$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/e0/8cac0c-3426-4f07-af20-cbb95183b27a/1/o20K5eL7_8zgh3Drwgwha5-_lIU.mft File: o20K5eL7_8zgh3Drwgwha5-_lIU.mft (raw, json) Hash identifier: 2yu7EWkbt5SUez2nV76qcW7YSCwaIW2NiPgQqL/ror0= Subject key identifier: 2E:9D:82:C9:69:C7:85:6D:DB:46:E3:3A:6D:88:6A:C4:F1:4A:5C:D4 Authority key identifier: A3:6D:0A:E5:E2:FB:FF:CC:E0:87:70:EB:C2:0C:21:6B:9F:BF:94:85 Certificate issuer: /CN=a36d0ae5e2fbffcce08770ebc20c216b9fbf9485 Certificate serial: 019A4EF52894654C903DEE55A5A7446A7F74 Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/o20K5eL7_8zgh3Drwgwha5-_lIU.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/e0/8cac0c-3426-4f07-af20-cbb95183b27a/1/o20K5eL7_8zgh3Drwgwha5-_lIU.mft Manifest number: 1754 Signing time: Tue 04 Nov 2025 13:01:20 +0000 Manifest this update: Tue 04 Nov 2025 13:01:20 +0000 Manifest next update: Wed 05 Nov 2025 13:01:20 +0000 Files and hashes: 1: 1XbIXlsc12j6nm66ObHlANu1FxM.roa (hash: lxZWGjYaWrGULnJUqbEWkt5IyYC/5a04fccF0g2Mp+o=) 2: 2tgBVmzXGxk2dORJHycmoqheNvg.roa (hash: kLmIpYFnCrJEJseq7gvSUWiTbkY+zk+XKRVcxk6gNqA=) 3: 3RFddkozoZGvDJWQRcnS3tQnN6k.roa (hash: KSM4qOmDj4X6PN9gZp6oxzJSTfcXsGzAsnDPsOPcYvo=) 4: 87A59tFx6zF_AoyfTTInJAFnkcA.roa (hash: unw4vIAiAfpS55i1OMoFYw1rzCbyU808aYVca3OlIMc=) 5: DlEN3D6ABTKOQAUtaBMUB9rDXTg.roa (hash: 7Z/Q1II+IY41ZQNrl/gNVuPJHIVrAlLxhLrLlp3uHJ8=) 6: PstjevQSMTfK9Nebc81zBIABSOY.roa (hash: yBGg5RaTCzg2szqA7T42K/slhIoFVty00QDcExnxviw=) 7: YBvNoajDSlWBD9rpf_g7I4GMsIw.roa (hash: Dj39vgxSEEOQgYRsBD+Yi70TljAy8Kf7UHt7BDtlwUU=) 8: fz5OQX3YNuZKli23fQPsHJMHAjg.roa (hash: 2W1jdhiJm6VJW0yfAkLiyNtl6yjC+Bfx3j0Hv8QWt58=) 9: o20K5eL7_8zgh3Drwgwha5-_lIU.crl (hash: Dy8XFjPbXInM3Kuod2k/XCJSJIzEYqFGH5qQZiqwXyo=) 10: uxPuBCLIiL0vvpcp5iG57n6Nxl8.roa (hash: 9FJQPnJf1+iHQwAWGEeso0fULqarFlyxqNgrRoa6pYY=) 11: v8yHhVnQZ24d3Hqq-_MmljsyF-o.roa (hash: ldyVLPmDRLippOD+hn4EjHJmd9dcu8cUfl/mwJelT5M=) 12: vOg7pIai3eYlqI8nGfkYR-448qE.roa (hash: k2twTqEvKHP86X8yabE26RQnv5iqhvXZjH+b4EIuDog=) Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/e0/8cac0c-3426-4f07-af20-cbb95183b27a/1/o20K5eL7_8zgh3Drwgwha5-_lIU.crl rsync://rpki.ripe.net/repository/DEFAULT/e0/8cac0c-3426-4f07-af20-cbb95183b27a/1/o20K5eL7_8zgh3Drwgwha5-_lIU.mft rsync://rpki.ripe.net/repository/DEFAULT/o20K5eL7_8zgh3Drwgwha5-_lIU.