$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/fb/79e905-fb0d-4b8b-9390-50d2b70bcf31/1/8uKBD0mzb91kHDJr0d5OQtEosEY.mft File: 8uKBD0mzb91kHDJr0d5OQtEosEY.mft (raw, json) Hash identifier: FIMZEF1DnrJ+dEvLrVW6wTk00JQrlDfJ0K7ISka+gy4= Subject key identifier: 09:08:D1:BB:D9:72:1D:8F:86:D7:7F:1C:90:79:6A:77:F6:CD:AA:2F Authority key identifier: F2:E2:81:0F:49:B3:6F:DD:64:1C:32:6B:D1:DE:4E:42:D1:28:B0:46 Certificate issuer: /CN=f2e2810f49b36fdd641c326bd1de4e42d128b046 Certificate serial: 019A515108D876491E9780CB30555E5024E4 Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/8uKBD0mzb91kHDJr0d5OQtEosEY.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/fb/79e905-fb0d-4b8b-9390-50d2b70bcf31/1/8uKBD0mzb91kHDJr0d5OQtEosEY.mft Manifest number: 171C Signing time: Wed 05 Nov 2025 00:00:56 +0000 Manifest this update: Wed 05 Nov 2025 00:00:56 +0000 Manifest next update: Thu 06 Nov 2025 00:00:56 +0000 Files and hashes: 1: 1nLm5M5xfJ_suNGM5E1Zv1P9buc.roa (hash: 8x4G+E8iExmOXonfPhkgFAssRVwUmXgRDU/QwrPhfTc=) 2: 8uKBD0mzb91kHDJr0d5OQtEosEY.crl (hash: 5HlWKF9GfQCAExJBkOlB0urHLx7EuCBILJeM0W/cPMQ=) 3: LRM9_QXJ86lLn_T4yr6pQZsd-6U.roa (hash: O97zVnycTINnlYntMUnMI33GyBSK5H4R2ai1eQR3zfs=) 4: Lfi2kFGwKCjTFh-UgGwG9fE3y28.roa (hash: vsaKPg/3Dci9H1drLTZRN5KQySI72yp3XcQ7k6Dlcjo=) 5: _rcbdTd7xszqNhgAb_FkQpQyFAU.roa (hash: tlTacIT/p2BLnUW4V7ZFwYt3E+NE62BrqrDQeWEcWEY=) 6: cSIsSraiS7nIkZaNHDPeLhmfWzw.roa (hash: 6RDnXeZI7Aggjdy420rt58R6tW8oEB+ao9gxbA9zhLY=) 7: cT2NBd6CzvlyjEEfvaGsHGPxIbc.roa (hash: 5qkGkFqB6MaSnnKFQR4ILKQDwkrOhYsEol0WfvvJ+hs=) 8: mgsVdxyrFBjubnGQwn9ZD0Aa8KQ.roa (hash: WUYiTP5VTCdXuJgIU+Sgp6znUUnvoPyUsuU1tYAduHA=) 9: qhtmZa0GBJu-LNeg5d5k1hem6bE.roa (hash: Uh/IbFG52qMt7jSUYgnpbLvKrotH1qlqQb6PDTI4TP4=) 10: wodM1-EUQJUVgPu2FeLNzhcjNAQ.roa (hash: oqpoLkjU7X7RENp32UMSCTEvk2YhpXGRDxHAfJ9Hiks=) Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/fb/79e905-fb0d-4b8b-9390-50d2b70bcf31/1/8uKBD0mzb91kHDJr0d5OQtEosEY.crl rsync://rpki.ripe.net/repository/DEFAULT/fb/79e905-fb0d-4b8b-9390-50d2b70bcf31/1/8uKBD0mzb91kHDJr0d5OQtEosEY.mft rsync://rpki.ripe.net/repository/DEFAULT/8uKBD0mzb91kHDJr0d5OQtEosEY.