$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/e2/ad3044-cdce-46cf-92c9-a954d053994a/1/1g9F98xLaR_UoxwfHAtPYF13pu8.mft File: 1g9F98xLaR_UoxwfHAtPYF13pu8.mft (raw, json) Hash identifier: UtD5ua4z2wynArefnxXfGT9Aia2MgzczJ88sy/z4+ck= Subject key identifier: 23:9E:43:02:61:73:5A:22:EE:D8:3B:9A:BB:72:05:74:B6:57:F2:54 Authority key identifier: D6:0F:45:F7:CC:4B:69:1F:D4:A3:1C:1F:1C:0B:4F:60:5D:77:A6:EF Certificate issuer: /CN=d60f45f7cc4b691fd4a31c1f1c0b4f605d77a6ef Certificate serial: 019A50750C1B6FCF534E23903741383557BB Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/1g9F98xLaR_UoxwfHAtPYF13pu8.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/e2/ad3044-cdce-46cf-92c9-a954d053994a/1/1g9F98xLaR_UoxwfHAtPYF13pu8.mft Manifest number: 1717 Signing time: Tue 04 Nov 2025 20:00:39 +0000 Manifest this update: Tue 04 Nov 2025 20:00:39 +0000 Manifest next update: Wed 05 Nov 2025 20:00:39 +0000 Files and hashes: 1: 1g9F98xLaR_UoxwfHAtPYF13pu8.crl (hash: gjJDrnLBxR94gUNTlgnrKUe81U9qJMvoKb1z9Wp1ncI=) 2: GMAT5cnP7VsDriW3_zL3dmojRH8.roa (hash: 9OZgqMWwoj0IlbvwNkLekurnPx7RT1aRlKGSPHOL6N4=) 3: IoE67Ac0pXcZcF9gBBC8VKka1vE.roa (hash: kt4XWZcgrYkLHsaAC2c2z5iyqyhmqC0zJwGvhSrnQ3E=) 4: MnG_2GzorHPsXNp5Vum7-rUjReY.roa (hash: D3z8cv+XlClqN6b2gc/ybPBfC33Ewbb6orbavaJ/jxk=) 5: PPMANDrLvF7lVgznicSOoAT3-3U.roa (hash: goEhx/poAjkzaQRi2RGACZSEuEQ6nJJ0p5PoSp7o6bo=) 6: b5u0PP2LUmpbpNJ4qAdIl3s9IjI.roa (hash: 4ZbWUTDO0hiozFSxacFGW2XCjTl1RPjd3yDPIUYji9M=) 7: jfxb2BR-CQiCSpU8DpDydbDz1b0.roa (hash: fObbuEbq3/zFmHWpgeQlp5JFopCYl+4GEGdq5exW77c=) 8: rrmPFSxVt5xEtowDvlnYGvxrH3s.roa (hash: mhHuydqllyBkMxNXx9HLabM7W+Fte6mEhiiQe0n8fRA=) 9: th1p5jE1fl21GfKXyCflURpVpo0.roa (hash: w4pXoPCT9slYbdDvFiyPewBrsldI3f9m6umM8Wv0SkE=) 10: viBgIC4abJYY7C__L2VefsiYSYI.roa (hash: r+Hi34v0Qt4A/ODVfo4uFHb77CXM38aMXnF2F0o4IcY=) 11: xNr5I0Wokl-j2aBAEkjZmpNRVng.roa (hash: epmYMuuR7FlxzNy/fvLKPn2AzgVlFDZhQf7tXXleECM=) Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/e2/ad3044-cdce-46cf-92c9-a954d053994a/1/1g9F98xLaR_UoxwfHAtPYF13pu8.crl rsync://rpki.ripe.net/repository/DEFAULT/e2/ad3044-cdce-46cf-92c9-a954d053994a/1/1g9F98xLaR_UoxwfHAtPYF13pu8.mft rsync://rpki.ripe.net/repository/DEFAULT/1g9F98xLaR_UoxwfHAtPYF13pu8.