$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/fd/5786ab-067e-440c-b276-1b06d1c704c1/1/09VvB74YTLpS9v3ASegRTSYWwyo.mft File: 09VvB74YTLpS9v3ASegRTSYWwyo.mft (raw, json) Hash identifier: 7vczzylMxQ0qrbN1YM/rEMEgJ/Ucbyn0k1I9MG5tQF0= Subject key identifier: D5:BC:CC:B3:D4:93:AB:32:CC:5E:9E:0C:89:56:7A:CD:90:CB:F5:4F Authority key identifier: D3:D5:6F:07:BE:18:4C:BA:52:F6:FD:C0:49:E8:11:4D:26:16:C3:2A Certificate issuer: /CN=d3d56f07be184cba52f6fdc049e8114d2616c32a Certificate serial: 019A53ACCC5385ED7FE3167CD7DF3E9495D5 Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/09VvB74YTLpS9v3ASegRTSYWwyo.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/fd/5786ab-067e-440c-b276-1b06d1c704c1/1/09VvB74YTLpS9v3ASegRTSYWwyo.mft Manifest number: 1717 Signing time: Wed 05 Nov 2025 11:00:24 +0000 Manifest this update: Wed 05 Nov 2025 11:00:24 +0000 Manifest next update: Thu 06 Nov 2025 11:00:24 +0000 Files and hashes: 1: 09VvB74YTLpS9v3ASegRTSYWwyo.crl (hash: dlDZuUNR4yYsmTHpf4EK0rrj/U5YqAwbWs+iMVqQZMQ=) 2: 4c68WXa89S9GaEZ3betWtfOynEI.roa (hash: fVAp1PUxEqPq1PXw46ujCE/Pw+4uzGlNeTIsndTtQ4g=) 3: 7kfcYNNoB5VB3-_80xlsWN3weyk.roa (hash: 1wJop1mQ6qBQDepGqT5ANO4tx0iRC5GqiIyWQqeZxiY=) 4: Bs0O01jXAqadcOrA_652_6vgquk.roa (hash: hEdFCfeLg1JToe8V2oyy+hkNpnht00+5NYTQRgNDOq8=) 5: KidN7PJCXFwqwby4fVpHaeAhpFY.roa (hash: rFMoYmqrD8lR5TajeeUqUicyuRT28K2jKIN4IFZHnsU=) 6: NYzishm2ogJfRyzy8nT6kXYmzuI.roa (hash: LaEEfSMmtUB1mBqYxGiYK3KhOkpxYURIQoeWj6Zjkz4=) 7: RIPl0ZcnNzCRnoJoRMQdo7FatJo.roa (hash: V51bdAbDUbCCdG4ap1IngeKOzNBFdbTp51TPAvBkqrE=) 8: eKmkaw2M8tueZ_tzxfDI9F6CNcc.roa (hash: fg34CUb41rhu+065E2VZ9qaIx2X2iqQ2jxGQO4GwQe4=) 9: pq2QS5SBDS3pAxrbz1jylBKYb1c.roa (hash: kdt9b8eHxviCcBXo3alD6ToqY7JvOLmYwFiRPu6twu8=) 10: tpxzfABwHA4uTKjODgtKlvT10t8.roa (hash: /uiIY+OMfjw8MyTKZlNYbS4i9kHVxO0uNCEe4Op3YPE=) 11: xz6DVtU3-Ra9kwVQS1hT5B1NgIk.roa (hash: L6obqobAUv8Kf3w8kISkegiNvXZC3M7YbdVJnQVDNRA=) Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/fd/5786ab-067e-440c-b276-1b06d1c704c1/1/09VvB74YTLpS9v3ASegRTSYWwyo.crl rsync://rpki.ripe.net/repository/DEFAULT/fd/5786ab-067e-440c-b276-1b06d1c704c1/1/09VvB74YTLpS9v3ASegRTSYWwyo.mft rsync://rpki.ripe.net/repository/DEFAULT/09VvB74YTLpS9v3ASegRTSYWwyo.