$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/e1/0f9f02-c2ad-4ec8-b4d5-dfbfa3fcf021/1/5L6O_sH7A9ivl5rxy6E6CEWnsLo.mft File: 5L6O_sH7A9ivl5rxy6E6CEWnsLo.mft (raw, json) Hash identifier: M1MRPd/9hxXD9Yt83sB4gE9IC9Aoip2QHfrE/17CC2s= Subject key identifier: 22:B6:F7:D9:8B:59:07:FA:29:44:57:62:41:DB:B5:AC:AD:27:17:BE Authority key identifier: E4:BE:8E:FE:C1:FB:03:D8:AF:97:9A:F1:CB:A1:3A:08:45:A7:B0:BA Certificate issuer: /CN=e4be8efec1fb03d8af979af1cba13a0845a7b0ba Certificate serial: 019A4EF4A66174727A6BE3D9F2D27172B1C2 Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/5L6O_sH7A9ivl5rxy6E6CEWnsLo.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/e1/0f9f02-c2ad-4ec8-b4d5-dfbfa3fcf021/1/5L6O_sH7A9ivl5rxy6E6CEWnsLo.mft Manifest number: 0C0E Signing time: Tue 04 Nov 2025 13:00:47 +0000 Manifest this update: Tue 04 Nov 2025 13:00:47 +0000 Manifest next update: Wed 05 Nov 2025 13:00:47 +0000 Files and hashes: 1: 2m_CYVmLsPzF7bcN6vIid84YZD8.roa (hash: LBmz6BkcC+hYAgg9NpyTpTiVYvW2FI/a+Z33OiNH3bM=) 2: 4nVbm_9mW8-MAn0I_kGjdBfxhVw.roa (hash: pTL9FLQm2ArdSOx4IvTJl5dYC4wcCTYCswuw3GEGHMQ=) 3: 5L6O_sH7A9ivl5rxy6E6CEWnsLo.crl (hash: xL9Lot5EBz3YxyiSEiEDAa94Wf63PXMjtxICL4GXpcU=) 4: ASUGNfdEr-zmHuBMKbmczWEEyX0.roa (hash: XbBf6Nfds25faGeda9A9EZrA0jUpRsOTRIO73TfrGdU=) 5: D_RGKNjU3HO1804H_N4lL39f8xU.roa (hash: lQxsMyLpAGFJHo/y+xtaq8v1/ZEVry9ym0LdrZC/Bgk=) 6: Di4BCmfwCebJmpiiwQVl8kD1SGY.roa (hash: YROnCwrXQNQ5Na/T+Qstm6PeSLYo1KpF7+7yHOQYHZY=) 7: IpmNqXNW_slvomPPNDBgUsOEzfM.roa (hash: Pw8rvzKx3ysNgK3+6i7f6vpgrH3WD3WqD3kHoDoxu9U=) 8: IrnZpWugwiVaDWE0Y8y2HTk6myM.roa (hash: hz4dzGEJlp9nAI/PksWqX4be/cNB9cFXoUk0RTppUW4=) 9: UPL7qImi1Ys3kJpNeUneyjua3iE.roa (hash: yEbc7GI9w/HHKG7S49YH0IbZWjyzBWFPN0Ij4so55ao=) 10: Wqi1dLZsHvoMXUpSlZaZNHPgS_4.roa (hash: uMbe0TM0fIuYtnHf63Llp9sJ+CZVXJ/tOzlQU2AOjts=) 11: gqYJ1QlxZp2sfbvxF5yVPiDZ3Dk.roa (hash: +mkHl1F4HLXN9PfWQktZtYiROfsgXfptEmlNuP4F0GM=) 12: hrJ9G8LdPfpuv4HEnlrj0UM1FZI.roa (hash: Ap/wGOk300z33ESWLkwykljx6YcmZDQ+kuaPYGOBuOE=) 13: ip51KpcMdfOcRWLVf2HbT1-y1Tk.roa (hash: w96a29aqdZpAZsW1TalxljppYBFpY8XCQQF21I+O+bg=) 14: qOKY-IzakK8b3r-fGGAM7SuFUFM.roa (hash: 0xmS3lTVgR47MEU89O0ODLmZ+nEhlRcq1hkGVTaLD7U=) 15: u_PvNoZGGKwKo1fIPAvA4pNGOWE.roa (hash: 7nleymXLPmClcPELIrjirAmjx3u5krkfwTmE5v3abBQ=) Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/e1/0f9f02-c2ad-4ec8-b4d5-dfbfa3fcf021/1/5L6O_sH7A9ivl5rxy6E6CEWnsLo.crl rsync://rpki.ripe.net/repository/DEFAULT/e1/0f9f02-c2ad-4ec8-b4d5-dfbfa3fcf021/1/5L6O_sH7A9ivl5rxy6E6CEWnsLo.mft rsync://rpki.ripe.net/repository/DEFAULT/5L6O_sH7A9ivl5rxy6E6CEWnsLo.