$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/0f/ba0bd3-b365-4461-8ffa-1f5431e2a5af/1/1M4r8AAc1DDpJ3-wDtGr5RwLXHw.mft File: 1M4r8AAc1DDpJ3-wDtGr5RwLXHw.mft (raw, json) Hash identifier: n+mvOKvMm4K4/AfG4Pqf/TE3J4bWDSJg/MNFCbf3Xd4= Subject key identifier: E9:E1:CF:41:F8:0B:FF:BC:1F:B9:DE:4D:04:74:0C:50:7A:CF:0A:BF Authority key identifier: D4:CE:2B:F0:00:1C:D4:30:E9:27:7F:B0:0E:D1:AB:E5:1C:0B:5C:7C Certificate issuer: /CN=d4ce2bf0001cd430e9277fb00ed1abe51c0b5c7c Certificate serial: 0199FC21A09A72BCC122C024AF47F22AEABC Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/1M4r8AAc1DDpJ3-wDtGr5RwLXHw.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/0f/ba0bd3-b365-4461-8ffa-1f5431e2a5af/1/1M4r8AAc1DDpJ3-wDtGr5RwLXHw.mft Manifest number: 037C Signing time: Sun 19 Oct 2025 11:01:26 +0000 Manifest this update: Sun 19 Oct 2025 11:01:26 +0000 Manifest next update: Mon 20 Oct 2025 11:01:26 +0000 Files and hashes: 1: 1M4r8AAc1DDpJ3-wDtGr5RwLXHw.crl (hash: PxlIfl4M0dYgFBLP97ykmRMVqdEiL5MXNoxhWcWv9uw=) 2: 65uCTGHnj2d-ZMz37cNEU4MDVwU.roa (hash: YIZDFvb3SYhRXBIcle+tVLHY9SC8i/bp1JBNwsY9//E=) 3: B0NZnOPP2h8oD-RNqJ-Ta2yq_Fc.roa (hash: hPfH3C1Uf5sAxbquvsid9TZ9qowMzn90bG/96XgZCYg=) 4: Ft-8xYXFXF_pxWdqchjDObURQAQ.roa (hash: Bbe7isVG2thClqzLz0laVwUWwhKyZ8mXmscJ7ADBYEc=) 5: SO2aAnB4S5yHRruYM18XroAhS7s.roa (hash: Pz0dkuO54GBo11/DomEvI/BTZKCMV4IWlZC7klvn2ps=) 6: S_UvXYrcwi02mD9XS72xM5GP0XM.roa (hash: tDWixxPYWWKm64Sflrs16Hs5q2OnmoXj3QlJNoGIgAE=) 7: UF3Vre6C-2uWPd901r4ODYt5AHA.roa (hash: eNmvyxetTd0QVI6G0VkpJaSR8G25jRhf1MP+bDcaMic=) 8: oZWWF5zyx5ocTW76AkaqmRcZRbc.roa (hash: Md76ioroY7UyB9QPN3x3zrcMAb6sqenqdiEF83Lxjww=) 9: tBHwHHkIoWoPQB4e4ej-oFl2fGE.roa (hash: UbNA7/yGLRJmQHVEHqPxSSssDaT1D3EY/oLFfEqwR8s=) 10: wG4o-qI2-SFDukKFY7nO5neU430.roa (hash: yujHQG+kbMes0VhHuaufvfh3r/oBAVTjRJJ1+dXsMPA=) 11: zNBrt8b_ORyqQSO4aCrRbgzOM0k.roa (hash: JPrR5Q/6R3hbokDk+J7WmGsUILsQwl4oN4sTvCmroWc=) Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/0f/ba0bd3-b365-4461-8ffa-1f5431e2a5af/1/1M4r8AAc1DDpJ3-wDtGr5RwLXHw.crl rsync://rpki.ripe.net/repository/DEFAULT/0f/ba0bd3-b365-4461-8ffa-1f5431e2a5af/1/1M4r8AAc1DDpJ3-wDtGr5RwLXHw.mft rsync://rpki.ripe.net/repository/DEFAULT/1M4r8AAc1DDpJ3-wDtGr5RwLXHw.