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Wed 05 Nov 2025 18:00:03 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9a:51:51:08:d8:76:49:1e:97:80:cb:30:55:5e:50:24:e4 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=f2e2810f49b36fdd641c326bd1de4e42d128b046 Validity Not Before: Nov 5 00:00:56 2025 GMT Not After : Nov 6 00:00:56 2025 GMT Subject: CN=0908d1bbd9721d8f86d77f1c90796a77f6cdaa2f Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:9f:83:23:38:cf:e6:2c:0f:1b:c7:45:a3:43:75: 55:1c:c1:7e:94:bf:dc:7c:02:7b:77:c1:7d:bd:c7: 9e:c8:60:80:d3:3b:65:38:b5:35:d8:87:42:4d:e9: c4:c3:63:38:c2:07:77:67:89:7e:c9:a8:62:3e:72: ad:3e:78:0a:21:39:98:5a:4c:87:03:32:78:7b:93: 09:e1:10:51:e8:3d:e1:6f:77:25:bb:7a:24:8e:f7: 9e:39:45:62:5a:d4:13:2d:82:fe:85:cf:1c:7a:5f: cc:df:08:ce:64:b6:cf:78:d8:31:11:e6:e7:26:00: e3:fd:8f:d8:9a:c9:ea:6f:04:32:e0:e4:ff:19:f8: bd:6e:94:25:2e:f6:8b:67:71:76:f9:45:8e:10:ac: 9e:4b:e0:92:55:f1:a5:8f:c2:86:43:a4:8f:91:92: 8b:b4:a5:de:a1:0b:65:dc:9f:99:55:cd:ab:1f:2e: f5:1e:44:9f:5d:1c:2c:18:03:0c:4a:51:de:61:28: 8a:1e:c3:f2:ac:6d:bb:80:5c:86:d8:70:18:cf:b1: ea:d9:a8:4a:98:4f:80:6a:2e:db:aa:5d:80:23:75: af:94:4e:5d:ff:97:3d:e1:1c:ee:50:48:ec:93:e5: d7:e3:26:4b:c0:59:b5:7e:7d:47:1b:7f:89:d1:f2: 57:5d Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 09:08:D1:BB:D9:72:1D:8F:86:D7:7F:1C:90:79:6A:77:F6:CD:AA:2F X509v3 Authority Key Identifier: keyid:F2:E2:81:0F:49:B3:6F:DD:64:1C:32:6B:D1:DE:4E:42:D1:28:B0:46 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/8uKBD0mzb91kHDJr0d5OQtEosEY.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/fb/79e905-fb0d-4b8b-9390-50d2b70bcf31/1/8uKBD0mzb91kHDJr0d5OQtEosEY.mft X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/fb/79e905-fb0d-4b8b-9390-50d2b70bcf31/1/8uKBD0mzb91kHDJr0d5OQtEosEY.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 45:0c:b0:4e:d1:e1:9a:0f:a0:0e:7c:1c:55:e5:58:29:14:16: 79:4a:cc:1d:fe:36:30:ed:5b:29:50:f2:1f:19:00:0b:a5:82: 08:c2:4f:b4:6e:59:72:8e:ce:0f:62:52:89:6d:f0:be:0b:bd: 29:a7:2c:86:50:c6:03:05:a9:9c:da:e7:d9:af:55:48:d4:08: b3:59:9e:cb:e4:e6:b1:39:4f:2f:e6:a1:6a:96:19:41:bc:b3: e9:cb:cf:e1:6f:cf:e6:81:c2:25:99:f2:5c:f7:58:29:b3:a9: 