$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/3a/05488f-f4e0-4e6c-94f5-3757539c2ac9/1/X32laK0Ce54knBPiI9MidpiBop8.mft File: X32laK0Ce54knBPiI9MidpiBop8.mft (raw, json) Hash identifier: 6wOiGebUWs6ZtEqOLsjoti9Z/e4/quVCWELE44FJChc= Subject key identifier: 0E:4A:07:D4:54:15:88:1A:21:29:98:09:8C:8D:23:56:7A:DA:5D:B7 Authority key identifier: 5F:7D:A5:68:AD:02:7B:9E:24:9C:13:E2:23:D3:22:76:98:81:A2:9F Certificate issuer: /CN=5f7da568ad027b9e249c13e223d322769881a29f Certificate serial: 0199FC58D625C3208D397A1BB12A05DE1846 Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/X32laK0Ce54knBPiI9MidpiBop8.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/3a/05488f-f4e0-4e6c-94f5-3757539c2ac9/1/X32laK0Ce54knBPiI9MidpiBop8.mft Manifest number: 0C63 Signing time: Sun 19 Oct 2025 12:01:44 +0000 Manifest this update: Sun 19 Oct 2025 12:01:44 +0000 Manifest next update: Mon 20 Oct 2025 12:01:44 +0000 Files and hashes: 1: 4BCZvoVhaJr1ZyKd0QAJsPGeSeQ.roa (hash: l61Gi2tTBfrkMToy5beNk27kWvFtKFI5DT4lk7tvlJ8=) 2: CiSXDCdW3LMwjv8iJ3B2mY7zojU.roa (hash: xoZ4D0sXI5qWTDuig3N1rhh1l7zRYo3/rWNsiYjXVLw=) 3: Dhg938LLNxihNYriqStR3oqs6Jg.roa (hash: Aj+6lvIDsodEZ6I55Us8ZFj5GtVjSmfFFjL8I/MfYqo=) 4: Ip8huaIK21qXcV1uFM12bMRhsAc.roa (hash: +deXUeKbtAB4FcOD/Fpx9fIrQPH8oKg+/d89Ce9TGGY=) 5: SVIT-fWz2Ki9EHDQlfqzIxpfVLE.roa (hash: RseVjDJ2Eg3rRrpcGWYYLelpMZ3JUHmet98PxhD+iYY=) 6: X32laK0Ce54knBPiI9MidpiBop8.crl (hash: t+90IilNzwaNN1R8wWhsPzGy0+HNZoxswwRIv+RbmPo=) 7: XjVu2IyXljFzhSvYma_h3-clfVU.roa (hash: nT21YokFB5zQvbm3JPkkRJDjEHGU38C24xQDpQHQGAI=) 8: oSGRjgd5g7uxmIyMg55GeDp1lcQ.roa (hash: yVVI9w+n8DQ5LZ0pU0EZPfP/S8D3Imwu6pg6ds8XII0=) 9: pbCRn5qHfv9kAFmGRVO_GwJ-FGU.roa (hash: DuA/Ogfo71srzFpKEqoNkfpCys4Br/KSRmwQFn52q84=) 10: s84uwW_-i_SHLp2X5wNbbXCbos0.roa (hash: XmZwP1Dphpy/OpROhUP0RXS2PeMw5xbgxdsjXIheFhc=) Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/3a/05488f-f4e0-4e6c-94f5-3757539c2ac9/1/X32laK0Ce54knBPiI9MidpiBop8.crl rsync://rpki.ripe.net/repository/DEFAULT/3a/05488f-f4e0-4e6c-94f5-3757539c2ac9/1/X32laK0Ce54knBPiI9MidpiBop8.mft rsync://rpki.ripe.net/repository/DEFAULT/X32laK0Ce54knBPiI9MidpiBop8.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Mon 20 Oct 2025 06:00:58 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:99:fc:58:d6:25:c3:20:8d:39:7a:1b:b1:2a:05:de:18:46 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=5f7da568ad027b9e249c13e223d322769881a29f Validity Not Before: Oct 19 12:01:44 2025 GMT Not After : Oct 20 12:01:44 2025 GMT Subject: CN=0e4a07d45415881a212998098c8d23567ada5db7 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:cd:f2:56:e9:1f:50:90:05:c2:f3:8e:83:fe:ca: 5d:15:a3:ce:fb:0e:32:00:40:3f:7b:b8:7e:5c:58: 11:8b:31:ae:ec:e4:2b:27:55:28:8b:83:3a:65:20: 80:dc:62:4d:5f:53:b5:a4:ad:d6:f7:d3:a8:4c:ff: be:95:04:d8:bc:84:a4:2d:38:9e:e1:7b:5d:c0:c8: d9:07:8a:3a:60:17:0b:da:6c:da:03:de:f6:5d:9d: bd:20:33:57:43:65:72:ab:53:01:60:7b:e2:94:f8: b0:2e:27:94:94:92:73:1e:df:76:c7:b7:66:37:33: c2:bc:b8:f7:f9:9f:d0:9c:ad:c0:3b:d7:64:76:54: 1a:d9:bb:5c:2d:09:ce:ad:07:e7:2c:cc:ac:9a:d0: f5:c0:a1:29:7e:86:03:45:b2:14:dc:89:b5:ad:0b: 6d:1d:78:da:ba:d8:80:85:84:59:33:98:d1:5d:e4: 7c:c8:85:f9:93:9c:52:8a:b3:d0:cb:29:3b:88:02: 89:31:93:bb:98:e6:6f:9d:40:28:b5:7f:5a:d8:3b: 41:30:97:b7:95:a9:29:86:e3:b8:d2:b4:dc:2a:75: 66:58:27:ce:05:3d:36:8a:ea:85:c3:cc:cd:e9:cc: d0:b8:37:00:1d:a5:5a:79:b2:a9:fd:a0:73:62:c8: 5a:e1 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 0E:4A:07:D4:54:15:88:1A:21:29:98:09:8C:8D:23:56:7A:DA:5D:B7 X509v3 Authority Key Identifier: keyid:5F:7D:A5:68:AD:02:7B:9E:24:9C:13:E2:23:D3:22:76:98:81:A2:9F X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/X32laK0Ce54knBPiI9MidpiBop8.