$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/eb/eee131-bb8c-4887-869b-6fe4d8fed160/1/h0v4BwzuQwXRo4npEPtRArvMGUE.mft File: h0v4BwzuQwXRo4npEPtRArvMGUE.mft (raw, json) Hash identifier: bAuhEmmBJD5B2IwuQ9uH5U59Ype/lYQec+UEH1K54eg= Subject key identifier: FC:11:37:3C:7B:BD:9A:D8:38:D9:F6:E7:88:7A:B1:C0:5B:03:3B:9E Authority key identifier: 87:4B:F8:07:0C:EE:43:05:D1:A3:89:E9:10:FB:51:02:BB:CC:19:41 Certificate issuer: /CN=874bf8070cee4305d1a389e910fb5102bbcc1941 Certificate serial: 019A4E7DDF4C58362905B5E15868E6599847 Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/h0v4BwzuQwXRo4npEPtRArvMGUE.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/eb/eee131-bb8c-4887-869b-6fe4d8fed160/1/h0v4BwzuQwXRo4npEPtRArvMGUE.mft Manifest number: 109C Signing time: Tue 04 Nov 2025 10:51:03 +0000 Manifest this update: Tue 04 Nov 2025 10:51:03 +0000 Manifest next update: Wed 05 Nov 2025 10:51:03 +0000 Files and hashes: 1: 0OKEEKGhx09vrOl7RYzWo3_wxgQ.roa (hash: bVmqeltj/mUgRyI/UDd3qXuGmM6ZNTUv7NHdJ5Ecm14=) 2: 0na0952KGc1H37d43sfmQKJLL00.roa (hash: corUkZBv/wXf0UWamqTqW2vCXAO7jctIMZRyOPGvfMc=) 3: 0nyuKNwkHdjNx58vqjYZWHgdk04.roa (hash: IJwrVyR1/3bxuDIXcjl0pqsWJYg81ab8+TgzpFzMgak=) 4: 50gtoTdhN9nO756-F4DP2ztZ9co.roa (hash: PoNPNVOdbr6ZQt1a8yzQyLs5SXzvoUcV/tLE/CbCBRA=) 5: 5WW9l5SbU7Xc5dzcJPOjnh-Ti1k.roa (hash: 2mR14FDC49JE9sKTdrARapGEl+mL/ykOGzFFu5F/fQM=) 6: GPQpLDssO6fTD1dGaJR05RFssa4.roa (hash: fp71tS0Tf+vhKpm3TY4BWXK7QdJ3Wg7DCBdUoQ7F5lg=) 7: J9C16lcx8PgyurfKUP9kuPkC8qk.roa (hash: FgZNOU0gXFenPcB6tHkqCpKLWPVhc0a8myZew2TEgCo=) 8: LumIDmC9KaTmO5EmvKNIDB_MJ6I.roa (hash: T1v6ldOgSnHm0ILMw4lezNqfO7yaUlFFJv2DMeUijuQ=) 9: VvF4Vi4FweHBoF6fwzvWsqkmd1g.roa (hash: 0iNsEJDKXYV/LCkoqqh7O11YVgjXO/OY9nxGaKpwAV8=) 10: Y_LhhtvD9SkoiLH5cA3Al64iqzs.roa (hash: 5oHa98DE0MxzalqndgOK6+knxe30QHngwLCfSE/9kh8=) 11: h0v4BwzuQwXRo4npEPtRArvMGUE.crl (hash: JEN1DTAPBduclqfCxlqxQKTdqnhimBrFcrfE4frKSRU=) 12: vevN_FQh1oLDczAFJHEKh5hEOxE.roa (hash: T6+n5imfk+pQSeT5Osi01ihP8snYGAynnv1xpTuEaoU=) 13: xER0K9I9xK8DBLC6KDcI75JR9LY.roa (hash: OqOr60qixfUKi1rv4+JZ/v9458y498eM0Dbfd2dxyz4=) Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/eb/eee131-bb8c-4887-869b-6fe4d8fed160/1/h0v4BwzuQwXRo4npEPtRArvMGUE.crl rsync://rpki.ripe.net/repository/DEFAULT/eb/eee131-bb8c-4887-869b-6fe4d8fed160/1/h0v4BwzuQwXRo4npEPtRArvMGUE.mft rsync://rpki.ripe.net/repository/DEFAULT/h0v4BwzuQwXRo4npEPtRArvMGUE.