$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/f2/4842a9-9fcd-4bb6-bb04-0dbbc249e657/1/SSFvXBZbgnp_1z2BB669L2PGPiQ.mft File: SSFvXBZbgnp_1z2BB669L2PGPiQ.mft (raw, json) Hash identifier: XtoebWFxHnp0V6azhIVP0Vg81QuHhHL9EQBATaEycmk= Subject key identifier: 6C:B0:42:99:89:1F:4E:74:45:D0:63:81:01:C9:70:89:8D:AC:78:08 Authority key identifier: 49:21:6F:5C:16:5B:82:7A:7F:D7:3D:81:07:AE:BD:2F:63:C6:3E:24 Certificate issuer: /CN=49216f5c165b827a7fd73d8107aebd2f63c63e24 Certificate serial: 019A5074A3574CEDA1D6BDB4C7690CC18A8E Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/SSFvXBZbgnp_1z2BB669L2PGPiQ.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/f2/4842a9-9fcd-4bb6-bb04-0dbbc249e657/1/SSFvXBZbgnp_1z2BB669L2PGPiQ.mft Manifest number: 082D Signing time: Tue 04 Nov 2025 20:00:12 +0000 Manifest this update: Tue 04 Nov 2025 20:00:12 +0000 Manifest next update: Wed 05 Nov 2025 20:00:12 +0000 Files and hashes: 1: 1-EZfm36xDgODSAJSHjoDKqosl0A.roa (hash: YJXvTARkaZsNuPWx3R0tfgZi43JI9omATgYJzudFfVw=) 2: 3EzuBFNcE3-Y9EKRZTTEJ-hJ0r0.roa (hash: c7Qo95/rDIGaWw+UtmeeU76uTMOHrZiqKPmI6hQSOzo=) 3: 8wPWU2vG9yor96syg0xci6OMavk.roa (hash: 58okY/hMSnPqb+2am85BaYPbNkOmLTFbAoYMmjPkzSM=) 4: A8u38dlgw8e8wVBstLEUX0BIwKA.roa (hash: wMifdjJKZOKPZclZ2LTT2h1hBhv48+8C1YSb4m0Dn8w=) 5: MjYi-LSjoIJQHulT2C8hiHI7HD8.roa (hash: dC5UZCibXUg9xVnIxopZdKZtoheRYoCMgnJyaeHGfKM=) 6: O442f9rKCameMmZGS2am4On1RJE.roa (hash: Tjn+0NJyIaKfDErYElD/Vnb1U5GiOqlQwXo7lUYpajU=) 7: OYN3165s9Ipm3JZkmY2YoXxPwXc.roa (hash: cpcbNpWtjSyDgdmGg67sZ/aJK/DRgTol1F8VTQooe2I=) 8: SSFvXBZbgnp_1z2BB669L2PGPiQ.crl (hash: YxeYrAXhfFCWbN8YBMGGEf8xxIxOAV4vJllC3FW6oOo=) 9: XhNIRKox72ceLxS-HicNdteAlnc.roa (hash: QNRbEve8iPmaf5PJ3d4wKSJFvAQJTgfZsNNYbZDbIlc=) 10: gcyVEfl2Y641X6JyrJ5gHsnWGHM.roa (hash: 4fScV3KfjcgkIMTXmX6XzXUXdZUkt2FHTuue2HpZKoE=) 11: i0xOZ9Jhra30YZPBjOHXbYaWfqk.roa (hash: 037VXUJZVI+mWu72PU8YPxD3JLA/Q6+4Wqo2f8ZWqyE=) 12: kTJsplmwURGCaPzG4ayo6wcNo7A.roa (hash: l/8qlEM8+mm6CRnvB68H+M19y+bDF0JqtLE1zP1nToE=) 13: oX3OGzwxfpoj75NeGxUgbWj5Nag.roa (hash: AUpPKp6STpZ3+I37dxgfx0DnwlKN78RdnPEKRCGUs1k=) 14: pSBQwLUPyYWO99fSCGOORj9giws.roa (hash: JkOzR+BpOFLVw+DBFx5vd7D/7xkaT2h6VtCqnTT04N4=) Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/f2/4842a9-9fcd-4bb6-bb04-0dbbc249e657/1/SSFvXBZbgnp_1z2BB669L2PGPiQ.crl rsync://rpki.ripe.net/repository/DEFAULT/f2/4842a9-9fcd-4bb6-bb04-0dbbc249e657/1/SSFvXBZbgnp_1z2BB669L2PGPiQ.mft rsync://rpki.ripe.net/repository/DEFAULT/SSFvXBZbgnp_1z2BB669L2PGPiQ.