6c:20:8b:6e:02:51:a4:b1:a5:1c:05:05:e2:b2:39:88:fe:c8: f4:5b:6a:c5:1a:a8:76:9d:41:0e:6c:ab:3d:15:63:46:63:70: 8b:f4:b0:28:38:b0:20:5a:fa:a0:24:45:9a:5c:fc:3d:13:b8: 73:00:63:13:38:20:08:dc:bd:a4:e6:a6:43:1a:a2:96:d2:94: 5d:a7:7e:75:0e:e4:1a:e4:1a:67:05:7c:50:ea:50:9d:46:a3: 49:01:b9:a6:84:1d:81:ed:2c:fe:fa:aa:74:41:86:b3:8c:c1: ff:fd:d4:23:14:c9:71:53:58:66:39:d2:d8:eb:3d:e5:b0:dc: fb:9a:1f:21:54:1e:22:c6:b7:80:81:3f:42:42:f7:83:71:5a: ce:b8:88:da -----BEGIN CERTIFICATE----- MIIFFjCCA/6gAwIBAgISAZpRUQjYdkkel4DLMFVeUCTkMA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKGYyZTI4MTBmNDliMzZmZGQ2NDFjMzI2YmQxZGU0ZTQyZDEy OGIwNDYwHhcNMjUxMTA1MDAwMDU2WhcNMjUxMTA2MDAwMDU2WjAzMTEwLwYDVQQD EygwOTA4ZDFiYmQ5NzIxZDhmODZkNzdmMWM5MDc5NmE3N2Y2Y2RhYTJmMIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAn4MjOM/mLA8bx0WjQ3VVHMF+lL/c fAJ7d8F9vceeyGCA0ztlOLU12IdCTenEw2M4wgd3Z4l+yahiPnKtPngKITmYWkyH AzJ4e5MJ4RBR6D3hb3clu3okjveeOUViWtQTLYL+hc8cel/M3wjOZLbPeNgxEebn JgDj/Y/YmsnqbwQy4OT/Gfi9bpQlLvaLZ3F2+UWOEKyeS+CSVfGlj8KGQ6SPkZKL tKXeoQtl3J+ZVc2rHy71HkSfXRwsGAMMSlHeYSiKHsPyrG27gFyG2HAYz7Hq2ahK mE+Aai7bql2AI3WvlE5d/5c94RzuUEjsk+XX4yZLwFm1fn1HG3+J0fJXXQIDAQAB o4ICIjCCAh4wHQYDVR0OBBYEFAkI0bvZch2Phtd/HJB5anf2zaovMB8GA1UdIwQY MBaAFPLigQ9Js2/dZBwya9HeTkLRKLBGMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvOHVLQkQwbXpiOTFrSERKcjBkNU9RdEVvc0VZLmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC9mYi83OWU5MDUtZmIwZC00YjhiLTkzOTAt NTBkMmI3MGJjZjMxLzEvOHVLQkQwbXpiOTFrSERKcjBkNU9RdEVvc0VZLm1mdDCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC9mYi83OWU5MDUtZmIwZC00YjhiLTkzOTAtNTBkMmI3MGJjZjMx LzEvOHVLQkQwbXpiOTFrSERKcjBkNU9RdEVvc0VZLmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEARQywTtHh mg+gDnwcVeVYKRQWeUrMHf42MO1bKVDyHxkAC6WCCMJPtG5Zco7OD2JSiW3wvgu9 KacshlDGAwWpnNrn2a9VSNQIs1mey+TmsTlPL+ahapYZQbyz6cvP4W/P5oHCJZny XPdYKbOpbCCLbgJRpLGlHAUF4rI5iP7I9FtqxRqodp1BDmyrPRVjRmNwi/SwKDiw IFr6oCRFmlz8PRO4cwBjEzggCNy9pOamQxqiltKUXad+dQ7kGuQaZwV8UOpQnUaj SQG5poQdge0s/vqqdEGGs4zB//3UIxTJcVNYZjnS2Os95bDc+5ofIVQeIsa3gIE/ QkL3g3FazriI2g== -----END CERTIFICATE-----Generated at Wed Nov 5 02:00:18 2025 by rpki-client