$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/e1/01638c-6cb9-4589-909b-d37df634a929/1/bNmMLFSwy-oTTiepgc_d5zI24FU.mft File: bNmMLFSwy-oTTiepgc_d5zI24FU.mft (raw, json) Hash identifier: B9llWP3NZK+ZqnqW70MEpwOO3IUhodZjSHam8wWx0Qo= Subject key identifier: 53:CF:77:2E:A0:8F:4D:B0:01:7D:CE:D5:0D:04:E7:BE:D8:3E:1E:B6 Authority key identifier: 6C:D9:8C:2C:54:B0:CB:EA:13:4E:27:A9:81:CF:DD:E7:32:36:E0:55 Certificate issuer: /CN=6cd98c2c54b0cbea134e27a981cfdde73236e055 Certificate serial: 019A4FD06DE9DCFAEBC2B6EC0BEF1CFA16CD Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/bNmMLFSwy-oTTiepgc_d5zI24FU.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/e1/01638c-6cb9-4589-909b-d37df634a929/1/bNmMLFSwy-oTTiepgc_d5zI24FU.mft Manifest number: 13CC Signing time: Tue 04 Nov 2025 17:00:50 +0000 Manifest this update: Tue 04 Nov 2025 17:00:50 +0000 Manifest next update: Wed 05 Nov 2025 17:00:50 +0000 Files and hashes: 1: 0_mR_q2PRjMrC6KY1_UxRD8g8so.roa (hash: y/csCabR2wm0syOrpZHF70QEhjDWUBWGFQAkqx7SNyk=) 2: 4TefOlatmM0RZvlgyykepaTA69w.roa (hash: oK3ggt3FwEGdGg67HpifWxggQ4sHuczhuCdiLpHFNGo=) 3: 7X_plhmrvkux1oibBja4OB7LETs.roa (hash: gnMgxFgUS9IL4J+87g7lZ1R3Q2jpCUYTvtTDs50/e2w=) 4: AIEW49j5InMuprcIv1re5ELo7Mg.roa (hash: CspD88WXE/VTrfWO2t59apJyKXsmRJQByqBIfAYqYok=) 5: N2s6KqnnW9qGglbgsxkDhGmT3aQ.roa (hash: 1ZleteROqD8Qub7BlNQREKgEscTZbJHqZvsJY5lTHPU=) 6: NCuZRLXUSqeQd0-K94k8sdWt8i0.roa (hash: 9KnkKk3vCESK/jiryTSBEmdsg4CHDO3QXfIZjaFh0FM=) 7: VDBZ-Do7oLcSjkfG0QXXLZFsn18.roa (hash: tsSmWQNC/m3Eo2x7t6PBKV0awmBGlt2M1agXJLIK2d8=) 8: WrznMHjZ-TWido1gLYI1bfVUCu0.roa (hash: ihQrw9/7rFTMBQ43NuItjX9UIXKmTvOZATZckZMKMRU=) 9: bNmMLFSwy-oTTiepgc_d5zI24FU.crl (hash: zp6TtZWVFdzj7VXG8tU01Dq70UyBGU7GVXFQplqueaE=) 10: eIFvvK-ivxwVefbgEMRWrAvh218.roa (hash: enbiuy39QSMflYfm+7UJdD/VijdNzRJOnnOULTcOwog=) 11: lRDpcMs9bdL5LekISXn8HOYdt5w.roa (hash: wQgu4dQRpBf8xSuiFs4AOLGSs9pN4U3S1WwC8RUnajc=) 12: sCxYlTWiDhdRMcngf850A6XqaOE.roa (hash: kqrC9Mj0ll887+4wrCmPGnjHuKfBNUmVpy0g2oMFtCo=) Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/e1/01638c-6cb9-4589-909b-d37df634a929/1/bNmMLFSwy-oTTiepgc_d5zI24FU.crl rsync://rpki.ripe.net/repository/DEFAULT/e1/01638c-6cb9-4589-909b-d37df634a929/1/bNmMLFSwy-oTTiepgc_d5zI24FU.mft rsync://rpki.ripe.net/repository/DEFAULT/bNmMLFSwy-oTTiepgc_d5zI24FU.