$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/e9/129564-f1db-4dc5-8906-6fcdcd5ab660/1/D_gMvf4YNUo8_bov4HmqLrxY3NQ.mft File: D_gMvf4YNUo8_bov4HmqLrxY3NQ.mft (raw, json) Hash identifier: VuCQirVxuQgjQWMp+GZL9L8vwnOCdInOYIgUDG8fEms= Subject key identifier: 30:8B:A5:A1:67:94:3F:17:63:4C:C6:0F:58:B4:1D:1B:5A:87:4B:23 Authority key identifier: 0F:F8:0C:BD:FE:18:35:4A:3C:FD:BA:2F:E0:79:AA:2E:BC:58:DC:D4 Certificate issuer: /CN=0ff80cbdfe18354a3cfdba2fe079aa2ebc58dcd4 Certificate serial: 019A4E4FD8425A1FE36D6D18A4D9694FF892 Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/D_gMvf4YNUo8_bov4HmqLrxY3NQ.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/e9/129564-f1db-4dc5-8906-6fcdcd5ab660/1/D_gMvf4YNUo8_bov4HmqLrxY3NQ.mft Manifest number: 1215 Signing time: Tue 04 Nov 2025 10:00:46 +0000 Manifest this update: Tue 04 Nov 2025 10:00:46 +0000 Manifest next update: Wed 05 Nov 2025 10:00:46 +0000 Files and hashes: 1: 36cneJws6HIb-_f2mS0l66nxLX4.roa (hash: cv3+x1XjkIvksuAO0LUX+L5FwL88LDLqWblnVZ+rq3Q=) 2: 8AuUB3FxiHV1blKo-b6xY84eohk.roa (hash: Kg20ZKTXvW1uV16aDD+SNuojir6sQqoC1ASnSIoi3uI=) 3: DEkBy5NY_LBNS4NnY8NdFK8rzcA.roa (hash: +sPTotcuWF+CjCR1a5iOtYDxd/TTy8d8sIEt72jDjC4=) 4: D_gMvf4YNUo8_bov4HmqLrxY3NQ.crl (hash: XI7o/cOQSA39P/DBlecsDBMi+/Uh2tJ1Wf2VlrWj4L4=) 5: E4H11vqlDsWfsKfFnRaByGFpFjE.roa (hash: uk2Eyw6ijxdod6j6CVfKRX8Y6AcwVXdvoKqS9Zsbg6E=) 6: MKy6XWAYP3zxh7zwKNcWOiDPR-k.roa (hash: R+XM0slVwo6Gs1r7U5p3g+xfmCVjwikkwCXqqmpC4RI=) 7: P1pvZ_QpHLCNhor-GrDuuGuoxWU.roa (hash: j2Q3VKziFV5MgEQnuqrclJc+B8ndKOKWRmqLDbcpuQk=) 8: TBO-3J5fI4kjR6nBhhGm9Q7Fxxs.roa (hash: GxuPpCFAskC5A0RoCelobXY9HbueDhOq2tEj0W9aVGs=) 9: XDcWQfbkwvZ4pO52-Rl-lOrB_iw.roa (hash: ht+KVJK83F1lQo8Wp6/sNr0N7S9QYHVd5SEP7bnL0Q4=) 10: a6cF0bpNofa5GGQr8R_yHJMuyZE.roa (hash: 7SgWQ3Dd7u9XNC6t7dlaAp9yEbpmftU4pNC1IHy1Zwg=) 11: fegZDjvnxgRurYo7N2dE56doPrs.roa (hash: G1Sc4jTNIBp0OhDx/ZdY4eKnulZIfcXzqIWbYkym44I=) 12: hML_DL0g6kYSYUFuPdJQKEuONUc.roa (hash: fGTc+S+9s9I7++Z7ndtheAsl1CfEIZzcmOsVDizuoCI=) 13: hNPAJBJQcRtE-SJjyoGEKsljmXA.roa (hash: cxILOvyPqMN2Kz+W/9LGBBCgK1NOKrZ4exJ0ZNKhTeQ=) 14: pDnsD5Q1hTzMW2k6uZ4MVh9ZizU.roa (hash: Ug4pqyVy1hepE30KQdlNpPdKYvaVRsEaEW6Bq45BqsI=) 15: rY4Fp-Dk7WkrCbqk7rdEiiNEmj4.roa (hash: rnMK9FKk4H5lXqqOHDb/rM0tbc6UoAnWXexKMf+rh/I=) 16: svu4gQ0pPgVBKQU6339vQZbXEAQ.roa (hash: RAHfZT/d13ig7RU8lQNXL5nHpSOa8CZeRzLwR9xpJH8=) Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/e9/129564-f1db-4dc5-8906-6fcdcd5ab660/1/D_gMvf4YNUo8_bov4HmqLrxY3NQ.crl rsync://rpki.ripe.net/repository/DEFAULT/e9/129564-f1db-4dc5-8906-6fcdcd5ab660/1/D_gMvf4YNUo8_bov4HmqLrxY3NQ.mft rsync://rpki.ripe.net/repository/DEFAULT/D_gMvf4YNUo8_bov4HmqLrxY3NQ.