$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/22/dab420-0de3-4321-9c09-6b5f68522a7d/1/p-4YLZxDpc5waN_Zunqo7ZDl4Lo.mft File: p-4YLZxDpc5waN_Zunqo7ZDl4Lo.mft (raw, json) Hash identifier: 82lW/KQ0QW/H/1Rgm8O0yoL0k724JTXbn0MBcBg63Ck= Subject key identifier: 16:26:25:44:F7:A8:00:55:82:A2:2A:E1:C8:98:77:E5:4C:90:0F:8E Authority key identifier: A7:EE:18:2D:9C:43:A5:CE:70:68:DF:D9:BA:7A:A8:ED:90:E5:E0:BA Certificate issuer: /CN=a7ee182d9c43a5ce7068dfd9ba7aa8ed90e5e0ba Certificate serial: 0199FC58F2B8F95A5375C9BCA74DCA817479 Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/p-4YLZxDpc5waN_Zunqo7ZDl4Lo.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/22/dab420-0de3-4321-9c09-6b5f68522a7d/1/p-4YLZxDpc5waN_Zunqo7ZDl4Lo.mft Manifest number: 16FC Signing time: Sun 19 Oct 2025 12:01:51 +0000 Manifest this update: Sun 19 Oct 2025 12:01:51 +0000 Manifest next update: Mon 20 Oct 2025 12:01:51 +0000 Files and hashes: 1: 6VFvznM1ivuDVDr2-zJ8Rc9HL4c.roa (hash: YFFcoS2pkj0ppsY1suyM7N1UBbz37UF87GS5rHAetLM=) 2: HG0sxwCI7w4fkh8VU0N2fcVMuLU.roa (hash: 1EixzIypMSg7Afd2h1TllH/pBszhQ8LEEsFtCe9BNAQ=) 3: SF9inl-Z2UBEp7L7rHoMTP2o47I.roa (hash: OJPpBVtZqLTjhkxtA0o0cIzlBYqPE/6vDiaXNk1Wf6s=) 4: YkO14vUX3HHLD5m73eeF94u-z9Y.roa (hash: myJ7UTUt7mcT9gjy0mgRP7jrD85IU3fMUws/RpMjTT4=) 5: ays9--_IW8JzhtfNk76o0BfVsHs.roa (hash: m+8N0lTDKN6USUkq7MoOzNst+iEzsskPzpKLc4PITjQ=) 6: bTtf1_C9R2Bt4xdvshIG3OCVSD0.roa (hash: Z47R6cDRJGZAaj0MeG+895zHqKHcV33MIM2W9d4hC9E=) 7: c-pova8C1uulibxroeJZUgkQnv8.roa (hash: OvhwnSV+pVkr5UA9RfkEZJQ3n/9Mm7Ihqgy3rKhknz8=) 8: cdiLy2n18Y-vOIkFViZGUd7RsKM.roa (hash: /+RvQbcmllMNKfEXhyM/QGFxvrK6kosbr0fHB6H8FyU=) 9: dVPbIRfsnF_eS0blJ9Y7zNoUs7k.roa (hash: ShygWBXCmOMXv5YpTJlMJ5UYglgVh9DDoGkuss6YEGo=) 10: obNE3NdMVlCy0XPf9mK-g4oa9eg.roa (hash: 7NjsanTWQOoFeSktyUJvcMuLG2S6+z5IgmOffiI6238=) 11: p-4YLZxDpc5waN_Zunqo7ZDl4Lo.crl (hash: k33ZWDy4zG0uQw6Fx9XHTmmelRlAMOHb5z5WcdchhKU=) 12: un7p1oX6IuixEnJw52S1lgp4k0A.roa (hash: zhKv5DC0Mh83opPQLWP9MGfrzkdDgqEhOQ8/1xd2cZA=) 13: vXPdTshBqnn4ghgMByB7XXaLYRA.roa (hash: f07bhqR7ZOptfaHvf20BCw3ge0IxK37mw/76h6jHsI0=) Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/22/dab420-0de3-4321-9c09-6b5f68522a7d/1/p-4YLZxDpc5waN_Zunqo7ZDl4Lo.crl rsync://rpki.ripe.net/repository/DEFAULT/22/dab420-0de3-4321-9c09-6b5f68522a7d/1/p-4YLZxDpc5waN_Zunqo7ZDl4Lo.mft rsync://rpki.ripe.net/repository/DEFAULT/p-4YLZxDpc5waN_Zunqo7ZDl4Lo.