$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/33/0d0755-1897-47ef-8df7-8cf41cafdce2/1/9dmpKCydJUfFZmNPO6zMvPJYiCc.mft File: 9dmpKCydJUfFZmNPO6zMvPJYiCc.mft (raw, json) Hash identifier: 8LFfrQGloFN3jm/9okVd1U08cZn4ayfz9U+1plmS4bY= Subject key identifier: FD:83:BF:90:9C:1B:28:2F:65:7C:66:4B:03:94:1C:0E:6E:2D:B1:36 Authority key identifier: F5:D9:A9:28:2C:9D:25:47:C5:66:63:4F:3B:AC:CC:BC:F2:58:88:27 Certificate issuer: /CN=f5d9a9282c9d2547c566634f3bacccbcf2588827 Certificate serial: 0199FD3405E6AD8EBB38AFF1AAF25B084BBC Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/9dmpKCydJUfFZmNPO6zMvPJYiCc.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/33/0d0755-1897-47ef-8df7-8cf41cafdce2/1/9dmpKCydJUfFZmNPO6zMvPJYiCc.mft Manifest number: 0D03 Signing time: Sun 19 Oct 2025 16:01:08 +0000 Manifest this update: Sun 19 Oct 2025 16:01:08 +0000 Manifest next update: Mon 20 Oct 2025 16:01:08 +0000 Files and hashes: 1: 2fQddCIl-7Oq1WuhVFDb_ItwFWs.roa (hash: G5bUTFThyurFxXPOBBEBFBWKjBkZ0p5sb4xbB9qr44M=) 2: 37QCkG1k9gzLrRMVOTELOapS-4Y.roa (hash: fObIS1yLlqyANULO1cGplwcB5m0pXnjdZmigUly+6NA=) 3: 9dmpKCydJUfFZmNPO6zMvPJYiCc.crl (hash: J9kM1+ETa4fch97t8Rai3GxQ7IPeavS702e0yfnsYgU=) 4: C8rZpiwRRKp7HiBYnxrXRCtzNP4.roa (hash: /a2qXNrKqG5G3jKSkvjhWWJd/4eBrgaawytg7M/VZPQ=) 5: LSwSqqfM6NE3bwsbhZVRM0BePVo.roa (hash: QYxJg9ZEhl4RnY/Twn9fuIOL/2nBIyTko4sjPdP5IhA=) 6: SyqNMF-ydxJR2kxngWZW5-SrEy0.roa (hash: KeocIUb7cPGt5yIgR1YWAUH1gGZjpJ9norLt8H3zU6Q=) 7: gAIi2RzKXjXCtYGsVRw03pRZYeU.roa (hash: PvQsJF0P/z+mLUrW2+GtvSyLdhymARBFgfCdxNsU3JE=) 8: hkqOX4mECokeZ3ChLO-NkzoKVG0.roa (hash: jDSI0Vi3uJHnivxkTcLJyUGbXo6jl9OF+5YD1t9wHog=) 9: xEaq7kolhQn1OmIod6QQM1Gthtk.roa (hash: IC+2lUW0/0ySDq3Q6puBeGjrJpCDJAXfXz5IauHoRHE=) 10: yZE684PU1B3lT-aKA30arKwyTEI.roa (hash: isFNdgWP0HVp5O76X23OI/gh9YCy0xYVcwqK0QPMZ60=) Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/33/0d0755-1897-47ef-8df7-8cf41cafdce2/1/9dmpKCydJUfFZmNPO6zMvPJYiCc.crl rsync://rpki.ripe.net/repository/DEFAULT/33/0d0755-1897-47ef-8df7-8cf41cafdce2/1/9dmpKCydJUfFZmNPO6zMvPJYiCc.mft rsync://rpki.ripe.net/repository/DEFAULT/9dmpKCydJUfFZmNPO6zMvPJYiCc.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Mon 20 Oct 2025 15:00:58 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:99:fd:34:05:e6:ad:8e:bb:38:af:f1:aa:f2:5b:08:4b:bc Signature Algorithm: sha256WithRSAEncryption Issuer: CN=f5d9a9282c9d2547c566634f3bacccbcf2588827 Validity Not Before: Oct 19 16:01:08 2025 GMT Not After : Oct 20 16:01:08 2025 GMT Subject: CN=fd83bf909c1b282f657c664b03941c0e6e2db136 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:a6:87:44:5a:7f:50:f0:af:7c:dd:e7:b9:52:69: d1:18:6d:3d:29:27:15:da:85:de:4c:54:51:6c:45: 1d:fd:21:f1:55:db:06:4b:4e:24:81:fb:96:24:95: a7:f3:38:42:7a:f9:d6:e4:a8:82:cd:0d:16:ee:f1: ce:52:8a:14:a4:ad:f4:cf:db:6c:3d:99:7b:09:9e: e2:ec:29:bd:7a:5b:83:1a:1a:07:51:c3:99:cf:6d: af:ce:87:c1:27:4e:ae:94:a9:f2:1b:94:34:39:9f: 45:f1:6d:69:00:2d:ef:a8:9f:2f:00:68:67:71:c5: ef:ee:7e:02:0f:c4:6a:72:25:9e:22:c5:65:97:00: af:58:9c:29:82:a6:04:52:0d:02:a4:fc:15:ca:cf: 89:2b:6a:c6:22:90:1a:de:0e:e8:af:ee:32:14:e2: a5:f5:5a:e2:57:4a:73:e6:cb:38:aa:e2:61:0e:b3: c4:df:a7:43:4b:17:b6:ff:7d:26:9d:10:58:0d:98: ab:d7:27:41:f7:f9:b1:72:28:44:e0:f4:c7:4d:08: b4:42:db:3a:6c:0b:c6:9b:65:d9:57:cd:51:33:71: cc:88:d9:a5:a8:5b:12:b8:2f:6d:a0:67:45:14:ca: e2:37:b4:7c:01:e6:2b:62:07:95:e2:98:ec:43:e5: 51:1f Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: FD:83:BF:90:9C:1B:28:2F:65:7C:66:4B:03:94:1C:0E:6E:2D:B1:36 X509v3 Authority Key Identifier: keyid:F5:D9:A9:28:2C:9D:25:47:C5:66:63:4F:3B:AC:CC:BC:F2:58:88:27 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/9dmpKCydJUfFZmNPO6zMvPJYiCc.