d:da:35: 85:58:b6:52:64:07:95:fd:53:80:3f:15:01:98:b9:72:b7:93: 3d:d8:21:c8:71:33:a0:17:30:ca:21:a3:8d:ff:fd:c6:95:47: 1b:85:88:46:03:01:d5:ab:f0:8a:53:59:b4:48:15:1a:4e:4e: 72:fa:2c:1a:ba:3d:00:00:b1:17:71:2b:e7:9b:fc:9d:4f:c6: 97:fa:65:8c:eb:26:90:d9:fb:68:d9:47:05:3c:c9:a5:bf:a1: 9e:7c:aa:ce:0d:94:77:80:62:e5:67:8a:ad:96:5f:84:9c:10: 19:ae:f9:0c:51:2b:de:b4:d6:07:9b:f2:8b:b1:66:84:3e:38: ef:78:e6:f1:3c:cd:49:6b:ff:30:e8:c5:2e:de:ea:71:58:88: 30:e9:72:2e:b7:1c:44:b2:52:7b:11:87:ba:1e:f3:3e:34:dd: 99:a0:c3:87:90:f9:2e:1c:42:c5:a7:79:89:f5:0b:95:84:60: f8:98:d5:cf:de:b3:eb:19:1e:d5:6a:77:7d:72:97:6e:c1:fc: 58:63:60:b8:39:8a:79:88:12:18:39:dd:8c:a5:94:a1:83:b2: 5b:0a:c1:78:c6:2e:c1:43:b3:6f:6d:63:2b:d0:84:8f:c6:c2: ff:3b:c5:11 -----BEGIN CERTIFICATE----- MIIFFjCCA/6gAwIBAgISAZpQq5irB+lgceuFvojdU0+JMA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKDA4MWI3YTIyZTUxY2ZiOWNmODQyMDVlNDQ0OTk5OGFkNTVk OGYwNjUwHhcNMjUxMTA0MjEwMDE0WhcNMjUxMTA1MjEwMDE0WjAzMTEwLwYDVQQD Eyg1M2JhYjhkOGEyMTcxODkyZmE0YjA0ZDg5NjFmMjQyZWIxZDI2NzI1MIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAvZzIWz2gWOSM1mKk0vajk/0FYILz sc9HrvqceFHfx8PtVJBYb0GxmjEWIjwINDah9tSdajSifJhPEDehTP1K2JslO1cc pnJ/hglUsjfhCNS3sUZevYLCmz+ZDCct5uD5WtFcTfDrPGjaFuDhq+yK+rbcPn+X vLiOSeRiRqWuA5Fd/dLOX5+cmWhzoM21R7y+uCAK9XFWXe9MH2ZsEexXZU9Fhawm Ped+pjFLo1Nf0hHbp65IEBxjoscpdZ9oc3r5ofvb5rGRj7KVgR+MfNebAlXZ44DU uzhBYnqYeCyLxOrX6a8v+TXnkkAPLy8sQl2szmDmvza1ozbKCxyfIj6XjwIDAQAB o4ICIjCCAh4wHQYDVR0OBBYEFFO6uNiiFxiS+ksE2JYfJC6x0mclMB8GA1UdIwQY MBaAFAgbeiLlHPuc+EIF5ESZmK1V2PBlMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvQ0J0Nkl1VWMtNXo0UWdYa1JKbVlyVlhZOEdVLmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC9kYy9jNTE1YzktZGYwOC00MjZjLTgwZTYt MDM2NzI2OGZmODcxLzEvQ0J0Nkl1VWMtNXo0UWdYa1JKbVlyVlhZOEdVLm1mdDCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC9kYy9jNTE1YzktZGYwOC00MjZjLTgwZTYtMDM2NzI2OGZmODcx LzEvQ0J0Nkl1VWMtNXo0UWdYa1JKbVlyVlhZOEdVLmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEADF4HaI9n VHHXRAZb89XsDdo1hVi2UmQHlf1TgD8VAZi5creTPdghyHEzoBcwyiGjjf/9xpVH G4WIRgMB1avwilNZtEgVGk5OcvosGro9AACxF3Er55v8nU/Gl/pljOsmkNn7aNlH BTzJpb+hnnyqzg2Ud4Bi5WeKrZZfhJwQGa75DFEr3rTWB5vyi7FmhD4473jm8TzN SWv/MOjFLt7qcViIMOlyLrccRLJSexGHuh7zPjTdmaDDh5D5LhxCxad5ifULlYRg +JjVz96z6xke1Wp3fXKXbsH8WGNguDmKeYgSGDndjKWUoYOyWwrBeMYuwUOzb21j K9CEj8bC/zvFEQ== -----END CERTIFICATE-----Generated at Wed Nov 5 00:47:14 2025 by rpki-client