$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/28/ebbac9-fee7-4f3b-8cd5-7a41254eaaca/1/tyWIwA7vcVgJ61_dbWcXzCjA36w.mft File: tyWIwA7vcVgJ61_dbWcXzCjA36w.mft (raw, json) Hash identifier: 7VINzKz9iS15l+Z+NqTX9glPu6QnYov7/gpfeIsGsak= Subject key identifier: B6:92:14:B9:69:99:DC:62:5D:A7:9D:6A:69:63:5E:8B:08:96:E6:63 Authority key identifier: B7:25:88:C0:0E:EF:71:58:09:EB:5F:DD:6D:67:17:CC:28:C0:DF:AC Certificate issuer: /CN=b72588c00eef715809eb5fdd6d6717cc28c0dfac Certificate serial: 0199FEB5033BF79F7A72D732BC8B9848EC2B Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/tyWIwA7vcVgJ61_dbWcXzCjA36w.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/28/ebbac9-fee7-4f3b-8cd5-7a41254eaaca/1/tyWIwA7vcVgJ61_dbWcXzCjA36w.mft Manifest number: 16F6 Signing time: Sun 19 Oct 2025 23:01:39 +0000 Manifest this update: Sun 19 Oct 2025 23:01:39 +0000 Manifest next update: Mon 20 Oct 2025 23:01:39 +0000 Files and hashes: 1: 30BxK6_jpie3YrLCVwh_L1trwzk.roa (hash: X9FbkEMlA2QphV+O7rBHZ0meCsmOLXe9r7nPMvJuQcE=) 2: Dbj9xuGjig4FQD4z5CtOr-cvTeI.roa (hash: Kh8CzaShn4hw0xJ/eT2H0TnUMB7Vdu0F94Rtfvnict8=) 3: EuktsmR6HvXm2m5YsC5Wyo5ecw4.roa (hash: JZi+DlaPt3ZWFPrgsMEzdF/6HYunSwsq7ugQUzVGcAU=) 4: F-P_HvBB3WeH7KniyH81o28KKbo.roa (hash: 8sYaDjHEHJUFW2fXpmzCzQDMt9L045SyDdjIlOEUNco=) 5: Il7zmHjI6jj-0rEtM_yBLvYuye4.roa (hash: de+WYdahLIsSTArl8Hy+qPN/PBIbGPDv82xXs+xKdZY=) 6: WBOYQCAoKRyLsa6JAYAHwgmZIqI.roa (hash: lyZfLnKwP7kxcM63676+jKHGePevi3n5oMgldGNu5qA=) 7: WR7z7m7JZCweB81LV8VsoLwZDDI.roa (hash: n+zNUpOUwgPN3iy+Ul6bCia4Bw0P9Lb0d3EbTWyw+/I=) 8: eNRtwGVQ1VdkNKBRZ8o9uf4Ec24.roa (hash: syspd0kan424RvhNNvOMRktLryIova5s5SuLnxOMs4I=) 9: inKVgfg6tkDW3-Ko2Fj1q9U9rjM.roa (hash: m3IZ4E9iTFBEvHgMwMmb/F3F5jQFINfkwm1zng7j3wE=) 10: jmu-RUwAGlfdjyuIX4pdgwp2S_c.roa (hash: 0w/XwzNScEN/vprJx5SJRgxW5WArgctvQM2YSDSFtog=) 11: tLlGubJJap72E2l8gRh9Uuu4S8A.roa (hash: jBh5pu7FnbvAeJHH3DMpIfaMMsMyb9LyPf0qd9sE/90=) 12: tyWIwA7vcVgJ61_dbWcXzCjA36w.crl (hash: iNrJvGNqDfqlqZp8RmKN5XXKOtrs/ySAF4OzCle+wJg=) Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/28/ebbac9-fee7-4f3b-8cd5-7a41254eaaca/1/tyWIwA7vcVgJ61_dbWcXzCjA36w.crl rsync://rpki.ripe.net/repository/DEFAULT/28/ebbac9-fee7-4f3b-8cd5-7a41254eaaca/1/tyWIwA7vcVgJ61_dbWcXzCjA36w.mft rsync://rpki.ripe.net/repository/DEFAULT/tyWIwA7vcVgJ61_dbWcXzCjA36w.