
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/ed/428815-02b9-4606-b066-65d1567340fd/1/aZHFbxGnFxxhUyOXafVXvroQGC0.mft
File: aZHFbxGnFxxhUyOXafVXvroQGC0.mft (raw, json)
Hash identifier: 2KRZlwt4whBbvYSJNgtaWIz4m3NWBo0qiwqE7ENAJc0=
Subject key identifier: 6D:85:E2:C3:0E:92:30:15:74:F2:49:1C:E3:5C:43:99:A0:84:B7:05
Authority key identifier: 69:91:C5:6F:11:A7:17:1C:61:53:23:97:69:F5:57:BE:BA:10:18:2D
Certificate issuer: /CN=6991c56f11a7171c6153239769f557beba10182d
Certificate serial: 019A4F99043D13B36AE40F470113FFEC4A9F
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/aZHFbxGnFxxhUyOXafVXvroQGC0.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/ed/428815-02b9-4606-b066-65d1567340fd/1/aZHFbxGnFxxhUyOXafVXvroQGC0.mft
Manifest number: 0A87
Signing time: Tue 04 Nov 2025 16:00:19 +0000
Manifest this update: Tue 04 Nov 2025 16:00:19 +0000
Manifest next update: Wed 05 Nov 2025 16:00:19 +0000
Files and hashes: 1: 0ZnUbFz494YaFYXrrvpst6o3vps.roa (hash: OVgxGJmRNj8L4Akc46yjqXSfo2J2UzOCk6rafbqc2OA=)
2: 1gMhaWTt9SatCtzXb2x3evmqFAM.roa (hash: 6Y9a57NqqkLkQqCohM5S0/g04HJqvciLd/hsGJkposA=)
3: 2R9OObFNaEDkANSZ-coBJRfRpcg.roa (hash: PuD3VMT0jUQBkYxsd7Ldnl6ZWhsJPerlMMUp2zMDWgw=)
4: 3B48XSzrqRQbODZNf87x_kjUhNo.roa (hash: y14T24Ofee6GJVa1mI4/7qxhdq0jl8KEydSAoin8Qhg=)
5: 4Big0S_3eVdxzCi9Q5-ZazqY78k.roa (hash: MZj2ZauIX6SjNg/AhkH3xRZrKv7KoBeknyWj0YQB2/w=)
6: 5KCmcBzgBtGKXXIdhXDGwgQX-Nc.roa (hash: 3MBj03+qouTWcvDDud6sW23ZkQ0DtRDfsHdVwPfcmzA=)
7: Ge-sdc_RhsJevkQCq5DXSj7W5SM.roa (hash: cppMW1hN3HemsqcEnmgRLycbL6rv3c6Bv6GxyK4Dr7I=)
8: GzbjpWWbs-1PqotRsV09E9K9Lz4.roa (hash: DPdOn5R31znLhVjpEt/89hnY5IoUTo1sHiV7ubrKX6Q=)
9: IR0N93wyt194hpjTT9eshHBGwCY.roa (hash: hm8stnovqLivJRd1Zt72YsNy0Lv8colWOGD8fUtYhVw=)
10: Ipr3KewOoeNwtKcMjwWhhMZ4XGk.roa (hash: 3JCwXXZ0yyhMNw7g8hWZGcEbqAf0RiAf0XwSMEKW1/k=)
11: LiReZTb5eM73wM_EtDaxcTNj4Uc.roa (hash: VxzmF2kcB0hEh+Og8NMqll1d/dM5T/PwiOdBSWMF9+w=)
12: NdAX7Rrn7y-KonnG7TF23wCnJFU.roa (hash: 1r3koUbwGBNgbjNaxMGO8L4AUL4EQ4uI3dkO8TUFqEA=)
13: NxKKuEIzsEe5p3RwQBZ8j63Lsc4.roa (hash: mOT2nWmKWDEZ1VeM86bS3Qx+tjUuZhaB/QcxGF5t7y4=)
14: OxLywK9-WD8ykiaZCQkg8aVcCjY.roa (hash: iXcObwE6BigOurV7fYooDfgc8zyVyQ+nTBGFkUMqd08=)
15: Qjyx-VfeYJzhQ64OO3GeexbDjpo.roa (hash: rj+IOmmZrJFH/pGr6IiDQ9M39qURzS3Ek11UjeILldM=)
