$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/1c/b20d83-612c-4b62-97a3-1a5e5f191bfa/1/MH2IfALgfJ5HTR-OIQScqmzj-9M.mft File: MH2IfALgfJ5HTR-OIQScqmzj-9M.mft (raw, json) Hash identifier: 9JLzDLFfdNmkJ5FkHkLECk4hK6V4bK+yhCE5TxTmync= Subject key identifier: 70:95:CA:4B:6F:8E:C1:C4:DF:BE:8A:E9:69:2D:06:42:AC:62:82:24 Authority key identifier: 30:7D:88:7C:02:E0:7C:9E:47:4D:1F:8E:21:04:9C:AA:6C:E3:FB:D3 Certificate issuer: /CN=307d887c02e07c9e474d1f8e21049caa6ce3fbd3 Certificate serial: 0199FEB518215CE3DE786908CF0B1B7BD049 Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/MH2IfALgfJ5HTR-OIQScqmzj-9M.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/1c/b20d83-612c-4b62-97a3-1a5e5f191bfa/1/MH2IfALgfJ5HTR-OIQScqmzj-9M.mft Manifest number: 16E7 Signing time: Sun 19 Oct 2025 23:01:45 +0000 Manifest this update: Sun 19 Oct 2025 23:01:45 +0000 Manifest next update: Mon 20 Oct 2025 23:01:45 +0000 Files and hashes: 1: Go3D60IftVT7kBobBk8HTq_r6wY.roa (hash: /aH1VuqUtHMC947Kt5tr1ajHSrdHN60XTYZiPes2dOU=) 2: JKKr0NwqKrBRfO9-TNMA6fKjebU.roa (hash: +prVLn/SSNSb/SQ4BmX9heAxTyq0XNrqnNVcVb/zNYQ=) 3: MH2IfALgfJ5HTR-OIQScqmzj-9M.crl (hash: NpCruEM3KYBBeAh5NSPqdlucfXgHu0Jr8NYLc23VGqo=) 4: OrdWNePRO-azuf-x7WJ0gNqkZc8.roa (hash: ehZsJBwER/Ak+kPEJiQOXw5pziTKWHwzzGUWq4oZM/c=) 5: Q3_mv-tF2Z1EHDZHaZk8mJMN1bk.roa (hash: oXSPeYLnMI9gMBulzyR8eDJwfmPdLhgYhc4vqS0U/tE=) 6: S2TXSI-3n25IfgGnM4uuJwml268.roa (hash: DAgFF4qJxC/k8JOz+sB1Q1cvXx4PDaouIru4SXZXgbU=) 7: UJuJe34B0guqTgOl--QOCgSYvZE.roa (hash: c2O3pbkk6z+NjOLR47vzvdpTF+ZJKIik+rzOAO3mk2Y=) 8: bR8kj_c2TPqFFFMT255K3OTqBTI.roa (hash: mIG3JTVdQTlKmcdrQlCtE5KtfNee8F1irJglkfAd6/0=) 9: e_JO57HIUgxnL2zZw_SZRKtvz2k.roa (hash: kYzJL9upOKUtQTqnQ+rXijBf3P483K+T+FEi6SAaLE0=) 10: qkn09gGw9_pYS22v_SrDemeIoJI.roa (hash: OSIoNd4NerHm/MUfEqmcXlQFZ/K6gwLw7wnqNHc3YTQ=) Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/1c/b20d83-612c-4b62-97a3-1a5e5f191bfa/1/MH2IfALgfJ5HTR-OIQScqmzj-9M.crl rsync://rpki.ripe.net/repository/DEFAULT/1c/b20d83-612c-4b62-97a3-1a5e5f191bfa/1/MH2IfALgfJ5HTR-OIQScqmzj-9M.mft rsync://rpki.ripe.net/repository/DEFAULT/MH2IfALgfJ5HTR-OIQScqmzj-9M.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Mon 20 Oct 2025 23:01:45 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:99:fe:b5:18:21:5c:e3:de:78:69:08:cf:0b:1b:7b:d0:49 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=307d887c02e07c9e474d1f8e21049caa6ce3fbd3 Validity Not Before: Oct 19 23:01:45 2025 GMT Not After : Oct 20 23:01:45 2025 GMT Subject: CN=7095ca4b6f8ec1c4dfbe8ae9692d0642ac628224 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:de:29:ae:3a:44:92:b3:25:a6:bf:5d:83:ef:1d: 30:12:37:26:d6:1d:cf:ea:3d:54:82:8c:f2:47:0d: a5:8d:7e:80:d8:de:cf:9c:fb:3a:10:c9:8a:41:3d: 00:48:45:80:b8:3a:30:a1:ca:d5:71:2e:5d:32:37: d2:ed:bc:14:c5:f4:cc:e4:49:54:a1:3b:2c:33:da: 73:68:49:02:3b:dd:30:42:06:83:5b:9a:a1:87:c0: aa:5e:71:b7:9e:99:02:17:bd:a0:ce:6e:8c:7e:be: dd:92:4a:8b:9b:76:dc:9c:d5:ee:a3:03:b9:19:54: 66:d9:db:c5:0c:2a:cf:22:e2:f8:73:a1:69:89:86: a5:03:2f:a0:f2:7b:bf:46:88:3c:c6:ab:43:12:ee: b5:8a:da:33:bb:39:45:0f:fd:64:aa:94:be:a8:2a: 5f:de:a5:04:ed:9d:6d:7b:ad:1e:08:13:fa:f4:75: c8:5d:ad:9a:f8:4b:a2:e1:1f:be:59:b3:08:6a:36: fa:7a:55:b2:5e:99:2a:5a:95:c4:c9:f6:02:a7:48: ea:8c:85:68:fa:30:cf:ab:d1:1f:92:3a:75:67:5e: 0c:74:63:04:e7:dc:40:11:9b:c0:91:f0:a8:c3:0e: 04:7b:5d:58:05:26:df:27:bc:a5:7b:99:b7:82:cd: 8d:dd Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 70:95:CA:4B:6F:8E:C1:C4:DF:BE:8A:E9:69:2D:06:42:AC:62:82:24 X509v3 Authority Key Identifier: keyid:30:7D:88:7C:02:E0:7C:9E:47:4D:1F:8E:21:04:9C:AA:6C:E3:FB:D3 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/MH2IfALgfJ5HTR-OIQScqmzj-9M.