$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/dd/9871ff-3f26-4b94-a464-6cc1d3ea832e/1/3uYj4q_3sDr-uUJgNIwWM7VNkFY.mft File: 3uYj4q_3sDr-uUJgNIwWM7VNkFY.mft (raw, json) Hash identifier: nUExqlGC0OnE/EqlXpJ6uwMOMQFkfrODGXODC14MPLM= Subject key identifier: FE:10:2C:00:CB:0A:14:BD:37:8D:08:6C:94:E7:49:24:C5:48:62:75 Authority key identifier: DE:E6:23:E2:AF:F7:B0:3A:FE:B9:42:60:34:8C:16:33:B5:4D:90:56 Certificate issuer: /CN=dee623e2aff7b03afeb94260348c1633b54d9056 Certificate serial: 019A5307EC301213E32394751996F8581667 Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/3uYj4q_3sDr-uUJgNIwWM7VNkFY.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/dd/9871ff-3f26-4b94-a464-6cc1d3ea832e/1/3uYj4q_3sDr-uUJgNIwWM7VNkFY.mft Manifest number: 1719 Signing time: Wed 05 Nov 2025 08:00:19 +0000 Manifest this update: Wed 05 Nov 2025 08:00:19 +0000 Manifest next update: Thu 06 Nov 2025 08:00:19 +0000 Files and hashes: 1: 3uYj4q_3sDr-uUJgNIwWM7VNkFY.crl (hash: 8PJNzxcYe3z5FoECHBQWvYXKnVuAkTnHFmUTWTtr7qI=) 2: 6JZopMJN7uTSjk8RLqAqQqiOTv8.roa (hash: i0CLCf229jC92V+lcugJs5cHzmKb/QwzzortpUgSlE0=) 3: C_l7gY4HKMAH6m-SKmgQfr13Qes.roa (hash: pRZ/nLpDPpbsV4pq3dfe7vuh4pYoUDOFa7B5tX5SH6o=) 4: F28FkCdyuci3Fria3smj-aR0Mo8.roa (hash: +iHBrJeXSZDW37L79isCmbH1GRGsYAUMJPznVWSAn3s=) 5: HxeMl3I7fWCrTKC3UKE8t5xV0DI.roa (hash: zshfuevzv04489EuaUye3hUzbr9QLab/OpuQsfk2Dcs=) 6: J6fnUwtuy6KkAVjKhE44GNNzN8M.roa (hash: nJgWO4VkQ+dgAVkCE/fAmTK8VpG4vrJ+GVnehbPgZ8E=) 7: KwTls30WYcznTSabSq35vBeXpj0.roa (hash: X/ekOhBXSP8fVDHGwbrzlLZCwxwJt0Lb7wF+ki+I/bA=) 8: U_EQ5jekqkfzEnde1Ryv_SKglkw.roa (hash: cXnEtyK2NW31Ug/q25GQCbINI47bxmk/UuYt64mKZR0=) 9: aMc4nGsoGQu2w3W1s-uVvNsFK0I.roa (hash: /2ttmZLJW9TyxvH3IbbsGdnKYvWQ9tFHHmFxUOSmV/4=) 10: dNmEpnLjp-lO8gmW3k6P1Inx2O4.roa (hash: lJLSDkihxscSK2n9w3BUV6TQD0rnHs7+lDruW36I8YM=) Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/dd/9871ff-3f26-4b94-a464-6cc1d3ea832e/1/3uYj4q_3sDr-uUJgNIwWM7VNkFY.crl rsync://rpki.ripe.net/repository/DEFAULT/dd/9871ff-3f26-4b94-a464-6cc1d3ea832e/1/3uYj4q_3sDr-uUJgNIwWM7VNkFY.mft rsync://rpki.ripe.net/repository/DEFAULT/3uYj4q_3sDr-uUJgNIwWM7VNkFY.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Thu 06 Nov 2025 03:00:03 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9a:53:07:ec:30:12:13:e3:23:94:75:19:96:f8:58:16:67 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=dee623e2aff7b03afeb94260348c1633b54d9056 Validity Not Before: Nov 5 08:00:19 2025 GMT Not After : Nov 6 08:00:19 2025 GMT Subject: CN=fe102c00cb0a14bd378d086c94e74924c5486275 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:d1:fe:37:c5:2a:fb:e2:78:27:0f:21:6e:4c:9f: ed:4b:45:15:b2:69:25:31:19:07:28:c0:7f:4a:d5: a4:f3:40:c6:06:5e:9e:a7:4d:bf:6e:77:e1:28:cc: 74:95:48:73:3b:16:87:cf:34:6f:ea:d1:27:53:af: 1b:6b:97:d4:a9:2e:38:3c:cc:31:5b:a6:b9:8e:ca: 1b:c3:ab:9c:ea:ba:19:60:85:99:0e:be:8c:93:8f: fe:9b:17:a3:06:89:6e:35:7d:ed:54:a1:50:c6:23: bd:31:4c:66:54:ff:bb:3b:f7:e6:d9:12:c4:96:f5: b1:63:28:32:8d:40:d1:b4:79:0d:d0:23:cd:83:9c: af:ff:ce:f5:e2:65:da:14:a9:12:20:a2:18:10:d5: f1:0a:18:0d:a6:65:80:58:41:8f:08:c3:d1:eb:22: 6a:3c:4a:41:85:89:7d:4d:b0:23:0b:e8:35:a5:24: 3e:3d:85:46:14:d8:a5:a7:8f:a2:f2:f3:83:07:25: d4:c3:a9:3a:40:eb:03:95:19:4e:89:16:bb:67:4f: 2a:bb:1a:3b:07:3c:91:13:6d:c9:83:70:b3:2b:26: 30:3c:06:2d:7c:d2:7d:9a:2b:19:65:dd:60:f2:5e: b7:7b:ae:51:20:81:8c:08:bd:9b:13:90:d1:1c:de: 90:d3 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: FE:10:2C:00:CB:0A:14:BD:37:8D:08:6C:94:E7:49:24:C5:48:62:75 X509v3 Authority Key Identifier: keyid:DE:E6:23:E2:AF:F7:B0:3A:FE:B9:42:60:34:8C:16:33:B5:4D:90:56 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/3uYj4q_3sDr-uUJgNIwWM7VNkFY.