$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/ed/24be1a-16da-481c-8bcb-340d625c6dba/1/Gn8DbiWSOR-0Wj3TPK8LB5Vpc88.mft File: Gn8DbiWSOR-0Wj3TPK8LB5Vpc88.mft (raw, json) Hash identifier: 5s3q3oqsYKdrIwgrWXPAwQVv0pkBUu1lHhfbRDJP+/Q= Subject key identifier: DE:61:59:FC:05:38:F5:3B:2D:14:67:05:8B:76:DA:37:76:52:23:C7 Authority key identifier: 1A:7F:03:6E:25:92:39:1F:B4:5A:3D:D3:3C:AF:0B:07:95:69:73:CF Certificate issuer: /CN=1a7f036e2592391fb45a3dd33caf0b07956973cf Certificate serial: 019A503D998C8781497D78A6EF29988E1E3C Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/Gn8DbiWSOR-0Wj3TPK8LB5Vpc88.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/ed/24be1a-16da-481c-8bcb-340d625c6dba/1/Gn8DbiWSOR-0Wj3TPK8LB5Vpc88.mft Manifest number: 0F54 Signing time: Tue 04 Nov 2025 19:00:05 +0000 Manifest this update: Tue 04 Nov 2025 19:00:05 +0000 Manifest next update: Wed 05 Nov 2025 19:00:05 +0000 Files and hashes: 1: 0qafQTKpUINoCVOYOkW5UnOWR94.roa (hash: MusUL5944aEPud+AesWo0c3hbkne3BfD5w+aqIADrZU=) 2: 3BwQGvtGG9EzTodyzZ_T_NlKH8c.roa (hash: 3YVq+Q3Pxf3bX0RyqLEPepY9xeWnJNOauq8KUa99lAY=) 3: 3jf0qN8pQHNEeZXSK9GB9T1D4_E.roa (hash: DRAm1n/nD8B8BQj+jf77wLhiQpGtxWx72r8uwhAFjaU=) 4: 72ompPbzpmnzneIjTtp_bgxv8to.roa (hash: aazsmeYdXGvcDu68YTmlm+z5hJVBvjGJrpJeAcUoELg=) 5: 89lMNrhD2F5x0Ke_v2bBXPEQYgU.roa (hash: K5oebEL4UYGbpI6omznf50HWdMyeoL9B3ezd2prsxV4=) 6: E_3-qae-50qWA7R56c8VnNml0ZU.roa (hash: nkgMixGbN46lHgT97kcU8QjXRmEi7iabVPw78zf1uq4=) 7: EoqOLJZzdQ3i-M95BH6ZqX7Pq-o.roa (hash: a3yd5mlm4a54YbLPpH0dQXH+MNyJ+T7A5cQjTmvitXU=) 8: Gn8DbiWSOR-0Wj3TPK8LB5Vpc88.crl (hash: 87qA3Mzgty33xbZ4POEfqB3kTE2SpHluFJ4GvcZHPjI=) 9: J8otkOOOFhMQcKskyfSet45vpaA.roa (hash: OKOZ6+uREzTIvRtmYWOfCPq5FGMam+EbPwErDVD6eGc=) 10: dPBOUNuMluSVUVsbkWd3r_lebgU.roa (hash: pOELbtPhwT+Xz573ShVJg/36cMfG9CcY6YmD29hT1jk=) 11: h4WPx1Sgez5mjA1QOYWXTeKaf6I.roa (hash: j0LdK7x2Tf65HMuHIG0cj+mnli0iJ+gVK8H+vxjuT5g=) 12: jFuP-GeZY6Z37SVSGqClEWTPyy4.roa (hash: 65ZwPuCoL1Qqn8JPgxAd7UOuJekWTxCoLNYfjh3KVJo=) 13: m6IyPWEEbbAvvvSNw5JH6euTQ7A.roa (hash: 06SutFrXFPpCbXeexyGeEPlk43CPE0aY99qdVjAphr0=) 14: vmyAzNx7YC2gCU3FErnhSsG464E.roa (hash: b2H/65WWZwau4OQRXdpkdBOUisTMki5wQZ0WO+I8q90=) Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/ed/24be1a-16da-481c-8bcb-340d625c6dba/1/Gn8DbiWSOR-0Wj3TPK8LB5Vpc88.crl rsync://rpki.ripe.net/repository/DEFAULT/ed/24be1a-16da-481c-8bcb-340d625c6dba/1/Gn8DbiWSOR-0Wj3TPK8LB5Vpc88.mft rsync://rpki.ripe.net/repository/DEFAULT/Gn8DbiWSOR-0Wj3TPK8LB5Vpc88.