$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/e7/b41ab6-b9f3-4b4a-9b7b-1ed10954bd96/1/V1PAYpCjcZlNdXcxhoX1vEpTjUc.mft File: V1PAYpCjcZlNdXcxhoX1vEpTjUc.mft (raw, json) Hash identifier: zt7yoBnfaA70Zw7BiXj+5nyN8OHaC52fKone/mv/dOo= Subject key identifier: 9A:E2:67:AA:31:80:A6:E4:04:66:16:CF:6E:B6:AD:AD:F5:62:8E:76 Authority key identifier: 57:53:C0:62:90:A3:71:99:4D:75:77:31:86:85:F5:BC:4A:53:8D:47 Certificate issuer: /CN=5753c06290a371994d7577318685f5bc4a538d47 Certificate serial: 019A4EF54C79D15EC7C0293D724D7389208D Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/V1PAYpCjcZlNdXcxhoX1vEpTjUc.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/e7/b41ab6-b9f3-4b4a-9b7b-1ed10954bd96/1/V1PAYpCjcZlNdXcxhoX1vEpTjUc.mft Manifest number: 1302 Signing time: Tue 04 Nov 2025 13:01:29 +0000 Manifest this update: Tue 04 Nov 2025 13:01:29 +0000 Manifest next update: Wed 05 Nov 2025 13:01:29 +0000 Files and hashes: 1: 1-2ze8RFqsfXiBAT11ime5104BjY.roa (hash: 1G/91kNwXr6Euhuawe1vb8XkKyyCivckcaN+MUB7G0c=) 2: 5lDpUUbHXzya0fMquFYbFulqqVs.roa (hash: f1hht89a/wconxQu5KNK8QHufJfhYi0HFOvBnekJIq0=) 3: FHAcQ1hSwnBkPa_1eYwrasvDBAI.roa (hash: UEqpRdrSw3UNWb3wNwi2VW+eLR/IeGW0ScqzLsmeYpU=) 4: FeD_-2NSvz_oTh1LHrP44NqzWIo.roa (hash: M0rfgf8nLa/Z7WmSdsaO8N+Wk6yxPhPTCcsAwupLmJk=) 5: G0XtWDoXmf3g4WPOe4oJBWwD53c.roa (hash: ah5ed8JgyczAK0ktQp/XfJNbJde2PQoHxbYeBWCDQq0=) 6: HlClfikOJrfktj0svDKphR0_6Ic.roa (hash: g1qw7C3eBB8cA1eir2ZaMGGhWvD9jq2Y2uAjecDMYHM=) 7: LXaOacmSywqNlfh5CO5J1YXXGmI.roa (hash: jtQHK2Bwk3+TO9AZet3mFNI8IuZDJg2fZaIIhEkYoQM=) 8: OXCR5eZAjAKFe_5_WqZvsLDsIGw.roa (hash: +dX5GIlPaHoX8hOklKsClO3JcTsDNTNWJiq3yrlcruo=) 9: SVRVY-q0OPWhiL6mBd92R9L5Zm4.roa (hash: dI19F02QJ/eVSmcDcyQsUmklhiicL/qqyQKGyXmUBoc=) 10: V1PAYpCjcZlNdXcxhoX1vEpTjUc.crl (hash: iJ7/ZA5sRRaAANR/uC5p1+dE5eWdM9hCbZrsCYs0fJI=) 11: Xdc1GXsEPiQ6GE6eHjFDA0ZgS3w.roa (hash: OE+tVEQ0oQcFP5VxqAmEpxiSoF7RE792pp1YSKmB2O0=) 12: ctU4FIR-r7525NdQcQhV07S1InU.roa (hash: AU7Mc04mkVMs25EZU4CCsCrYPVp1VtWzfOi9wTwg8to=) 13: e2eD9qK2hYztM9wMgcHLi8AhZs8.roa (hash: tUPW+7fViLoXv6YzC5FAQqNxsVyrAjo9of3A+F1usKg=) 14: s6UOiaPwRDDgS4GdUQJjrNxDCkA.roa (hash: MfReyFTsbPeeVwKX4SeLCT5vdQejZ0/27SaFtWWlLKo=) 15: valOsPAluNa3RG5X659q6dsU_FA.roa (hash: fkBC+Rvf3Gv+oy6BC36LsnU6WeruMquhW06fi/seA5s=) Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/e7/b41ab6-b9f3-4b4a-9b7b-1ed10954bd96/1/V1PAYpCjcZlNdXcxhoX1vEpTjUc.crl rsync://rpki.ripe.net/repository/DEFAULT/e7/b41ab6-b9f3-4b4a-9b7b-1ed10954bd96/1/V1PAYpCjcZlNdXcxhoX1vEpTjUc.mft rsync://rpki.ripe.net/repository/DEFAULT/V1PAYpCjcZlNdXcxhoX1vEpTjUc.