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Mon 20 Oct 2025 06:00:58 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:99:fc:21:a0:9a:72:bc:c1:22:c0:24:af:47:f2:2a:ea:bc Signature Algorithm: sha256WithRSAEncryption Issuer: CN=d4ce2bf0001cd430e9277fb00ed1abe51c0b5c7c Validity Not Before: Oct 19 11:01:26 2025 GMT Not After : Oct 20 11:01:26 2025 GMT Subject: CN=e9e1cf41f80bffbc1fb9de4d04740c507acf0abf Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:da:e1:86:34:77:66:e5:64:de:64:58:e5:66:b3: 73:be:ec:79:0c:66:2a:3a:d9:71:2d:f0:76:f2:2a: 64:79:9f:76:87:0b:da:55:d2:fa:8e:a4:f8:63:38: 6f:4d:f3:65:2f:64:ee:e4:02:88:ee:d9:e7:15:9d: b8:97:bc:13:70:f0:14:b6:94:d9:11:75:7b:3d:91: 8a:bf:dd:da:81:72:ab:f6:f1:f1:a2:90:4e:7e:96: cb:e8:37:24:2b:41:48:2c:dc:5a:38:54:98:7e:3c: dc:81:c3:b1:23:b1:e7:82:dc:ce:19:cb:7d:e4:53: b9:eb:ad:06:5a:2a:74:a0:d2:b9:7a:05:d3:65:51: b4:13:fc:a1:68:bc:44:e8:8b:32:2d:02:d8:ea:70: cc:c6:3d:f1:35:48:42:6b:89:3a:8a:93:87:d3:92: d1:0f:1b:0e:7d:59:39:98:96:9c:55:56:c5:0f:7e: ae:14:5b:2f:85:d1:8a:2e:fb:c2:84:b6:ab:5b:17: bf:ee:73:1a:5d:b7:70:a7:f8:2d:2c:9b:2d:bb:e1: b6:b7:59:67:32:43:40:4f:e9:0e:ff:e3:08:5a:20: 1d:1c:fd:d5:67:0c:de:6a:89:38:ec:8d:07:ad:2c: f8:02:1f:66:d6:fa:ef:5e:8d:a2:e5:b2:b2:3d:d1: 25:b7 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: E9:E1:CF:41:F8:0B:FF:BC:1F:B9:DE:4D:04:74:0C:50:7A:CF:0A:BF X509v3 Authority Key Identifier: keyid:D4:CE:2B:F0:00:1C:D4:30:E9:27:7F:B0:0E:D1:AB:E5:1C:0B:5C:7C X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/1M4r8AAc1DDpJ3-wDtGr5RwLXHw.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/0f/ba0bd3-b365-4461-8ffa-1f5431e2a5af/1/1M4r8AAc1DDpJ3-wDtGr5RwLXHw.mft X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/0f/ba0bd3-b365-4461-8ffa-1f5431e2a5af/1/1M4r8AAc1DDpJ3-wDtGr5RwLXHw.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 79:84:c1:4b:ea:6a:1e:73:54:b8:bc:74:80:69:e8:e8:41:37: 62:e4:c7:0d:da:33:bf:76:ea:50:88:9a:63:97:87:c7:3b:f6: f1:46:2e:69:e7:7d:df:b1:6a:d6:26:b1:4a:c0:67:34:46:4e: 81:ef:b4:db:ca:3c:51:c0:58:92:6c:52:fc:3d:4f:00:52:07: 45:67:0a:33:6e:f0:28:84:f4:c7:9c:94:7c:35:86:87:f2:93: