$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/07/0c6f47-4713-4471-b08f-a4213c93f1f7/1/cG06u7R4t07yre-bt8QzbjQRHVE.mft File: cG06u7R4t07yre-bt8QzbjQRHVE.mft (raw, json) Hash identifier: 4osX1PrTTUcZe8fYPCpCCqDSpXPHD1DnRLsC9/b9UB4= Subject key identifier: 16:74:1D:00:F3:B5:72:AA:A5:9E:DB:71:0B:40:AF:7F:32:D8:F5:A1 Authority key identifier: 70:6D:3A:BB:B4:78:B7:4E:F2:AD:EF:9B:B7:C4:33:6E:34:11:1D:51 Certificate issuer: /CN=706d3abbb478b74ef2adef9bb7c4336e34111d51 Certificate serial: 0199FF901E6D82EADC32ACD5F467A823390B Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/cG06u7R4t07yre-bt8QzbjQRHVE.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/07/0c6f47-4713-4471-b08f-a4213c93f1f7/1/cG06u7R4t07yre-bt8QzbjQRHVE.mft Manifest number: 10CB Signing time: Mon 20 Oct 2025 03:00:58 +0000 Manifest this update: Mon 20 Oct 2025 03:00:58 +0000 Manifest next update: Tue 21 Oct 2025 03:00:58 +0000 Files and hashes: 1: 1-DdA-do2aUnfFDViNUxhUDqFzbE.roa (hash: BKYK/ZWsPHxxlNPF0PEHOjs0OjsXKAGuBICEBJN+sBU=) 2: PquNLopkqyd1FPkE6lVSuFZAhHk.roa (hash: cueg/ECXevtubCCHF8NReS6so4hgNR13sPfAmLWyFN8=) 3: SKahOuz63VxzF7gsfLLtP4-dwsQ.roa (hash: tgpfEWxbjIJhXJgvlYzjtjMs+efIHb2DWjDR4Pl22YM=) 4: Y87LNPXwYxzM1KbDSMEARR-tLxU.roa (hash: Hc9P0WIM13wsCCDXXb34wAtaFccE9wg34ig8vLvBeGY=) 5: cG06u7R4t07yre-bt8QzbjQRHVE.crl (hash: iLra8lSYb5eOmG99dWHzppmQJgz4ZL/y4VsQ91ROmcQ=) 6: dj7XdZh5KETFPQnDms3UxXnRXC4.roa (hash: EpSZ3YEAtJm35+lis2XvA9ik+aj1Kz53yBaF/oXDmdQ=) 7: nq4bzy4h6lHvAq7WfQfvLT3Lcxs.roa (hash: AUW0hCwolQea98JTwSo4ol+MpnG7tQ7XKxKB7k262zg=) 8: pnzGJ4U9axy4lLwZnaehAwpRVaQ.roa (hash: rLQUf7uZTpB79YDcuBoB9yRmzU3aEUgIa9XP7frMy3M=) 9: rIEcC1yrrtWRE_-aC4aiNaHlF0w.roa (hash: RIIBfBGrMJNxseu/gjjvLy+xu6nPcaesVv59+v9lv30=) 10: wF16Isbo0PTlUouJULLf9fQs6Jw.roa (hash: ujnMHiwDZPQLz7IHlGLCJr2Hydzywx1acJmP/oG/nU8=) Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/07/0c6f47-4713-4471-b08f-a4213c93f1f7/1/cG06u7R4t07yre-bt8QzbjQRHVE.crl rsync://rpki.ripe.net/repository/DEFAULT/07/0c6f47-4713-4471-b08f-a4213c93f1f7/1/cG06u7R4t07yre-bt8QzbjQRHVE.mft rsync://rpki.ripe.net/repository/DEFAULT/cG06u7R4t07yre-bt8QzbjQRHVE.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Tue 21 Oct 2025 00:00:58 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:99:ff:90:1e:6d:82:ea:dc:32:ac:d5:f4:67:a8:23:39:0b Signature Algorithm: sha256WithRSAEncryption Issuer: CN=706d3abbb478b74ef2adef9bb7c4336e34111d51 Validity Not Before: Oct 20 03:00:58 2025 GMT Not After : Oct 21 03:00:58 2025 GMT Subject: CN=16741d00f3b572aaa59edb710b40af7f32d8f5a1 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:a0:f8:5d:f0:82:33:72:2e:36:c0:0d:ff:40:55: 74:6a:52:46:2c:c0:7f:58:f8:f2:80:3c:4c:45:d1: 27:3a:3c:3e:9d:a1:3c:82:9b:c3:41:1a:b2:7d:80: bf:1e:75:81:24:73:55:4e:ee:66:79:3f:3b:c7:2c: 45:9c:2b:86:68:35:57:8c:e8:29:40:e3:ee:c4:94: f0:76:28:cf:1d:49:44:03:ba:ab:de:79:03:ff:78: c9:bd:f1:ac:63:59:56:76:10:d2:04:9e:e3:cb:dc: 37:1f:88:2b:e0:19:03:f0:64:93:2a:04:62:c5:b0: ff:73:90:66:be:43:66:4d:5f:76:cc:63:ab:ce:bf: 6b:12:06:e9:7c:78:8c:17:2b:1f:50:58:b4:c1:0b: 6e:06:a1:ee:05:af:b6:9e:55:21:e6:66:66:cf:c2: dd:7e:dd:51:2b:ee:a5:58:89:51:f9:12:c8:3a:7d: 82:ae:91:83:1e:33:05:17:79:58:99:d2:e4:b8:33: 60:01:b1:dd:24:2e:bb:57:ae:10:8d:a2:ec:bb:10: 45:95:de:21:b3:c5:3e:2d:74:a5:cd:da:b0:51:0b: 63:b2:18:24:49:72:6e:6b:4f:a2:d7:d3:da:2c:e4: dd:35:0e:99:0b:43:e2:c8:89:7f:d0:94:0d:8f:d0: 1c:07 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 16:74:1D:00:F3:B5:72:AA:A5:9E:DB:71:0B:40:AF:7F:32:D8:F5:A1 X509v3 Authority Key Identifier: keyid:70:6D:3A:BB:B4:78:B7:4E:F2:AD:EF:9B:B7:C4:33:6E:34:11:1D:51 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/cG06u7R4t07yre-bt8QzbjQRHVE.