$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/28/972db6-770f-4462-9fc7-ee9b9517f2ec/1/dXzv42s_zGikLAr_gdFEmA8yd38.mft File: dXzv42s_zGikLAr_gdFEmA8yd38.mft (raw, json) Hash identifier: fxtQrkMwgFr6xhBL8lZ/qUJgNwoPjZB/43JF2aOjL1o= Subject key identifier: 4D:88:D5:92:6E:B5:BF:14:16:C6:D8:37:CA:BB:8E:46:04:3B:D2:F6 Authority key identifier: 75:7C:EF:E3:6B:3F:CC:68:A4:2C:0A:FF:81:D1:44:98:0F:32:77:7F Certificate issuer: /CN=757cefe36b3fcc68a42c0aff81d144980f32777f Certificate serial: 0199FEEBE9EB2BFD3880969FB363404AF97F Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/dXzv42s_zGikLAr_gdFEmA8yd38.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/28/972db6-770f-4462-9fc7-ee9b9517f2ec/1/dXzv42s_zGikLAr_gdFEmA8yd38.mft Manifest number: 0E36 Signing time: Mon 20 Oct 2025 00:01:37 +0000 Manifest this update: Mon 20 Oct 2025 00:01:37 +0000 Manifest next update: Tue 21 Oct 2025 00:01:37 +0000 Files and hashes: 1: 2MnJb6c5YnNQ1zVgyuJ_IZ3n2QI.roa (hash: k/m6yvyjLdB8+4uEbTkqM+WRV4cgI1Ugl2bD6WkY+xM=) 2: 4Yl_3VM-kdroRBsz7nPcb_MfTYo.roa (hash: 2xScy0N/ISEI1qEUmAbHyPZ6hI9GPPFsgivLJsiPGzo=) 3: AsZ4lIlUC0d5mfRed_ShT3RnpBQ.roa (hash: W7NsqtDHS3yDz7/Se2vS6CdoOqQMP8fqf009dcbuclU=) 4: LPKpfkMJen9TUH4ZfxgOzxqHkNU.roa (hash: ING4rNZCefT1Q8B8npudHtyqQQUdosJKFpOv34aIHJk=) 5: MUsQigUUD2skKaCxyUsENnVfQc0.roa (hash: jiSuFC22L+bIpKGlJw58reJLq1BBaex8I+CdJw/e78g=) 6: N1rTidaACgh8Wl5J2g45GZumvQs.roa (hash: btCaFx/Jws6uzlXHydN6cLSWM9L6FDcS4ymcYrWP048=) 7: QLSi2rt1O1JSB2xvplp7PlveXtg.roa (hash: CJckh9U7g4k22Y1px/S9+LFwlSJ6Nh0bfkakMVUbycs=) 8: UVAz1jDT3iVOFvSm2qO2EdM6DgI.roa (hash: BgGgY29/jzHM3rW+5X9NXDmgQhNrFZgHRGbC0+SNOiA=) 9: _nhJlKXz7BdzXM9V2so0ulXYdQ8.roa (hash: zbx8UKqbSkWGDOnlDHibU4j+KrjwQxd5U1nrDqZ13ro=) 10: dXzv42s_zGikLAr_gdFEmA8yd38.crl (hash: X+nys7sPl9wOCV1a6UHi6WZrMrQtJFxrnKHDRi1DEtw=) 11: jDjNyFwAapaWNqqE1KH036qPjhc.roa (hash: Si6XelwLC+fA9YMEMfyBKiOqZ8i7VcTCq0MWUBgH77I=) 12: omApJ8ZKR4XFaIu8UV0AdkcF3F4.roa (hash: xZcc8vbsQpepsoA3jDnIWvOKGnfbdef1RwrZnZhSI2M=) 13: ugpSKfU4cI4BHNBN_7iW8XaPfSI.roa (hash: db0tkxspHpe7xqGkGEEw5zEcWk0GCNRtkvpsh9z8Yis=) Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/28/972db6-770f-4462-9fc7-ee9b9517f2ec/1/dXzv42s_zGikLAr_gdFEmA8yd38.crl rsync://rpki.ripe.net/repository/DEFAULT/28/972db6-770f-4462-9fc7-ee9b9517f2ec/1/dXzv42s_zGikLAr_gdFEmA8yd38.mft rsync://rpki.ripe.net/repository/DEFAULT/dXzv42s_zGikLAr_gdFEmA8yd38.