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Wed 05 Nov 2025 09:00:03 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9a:4e:4f:d8:42:5a:1f:e3:6d:6d:18:a4:d9:69:4f:f8:92 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=0ff80cbdfe18354a3cfdba2fe079aa2ebc58dcd4 Validity Not Before: Nov 4 10:00:46 2025 GMT Not After : Nov 5 10:00:46 2025 GMT Subject: CN=308ba5a167943f17634cc60f58b41d1b5a874b23 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:dc:7f:aa:9a:07:5c:b9:5c:ee:08:4c:be:e9:07: 41:35:47:b4:56:a4:71:45:a0:8e:a9:d5:da:d1:f8: 92:5e:8e:e0:91:1b:a2:0e:a7:9e:33:b5:54:8f:7c: 40:80:ed:29:c4:63:ba:ab:77:73:64:c0:58:eb:20: 93:77:b1:ee:3d:8a:39:de:5c:1e:6c:71:f3:7c:e1: f1:f5:62:64:9e:9c:68:49:09:8b:a5:e5:93:48:88: b3:8f:c8:23:a8:89:c2:65:56:bd:a1:b7:8b:80:9f: 59:b3:56:61:aa:5a:9e:dc:dc:ba:68:6e:b1:82:23: 08:4c:c0:d1:be:60:64:ba:2d:cf:bc:61:ce:45:83: fd:f5:cf:bd:26:ea:46:13:a0:15:a7:c3:45:c1:11: b8:71:85:17:de:81:95:be:67:ce:2c:b3:da:6a:e0: 0f:c9:ad:9e:c6:78:14:35:a8:58:5b:9a:f7:a5:1b: 24:44:2a:bb:10:86:a9:7c:5b:7f:ad:e5:19:b1:91: 37:12:eb:ae:21:cc:af:eb:e8:c2:9e:f1:86:22:97: 6d:95:96:5f:c5:57:5e:65:f5:77:f4:66:70:5a:ce: 11:9b:a8:d1:68:38:b4:ff:45:63:28:bb:fc:c1:77: b6:de:3d:ff:33:be:07:f6:9f:24:56:96:51:21:84: f1:ff Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 30:8B:A5:A1:67:94:3F:17:63:4C:C6:0F:58:B4:1D:1B:5A:87:4B:23 X509v3 Authority Key Identifier: keyid:0F:F8:0C:BD:FE:18:35:4A:3C:FD:BA:2F:E0:79:AA:2E:BC:58:DC:D4 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/D_gMvf4YNUo8_bov4HmqLrxY3NQ.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/e9/129564-f1db-4dc5-8906-6fcdcd5ab660/1/D_gMvf4YNUo8_bov4HmqLrxY3NQ.mft X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/e9/129564-f1db-4dc5-8906-6fcdcd5ab660/1/D_gMvf4YNUo8_bov4HmqLrxY3NQ.