$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/2c/73beeb-6a05-4cca-86be-acfc3d2c2522/1/tsFn36mIKyqo-EWV9YqXwwXKQ8U.mft File: tsFn36mIKyqo-EWV9YqXwwXKQ8U.mft (raw, json) Hash identifier: RlR95yTR4Ylh7v2odvHc2WtMG48KHo81FrTbD+D6Yyk= Subject key identifier: D2:7A:36:CC:9D:DC:CA:A1:5F:4C:83:D8:35:18:00:F7:66:92:8D:39 Authority key identifier: B6:C1:67:DF:A9:88:2B:2A:A8:F8:45:95:F5:8A:97:C3:05:CA:43:C5 Certificate issuer: /CN=b6c167dfa9882b2aa8f84595f58a97c305ca43c5 Certificate serial: 0199FE0FD01FC2901040E567B005BBB0693E Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/tsFn36mIKyqo-EWV9YqXwwXKQ8U.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/2c/73beeb-6a05-4cca-86be-acfc3d2c2522/1/tsFn36mIKyqo-EWV9YqXwwXKQ8U.mft Manifest number: 16ED Signing time: Sun 19 Oct 2025 20:01:13 +0000 Manifest this update: Sun 19 Oct 2025 20:01:13 +0000 Manifest next update: Mon 20 Oct 2025 20:01:13 +0000 Files and hashes: 1: 668BLkySdWDDmr5lSsB-YtLZ80Q.roa (hash: wAlTOv+x5XHci96XsqbLWx0e5eMWTNKBMvsGMhRIW5g=) 2: CaGm-a6CxApZqirxxCCZ9rx1aiM.roa (hash: in3Qvj8lVIdQByC2i0yNl5XLhAZsdDWoJ0Q3xc4mK5w=) 3: G7X7b_-2524mL2utRjqA_p3x1ko.roa (hash: eNBADPehKuBiSWTNdfZV2c/hvceCYObCQ47OijZj/IM=) 4: Ha2aIsE24z_1EZsUwFVaBMCEfdM.roa (hash: xkTrIuXJyp+z7TixxHSY5VnwKcm94LBvzrBz6XRQmHA=) 5: U4BB4H7P7Xc6wcR_Q3KuEg8MoBI.roa (hash: QxEX5rbeLCQiv5QJ1QrJpxAQPPcED/CkB9BmO957WyU=) 6: ZGbxcZi9cS52WoJdVb-r0w_TFVk.roa (hash: UaSAvffUeAya0sIHPIbsIDALMTsblptod9P+M2JwLlw=) 7: _JHDbAZ2ATmmU2h8LNTts0pQdRw.roa (hash: ydLyrnNRvtcOwVHilzuoONY7T6CbRsMdyLBgcqYGqyo=) 8: sCoMzCi05UrDFtmTnulnnY6R09o.roa (hash: ZM5RYx3VNWn9QHDFDvEBjHCFQTlKZaYcsLAypuanz3s=) 9: tPcgE7Dec0le1j4-lCiliZGhMhA.roa (hash: rqY7E+ZB4onuPYp0NQezTIDslFC1HqRDysd/HXAkW7Y=) 10: tsFn36mIKyqo-EWV9YqXwwXKQ8U.crl (hash: Ak3co4ZHdL5IKrw/yB79rDzAJdLmHvKJNDtumtkI/J0=) Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/2c/73beeb-6a05-4cca-86be-acfc3d2c2522/1/tsFn36mIKyqo-EWV9YqXwwXKQ8U.crl rsync://rpki.ripe.net/repository/DEFAULT/2c/73beeb-6a05-4cca-86be-acfc3d2c2522/1/tsFn36mIKyqo-EWV9YqXwwXKQ8U.mft rsync://rpki.ripe.net/repository/DEFAULT/tsFn36mIKyqo-EWV9YqXwwXKQ8U.