$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/dd/9871ff-3f26-4b94-a464-6cc1d3ea832e/1/3uYj4q_3sDr-uUJgNIwWM7VNkFY.mft File: 3uYj4q_3sDr-uUJgNIwWM7VNkFY.mft (raw, json) Hash identifier: taXuNjf7pvNTOk7KtgZ965y7h3Wzx9lKhOztz3euk5E= Subject key identifier: 8C:36:91:30:D5:AD:BD:C0:EE:2E:A2:45:AE:ED:B1:46:8F:A4:5B:32 Authority key identifier: DE:E6:23:E2:AF:F7:B0:3A:FE:B9:42:60:34:8C:16:33:B5:4D:90:56 Certificate issuer: /CN=dee623e2aff7b03afeb94260348c1633b54d9056 Certificate serial: 019A51198873A7632A76A52A61042CE86B83 Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/3uYj4q_3sDr-uUJgNIwWM7VNkFY.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/dd/9871ff-3f26-4b94-a464-6cc1d3ea832e/1/3uYj4q_3sDr-uUJgNIwWM7VNkFY.mft Manifest number: 1718 Signing time: Tue 04 Nov 2025 23:00:18 +0000 Manifest this update: Tue 04 Nov 2025 23:00:18 +0000 Manifest next update: Wed 05 Nov 2025 23:00:18 +0000 Files and hashes: 1: 3uYj4q_3sDr-uUJgNIwWM7VNkFY.crl (hash: 2yHxWkbYGizNhZTLDjQY4AoGVttsP6MoFU4dRpmpd88=) 2: 6JZopMJN7uTSjk8RLqAqQqiOTv8.roa (hash: i0CLCf229jC92V+lcugJs5cHzmKb/QwzzortpUgSlE0=) 3: C_l7gY4HKMAH6m-SKmgQfr13Qes.roa (hash: pRZ/nLpDPpbsV4pq3dfe7vuh4pYoUDOFa7B5tX5SH6o=) 4: F28FkCdyuci3Fria3smj-aR0Mo8.roa (hash: +iHBrJeXSZDW37L79isCmbH1GRGsYAUMJPznVWSAn3s=) 5: HxeMl3I7fWCrTKC3UKE8t5xV0DI.roa (hash: zshfuevzv04489EuaUye3hUzbr9QLab/OpuQsfk2Dcs=) 6: J6fnUwtuy6KkAVjKhE44GNNzN8M.roa (hash: nJgWO4VkQ+dgAVkCE/fAmTK8VpG4vrJ+GVnehbPgZ8E=) 7: KwTls30WYcznTSabSq35vBeXpj0.roa (hash: X/ekOhBXSP8fVDHGwbrzlLZCwxwJt0Lb7wF+ki+I/bA=) 8: U_EQ5jekqkfzEnde1Ryv_SKglkw.roa (hash: cXnEtyK2NW31Ug/q25GQCbINI47bxmk/UuYt64mKZR0=) 9: aMc4nGsoGQu2w3W1s-uVvNsFK0I.roa (hash: /2ttmZLJW9TyxvH3IbbsGdnKYvWQ9tFHHmFxUOSmV/4=) 10: dNmEpnLjp-lO8gmW3k6P1Inx2O4.roa (hash: lJLSDkihxscSK2n9w3BUV6TQD0rnHs7+lDruW36I8YM=) Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/dd/9871ff-3f26-4b94-a464-6cc1d3ea832e/1/3uYj4q_3sDr-uUJgNIwWM7VNkFY.crl rsync://rpki.ripe.net/repository/DEFAULT/dd/9871ff-3f26-4b94-a464-6cc1d3ea832e/1/3uYj4q_3sDr-uUJgNIwWM7VNkFY.mft rsync://rpki.ripe.net/repository/DEFAULT/3uYj4q_3sDr-uUJgNIwWM7VNkFY.