$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/17/cffff8-3530-4e5b-a5e2-c77905fbba7b/1/RbvSGTZCUwoBf08cvlYuIXCz370.mft File: RbvSGTZCUwoBf08cvlYuIXCz370.mft (raw, json) Hash identifier: N7oBt62OwEQj8llEvoSTsKcQhwo0drsPvbJkWFwjAbc= Subject key identifier: 90:D8:03:53:4C:B6:76:A0:47:BB:41:C9:77:99:13:F8:46:5A:5A:F9 Authority key identifier: 45:BB:D2:19:36:42:53:0A:01:7F:4F:1C:BE:56:2E:21:70:B3:DF:BD Certificate issuer: /CN=45bbd2193642530a017f4f1cbe562e2170b3dfbd Certificate serial: 0199FBB3653064548EDB0064A8D22CC110DB Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/RbvSGTZCUwoBf08cvlYuIXCz370.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/17/cffff8-3530-4e5b-a5e2-c77905fbba7b/1/RbvSGTZCUwoBf08cvlYuIXCz370.mft Manifest number: 0EDD Signing time: Sun 19 Oct 2025 09:01:02 +0000 Manifest this update: Sun 19 Oct 2025 09:01:02 +0000 Manifest next update: Mon 20 Oct 2025 09:01:02 +0000 Files and hashes: 1: 6ZnfS565qYdUchLZCkFU7aS7slQ.roa (hash: 4t6UU9aRgFRSLJBVwUMaRIV03s5+6yeuigVjxM6Ktp4=) 2: 7d-V0wk7_LwQmv-CS7561oFEwSc.roa (hash: u5Et4u+PPH6ChiKIaXCULpF5f++8aJtXhJxY+hqA1C0=) 3: RbvSGTZCUwoBf08cvlYuIXCz370.crl (hash: dSp8VrGYPyhYob96taDUBy629fcoB3KJX6/vweQreKo=) 4: TApodEY8028DyJXWycbZvpKO2JY.roa (hash: U9oKSIIosuWZsZ0CYqCvqcMf8wzWuI0iOJauh9nwcac=) 5: U99JCnG6IDDb3fPb5RJU5lmsye0.roa (hash: X/Q6Sj4Oee6V3+wleBrfWWmYoSOrW6XOkN6eZj48NGo=) 6: UHhBspaFN4Wz4SsUMP7fb9tfT4w.roa (hash: 50TOVRcOrToHPoin6f4jkSxKeLPlDyklnbx1BFOMka4=) 7: _VXztWjIE0ZPwEUQdhYZ-DOYwQo.roa (hash: 185UhIin1qWAIQbRLAq/SfnBaaaHig76ZL9WselXS2I=) 8: bVG91rh6vJ7orCrWLltzoEytWu0.roa (hash: 6UY0Ua8DXjS9JwbhBNdYqbLcTNFaiJVgT0ORPNoYM64=) 9: d4dd63YvMop2w-g3LON2FgQkXGs.roa (hash: wFE27Pfyu6wjdlPpwECWgbJf/SI7T3ch1qMqz+WQODE=) 10: r5ZgGaHKIkFsDW5OTwwhK4tgAsQ.roa (hash: jLmSUGri8N356kUEE/tygoNrVgGIX4EqiZgEZdk/J6k=) Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/17/cffff8-3530-4e5b-a5e2-c77905fbba7b/1/RbvSGTZCUwoBf08cvlYuIXCz370.crl rsync://rpki.ripe.net/repository/DEFAULT/17/cffff8-3530-4e5b-a5e2-c77905fbba7b/1/RbvSGTZCUwoBf08cvlYuIXCz370.mft rsync://rpki.ripe.net/repository/DEFAULT/RbvSGTZCUwoBf08cvlYuIXCz370.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Mon 20 Oct 2025 09:01:02 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:99:fb:b3:65:30:64:54:8e:db:00:64:a8:d2:2c:c1:10:db Signature Algorithm: sha256WithRSAEncryption Issuer: CN=45bbd2193642530a017f4f1cbe562e2170b3dfbd Validity Not Before: Oct 19 09:01:02 2025 GMT Not After : Oct 20 09:01:02 2025 GMT Subject: CN=90d803534cb676a047bb41c9779913f8465a5af9 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:cc:75:8e:e8:c4:9b:93:07:e5:c7:8f:54:aa:ae: 3f:14:5c:fb:cf:b6:54:81:4d:13:db:53:f6:f6:a3: 4b:40:18:10:44:f0:b4:4a:e8:b9:0a:bd:8a:4a:44: 8b:85:72:a1:21:2f:e7:6c:90:64:7d:61:dc:b8:2e: 69:34:3c:e7:1c:29:11:3d:0f:7f:22:a9:66:44:9c: 6d:a3:74:f2:f7:f7:eb:03:88:0f:96:e9:b8:1c:b6: 45:80:ec:6a:95:53:92:0a:be:b3:82:46:c5:2c:63: ec:25:22:e5:26:b8:3f:6f:4e:ce:81:0c:cd:f0:38: ea:1a:3f:54:34:51:11:54:78:21:98:89:62:9e:89: 16:56:68:e2:d7:ed:fc:1b:de:4c:0b:19:04:ae:f2: b3:a4:de:ba:05:30:d1:d8:6a:51:6e:47:d0:7f:f7: 8e:5a:ac:be:cb:16:b3:f4:5e:36:ea:f2:d3:84:bf: 24:e0:2f:e7:f2:e4:96:31:0a:69:4f:45:68:3a:48: 6d:c1:fd:ee:28:03:5a:9d:3b:c2:8f:a7:e6:76:4c: be:5c:90:17:53:0d:4e:3c:12:92:9e:5a:70:62:76: f7:20:c5:7e:85:00:92:53:00:54:57:30:a3:c7:c6: 4f:83:00:62:d4:1e:77:d7:8b:3b:4d:7b:ce:27:80: 2f:0d Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 90:D8:03:53:4C:B6:76:A0:47:BB:41:C9:77:99:13:F8:46:5A:5A:F9 X509v3 Authority Key Identifier: keyid:45:BB:D2:19:36:42:53:0A:01:7F:4F:1C:BE:56:2E:21:70:B3:DF:BD X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/RbvSGTZCUwoBf08cvlYuIXCz370.