$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/34/db1b48-1cc5-4833-93d9-b9464718ba37/1/c_IQ8SmaHgrucdwdeeX7EgktMKk.mft File: c_IQ8SmaHgrucdwdeeX7EgktMKk.mft (raw, json) Hash identifier: WoqoXLenjzjDXOVdgvKp/3oklqQ5ILmgnkkAKnaK+a0= Subject key identifier: 7F:5A:F2:5E:F2:B6:E7:17:A6:3D:C3:D9:D9:B1:44:50:CB:EA:03:15 Authority key identifier: 73:F2:10:F1:29:9A:1E:0A:EE:71:DC:1D:79:E5:FB:12:09:2D:30:A9 Certificate issuer: /CN=73f210f1299a1e0aee71dc1d79e5fb12092d30a9 Certificate serial: 0199FC58C7D8407A9B48C1A0DD590123B337 Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/c_IQ8SmaHgrucdwdeeX7EgktMKk.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/34/db1b48-1cc5-4833-93d9-b9464718ba37/1/c_IQ8SmaHgrucdwdeeX7EgktMKk.mft Manifest number: 1709 Signing time: Sun 19 Oct 2025 12:01:40 +0000 Manifest this update: Sun 19 Oct 2025 12:01:40 +0000 Manifest next update: Mon 20 Oct 2025 12:01:40 +0000 Files and hashes: 1: 7v-L1KuWY_QeDJxKFVyRkWnFePQ.roa (hash: bVQczQ08ozX20fYuXzWGYS1jimxc5e2Qx5nVzF/4kuk=) 2: H74wGZKnnU6XEP7nVKoqw4XaEjE.roa (hash: zhm555s3zw/KlbcjZuumbYd6+z6n6717Q/inEo++9C0=) 3: KFKPGq8CDIQff00UekrfFEmWWU4.roa (hash: pndCMKJbI0Ffrf6VYH3lHviYtYItndyotazCLP7aZyE=) 4: TLCOp8VQQYT-sDLZMkb_dNE0wJI.roa (hash: 8TF1RbnrjzrAYcRglOW5PIK7TmKRhUoFu7HvQr3ZHoA=) 5: XfGBei_fvFP0LcnT4xlGOunfSHY.roa (hash: ApG5cEMi+MNJR6ahm8kTy/uN64zS0fv0zRdzd/i6biA=) 6: ZLCgOlPZ-adZViTKhsMv3BABRVQ.roa (hash: y37YnkCGLdmrEa4m8cGkKpYMZJFVaIJVqpcOQKXrYQA=) 7: ZrwHnbp0cmRv-8Aq-3dTrUs96b8.roa (hash: laG521bBX3KOp9w13a5/N7g1SD2gsHS2KdTqelNAv1g=) 8: c_IQ8SmaHgrucdwdeeX7EgktMKk.crl (hash: WmJO1jyXAmEaEQi7j/K4fY7pLoRE7DGqmlp+K9FBxgY=) 9: fUiU9NND6NDkXeCCtG2FpkvLAtQ.roa (hash: BipzZjfv9NJLde/5SLk/7HBxUjct/iO+maQqs2utFTw=) 10: mJUNw4dhsVDBnFTg7x4G5Co4xf0.roa (hash: uA/rqJShT3FbqgkbYlEQFRj/7911uoTUqkA+K2PLe1c=) 11: nT9Kl7qa4avyYi6PobndNFEx2JI.roa (hash: 4NhOocRVxQsq48Sjltw5zBhFh6NiUij1mxelAtmoUp0=) Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/34/db1b48-1cc5-4833-93d9-b9464718ba37/1/c_IQ8SmaHgrucdwdeeX7EgktMKk.crl rsync://rpki.ripe.net/repository/DEFAULT/34/db1b48-1cc5-4833-93d9-b9464718ba37/1/c_IQ8SmaHgrucdwdeeX7EgktMKk.mft rsync://rpki.ripe.net/repository/DEFAULT/c_IQ8SmaHgrucdwdeeX7EgktMKk.