$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/1a/4f336b-4a79-4425-9556-be45f0d2abbb/1/nLJc5VDk2b2gW9XUXItro3Qwu7o.mft File: nLJc5VDk2b2gW9XUXItro3Qwu7o.mft (raw, json) Hash identifier: wKpq1jsXE8rMqCcoAPfUOhUbisx0iEZfU9vg1Pbscrg= Subject key identifier: 78:26:A5:A2:90:5C:F0:05:4D:E4:A6:EF:B6:A0:66:38:91:F8:56:03 Authority key identifier: 9C:B2:5C:E5:50:E4:D9:BD:A0:5B:D5:D4:5C:8B:6B:A3:74:30:BB:BA Certificate issuer: /CN=9cb25ce550e4d9bda05bd5d45c8b6ba37430bbba Certificate serial: 0199FFC8854E7918E3878B2724729C869F97 Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/nLJc5VDk2b2gW9XUXItro3Qwu7o.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/1a/4f336b-4a79-4425-9556-be45f0d2abbb/1/nLJc5VDk2b2gW9XUXItro3Qwu7o.mft Manifest number: 10B1 Signing time: Mon 20 Oct 2025 04:02:35 +0000 Manifest this update: Mon 20 Oct 2025 04:02:35 +0000 Manifest next update: Tue 21 Oct 2025 04:02:35 +0000 Files and hashes: 1: 5twkGWnpZ3caWcoF0F7nZ3MnxRQ.roa (hash: Hj9ctK8yUmftQlZpCOc5gcL4pBH+76rKw29EPYTV1fY=) 2: 6t_-rwl5vkceJUl9xfuErIgk5XQ.roa (hash: UgA7/ParQEm4RUB+nS1eICM0VcT/VJB2T/2XjYuyjiU=) 3: CcOTWwBfhnDK4i-Cl6vgTQ1Ne6Q.roa (hash: 0gfOeo67IeexaN6S4XXz6/wYaUsrA1sXsSwqEGJjGB8=) 4: Kkr4WQTbiLrBJjIFNHmfQjqdMFs.roa (hash: AX2E33mALAyiSH2uL+jaoucILuyqIMUcyM5PTXw0LYA=) 5: XDROFBDLzXZk58Wa7Gj_bxIFP24.roa (hash: oEZB4Wy5f3UZqEPOPaZ8r51Wy4lzW93yWdCW8EWeAw0=) 6: fsRjNoJDy9POHF18ZkBOzQiMl94.roa (hash: pTBEz/UhwNCD7057vDv5QDiSVRnDRK75JX++XfB+B70=) 7: iXL5qQtRrkVLG9gYfHh5fVQ7T3g.roa (hash: /S4PPFIysWBHzoFOGmeyMQ0/WpKIWbdNqRJ+yMWrBac=) 8: lIqtXZgZb6FK3xchEu_KzpPH9HY.roa (hash: EF/nDh6v7FHlrVK+Jno0NvRyT9dpjTxvni+KKTpPgho=) 9: nLJc5VDk2b2gW9XUXItro3Qwu7o.crl (hash: R3IMJhtqViTv9bgGW4DD318YzNwSdMzAyHWUjlyW12g=) 10: uHCer9bSYtAYzAW97IkYAtxT0oY.roa (hash: pEZrL5HUVwpESwP8P9Avj4b8s7dLWZdI+MAnQfTy42g=) 11: zLYfKKvwZksRC-Mec9uQxezCf-I.roa (hash: 7jSn1GJtzfCE3yqBQcJd/SMTsqwM51FfYe/cCLi5Z4A=) 12: zS2PBrD2vmlXLTrGFHERr-Tg3sM.roa (hash: ZKfnpYOgYarKcHUc2HZAGzDoCt3IGKzpVqNwP6NLT/8=) Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/1a/4f336b-4a79-4425-9556-be45f0d2abbb/1/nLJc5VDk2b2gW9XUXItro3Qwu7o.crl rsync://rpki.ripe.net/repository/DEFAULT/1a/4f336b-4a79-4425-9556-be45f0d2abbb/1/nLJc5VDk2b2gW9XUXItro3Qwu7o.mft rsync://rpki.ripe.net/repository/DEFAULT/nLJc5VDk2b2gW9XUXItro3Qwu7o.