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/dd/9871ff-3f26-4b94-a464-6cc1d3ea832e/1/3uYj4q_3sDr-uUJgNIwWM7VNkFY.mft X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/dd/9871ff-3f26-4b94-a464-6cc1d3ea832e/1/3uYj4q_3sDr-uUJgNIwWM7VNkFY.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 20:82:1c:17:9c:7c:4e:47:fb:b2:78:36:7d:cb:42:e1:8f:22: 3d:0a:25:a8:fc:f7:3a:34:21:48:d5:06:8e:b6:cd:4d:ac:01: f6:af:f9:c7:5a:6c:99:31:f9:6b:b7:a7:4d:bc:36:86:c8:80: 84:2e:ef:70:82:8a:12:9f:ec:1d:ce:bd:59:88:f4:b2:e6:f6: 71:bf:23:14:0f:2a:e7:08:e1:2f:ff:34:31:12:96:54:25:f3: f8:26:65:8c:ab:97:0d:dd:ee:be:08:a9:5f:31:1a:f9:c0:31: bc:1d:82:54:49:cc:0e:8c:bf:2b:5e:22:78:06:ee:a1:7a:ee: 08:1a:3a:1c:3f:d0:43:d2:df:15:8d:5e:a0:61:b4:db:de:9e: fa:07:ba:ef:55:df:ea:c8:81:6d:95:b4:f5:0d:ee:ea:77:3f: c3:62:77:b4:82:e7:2f:0e:8e:d4:99:ba:23:23:d2:fa:04:fa: be:0b:af:41:76:5f:32:2e:65:8f:df:ac:5b:a3:55:5c:eb:96: e1:1f:72:0b:64:66:97:c4:ea:0d:6a:1f:8e:5e:8b:e4:8a:f8: df:24:bd:2e:17:4f:13:74:e3:9e:17:bf:9b:27:46:37:ae:42: 79:71:04:62:93:6e:60:e4:91:76:4d:ac:ac:0b:40:32:65:14: 6c:0f:d9:a0 -----BEGIN CERTIFICATE----- MIIFFjCCA/6gAwIBAgISAZpTB+wwEhPjI5R1GZb4WBZnMA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKGRlZTYyM2UyYWZmN2IwM2FmZWI5NDI2MDM0OGMxNjMzYjU0 ZDkwNTYwHhcNMjUxMTA1MDgwMDE5WhcNMjUxMTA2MDgwMDE5WjAzMTEwLwYDVQQD EyhmZTEwMmMwMGNiMGExNGJkMzc4ZDA4NmM5NGU3NDkyNGM1NDg2Mjc1MIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEA0f43xSr74ngnDyFuTJ/tS0UVsmkl MRkHKMB/StWk80DGBl6ep02/bnfhKMx0lUhzOxaHzzRv6tEnU68ba5fUqS44PMwx W6a5jsobw6uc6roZYIWZDr6Mk4/+mxejBoluNX3tVKFQxiO9MUxmVP+7O/fm2RLE lvWxYygyjUDRtHkN0CPNg5yv/8714mXaFKkSIKIYENXxChgNpmWAWEGPCMPR6yJq PEpBhYl9TbAjC+g1pSQ+PYVGFNilp4+i8vODByXUw6k6QOsDlRlOiRa7Z08quxo7 BzyRE23Jg3CzKyYwPAYtfNJ9misZZd1g8l63e65RIIGMCL2bE5DRHN6Q0wIDAQAB o4ICIjCCAh4wHQYDVR0OBBYEFP4QLADLChS9N40IbJTnSSTFSGJ1MB8GA1UdIwQY MBaAFN7mI+Kv97A6/rlCYDSMFjO1TZBWMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvM3VZajRxXzNzRHItdVVKZ05Jd1dNN1ZOa0ZZLmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC9kZC85ODcxZmYtM2YyNi00Yjk0LWE0NjQt NmNjMWQzZWE4MzJlLzEvM3VZajRxXzNzRHItdVVKZ05Jd1dNN1ZOa0ZZLm1mdDCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC9kZC85ODcxZmYtM2YyNi00Yjk0LWE0NjQtNmNjMWQzZWE4MzJl LzEvM3VZajRxXzNzRHItdVVKZ05Jd1dNN1ZOa0ZZLmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAIIIcF5x8 Tkf7sng2fctC4Y8iPQolqPz3OjQhSNUGjrbNTawB9q/5x1psmTH5a7enTbw2hsiA hC7vcIKKEp/sHc69WYj0sub2cb8jFA8q5wjhL/80MRKWVCXz+CZljKuXDd3uvgip XzEa+cAxvB2CVEnMDoy/K14ieAbuoXruCBo6HD/QQ9LfFY1eoGG0296e+ge671Xf 6siBbZW09Q3u6nc/w2J3tILnLw6O1Jm6IyPS+gT6vguvQXZfMi5lj9+sW6NVXOuW 4R9yC2Rml8TqDWofjl6L5Ir43yS9LhdPE3Tjnhe/mydGN65CeXEEYpNuYOSRdk2s rAtAMmUUbA/ZoA== -----END CERTIFICATE-----Generated at Wed Nov 5 10:39:07 2025 by rpki-client