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Wed 05 Nov 2025 18:00:03 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9a:50:75:0c:1b:6f:cf:53:4e:23:90:37:41:38:35:57:bb Signature Algorithm: sha256WithRSAEncryption Issuer: CN=d60f45f7cc4b691fd4a31c1f1c0b4f605d77a6ef Validity Not Before: Nov 4 20:00:39 2025 GMT Not After : Nov 5 20:00:39 2025 GMT Subject: CN=239e430261735a22eed83b9abb720574b657f254 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:f9:73:1a:e7:70:f9:13:45:57:05:29:38:0e:eb: f4:11:7b:15:bd:b6:3a:4a:59:38:5d:46:9c:94:41: 6b:29:af:e5:ab:d3:5b:6f:c6:dc:18:14:19:f2:0f: 84:d1:b4:dc:5b:9a:e4:b6:5e:ab:ba:4f:91:f9:3d: 16:df:b0:84:fa:78:86:5b:07:6e:fe:00:a7:0f:c6: 22:b2:fc:40:c2:68:09:43:1b:5d:47:b1:fa:97:03: 8c:80:95:c7:15:0f:d7:e9:6f:29:ba:4e:4a:80:1f: 86:09:17:6f:53:07:fe:61:91:1d:d6:2c:83:72:76: 1e:c5:87:84:fb:b6:86:70:d9:ee:2a:9a:93:0d:62: 1d:f1:6c:e4:78:3c:99:71:df:b6:c2:e6:8d:50:8d: 37:6e:6d:24:09:ad:0f:8b:c7:e9:f0:a6:94:2e:f7: 3e:53:20:f4:52:5c:c6:42:42:a8:ae:b2:67:fc:a7: 3b:e7:79:5a:63:0b:9a:83:57:83:2a:9d:29:cc:23: f7:30:71:5d:38:ac:c2:60:53:85:51:14:51:2a:03: af:78:2b:1b:24:82:48:dd:6f:a7:1e:c8:69:7c:19: 90:f1:ae:49:64:a6:a2:d2:14:45:42:a8:80:f8:50: 14:ca:31:fe:e4:66:16:d8:de:22:f2:40:a7:b2:17: b8:af Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 23:9E:43:02:61:73:5A:22:EE:D8:3B:9A:BB:72:05:74:B6:57:F2:54 X509v3 Authority Key Identifier: keyid:D6:0F:45:F7:CC:4B:69:1F:D4:A3:1C:1F:1C:0B:4F:60:5D:77:A6:EF X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/1g9F98xLaR_UoxwfHAtPYF13pu8.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/e2/ad3044-cdce-46cf-92c9-a954d053994a/1/1g9F98xLaR_UoxwfHAtPYF13pu8.mft X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/e2/ad3044-cdce-46cf-92c9-a954d053994a/1/1g9F98xLaR_UoxwfHAtPYF13pu8.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 29:bd:e9:df:3e:16:c5:78:46:70:a4:5c:de:e0:55:a2:c2:25: 61:d8:df:d2:f2:fb:00:f7:69:cd:ea:0f:89:68:5d:e4:85:82: e2:a4:87:13:e3:6d:b7:00:b1:a9:41:6a:5e:4b:53:ff:e9:11: 1e:a5:04:a6:0a:9a:8f:1a:be:08:75:11:07:0a:da:0a:73:b2: a9:63:54:29:03:dd:9f:dc:33:5d:05:9d:a1:87:83:17:b8:5a: 