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Wed 05 Nov 2025 18:00:03 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9a:50:74:a3:57:4c:ed:a1:d6:bd:b4:c7:69:0c:c1:8a:8e Signature Algorithm: sha256WithRSAEncryption Issuer: CN=49216f5c165b827a7fd73d8107aebd2f63c63e24 Validity Not Before: Nov 4 20:00:12 2025 GMT Not After : Nov 5 20:00:12 2025 GMT Subject: CN=6cb04299891f4e7445d0638101c970898dac7808 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:c2:32:77:95:74:b4:82:cc:84:6a:a8:ae:77:49: f6:ad:1d:62:b1:ac:42:d7:f2:e5:2a:7f:d4:03:30: 2f:90:74:6f:5f:4d:e6:79:82:9c:5b:f1:84:a8:98: 5d:d3:f2:d3:ec:22:d0:ac:25:ee:bf:f2:3f:dc:8f: 0c:1f:d0:e4:b1:7f:04:50:40:df:92:17:59:ae:ba: c0:63:2b:49:f5:6c:44:76:1e:9b:c9:50:33:3e:92: 1a:2d:39:ff:d0:22:0c:4c:06:50:c3:71:04:01:07: a8:63:57:9b:c0:d7:e5:89:33:35:86:ae:55:97:54: 12:af:2d:c3:b8:64:ab:23:0a:cd:23:99:17:bf:9c: 12:11:96:83:c3:e5:3d:d1:9a:a0:89:cc:07:76:1e: aa:5c:e5:f8:b9:11:66:ce:e2:d4:60:46:c7:a8:07: be:76:75:93:c0:01:4d:41:ec:13:ee:b6:af:3e:94: 85:3b:5c:a9:74:47:a0:2f:f8:5e:a9:9f:07:e8:27: af:55:b5:16:5b:73:cb:9f:b7:9b:85:01:88:c2:94: 7d:f3:54:3e:4a:f5:33:26:82:24:2d:d5:12:c3:5f: ab:77:66:92:e7:b5:e7:91:a6:65:19:21:29:a1:7e: dc:a9:a9:13:d7:a2:26:3d:17:a3:7f:3e:d0:2d:c3: a2:2d Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 6C:B0:42:99:89:1F:4E:74:45:D0:63:81:01:C9:70:89:8D:AC:78:08 X509v3 Authority Key Identifier: keyid:49:21:6F:5C:16:5B:82:7A:7F:D7:3D:81:07:AE:BD:2F:63:C6:3E:24 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/SSFvXBZbgnp_1z2BB669L2PGPiQ.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/f2/4842a9-9fcd-4bb6-bb04-0dbbc249e657/1/SSFvXBZbgnp_1z2BB669L2PGPiQ.mft X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/f2/4842a9-9fcd-4bb6-bb04-0dbbc249e657/1/SSFvXBZbgnp_1z2BB669L2PGPiQ.