$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/f9/488f61-2f00-4639-97b8-d24f562dedd2/1/52ASbc54vBbmbC5udjWEisRoRq8.mft File: 52ASbc54vBbmbC5udjWEisRoRq8.mft (raw, json) Hash identifier: 90Rkq2LQ2gGAB+7LFoiAVk44/zkJcrwCc8qLE+7a4P0= Subject key identifier: B5:0B:6E:57:34:F4:2E:1C:57:13:56:0E:2F:0E:0A:88:A6:03:94:36 Authority key identifier: E7:60:12:6D:CE:78:BC:16:E6:6C:2E:6E:76:35:84:8A:C4:68:46:AF Certificate issuer: /CN=e760126dce78bc16e66c2e6e7635848ac46846af Certificate serial: 019A4E8642FC38F680DA62711FF3FD9748CB Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/52ASbc54vBbmbC5udjWEisRoRq8.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/f9/488f61-2f00-4639-97b8-d24f562dedd2/1/52ASbc54vBbmbC5udjWEisRoRq8.mft Manifest number: 1755 Signing time: Tue 04 Nov 2025 11:00:12 +0000 Manifest this update: Tue 04 Nov 2025 11:00:12 +0000 Manifest next update: Wed 05 Nov 2025 11:00:12 +0000 Files and hashes: 1: 52ASbc54vBbmbC5udjWEisRoRq8.crl (hash: mI3SXDqwDk7NPP8Bkjpf9eY1Yxo8V7jaqmFl5Ayc+gM=) 2: 7YzRWXLDcfjfZ1pfSykSzsi_Bqo.roa (hash: upRBCre7SZMIKE1wJY8xBkRe6ItlC6jUoHp+iPPL2jY=) 3: 7tiEv9a2cte9CpBTPcqjs8xnBKQ.roa (hash: Lp0nRST7H/IZB0m5wIyra+a/lX3Kx1yfYMfJAqiypu0=) 4: MrqpvKVhGghgWqjcBqKvEuXDI-w.roa (hash: 2m6ct1yYKNn97oNHEpEMtqOhuEyZV5Dslxg+dpwmv70=) 5: cHgsLum03vUPk1ZqgWFlR06D1Gs.roa (hash: cQZtsmDbQpAD/17b4zQranEZKH1IDqAE5jHDvC9CNKs=) 6: is8dVp921DPXYcHh7pDsTzSoJ-w.roa (hash: KpgLLvtSu7nnsU0hZtCzNXV6HCNEWA+tBN4AkkMJjo0=) 7: kPSNnw4_4qELTdWvaGuzZV1m1HA.roa (hash: 4wdK73NzeZ3ZvPINCQjy0JUV5WCBpYsSrh/XOjnZGIg=) 8: opmTxamDTTGhXXB97pQEAvfnlEA.roa (hash: +a21sRDHCzkVFGym6Uca5XjXTPbBTo6ZNir2uKNCj3g=) 9: uQJ8uXAtBqaSg0chFS7wIEPvMFk.roa (hash: OOagBGLstHbMyzpz2lFNp3hjWcGgUfG7Q/Mr5UAMmgY=) 10: uQU12zYitg_amaVlwJpXM9XCEAY.roa (hash: IYdpyZTPtIiqFILl8uMqJOM+CkHBFW5wOhN+3p4JTWU=) 11: wsqrJncE8vGcQKRwVGIW7jNdJzQ.roa (hash: QMuERI1zOel2P+0Zvoc3OxuHc55kEcoxlWPyCWA8NgA=) Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/f9/488f61-2f00-4639-97b8-d24f562dedd2/1/52ASbc54vBbmbC5udjWEisRoRq8.crl rsync://rpki.ripe.net/repository/DEFAULT/f9/488f61-2f00-4639-97b8-d24f562dedd2/1/52ASbc54vBbmbC5udjWEisRoRq8.mft rsync://rpki.ripe.net/repository/DEFAULT/52ASbc54vBbmbC5udjWEisRoRq8.