ce:55:4f:92:05:d6:e8:99:31:68:19:cd:d9:d6:48:82:74:f7: c2:ca:d3:8c:d9:bc:5b:b7:d0:a1:99:54:a5:6d:a3:e1:59:e8: 45:46:6a:17:8d:16:10:94:74:76:b1:ed:ce:c7:fb:86:91:0c: a5:f8:33:3c:38:5a:24:b3:50:fc:24:89:49:fa:a0:f1:e3:3f: 83:32:30:39:51:c7:b1:ff:3f:49:e0:52:fb:2b:f3:37:c0:68: 7c:a6:aa:5d:90:20:de:2c:06:b7:ec:2b:e0:9d:15:6e:b3:79: 59:94:54:cc:5a:2f:bc:10:27:b9:6c:1b:11:d8:00:b6:79:c0: e2:f7:bc:a0:cf:30:e8:30:a4:ec:9f:ac:90:bc:87:36:5d:98: 89:6b:54:95:0f:f8:1f:0e:cf:eb:de:4f:77:80:f7:70:f8:1a: ad:88:d4:37 -----BEGIN CERTIFICATE----- MIIFFjCCA/6gAwIBAgISAZn8IaCacrzBIsAkr0fyKuq8MA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKGQ0Y2UyYmYwMDAxY2Q0MzBlOTI3N2ZiMDBlZDFhYmU1MWMw YjVjN2MwHhcNMjUxMDE5MTEwMTI2WhcNMjUxMDIwMTEwMTI2WjAzMTEwLwYDVQQD EyhlOWUxY2Y0MWY4MGJmZmJjMWZiOWRlNGQwNDc0MGM1MDdhY2YwYWJmMIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEA2uGGNHdm5WTeZFjlZrNzvux5DGYq OtlxLfB28ipkeZ92hwvaVdL6jqT4YzhvTfNlL2Tu5AKI7tnnFZ24l7wTcPAUtpTZ EXV7PZGKv93agXKr9vHxopBOfpbL6DckK0FILNxaOFSYfjzcgcOxI7HngtzOGct9 5FO5660GWip0oNK5egXTZVG0E/yhaLxE6IsyLQLY6nDMxj3xNUhCa4k6ipOH05LR DxsOfVk5mJacVVbFD36uFFsvhdGKLvvChLarWxe/7nMaXbdwp/gtLJstu+G2t1ln MkNAT+kO/+MIWiAdHP3VZwzeaok47I0HrSz4Ah9m1vrvXo2i5bKyPdEltwIDAQAB o4ICIjCCAh4wHQYDVR0OBBYEFOnhz0H4C/+8H7neTQR0DFB6zwq/MB8GA1UdIwQY MBaAFNTOK/AAHNQw6Sd/sA7Rq+UcC1x8MA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvMU00cjhBQWMxRERwSjMtd0R0R3I1UndMWEh3LmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC8wZi9iYTBiZDMtYjM2NS00NDYxLThmZmEt MWY1NDMxZTJhNWFmLzEvMU00cjhBQWMxRERwSjMtd0R0R3I1UndMWEh3Lm1mdDCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC8wZi9iYTBiZDMtYjM2NS00NDYxLThmZmEtMWY1NDMxZTJhNWFm LzEvMU00cjhBQWMxRERwSjMtd0R0R3I1UndMWEh3LmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAeYTBS+pq HnNUuLx0gGno6EE3YuTHDdozv3bqUIiaY5eHxzv28UYuaed937Fq1iaxSsBnNEZO ge+028o8UcBYkmxS/D1PAFIHRWcKM27wKIT0x5yUfDWGh/KTzlVPkgXW6JkxaBnN 2dZIgnT3wsrTjNm8W7fQoZlUpW2j4VnoRUZqF40WEJR0drHtzsf7hpEMpfgzPDha JLNQ/CSJSfqg8eM/gzIwOVHHsf8/SeBS+yvzN8BofKaqXZAg3iwGt+wr4J0VbrN5 WZRUzFovvBAnuWwbEdgAtnnA4ve8oM8w6DCk7J+skLyHNl2YiWtUlQ/4Hw7P695P d4D3cPgarYjUNw== -----END CERTIFICATE-----Generated at Sun Oct 19 15:11:52 2025 by rpki-client