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Wed 05 Nov 2025 22:37:02 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9a:51:19:88:73:a7:63:2a:76:a5:2a:61:04:2c:e8:6b:83 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=dee623e2aff7b03afeb94260348c1633b54d9056 Validity Not Before: Nov 4 23:00:18 2025 GMT Not After : Nov 5 23:00:18 2025 GMT Subject: CN=8c369130d5adbdc0ee2ea245aeedb1468fa45b32 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:89:8d:39:18:8d:a9:5a:8f:bb:31:f9:66:f6:bf: b0:9b:ca:44:12:84:2b:b4:2e:1b:cd:07:8b:a7:a7: 6d:ec:21:96:15:b1:a0:f0:cd:10:01:1b:45:2e:3a: d5:d0:0f:7c:f8:25:34:08:c3:74:72:02:77:34:75: 06:a7:d6:7a:f6:13:0b:ac:17:c5:9b:fb:c7:18:11: 7d:74:04:81:48:0e:87:1a:99:1e:4d:99:0c:19:ab: 39:54:95:1c:b6:51:fe:d7:f9:47:16:ad:4f:f4:b2: 1c:6d:92:68:b7:5b:df:5c:bf:e7:a4:47:54:c7:2f: bb:8b:cc:3d:1b:f4:c1:93:90:80:b1:16:17:6e:52: 79:61:73:cf:7f:c2:4d:b8:4d:84:b9:2b:c7:2a:17: 07:aa:20:d9:38:d3:b1:e6:39:68:07:d7:43:2b:93: 16:c0:d7:1b:a1:cf:59:75:48:9e:fd:84:f1:93:d2: 41:89:e0:7b:3d:23:62:bc:90:0f:76:35:4c:8a:68: 11:c9:d1:dd:81:85:13:77:e6:93:d1:12:c8:4a:73: d9:21:f4:8c:89:38:85:99:2f:9d:4f:e7:28:d9:62: b8:e6:3a:c8:1e:a5:5d:de:e6:4c:1e:c0:5b:a9:d6: 17:10:fe:28:0b:79:cd:aa:bd:e2:2f:60:04:52:88: 99:eb Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 8C:36:91:30:D5:AD:BD:C0:EE:2E:A2:45:AE:ED:B1:46:8F:A4:5B:32 X509v3 Authority Key Identifier: keyid:DE:E6:23:E2:AF:F7:B0:3A:FE:B9:42:60:34:8C:16:33:B5:4D:90:56 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/3uYj4q_3sDr-uUJgNIwWM7VNkFY.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/dd/9871ff-3f26-4b94-a464-6cc1d3ea832e/1/3uYj4q_3sDr-uUJgNIwWM7VNkFY.mft X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/dd/9871ff-3f26-4b94-a464-6cc1d3ea832e/1/3uYj4q_3sDr-uUJgNIwWM7VNkFY.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 43:26:51:83:1d:0b:73:5f:74:89:f0:16:7f:26:0c:54:b8:61: f6:40:6b:aa:20:6d:bd:7d:04:fe:51:36:af:82:d0:16:da:01: 53:54:bd:3e:6f:bb:40:83:00:08:c3:5b:8f:f0:49:e3:37:ec: 8a:4d:c8:13:b0:2f:80:c4:02:08:89:bc:8c:95:94:f9:a8:05: ca:4a:70:d1:01:e9:7a:a3:e2:32:f4:b7:79:60:29:a8:17:31: 3d:41:81:8a:70:a4:cb:18:77:b7:68:6c:a6:9f:2b:74:4f:49: 