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Wed 05 Nov 2025 09:00:03 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9a:4f:d0:6d:e9:dc:fa:eb:c2:b6:ec:0b:ef:1c:fa:16:cd Signature Algorithm: sha256WithRSAEncryption Issuer: CN=6cd98c2c54b0cbea134e27a981cfdde73236e055 Validity Not Before: Nov 4 17:00:50 2025 GMT Not After : Nov 5 17:00:50 2025 GMT Subject: CN=53cf772ea08f4db0017dced50d04e7bed83e1eb6 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:bd:fd:25:20:03:ba:12:2b:df:40:cc:73:ab:02: fc:b6:53:6d:a4:27:1e:1d:bd:63:3a:98:3f:80:9a: 36:85:85:c1:37:71:c4:bb:69:92:00:0f:4f:b4:7c: 74:d6:38:2b:04:a9:92:cf:61:6a:b5:3b:e8:74:c5: 4c:ae:77:53:9c:fb:54:5c:b2:52:10:4d:c8:1a:42: f8:a1:69:81:8a:73:51:b8:7c:5f:92:91:bb:35:60: cb:9d:dd:87:49:41:20:46:7d:2b:e8:db:a8:73:71: 2b:3e:05:9d:05:76:12:bd:74:34:42:f0:e2:fe:4a: 3c:91:9a:cf:c8:e2:09:2e:86:9c:0c:da:be:23:76: fc:bf:b9:74:9f:4a:e0:d8:bf:5e:04:87:3f:64:b1: 32:c4:b6:a4:54:08:93:5c:42:72:de:01:80:b5:2c: 25:8d:af:cd:3e:a7:e2:b9:42:45:22:99:d8:e7:df: 4a:ef:f2:a6:68:06:a2:15:8c:91:0c:03:57:03:c7: cb:82:de:f3:a5:d3:6a:14:55:8a:12:a6:23:a6:8e: 7b:7a:a9:e7:75:71:be:4a:fd:74:55:10:13:27:45: 51:b3:12:47:84:c0:e0:a5:ea:22:93:5d:89:76:1f: 5e:5f:96:c4:7c:94:7e:2e:ac:97:b0:d1:fb:74:bd: 22:f1 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 53:CF:77:2E:A0:8F:4D:B0:01:7D:CE:D5:0D:04:E7:BE:D8:3E:1E:B6 X509v3 Authority Key Identifier: keyid:6C:D9:8C:2C:54:B0:CB:EA:13:4E:27:A9:81:CF:DD:E7:32:36:E0:55 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/bNmMLFSwy-oTTiepgc_d5zI24FU.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/e1/01638c-6cb9-4589-909b-d37df634a929/1/bNmMLFSwy-oTTiepgc_d5zI24FU.mft X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/e1/01638c-6cb9-4589-909b-d37df634a929/1/bNmMLFSwy-oTTiepgc_d5zI24FU.