$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/f2/cc6e99-6e5f-401b-912d-1095544c6c50/1/mc5WmhTC2zdy8jGHzmjmVB7ABI4.mft File: mc5WmhTC2zdy8jGHzmjmVB7ABI4.mft (raw, json) Hash identifier: JVmWyBu3y4GAQAb3m7QYU7TfgVnNDOKvFfW8mUmLIoU= Subject key identifier: 65:AF:77:7F:3C:3D:49:57:4D:B0:12:1B:11:75:A9:CA:6E:53:04:D0 Authority key identifier: 99:CE:56:9A:14:C2:DB:37:72:F2:31:87:CE:68:E6:54:1E:C0:04:8E Certificate issuer: /CN=99ce569a14c2db3772f23187ce68e6541ec0048e Certificate serial: 019A4C98236225E74E182D9FE47258E1FDEE Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/mc5WmhTC2zdy8jGHzmjmVB7ABI4.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/f2/cc6e99-6e5f-401b-912d-1095544c6c50/1/mc5WmhTC2zdy8jGHzmjmVB7ABI4.mft Manifest number: 172E Signing time: Tue 04 Nov 2025 02:00:30 +0000 Manifest this update: Tue 04 Nov 2025 02:00:30 +0000 Manifest next update: Wed 05 Nov 2025 02:00:30 +0000 Files and hashes: 1: 7hlWKm8vTIF0LH1H2oS6Admh1TI.roa (hash: JGgMMA+OZIrWq67kkKcLVk/aNndkz3SnG1R5RYOVvj8=) 2: 8Okcs_WzeZSlRzql6-e5V5V7syA.roa (hash: Bgf74cz9Nwo/ctlxM9vVhY3z4DibfYQP6Uszu31EXc8=) 3: AJpw_2i3EoQNYD9kunMPYOdByi8.roa (hash: 2y+udfjFmNVer5C4pJzKndxIM53KHs0ELdljGNxXclM=) 4: BW-ZjApW-eGpyxFEOc0qqC_7S5k.roa (hash: RqpMiCDIPeUSPd1EPbgHwl0XZwlcr7/eFSWcSxO7pPY=) 5: Ik8Kqt-zKfrsdQjyrAjHXX-mlLc.roa (hash: Zg9C0+0W8n0QIjR6RRPkp/OJIpBk8iu2+syGMIoxQyg=) 6: RYdEtsOojE3SXyShhqAjMIQl9xQ.roa (hash: bxAZYk1bj8j4gGSsg9+CUkCHFq1GRl7baVopFxolE0s=) 7: WBeAt2UOvPgAdfpllYF8DBrXsx8.roa (hash: IGhLKO/rQTI4tOBHJDgWqI73xTyqxuZsgF0ztyC/dOc=) 8: dMlBq16YcIM7-JR7sVrQGjUo5Ts.roa (hash: i7NU7NT4PhY/w3tg6T+Z3qdRHBm2oFSaLm/74+Urx2g=) 9: f4e7IUwG3JkPasx3oPPOpKnw014.roa (hash: oT75cSQjF7ggxHOJOkz6Sxjs0hfilCF0H6NE1nJtUfo=) 10: gxtC8l8oaWA1zjOrZ9ktdsPQQVU.roa (hash: vd/vsDbZHQEzR4RjmLN3O01yjktlXhyMf/QsrpGLKZc=) 11: mNguxrQSssFTgOvDx-TtVJcngJ0.roa (hash: p4yScE1NaP9LVRZLGH/RikX/bIEDOl76JK/45ns5C9Q=) 12: mc5WmhTC2zdy8jGHzmjmVB7ABI4.crl (hash: wpnzpvXO+WiP3W9nAnbbfWm7rsME7rp8VvwxSEu9naA=) 13: tGisfrUmcm7oDtUaKLvnP0jBq0s.roa (hash: nA2OAz9Nlstpul0i0fjQIz6ieEk/T79qTn4SzXVWXBw=) 14: u_mqTybwgy-hqVDwwCNi1Bf-8tI.roa (hash: JZzfV1nFUUQsICoBUJ9//kJmxjSvH3d3D7ybB8QQr/Y=) Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/f2/cc6e99-6e5f-401b-912d-1095544c6c50/1/mc5WmhTC2zdy8jGHzmjmVB7ABI4.crl rsync://rpki.ripe.net/repository/DEFAULT/f2/cc6e99-6e5f-401b-912d-1095544c6c50/1/mc5WmhTC2zdy8jGHzmjmVB7ABI4.mft rsync://rpki.ripe.net/repository/DEFAULT/mc5WmhTC2zdy8jGHzmjmVB7ABI4.