$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/33/863ba0-0476-43d7-8be7-66eda228fec7/1/vEcD4Iyg1qMQy8ZD_8swf_bNxlw.mft File: vEcD4Iyg1qMQy8ZD_8swf_bNxlw.mft (raw, json) Hash identifier: 1PXRQPZKMZAwahf/+vtAdVDC8/ML8g9Ku7DwW+jVTFQ= Subject key identifier: 92:75:5B:A0:00:6F:D3:5D:F3:E0:06:3B:96:CF:01:22:B3:E9:0B:CD Authority key identifier: BC:47:03:E0:8C:A0:D6:A3:10:CB:C6:43:FF:CB:30:7F:F6:CD:C6:5C Certificate issuer: /CN=bc4703e08ca0d6a310cbc643ffcb307ff6cdc65c Certificate serial: 0199FCC668C3F53B2E9BB198F45B2B5EACA9 Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/vEcD4Iyg1qMQy8ZD_8swf_bNxlw.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/33/863ba0-0476-43d7-8be7-66eda228fec7/1/vEcD4Iyg1qMQy8ZD_8swf_bNxlw.mft Manifest number: 13F2 Signing time: Sun 19 Oct 2025 14:01:25 +0000 Manifest this update: Sun 19 Oct 2025 14:01:25 +0000 Manifest next update: Mon 20 Oct 2025 14:01:25 +0000 Files and hashes: 1: 8Fk9kDKNu_wHTuVpwQ1FTDYEEUM.roa (hash: R9lk1OKBJor+p6Fk8Cm9760Y52YkNlkiK4HwLBjauEw=) 2: LCMzGb8KK1XAn7ueElCREh4ehR0.roa (hash: 9Gw2b+IOeGIlGw5y7XNoxgCnQ7hXETrnIXJowIYGjqA=) 3: LShVVLJCwZTpOQVpRu4BHXCMY5o.roa (hash: qOW5Q7zU6W8XRrp7RUj6wZmvzkpmHb4NVAohhcOeaxY=) 4: bmuOfACYZiZOnCTz9ES9s06c_ac.roa (hash: kxF+XBYjW7ExfLjJidwuYPma+i/t1erJy7+ooTz+eSY=) 5: dqSVfYV4r9M8RMZopTNsSTKHeIY.roa (hash: XrN+1wwdRwyX8n7r+VHCtW4D45jLjIPlWVhNaBZnVwQ=) 6: h9mNIwplN3HJblv2au9Os6COmfk.roa (hash: MUN1yxszebSMcti0G9u7TeXrwfcHsFyRaIzpQnCM9XQ=) 7: mUZj0w-uWUstpfqo5cH06vK19uA.roa (hash: MzyNzzDoUFyK/QZw2a/+HQPhRLTClRfb/mdHjVRhByQ=) 8: r0mTEa6qt-IyELm4t03iQrSQvaU.roa (hash: 5O0ZRSkH9lwLC8LUcZsdLUDFOU7u/lNlnWwcFjFATOs=) 9: rHoYFPQ0T9Hef-z6s-pJ7i0yyQo.roa (hash: xQJ9yww4YSKaaEyQBdYXA5up0iEVqjr/At6e2xJMUB8=) 10: vEcD4Iyg1qMQy8ZD_8swf_bNxlw.crl (hash: nFUOcZqAJCtzqjM4aVILzD3K4MLEuhuREkwB2Tqw3j8=) 11: vfYaTtc4brt0Ov1kx9oCUOHIJXI.roa (hash: eB+hXGbiqW76z1VHwcXpM+YfyI+lZHNYCy9KL7CJ5lM=) Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/33/863ba0-0476-43d7-8be7-66eda228fec7/1/vEcD4Iyg1qMQy8ZD_8swf_bNxlw.crl rsync://rpki.ripe.net/repository/DEFAULT/33/863ba0-0476-43d7-8be7-66eda228fec7/1/vEcD4Iyg1qMQy8ZD_8swf_bNxlw.mft rsync://rpki.ripe.net/repository/DEFAULT/vEcD4Iyg1qMQy8ZD_8swf_bNxlw.