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Wed 05 Nov 2025 09:00:03 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9a:4e:f4:a6:61:74:72:7a:6b:e3:d9:f2:d2:71:72:b1:c2 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=e4be8efec1fb03d8af979af1cba13a0845a7b0ba Validity Not Before: Nov 4 13:00:47 2025 GMT Not After : Nov 5 13:00:47 2025 GMT Subject: CN=22b6f7d98b5907fa2944576241dbb5acad2717be Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:c9:2a:5f:3e:d5:8d:af:72:18:37:02:89:d9:f5: 6b:3b:9d:b6:d0:14:b1:1f:25:54:ef:56:86:fd:63: e1:6a:7e:9a:72:74:d0:aa:32:64:f9:a1:bd:46:6e: 23:1f:8e:7a:c4:5b:ae:b1:1f:e3:e6:03:b4:83:23: c6:ee:ef:d1:36:fe:76:54:58:33:3d:59:3e:8d:04: 0d:35:43:d0:c5:ff:92:15:e2:6a:f2:87:60:30:f8: a7:22:6b:39:3c:c1:97:7a:dd:c1:9d:0c:a1:d8:63: f4:5e:03:d0:97:30:dc:e2:95:ec:50:e5:46:41:37: fe:fc:76:d9:62:ea:77:f5:04:84:db:68:5d:59:81: 23:89:26:d5:58:9a:11:2f:ba:1e:7a:c5:00:6b:58: fd:16:5d:c5:bb:a6:f1:2a:a5:55:ad:30:65:c9:df: fb:f8:40:b6:17:41:9a:be:2f:41:e2:5b:1c:6a:1f: 36:f6:2d:58:8e:8b:ce:f3:23:fb:5f:ac:6b:2f:f5: cf:56:c7:d5:4c:90:e1:c7:a0:fd:3a:2a:97:b8:71: e0:6f:a7:85:d1:2d:4a:6e:b1:5e:9f:5d:87:2c:5b: b6:42:a4:84:6f:26:f9:60:75:6a:51:64:c3:3c:a5: 3b:8e:a4:f8:15:b5:5b:5a:e3:0c:c4:e5:f0:24:37: d0:d5 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 22:B6:F7:D9:8B:59:07:FA:29:44:57:62:41:DB:B5:AC:AD:27:17:BE X509v3 Authority Key Identifier: keyid:E4:BE:8E:FE:C1:FB:03:D8:AF:97:9A:F1:CB:A1:3A:08:45:A7:B0:BA X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/5L6O_sH7A9ivl5rxy6E6CEWnsLo.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/e1/0f9f02-c2ad-4ec8-b4d5-dfbfa3fcf021/1/5L6O_sH7A9ivl5rxy6E6CEWnsLo.mft X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/e1/0f9f02-c2ad-4ec8-b4d5-dfbfa3fcf021/1/5L6O_sH7A9ivl5rxy6E6CEWnsLo.