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Wed 05 Nov 2025 13:01:20 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9a:4e:f5:28:94:65:4c:90:3d:ee:55:a5:a7:44:6a:7f:74 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=a36d0ae5e2fbffcce08770ebc20c216b9fbf9485 Validity Not Before: Nov 4 13:01:20 2025 GMT Not After : Nov 5 13:01:20 2025 GMT Subject: CN=2e9d82c969c7856ddb46e33a6d886ac4f14a5cd4 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:8f:e7:93:b5:d3:54:21:c8:35:41:a0:e1:97:47: 68:d7:c1:16:5d:fe:f9:cc:6b:af:0f:49:06:0d:bd: f3:9a:89:51:74:3b:13:2c:c8:77:23:bd:1d:01:56: c5:e7:d6:34:1b:f0:8b:d2:30:59:fb:78:67:71:05: 08:92:46:5b:65:5a:81:37:a7:01:dd:9a:c6:d8:43: d2:d4:0c:57:a3:6f:9b:50:96:20:86:7a:8d:e6:92: 8e:21:81:68:92:87:97:00:26:18:b0:78:80:f9:0e: 82:b3:b5:09:e1:c5:7d:1e:be:ad:e1:1f:9a:a9:d2: 73:9e:f3:b9:91:9c:a4:4e:e3:ba:5e:fb:50:4a:9f: 78:9c:d3:b0:2c:89:10:7a:bc:f2:3d:f2:85:2b:20: 3c:b0:e9:61:c9:59:c9:27:e5:cd:7f:3c:7a:93:9b: 4a:0a:34:4a:43:ac:1d:cb:66:23:1f:05:4d:e0:2f: 1f:bf:7c:f8:de:84:de:99:bf:d8:24:60:17:08:18: 25:72:4e:0e:7e:6c:35:be:3f:be:6e:83:bd:29:7b: 10:ae:ba:cc:d9:64:d9:47:cd:ae:39:70:1a:dd:f2: 95:72:2a:5d:75:50:50:1c:b2:35:a9:b0:84:ec:bb: ca:2a:53:f0:43:5a:07:bf:be:29:5c:9d:4b:90:57: 76:a3 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 2E:9D:82:C9:69:C7:85:6D:DB:46:E3:3A:6D:88:6A:C4:F1:4A:5C:D4 X509v3 Authority Key Identifier: keyid:A3:6D:0A:E5:E2:FB:FF:CC:E0:87:70:EB:C2:0C:21:6B:9F:BF:94:85 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/o20K5eL7_8zgh3Drwgwha5-_lIU.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/e0/8cac0c-3426-4f07-af20-cbb95183b27a/1/o20K5eL7_8zgh3Drwgwha5-_lIU.mft X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/e0/8cac0c-3426-4f07-af20-cbb95183b27a/1/o20K5eL7_8zgh3Drwgwha5-_lIU.