$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/fd/1ccf25-20de-4b2e-a0e1-de4acf447fae/1/eXmGPOqCrrjp3zhLOapRdvS8-mE.mft File: eXmGPOqCrrjp3zhLOapRdvS8-mE.mft (raw, json) Hash identifier: +A/2bN3UZ3bHau0TCA+iW5WZmdQ3Cmi0klefQn4HBYY= Subject key identifier: 5E:8B:4E:94:B0:4E:F6:68:F9:8C:E9:FE:54:6F:1C:8E:CB:B5:1B:A0 Authority key identifier: 79:79:86:3C:EA:82:AE:B8:E9:DF:38:4B:39:AA:51:76:F4:BC:FA:61 Certificate issuer: /CN=7979863cea82aeb8e9df384b39aa5176f4bcfa61 Certificate serial: 019A52D1BF6A6883256660694227915A1487 Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/eXmGPOqCrrjp3zhLOapRdvS8-mE.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/fd/1ccf25-20de-4b2e-a0e1-de4acf447fae/1/eXmGPOqCrrjp3zhLOapRdvS8-mE.mft Manifest number: 1732 Signing time: Wed 05 Nov 2025 07:01:08 +0000 Manifest this update: Wed 05 Nov 2025 07:01:08 +0000 Manifest next update: Thu 06 Nov 2025 07:01:08 +0000 Files and hashes: 1: 31B5K7vkAfS9R2wkGuV5dcAnL2Y.roa (hash: O89Ry4yQ6lrE+ydQl9ey5gr4XCsYEJZz/2ZEEVTUklM=) 2: 8rBNukWPHPmFUpvlkGmzTz1-HwA.roa (hash: tMcco5dxWlTIQfy3zxbp0EQ9rOWiTqcDWIU/jeQq+bM=) 3: AuIXsACFZFXiRbUNGuqesbMnYNk.roa (hash: AtCFXdHEG1WMWeYjbN29zoI3CDK+hXSx8POzE7WNroc=) 4: DrV2xA7Yd-hZFiq3pO9rygl2qg0.roa (hash: TVf6eSJU2syGlD0lzcyv3W0pP95vSrCKIhPdX0AUyh0=) 5: GGh-0xxwn6ceElDQMHRGmEsQE-s.roa (hash: P3CSh7y+NvPz/ZjtWmpED7vAzzUGfZNIvd2EgvFxP9s=) 6: NmG_HXr74xhss_g6667RcEUKRLI.roa (hash: w4iJzBXqF4+nBtbBp9H18XsHRW5050KpbO/LhdFePIo=) 7: OeWAQhxz5E883h7RJjR3cmkBM6o.roa (hash: SpK+6FCkO+sEnLY+zrox32fWgUHKX5y3hElZSDHvkaU=) 8: ZVJfIWSCZIVSTo9PXiEHKhrJCaM.roa (hash: REntsWwwRsVHSdpCDEerInchIORTXEiS2eQnOBf/kfw=) 9: eXmGPOqCrrjp3zhLOapRdvS8-mE.crl (hash: Fzo5jic35+KsaEQ+FQklKP3ZJpdJpGGExcDrQ6Lwl/M=) 10: jRyIBgdtXReJ9oHBVuw4FaEWM-0.roa (hash: ZszsBIs7CJREdsDcllx0N3t5IqBzFvq0JJZ2fLMu8PY=) 11: pGXlBe8mvqpUo_lCHeYFkShv2K8.roa (hash: rjd6cps92Ja94+46vbe5lft5y/2s10gUp3FV0e699LY=) 12: zIH5sPlMx70fyP1Az3Csaj7WyTI.roa (hash: 2aeoW9K+GdEGc7tRsUNmCwR+CPzyrfG3s/F0EGb6/Pk=) Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/fd/1ccf25-20de-4b2e-a0e1-de4acf447fae/1/eXmGPOqCrrjp3zhLOapRdvS8-mE.crl rsync://rpki.ripe.net/repository/DEFAULT/fd/1ccf25-20de-4b2e-a0e1-de4acf447fae/1/eXmGPOqCrrjp3zhLOapRdvS8-mE.mft rsync://rpki.ripe.net/repository/DEFAULT/eXmGPOqCrrjp3zhLOapRdvS8-mE.