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/33/0d0755-1897-47ef-8df7-8cf41cafdce2/1/9dmpKCydJUfFZmNPO6zMvPJYiCc.mft X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/33/0d0755-1897-47ef-8df7-8cf41cafdce2/1/9dmpKCydJUfFZmNPO6zMvPJYiCc.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 61:98:a5:5b:3d:c5:ac:f0:f9:e8:6e:e3:1a:d4:ef:69:2e:9f: d7:a1:61:bd:76:69:1f:74:7e:6f:03:4a:93:b1:37:ae:44:0e: f8:4b:e6:eb:46:37:9e:a2:65:1c:22:9a:23:b6:bc:8c:1a:d1: 37:20:a0:46:48:e5:3e:b9:6c:35:0b:6e:e1:24:59:fd:93:f5: 60:54:d7:15:d8:5c:36:de:24:d1:1f:25:27:6a:91:e9:3e:14: 03:7e:34:5e:65:25:cb:ef:62:b0:19:31:fa:7f:08:2d:dd:93: 33:67:d4:88:85:6f:37:ea:5b:cc:8d:37:f3:25:a9:dd:a5:88: 54:a5:2c:52:ca:13:cf:da:99:25:bd:1d:b7:08:8e:b8:fd:c7: 52:8d:68:e1:b1:e1:95:bb:14:6b:1e:cd:de:93:ad:8f:c7:e8: 15:03:03:5f:d8:c2:f2:df:ed:c6:37:11:30:fe:09:08:67:01: d9:ca:c7:64:23:c1:fc:1d:77:7f:ac:fc:97:58:78:88:54:5a: 78:a3:a1:49:3f:9c:8e:e5:dc:4c:7c:49:a2:8a:b5:a4:22:8f: 69:2e:ae:05:d5:41:80:b7:e1:c5:71:17:f1:10:97:bf:ae:06: ec:57:15:63:72:34:8e:98:4b:dc:f8:ac:d5:46:d7:c5:e9:37: 0a:82:0b:e0 -----BEGIN CERTIFICATE----- MIIFFjCCA/6gAwIBAgISAZn9NAXmrY67OK/xqvJbCEu8MA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKGY1ZDlhOTI4MmM5ZDI1NDdjNTY2NjM0ZjNiYWNjY2JjZjI1 ODg4MjcwHhcNMjUxMDE5MTYwMTA4WhcNMjUxMDIwMTYwMTA4WjAzMTEwLwYDVQQD EyhmZDgzYmY5MDljMWIyODJmNjU3YzY2NGIwMzk0MWMwZTZlMmRiMTM2MIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEApodEWn9Q8K983ee5UmnRGG09KScV 2oXeTFRRbEUd/SHxVdsGS04kgfuWJJWn8zhCevnW5KiCzQ0W7vHOUooUpK30z9ts PZl7CZ7i7Cm9eluDGhoHUcOZz22vzofBJ06ulKnyG5Q0OZ9F8W1pAC3vqJ8vAGhn ccXv7n4CD8RqciWeIsVllwCvWJwpgqYEUg0CpPwVys+JK2rGIpAa3g7or+4yFOKl 9VriV0pz5ss4quJhDrPE36dDSxe2/30mnRBYDZir1ydB9/mxcihE4PTHTQi0Qts6 bAvGm2XZV81RM3HMiNmlqFsSuC9toGdFFMriN7R8AeYrYgeV4pjsQ+VRHwIDAQAB o4ICIjCCAh4wHQYDVR0OBBYEFP2Dv5CcGygvZXxmSwOUHA5uLbE2MB8GA1UdIwQY MBaAFPXZqSgsnSVHxWZjTzuszLzyWIgnMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvOWRtcEtDeWRKVWZGWm1OUE82ek12UEpZaUNjLmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC8zMy8wZDA3NTUtMTg5Ny00N2VmLThkZjct OGNmNDFjYWZkY2UyLzEvOWRtcEtDeWRKVWZGWm1OUE82ek12UEpZaUNjLm1mdDCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC8zMy8wZDA3NTUtMTg5Ny00N2VmLThkZjctOGNmNDFjYWZkY2Uy LzEvOWRtcEtDeWRKVWZGWm1OUE82ek12UEpZaUNjLmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAYZilWz3F rPD56G7jGtTvaS6f16FhvXZpH3R+bwNKk7E3rkQO+Evm60Y3nqJlHCKaI7a8jBrR NyCgRkjlPrlsNQtu4SRZ/ZP1YFTXFdhcNt4k0R8lJ2qR6T4UA340XmUly+9isBkx +n8ILd2TM2fUiIVvN+pbzI038yWp3aWIVKUsUsoTz9qZJb0dtwiOuP3HUo1o4bHh lbsUax7N3pOtj8foFQMDX9jC8t/txjcRMP4JCGcB2crHZCPB/B13f6z8l1h4iFRa eKOhST+cjuXcTHxJooq1pCKPaS6uBdVBgLfhxXEX8RCXv64G7FcVY3I0jphL3Pis 1UbXxek3CoIL4A== -----END CERTIFICATE-----Generated at Mon Oct 20 00:00:35 2025 by rpki-client