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Mon 20 Oct 2025 23:01:39 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:99:fe:b5:03:3b:f7:9f:7a:72:d7:32:bc:8b:98:48:ec:2b Signature Algorithm: sha256WithRSAEncryption Issuer: CN=b72588c00eef715809eb5fdd6d6717cc28c0dfac Validity Not Before: Oct 19 23:01:39 2025 GMT Not After : Oct 20 23:01:39 2025 GMT Subject: CN=b69214b96999dc625da79d6a69635e8b0896e663 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:c3:d4:b3:df:01:9f:16:03:e6:8a:d0:a4:1a:cc: 3f:1b:57:a3:ac:3e:f9:a4:ea:d3:7b:50:47:5c:42: 1f:53:c5:5a:23:b3:a2:e1:06:1c:fd:ae:c9:1e:b7: 0d:ca:aa:5c:c3:cc:4c:6e:f3:38:66:e6:c2:55:17: 8c:fc:3b:f9:c2:7e:24:a3:9e:11:77:a7:9f:71:69: 58:91:1e:30:3d:04:df:78:b4:5f:19:04:86:51:85: 58:47:2b:37:86:0b:5c:d4:43:31:78:98:50:4c:87: 95:30:cc:69:34:cf:b6:d5:a5:18:4d:96:bc:bc:9c: 18:d9:6b:72:63:7c:40:cb:b6:ab:c6:b6:d3:d0:af: b4:07:59:d0:a7:ca:16:0e:51:0f:ce:5e:04:1c:9c: cf:4c:ad:d8:75:0a:ab:af:d5:3b:40:6c:27:37:07: 79:ac:68:6f:84:9a:43:d9:f9:f6:92:59:0a:66:38: 80:01:1e:4e:31:af:7a:84:5b:05:df:eb:db:02:ad: 30:f7:a6:b2:cc:ad:69:2e:aa:58:dc:d3:bf:4e:a6: ee:2e:3d:14:45:d5:53:80:ae:58:84:c8:ed:77:3f: 7b:7a:d2:e8:3d:d7:22:cc:44:53:cf:a9:0d:ea:19: f8:25:b6:08:27:4d:d3:fa:ec:76:1c:a6:b8:ed:c8: 98:ab Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: B6:92:14:B9:69:99:DC:62:5D:A7:9D:6A:69:63:5E:8B:08:96:E6:63 X509v3 Authority Key Identifier: keyid:B7:25:88:C0:0E:EF:71:58:09:EB:5F:DD:6D:67:17:CC:28:C0:DF:AC X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/tyWIwA7vcVgJ61_dbWcXzCjA36w.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/28/ebbac9-fee7-4f3b-8cd5-7a41254eaaca/1/tyWIwA7vcVgJ61_dbWcXzCjA36w.mft X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/28/ebbac9-fee7-4f3b-8cd5-7a41254eaaca/1/tyWIwA7vcVgJ61_dbWcXzCjA36w.