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/1c/b20d83-612c-4b62-97a3-1a5e5f191bfa/1/MH2IfALgfJ5HTR-OIQScqmzj-9M.mft X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/1c/b20d83-612c-4b62-97a3-1a5e5f191bfa/1/MH2IfALgfJ5HTR-OIQScqmzj-9M.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 9a:9d:b2:22:19:a5:63:23:f8:5e:2f:d0:9f:a2:47:a6:b5:23: ec:d4:81:ab:f2:ca:32:cd:e2:d3:31:e5:a0:a8:34:fa:9e:de: 4a:8e:ce:60:04:da:ce:02:f4:13:62:7c:f2:e4:50:ff:59:b7: 0d:fa:09:47:d3:1a:78:92:2c:1f:82:09:e7:e3:de:07:b1:ed: 4c:43:41:74:12:9a:e3:54:b1:07:47:c9:c5:fc:47:86:17:fe: 7e:87:bd:47:e0:99:24:73:46:57:40:e6:a3:fd:78:f4:33:6c: b4:48:91:ca:4a:94:13:a7:6c:5d:ce:a8:9b:ee:89:03:5c:d6: c6:c4:8c:4f:3f:1d:24:1e:a1:48:f6:e5:18:81:38:46:13:3b: 6d:3c:fa:e5:f1:98:9c:39:74:25:82:e1:c8:57:e5:97:9f:fe: c8:94:68:4b:d7:ee:5a:d6:37:bd:22:11:ef:bc:0e:db:00:df: 31:fd:25:38:a8:56:7a:00:a5:0b:06:96:62:1e:f9:72:28:e0: 09:d6:66:be:22:1c:67:ce:0d:15:ca:11:d9:73:9b:d4:47:e2: 09:e2:e3:10:34:78:be:0d:65:18:2a:3f:f7:09:fb:bf:dd:ee: ed:17:1d:d6:5b:7f:ba:23:f6:35:a9:5d:f7:c0:41:af:3b:8b: 97:06:ff:f8 -----BEGIN CERTIFICATE----- MIIFFjCCA/6gAwIBAgISAZn+tRghXOPeeGkIzwsbe9BJMA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKDMwN2Q4ODdjMDJlMDdjOWU0NzRkMWY4ZTIxMDQ5Y2FhNmNl M2ZiZDMwHhcNMjUxMDE5MjMwMTQ1WhcNMjUxMDIwMjMwMTQ1WjAzMTEwLwYDVQQD Eyg3MDk1Y2E0YjZmOGVjMWM0ZGZiZThhZTk2OTJkMDY0MmFjNjI4MjI0MIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEA3imuOkSSsyWmv12D7x0wEjcm1h3P 6j1UgozyRw2ljX6A2N7PnPs6EMmKQT0ASEWAuDowocrVcS5dMjfS7bwUxfTM5ElU oTssM9pzaEkCO90wQgaDW5qhh8CqXnG3npkCF72gzm6Mfr7dkkqLm3bcnNXuowO5 GVRm2dvFDCrPIuL4c6FpiYalAy+g8nu/Rog8xqtDEu61itozuzlFD/1kqpS+qCpf 3qUE7Z1te60eCBP69HXIXa2a+Eui4R++WbMIajb6elWyXpkqWpXEyfYCp0jqjIVo +jDPq9Efkjp1Z14MdGME59xAEZvAkfCoww4Ee11YBSbfJ7yle5m3gs2N3QIDAQAB o4ICIjCCAh4wHQYDVR0OBBYEFHCVyktvjsHE376K6WktBkKsYoIkMB8GA1UdIwQY MBaAFDB9iHwC4HyeR00fjiEEnKps4/vTMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvTUgySWZBTGdmSjVIVFItT0lRU2NxbXpqLTlNLmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC8xYy9iMjBkODMtNjEyYy00YjYyLTk3YTMt MWE1ZTVmMTkxYmZhLzEvTUgySWZBTGdmSjVIVFItT0lRU2NxbXpqLTlNLm1mdDCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC8xYy9iMjBkODMtNjEyYy00YjYyLTk3YTMtMWE1ZTVmMTkxYmZh LzEvTUgySWZBTGdmSjVIVFItT0lRU2NxbXpqLTlNLmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAmp2yIhml YyP4Xi/Qn6JHprUj7NSBq/LKMs3i0zHloKg0+p7eSo7OYATazgL0E2J88uRQ/1m3 DfoJR9MaeJIsH4IJ5+PeB7HtTENBdBKa41SxB0fJxfxHhhf+foe9R+CZJHNGV0Dm o/149DNstEiRykqUE6dsXc6om+6JA1zWxsSMTz8dJB6hSPblGIE4RhM7bTz65fGY nDl0JYLhyFfll5/+yJRoS9fuWtY3vSIR77wO2wDfMf0lOKhWegClCwaWYh75cijg CdZmviIcZ84NFcoR2XOb1EfiCeLjEDR4vg1lGCo/9wn7v93u7Rcd1lt/uiP2Nald 98BBrzuLlwb/+A== -----END CERTIFICATE-----Generated at Mon Oct 20 07:47:15 2025 by rpki-client