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Mon 20 Oct 2025 20:00:59 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:99:ff:c8:85:4e:79:18:e3:87:8b:27:24:72:9c:86:9f:97 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=9cb25ce550e4d9bda05bd5d45c8b6ba37430bbba Validity Not Before: Oct 20 04:02:35 2025 GMT Not After : Oct 21 04:02:35 2025 GMT Subject: CN=7826a5a2905cf0054de4a6efb6a0663891f85603 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:cd:b5:0c:76:ff:08:67:17:d3:1f:94:6c:c8:73: 5e:20:90:15:0e:e1:62:81:0d:8a:fb:46:c0:9e:50: 9a:7a:bf:10:65:f8:12:8c:0a:59:78:07:81:c2:41: 83:10:3c:f8:6c:b5:11:1a:10:12:1e:f4:9c:00:69: cc:9f:8e:a4:6c:78:cd:62:dd:4e:98:81:3c:d2:c5: 12:5d:50:df:4e:a3:2e:fa:a8:ca:17:17:e6:a6:6c: ed:d6:0c:75:6f:c8:a5:e8:e0:76:87:33:74:68:e3: 90:16:39:51:7e:c0:ad:46:92:3a:22:e3:b6:a8:bf: d7:0e:23:04:4c:19:3e:89:a4:20:b2:77:e6:54:4e: 37:63:49:b8:ba:30:d2:86:22:b4:d9:82:70:26:46: 59:af:85:d2:ff:d4:5c:55:82:02:74:eb:9a:65:c2: 95:7e:e7:b3:b1:9b:a7:22:58:37:32:65:e8:2b:32: f9:1b:f7:7c:41:19:b7:a7:a1:1c:c1:b3:d8:c4:3a: 7a:fb:2f:7a:f2:2e:13:f1:fd:42:bb:cd:0f:e1:39: f3:13:08:7c:53:4c:ae:45:c2:dd:ef:b5:ab:c8:ab: 86:54:93:bd:17:c4:cd:25:94:ee:63:31:52:ff:32: ce:a6:61:a1:2c:d1:03:90:17:69:0e:41:b3:1d:5d: 5a:9d Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 78:26:A5:A2:90:5C:F0:05:4D:E4:A6:EF:B6:A0:66:38:91:F8:56:03 X509v3 Authority Key Identifier: keyid:9C:B2:5C:E5:50:E4:D9:BD:A0:5B:D5:D4:5C:8B:6B:A3:74:30:BB:BA X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/nLJc5VDk2b2gW9XUXItro3Qwu7o.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/1a/4f336b-4a79-4425-9556-be45f0d2abbb/1/nLJc5VDk2b2gW9XUXItro3Qwu7o.mft X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/1a/4f336b-4a79-4425-9556-be45f0d2abbb/1/nLJc5VDk2b2gW9XUXItro3Qwu7o.