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Mon 20 Oct 2025 15:00:58 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:99:fe:0f:d0:1f:c2:90:10:40:e5:67:b0:05:bb:b0:69:3e Signature Algorithm: sha256WithRSAEncryption Issuer: CN=b6c167dfa9882b2aa8f84595f58a97c305ca43c5 Validity Not Before: Oct 19 20:01:13 2025 GMT Not After : Oct 20 20:01:13 2025 GMT Subject: CN=d27a36cc9ddccaa15f4c83d8351800f766928d39 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:8f:61:21:fe:75:cd:35:b3:cf:2c:9c:b4:9c:40: 9d:aa:8d:db:5d:22:c2:be:fa:dc:29:c6:24:b0:af: 68:0f:42:c2:96:f9:79:1b:d3:5e:f1:44:4c:66:df: 39:62:bf:31:ff:b3:44:32:3c:3c:da:85:67:ab:dd: f0:30:22:91:16:1c:e7:b4:14:46:98:89:73:b4:4a: d2:ba:8b:79:8e:05:10:e3:91:75:bd:53:f4:db:14: fa:f8:47:7c:f7:e3:43:58:06:ba:c4:73:99:b9:ed: 65:73:53:b0:fd:d7:fc:93:0a:fd:bf:fb:13:0d:ef: 19:0d:23:80:a9:55:ae:b7:51:fa:b9:89:4b:20:16: a1:c2:e4:7e:92:e0:58:b6:e0:cc:ff:b2:43:8a:f2: 15:4a:55:b6:52:07:b8:45:07:62:cb:4c:97:a9:a9: 2d:65:35:d5:54:05:55:70:3d:3f:a8:c2:7b:30:ce: bc:f9:59:51:1a:db:80:34:41:6a:f2:e7:79:d9:20: f1:cf:1d:8d:40:30:3f:99:47:88:ab:34:58:e1:5d: e0:89:62:ab:f2:d1:b4:e6:9d:cd:fd:b7:f4:7e:ef: 46:08:1c:0d:9e:d9:c5:da:63:e8:c7:f5:ff:ca:f0: b4:a7:e0:9b:64:e7:0f:b2:6d:41:70:22:fc:57:bd: d9:07 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: D2:7A:36:CC:9D:DC:CA:A1:5F:4C:83:D8:35:18:00:F7:66:92:8D:39 X509v3 Authority Key Identifier: keyid:B6:C1:67:DF:A9:88:2B:2A:A8:F8:45:95:F5:8A:97:C3:05:CA:43:C5 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/tsFn36mIKyqo-EWV9YqXwwXKQ8U.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/2c/73beeb-6a05-4cca-86be-acfc3d2c2522/1/tsFn36mIKyqo-EWV9YqXwwXKQ8U.mft X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/2c/73beeb-6a05-4cca-86be-acfc3d2c2522/1/tsFn36mIKyqo-EWV9YqXwwXKQ8U.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 71:96:c7:55:a7:12:a0:24:cc:79:cc:f3:b6:a5:c6:fd:ba:97: 45:3e:f3:45:26:34:5a:46:3a:6b:49:28:cb:2c:0e:a5:6b:11: e9:04:af:4d:cd:f2:6d:03:6d:6d:f5:69:b0:c0:60:b0:49:71: 56:78:f2:13:82:65:75:b7:e8:5e:b7:a2:85:0c:f8:74:ca:5c: d1:ac:3d:4c:1b:6c:5e:1e:41:45:e9:2a:d7:75:16:e6:56:f9: bb:15:95:75:43:8e:83:00:cd:b0:1a:5a:55:50:ea:c0:b7:63: 