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Wed 05 Nov 2025 09:00:03 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9a:4e:f5:4c:79:d1:5e:c7:c0:29:3d:72:4d:73:89:20:8d Signature Algorithm: sha256WithRSAEncryption Issuer: CN=5753c06290a371994d7577318685f5bc4a538d47 Validity Not Before: Nov 4 13:01:29 2025 GMT Not After : Nov 5 13:01:29 2025 GMT Subject: CN=9ae267aa3180a6e4046616cf6eb6adadf5628e76 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:a2:e3:53:66:0f:0c:27:68:75:bf:ea:4f:c9:57: b3:5c:d8:17:b1:3b:a1:6e:a9:2b:37:a3:06:04:a7: 21:09:d7:bf:49:88:b9:c0:a2:00:50:04:f9:90:29: f4:5e:6e:b3:f8:0b:82:37:97:72:06:fe:61:c8:3b: 00:6e:dd:7c:2c:63:85:ff:c6:b1:eb:27:de:78:81: a7:ea:bb:d7:73:68:f9:1a:0b:4e:3e:d7:a5:99:b9: 69:90:d6:59:a7:61:a2:d3:ec:a0:a8:3e:51:78:f3: 47:88:97:94:86:4a:68:59:e4:75:30:31:9a:f4:70: 1b:42:d8:cf:6c:58:f0:f3:a2:00:d3:69:78:b1:bd: cf:72:5c:04:9d:cf:d1:08:f8:ad:4d:9f:89:49:1c: 87:6d:46:cc:d5:33:32:55:8d:da:15:93:b3:51:1b: 0b:37:92:fe:b7:c3:d7:81:d9:56:73:89:fd:92:a9: 14:15:6c:97:e9:c3:21:f7:6a:39:94:e2:9d:1b:24: 91:b6:b6:73:21:7a:8b:9b:86:2e:3e:5c:3c:90:02: a6:1e:13:83:6d:48:60:50:10:b7:b1:eb:66:3a:b9: 40:7c:18:49:3c:7a:25:a2:c5:65:0a:55:3c:71:1d: 62:0b:50:31:14:50:f8:9f:b1:6e:a9:99:6f:33:c2: e9:31 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 9A:E2:67:AA:31:80:A6:E4:04:66:16:CF:6E:B6:AD:AD:F5:62:8E:76 X509v3 Authority Key Identifier: keyid:57:53:C0:62:90:A3:71:99:4D:75:77:31:86:85:F5:BC:4A:53:8D:47 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/V1PAYpCjcZlNdXcxhoX1vEpTjUc.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/e7/b41ab6-b9f3-4b4a-9b7b-1ed10954bd96/1/V1PAYpCjcZlNdXcxhoX1vEpTjUc.mft X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/e7/b41ab6-b9f3-4b4a-9b7b-1ed10954bd96/1/V1PAYpCjcZlNdXcxhoX1vEpTjUc.