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Wed 05 Nov 2025 09:00:03 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9a:4e:7d:df:4c:58:36:29:05:b5:e1:58:68:e6:59:98:47 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=874bf8070cee4305d1a389e910fb5102bbcc1941 Validity Not Before: Nov 4 10:51:03 2025 GMT Not After : Nov 5 10:51:03 2025 GMT Subject: CN=fc11373c7bbd9ad838d9f6e7887ab1c05b033b9e Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:d8:f3:17:d1:15:af:94:72:9b:b7:73:e2:56:e1: 9c:e3:db:d4:45:fd:1c:f0:97:10:87:4a:99:06:72: 10:e1:ca:32:91:8d:0d:4b:45:7d:3a:c9:dc:1f:72: 70:bb:87:f4:fd:0f:9e:43:d2:4c:cd:48:0f:09:59: 44:80:e5:d3:0d:cb:af:28:d3:29:39:48:6c:d5:af: ce:d5:57:e2:dd:7b:20:ee:b5:bc:d0:48:7a:1d:c1: ff:40:cc:2d:d5:30:5d:a9:ca:14:c8:f2:06:2d:c6: 63:b0:66:78:d5:60:38:c5:6b:71:19:a1:2e:e5:9a: 75:c2:4d:55:b2:5c:65:d0:71:53:6e:21:61:07:01: d0:c4:98:78:5c:2a:96:d5:d8:ee:64:ee:5c:26:64: a2:1c:bb:6f:87:89:56:7e:e9:3e:a5:82:77:ce:ce: d6:63:01:ac:c6:cb:97:7c:d7:d8:17:f2:96:27:3d: 51:68:63:56:52:42:42:33:74:ae:c7:60:98:c5:72: ca:ff:b3:2a:6e:9a:98:c0:31:83:4d:99:a9:ef:7f: 31:0a:77:82:e7:25:f5:e1:08:e4:81:06:6d:61:46: 2b:a1:5d:b1:db:cd:e9:a4:1f:a7:75:3d:bc:1c:8c: 8f:6c:5f:4a:cd:27:bc:28:2b:b2:78:a0:da:7d:4b: 2e:1d Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: FC:11:37:3C:7B:BD:9A:D8:38:D9:F6:E7:88:7A:B1:C0:5B:03:3B:9E X509v3 Authority Key Identifier: keyid:87:4B:F8:07:0C:EE:43:05:D1:A3:89:E9:10:FB:51:02:BB:CC:19:41 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/h0v4BwzuQwXRo4npEPtRArvMGUE.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/eb/eee131-bb8c-4887-869b-6fe4d8fed160/1/h0v4BwzuQwXRo4npEPtRArvMGUE.mft X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/eb/eee131-bb8c-4887-869b-6fe4d8fed160/1/h0v4BwzuQwXRo4npEPtRArvMGUE.