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 82:c3:66:9f:62:34:20:98:24:cb:09:03:c2:a6:da:8d:d5:7f: c5:69:ec:2b:c4:f9:45:ff:06:ec:6e:6f:71:20:27:92:b9:ec: 96:41:48:2a:50:d5:8a:53:db:22:4b:cc:c5:39:e3:2f:88:15: e3:b5:7e:35:e6:bb:ec:72:96:17:7c:9c:1f:d5:99:7a:d4:fa: 1f:5a:3a:da:05:f1:4c:3e:80:82:43:25:81:22:8d:6f:d4:7a: 4f:77:09:40:29:6b:2b:d0:39:d7:44:db:00:d5:5c:6e:c7:df: d4:fe:77:f0:b4:c9:c4:62:4f:83:2d:50:62:3b:86:e7:9c:1d: 4e:af:b5:cb:f3:de:ba:3d:6b:a7:4e:b5:37:55:ce:d0:cc:e0: 20:09:98:ca:68:24:ec:3b:f5:03:a3:0c:6b:1c:91:9c:0b:73: f8:54:03:3f:de:f4:63:96:ee:fb:4e:84:96:f1:cb:36:38:0d: 4f:3c:42:00:5e:76:aa:f4:88:9e:0a:7d:80:2f:26:b8:1c:98: 66:ea:a4:4f:39:75:f8:47:3c:55:1c:92:13:4a:a6:c2:b6:89: 1d:42:46:55:80:8c:a7:dc:bd:db:ef:ea:13:a4:5d:46:3a:2f: f9:87:9f:98:2a:7d:e0:f1:4d:09:de:91:60:cd:eb:74:73:06: 56:89:5e:09 -----BEGIN CERTIFICATE----- MIIFFjCCA/6gAwIBAgISAZpP0G3p3PrrwrbsC+8c+hbNMA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKDZjZDk4YzJjNTRiMGNiZWExMzRlMjdhOTgxY2ZkZGU3MzIz NmUwNTUwHhcNMjUxMTA0MTcwMDUwWhcNMjUxMTA1MTcwMDUwWjAzMTEwLwYDVQQD Eyg1M2NmNzcyZWEwOGY0ZGIwMDE3ZGNlZDUwZDA0ZTdiZWQ4M2UxZWI2MIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAvf0lIAO6EivfQMxzqwL8tlNtpCce Hb1jOpg/gJo2hYXBN3HEu2mSAA9PtHx01jgrBKmSz2FqtTvodMVMrndTnPtUXLJS EE3IGkL4oWmBinNRuHxfkpG7NWDLnd2HSUEgRn0r6Nuoc3ErPgWdBXYSvXQ0QvDi /ko8kZrPyOIJLoacDNq+I3b8v7l0n0rg2L9eBIc/ZLEyxLakVAiTXEJy3gGAtSwl ja/NPqfiuUJFIpnY599K7/KmaAaiFYyRDANXA8fLgt7zpdNqFFWKEqYjpo57eqnn dXG+Sv10VRATJ0VRsxJHhMDgpeoik12Jdh9eX5bEfJR+LqyXsNH7dL0i8QIDAQAB o4ICIjCCAh4wHQYDVR0OBBYEFFPPdy6gj02wAX3O1Q0E577YPh62MB8GA1UdIwQY MBaAFGzZjCxUsMvqE04nqYHP3ecyNuBVMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvYk5tTUxGU3d5LW9UVGllcGdjX2Q1ekkyNEZVLmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC9lMS8wMTYzOGMtNmNiOS00NTg5LTkwOWIt ZDM3ZGY2MzRhOTI5LzEvYk5tTUxGU3d5LW9UVGllcGdjX2Q1ekkyNEZVLm1mdDCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC9lMS8wMTYzOGMtNmNiOS00NTg5LTkwOWItZDM3ZGY2MzRhOTI5 LzEvYk5tTUxGU3d5LW9UVGllcGdjX2Q1ekkyNEZVLmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAgsNmn2I0 IJgkywkDwqbajdV/xWnsK8T5Rf8G7G5vcSAnkrnslkFIKlDVilPbIkvMxTnjL4gV 47V+Nea77HKWF3ycH9WZetT6H1o62gXxTD6AgkMlgSKNb9R6T3cJQClrK9A510Tb ANVcbsff1P538LTJxGJPgy1QYjuG55wdTq+1y/Peuj1rp061N1XO0MzgIAmYymgk 7Dv1A6MMaxyRnAtz+FQDP970Y5bu+06ElvHLNjgNTzxCAF52qvSIngp9gC8muByY ZuqkTzl1+Ec8VRySE0qmwraJHUJGVYCMp9y92+/qE6RdRjov+YefmCp94PFNCd6R YM3rdHMGVoleCQ== -----END CERTIFICATE-----Generated at Tue Nov 4 18:59:21 2025 by rpki-client