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Wed 05 Nov 2025 16:49:02 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9a:50:3d:99:8c:87:81:49:7d:78:a6:ef:29:98:8e:1e:3c Signature Algorithm: sha256WithRSAEncryption Issuer: CN=1a7f036e2592391fb45a3dd33caf0b07956973cf Validity Not Before: Nov 4 19:00:05 2025 GMT Not After : Nov 5 19:00:05 2025 GMT Subject: CN=de6159fc0538f53b2d1467058b76da37765223c7 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:c4:27:f5:46:b8:bc:c7:11:84:50:70:01:16:05: 97:58:c7:77:69:c7:73:bb:38:e9:6e:94:69:35:48: 7b:8b:3e:70:a2:2f:45:6b:f8:23:7d:26:db:cb:14: 63:6a:d2:e3:0b:7b:dd:21:40:b2:5f:e5:64:55:ec: a1:c7:06:1e:4e:fb:75:74:1b:9c:85:93:c6:8d:a5: b8:a6:25:65:5d:c2:7c:4f:c0:88:69:18:c0:51:0f: 25:53:cd:b0:a7:84:8c:3a:d2:55:02:82:9a:0d:c3: 0c:e5:30:58:7a:b8:e5:10:98:83:fc:65:9a:58:14: af:a9:36:ae:10:a8:fd:41:b7:30:fd:8f:ad:3b:40: 49:ea:b0:f7:a1:29:7c:0f:cf:fd:5c:fa:04:e5:d6: ff:0d:cc:74:94:08:f3:6e:5d:05:db:9e:d9:fe:c3: 9d:ff:12:e0:00:30:c4:b5:17:dc:7c:56:ee:a6:f3: 37:59:0e:10:96:ea:ed:d3:45:b3:08:01:2f:2d:b8: 12:58:da:92:b6:b1:be:9c:1a:0b:bf:cc:df:3b:4d: 8e:12:3f:d6:5f:a4:8c:1d:9f:17:ef:09:1a:11:59: 83:d6:31:d3:62:fe:ad:c1:9c:58:dd:b5:55:c1:92: 7e:d5:08:38:b9:4b:0f:0b:1b:0e:ea:d1:24:bd:75: f2:f1 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: DE:61:59:FC:05:38:F5:3B:2D:14:67:05:8B:76:DA:37:76:52:23:C7 X509v3 Authority Key Identifier: keyid:1A:7F:03:6E:25:92:39:1F:B4:5A:3D:D3:3C:AF:0B:07:95:69:73:CF X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/Gn8DbiWSOR-0Wj3TPK8LB5Vpc88.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/ed/24be1a-16da-481c-8bcb-340d625c6dba/1/Gn8DbiWSOR-0Wj3TPK8LB5Vpc88.mft X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/ed/24be1a-16da-481c-8bcb-340d625c6dba/1/Gn8DbiWSOR-0Wj3TPK8LB5Vpc88.