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Mon 20 Oct 2025 20:00:59 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:99:fe:eb:e9:eb:2b:fd:38:80:96:9f:b3:63:40:4a:f9:7f Signature Algorithm: sha256WithRSAEncryption Issuer: CN=757cefe36b3fcc68a42c0aff81d144980f32777f Validity Not Before: Oct 20 00:01:37 2025 GMT Not After : Oct 21 00:01:37 2025 GMT Subject: CN=4d88d5926eb5bf1416c6d837cabb8e46043bd2f6 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:a9:cc:4a:de:4d:02:2d:26:bc:3d:9c:08:00:e7: 2a:82:f9:04:33:cd:6e:1a:0a:62:35:33:75:0d:e6: ec:48:e7:c8:b1:78:2e:dd:e7:d3:ef:46:99:13:15: 75:e6:11:91:1f:9f:e7:f6:b0:0b:1f:f8:13:cc:6a: ad:90:e1:0f:68:b3:d1:c7:d1:9e:f8:b1:76:44:02: 95:d3:49:30:70:9f:fb:00:07:66:a8:a2:fb:9f:1d: ea:80:2d:07:b3:83:ff:aa:a4:84:37:a2:ba:58:4c: 96:93:de:dd:11:1e:d6:24:fb:96:54:4c:ff:fd:fc: 53:e2:bf:22:c9:53:a4:40:b1:00:59:7e:8f:e0:2e: f2:55:02:0c:c5:5e:00:ed:13:c4:7d:40:d5:42:55: 99:e4:8f:29:a8:67:6d:87:cb:86:67:ef:df:97:9e: 80:40:a1:5e:ad:c2:45:5c:26:cc:c3:ae:93:e3:a4: b8:97:c1:f6:2b:f7:da:4a:cf:b7:65:3f:ea:12:c8: 40:70:1c:5a:d4:b3:a7:15:9f:0f:cc:81:5d:e9:98: 4b:d9:10:ee:2d:e4:87:ac:02:57:7b:ec:1d:89:be: 64:49:a0:cc:bb:3d:c7:ff:f0:24:c4:d1:68:bc:04: f8:5d:db:1a:1d:67:00:6a:17:fd:1d:17:bf:c9:78: 9c:59 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 4D:88:D5:92:6E:B5:BF:14:16:C6:D8:37:CA:BB:8E:46:04:3B:D2:F6 X509v3 Authority Key Identifier: keyid:75:7C:EF:E3:6B:3F:CC:68:A4:2C:0A:FF:81:D1:44:98:0F:32:77:7F X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/dXzv42s_zGikLAr_gdFEmA8yd38.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/28/972db6-770f-4462-9fc7-ee9b9517f2ec/1/dXzv42s_zGikLAr_gdFEmA8yd38.mft X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/28/972db6-770f-4462-9fc7-ee9b9517f2ec/1/dXzv42s_zGikLAr_gdFEmA8yd38.