68:1d:20:d9:e5:71:22:be:12:46:1b:98:3b:55:bc:63:85:2d: 6a:58:d6:bc:6a:87:97:bc:7a:7c:3c:aa:9c:4f:cf:60:e4:96: 89:cd:15:64:02:75:64:7e:63:29:f9:06:1c:93:9b:d0:eb:d9: 34:53:a1:8d:bf:5e:f0:10:b2:91:70:3e:7a:fa:90:5a:13:73: 53:59:10:16:41:ae:48:34:6e:3b:7e:ed:83:bf:72:c5:7f:d6: b5:71:03:70:15:01:fd:64:7b:34:fc:ff:5a:0e:74:74:dc:1b: 9b:73:fa:2a:3f:67:0a:18:04:a6:ba:5e:7e:b0:1e:80:21:71: 1f:2b:aa:71:bb:3a:7b:b3:c1:70:f0:b9:cf:3c:98:49:9b:6a: d6:73:a9:0c -----BEGIN CERTIFICATE----- MIIFFjCCA/6gAwIBAgISAZn+D9AfwpAQQOVnsAW7sGk+MA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKGI2YzE2N2RmYTk4ODJiMmFhOGY4NDU5NWY1OGE5N2MzMDVj YTQzYzUwHhcNMjUxMDE5MjAwMTEzWhcNMjUxMDIwMjAwMTEzWjAzMTEwLwYDVQQD EyhkMjdhMzZjYzlkZGNjYWExNWY0YzgzZDgzNTE4MDBmNzY2OTI4ZDM5MIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAj2Eh/nXNNbPPLJy0nECdqo3bXSLC vvrcKcYksK9oD0LClvl5G9Ne8URMZt85Yr8x/7NEMjw82oVnq93wMCKRFhzntBRG mIlztErSuot5jgUQ45F1vVP02xT6+Ed89+NDWAa6xHOZue1lc1Ow/df8kwr9v/sT De8ZDSOAqVWut1H6uYlLIBahwuR+kuBYtuDM/7JDivIVSlW2Uge4RQdiy0yXqakt ZTXVVAVVcD0/qMJ7MM68+VlRGtuANEFq8ud52SDxzx2NQDA/mUeIqzRY4V3giWKr 8tG05p3N/bf0fu9GCBwNntnF2mPox/X/yvC0p+CbZOcPsm1BcCL8V73ZBwIDAQAB o4ICIjCCAh4wHQYDVR0OBBYEFNJ6Nsyd3MqhX0yD2DUYAPdmko05MB8GA1UdIwQY MBaAFLbBZ9+piCsqqPhFlfWKl8MFykPFMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvdHNGbjM2bUlLeXFvLUVXVjlZcVh3d1hLUThVLmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC8yYy83M2JlZWItNmEwNS00Y2NhLTg2YmUt YWNmYzNkMmMyNTIyLzEvdHNGbjM2bUlLeXFvLUVXVjlZcVh3d1hLUThVLm1mdDCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC8yYy83M2JlZWItNmEwNS00Y2NhLTg2YmUtYWNmYzNkMmMyNTIy LzEvdHNGbjM2bUlLeXFvLUVXVjlZcVh3d1hLUThVLmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAcZbHVacS oCTMeczztqXG/bqXRT7zRSY0WkY6a0koyywOpWsR6QSvTc3ybQNtbfVpsMBgsElx VnjyE4JldbfoXreihQz4dMpc0aw9TBtsXh5BRekq13UW5lb5uxWVdUOOgwDNsBpa VVDqwLdjaB0g2eVxIr4SRhuYO1W8Y4UtaljWvGqHl7x6fDyqnE/PYOSWic0VZAJ1 ZH5jKfkGHJOb0OvZNFOhjb9e8BCykXA+evqQWhNzU1kQFkGuSDRuO37tg79yxX/W tXEDcBUB/WR7NPz/Wg50dNwbm3P6Kj9nChgEprpefrAegCFxHyuqcbs6e7PBcPC5 zzyYSZtq1nOpDA== -----END CERTIFICATE-----Generated at Mon Oct 20 00:02:37 2025 by rpki-client