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Thu 06 Nov 2025 03:00:03 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9a:53:ac:cc:53:85:ed:7f:e3:16:7c:d7:df:3e:94:95:d5 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=d3d56f07be184cba52f6fdc049e8114d2616c32a Validity Not Before: Nov 5 11:00:24 2025 GMT Not After : Nov 6 11:00:24 2025 GMT Subject: CN=d5bcccb3d493ab32cc5e9e0c89567acd90cbf54f Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:8f:a9:93:88:93:66:01:68:44:0e:30:d0:32:9d: 72:d7:31:95:78:dd:b7:87:21:64:ab:67:67:87:75: 16:c3:43:92:6e:11:7f:12:32:b1:2e:f6:0d:a1:a7: 8b:c7:c0:01:14:9c:12:95:2e:4a:c5:4c:3b:f9:ad: 7e:28:76:b9:83:05:db:59:8d:0d:55:c3:7a:1d:bc: 64:de:c7:83:1d:05:5a:34:dd:82:6a:78:63:0f:8d: 32:b0:a6:ab:50:c2:aa:0d:26:18:df:9e:eb:e9:67: 6a:7c:cf:a7:c0:fa:65:9d:a1:83:b0:b5:a1:40:8d: 9b:60:ad:da:cd:f7:fc:30:06:a2:98:4e:7a:1d:e7: 52:2a:79:4e:94:8c:4a:7b:cb:09:c2:8c:04:59:07: 1d:03:6b:50:ff:45:a5:34:cb:43:0a:f9:eb:ef:33: 22:38:f6:dd:de:99:bd:b3:b7:d1:fb:39:84:f6:4e: 33:a3:77:13:5d:19:cf:da:8f:8d:84:15:0b:49:c8: f4:74:e3:0c:f8:6b:3b:42:23:ef:d8:7e:2f:95:a9: 1a:6b:ad:a4:67:d9:7a:01:d8:ea:0a:90:5d:2e:29: c2:38:09:17:9c:94:29:cd:d6:eb:b1:b6:2e:7d:da: 6d:b4:70:59:e5:a1:f8:d1:3e:78:db:21:27:9a:b5: eb:d3 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: D5:BC:CC:B3:D4:93:AB:32:CC:5E:9E:0C:89:56:7A:CD:90:CB:F5:4F X509v3 Authority Key Identifier: keyid:D3:D5:6F:07:BE:18:4C:BA:52:F6:FD:C0:49:E8:11:4D:26:16:C3:2A X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/09VvB74YTLpS9v3ASegRTSYWwyo.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/fd/5786ab-067e-440c-b276-1b06d1c704c1/1/09VvB74YTLpS9v3ASegRTSYWwyo.mft X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/fd/5786ab-067e-440c-b276-1b06d1c704c1/1/09VvB74YTLpS9v3ASegRTSYWwyo.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 7f:9b:74:80:ce:51:ce:b4:93:20:0a:52:af:02:86:dc:e5:6d: 5a:68:84:4c:89:46:d5:5d:ee:8c:6b:24:d6:41:dd:ae:fe:7b: cc:cd:87:75:e0:36:b1:5e:80:87:5f:57:82:ff:48:df:27:5b: 43:47:c7:29:41:fa:4b:4b:24:b2:67:7d:a5:17:66:c7:2e:9c: 47:19:d1:a5:88:8a:d1:ea:32:c2:34:5d:3c:b4:37:68:f5:75: