$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/fa/a0e01a-9bbc-44ee-98a3-597b6e2492ab/1/u6Nc-KtvPqoq663Z4jc97AiTYl4.mft File: u6Nc-KtvPqoq663Z4jc97AiTYl4.mft (raw, json) Hash identifier: 0jF0SjFEvrixDACLiokyTT5a2/AdW+PktWfOADxLETw= Subject key identifier: 00:FD:9B:20:9B:EC:5D:4F:F6:DA:28:36:E5:C9:19:43:3D:F4:39:7B Authority key identifier: BB:A3:5C:F8:AB:6F:3E:AA:2A:EB:AD:D9:E2:37:3D:EC:08:93:62:5E Certificate issuer: /CN=bba35cf8ab6f3eaa2aebadd9e2373dec0893625e Certificate serial: 019A4E4FB5A468E0DACCE385838A80D371DD Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/u6Nc-KtvPqoq663Z4jc97AiTYl4.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/fa/a0e01a-9bbc-44ee-98a3-597b6e2492ab/1/u6Nc-KtvPqoq663Z4jc97AiTYl4.mft Manifest number: 14DB Signing time: Tue 04 Nov 2025 10:00:37 +0000 Manifest this update: Tue 04 Nov 2025 10:00:37 +0000 Manifest next update: Wed 05 Nov 2025 10:00:37 +0000 Files and hashes: 1: BrzMotRwWum6-plh7okwXahkOEw.roa (hash: KNrByvrRESfQLIHd88NCHYJK86NO5i3vBaQCBV7EA7E=) 2: GtppMOhe-qj4-qKPQwYM7Bndra0.roa (hash: DZ7bcQ1MagW/CKYzAoT3tgdmQpZud4AtQbSCkk/MCKU=) 3: IICQjXJW2EEkB1v0o8BM6izDgbM.roa (hash: 7Xb1rw7YXZ8yAd+5aXbmrrlzp2Uxli0xSynXq48MEYc=) 4: PZNxNz45jwhU2f2Vk-rUkU1xuZQ.roa (hash: F+PZJf4GxvF8kf0ckwm9Pxo9WyYXyL9ytkInNQ2bSTY=) 5: _8UTREX8Q0a63ua_dGhbhojBdUA.roa (hash: DL1eDSZaMbokl5Ydp9t7oF5cl2AwIO6gEepk09/TZDc=) 6: _kZUir8n1AqIU0qtCf0tRxbZpds.roa (hash: i0Gwqdkr5/j/wsvWbuGrhf4MKjNKMEm96rfhCoH477Y=) 7: bLyBa-YU5CTUEUfCcyjMqyKWtCo.roa (hash: +pvmNAe4DVU0G8NksRdtjc76cKcR1QvaqfbXLphvYek=) 8: c7nY0rggG6raEqDRkehzGz_VYtA.roa (hash: EhNdOxX4vcohdV7gKrHWK7+fsvt8pGFZe0311VfzJ1M=) 9: clWD5iSFcHwGMTWctP6MgbhffFI.roa (hash: XeY9jpVy1coomoksHYwsuAsFdSJEnTf0ShOjmRYUnB0=) 10: hEnYun4dBmY4NXRm3bASEYEJDP0.roa (hash: 9ED8ExgB7hEhZTw92vukURu1ltjtyM6wWC7Qc0GRBP4=) 11: tTkbfZxula834alUiiKULvFUhEY.roa (hash: 53gfHOJtFDupMS3Pl17R4clQixHqHEmtoBj+F2KX9dc=) 12: u6Nc-KtvPqoq663Z4jc97AiTYl4.crl (hash: wGTAInjCkvxfte/il3bA7dbWgQ/XqlEKkWSv0+zdcrA=) Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/fa/a0e01a-9bbc-44ee-98a3-597b6e2492ab/1/u6Nc-KtvPqoq663Z4jc97AiTYl4.crl rsync://rpki.ripe.net/repository/DEFAULT/fa/a0e01a-9bbc-44ee-98a3-597b6e2492ab/1/u6Nc-KtvPqoq663Z4jc97AiTYl4.mft rsync://rpki.ripe.net/repository/DEFAULT/u6Nc-KtvPqoq663Z4jc97AiTYl4.