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 59:9b:40:d1:da:f4:bb:3f:72:63:4f:46:f8:f9:e0:bf:a7:a0: 43:79:38:d3:9b:87:92:35:e0:4e:45:55:d1:72:88:12:a9:57: 3e:e1:df:31:b2:47:6d:0f:58:48:91:25:fb:45:a8:a8:fc:25: 70:62:f1:82:9c:a0:fd:8d:7a:b3:61:9a:c7:c6:1d:4e:c7:cc: 1f:e2:a9:c9:d9:0a:99:36:d2:3f:d2:58:58:40:e5:02:46:47: 61:5d:d0:69:19:bb:34:16:6c:9f:21:f4:8c:25:02:da:f5:20: 8a:7b:c2:bf:23:33:f4:74:e6:b8:9e:0b:e1:61:6c:7a:8e:bb: c6:51:ec:a1:b4:96:27:49:ed:ba:25:20:73:80:92:6d:88:0d: 81:e1:c1:72:77:d7:07:8c:12:60:11:5b:73:2d:4b:49:df:d0: 2d:f0:4e:75:ca:0d:6d:ec:25:6c:9f:13:23:f9:1e:06:5f:7c: 7b:1f:65:31:ce:bb:57:dd:56:e8:32:0d:bb:2f:7e:29:3d:ac: 86:52:c3:38:a5:d6:ba:d8:32:73:9f:e3:c1:ac:8f:cc:7b:26: d8:34:96:b2:5c:90:89:f8:21:70:39:30:a7:3a:3a:14:be:29: fe:2f:29:56:3e:d5:9c:92:48:78:7b:57:db:f6:22:23:1a:93: 17:c3:5f:9a -----BEGIN CERTIFICATE----- MIIFFjCCA/6gAwIBAgISAZpOfd9MWDYpBbXhWGjmWZhHMA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKDg3NGJmODA3MGNlZTQzMDVkMWEzODllOTEwZmI1MTAyYmJj YzE5NDEwHhcNMjUxMTA0MTA1MTAzWhcNMjUxMTA1MTA1MTAzWjAzMTEwLwYDVQQD EyhmYzExMzczYzdiYmQ5YWQ4MzhkOWY2ZTc4ODdhYjFjMDViMDMzYjllMIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEA2PMX0RWvlHKbt3PiVuGc49vURf0c 8JcQh0qZBnIQ4coykY0NS0V9OsncH3Jwu4f0/Q+eQ9JMzUgPCVlEgOXTDcuvKNMp OUhs1a/O1Vfi3Xsg7rW80Eh6HcH/QMwt1TBdqcoUyPIGLcZjsGZ41WA4xWtxGaEu 5Zp1wk1Vslxl0HFTbiFhBwHQxJh4XCqW1djuZO5cJmSiHLtvh4lWfuk+pYJ3zs7W YwGsxsuXfNfYF/KWJz1RaGNWUkJCM3Sux2CYxXLK/7MqbpqYwDGDTZmp738xCneC 5yX14QjkgQZtYUYroV2x283ppB+ndT28HIyPbF9KzSe8KCuyeKDafUsuHQIDAQAB o4ICIjCCAh4wHQYDVR0OBBYEFPwRNzx7vZrYONn254h6scBbAzueMB8GA1UdIwQY MBaAFIdL+AcM7kMF0aOJ6RD7UQK7zBlBMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvaDB2NEJ3enVRd1hSbzRucEVQdFJBcnZNR1VFLmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC9lYi9lZWUxMzEtYmI4Yy00ODg3LTg2OWIt NmZlNGQ4ZmVkMTYwLzEvaDB2NEJ3enVRd1hSbzRucEVQdFJBcnZNR1VFLm1mdDCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC9lYi9lZWUxMzEtYmI4Yy00ODg3LTg2OWItNmZlNGQ4ZmVkMTYw LzEvaDB2NEJ3enVRd1hSbzRucEVQdFJBcnZNR1VFLmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAWZtA0dr0 uz9yY09G+Pngv6egQ3k405uHkjXgTkVV0XKIEqlXPuHfMbJHbQ9YSJEl+0WoqPwl cGLxgpyg/Y16s2Gax8YdTsfMH+KpydkKmTbSP9JYWEDlAkZHYV3QaRm7NBZsnyH0 jCUC2vUginvCvyMz9HTmuJ4L4WFseo67xlHsobSWJ0ntuiUgc4CSbYgNgeHBcnfX B4wSYBFbcy1LSd/QLfBOdcoNbewlbJ8TI/keBl98ex9lMc67V91W6DINuy9+KT2s hlLDOKXWutgyc5/jwayPzHsm2DSWslyQifghcDkwpzo6FL4p/i8pVj7VnJJIeHtX 2/YiIxqTF8Nfmg== -----END CERTIFICATE-----Generated at Tue Nov 4 16:38:33 2025 by rpki-client