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 86:f8:bd:f3:0b:25:05:a0:92:25:3a:28:96:6f:ec:71:bc:f3: d3:a5:5f:ab:cb:dd:9b:04:0e:f6:54:57:5a:0f:ec:ca:d4:70: 5c:e6:9e:8d:a2:fe:a6:ef:e9:6d:72:97:1f:c7:47:36:db:6a: ee:c4:06:97:1a:29:bc:60:39:f1:eb:36:18:d7:5d:03:bb:9c: 49:9b:1e:8d:7e:ca:06:df:28:28:d2:e3:c2:ea:65:6d:fc:60: 94:5b:e9:e8:90:4f:70:19:63:27:e0:77:86:08:68:c3:46:a4: 25:b5:b4:be:e8:b9:e6:e7:e6:8c:75:d1:62:70:1b:6e:c0:26: 3c:7d:71:cd:6b:30:2d:3e:48:59:7c:be:c6:0b:60:95:cc:36: 25:ec:b5:82:00:df:6e:94:8e:22:20:6f:bf:3f:3c:00:c9:c4: 30:67:01:ea:b3:81:83:8b:ca:c3:db:7e:96:a2:f4:0f:98:74: 84:b2:f4:f8:b1:c4:9b:89:ad:b9:e6:1e:b0:11:5d:e9:6f:bc: d8:22:19:63:c8:2f:a0:6b:65:bb:0e:58:ae:04:3b:32:06:c4: b9:e9:3e:82:99:4e:49:84:10:f0:16:7a:7d:5e:07:50:5f:fa: 41:5c:6e:b3:4f:16:18:5f:85:03:5f:69:0f:df:d3:1a:f8:9f: 94:1d:91:54 -----BEGIN CERTIFICATE----- MIIFFjCCA/6gAwIBAgISAZpQdKNXTO2h1r20x2kMwYqOMA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKDQ5MjE2ZjVjMTY1YjgyN2E3ZmQ3M2Q4MTA3YWViZDJmNjNj NjNlMjQwHhcNMjUxMTA0MjAwMDEyWhcNMjUxMTA1MjAwMDEyWjAzMTEwLwYDVQQD Eyg2Y2IwNDI5OTg5MWY0ZTc0NDVkMDYzODEwMWM5NzA4OThkYWM3ODA4MIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAwjJ3lXS0gsyEaqiud0n2rR1isaxC 1/LlKn/UAzAvkHRvX03meYKcW/GEqJhd0/LT7CLQrCXuv/I/3I8MH9DksX8EUEDf khdZrrrAYytJ9WxEdh6byVAzPpIaLTn/0CIMTAZQw3EEAQeoY1ebwNfliTM1hq5V l1QSry3DuGSrIwrNI5kXv5wSEZaDw+U90ZqgicwHdh6qXOX4uRFmzuLUYEbHqAe+ dnWTwAFNQewT7ravPpSFO1ypdEegL/heqZ8H6CevVbUWW3PLn7ebhQGIwpR981Q+ SvUzJoIkLdUSw1+rd2aS57XnkaZlGSEpoX7cqakT16ImPRejfz7QLcOiLQIDAQAB o4ICIjCCAh4wHQYDVR0OBBYEFGywQpmJH050RdBjgQHJcImNrHgIMB8GA1UdIwQY MBaAFEkhb1wWW4J6f9c9gQeuvS9jxj4kMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvU1NGdlhCWmJnbnBfMXoyQkI2NjlMMlBHUGlRLmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC9mMi80ODQyYTktOWZjZC00YmI2LWJiMDQt MGRiYmMyNDllNjU3LzEvU1NGdlhCWmJnbnBfMXoyQkI2NjlMMlBHUGlRLm1mdDCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC9mMi80ODQyYTktOWZjZC00YmI2LWJiMDQtMGRiYmMyNDllNjU3 LzEvU1NGdlhCWmJnbnBfMXoyQkI2NjlMMlBHUGlRLmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAhvi98wsl BaCSJToolm/scbzz06Vfq8vdmwQO9lRXWg/sytRwXOaejaL+pu/pbXKXH8dHNttq 7sQGlxopvGA58es2GNddA7ucSZsejX7KBt8oKNLjwuplbfxglFvp6JBPcBljJ+B3 hghow0akJbW0vui55ufmjHXRYnAbbsAmPH1xzWswLT5IWXy+xgtglcw2Jey1ggDf bpSOIiBvvz88AMnEMGcB6rOBg4vKw9t+lqL0D5h0hLL0+LHEm4mtueYesBFd6W+8 2CIZY8gvoGtluw5YrgQ7MgbEuek+gplOSYQQ8BZ6fV4HUF/6QVxus08WGF+FA19p D9/TGviflB2RVA== -----END CERTIFICATE-----Generated at Tue Nov 4 23:30:39 2025 by rpki-client