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 72:4d:1d:cf:d8:87:b8:cf:31:c1:e3:7a:1c:45:1b:35:0b:dc: 8e:6c:fa:10:d9:01:a0:d3:0f:41:d7:f6:dc:1d:bd:a1:1e:61: db:3a:43:1e:58:c0:9b:01:5d:d0:00:1b:0a:8a:35:1e:2e:0e: 7c:e9:54:66:83:37:79:e1:0b:63:30:0a:74:43:27:38:2d:22: 4f:c8:15:a1:da:44:5b:7d:8e:dd:28:09:60:b7:81:83:80:92: fb:69:1e:27:e4:24:6d:b4:63:49:68:38:d0:2b:6e:c1:26:6a: df:0a:a9:30:77:cb:a3:d3:8a:24:90:54:78:6c:2f:42:fd:3e: 20:ca:29:94:74:5a:88:dd:30:74:da:af:f4:1d:b9:c6:99:57: f3:b8:c0:8b:52:ca:83:ff:7a:d0:60:84:2c:0b:54:ea:05:97: 9b:cf:2c:88:58:cc:03:9f:ea:7c:af:43:bd:2e:08:04:84:d9: 0e:f1:29:6f:2c:9b:20:03:c8:98:d9:1d:d3:7b:e9:70:02:19: c9:40:69:7e:3a:89:7b:6a:e4:63:65:68:78:0a:db:8a:66:25: 33:99:72:21:f0:68:70:62:f6:f4:f4:90:24:8b:b6:fb:27:be: 98:b6:3b:5c:8a:ba:ce:cd:35:00:d9:06:4c:a3:be:7c:be:7d: 85:34:9a:1c -----BEGIN CERTIFICATE----- MIIFFjCCA/6gAwIBAgISAZpO9KZhdHJ6a+PZ8tJxcrHCMA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKGU0YmU4ZWZlYzFmYjAzZDhhZjk3OWFmMWNiYTEzYTA4NDVh N2IwYmEwHhcNMjUxMTA0MTMwMDQ3WhcNMjUxMTA1MTMwMDQ3WjAzMTEwLwYDVQQD EygyMmI2ZjdkOThiNTkwN2ZhMjk0NDU3NjI0MWRiYjVhY2FkMjcxN2JlMIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAySpfPtWNr3IYNwKJ2fVrO5220BSx HyVU71aG/WPhan6acnTQqjJk+aG9Rm4jH456xFuusR/j5gO0gyPG7u/RNv52VFgz PVk+jQQNNUPQxf+SFeJq8odgMPinIms5PMGXet3BnQyh2GP0XgPQlzDc4pXsUOVG QTf+/HbZYup39QSE22hdWYEjiSbVWJoRL7oeesUAa1j9Fl3Fu6bxKqVVrTBlyd/7 +EC2F0Gavi9B4lscah829i1YjovO8yP7X6xrL/XPVsfVTJDhx6D9OiqXuHHgb6eF 0S1KbrFen12HLFu2QqSEbyb5YHVqUWTDPKU7jqT4FbVbWuMMxOXwJDfQ1QIDAQAB o4ICIjCCAh4wHQYDVR0OBBYEFCK299mLWQf6KURXYkHbtaytJxe+MB8GA1UdIwQY MBaAFOS+jv7B+wPYr5ea8cuhOghFp7C6MA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvNUw2T19zSDdBOWl2bDVyeHk2RTZDRVduc0xvLmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC9lMS8wZjlmMDItYzJhZC00ZWM4LWI0ZDUt ZGZiZmEzZmNmMDIxLzEvNUw2T19zSDdBOWl2bDVyeHk2RTZDRVduc0xvLm1mdDCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC9lMS8wZjlmMDItYzJhZC00ZWM4LWI0ZDUtZGZiZmEzZmNmMDIx LzEvNUw2T19zSDdBOWl2bDVyeHk2RTZDRVduc0xvLmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAck0dz9iH uM8xweN6HEUbNQvcjmz6ENkBoNMPQdf23B29oR5h2zpDHljAmwFd0AAbCoo1Hi4O fOlUZoM3eeELYzAKdEMnOC0iT8gVodpEW32O3SgJYLeBg4CS+2keJ+QkbbRjSWg4 0CtuwSZq3wqpMHfLo9OKJJBUeGwvQv0+IMoplHRaiN0wdNqv9B25xplX87jAi1LK g/960GCELAtU6gWXm88siFjMA5/qfK9DvS4IBITZDvEpbyybIAPImNkd03vpcAIZ yUBpfjqJe2rkY2VoeArbimYlM5lyIfBocGL29PSQJIu2+ye+mLY7XIq6zs01ANkG TKO+fL59hTSaHA== -----END CERTIFICATE-----Generated at Tue Nov 4 14:40:47 2025 by rpki-client