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Mon 20 Oct 2025 11:18:59 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:99:fc:c6:68:c3:f5:3b:2e:9b:b1:98:f4:5b:2b:5e:ac:a9 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=bc4703e08ca0d6a310cbc643ffcb307ff6cdc65c Validity Not Before: Oct 19 14:01:25 2025 GMT Not After : Oct 20 14:01:25 2025 GMT Subject: CN=92755ba0006fd35df3e0063b96cf0122b3e90bcd Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:bf:88:8b:ac:0e:30:7b:57:0d:f9:46:23:1a:5c: af:a1:7d:0c:4c:6b:81:3b:d8:67:9b:ed:31:0d:e6: 82:53:e7:ac:1c:cf:c6:00:5b:81:bb:e0:24:d1:39: a5:a0:f8:81:5d:da:1b:1e:20:c9:5c:d2:6c:49:1d: bf:82:ec:33:d6:bd:9f:7d:de:97:22:33:f0:76:29: 43:f7:49:d3:b3:66:fb:90:88:e2:d7:7c:b1:06:d4: 95:57:ae:8c:37:df:0c:78:33:c6:25:2f:98:7c:63: b0:b9:19:7e:21:21:77:dd:1e:f9:b7:09:81:1b:25: 77:f5:93:2f:ab:b3:7d:e7:a5:99:c9:96:f1:99:a9: f1:36:a1:e7:41:7e:be:d0:f7:8b:f0:a6:ad:fd:e7: 11:11:72:98:a9:cb:6f:aa:2f:77:79:e3:f1:f7:1b: 64:62:b1:d4:4a:f6:e5:3d:c8:ca:1e:09:de:c9:ed: d9:9f:b1:78:73:04:1d:27:36:b6:74:ee:cc:bc:b7: e0:3f:ef:c0:c5:63:0b:d9:5b:4d:9c:3b:ac:6a:b0: 2e:d1:05:18:f0:e3:0a:e8:2b:ce:98:98:ae:68:4f: 1a:e4:03:3e:38:50:62:ca:e4:1b:96:ec:bc:d3:43: 66:fa:fe:39:7b:2e:75:b0:25:23:4e:a6:a7:00:28: 9f:19 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 92:75:5B:A0:00:6F:D3:5D:F3:E0:06:3B:96:CF:01:22:B3:E9:0B:CD X509v3 Authority Key Identifier: keyid:BC:47:03:E0:8C:A0:D6:A3:10:CB:C6:43:FF:CB:30:7F:F6:CD:C6:5C X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/vEcD4Iyg1qMQy8ZD_8swf_bNxlw.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/33/863ba0-0476-43d7-8be7-66eda228fec7/1/vEcD4Iyg1qMQy8ZD_8swf_bNxlw.mft X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/33/863ba0-0476-43d7-8be7-66eda228fec7/1/vEcD4Iyg1qMQy8ZD_8swf_bNxlw.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 15:e8:18:02:30:63:0b:bd:3e:42:a9:52:c7:15:40:7c:1b:58: 93:5a:28:bd:e4:dd:1c:2e:98:b2:e2:fd:ab:57:4a:12:e6:80: 35:99:6e:40:2d:79:08:24:74:ed:45:29:7a:96:55:92:bc:00: 83:55:d8:c3:e7:97:e4:07:7b:7f:d8:f3:2e:d6:f7:4e:ca:e5: eb:3a:54:cb:22:f7:54:ba:7d:a9:09:16:c6:12:3d:9b:30:bc: