$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/e9/700fd3-c360-48ab-8a06-56129b7dc018/1/CK8JGFi7mWUXZDmcZWXfegg0260.mft File: CK8JGFi7mWUXZDmcZWXfegg0260.mft (raw, json) Hash identifier: zoiw8H+1BcrtJKBnUPeFW66KwWHuXJfVluBKc+gja04= Subject key identifier: 1B:5B:3E:55:89:6E:69:E8:AE:F5:02:08:47:F0:7B:A5:08:5A:73:6F Authority key identifier: 08:AF:09:18:58:BB:99:65:17:64:39:9C:65:65:DF:7A:08:34:DB:AD Certificate issuer: /CN=08af091858bb99651764399c6565df7a0834dbad Certificate serial: 019A4DE181F9D7B16538617EAA6E5499C558 Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/CK8JGFi7mWUXZDmcZWXfegg0260.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/e9/700fd3-c360-48ab-8a06-56129b7dc018/1/CK8JGFi7mWUXZDmcZWXfegg0260.mft Manifest number: 09D9 Signing time: Tue 04 Nov 2025 08:00:15 +0000 Manifest this update: Tue 04 Nov 2025 08:00:15 +0000 Manifest next update: Wed 05 Nov 2025 08:00:15 +0000 Files and hashes: 1: 1YffucAnrX0zrPGVUVBeyKH78tE.roa (hash: F+0MkZW1rwniUkgJEFMqZDUVPzIQlWc77ANUG11yVk0=) 2: CK8JGFi7mWUXZDmcZWXfegg0260.crl (hash: EZerUhiuPBndP4cmJ/Y3MkW14Otb3gk3witvbHiOK28=) 3: HHgp5sq5yc4_sgJa6AXu1wOFQNM.roa (hash: 7azvHrY82JhsqK3mxuoAki0dX0VXyY18Oolw0K+QPEw=) 4: QIYUcsbQNAYJ49MS9GSzg6HzMws.roa (hash: 25Ipjti12DAizEBm/x19xImh3kKTX0L8ySHToWXRDaw=) 5: b6ZEK46tBFQpFeGihP04dAsRVEs.roa (hash: QgioZFeGRbfakufTGnBIdfmvDS/FUhl+3OYWyWgTaL4=) 6: dntaOaxuIDGd8pI8wGTFAJRgyN0.roa (hash: ZmPkwqzAaYGLrLg5+RqVjoLEOwPFE1N2kmesXzCCUwI=) 7: pM8VKNSiqXyxvrYM2CF2U0Iw0pw.roa (hash: fs4sKC29dVzpn86XWfZbe24a1J4GrvjTCH4XsQbkw6c=) 8: qQrVFVU2zYEeKI_c1sPfgRBsdws.roa (hash: Q0Q6+jTPsyoLSIpvRXxP/rur4NZVUawp72Ly9Y4IL/A=) 9: tstTYn_D9Pn-4nRlBfI2UB_WSGg.roa (hash: ZjiObePgXbEPhVg4yY+Q8sRWmDFO/c82OdQ5TNgpPAM=) 10: zEb6SCNh9IA2ZcmgZWwsmTznbFk.roa (hash: tgHdlVCEN4GvD5zc3JRTYHWhACpqWoQ7O4VCFRbyik4=) Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/e9/700fd3-c360-48ab-8a06-56129b7dc018/1/CK8JGFi7mWUXZDmcZWXfegg0260.crl rsync://rpki.ripe.net/repository/DEFAULT/e9/700fd3-c360-48ab-8a06-56129b7dc018/1/CK8JGFi7mWUXZDmcZWXfegg0260.mft rsync://rpki.ripe.net/repository/DEFAULT/CK8JGFi7mWUXZDmcZWXfegg0260.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Wed 05 Nov 2025 08:00:15 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9a:4d:e1:81:f9:d7:b1:65:38:61:7e:aa:6e:54:99:c5:58 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=08af091858bb99651764399c6565df7a0834dbad Validity Not Before: Nov 4 08:00:15 2025 GMT Not After : Nov 5 08:00:15 2025 GMT Subject: CN=1b5b3e55896e69e8aef5020847f07ba5085a736f Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:a3:2b:f2:d4:ac:12:85:78:bc:58:df:c1:0b:29: 71:19:f0:9e:9f:19:4f:be:14:21:e7:27:17:57:88: 54:46:77:28:43:3a:2e:b2:0f:c0:00:2e:17:17:a7: 6c:45:ac:a9:85:88:5c:18:56:68:97:d6:79:d1:15: 57:a2:52:6f:98:0b:cb:19:2d:5a:8b:9f:b9:e1:7c: a1:04:41:91:cb:b9:80:26:02:64:34:1f:d3:b4:c5: 75:4c:38:f3:5e:7e:9d:64:91:3e:9c:05:ad:95:2f: 19:fe:4e:68:c2:d6:a1:d7:c7:73:c5:ca:c3:0f:c5: 2a:53:18:30:79:24:8a:71:8a:71:bd:37:6c:9f:a3: d8:5f:84:94:e6:dc:17:81:ce:e7:b4:f6:5a:9a:cd: 5e:b7:b9:b0:6a:7b:71:47:e1:f3:86:e4:4c:88:9e: 24:6b:d0:c9:e3:3b:e3:39:7e:0c:61:ec:83:96:30: 66:16:77:6a:16:49:cc:56:7b:4c:4a:9c:9a:c3:57: 65:38:5c:0a:16:ad:6a:f8:e8:c7:28:d5:9b:ff:2c: fa:2d:04:96:12:ff:45:03:4a:bf:ef:7a:bc:0d:39: b3:6c:c8:25:e9:e6:08:e4:44:a8:8d:31:05:85:fe: 9c:f3:95:61:66:98:18:ea:d0:0d:a9:ba:f4:73:f0: fb:fb Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 1B:5B:3E:55:89:6E:69:E8:AE:F5:02:08:47:F0:7B:A5:08:5A:73:6F X509v3 Authority Key Identifier: keyid:08:AF:09:18:58:BB:99:65:17:64:39:9C:65:65:DF:7A:08:34:DB:AD X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/CK8JGFi7mWUXZDmcZWXfegg0260.