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/17/cffff8-3530-4e5b-a5e2-c77905fbba7b/1/RbvSGTZCUwoBf08cvlYuIXCz370.mft X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/17/cffff8-3530-4e5b-a5e2-c77905fbba7b/1/RbvSGTZCUwoBf08cvlYuIXCz370.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 1e:57:53:22:25:19:d9:50:7c:ff:f6:f6:39:d5:ef:4f:a5:ad: 60:ee:77:2a:69:e4:1e:16:a3:06:71:bd:39:9c:f5:49:99:9d: bc:31:3d:40:3c:75:17:6c:c4:d2:7f:a6:e1:cf:69:6a:a2:c1: 9b:b4:65:7f:88:95:df:83:bc:5e:c3:f1:59:bf:ad:16:03:9b: cd:45:6f:b1:18:84:f2:15:b7:a9:df:e6:24:6e:92:fe:4b:ba: 0d:6e:9f:31:a8:7a:2d:e0:03:66:d6:45:e2:0a:c8:21:54:67: 75:d8:55:83:1f:1d:b3:22:63:66:78:07:e0:08:31:03:37:60: 39:55:3b:cc:10:da:8c:90:aa:cb:f5:7a:9e:f2:ea:9f:a5:46: e8:a4:ff:13:90:80:c6:b7:e5:5f:89:0c:18:7b:59:87:ad:41: 62:2e:7b:4e:65:97:2d:1a:c3:29:4b:58:22:7f:d5:52:9b:91: f1:d7:cf:38:ea:6f:87:f4:f4:eb:50:5e:ea:86:3b:cf:1e:28: ea:4b:66:42:0d:6b:77:82:f8:52:55:96:6e:a0:93:03:81:ca: 00:76:e5:c5:da:ef:98:4e:5d:da:00:32:14:39:7b:75:19:e1: ff:93:70:b5:84:53:3a:38:d3:16:99:50:0d:0e:4c:9a:03:bc: d6:1b:68:a0 -----BEGIN CERTIFICATE----- MIIFFjCCA/6gAwIBAgISAZn7s2UwZFSO2wBkqNIswRDbMA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKDQ1YmJkMjE5MzY0MjUzMGEwMTdmNGYxY2JlNTYyZTIxNzBi M2RmYmQwHhcNMjUxMDE5MDkwMTAyWhcNMjUxMDIwMDkwMTAyWjAzMTEwLwYDVQQD Eyg5MGQ4MDM1MzRjYjY3NmEwNDdiYjQxYzk3Nzk5MTNmODQ2NWE1YWY5MIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAzHWO6MSbkwflx49Uqq4/FFz7z7ZU gU0T21P29qNLQBgQRPC0Sui5Cr2KSkSLhXKhIS/nbJBkfWHcuC5pNDznHCkRPQ9/ IqlmRJxto3Ty9/frA4gPlum4HLZFgOxqlVOSCr6zgkbFLGPsJSLlJrg/b07OgQzN 8DjqGj9UNFERVHghmIlinokWVmji1+38G95MCxkErvKzpN66BTDR2GpRbkfQf/eO Wqy+yxaz9F426vLThL8k4C/n8uSWMQppT0VoOkhtwf3uKANanTvCj6fmdky+XJAX Uw1OPBKSnlpwYnb3IMV+hQCSUwBUVzCjx8ZPgwBi1B5314s7TXvOJ4AvDQIDAQAB o4ICIjCCAh4wHQYDVR0OBBYEFJDYA1NMtnagR7tByXeZE/hGWlr5MB8GA1UdIwQY MBaAFEW70hk2QlMKAX9PHL5WLiFws9+9MA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvUmJ2U0dUWkNVd29CZjA4Y3ZsWXVJWEN6MzcwLmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC8xNy9jZmZmZjgtMzUzMC00ZTViLWE1ZTIt Yzc3OTA1ZmJiYTdiLzEvUmJ2U0dUWkNVd29CZjA4Y3ZsWXVJWEN6MzcwLm1mdDCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC8xNy9jZmZmZjgtMzUzMC00ZTViLWE1ZTItYzc3OTA1ZmJiYTdi LzEvUmJ2U0dUWkNVd29CZjA4Y3ZsWXVJWEN6MzcwLmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAHldTIiUZ 2VB8//b2OdXvT6WtYO53KmnkHhajBnG9OZz1SZmdvDE9QDx1F2zE0n+m4c9paqLB m7Rlf4iV34O8XsPxWb+tFgObzUVvsRiE8hW3qd/mJG6S/ku6DW6fMah6LeADZtZF 4grIIVRnddhVgx8dsyJjZngH4AgxAzdgOVU7zBDajJCqy/V6nvLqn6VG6KT/E5CA xrflX4kMGHtZh61BYi57TmWXLRrDKUtYIn/VUpuR8dfPOOpvh/T061Be6oY7zx4o 6ktmQg1rd4L4UlWWbqCTA4HKAHblxdrvmE5d2gAyFDl7dRnh/5NwtYRTOjjTFplQ DQ5MmgO81htooA== -----END CERTIFICATE-----Generated at Sun Oct 19 17:33:52 2025 by rpki-client