16: TvRgaW9-CsNjYomAsfORBTmW3OU.roa (hash: E1pW1tBEDD4gp+efpV/wAMGMYES5LCvHxLW4UcIoHuI=)
17: US4urt8SGYSwI0nrEmSfY23OtMo.roa (hash: WGkLaX+bRS10FeqEfnkw5XXJQ/dEDlUw6wG2fIeU7p0=)
18: UbTczMXH1DXAp6Y4rzAMo0-vjMY.roa (hash: /5fKT3FRRFYWFa0s/Qas8JVmnywA6hIsUQs3iIAfCSc=)
19: V9MunteQeVICf2ICr71lxQH0Fho.roa (hash: eyd5tdJUMOhtnb51XXGrnbSnVth9KptYyQQSksmwF/U=)
20: Xk5tmPIosW8yWOoBE4vC97DKTmI.roa (hash: n+WSuCldCqJF0J/zIrAAsy8W1NaktFT44ojEQwTF8/A=)
21: Y8kVBgTTg77JqceZAx8eeOkuigc.roa (hash: IFdbCND0Hr2WHlrHfsppyOn82/Cdt+j+/f3Y4nRrJM0=)
22: a0il1xPCzL5RX2zRZ16C5yrKQN0.roa (hash: jNHlYD8MG49p1qoIK36TKFr01Lgirahfew8083hVbhQ=)
23: a75rOpjpaPa3RoX99f00xHpyQQk.roa (hash: pBUN5kZ0kemGdrUfIg4JmP66bIvq4vhJcqUtu9xb4uk=)
24: aZHFbxGnFxxhUyOXafVXvroQGC0.crl (hash: HYtp2IKVEq0rjnNLRT5L7MrYmmekrnuGSEUQlNR+RD0=)
25: eSDGXftwPU-DhjYptcEbu97gSEU.roa (hash: 298/MebJAxJVNu0RXxXXDu+aRB+xIjmk2sL/OavJmSI=)
26: gt8flTD_zJibygdA8dyeuF1l6X4.roa (hash: aubI8iptMgWbWF9zUBH11nChoCQulzBZponMqronaCU=)
27: h8jROV5bQoENdkPdOHcG_4qWdVY.roa (hash: glJfimln9Noz47bXSrY5ZJrPDNDjmCoZp6sAhb5XR58=)
28: hd5E-IfEq2TxeShk5Gaec24hUKw.roa (hash: gaGe3UUy/HO5uK3mGo4Jfk2cwdMRK/X0E0rPiNSPI88=)
29: mqFZ_6poK042LnYArfefb64YNZQ.roa (hash: z+bsA4ZcDvX2JPMlTZwVkKpOQPowKJ3wnhxnQ/pVUXU=)
30: qjt96n4RyTnwKt8f25Hzr4YOzU4.roa (hash: c+NeV173DV29fxhrcPqvFfp6/xCLnBsKjYjqezsWpbo=)
31: r72MZC6TP9HFp69hVblH2z8aLDw.roa (hash: 60a58tQ14AuL0odo9HIWNyGRLIp51J3Om0fY3oCEnBg=)
32: uuETfDd2MFEUFL6j7oWk0rsVxng.roa (hash: gq3xyqmM/tiK/h2Lc/3S6cQaZW777XfzMoLElI6p2tY=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/ed/428815-02b9-4606-b066-65d1567340fd/1/aZHFbxGnFxxhUyOXafVXvroQGC0.crl
rsync://rpki.ripe.net/repository/DEFAULT/ed/428815-02b9-4606-b066-65d1567340fd/1/aZHFbxGnFxxhUyOXafVXvroQGC0.mft
rsync://rpki.ripe.net/repository/DEFAULT/aZHFbxGnFxxhUyOXafVXvroQGC0.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Wed 05 Nov 2025 16:00:19 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9a:4f:99:04:3d:13:b3:6a:e4:0f:47:01:13:ff:ec:4a:9f
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=6991c56f11a7171c6153239769f557beba10182d
Validity
Not Before: Nov 4 16:00:19 2025 GMT
Not After : Nov 5 16:00:19 2025 GMT
Subject: CN=6d85e2c30e92301574f2491ce35c4399a084b705