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption b5:b4:cc:6d:44:db:76:e0:f2:4a:c3:5e:cc:6d:7c:96:ca:53: ed:ab:3a:79:50:5d:4a:dc:c4:2b:10:aa:6e:f1:e9:f7:3e:86: f3:6d:b6:f2:5b:bb:08:74:a0:36:a9:64:32:e9:2e:0d:c5:64: ed:b4:ee:c0:c6:2f:0b:74:09:f9:0f:54:77:c3:f0:0e:27:e6: 53:df:e0:14:06:5f:32:36:e0:bb:91:54:1b:de:e2:2b:aa:58: 3b:c5:2d:bb:a8:75:cd:ff:1c:5a:d3:d7:9c:ac:1d:93:f6:84: 53:19:65:90:ec:85:1d:52:95:87:14:9c:f9:c9:b9:bf:67:f2: f6:b7:20:db:de:b0:ff:c5:17:b5:b5:48:dd:4e:cc:66:65:cb: fd:31:aa:ad:5e:e5:e8:c7:ac:a7:60:65:21:5a:c0:2a:33:9e: a2:5d:3a:c1:49:fe:0a:9e:69:7f:22:f0:df:cd:1d:50:e1:07: 89:3e:9f:d6:ab:99:b1:ba:3a:cd:d1:25:67:ce:ab:c2:dc:a3: 1c:3b:12:aa:59:70:64:73:31:ef:6e:f9:17:f5:5e:e1:5d:1d: 69:61:9b:73:f5:17:85:c5:2c:7c:0f:90:63:2d:cc:3a:cb:97: 49:8d:7d:88:cc:85:d9:08:25:f6:3e:13:3f:e0:5a:04:f1:7f: cf:48:d3:8a -----BEGIN CERTIFICATE----- MIIFFjCCA/6gAwIBAgISAZpQPZmMh4FJfXim7ymYjh48MA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKDFhN2YwMzZlMjU5MjM5MWZiNDVhM2RkMzNjYWYwYjA3OTU2 OTczY2YwHhcNMjUxMTA0MTkwMDA1WhcNMjUxMTA1MTkwMDA1WjAzMTEwLwYDVQQD EyhkZTYxNTlmYzA1MzhmNTNiMmQxNDY3MDU4Yjc2ZGEzNzc2NTIyM2M3MIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAxCf1Rri8xxGEUHABFgWXWMd3acdz uzjpbpRpNUh7iz5woi9Fa/gjfSbbyxRjatLjC3vdIUCyX+VkVeyhxwYeTvt1dBuc hZPGjaW4piVlXcJ8T8CIaRjAUQ8lU82wp4SMOtJVAoKaDcMM5TBYerjlEJiD/GWa WBSvqTauEKj9Qbcw/Y+tO0BJ6rD3oSl8D8/9XPoE5db/Dcx0lAjzbl0F257Z/sOd /xLgADDEtRfcfFbupvM3WQ4Qlurt00WzCAEvLbgSWNqStrG+nBoLv8zfO02OEj/W X6SMHZ8X7wkaEVmD1jHTYv6twZxY3bVVwZJ+1Qg4uUsPCxsO6tEkvXXy8QIDAQAB o4ICIjCCAh4wHQYDVR0OBBYEFN5hWfwFOPU7LRRnBYt22jd2UiPHMB8GA1UdIwQY MBaAFBp/A24lkjkftFo90zyvCweVaXPPMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvR244RGJpV1NPUi0wV2ozVFBLOExCNVZwYzg4LmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC9lZC8yNGJlMWEtMTZkYS00ODFjLThiY2It MzQwZDYyNWM2ZGJhLzEvR244RGJpV1NPUi0wV2ozVFBLOExCNVZwYzg4Lm1mdDCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC9lZC8yNGJlMWEtMTZkYS00ODFjLThiY2ItMzQwZDYyNWM2ZGJh LzEvR244RGJpV1NPUi0wV2ozVFBLOExCNVZwYzg4LmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAtbTMbUTb duDySsNezG18lspT7as6eVBdStzEKxCqbvHp9z6G82228lu7CHSgNqlkMukuDcVk 7bTuwMYvC3QJ+Q9Ud8PwDifmU9/gFAZfMjbgu5FUG97iK6pYO8Utu6h1zf8cWtPX nKwdk/aEUxllkOyFHVKVhxSc+cm5v2fy9rcg296w/8UXtbVI3U7MZmXL/TGqrV7l 6Mesp2BlIVrAKjOeol06wUn+Cp5pfyLw380dUOEHiT6f1quZsbo6zdElZ86rwtyj HDsSqllwZHMx7275F/Ve4V0daWGbc/UXhcUsfA+QYy3MOsuXSY19iMyF2Qgl9j4T P+BaBPF/z0jTig== -----END CERTIFICATE-----Generated at Tue Nov 4 20:16:49 2025 by rpki-client