cd:0c:9c:0e:79:03:90:a4:e8:12:c1:9d:8e:5a:f3:3a:88:f6: f7:34:8a:4f:32:e4:7d:ed:9b:79:ad:42:b3:cb:d1:ef:14:df: 37:ff:19:34:e2:8f:b7:7b:57:31:5e:de:fa:41:cc:d7:c9:c6: bf:64:57:79:e5:44:6f:07:a0:69:05:8c:cd:eb:9e:0f:ad:98: 38:9c:6d:e7:af:8a:92:26:52:74:fd:f8:71:4b:48:72:5a:db: 76:cc:24:3e:e0:f9:48:8d:d2:ab:70:74:17:d6:3e:13:41:5e: 1e:bb:37:bf:ca:2d:5d:69:66:00:e5:2a:10:4f:5e:24:21:f4: 0c:e8:a8:93:0d:eb:7d:cf:58:68:58:45:d5:ca:c7:19:e2:d6: 1d:27:ee:3f:9d:9b:f2:88:59:38:2b:59:f6:26:ce:3c:ae:c3: ac:e7:04:34 -----BEGIN CERTIFICATE----- MIIFFjCCA/6gAwIBAgISAZpTrMxThe1/4xZ8198+lJXVMA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKGQzZDU2ZjA3YmUxODRjYmE1MmY2ZmRjMDQ5ZTgxMTRkMjYx NmMzMmEwHhcNMjUxMTA1MTEwMDI0WhcNMjUxMTA2MTEwMDI0WjAzMTEwLwYDVQQD EyhkNWJjY2NiM2Q0OTNhYjMyY2M1ZTllMGM4OTU2N2FjZDkwY2JmNTRmMIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAj6mTiJNmAWhEDjDQMp1y1zGVeN23 hyFkq2dnh3UWw0OSbhF/EjKxLvYNoaeLx8ABFJwSlS5KxUw7+a1+KHa5gwXbWY0N VcN6Hbxk3seDHQVaNN2CanhjD40ysKarUMKqDSYY357r6WdqfM+nwPplnaGDsLWh QI2bYK3azff8MAaimE56HedSKnlOlIxKe8sJwowEWQcdA2tQ/0WlNMtDCvnr7zMi OPbd3pm9s7fR+zmE9k4zo3cTXRnP2o+NhBULScj0dOMM+Gs7QiPv2H4vlakaa62k Z9l6AdjqCpBdLinCOAkXnJQpzdbrsbYufdpttHBZ5aH40T542yEnmrXr0wIDAQAB o4ICIjCCAh4wHQYDVR0OBBYEFNW8zLPUk6syzF6eDIlWes2Qy/VPMB8GA1UdIwQY MBaAFNPVbwe+GEy6Uvb9wEnoEU0mFsMqMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvMDlWdkI3NFlUTHBTOXYzQVNlZ1JUU1lXd3lvLmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC9mZC81Nzg2YWItMDY3ZS00NDBjLWIyNzYt MWIwNmQxYzcwNGMxLzEvMDlWdkI3NFlUTHBTOXYzQVNlZ1JUU1lXd3lvLm1mdDCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC9mZC81Nzg2YWItMDY3ZS00NDBjLWIyNzYtMWIwNmQxYzcwNGMx LzEvMDlWdkI3NFlUTHBTOXYzQVNlZ1JUU1lXd3lvLmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAf5t0gM5R zrSTIApSrwKG3OVtWmiETIlG1V3ujGsk1kHdrv57zM2HdeA2sV6Ah19Xgv9I3ydb Q0fHKUH6S0sksmd9pRdmxy6cRxnRpYiK0eoywjRdPLQ3aPV1zQycDnkDkKToEsGd jlrzOoj29zSKTzLkfe2bea1Cs8vR7xTfN/8ZNOKPt3tXMV7e+kHM18nGv2RXeeVE bwegaQWMzeueD62YOJxt56+KkiZSdP34cUtIclrbdswkPuD5SI3Sq3B0F9Y+E0Fe Hrs3v8otXWlmAOUqEE9eJCH0DOiokw3rfc9YaFhF1crHGeLWHSfuP52b8ohZOCtZ 9ibOPK7DrOcENA== -----END CERTIFICATE-----Generated at Wed Nov 5 13:01:13 2025 by rpki-client