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/07/0c6f47-4713-4471-b08f-a4213c93f1f7/1/cG06u7R4t07yre-bt8QzbjQRHVE.mft X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/07/0c6f47-4713-4471-b08f-a4213c93f1f7/1/cG06u7R4t07yre-bt8QzbjQRHVE.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 21:81:45:66:37:43:1f:bd:78:eb:07:3b:ee:86:c9:2d:6a:9b: 94:38:b1:12:a3:dc:b1:5e:a1:71:12:9b:bf:f5:a5:a4:dd:74: d1:16:ad:6e:41:e0:bc:5f:ae:49:1c:5c:a5:62:68:be:a4:01: 79:88:bc:aa:8c:25:30:d8:4c:81:96:de:b7:4c:16:82:26:5c: fe:b0:73:15:60:5e:de:f3:5c:37:f1:30:e1:49:3b:0c:48:47: ca:23:49:61:5b:91:0f:84:15:11:f3:da:48:b7:59:bb:08:d2: a1:65:74:a4:0a:82:1d:17:b0:87:5d:80:f3:c7:23:22:f6:00: 0c:16:23:64:54:3c:21:ad:f6:be:f9:15:32:94:f4:6a:8a:e4: 82:ab:23:d1:fc:81:29:3b:25:fb:08:01:4e:8d:db:ba:c8:57: 2f:da:95:ca:34:94:43:71:83:40:51:74:c1:73:61:0f:3e:43: b4:19:7b:aa:4c:22:ce:b8:b4:91:f4:91:b3:7e:0a:62:c3:77: e0:a8:34:b8:c8:1e:a9:56:0a:6a:58:47:38:78:df:5e:64:f2: cf:80:97:b9:07:f0:f0:a1:4e:58:01:20:c9:90:de:cd:4d:bc: fe:79:fd:e2:70:5d:3b:09:5f:26:6f:79:a4:ba:1d:48:57:05: 47:d5:95:5b -----BEGIN CERTIFICATE----- MIIFFjCCA/6gAwIBAgISAZn/kB5tgurcMqzV9GeoIzkLMA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKDcwNmQzYWJiYjQ3OGI3NGVmMmFkZWY5YmI3YzQzMzZlMzQx MTFkNTEwHhcNMjUxMDIwMDMwMDU4WhcNMjUxMDIxMDMwMDU4WjAzMTEwLwYDVQQD EygxNjc0MWQwMGYzYjU3MmFhYTU5ZWRiNzEwYjQwYWY3ZjMyZDhmNWExMIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAoPhd8IIzci42wA3/QFV0alJGLMB/ WPjygDxMRdEnOjw+naE8gpvDQRqyfYC/HnWBJHNVTu5meT87xyxFnCuGaDVXjOgp QOPuxJTwdijPHUlEA7qr3nkD/3jJvfGsY1lWdhDSBJ7jy9w3H4gr4BkD8GSTKgRi xbD/c5BmvkNmTV92zGOrzr9rEgbpfHiMFysfUFi0wQtuBqHuBa+2nlUh5mZmz8Ld ft1RK+6lWIlR+RLIOn2CrpGDHjMFF3lYmdLkuDNgAbHdJC67V64QjaLsuxBFld4h s8U+LXSlzdqwUQtjshgkSXJua0+i19PaLOTdNQ6ZC0PiyIl/0JQNj9AcBwIDAQAB o4ICIjCCAh4wHQYDVR0OBBYEFBZ0HQDztXKqpZ7bcQtAr38y2PWhMB8GA1UdIwQY MBaAFHBtOru0eLdO8q3vm7fEM240ER1RMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvY0cwNnU3UjR0MDd5cmUtYnQ4UXpialFSSFZFLmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC8wNy8wYzZmNDctNDcxMy00NDcxLWIwOGYt YTQyMTNjOTNmMWY3LzEvY0cwNnU3UjR0MDd5cmUtYnQ4UXpialFSSFZFLm1mdDCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC8wNy8wYzZmNDctNDcxMy00NDcxLWIwOGYtYTQyMTNjOTNmMWY3 LzEvY0cwNnU3UjR0MDd5cmUtYnQ4UXpialFSSFZFLmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAIYFFZjdD H7146wc77obJLWqblDixEqPcsV6hcRKbv/WlpN100RatbkHgvF+uSRxcpWJovqQB eYi8qowlMNhMgZbet0wWgiZc/rBzFWBe3vNcN/Ew4Uk7DEhHyiNJYVuRD4QVEfPa SLdZuwjSoWV0pAqCHRewh12A88cjIvYADBYjZFQ8Ia32vvkVMpT0aorkgqsj0fyB KTsl+wgBTo3bushXL9qVyjSUQ3GDQFF0wXNhDz5DtBl7qkwizri0kfSRs34KYsN3 4Kg0uMgeqVYKalhHOHjfXmTyz4CXuQfw8KFOWAEgyZDezU28/nn94nBdOwlfJm95 pLodSFcFR9WVWw== -----END CERTIFICATE-----Generated at Mon Oct 20 08:48:00 2025 by rpki-client