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Mon 20 Oct 2025 11:18:59 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:99:fc:58:f2:b8:f9:5a:53:75:c9:bc:a7:4d:ca:81:74:79 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=a7ee182d9c43a5ce7068dfd9ba7aa8ed90e5e0ba Validity Not Before: Oct 19 12:01:51 2025 GMT Not After : Oct 20 12:01:51 2025 GMT Subject: CN=16262544f7a8005582a22ae1c89877e54c900f8e Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:cc:fa:5a:d5:7e:88:fe:d8:18:b0:9f:63:a4:1f: 22:0a:d9:6f:1f:80:b0:29:c7:65:2c:04:dc:a1:93: 0a:18:ce:59:80:28:b2:59:21:ad:09:c0:c2:c1:0d: 98:37:2d:fe:77:c2:23:2f:fc:e3:64:50:9f:f6:54: 1c:32:81:17:02:d7:b9:e7:63:64:c8:77:51:a0:92: 6f:d9:9b:8f:38:12:2d:4e:43:eb:8f:07:05:63:d8: ab:6c:a1:b0:cc:d5:16:9f:60:dc:de:1e:a7:1a:15: a4:c8:62:cf:d6:6c:bc:b4:c0:e5:35:b7:a6:68:3e: 1d:20:bf:d4:58:58:74:4d:39:68:2e:3a:0d:b4:eb: e5:da:cd:c7:c8:47:b2:cd:3e:f9:52:ff:9c:b6:f7: c4:58:56:53:0a:e1:2b:dc:6c:ab:84:56:f3:bd:62: fd:0c:38:14:43:67:37:8b:9c:c3:6d:06:ff:40:14: 45:e8:e1:07:cd:bf:01:6d:4a:05:ba:26:63:d7:2a: af:06:0f:39:55:ba:1f:9f:8a:f8:82:15:5e:e8:b9: 2a:6b:3a:7f:d4:c3:87:e0:1e:08:75:09:27:51:b7: a8:d7:b9:9b:e5:57:dc:48:57:38:08:89:e2:de:15: e5:1d:4d:08:d2:8b:23:1a:75:c3:81:6f:61:00:1d: 9e:99 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 16:26:25:44:F7:A8:00:55:82:A2:2A:E1:C8:98:77:E5:4C:90:0F:8E X509v3 Authority Key Identifier: keyid:A7:EE:18:2D:9C:43:A5:CE:70:68:DF:D9:BA:7A:A8:ED:90:E5:E0:BA X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/p-4YLZxDpc5waN_Zunqo7ZDl4Lo.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/22/dab420-0de3-4321-9c09-6b5f68522a7d/1/p-4YLZxDpc5waN_Zunqo7ZDl4Lo.mft X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/22/dab420-0de3-4321-9c09-6b5f68522a7d/1/p-4YLZxDpc5waN_Zunqo7ZDl4Lo.