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 16:94:34:b7:45:a9:41:cc:61:7a:4b:79:e9:40:bc:c9:88:e1: bd:64:99:0d:5a:25:0c:23:bc:a5:d0:4f:27:8e:44:83:ed:60: 8a:ff:34:41:f7:6b:15:c9:9d:6b:ea:6b:21:ac:01:04:f0:3f: 7d:d6:bb:34:36:0a:09:e8:83:9b:6e:fe:00:8f:0b:34:e5:60: 1c:5a:ac:78:21:d8:6d:d1:71:25:f7:aa:0c:12:3c:2c:e6:0d: dc:1f:3d:16:21:4c:21:b0:52:5c:30:f7:e3:20:23:34:ff:b6: cb:38:0a:fc:f3:d1:00:52:2a:b3:e0:1a:bb:97:db:c9:7f:4c: 91:0c:79:27:87:26:bd:f7:d7:3b:cc:67:d3:db:f1:6a:6d:c6: c3:7b:34:0e:b3:3c:1d:50:7b:f2:fb:e4:f0:97:cf:a2:5d:17: a2:01:58:81:b3:fc:84:e6:0a:7f:3d:a9:61:ee:c9:45:cb:2b: 78:93:46:a4:cd:eb:33:b8:f3:ac:e3:ad:66:f4:da:21:e0:6b: 75:d2:7c:a5:90:a9:19:b8:14:88:40:54:7b:48:a5:53:d0:bb: 14:ec:f1:9b:82:fc:f1:13:36:bf:0a:5f:e8:85:6f:04:1e:69: 4d:43:43:3c:60:0f:74:13:d3:f9:05:07:18:e9:81:d0:df:4c: 3c:fe:e0:2d -----BEGIN CERTIFICATE----- MIIFFjCCA/6gAwIBAgISAZn+6+nrK/04gJafs2NASvl/MA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKDc1N2NlZmUzNmIzZmNjNjhhNDJjMGFmZjgxZDE0NDk4MGYz Mjc3N2YwHhcNMjUxMDIwMDAwMTM3WhcNMjUxMDIxMDAwMTM3WjAzMTEwLwYDVQQD Eyg0ZDg4ZDU5MjZlYjViZjE0MTZjNmQ4MzdjYWJiOGU0NjA0M2JkMmY2MIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAqcxK3k0CLSa8PZwIAOcqgvkEM81u GgpiNTN1DebsSOfIsXgu3efT70aZExV15hGRH5/n9rALH/gTzGqtkOEPaLPRx9Ge +LF2RAKV00kwcJ/7AAdmqKL7nx3qgC0Hs4P/qqSEN6K6WEyWk97dER7WJPuWVEz/ /fxT4r8iyVOkQLEAWX6P4C7yVQIMxV4A7RPEfUDVQlWZ5I8pqGdth8uGZ+/fl56A QKFercJFXCbMw66T46S4l8H2K/faSs+3ZT/qEshAcBxa1LOnFZ8PzIFd6ZhL2RDu LeSHrAJXe+wdib5kSaDMuz3H//AkxNFovAT4XdsaHWcAahf9HRe/yXicWQIDAQAB o4ICIjCCAh4wHQYDVR0OBBYEFE2I1ZJutb8UFsbYN8q7jkYEO9L2MB8GA1UdIwQY MBaAFHV87+NrP8xopCwK/4HRRJgPMnd/MA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvZFh6djQyc196R2lrTEFyX2dkRkVtQTh5ZDM4LmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC8yOC85NzJkYjYtNzcwZi00NDYyLTlmYzct ZWU5Yjk1MTdmMmVjLzEvZFh6djQyc196R2lrTEFyX2dkRkVtQTh5ZDM4Lm1mdDCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC8yOC85NzJkYjYtNzcwZi00NDYyLTlmYzctZWU5Yjk1MTdmMmVj LzEvZFh6djQyc196R2lrTEFyX2dkRkVtQTh5ZDM4LmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAFpQ0t0Wp Qcxhekt56UC8yYjhvWSZDVolDCO8pdBPJ45Eg+1giv80QfdrFcmda+prIawBBPA/ fda7NDYKCeiDm27+AI8LNOVgHFqseCHYbdFxJfeqDBI8LOYN3B89FiFMIbBSXDD3 4yAjNP+2yzgK/PPRAFIqs+Aau5fbyX9MkQx5J4cmvffXO8xn09vxam3Gw3s0DrM8 HVB78vvk8JfPol0XogFYgbP8hOYKfz2pYe7JRcsreJNGpM3rM7jzrOOtZvTaIeBr ddJ8pZCpGbgUiEBUe0ilU9C7FOzxm4L88RM2vwpf6IVvBB5pTUNDPGAPdBPT+QUH GOmB0N9MPP7gLQ== -----END CERTIFICATE-----Generated at Mon Oct 20 06:59:05 2025 by rpki-client