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Wed 05 Nov 2025 02:00:30 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9a:4c:98:23:62:25:e7:4e:18:2d:9f:e4:72:58:e1:fd:ee Signature Algorithm: sha256WithRSAEncryption Issuer: CN=99ce569a14c2db3772f23187ce68e6541ec0048e Validity Not Before: Nov 4 02:00:30 2025 GMT Not After : Nov 5 02:00:30 2025 GMT Subject: CN=65af777f3c3d49574db0121b1175a9ca6e5304d0 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:ac:6e:4f:16:b1:71:0e:d8:e9:7a:ef:03:c9:63: bd:86:87:39:8d:7c:07:cc:5f:4f:57:e0:0a:f4:17: b2:71:15:70:65:dd:4e:f9:34:24:78:33:72:b2:bc: f6:59:26:f0:d4:c8:98:0d:3b:61:61:aa:d5:4f:3f: d8:e3:a5:d4:a8:75:66:ce:05:bd:da:30:54:db:17: d9:e8:2d:cd:bf:09:58:8c:e3:d7:d5:7c:55:97:73: 54:ca:83:f5:a2:9d:a5:a6:ef:4e:f9:9c:6c:38:f1: 78:28:78:3e:f4:d0:57:d7:6a:15:98:d1:07:a5:f3: 01:f3:44:bb:f4:f7:9d:7c:4c:59:ed:b7:5c:4a:09: cc:2d:6c:4b:4b:46:1e:7d:4e:d0:6c:32:ee:72:bf: 6b:f4:87:a1:34:bf:45:8c:b9:7f:fa:fe:d5:24:19: 08:fc:14:71:f8:ab:1d:24:77:c9:41:99:06:64:b6: 6b:bb:b8:ab:44:e3:88:4a:42:19:8e:04:af:aa:bf: 83:4b:9f:f4:7e:24:a0:51:96:b4:c3:22:75:45:88: 04:80:d8:fe:3b:4e:ee:96:31:74:af:b0:53:36:19: ec:71:40:03:ad:44:6d:2c:94:c3:9a:c8:f6:f0:ac: 7d:7d:cf:77:18:04:ce:38:c9:73:68:29:88:2b:1a: cb:e1 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 65:AF:77:7F:3C:3D:49:57:4D:B0:12:1B:11:75:A9:CA:6E:53:04:D0 X509v3 Authority Key Identifier: keyid:99:CE:56:9A:14:C2:DB:37:72:F2:31:87:CE:68:E6:54:1E:C0:04:8E X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/mc5WmhTC2zdy8jGHzmjmVB7ABI4.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/f2/cc6e99-6e5f-401b-912d-1095544c6c50/1/mc5WmhTC2zdy8jGHzmjmVB7ABI4.mft X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/f2/cc6e99-6e5f-401b-912d-1095544c6c50/1/mc5WmhTC2zdy8jGHzmjmVB7ABI4.