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Wed 05 Nov 2025 09:00:03 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9a:4e:86:42:fc:38:f6:80:da:62:71:1f:f3:fd:97:48:cb Signature Algorithm: sha256WithRSAEncryption Issuer: CN=e760126dce78bc16e66c2e6e7635848ac46846af Validity Not Before: Nov 4 11:00:12 2025 GMT Not After : Nov 5 11:00:12 2025 GMT Subject: CN=b50b6e5734f42e1c5713560e2f0e0a88a6039436 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:a4:7c:41:ae:46:05:57:9d:58:46:79:2e:77:04: 64:d9:9b:02:ad:75:51:1f:24:bc:fb:7c:b7:2d:ab: 64:c0:3c:f4:7e:59:53:75:0e:d5:4a:37:fd:75:21: df:b9:db:e6:e0:38:53:65:d0:54:0a:95:b9:e1:bf: 7a:a2:f7:2e:79:f3:38:0e:85:20:d2:36:45:65:f3: b3:98:f8:95:8c:3f:e7:31:b3:29:9d:36:ef:68:bf: a2:e9:40:4d:b1:fd:4e:9d:70:d5:37:ea:6b:dc:eb: 6a:93:42:ee:2e:b5:dd:96:eb:b7:1f:95:96:40:ca: 2f:e7:06:5c:b1:2f:6a:de:40:75:ad:40:40:aa:3e: 08:a2:aa:70:5c:85:2e:a8:c5:f2:39:6d:7a:8c:63: 02:c9:40:14:46:4f:f2:cd:06:33:8f:f5:9c:7d:40: f6:d5:72:9a:8d:2a:aa:a8:f2:2b:89:60:78:27:64: 47:9c:82:31:7b:b8:d2:09:d8:d5:0d:c2:a6:41:a0: 39:64:c1:f3:de:7a:90:bf:2e:c2:e6:33:d7:a9:61: 22:e0:22:3c:bc:99:d9:7f:45:4d:c0:2e:00:a5:8e: bf:6a:73:0d:7c:15:01:e4:8c:23:91:35:bb:16:81: 27:b9:35:02:8a:ed:9e:34:bd:21:4e:5c:07:2b:7e: 54:2f Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: B5:0B:6E:57:34:F4:2E:1C:57:13:56:0E:2F:0E:0A:88:A6:03:94:36 X509v3 Authority Key Identifier: keyid:E7:60:12:6D:CE:78:BC:16:E6:6C:2E:6E:76:35:84:8A:C4:68:46:AF X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/52ASbc54vBbmbC5udjWEisRoRq8.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/f9/488f61-2f00-4639-97b8-d24f562dedd2/1/52ASbc54vBbmbC5udjWEisRoRq8.mft X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/f9/488f61-2f00-4639-97b8-d24f562dedd2/1/52ASbc54vBbmbC5udjWEisRoRq8.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 59:82:72:c6:ba:ca:28:a9:74:b0:8b:7f:33:7e:99:c6:35:57: e5:39:4c:06:99:83:89:ae:7f:2d:04:83:8d:30:95:d2:50:3c: 30:ac:e9:29:06:6a:9a:ff:18:5c:b8:84:a5:72:d9:6b:14:dd: 8a:44:9c:c1:83:b2:67:dc:e0:b8:55:10:39:56:96:8b:50:ed: e5:a3:4b:a9:83:11:22:8a:0a:ee:1e:35:f6:1b:a9:83:de:1b: