$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/ed/8e8e82-5274-4d2f-8ca0-ab19fcb0ce64/1/4VgI8_khvIw-6ofHWExYTBAAsFE.mft File: 4VgI8_khvIw-6ofHWExYTBAAsFE.mft (raw, json) Hash identifier: sbzM6y+CyIj9ONcOwJPjqxY0dFPiebXFzTtRcyEBGTc= Subject key identifier: E9:7E:95:F0:6B:73:79:E3:97:17:FA:35:A5:EE:F6:B1:46:B8:5D:BA Authority key identifier: E1:58:08:F3:F9:21:BC:8C:3E:EA:87:C7:58:4C:58:4C:10:00:B0:51 Certificate issuer: /CN=e15808f3f921bc8c3eea87c7584c584c1000b051 Certificate serial: 019A4E86882F18F59A882B1B29CCBC65D5BE Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/4VgI8_khvIw-6ofHWExYTBAAsFE.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/ed/8e8e82-5274-4d2f-8ca0-ab19fcb0ce64/1/4VgI8_khvIw-6ofHWExYTBAAsFE.mft Manifest number: 1731 Signing time: Tue 04 Nov 2025 11:00:30 +0000 Manifest this update: Tue 04 Nov 2025 11:00:30 +0000 Manifest next update: Wed 05 Nov 2025 11:00:30 +0000 Files and hashes: 1: 4VgI8_khvIw-6ofHWExYTBAAsFE.crl (hash: Ard3Qp4B5ApCZpYQsBA/kaUYvy0MUKQrBZAhzEZIHNU=) 2: 7hCd_HKEYkXLvNCBLfMsTezcRXs.roa (hash: U6tVugGWrDYmHCXTomFCnYlQyCN2W9AcT+utfrGkYmM=) 3: 7x5HPsZJJU7oLctSDX_VaOPYLzI.roa (hash: uhuBwDP+Oa9qCbvp8OKGgxlY2ye1DhBRDdxJD61Z03g=) 4: BqWFQfCpNOawJLR_2bQgKiWus78.roa (hash: dwDCQUgPm6/+eGPO1V7wb2aMqwp5qzv/WSd8fL7sTv4=) 5: HK9YTPeAPa2mm7JsqVFDcEqWktE.roa (hash: pGFfaceKosL6QVYMO3oG4sR8CNlOKvbDd43IVlI91l4=) 6: SiUykNKTjaApyo1sqndO19rBYAs.roa (hash: jaR1D2Lqsnpc33UxJXomGKoF/S6s6EdMDhOpwvCqmiY=) 7: dsVEniM-PjP3aF57gRKfJeGsuXA.roa (hash: rATVs9dRCK5irdzRkSY1vrtCfxCwPvZoSJA3EPbdN5Q=) 8: jNJogHc9h5lodSxhpjDRYEENUOM.roa (hash: O0aQYdB/pHChDSdymrPe8W/YPJRqMLBI8pg3+YHjgZ8=) 9: pm4iWvL8z96fIGtjxaGjSXeRJT4.roa (hash: ZYVelcX+1GR4HDMDdE6U47zsAh6vEcuxWCIg/8E3uZE=) 10: qeW6k62Ova_Op7BhYtzucMuedHs.roa (hash: iPCOF2sKXY5KaN1yHnhdOMP4cE9n3NAPWSlvKOP6/hY=) 11: qispPpKIlPSWV1rI1EAZQtlT-p0.roa (hash: sBtkCqwyGciPSktKwAiba5P4WFIxvlZFVG+B/hvcwgI=) 12: ttSCm0GX77Lv7F9AG7Ej_PDwc8E.roa (hash: CXBZohUwM39VG497MDaDZEXDgP7mhwxpOgtdpsLOGh4=) 13: xyWS8GMXAK5cHVz0I4kSnXYHwUs.roa (hash: U2goV1mLS2kaWO5TW5yX21b9KWWpNNSkN88rAFVfNXQ=) 14: z1XxJmXXx8uVxhk9CwQJXiPqHzU.roa (hash: EaljD/90P2BfuVNTpmwdBC+zdctwtxvncMDcXLvuk10=) Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/ed/8e8e82-5274-4d2f-8ca0-ab19fcb0ce64/1/4VgI8_khvIw-6ofHWExYTBAAsFE.crl rsync://rpki.ripe.net/repository/DEFAULT/ed/8e8e82-5274-4d2f-8ca0-ab19fcb0ce64/1/4VgI8_khvIw-6ofHWExYTBAAsFE.mft rsync://rpki.ripe.net/repository/DEFAULT/4VgI8_khvIw-6ofHWExYTBAAsFE.