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption a0:c2:45:d4:69:24:d8:d1:9e:0d:9f:e8:f7:a1:73:5b:1e:51: b8:d4:37:e5:24:1b:25:1f:43:58:27:f4:c3:df:65:82:5b:94: 31:d6:23:13:4a:29:82:ba:40:05:95:e6:64:5d:0f:b4:8e:1e: 27:aa:ab:d1:9b:54:a5:dd:1e:19:3f:5e:88:a1:3f:e6:82:e4: 47:d2:82:d6:51:5c:bc:34:1d:e6:ab:22:34:71:c7:19:cd:e8: fc:84:e8:5e:f3:50:b9:76:63:68:6d:3f:ca:45:20:cd:9e:a6: a3:e0:a0:ad:fc:e1:c0:e5:a7:db:5d:10:36:09:76:c2:30:e9: f1:74:f0:49:92:22:2a:97:ea:b3:2a:a9:e3:a0:1a:57:eb:3b: 75:24:00:14:59:12:2b:b7:7f:ca:f6:c1:88:4b:8f:f6:d9:20: 01:2c:bf:d6:37:23:e9:11:6b:56:14:ed:ca:d8:ec:9c:8b:5c: 63:05:cf:e7:47:c1:9b:a6:dc:ff:a5:ca:db:f2:d9:fe:ec:28: c4:92:4d:29:fa:3f:64:d1:f7:5c:e9:43:d1:6f:d7:21:5a:00: 36:af:1e:a6:59:61:44:a1:c9:01:0e:77:bf:1e:99:c9:c0:bd: b7:ca:99:d5:f4:b3:51:88:e6:d4:f2:88:35:01:a1:d7:d6:3f: a1:c8:1f:aa -----BEGIN CERTIFICATE----- MIIFFjCCA/6gAwIBAgISAZpMmCNiJedOGC2f5HJY4f3uMA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKDk5Y2U1NjlhMTRjMmRiMzc3MmYyMzE4N2NlNjhlNjU0MWVj MDA0OGUwHhcNMjUxMTA0MDIwMDMwWhcNMjUxMTA1MDIwMDMwWjAzMTEwLwYDVQQD Eyg2NWFmNzc3ZjNjM2Q0OTU3NGRiMDEyMWIxMTc1YTljYTZlNTMwNGQwMIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEArG5PFrFxDtjpeu8DyWO9hoc5jXwH zF9PV+AK9BeycRVwZd1O+TQkeDNysrz2WSbw1MiYDTthYarVTz/Y46XUqHVmzgW9 2jBU2xfZ6C3NvwlYjOPX1XxVl3NUyoP1op2lpu9O+ZxsOPF4KHg+9NBX12oVmNEH pfMB80S79PedfExZ7bdcSgnMLWxLS0YefU7QbDLucr9r9IehNL9FjLl/+v7VJBkI /BRx+KsdJHfJQZkGZLZru7irROOISkIZjgSvqr+DS5/0fiSgUZa0wyJ1RYgEgNj+ O07uljF0r7BTNhnscUADrURtLJTDmsj28Kx9fc93GATOOMlzaCmIKxrL4QIDAQAB o4ICIjCCAh4wHQYDVR0OBBYEFGWvd388PUlXTbASGxF1qcpuUwTQMB8GA1UdIwQY MBaAFJnOVpoUwts3cvIxh85o5lQewASOMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvbWM1V21oVEMyemR5OGpHSHptam1WQjdBQkk0LmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC9mMi9jYzZlOTktNmU1Zi00MDFiLTkxMmQt MTA5NTU0NGM2YzUwLzEvbWM1V21oVEMyemR5OGpHSHptam1WQjdBQkk0Lm1mdDCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC9mMi9jYzZlOTktNmU1Zi00MDFiLTkxMmQtMTA5NTU0NGM2YzUw LzEvbWM1V21oVEMyemR5OGpHSHptam1WQjdBQkk0LmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAoMJF1Gkk 2NGeDZ/o96FzWx5RuNQ35SQbJR9DWCf0w99lgluUMdYjE0opgrpABZXmZF0PtI4e J6qr0ZtUpd0eGT9eiKE/5oLkR9KC1lFcvDQd5qsiNHHHGc3o/IToXvNQuXZjaG0/ ykUgzZ6mo+CgrfzhwOWn210QNgl2wjDp8XTwSZIiKpfqsyqp46AaV+s7dSQAFFkS K7d/yvbBiEuP9tkgASy/1jcj6RFrVhTtytjsnItcYwXP50fBm6bc/6XK2/LZ/uwo xJJNKfo/ZNH3XOlD0W/XIVoANq8epllhRKHJAQ53vx6ZycC9t8qZ1fSzUYjm1PKI NQGh19Y/ocgfqg== -----END CERTIFICATE-----Generated at Tue Nov 4 10:51:16 2025 by rpki-client