b8:fb:73:00:7f:b3:37:93:ee:97:d1:d3:b9:6d:fb:08:1a:4f: 30:02:50:20:59:28:78:0d:01:3a:aa:0f:2f:f2:dc:fb:ae:05: 74:cc:b1:db:5b:90:20:47:33:aa:4c:4a:f4:97:62:65:33:a4: 5d:a7:8d:3d:37:26:b0:ab:f9:fd:4d:4d:f7:e8:50:ad:e1:3d: 09:64:b5:27:fc:8f:90:fe:68:07:24:b1:3c:ff:e1:42:e8:ce: 4a:43:7e:08:71:7b:9f:86:cc:21:b4:60:71:77:f6:7e:8b:8a: a3:79:a2:68:5d:73:52:cd:d9:34:91:6e:eb:7a:a2:51:ac:70: c4:cb:6f:fd:64:56:43:71:9c:83:b4:2f:a0:66:f1:a8:9e:23: ea:b9:22:e1:18:a6:19:16:fe:e9:fc:10:61:7e:67:68:f4:c6: a2:1b:2d:3c -----BEGIN CERTIFICATE----- MIIFFjCCA/6gAwIBAgISAZpOhkL8OPaA2mJxH/P9l0jLMA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKGU3NjAxMjZkY2U3OGJjMTZlNjZjMmU2ZTc2MzU4NDhhYzQ2 ODQ2YWYwHhcNMjUxMTA0MTEwMDEyWhcNMjUxMTA1MTEwMDEyWjAzMTEwLwYDVQQD EyhiNTBiNmU1NzM0ZjQyZTFjNTcxMzU2MGUyZjBlMGE4OGE2MDM5NDM2MIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEApHxBrkYFV51YRnkudwRk2ZsCrXVR HyS8+3y3LatkwDz0fllTdQ7VSjf9dSHfudvm4DhTZdBUCpW54b96ovcuefM4DoUg 0jZFZfOzmPiVjD/nMbMpnTbvaL+i6UBNsf1OnXDVN+pr3Otqk0LuLrXdluu3H5WW QMov5wZcsS9q3kB1rUBAqj4IoqpwXIUuqMXyOW16jGMCyUAURk/yzQYzj/WcfUD2 1XKajSqqqPIriWB4J2RHnIIxe7jSCdjVDcKmQaA5ZMHz3nqQvy7C5jPXqWEi4CI8 vJnZf0VNwC4ApY6/anMNfBUB5IwjkTW7FoEnuTUCiu2eNL0hTlwHK35ULwIDAQAB o4ICIjCCAh4wHQYDVR0OBBYEFLULblc09C4cVxNWDi8OCoimA5Q2MB8GA1UdIwQY MBaAFOdgEm3OeLwW5mwubnY1hIrEaEavMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvNTJBU2JjNTR2QmJtYkM1dWRqV0Vpc1JvUnE4LmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC9mOS80ODhmNjEtMmYwMC00NjM5LTk3Yjgt ZDI0ZjU2MmRlZGQyLzEvNTJBU2JjNTR2QmJtYkM1dWRqV0Vpc1JvUnE4Lm1mdDCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC9mOS80ODhmNjEtMmYwMC00NjM5LTk3YjgtZDI0ZjU2MmRlZGQy LzEvNTJBU2JjNTR2QmJtYkM1dWRqV0Vpc1JvUnE4LmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAWYJyxrrK KKl0sIt/M36ZxjVX5TlMBpmDia5/LQSDjTCV0lA8MKzpKQZqmv8YXLiEpXLZaxTd ikScwYOyZ9zguFUQOVaWi1Dt5aNLqYMRIooK7h419hupg94buPtzAH+zN5Pul9HT uW37CBpPMAJQIFkoeA0BOqoPL/Lc+64FdMyx21uQIEczqkxK9JdiZTOkXaeNPTcm sKv5/U1N9+hQreE9CWS1J/yPkP5oBySxPP/hQujOSkN+CHF7n4bMIbRgcXf2fouK o3miaF1zUs3ZNJFu63qiUaxwxMtv/WRWQ3Gcg7QvoGbxqJ4j6rki4RimGRb+6fwQ YX5naPTGohstPA== -----END CERTIFICATE-----Generated at Tue Nov 4 14:53:56 2025 by rpki-client