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 38:82:db:60:6e:7f:2d:ec:ea:93:f0:5b:cb:9b:46:36:ec:c7: 64:d3:48:89:02:28:44:ec:f2:b2:fb:47:58:b0:cc:94:c0:bd: ca:89:4a:53:38:cc:ae:96:34:65:72:69:cd:5a:11:e1:a3:e2: da:1f:6e:57:d6:33:2c:94:44:74:fb:5f:bb:8a:0f:cf:13:1c: 96:0b:fc:42:60:cf:d0:f9:a3:9f:1d:47:04:a7:1c:5b:e7:48: 2e:28:fa:5a:de:ea:1d:82:6f:82:b0:40:9b:6a:2e:24:0b:cb: d3:d2:8e:14:b3:3e:c5:11:bd:0c:59:be:d4:36:a4:81:c8:63: 1d:92:d3:33:ac:b8:88:9e:49:6f:04:33:d3:11:61:5d:3f:df: 48:3d:f2:de:39:e4:22:ed:9b:b3:a4:b0:11:b1:77:de:ed:06: be:0d:8f:3e:bd:8f:0a:b6:01:36:35:ee:93:84:6d:39:8b:08: 49:2a:7c:1a:fa:da:20:2b:bc:8c:c2:39:7c:16:46:65:a8:dc: c4:1d:fc:d8:d8:86:ef:fa:3f:57:e0:3b:18:a1:37:8c:65:24: d7:ae:8b:ad:e7:e3:f7:08:df:9c:ea:9a:bb:19:22:fa:9a:fe: cd:51:f3:0b:cb:ff:a4:c2:6e:7b:42:95:42:a0:a5:60:89:2d: 7c:3e:42:e7 -----BEGIN CERTIFICATE----- MIIFFjCCA/6gAwIBAgISAZn/yIVOeRjjh4snJHKchp+XMA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKDljYjI1Y2U1NTBlNGQ5YmRhMDViZDVkNDVjOGI2YmEzNzQz MGJiYmEwHhcNMjUxMDIwMDQwMjM1WhcNMjUxMDIxMDQwMjM1WjAzMTEwLwYDVQQD Eyg3ODI2YTVhMjkwNWNmMDA1NGRlNGE2ZWZiNmEwNjYzODkxZjg1NjAzMIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAzbUMdv8IZxfTH5RsyHNeIJAVDuFi gQ2K+0bAnlCaer8QZfgSjApZeAeBwkGDEDz4bLURGhASHvScAGnMn46kbHjNYt1O mIE80sUSXVDfTqMu+qjKFxfmpmzt1gx1b8il6OB2hzN0aOOQFjlRfsCtRpI6IuO2 qL/XDiMETBk+iaQgsnfmVE43Y0m4ujDShiK02YJwJkZZr4XS/9RcVYICdOuaZcKV fuezsZunIlg3MmXoKzL5G/d8QRm3p6EcwbPYxDp6+y968i4T8f1Cu80P4TnzEwh8 U0yuRcLd77WryKuGVJO9F8TNJZTuYzFS/zLOpmGhLNEDkBdpDkGzHV1anQIDAQAB o4ICIjCCAh4wHQYDVR0OBBYEFHgmpaKQXPAFTeSm77agZjiR+FYDMB8GA1UdIwQY MBaAFJyyXOVQ5Nm9oFvV1FyLa6N0MLu6MA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvbkxKYzVWRGsyYjJnVzlYVVhJdHJvM1F3dTdvLmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC8xYS80ZjMzNmItNGE3OS00NDI1LTk1NTYt YmU0NWYwZDJhYmJiLzEvbkxKYzVWRGsyYjJnVzlYVVhJdHJvM1F3dTdvLm1mdDCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC8xYS80ZjMzNmItNGE3OS00NDI1LTk1NTYtYmU0NWYwZDJhYmJi LzEvbkxKYzVWRGsyYjJnVzlYVVhJdHJvM1F3dTdvLmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAOILbYG5/ Lezqk/Bby5tGNuzHZNNIiQIoROzysvtHWLDMlMC9yolKUzjMrpY0ZXJpzVoR4aPi 2h9uV9YzLJREdPtfu4oPzxMclgv8QmDP0Pmjnx1HBKccW+dILij6Wt7qHYJvgrBA m2ouJAvL09KOFLM+xRG9DFm+1DakgchjHZLTM6y4iJ5JbwQz0xFhXT/fSD3y3jnk Iu2bs6SwEbF33u0Gvg2PPr2PCrYBNjXuk4RtOYsISSp8GvraICu8jMI5fBZGZajc xB382NiG7/o/V+A7GKE3jGUk166Lrefj9wjfnOqauxki+pr+zVHzC8v/pMJue0KV QqClYIktfD5C5w== -----END CERTIFICATE-----Generated at Mon Oct 20 06:49:21 2025 by rpki-client