5b:26:e9:34:43:18:24:ac:ec:c6:2c:46:1b:ef:88:20:c8:6f: e7:36:f7:1e:b4:c1:8d:5b:1c:b9:26:68:40:1b:b9:d7:94:ba: de:e7:7e:f2:64:26:1e:9c:01:fe:d2:36:97:38:b5:de:91:03: 58:55:15:c4:58:05:2a:31:1d:d4:f1:3d:51:72:e5:d7:26:f5: 07:1b:69:e8:73:9c:92:a3:d4:dd:ce:5f:a9:5e:58:e3:36:a3: 4c:76:51:e7:c8:61:92:f4:0d:91:7f:0e:5c:a4:7c:3a:62:e2: 3b:61:d6:7e:93:0b:ea:17:8d:ab:ee:2c:9c:82:e6:f3:90:af: 4a:17:d7:e3:f9:b1:ba:ee:4e:39:94:a5:10:00:dc:7e:17:bf: 7c:d5:c5:5c:67:4d:b8:0f:85:42:a9:37:37:cd:2e:39:15:9f: 84:12:3d:0d -----BEGIN CERTIFICATE----- MIIFFjCCA/6gAwIBAgISAZpQdQwbb89TTiOQN0E4NVe7MA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKGQ2MGY0NWY3Y2M0YjY5MWZkNGEzMWMxZjFjMGI0ZjYwNWQ3 N2E2ZWYwHhcNMjUxMTA0MjAwMDM5WhcNMjUxMTA1MjAwMDM5WjAzMTEwLwYDVQQD EygyMzllNDMwMjYxNzM1YTIyZWVkODNiOWFiYjcyMDU3NGI2NTdmMjU0MIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEA+XMa53D5E0VXBSk4Duv0EXsVvbY6 Slk4XUaclEFrKa/lq9Nbb8bcGBQZ8g+E0bTcW5rktl6ruk+R+T0W37CE+niGWwdu /gCnD8YisvxAwmgJQxtdR7H6lwOMgJXHFQ/X6W8puk5KgB+GCRdvUwf+YZEd1iyD cnYexYeE+7aGcNnuKpqTDWId8WzkeDyZcd+2wuaNUI03bm0kCa0Pi8fp8KaULvc+ UyD0UlzGQkKorrJn/Kc753laYwuag1eDKp0pzCP3MHFdOKzCYFOFURRRKgOveCsb JIJI3W+nHshpfBmQ8a5JZKai0hRFQqiA+FAUyjH+5GYW2N4i8kCnshe4rwIDAQAB o4ICIjCCAh4wHQYDVR0OBBYEFCOeQwJhc1oi7tg7mrtyBXS2V/JUMB8GA1UdIwQY MBaAFNYPRffMS2kf1KMcHxwLT2Bdd6bvMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvMWc5Rjk4eExhUl9Vb3h3ZkhBdFBZRjEzcHU4LmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC9lMi9hZDMwNDQtY2RjZS00NmNmLTkyYzkt YTk1NGQwNTM5OTRhLzEvMWc5Rjk4eExhUl9Vb3h3ZkhBdFBZRjEzcHU4Lm1mdDCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC9lMi9hZDMwNDQtY2RjZS00NmNmLTkyYzktYTk1NGQwNTM5OTRh LzEvMWc5Rjk4eExhUl9Vb3h3ZkhBdFBZRjEzcHU4LmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAKb3p3z4W xXhGcKRc3uBVosIlYdjf0vL7APdpzeoPiWhd5IWC4qSHE+NttwCxqUFqXktT/+kR HqUEpgqajxq+CHURBwraCnOyqWNUKQPdn9wzXQWdoYeDF7haWybpNEMYJKzsxixG G++IIMhv5zb3HrTBjVscuSZoQBu515S63ud+8mQmHpwB/tI2lzi13pEDWFUVxFgF KjEd1PE9UXLl1yb1Bxtp6HOckqPU3c5fqV5Y4zajTHZR58hhkvQNkX8OXKR8OmLi O2HWfpML6heNq+4snILm85CvShfX4/mxuu5OOZSlEADcfhe/fNXFXGdNuA+FQqk3 N80uORWfhBI9DQ== -----END CERTIFICATE-----Generated at Wed Nov 5 00:28:34 2025 by rpki-client