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Mon 20 Oct 2025 11:18:59 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:99:fc:58:c7:d8:40:7a:9b:48:c1:a0:dd:59:01:23:b3:37 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=73f210f1299a1e0aee71dc1d79e5fb12092d30a9 Validity Not Before: Oct 19 12:01:40 2025 GMT Not After : Oct 20 12:01:40 2025 GMT Subject: CN=7f5af25ef2b6e717a63dc3d9d9b14450cbea0315 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:b7:91:95:79:ac:60:d3:ce:92:ab:d9:e8:0e:c8: 3b:26:73:9f:84:6c:1d:ea:0e:47:28:cc:32:64:a7: 54:04:63:bc:8d:01:8f:d6:75:f0:34:31:2d:d8:b4: b7:55:b0:88:98:16:05:15:17:2d:1f:ae:f2:ae:45: ea:9a:0f:70:93:71:cc:3c:df:92:6c:23:63:a7:1c: f2:ff:10:7d:9d:16:85:b3:66:31:1f:d7:15:81:70: 6f:21:82:42:48:be:01:38:7e:3e:32:f6:38:27:d5: bf:9b:50:e3:09:50:a7:d1:3b:b8:69:9a:fb:c6:f1: 46:3b:0f:90:7c:90:c5:53:b9:b9:72:6d:61:5f:b8: d1:45:15:54:e2:0d:ed:5a:6f:a6:7b:42:56:76:22: 1b:f2:15:80:03:1b:bd:36:57:7b:ee:7e:56:7b:88: de:23:3b:78:1d:83:db:9c:8e:3b:c4:d2:6a:d0:ca: d1:36:2a:4b:a6:03:2b:ed:e5:df:40:16:ec:d8:1c: f1:d2:9a:fa:a5:88:8f:23:09:ee:8b:10:5b:8f:54: 0a:c7:49:27:47:8e:91:49:e9:91:96:50:51:c8:84: 5b:ca:57:18:79:8b:a4:a3:d2:c1:ea:d0:86:5e:18: 47:0a:2d:c7:c1:04:e1:02:16:6a:01:29:0d:5e:ba: 2a:5f Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 7F:5A:F2:5E:F2:B6:E7:17:A6:3D:C3:D9:D9:B1:44:50:CB:EA:03:15 X509v3 Authority Key Identifier: keyid:73:F2:10:F1:29:9A:1E:0A:EE:71:DC:1D:79:E5:FB:12:09:2D:30:A9 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/c_IQ8SmaHgrucdwdeeX7EgktMKk.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/34/db1b48-1cc5-4833-93d9-b9464718ba37/1/c_IQ8SmaHgrucdwdeeX7EgktMKk.mft X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/34/db1b48-1cc5-4833-93d9-b9464718ba37/1/c_IQ8SmaHgrucdwdeeX7EgktMKk.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 00:22:2d:48:10:24:01:51:df:a2:cc:a1:93:1d:dd:e6:55:44: 99:2a:9b:4c:ef:31:de:9f:33:fb:7e:c0:8f:03:df:b7:8f:eb: d1:61:f7:89:68:09:bd:5a:1c:35:2f:90:59:fe:58:06:a8:4b: 96:37:ee:0e:db:2f:66:2a:5f:35:b5:86:d9:23:c7:05:b2:ef: 6e:54:bc:87:9d:7c:e6:2c:94:3b:ac:0e:d4:63:8e:66:12:f6: 