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Thu 06 Nov 2025 03:00:03 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9a:52:d1:bf:6a:68:83:25:66:60:69:42:27:91:5a:14:87 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=7979863cea82aeb8e9df384b39aa5176f4bcfa61 Validity Not Before: Nov 5 07:01:08 2025 GMT Not After : Nov 6 07:01:08 2025 GMT Subject: CN=5e8b4e94b04ef668f98ce9fe546f1c8ecbb51ba0 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:bd:ef:a8:b5:0c:ca:71:c4:7e:61:1f:59:68:b2: 47:e5:25:fd:c1:bd:12:58:a0:ec:8a:70:2a:90:40: 26:bd:b2:c7:e4:ff:32:27:55:d0:42:cd:3d:b3:8d: 76:b8:13:0d:e3:7b:4e:f7:7f:21:ff:b2:80:a4:99: 98:8a:df:63:f6:c4:cd:37:50:c7:94:0e:c0:cd:ed: 93:43:31:94:94:31:fc:84:da:d4:ed:31:9f:de:78: 90:5a:6f:82:09:d8:93:7a:fc:49:9c:75:89:42:7f: 7e:49:f5:6f:be:3f:d6:bb:20:a3:f9:51:32:f5:b9: 49:d2:14:a5:62:dc:b3:a8:a4:17:4d:2e:b2:19:aa: ab:02:f5:3e:10:9b:fe:35:51:b5:02:0d:75:8a:34: ff:35:a3:e7:cd:49:40:39:e1:44:31:68:d9:94:63: 77:b4:08:c9:a2:f6:a6:9c:0e:92:5c:e6:2e:71:a4: b5:5d:5c:aa:5d:01:77:1f:93:15:b9:79:7b:ba:99: dd:59:88:dc:f7:09:cf:5e:bd:8e:a3:4e:3a:42:ef: 52:f2:c2:e6:26:e6:0d:a2:30:9d:88:37:b6:f9:74: ff:f6:d1:d5:4a:92:f0:1d:c4:0d:be:29:39:77:43: 48:fd:2b:89:80:81:e7:3f:98:f8:86:11:1c:4d:c8: eb:0d Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 5E:8B:4E:94:B0:4E:F6:68:F9:8C:E9:FE:54:6F:1C:8E:CB:B5:1B:A0 X509v3 Authority Key Identifier: keyid:79:79:86:3C:EA:82:AE:B8:E9:DF:38:4B:39:AA:51:76:F4:BC:FA:61 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/eXmGPOqCrrjp3zhLOapRdvS8-mE.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/fd/1ccf25-20de-4b2e-a0e1-de4acf447fae/1/eXmGPOqCrrjp3zhLOapRdvS8-mE.mft X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/fd/1ccf25-20de-4b2e-a0e1-de4acf447fae/1/eXmGPOqCrrjp3zhLOapRdvS8-mE.