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/3a/05488f-f4e0-4e6c-94f5-3757539c2ac9/1/X32laK0Ce54knBPiI9MidpiBop8.mft X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/3a/05488f-f4e0-4e6c-94f5-3757539c2ac9/1/X32laK0Ce54knBPiI9MidpiBop8.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 19:b1:43:92:fd:74:8a:d4:91:e7:c3:fa:6e:62:85:cd:56:7a: 81:c1:77:0e:ae:3a:58:ae:23:88:c1:fc:f1:0f:68:2d:70:dd: bd:f4:3f:4b:71:6a:7d:5c:fd:98:13:34:09:4a:1d:ed:c3:b8: ec:67:d0:3c:1a:62:89:db:cb:ea:c1:f2:bd:94:e5:2a:d5:b9: 82:ea:04:54:e1:be:fc:9b:f0:57:51:ee:4c:57:3a:c8:3e:43: 61:91:a4:2b:ef:f6:30:48:2c:c4:22:81:f8:d7:f3:68:cd:f2: c9:ff:c9:76:0f:59:6a:c4:c9:0f:f7:70:33:f0:b5:7e:c4:e7: de:fd:0a:5d:41:2c:04:16:50:db:d3:83:42:d0:ca:d9:62:da: bf:27:47:66:32:bc:d1:18:cb:d4:6a:63:5f:3d:d1:a6:83:14: a7:3b:5f:4c:fe:f7:50:b1:ca:11:ce:d6:f7:87:80:f1:39:84: 82:a7:03:e1:70:b9:fc:74:e6:e0:36:f1:3a:41:07:20:7c:ff: b6:60:98:ed:1a:37:32:fa:27:94:e7:e6:80:76:c3:3b:34:7a: 4b:ed:83:90:8f:d9:3b:06:90:0f:fb:31:45:99:03:50:4c:81: 3f:b6:30:5f:6a:86:a9:c3:32:6a:18:ce:c2:17:88:34:de:08: 7e:ad:57:0f -----BEGIN CERTIFICATE----- MIIFFjCCA/6gAwIBAgISAZn8WNYlwyCNOXobsSoF3hhGMA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKDVmN2RhNTY4YWQwMjdiOWUyNDljMTNlMjIzZDMyMjc2OTg4 MWEyOWYwHhcNMjUxMDE5MTIwMTQ0WhcNMjUxMDIwMTIwMTQ0WjAzMTEwLwYDVQQD EygwZTRhMDdkNDU0MTU4ODFhMjEyOTk4MDk4YzhkMjM1NjdhZGE1ZGI3MIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAzfJW6R9QkAXC846D/spdFaPO+w4y AEA/e7h+XFgRizGu7OQrJ1Uoi4M6ZSCA3GJNX1O1pK3W99OoTP++lQTYvISkLTie 4XtdwMjZB4o6YBcL2mzaA972XZ29IDNXQ2Vyq1MBYHvilPiwLieUlJJzHt92x7dm NzPCvLj3+Z/QnK3AO9dkdlQa2btcLQnOrQfnLMysmtD1wKEpfoYDRbIU3Im1rQtt HXjautiAhYRZM5jRXeR8yIX5k5xSirPQyyk7iAKJMZO7mOZvnUAotX9a2DtBMJe3 lakphuO40rTcKnVmWCfOBT02iuqFw8zN6czQuDcAHaVaebKp/aBzYsha4QIDAQAB o4ICIjCCAh4wHQYDVR0OBBYEFA5KB9RUFYgaISmYCYyNI1Z62l23MB8GA1UdIwQY MBaAFF99pWitAnueJJwT4iPTInaYgaKfMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvWDMybGFLMENlNTRrbkJQaUk5TWlkcGlCb3A4LmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC8zYS8wNTQ4OGYtZjRlMC00ZTZjLTk0ZjUt Mzc1NzUzOWMyYWM5LzEvWDMybGFLMENlNTRrbkJQaUk5TWlkcGlCb3A4Lm1mdDCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC8zYS8wNTQ4OGYtZjRlMC00ZTZjLTk0ZjUtMzc1NzUzOWMyYWM5 LzEvWDMybGFLMENlNTRrbkJQaUk5TWlkcGlCb3A4LmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAGbFDkv10 itSR58P6bmKFzVZ6gcF3Dq46WK4jiMH88Q9oLXDdvfQ/S3FqfVz9mBM0CUod7cO4 7GfQPBpiidvL6sHyvZTlKtW5guoEVOG+/JvwV1HuTFc6yD5DYZGkK+/2MEgsxCKB +NfzaM3yyf/Jdg9ZasTJD/dwM/C1fsTn3v0KXUEsBBZQ29ODQtDK2WLavydHZjK8 0RjL1GpjXz3RpoMUpztfTP73ULHKEc7W94eA8TmEgqcD4XC5/HTm4DbxOkEHIHz/ tmCY7Ro3MvonlOfmgHbDOzR6S+2DkI/ZOwaQD/sxRZkDUEyBP7YwX2qGqcMyahjO wheINN4Ifq1XDw== -----END CERTIFICATE-----Generated at Sun Oct 19 15:11:43 2025 by rpki-client