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 4b:33:38:93:d4:4e:13:6a:20:c0:e0:c4:5d:58:9b:5a:39:4c: 4a:56:59:38:83:0f:0d:93:f7:fb:1a:4e:5e:5f:e9:07:19:a0: 97:e1:04:71:48:ed:b2:81:e4:fd:85:70:e1:6a:85:0a:1b:32: 61:96:e6:85:d3:36:97:e0:3f:16:51:47:d3:24:4d:07:89:57: e1:93:ba:16:ef:73:1e:24:76:29:38:66:5d:1c:35:01:dd:08: ab:b5:0a:e1:d3:a8:20:15:76:8b:cb:ec:69:6d:b5:d1:41:d0: 12:07:0f:29:48:7e:a1:ab:e4:02:72:f9:27:3d:b4:2a:da:35: d1:fb:54:31:1d:e8:fc:cd:6f:b5:89:a9:56:fd:dc:00:9b:86: 42:d8:7c:31:c5:2d:23:78:07:fe:cb:04:ad:83:ff:47:8f:f1: 04:68:6a:09:ed:66:9a:7a:2d:f5:4e:97:43:e1:4a:ce:5c:92: b3:11:98:68:bc:f4:dd:41:7d:4c:61:25:37:30:de:0e:3a:46: 3d:c0:45:44:fe:6e:9a:c3:fa:11:34:8a:91:13:e2:14:15:4e: bf:f0:bf:88:d8:f7:b3:96:ca:3f:7a:81:22:fb:29:ac:14:86: 0a:c9:91:5c:c9:19:ec:ee:69:57:74:cb:ea:81:c5:75:06:d5: 28:84:db:0c -----BEGIN CERTIFICATE----- MIIFFjCCA/6gAwIBAgISAZpO9SiUZUyQPe5VpadEan90MA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKGEzNmQwYWU1ZTJmYmZmY2NlMDg3NzBlYmMyMGMyMTZiOWZi Zjk0ODUwHhcNMjUxMTA0MTMwMTIwWhcNMjUxMTA1MTMwMTIwWjAzMTEwLwYDVQQD EygyZTlkODJjOTY5Yzc4NTZkZGI0NmUzM2E2ZDg4NmFjNGYxNGE1Y2Q0MIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAj+eTtdNUIcg1QaDhl0do18EWXf75 zGuvD0kGDb3zmolRdDsTLMh3I70dAVbF59Y0G/CL0jBZ+3hncQUIkkZbZVqBN6cB 3ZrG2EPS1AxXo2+bUJYghnqN5pKOIYFokoeXACYYsHiA+Q6Cs7UJ4cV9Hr6t4R+a qdJznvO5kZykTuO6XvtQSp94nNOwLIkQerzyPfKFKyA8sOlhyVnJJ+XNfzx6k5tK CjRKQ6wdy2YjHwVN4C8fv3z43oTemb/YJGAXCBglck4Ofmw1vj++boO9KXsQrrrM 2WTZR82uOXAa3fKVcipddVBQHLI1qbCE7LvKKlPwQ1oHv74pXJ1LkFd2owIDAQAB o4ICIjCCAh4wHQYDVR0OBBYEFC6dgslpx4Vt20bjOm2IasTxSlzUMB8GA1UdIwQY MBaAFKNtCuXi+//M4Idw68IMIWufv5SFMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvbzIwSzVlTDdfOHpnaDNEcndnd2hhNS1fbElVLmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC9lMC84Y2FjMGMtMzQyNi00ZjA3LWFmMjAt Y2JiOTUxODNiMjdhLzEvbzIwSzVlTDdfOHpnaDNEcndnd2hhNS1fbElVLm1mdDCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC9lMC84Y2FjMGMtMzQyNi00ZjA3LWFmMjAtY2JiOTUxODNiMjdh LzEvbzIwSzVlTDdfOHpnaDNEcndnd2hhNS1fbElVLmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEASzM4k9RO E2ogwODEXVibWjlMSlZZOIMPDZP3+xpOXl/pBxmgl+EEcUjtsoHk/YVw4WqFChsy YZbmhdM2l+A/FlFH0yRNB4lX4ZO6Fu9zHiR2KThmXRw1Ad0Iq7UK4dOoIBV2i8vs aW210UHQEgcPKUh+oavkAnL5Jz20Kto10ftUMR3o/M1vtYmpVv3cAJuGQth8McUt I3gH/ssErYP/R4/xBGhqCe1mmnot9U6XQ+FKzlySsxGYaLz03UF9TGElNzDeDjpG PcBFRP5umsP6ETSKkRPiFBVOv/C/iNj3s5bKP3qBIvsprBSGCsmRXMkZ7O5pV3TL 6oHFdQbVKITbDA== -----END CERTIFICATE-----Generated at Tue Nov 4 22:15:26 2025 by rpki-client