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 24:c0:d0:0a:65:12:f0:7e:49:f3:48:b1:24:d2:d0:cf:fe:f1: 38:a9:41:7c:24:28:f6:aa:29:8d:ba:12:79:86:11:7e:48:7c: 11:9e:9f:1a:55:fe:24:c4:85:d9:0b:bd:6d:9e:7b:be:16:d2: 27:7b:2d:47:df:a2:ca:d5:8e:c8:d9:1f:dc:b0:ac:fe:93:8e: 3a:78:69:6b:06:05:b9:4c:37:f8:29:4a:6c:ac:55:73:9b:b8: 77:dd:ed:38:0e:b9:86:7e:8d:04:dd:ef:f3:5d:8f:84:fa:56: 07:23:2e:24:3d:59:3b:fc:95:0e:59:15:b6:51:69:61:8e:14: d3:19:35:7b:a7:28:55:bd:7d:53:fe:a1:50:a3:17:94:8e:e4: ac:05:08:39:eb:5b:55:22:70:51:bb:52:55:9a:1e:7f:5c:bc: 33:e2:8c:9b:94:70:98:a9:7a:7e:a0:da:3f:17:8d:ad:46:f7: b9:71:a4:91:b9:6c:0c:a1:ed:ff:2f:0a:2c:f0:64:39:7b:d7: 21:31:30:8d:d7:70:c7:29:37:42:ad:40:f6:90:ef:37:90:9d: ca:d0:99:85:0c:59:f7:1d:4b:6c:27:1a:f7:ce:a4:c6:bd:46: e7:24:89:ad:74:43:b1:f3:6c:25:fb:60:74:12:f7:11:44:da: a4:4f:f9:fb -----BEGIN CERTIFICATE----- MIIFFjCCA/6gAwIBAgISAZpS0b9qaIMlZmBpQieRWhSHMA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKDc5Nzk4NjNjZWE4MmFlYjhlOWRmMzg0YjM5YWE1MTc2ZjRi Y2ZhNjEwHhcNMjUxMTA1MDcwMTA4WhcNMjUxMTA2MDcwMTA4WjAzMTEwLwYDVQQD Eyg1ZThiNGU5NGIwNGVmNjY4Zjk4Y2U5ZmU1NDZmMWM4ZWNiYjUxYmEwMIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAve+otQzKccR+YR9ZaLJH5SX9wb0S WKDsinAqkEAmvbLH5P8yJ1XQQs09s412uBMN43tO938h/7KApJmYit9j9sTNN1DH lA7Aze2TQzGUlDH8hNrU7TGf3niQWm+CCdiTevxJnHWJQn9+SfVvvj/WuyCj+VEy 9blJ0hSlYtyzqKQXTS6yGaqrAvU+EJv+NVG1Ag11ijT/NaPnzUlAOeFEMWjZlGN3 tAjJovamnA6SXOYucaS1XVyqXQF3H5MVuXl7upndWYjc9wnPXr2Oo046Qu9S8sLm JuYNojCdiDe2+XT/9tHVSpLwHcQNvik5d0NI/SuJgIHnP5j4hhEcTcjrDQIDAQAB o4ICIjCCAh4wHQYDVR0OBBYEFF6LTpSwTvZo+Yzp/lRvHI7LtRugMB8GA1UdIwQY MBaAFHl5hjzqgq646d84SzmqUXb0vPphMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvZVhtR1BPcUNycmpwM3poTE9hcFJkdlM4LW1FLmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC9mZC8xY2NmMjUtMjBkZS00YjJlLWEwZTEt ZGU0YWNmNDQ3ZmFlLzEvZVhtR1BPcUNycmpwM3poTE9hcFJkdlM4LW1FLm1mdDCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC9mZC8xY2NmMjUtMjBkZS00YjJlLWEwZTEtZGU0YWNmNDQ3ZmFl LzEvZVhtR1BPcUNycmpwM3poTE9hcFJkdlM4LW1FLmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAJMDQCmUS 8H5J80ixJNLQz/7xOKlBfCQo9qopjboSeYYRfkh8EZ6fGlX+JMSF2Qu9bZ57vhbS J3stR9+iytWOyNkf3LCs/pOOOnhpawYFuUw3+ClKbKxVc5u4d93tOA65hn6NBN3v 812PhPpWByMuJD1ZO/yVDlkVtlFpYY4U0xk1e6coVb19U/6hUKMXlI7krAUIOetb VSJwUbtSVZoef1y8M+KMm5RwmKl6fqDaPxeNrUb3uXGkkblsDKHt/y8KLPBkOXvX ITEwjddwxyk3Qq1A9pDvN5CdytCZhQxZ9x1LbCca986kxr1G5ySJrXRDsfNsJftg dBL3EUTapE/5+w== -----END CERTIFICATE-----Generated at Wed Nov 5 12:23:37 2025 by rpki-client