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Wed 05 Nov 2025 09:00:03 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9a:4e:4f:b5:a4:68:e0:da:cc:e3:85:83:8a:80:d3:71:dd Signature Algorithm: sha256WithRSAEncryption Issuer: CN=bba35cf8ab6f3eaa2aebadd9e2373dec0893625e Validity Not Before: Nov 4 10:00:37 2025 GMT Not After : Nov 5 10:00:37 2025 GMT Subject: CN=00fd9b209bec5d4ff6da2836e5c919433df4397b Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:b7:55:4c:f5:9b:4b:c9:ff:15:df:0b:4f:e0:a8: 94:a4:69:e5:ec:bf:3a:80:c4:c2:02:e0:76:54:30: 41:20:83:67:e2:5f:da:d5:0f:42:80:8a:c7:d0:f2: 18:2c:0f:3f:e5:33:a2:c0:bf:d4:86:a9:ad:cd:3e: 31:43:a9:31:09:f4:aa:49:21:3c:21:30:ec:07:30: 46:30:6a:c9:fa:f2:37:c2:ee:e9:41:34:9f:00:d5: 7d:46:23:ec:93:a6:fe:76:61:4d:e4:97:af:2a:12: fc:96:db:d5:96:7e:bc:4a:f0:8c:1c:db:48:d0:d6: 29:7d:50:4b:25:aa:ec:c2:b3:b8:4a:68:67:1d:dd: 08:43:b5:12:6c:50:3a:7e:54:0f:07:cf:a4:84:d5: 3b:10:ed:3d:4d:56:26:c9:8b:6b:b9:01:41:4c:12: 43:4c:64:52:9e:62:4c:3d:f7:a8:5e:4f:b4:2c:5a: 9f:f9:37:e9:12:64:20:92:67:88:a4:34:b1:e6:c8: 3b:3c:9a:b6:57:4c:c4:ad:53:e2:7d:cc:71:6d:5f: ee:43:8b:0e:82:ea:47:bf:bb:52:87:24:fb:a2:66: 40:c9:5a:35:e8:86:f5:3f:e4:3b:60:b8:48:b3:65: c7:27:45:a0:a8:57:28:15:a4:a5:c1:d8:79:f1:25: 31:35 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 00:FD:9B:20:9B:EC:5D:4F:F6:DA:28:36:E5:C9:19:43:3D:F4:39:7B X509v3 Authority Key Identifier: keyid:BB:A3:5C:F8:AB:6F:3E:AA:2A:EB:AD:D9:E2:37:3D:EC:08:93:62:5E X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/u6Nc-KtvPqoq663Z4jc97AiTYl4.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/fa/a0e01a-9bbc-44ee-98a3-597b6e2492ab/1/u6Nc-KtvPqoq663Z4jc97AiTYl4.mft X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/fa/a0e01a-9bbc-44ee-98a3-597b6e2492ab/1/u6Nc-KtvPqoq663Z4jc97AiTYl4.