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Wed 05 Nov 2025 09:00:03 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9a:4e:86:88:2f:18:f5:9a:88:2b:1b:29:cc:bc:65:d5:be Signature Algorithm: sha256WithRSAEncryption Issuer: CN=e15808f3f921bc8c3eea87c7584c584c1000b051 Validity Not Before: Nov 4 11:00:30 2025 GMT Not After : Nov 5 11:00:30 2025 GMT Subject: CN=e97e95f06b7379e39717fa35a5eef6b146b85dba Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:a2:20:d9:50:13:5f:1b:c8:f5:f5:fc:39:5a:04: a4:9d:d7:ac:2a:d4:1f:4a:38:45:93:35:52:e9:b0: a3:3c:03:1a:e6:fb:26:29:b1:80:ef:c1:69:01:cc: ed:55:97:70:ef:95:92:be:14:25:fc:ae:03:e0:0b: bc:09:64:5b:9a:70:0f:27:c3:47:ac:66:bb:b0:49: ad:23:c2:1d:5b:bb:bc:dd:26:97:5a:dc:28:3a:3a: b1:e2:c7:6f:8a:07:1f:40:55:c9:94:20:d1:83:50: 68:41:f6:2f:54:8f:97:f0:d8:98:2b:26:f5:26:c3: d0:66:b8:d7:11:88:1d:a2:7e:6a:ef:7e:b5:2f:56: b8:c7:df:96:24:f3:80:e2:28:eb:7a:46:ce:7b:ca: ce:db:70:85:ad:a7:a0:cb:28:b9:b8:60:75:a2:a4: 7d:a2:ee:91:1f:4b:c8:a0:c7:78:8e:64:02:1e:de: 2c:b3:a9:94:16:a8:3f:55:34:cb:91:cf:d9:ba:50: 63:d7:4f:50:be:62:55:ab:87:b5:8a:b5:e4:ad:6f: 20:d3:de:17:2e:80:54:92:ba:1b:8a:53:f1:81:b9: 27:60:a4:c8:98:4b:a1:eb:7e:44:ee:70:84:ff:80: e5:cf:6c:f9:d6:4c:2c:de:25:49:a2:e1:54:29:b0: 78:59 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: E9:7E:95:F0:6B:73:79:E3:97:17:FA:35:A5:EE:F6:B1:46:B8:5D:BA X509v3 Authority Key Identifier: keyid:E1:58:08:F3:F9:21:BC:8C:3E:EA:87:C7:58:4C:58:4C:10:00:B0:51 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/4VgI8_khvIw-6ofHWExYTBAAsFE.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/ed/8e8e82-5274-4d2f-8ca0-ab19fcb0ce64/1/4VgI8_khvIw-6ofHWExYTBAAsFE.mft X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/ed/8e8e82-5274-4d2f-8ca0-ab19fcb0ce64/1/4VgI8_khvIw-6ofHWExYTBAAsFE.