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:cf:41:1d:3f:7b:5b:a2:14:42:05:0b:5b:c5:fd:
e5:30:19:81:58:a0:ac:b4:43:ef:62:e5:01:53:3f:
91:c0:29:b9:0c:21:7d:06:ed:1c:ff:9a:6a:a8:4c:
e1:65:fe:e6:37:59:c1:11:49:f6:96:ae:c4:65:14:
4b:b8:3b:79:bd:81:ae:a9:76:6b:03:02:18:a9:c4:
8f:23:07:c7:0c:bb:97:b0:1e:39:91:1b:88:e4:56:
51:ab:88:1e:b2:1b:67:a1:80:ff:6c:98:6b:b5:eb:
8e:4f:09:46:21:88:94:93:2c:7d:43:84:05:74:17:
f3:5b:7c:29:89:51:83:e5:de:4f:73:c9:0a:ed:c0:
bd:fa:f3:22:16:ac:fd:df:9b:a1:74:8d:37:12:35:
ef:15:84:a2:c2:07:62:f3:30:e9:14:ec:ce:7d:b9:
cc:9a:e7:b7:b4:0e:5e:1d:cd:f7:2c:db:c2:2e:b2:
e4:3f:c1:c5:f7:92:05:a0:bb:b8:19:fc:0a:30:39:
bf:81:86:88:a0:26:bc:95:5c:fd:61:25:c8:a9:7b:
ff:4d:ee:3c:51:a5:1b:d4:a1:70:20:a8:cc:e1:9a:
2e:ba:9f:70:d1:1b:cb:8b:bd:f9:85:11:11:da:fe:
fe:b6:b4:a9:3c:11:dc:e9:ef:50:89:e6:de:48:c9:
c7:f7
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
6D:85:E2:C3:0E:92:30:15:74:F2:49:1C:E3:5C:43:99:A0:84:B7:05
X509v3 Authority Key Identifier:
keyid:69:91:C5:6F:11:A7:17:1C:61:53:23:97:69:F5:57:BE:BA:10:18:2D
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/aZHFbxGnFxxhUyOXafVXvroQGC0.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/ed/428815-02b9-4606-b066-65d1567340fd/1/aZHFbxGnFxxhUyOXafVXvroQGC0.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/ed/428815-02b9-4606-b066-65d1567340fd/1/aZHFbxGnFxxhUyOXafVXvroQGC0.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
98:9f:71:6b:4e:65:f2:28:a5:18:b8:ba:72:5f:da:20:39:9f:
c3:fa:54:67:73:e8:b9:32:89:f9:9d:e9:ca:5b:f1:70:f8:60:
1b:22:73:7d:92:98:1e:23:c2:fb:09:db:ba:70:f4:b8:7e:16:
2d:45:36:75:f6:b5:80:47:93:0f:ab:b1:4e:54:76:03:74:70:
c3:71:3f:77:1c:c4:e7:e3:cd:0e:96:04:ac:ce:eb:89:fc:fc:
ac:99:a4:a7:b7:2b:2b:12:4a:9b:02:73:0f:12:bd:35:9f:a6:
d1:94:b3:b0:a0:63:dc:87:89:19:5e:52:6f:6f:73:22:26:86:
b7:78:e6:9b:aa:c3:e3:bf:01:a9:94:01:54:fb:55:87:fc:96:
ff:57:7e:94:00:d8:43:08:0c:f4:36:42:c1:ec:27:9e:ab:db:
2b:cb:35:5d:b6:da:8f:8f:d2:7f:ff:5e:10:dc:56:f5:51:1c:
7d:7e:48:4d:48:b4:eb:30:43:14:b4:9c:7f:e9:6f:92:ac:93:
8c:6c:78:43:bc:24:85:1f:d9:30:80:0e:04:6f:29:73:2e:90:
f7:5e:fa:dc:8d:dd:8f:f9:12:40:03:64:a3:a9:6d:f3:d8:f7:
3c:30:1c:e8:ed:4a:2b:af:4b:1e:0d:9c:1d:53:f2:f7:e3:9e:
87:0c:b6:26
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Nov 5 01:37:37 2025 by rpki-client