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 4b:ca:5e:3d:28:57:6f:59:21:66:6d:39:57:59:7b:43:18:db: 05:b7:f3:36:1e:68:95:4d:05:97:0c:17:45:2b:b1:34:b2:c3: c9:d7:7e:25:32:98:f0:dc:b8:59:8a:19:43:3a:b5:16:3f:8e: 0a:0d:b2:16:12:39:aa:5d:a4:9d:33:ef:9b:78:5e:14:46:bf: d9:79:b7:6a:89:18:89:54:f7:3d:7f:9c:7a:8b:ca:07:cc:d0: 7e:f5:9a:07:f8:b0:f2:3b:3a:fb:fa:78:a6:0a:b2:c4:45:11: c5:99:09:97:da:ad:ad:dd:9a:26:ec:10:ea:04:44:95:0f:53: 78:00:b4:51:65:28:95:88:75:8f:66:d8:08:66:b0:d1:76:f5: 7e:45:d7:9e:2b:bc:eb:30:31:dd:bc:64:d9:cb:84:14:14:d4: b1:6b:4c:a6:93:86:14:c2:17:7c:71:42:98:bb:d7:a3:d4:9e: 7a:07:c8:22:62:1c:b4:fb:0b:ce:de:2d:be:f6:48:fa:e3:84: cf:5c:9c:d5:9e:fb:34:dd:58:e4:2e:00:32:2f:4c:8d:be:40: 3b:25:b3:26:ee:4e:7d:97:47:f0:a6:2b:1e:29:15:79:6f:a2: 96:29:45:7c:fa:17:0c:0c:a3:74:c8:05:76:9a:eb:96:cc:fd: 9c:04:97:82 -----BEGIN CERTIFICATE----- MIIFFjCCA/6gAwIBAgISAZn+tQM79596ctcyvIuYSOwrMA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKGI3MjU4OGMwMGVlZjcxNTgwOWViNWZkZDZkNjcxN2NjMjhj MGRmYWMwHhcNMjUxMDE5MjMwMTM5WhcNMjUxMDIwMjMwMTM5WjAzMTEwLwYDVQQD EyhiNjkyMTRiOTY5OTlkYzYyNWRhNzlkNmE2OTYzNWU4YjA4OTZlNjYzMIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAw9Sz3wGfFgPmitCkGsw/G1ejrD75 pOrTe1BHXEIfU8VaI7Oi4QYc/a7JHrcNyqpcw8xMbvM4ZubCVReM/Dv5wn4ko54R d6efcWlYkR4wPQTfeLRfGQSGUYVYRys3hgtc1EMxeJhQTIeVMMxpNM+21aUYTZa8 vJwY2WtyY3xAy7arxrbT0K+0B1nQp8oWDlEPzl4EHJzPTK3YdQqrr9U7QGwnNwd5 rGhvhJpD2fn2klkKZjiAAR5OMa96hFsF3+vbAq0w96ayzK1pLqpY3NO/TqbuLj0U RdVTgK5YhMjtdz97etLoPdcizERTz6kN6hn4JbYIJ03T+ux2HKa47ciYqwIDAQAB o4ICIjCCAh4wHQYDVR0OBBYEFLaSFLlpmdxiXaedamljXosIluZjMB8GA1UdIwQY MBaAFLcliMAO73FYCetf3W1nF8wowN+sMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvdHlXSXdBN3ZjVmdKNjFfZGJXY1h6Q2pBMzZ3LmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC8yOC9lYmJhYzktZmVlNy00ZjNiLThjZDUt N2E0MTI1NGVhYWNhLzEvdHlXSXdBN3ZjVmdKNjFfZGJXY1h6Q2pBMzZ3Lm1mdDCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC8yOC9lYmJhYzktZmVlNy00ZjNiLThjZDUtN2E0MTI1NGVhYWNh LzEvdHlXSXdBN3ZjVmdKNjFfZGJXY1h6Q2pBMzZ3LmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAS8pePShX b1khZm05V1l7QxjbBbfzNh5olU0FlwwXRSuxNLLDydd+JTKY8Ny4WYoZQzq1Fj+O Cg2yFhI5ql2knTPvm3heFEa/2Xm3aokYiVT3PX+ceovKB8zQfvWaB/iw8js6+/p4 pgqyxEURxZkJl9qtrd2aJuwQ6gRElQ9TeAC0UWUolYh1j2bYCGaw0Xb1fkXXniu8 6zAx3bxk2cuEFBTUsWtMppOGFMIXfHFCmLvXo9SeegfIImIctPsLzt4tvvZI+uOE z1yc1Z77NN1Y5C4AMi9Mjb5AOyWzJu5OfZdH8KYrHikVeW+ililFfPoXDAyjdMgF dprrlsz9nASXgg== -----END CERTIFICATE-----Generated at Mon Oct 20 07:59:19 2025 by rpki-client