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/e9/700fd3-c360-48ab-8a06-56129b7dc018/1/CK8JGFi7mWUXZDmcZWXfegg0260.mft X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/e9/700fd3-c360-48ab-8a06-56129b7dc018/1/CK8JGFi7mWUXZDmcZWXfegg0260.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 35:1a:83:d1:4d:1c:a3:f5:f6:ec:06:cc:43:1d:96:df:44:48: 05:80:4e:eb:d3:6b:26:89:3e:da:d4:ab:3a:12:b7:47:ae:07: ea:2d:dc:74:78:01:6f:36:74:69:0d:8e:8a:0b:d8:26:ed:12: e1:25:d2:49:17:0b:de:80:93:32:b8:49:38:f5:06:91:74:98: db:7d:fc:e6:cb:57:28:71:27:57:9c:61:5f:cb:a0:35:36:d2: f5:c7:09:39:93:92:54:f2:b5:04:6a:8f:93:fd:9f:b5:ef:c6: a8:5a:f0:4c:f0:a5:8f:9f:18:9a:97:65:5f:ae:73:33:a0:0f: 23:1d:13:53:c2:e8:eb:a5:c6:90:af:37:e7:df:8d:59:f9:5f: ed:b6:8d:76:40:3a:60:8f:38:a1:46:bf:4e:95:79:77:43:49: 78:80:a7:2d:48:29:b2:1a:5d:b0:2e:dc:52:c6:74:c8:25:8c: ef:58:85:a7:01:a3:99:58:e0:e5:74:7a:ed:d7:b2:ac:3c:00: e8:00:c2:cd:af:92:48:7b:b1:19:50:fd:30:ac:54:5e:93:89: 42:b3:79:6e:64:92:16:35:d0:ff:fa:03:04:5b:aa:62:0f:5b: 32:27:ea:5e:64:f1:65:a0:63:e6:4d:1d:9c:0b:89:e3:7c:48: 5d:86:b3:15 -----BEGIN CERTIFICATE----- MIIFFjCCA/6gAwIBAgISAZpN4YH517FlOGF+qm5UmcVYMA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKDA4YWYwOTE4NThiYjk5NjUxNzY0Mzk5YzY1NjVkZjdhMDgz NGRiYWQwHhcNMjUxMTA0MDgwMDE1WhcNMjUxMTA1MDgwMDE1WjAzMTEwLwYDVQQD EygxYjViM2U1NTg5NmU2OWU4YWVmNTAyMDg0N2YwN2JhNTA4NWE3MzZmMIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAoyvy1KwShXi8WN/BCylxGfCenxlP vhQh5ycXV4hURncoQzousg/AAC4XF6dsRayphYhcGFZol9Z50RVXolJvmAvLGS1a i5+54XyhBEGRy7mAJgJkNB/TtMV1TDjzXn6dZJE+nAWtlS8Z/k5owtah18dzxcrD D8UqUxgweSSKcYpxvTdsn6PYX4SU5twXgc7ntPZams1et7mwantxR+HzhuRMiJ4k a9DJ4zvjOX4MYeyDljBmFndqFknMVntMSpyaw1dlOFwKFq1q+OjHKNWb/yz6LQSW Ev9FA0q/73q8DTmzbMgl6eYI5ESojTEFhf6c85VhZpgY6tANqbr0c/D7+wIDAQAB o4ICIjCCAh4wHQYDVR0OBBYEFBtbPlWJbmnorvUCCEfwe6UIWnNvMB8GA1UdIwQY MBaAFAivCRhYu5llF2Q5nGVl33oINNutMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvQ0s4SkdGaTdtV1VYWkRtY1pXWGZlZ2cwMjYwLmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC9lOS83MDBmZDMtYzM2MC00OGFiLThhMDYt NTYxMjliN2RjMDE4LzEvQ0s4SkdGaTdtV1VYWkRtY1pXWGZlZ2cwMjYwLm1mdDCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC9lOS83MDBmZDMtYzM2MC00OGFiLThhMDYtNTYxMjliN2RjMDE4 LzEvQ0s4SkdGaTdtV1VYWkRtY1pXWGZlZ2cwMjYwLmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEANRqD0U0c o/X27AbMQx2W30RIBYBO69NrJok+2tSrOhK3R64H6i3cdHgBbzZ0aQ2OigvYJu0S 4SXSSRcL3oCTMrhJOPUGkXSY23385stXKHEnV5xhX8ugNTbS9ccJOZOSVPK1BGqP k/2fte/GqFrwTPClj58YmpdlX65zM6APIx0TU8Lo66XGkK8359+NWflf7baNdkA6 YI84oUa/TpV5d0NJeICnLUgpshpdsC7cUsZ0yCWM71iFpwGjmVjg5XR67deyrDwA 6ADCza+SSHuxGVD9MKxUXpOJQrN5bmSSFjXQ//oDBFuqYg9bMifqXmTxZaBj5k0d nAuJ43xIXYazFQ== -----END CERTIFICATE-----Generated at Tue Nov 4 14:50:05 2025 by rpki-client