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 39:32:a0:f0:e6:7b:ce:e8:d5:22:de:c3:f9:15:b4:93:53:7b: 33:aa:41:a5:a8:1b:89:dc:37:da:c1:b8:b3:c2:24:9f:cb:12: df:35:86:59:34:0b:a7:d3:0e:62:16:06:39:f8:c3:16:d6:ce: 14:1a:19:6e:97:3f:b7:f8:f4:8e:18:4e:aa:57:29:b1:b6:af: 93:8e:5b:73:63:d1:8f:d2:1f:48:e9:a5:2f:fc:da:ef:88:09: e6:34:eb:3b:30:18:cc:41:50:29:84:01:ee:be:74:14:29:8e: a5:2e:ed:26:6d:27:05:10:e0:e2:2f:0b:08:c8:1d:1c:4d:02: 2f:51:8b:e8:3e:38:99:d2:4e:a5:64:d5:4f:b2:86:ec:35:03: 19:4e:a8:38:93:d2:c7:bc:88:39:c7:86:61:7a:6a:61:18:3f: a8:2c:b3:a3:49:50:3f:df:48:8b:05:1e:99:55:d3:1b:ae:79: 54:8a:ec:ad:a7:3f:eb:db:55:ce:36:08:3e:a5:c8:5c:7f:63: 20:db:f0:b0:90:24:4e:57:2b:ff:09:b4:9d:15:38:76:68:92: 19:d1:df:78:20:a7:21:72:a2:15:a7:5f:54:dc:9c:2b:c7:7a: 71:03:b8:f5:85:7a:3a:de:e9:fd:68:f8:f2:38:3e:fc:b8:a2: 91:4f:11:a0 -----BEGIN CERTIFICATE----- MIIFFjCCA/6gAwIBAgISAZpOT7WkaODazOOFg4qA03HdMA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKGJiYTM1Y2Y4YWI2ZjNlYWEyYWViYWRkOWUyMzczZGVjMDg5 MzYyNWUwHhcNMjUxMTA0MTAwMDM3WhcNMjUxMTA1MTAwMDM3WjAzMTEwLwYDVQQD EygwMGZkOWIyMDliZWM1ZDRmZjZkYTI4MzZlNWM5MTk0MzNkZjQzOTdiMIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAt1VM9ZtLyf8V3wtP4KiUpGnl7L86 gMTCAuB2VDBBIINn4l/a1Q9CgIrH0PIYLA8/5TOiwL/UhqmtzT4xQ6kxCfSqSSE8 ITDsBzBGMGrJ+vI3wu7pQTSfANV9RiPsk6b+dmFN5JevKhL8ltvVln68SvCMHNtI 0NYpfVBLJarswrO4SmhnHd0IQ7USbFA6flQPB8+khNU7EO09TVYmyYtruQFBTBJD TGRSnmJMPfeoXk+0LFqf+TfpEmQgkmeIpDSx5sg7PJq2V0zErVPifcxxbV/uQ4sO gupHv7tShyT7omZAyVo16Ib1P+Q7YLhIs2XHJ0WgqFcoFaSlwdh58SUxNQIDAQAB o4ICIjCCAh4wHQYDVR0OBBYEFAD9myCb7F1P9tooNuXJGUM99Dl7MB8GA1UdIwQY MBaAFLujXPirbz6qKuut2eI3PewIk2JeMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvdTZOYy1LdHZQcW9xNjYzWjRqYzk3QWlUWWw0LmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC9mYS9hMGUwMWEtOWJiYy00NGVlLTk4YTMt NTk3YjZlMjQ5MmFiLzEvdTZOYy1LdHZQcW9xNjYzWjRqYzk3QWlUWWw0Lm1mdDCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC9mYS9hMGUwMWEtOWJiYy00NGVlLTk4YTMtNTk3YjZlMjQ5MmFi LzEvdTZOYy1LdHZQcW9xNjYzWjRqYzk3QWlUWWw0LmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAOTKg8OZ7 zujVIt7D+RW0k1N7M6pBpagbidw32sG4s8Ikn8sS3zWGWTQLp9MOYhYGOfjDFtbO FBoZbpc/t/j0jhhOqlcpsbavk45bc2PRj9IfSOmlL/za74gJ5jTrOzAYzEFQKYQB 7r50FCmOpS7tJm0nBRDg4i8LCMgdHE0CL1GL6D44mdJOpWTVT7KG7DUDGU6oOJPS x7yIOceGYXpqYRg/qCyzo0lQP99IiwUemVXTG655VIrsrac/69tVzjYIPqXIXH9j INvwsJAkTlcr/wm0nRU4dmiSGdHfeCCnIXKiFadfVNycK8d6cQO49YV6Ot7p/Wj4 8jg+/LiikU8RoA== -----END CERTIFICATE-----Generated at Tue Nov 4 19:12:50 2025 by rpki-client