e2:70:61:1e:1a:12:ee:f8:ee:17:7b:be:6b:63:62:05:4a:5d: 1a:32:40:94:db:d6:33:34:d8:3a:ea:27:42:dc:a6:e7:3f:0a: 47:f7:6f:77:f9:82:8a:64:d5:b0:15:e8:f1:f3:ac:e6:9d:c5: f4:d2:10:c8:71:c9:35:5f:4c:d0:23:70:c4:0a:e5:2b:19:0f: d5:31:0e:2f:bf:c4:eb:79:15:8f:d6:a7:a7:73:43:1e:2a:71: 58:0d:02:c1:a7:b5:74:10:74:d2:10:1a:39:92:0d:33:96:2a: 15:10:28:eb:c2:73:10:a2:3d:22:da:f6:89:44:5c:68:51:ea: 34:8f:71:d9:67:cc:6d:e8:c0:75:4a:05:e0:9b:30:d5:d2:a2: 24:23:f2:f3:cd:c1:b1:b0:54:a3:7d:1e:d7:c0:84:e6:ac:51: 35:bb:ff:c5 -----BEGIN CERTIFICATE----- MIIFFjCCA/6gAwIBAgISAZn8xmjD9Tsum7GY9FsrXqypMA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKGJjNDcwM2UwOGNhMGQ2YTMxMGNiYzY0M2ZmY2IzMDdmZjZj ZGM2NWMwHhcNMjUxMDE5MTQwMTI1WhcNMjUxMDIwMTQwMTI1WjAzMTEwLwYDVQQD Eyg5Mjc1NWJhMDAwNmZkMzVkZjNlMDA2M2I5NmNmMDEyMmIzZTkwYmNkMIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAv4iLrA4we1cN+UYjGlyvoX0MTGuB O9hnm+0xDeaCU+esHM/GAFuBu+Ak0TmloPiBXdobHiDJXNJsSR2/guwz1r2ffd6X IjPwdilD90nTs2b7kIji13yxBtSVV66MN98MeDPGJS+YfGOwuRl+ISF33R75twmB GyV39ZMvq7N956WZyZbxmanxNqHnQX6+0PeL8Kat/ecREXKYqctvqi93eePx9xtk YrHUSvblPcjKHgneye3Zn7F4cwQdJza2dO7MvLfgP+/AxWML2VtNnDusarAu0QUY 8OMK6CvOmJiuaE8a5AM+OFBiyuQbluy800Nm+v45ey51sCUjTqanACifGQIDAQAB o4ICIjCCAh4wHQYDVR0OBBYEFJJ1W6AAb9Nd8+AGO5bPASKz6QvNMB8GA1UdIwQY MBaAFLxHA+CMoNajEMvGQ//LMH/2zcZcMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvdkVjRDRJeWcxcU1ReThaRF84c3dmX2JOeGx3LmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC8zMy84NjNiYTAtMDQ3Ni00M2Q3LThiZTct NjZlZGEyMjhmZWM3LzEvdkVjRDRJeWcxcU1ReThaRF84c3dmX2JOeGx3Lm1mdDCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC8zMy84NjNiYTAtMDQ3Ni00M2Q3LThiZTctNjZlZGEyMjhmZWM3 LzEvdkVjRDRJeWcxcU1ReThaRF84c3dmX2JOeGx3LmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAFegYAjBj C70+QqlSxxVAfBtYk1ooveTdHC6YsuL9q1dKEuaANZluQC15CCR07UUpepZVkrwA g1XYw+eX5Ad7f9jzLtb3Tsrl6zpUyyL3VLp9qQkWxhI9mzC84nBhHhoS7vjuF3u+ a2NiBUpdGjJAlNvWMzTYOuonQtym5z8KR/dvd/mCimTVsBXo8fOs5p3F9NIQyHHJ NV9M0CNwxArlKxkP1TEOL7/E63kVj9anp3NDHipxWA0Cwae1dBB00hAaOZINM5Yq FRAo68JzEKI9Itr2iURcaFHqNI9x2WfMbejAdUoF4Jsw1dKiJCPy883BsbBUo30e 18CE5qxRNbv/xQ== -----END CERTIFICATE-----Generated at Sun Oct 19 20:47:54 2025 by rpki-client