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 72:6b:5d:f1:0c:53:4e:e1:18:6a:f9:a0:ac:c8:b1:d3:bd:4b: be:15:fa:c5:da:f3:38:a0:a6:ec:15:99:e7:78:26:7c:66:bc: ff:3c:19:54:59:98:e6:96:de:7b:9f:62:59:f7:44:8c:85:1a: 17:46:39:32:ef:95:d9:03:33:60:f5:bb:0e:8f:a1:d1:b4:09: f9:bb:e6:cb:90:52:55:fa:e7:82:a3:2d:21:71:6d:6f:e8:c5: b4:e4:33:e7:32:0b:b4:84:6c:41:fa:6f:e0:52:78:bf:63:ec: a5:7f:de:49:47:16:86:e0:e9:3d:5a:ed:41:f8:95:67:1e:ac: c4:05:7e:4d:5e:50:2c:4c:50:43:9e:0e:e1:6e:b4:c2:26:f5: e1:6c:68:2e:fe:70:0b:06:8b:dc:cb:2a:d1:a8:ed:4e:6f:4f: 53:ad:f0:f2:6f:14:dc:18:db:d4:fd:07:9a:1e:58:6a:93:52: 3a:fe:52:09:31:b2:ff:09:1f:a4:ba:06:a0:2b:95:ac:08:1f: 9f:36:be:28:84:a5:ad:1a:aa:e7:11:76:c9:4e:a3:2e:01:7a: 6a:77:1a:e4:4d:b0:52:ba:32:f8:9f:b2:b4:5c:76:f9:c9:80: d9:0d:8d:79:d4:1f:a7:0e:ba:46:f6:5e:b6:56:e2:e9:f6:45: 29:27:60:df -----BEGIN CERTIFICATE----- MIIFFjCCA/6gAwIBAgISAZpO9Ux50V7HwCk9ck1ziSCNMA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKDU3NTNjMDYyOTBhMzcxOTk0ZDc1NzczMTg2ODVmNWJjNGE1 MzhkNDcwHhcNMjUxMTA0MTMwMTI5WhcNMjUxMTA1MTMwMTI5WjAzMTEwLwYDVQQD Eyg5YWUyNjdhYTMxODBhNmU0MDQ2NjE2Y2Y2ZWI2YWRhZGY1NjI4ZTc2MIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAouNTZg8MJ2h1v+pPyVezXNgXsTuh bqkrN6MGBKchCde/SYi5wKIAUAT5kCn0Xm6z+AuCN5dyBv5hyDsAbt18LGOF/8ax 6yfeeIGn6rvXc2j5GgtOPtelmblpkNZZp2Gi0+ygqD5RePNHiJeUhkpoWeR1MDGa 9HAbQtjPbFjw86IA02l4sb3PclwEnc/RCPitTZ+JSRyHbUbM1TMyVY3aFZOzURsL N5L+t8PXgdlWc4n9kqkUFWyX6cMh92o5lOKdGySRtrZzIXqLm4YuPlw8kAKmHhOD bUhgUBC3setmOrlAfBhJPHolosVlClU8cR1iC1AxFFD4n7FuqZlvM8LpMQIDAQAB o4ICIjCCAh4wHQYDVR0OBBYEFJriZ6oxgKbkBGYWz262ra31Yo52MB8GA1UdIwQY MBaAFFdTwGKQo3GZTXV3MYaF9bxKU41HMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvVjFQQVlwQ2pjWmxOZFhjeGhvWDF2RXBUalVjLmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC9lNy9iNDFhYjYtYjlmMy00YjRhLTliN2It MWVkMTA5NTRiZDk2LzEvVjFQQVlwQ2pjWmxOZFhjeGhvWDF2RXBUalVjLm1mdDCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC9lNy9iNDFhYjYtYjlmMy00YjRhLTliN2ItMWVkMTA5NTRiZDk2 LzEvVjFQQVlwQ2pjWmxOZFhjeGhvWDF2RXBUalVjLmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAcmtd8QxT TuEYavmgrMix071LvhX6xdrzOKCm7BWZ53gmfGa8/zwZVFmY5pbee59iWfdEjIUa F0Y5Mu+V2QMzYPW7Do+h0bQJ+bvmy5BSVfrngqMtIXFtb+jFtOQz5zILtIRsQfpv 4FJ4v2PspX/eSUcWhuDpPVrtQfiVZx6sxAV+TV5QLExQQ54O4W60wib14WxoLv5w CwaL3Msq0ajtTm9PU63w8m8U3Bjb1P0Hmh5YapNSOv5SCTGy/wkfpLoGoCuVrAgf nza+KISlrRqq5xF2yU6jLgF6anca5E2wUroy+J+ytFx2+cmA2Q2NedQfpw66RvZe tlbi6fZFKSdg3w== -----END CERTIFICATE-----Generated at Tue Nov 4 14:28:20 2025 by rpki-client