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 5b:d4:5b:36:9b:bc:f2:1d:01:08:c7:8e:b4:3a:fc:22:bd:e4: 42:27:0e:23:2c:74:9b:3c:17:66:55:54:33:67:b4:a8:2f:20: c7:f8:58:ae:36:4f:a1:8b:20:fb:20:a9:cf:19:89:d4:be:97: 81:e3:11:c3:70:fc:1a:96:f9:16:fa:7c:c8:11:12:6e:cd:ea: 6b:7a:18:3a:82:06:c3:14:8c:b9:b6:70:69:34:9f:c9:89:58: f2:47:25:83:9f:15:73:88:71:82:5d:8d:09:66:8a:cd:24:43: c0:7f:00:b3:43:0d:23:53:89:3c:ce:b7:aa:54:f7:82:7d:a2: f5:e3:d8:45:29:c6:a2:65:e2:13:df:73:e8:e3:52:bd:9a:34: 30:d0:92:af:91:9f:8b:45:4d:dd:02:e3:0f:54:37:f6:6e:65: 23:8a:b8:90:0c:5d:d7:7f:4a:a5:97:30:00:b2:bb:53:26:80: 99:c6:e7:a9:c3:bf:bd:33:40:ee:2b:f1:9d:f6:d6:a1:5f:a4: 90:40:38:f8:d6:f6:d6:04:8a:5a:82:63:ed:31:d9:d1:03:ee: 3b:6b:15:f4:6b:86:db:aa:06:f6:ea:21:e4:a6:a5:0b:b1:ca: 84:e7:a4:21:03:4b:ab:f8:1e:d0:dc:e5:1a:8e:64:80:3d:a0: 59:c7:1c:97 -----BEGIN CERTIFICATE----- MIIFFjCCA/6gAwIBAgISAZn8WPK4+VpTdcm8p03KgXR5MA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKGE3ZWUxODJkOWM0M2E1Y2U3MDY4ZGZkOWJhN2FhOGVkOTBl NWUwYmEwHhcNMjUxMDE5MTIwMTUxWhcNMjUxMDIwMTIwMTUxWjAzMTEwLwYDVQQD EygxNjI2MjU0NGY3YTgwMDU1ODJhMjJhZTFjODk4NzdlNTRjOTAwZjhlMIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAzPpa1X6I/tgYsJ9jpB8iCtlvH4Cw KcdlLATcoZMKGM5ZgCiyWSGtCcDCwQ2YNy3+d8IjL/zjZFCf9lQcMoEXAte552Nk yHdRoJJv2ZuPOBItTkPrjwcFY9irbKGwzNUWn2Dc3h6nGhWkyGLP1my8tMDlNbem aD4dIL/UWFh0TTloLjoNtOvl2s3HyEeyzT75Uv+ctvfEWFZTCuEr3GyrhFbzvWL9 DDgUQ2c3i5zDbQb/QBRF6OEHzb8BbUoFuiZj1yqvBg85Vbofn4r4ghVe6Lkqazp/ 1MOH4B4IdQknUbeo17mb5VfcSFc4CIni3hXlHU0I0osjGnXDgW9hAB2emQIDAQAB o4ICIjCCAh4wHQYDVR0OBBYEFBYmJUT3qABVgqIq4ciYd+VMkA+OMB8GA1UdIwQY MBaAFKfuGC2cQ6XOcGjf2bp6qO2Q5eC6MA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvcC00WUxaeERwYzV3YU5fWnVucW83WkRsNExvLmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC8yMi9kYWI0MjAtMGRlMy00MzIxLTljMDkt NmI1ZjY4NTIyYTdkLzEvcC00WUxaeERwYzV3YU5fWnVucW83WkRsNExvLm1mdDCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC8yMi9kYWI0MjAtMGRlMy00MzIxLTljMDktNmI1ZjY4NTIyYTdk LzEvcC00WUxaeERwYzV3YU5fWnVucW83WkRsNExvLmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAW9RbNpu8 8h0BCMeOtDr8Ir3kQicOIyx0mzwXZlVUM2e0qC8gx/hYrjZPoYsg+yCpzxmJ1L6X geMRw3D8Gpb5Fvp8yBESbs3qa3oYOoIGwxSMubZwaTSfyYlY8kclg58Vc4hxgl2N CWaKzSRDwH8As0MNI1OJPM63qlT3gn2i9ePYRSnGomXiE99z6ONSvZo0MNCSr5Gf i0VN3QLjD1Q39m5lI4q4kAxd139KpZcwALK7UyaAmcbnqcO/vTNA7ivxnfbWoV+k kEA4+Nb21gSKWoJj7THZ0QPuO2sV9GuG26oG9uoh5KalC7HKhOekIQNLq/ge0Nzl Go5kgD2gWccclw== -----END CERTIFICATE-----Generated at Sun Oct 19 18:15:17 2025 by rpki-client