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 8e:c1:dc:84:94:e4:16:09:36:8a:f6:ed:f2:b7:f3:94:7c:b3: 86:c4:60:b8:02:08:7a:9f:da:dd:3a:60:10:10:e0:43:02:d6: fe:0a:08:a6:03:86:19:8d:9f:d7:ad:1e:95:70:13:19:bf:c0: 0e:d2:94:18:bf:6b:9b:cf:14:2f:59:93:a9:2f:9c:f3:05:05: f8:3b:fd:cf:a9:16:e4:35:29:a5:d1:f4:0b:09:ff:4e:22:e1: 55:a2:9d:b4:01:8e:9f:a9:4b:8a:e7:cd:30:17:a3:3a:35:6b: b5:58:ba:33:51:9d:01:a5:3f:41:13:fc:c4:ed:0e:be:03:00: af:af:04:b8:c9:97:11:49:38:72:a5:34:c9:c9:2e:7a:2f:6d: 1d:9e:dc:8c:1f:45:96:2a:fc:26:db:11:d9:df:b3:c4:0f:d4: ac:07:7c:c4:04:da:5f:a1:d1:c1:62:7f:6d:8b:8b:6c:86:0a: 27:d9:85:cf:ae:f5:57:fd:7a:e1:40:f8:54:b4:c4:55:ef:03: 4e:94:80:5c:0b:52:b7:a4:74:70:86:e3:d2:ba:32:1b:90:4d: 15:dd:18:53:b3:e3:48:31:cb:b0:0e:37:22:14:c8:ae:d2:d5: 22:4b:61:cc:28:70:77:ef:32:22:d8:2b:fa:9c:c3:10:80:92: 5a:f0:5f:d9 -----BEGIN CERTIFICATE----- MIIFFjCCA/6gAwIBAgISAZpOT9hCWh/jbW0YpNlpT/iSMA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKDBmZjgwY2JkZmUxODM1NGEzY2ZkYmEyZmUwNzlhYTJlYmM1 OGRjZDQwHhcNMjUxMTA0MTAwMDQ2WhcNMjUxMTA1MTAwMDQ2WjAzMTEwLwYDVQQD EygzMDhiYTVhMTY3OTQzZjE3NjM0Y2M2MGY1OGI0MWQxYjVhODc0YjIzMIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEA3H+qmgdcuVzuCEy+6QdBNUe0VqRx RaCOqdXa0fiSXo7gkRuiDqeeM7VUj3xAgO0pxGO6q3dzZMBY6yCTd7HuPYo53lwe bHHzfOHx9WJknpxoSQmLpeWTSIizj8gjqInCZVa9obeLgJ9Zs1Zhqlqe3Ny6aG6x giMITMDRvmBkui3PvGHORYP99c+9JupGE6AVp8NFwRG4cYUX3oGVvmfOLLPaauAP ya2exngUNahYW5r3pRskRCq7EIapfFt/reUZsZE3EuuuIcyv6+jCnvGGIpdtlZZf xVdeZfV39GZwWs4Rm6jRaDi0/0VjKLv8wXe23j3/M74H9p8kVpZRIYTx/wIDAQAB o4ICIjCCAh4wHQYDVR0OBBYEFDCLpaFnlD8XY0zGD1i0HRtah0sjMB8GA1UdIwQY MBaAFA/4DL3+GDVKPP26L+B5qi68WNzUMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvRF9nTXZmNFlOVW84X2JvdjRIbXFMcnhZM05RLmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC9lOS8xMjk1NjQtZjFkYi00ZGM1LTg5MDYt NmZjZGNkNWFiNjYwLzEvRF9nTXZmNFlOVW84X2JvdjRIbXFMcnhZM05RLm1mdDCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC9lOS8xMjk1NjQtZjFkYi00ZGM1LTg5MDYtNmZjZGNkNWFiNjYw LzEvRF9nTXZmNFlOVW84X2JvdjRIbXFMcnhZM05RLmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAjsHchJTk Fgk2ivbt8rfzlHyzhsRguAIIep/a3TpgEBDgQwLW/goIpgOGGY2f160elXATGb/A DtKUGL9rm88UL1mTqS+c8wUF+Dv9z6kW5DUppdH0Cwn/TiLhVaKdtAGOn6lLiufN MBejOjVrtVi6M1GdAaU/QRP8xO0OvgMAr68EuMmXEUk4cqU0yckuei9tHZ7cjB9F lir8JtsR2d+zxA/UrAd8xATaX6HRwWJ/bYuLbIYKJ9mFz671V/164UD4VLTEVe8D TpSAXAtSt6R0cIbj0royG5BNFd0YU7PjSDHLsA43IhTIrtLVIkthzChwd+8yItgr +pzDEICSWvBf2Q== -----END CERTIFICATE-----Generated at Tue Nov 4 14:47:15 2025 by rpki-client