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 86:76:92:89:1b:0e:9b:7b:fb:6b:42:8f:e6:d4:8b:8b:f0:60: 89:81:a8:9b:d4:be:1a:fa:4f:cf:4c:ff:7b:7d:3f:aa:f6:0a: d6:6f:87:cd:3b:37:c6:8d:ad:27:cf:12:3f:80:cf:cb:a0:c2: 45:05:01:ec:c6:75:fe:bd:7f:e8:5e:dc:30:13:0e:71:32:07: 30:1c:c2:99:2e:8f:9b:6d:56:7c:4a:3e:52:1b:05:da:bd:10: 2f:e7:5b:93:7c:97:70:e9:8c:e8:f5:54:75:9c:d4:11:87:d6: 15:31:c2:5c:ef:d8:95:04:f9:c0:a4:b4:c1:a7:ad:53:10:04: 9c:8b:7e:3a:e2:80:6f:b8:89:25:93:f5:f9:d3:0e:c4:a4:e1: ba:7a:dd:56:0f:08:b7:39:65:ef:7a:ce:c8:63:f4:9f:65:32: 8f:00:be:8e:33:9c:14:33:a5:33:d7:76:40:46:ac:52:74:c3: e6:43:97:aa:fc:98:c3:0c:8b:bd:da:0f:aa:d9:58:8a:bd:a1: 8e:b9:15:a1:aa:fa:ad:6c:70:92:a9:32:c6:8c:a6:19:6d:03: 83:31:b2:dd:32:52:3f:dd:62:a3:c1:b6:14:d9:f7:30:fe:c0: 85:8a:e1:e0:8a:4e:9e:01:14:9f:7e:c0:a5:42:4b:29:cc:39: 15:d5:1d:92 -----BEGIN CERTIFICATE----- MIIFFjCCA/6gAwIBAgISAZpOhogvGPWaiCsbKcy8ZdW+MA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKGUxNTgwOGYzZjkyMWJjOGMzZWVhODdjNzU4NGM1ODRjMTAw MGIwNTEwHhcNMjUxMTA0MTEwMDMwWhcNMjUxMTA1MTEwMDMwWjAzMTEwLwYDVQQD EyhlOTdlOTVmMDZiNzM3OWUzOTcxN2ZhMzVhNWVlZjZiMTQ2Yjg1ZGJhMIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAoiDZUBNfG8j19fw5WgSkndesKtQf SjhFkzVS6bCjPAMa5vsmKbGA78FpAcztVZdw75WSvhQl/K4D4Au8CWRbmnAPJ8NH rGa7sEmtI8IdW7u83SaXWtwoOjqx4sdvigcfQFXJlCDRg1BoQfYvVI+X8NiYKyb1 JsPQZrjXEYgdon5q7361L1a4x9+WJPOA4ijrekbOe8rO23CFraegyyi5uGB1oqR9 ou6RH0vIoMd4jmQCHt4ss6mUFqg/VTTLkc/ZulBj109QvmJVq4e1irXkrW8g094X LoBUkrobilPxgbknYKTImEuh635E7nCE/4Dlz2z51kws3iVJouFUKbB4WQIDAQAB o4ICIjCCAh4wHQYDVR0OBBYEFOl+lfBrc3njlxf6NaXu9rFGuF26MB8GA1UdIwQY MBaAFOFYCPP5IbyMPuqHx1hMWEwQALBRMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvNFZnSThfa2h2SXctNm9mSFdFeFlUQkFBc0ZFLmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC9lZC84ZThlODItNTI3NC00ZDJmLThjYTAt YWIxOWZjYjBjZTY0LzEvNFZnSThfa2h2SXctNm9mSFdFeFlUQkFBc0ZFLm1mdDCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC9lZC84ZThlODItNTI3NC00ZDJmLThjYTAtYWIxOWZjYjBjZTY0 LzEvNFZnSThfa2h2SXctNm9mSFdFeFlUQkFBc0ZFLmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAhnaSiRsO m3v7a0KP5tSLi/BgiYGom9S+GvpPz0z/e30/qvYK1m+HzTs3xo2tJ88SP4DPy6DC RQUB7MZ1/r1/6F7cMBMOcTIHMBzCmS6Pm21WfEo+UhsF2r0QL+dbk3yXcOmM6PVU dZzUEYfWFTHCXO/YlQT5wKS0waetUxAEnIt+OuKAb7iJJZP1+dMOxKThunrdVg8I tzll73rOyGP0n2UyjwC+jjOcFDOlM9d2QEasUnTD5kOXqvyYwwyLvdoPqtlYir2h jrkVoar6rWxwkqkyxoymGW0DgzGy3TJSP91io8G2FNn3MP7AhYrh4IpOngEUn37A pUJLKcw5FdUdkg== -----END CERTIFICATE-----Generated at Tue Nov 4 17:58:08 2025 by rpki-client