13:4a:dc:66:9d:4e:2e:29:06:e3:e3:60:49:87:7d:26:4a:e3: 47:83:70:5c:09:e0:9a:63:fa:ad:fe:78:2f:cc:51:35:6b:3d: fe:97:7c:fc:e3:3c:35:6b:57:31:0d:f0:ce:c6:b4:47:2a:f8: 8f:ed:e6:91:28:e0:01:6f:0c:8a:ec:07:dd:15:4c:6a:9f:e0: 21:2d:c1:70:ad:d6:2e:ef:cd:95:1e:85:b9:a0:f0:1f:cc:ea: 5c:54:69:fd:a7:71:15:45:13:9c:0c:d8:3d:e3:59:b9:9a:de: 4a:9c:f6:20:fa:04:c3:8e:7f:f6:dc:1e:9d:ff:38:87:c3:8c: 6b:9a:8d:f5:d0:da:9c:59:33:c7:80:e8:34:ff:e6:f3:bc:03: 8f:ce:29:7c -----BEGIN CERTIFICATE----- MIIFFjCCA/6gAwIBAgISAZpRGYhzp2MqdqUqYQQs6GuDMA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKGRlZTYyM2UyYWZmN2IwM2FmZWI5NDI2MDM0OGMxNjMzYjU0 ZDkwNTYwHhcNMjUxMTA0MjMwMDE4WhcNMjUxMTA1MjMwMDE4WjAzMTEwLwYDVQQD Eyg4YzM2OTEzMGQ1YWRiZGMwZWUyZWEyNDVhZWVkYjE0NjhmYTQ1YjMyMIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAiY05GI2pWo+7Mflm9r+wm8pEEoQr tC4bzQeLp6dt7CGWFbGg8M0QARtFLjrV0A98+CU0CMN0cgJ3NHUGp9Z69hMLrBfF m/vHGBF9dASBSA6HGpkeTZkMGas5VJUctlH+1/lHFq1P9LIcbZJot1vfXL/npEdU xy+7i8w9G/TBk5CAsRYXblJ5YXPPf8JNuE2EuSvHKhcHqiDZONOx5jloB9dDK5MW wNcboc9ZdUie/YTxk9JBieB7PSNivJAPdjVMimgRydHdgYUTd+aT0RLISnPZIfSM iTiFmS+dT+co2WK45jrIHqVd3uZMHsBbqdYXEP4oC3nNqr3iL2AEUoiZ6wIDAQAB o4ICIjCCAh4wHQYDVR0OBBYEFIw2kTDVrb3A7i6iRa7tsUaPpFsyMB8GA1UdIwQY MBaAFN7mI+Kv97A6/rlCYDSMFjO1TZBWMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvM3VZajRxXzNzRHItdVVKZ05Jd1dNN1ZOa0ZZLmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC9kZC85ODcxZmYtM2YyNi00Yjk0LWE0NjQt NmNjMWQzZWE4MzJlLzEvM3VZajRxXzNzRHItdVVKZ05Jd1dNN1ZOa0ZZLm1mdDCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC9kZC85ODcxZmYtM2YyNi00Yjk0LWE0NjQtNmNjMWQzZWE4MzJl LzEvM3VZajRxXzNzRHItdVVKZ05Jd1dNN1ZOa0ZZLmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAQyZRgx0L c190ifAWfyYMVLhh9kBrqiBtvX0E/lE2r4LQFtoBU1S9Pm+7QIMACMNbj/BJ4zfs ik3IE7AvgMQCCIm8jJWU+agFykpw0QHpeqPiMvS3eWApqBcxPUGBinCkyxh3t2hs pp8rdE9JE0rcZp1OLikG4+NgSYd9JkrjR4NwXAngmmP6rf54L8xRNWs9/pd8/OM8 NWtXMQ3wzsa0Ryr4j+3mkSjgAW8MiuwH3RVMap/gIS3BcK3WLu/NlR6FuaDwH8zq XFRp/adxFUUTnAzYPeNZuZreSpz2IPoEw45/9twenf84h8OMa5qN9dDanFkzx4Do NP/m87wDj84pfA== -----END CERTIFICATE-----Generated at Wed Nov 5 07:51:08 2025 by rpki-client