57:f2:1c:f7:8d:77:64:5a:e0:52:79:80:9c:a4:8f:f4:ab:d2: ae:af:4f:2c:c6:e5:77:24:8a:bd:71:de:dd:69:47:f5:99:c0: 32:be:71:01:74:a2:63:23:11:49:e1:5c:50:af:86:12:88:05: d9:4e:30:d8:33:c8:84:23:dd:dc:14:ed:ac:df:7b:fe:53:b7: 32:a4:6d:21:43:38:a8:cf:0e:7b:e0:1f:7a:b7:6d:f4:34:4c: c0:3a:16:b4:a8:a2:ec:c6:61:33:4b:0e:17:25:68:33:71:39: bd:12:48:f0:d0:da:0a:d1:52:f6:82:ec:03:cd:ab:cb:91:2c: 0b:19:c5:84:10:95:1f:77:7e:89:78:c6:ef:2d:da:05:83:3b: 53:39:48:c6:d8:1b:67:07:43:87:2a:bb:da:be:f6:cb:ee:56: bf:bd:57:64 -----BEGIN CERTIFICATE----- MIIFFjCCA/6gAwIBAgISAZn8WMfYQHqbSMGg3VkBI7M3MA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKDczZjIxMGYxMjk5YTFlMGFlZTcxZGMxZDc5ZTVmYjEyMDky ZDMwYTkwHhcNMjUxMDE5MTIwMTQwWhcNMjUxMDIwMTIwMTQwWjAzMTEwLwYDVQQD Eyg3ZjVhZjI1ZWYyYjZlNzE3YTYzZGMzZDlkOWIxNDQ1MGNiZWEwMzE1MIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAt5GVeaxg086Sq9noDsg7JnOfhGwd 6g5HKMwyZKdUBGO8jQGP1nXwNDEt2LS3VbCImBYFFRctH67yrkXqmg9wk3HMPN+S bCNjpxzy/xB9nRaFs2YxH9cVgXBvIYJCSL4BOH4+MvY4J9W/m1DjCVCn0Tu4aZr7 xvFGOw+QfJDFU7m5cm1hX7jRRRVU4g3tWm+me0JWdiIb8hWAAxu9Nld77n5We4je Izt4HYPbnI47xNJq0MrRNipLpgMr7eXfQBbs2Bzx0pr6pYiPIwnuixBbj1QKx0kn R46RSemRllBRyIRbylcYeYuko9LB6tCGXhhHCi3HwQThAhZqASkNXroqXwIDAQAB o4ICIjCCAh4wHQYDVR0OBBYEFH9a8l7ytucXpj3D2dmxRFDL6gMVMB8GA1UdIwQY MBaAFHPyEPEpmh4K7nHcHXnl+xIJLTCpMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvY19JUThTbWFIZ3J1Y2R3ZGVlWDdFZ2t0TUtrLmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC8zNC9kYjFiNDgtMWNjNS00ODMzLTkzZDkt Yjk0NjQ3MThiYTM3LzEvY19JUThTbWFIZ3J1Y2R3ZGVlWDdFZ2t0TUtrLm1mdDCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC8zNC9kYjFiNDgtMWNjNS00ODMzLTkzZDktYjk0NjQ3MThiYTM3 LzEvY19JUThTbWFIZ3J1Y2R3ZGVlWDdFZ2t0TUtrLmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAACItSBAk AVHfosyhkx3d5lVEmSqbTO8x3p8z+37AjwPft4/r0WH3iWgJvVocNS+QWf5YBqhL ljfuDtsvZipfNbWG2SPHBbLvblS8h5185iyUO6wO1GOOZhL2V/Ic9413ZFrgUnmA nKSP9KvSrq9PLMbldySKvXHe3WlH9ZnAMr5xAXSiYyMRSeFcUK+GEogF2U4w2DPI hCPd3BTtrN97/lO3MqRtIUM4qM8Oe+Aferdt9DRMwDoWtKii7MZhM0sOFyVoM3E5 vRJI8NDaCtFS9oLsA82ry5EsCxnFhBCVH3d+iXjG7y3aBYM7UzlIxtgbZwdDhyq7 2r72y+5Wv71XZA== -----END CERTIFICATE-----Generated at Sun Oct 19 17:39:35 2025 by rpki-client