$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/3a/abe134-0093-4652-9057-4f4c9b343e90/1/0d4STg-K2059lXbOrjJfZo3SJLE.mft File: 0d4STg-K2059lXbOrjJfZo3SJLE.mft (raw, json) Hash identifier: 3AK8BLNshY1dEF8tjE293XhO/sgVyJpVnrzxPBafuYQ= Subject key identifier: 89:4D:28:B6:9D:15:A9:C2:9D:EC:CD:C7:44:26:FE:F0:37:B2:1A:98 Authority key identifier: D1:DE:12:4E:0F:8A:DB:4E:7D:95:76:CE:AE:32:5F:66:8D:D2:24:B1 Certificate issuer: /CN=d1de124e0f8adb4e7d9576ceae325f668dd224b1 Certificate serial: 0199FC8F3E2A529EED0D5CA48322A60BBA6C Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/0d4STg-K2059lXbOrjJfZo3SJLE.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/3a/abe134-0093-4652-9057-4f4c9b343e90/1/0d4STg-K2059lXbOrjJfZo3SJLE.mft Manifest number: 1205 Signing time: Sun 19 Oct 2025 13:01:09 +0000 Manifest this update: Sun 19 Oct 2025 13:01:09 +0000 Manifest next update: Mon 20 Oct 2025 13:01:09 +0000 Files and hashes: 1: 0d4STg-K2059lXbOrjJfZo3SJLE.crl (hash: ras9ZUXjSl+Yb5g6KqghVmHP3Qstds/UDP1MUxVjCNQ=) 2: 6caVUV-TGB9bU55p1ya71OWBwvg.roa (hash: c0tRExOUVeBF8+Pq6PhYarD4KHj6+N7f0p/w2jdUK80=) 3: GE6nRoMuniMWGyv11YMLRPKemVU.roa (hash: RaYbPvfO1sHreb2/JnG9Opl+09YsllUwocY3Ihxf+gE=) 4: LFAtM68_QsypB1yZseRwlLJq2u4.roa (hash: /957wLIuErUNU/cVyq1KNPpSgWYbgRzlgVLc/r/yFdE=) 5: NAlGVYpV8OEmdD2nIMiqn334k0M.roa (hash: XrkbVPgrR7sOnmYGzDR8m+MZN8NJUZRQwjZqOHkM5b8=) 6: dNqRqY6tmtgccI8cx_uJ4tWqiZA.roa (hash: g+K2hBhsL/swaozLRy4ek/JzzpG8kCplNhlD1lsyOeY=) 7: g8zmfO2HPSEN8YUDrAkY2r7Nlqw.roa (hash: uAg57JMTD8oD+ghOOtfACvdQoLeAHc5YjQ/CuCFoViY=) 8: ghLUfufgx1VoBmbU1sZuk7NLdck.roa (hash: KlUf0BqZgjwHYa7TQ0G1F7PJPcSLF10z1HCqYwcsEU0=) 9: hacEV-MoLT8z9KwMPWss3cGE7Ak.roa (hash: /ljDI2bMRna9vPYEiWkrDiOeR+IfW8BnSxXE9Vp7xXE=) 10: xiZp6eivWb7x_d9W-WC8kwhVWsI.roa (hash: GvxU73beqXLMBxGmaGGngexgQ65uQMfsvmeuizGIl8o=) 11: yv08EH90nRPgnJ4aLVioWHP74iI.roa (hash: wfa+cbtIfXj/VcabZ84otkiskAuSmrS6+55fqOkIL+o=) Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/3a/abe134-0093-4652-9057-4f4c9b343e90/1/0d4STg-K2059lXbOrjJfZo3SJLE.crl rsync://rpki.ripe.net/repository/DEFAULT/3a/abe134-0093-4652-9057-4f4c9b343e90/1/0d4STg-K2059lXbOrjJfZo3SJLE.mft rsync://rpki.ripe.net/repository/DEFAULT/0d4STg-K2059lXbOrjJfZo3SJLE.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Mon 20 Oct 2025 06:00:58 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:99:fc:8f:3e:2a:52:9e:ed:0d:5c:a4:83:22:a6:0b:ba:6c Signature Algorithm: sha256WithRSAEncryption Issuer: CN=d1de124e0f8adb4e7d9576ceae325f668dd224b1 Validity Not Before: Oct 19 13:01:09 2025 GMT Not After : Oct 20 13:01:09 2025 GMT Subject: CN=894d28b69d15a9c29deccdc74426fef037b21a98 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:c7:35:9c:f2:d8:2b:91:3e:39:b6:cb:d8:98:b5: f3:0c:4d:bc:49:b4:05:5c:e9:29:34:1b:e1:0b:c7: 85:e9:d8:1c:b0:26:99:4e:8a:3c:52:cd:0d:6a:fe: 77:d3:00:7c:dd:b5:ba:6c:8b:85:99:d6:32:c1:a3: b9:54:ff:9a:39:93:6c:de:e7:ab:40:8b:06:e3:44: 29:61:4c:59:b8:74:69:86:93:9d:8d:31:2c:3d:d8: 7b:bc:0a:6b:63:24:dc:99:a8:31:65:83:c0:c9:9a: 6b:2e:e7:2b:ac:e4:92:28:89:fd:b5:01:06:fc:bf: 7e:c4:3f:2f:c5:8d:cd:a3:3c:52:7f:35:bf:4c:a4: 7c:c7:c2:ac:6a:ce:1c:1f:2a:6d:53:55:1d:00:fe: 46:a8:6f:dd:38:b0:29:46:ec:29:72:17:8f:41:92: 8a:39:60:9f:1d:de:e5:a4:d3:53:96:2e:cb:4e:ea: 32:f1:68:a1:8f:05:36:24:ed:c6:0c:94:6a:20:60: 13:c3:c7:31:0c:9f:fe:fb:6f:1d:55:66:f3:27:1d: 1e:33:03:01:c2:ac:4a:49:a3:25:f3:e8:c4:b6:b0: 2f:73:03:56:ab:6e:f4:73:5f:75:c5:9e:b0:b4:0e: 60:6f:67:f7:8d:91:6d:77:d3:90:0b:d5:a3:f7:e8: ff:31 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 89:4D:28:B6:9D:15:A9:C2:9D:EC:CD:C7:44:26:FE:F0:37:B2:1A:98 X509v3 Authority Key Identifier: keyid:D1:DE:12:4E:0F:8A:DB:4E:7D:95:76:CE:AE:32:5F:66:8D:D2:24:B1 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/0d4STg-K2059lXbOrjJfZo3SJLE.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/3a/abe134-0093-4652-9057-4f4c9b343e90/1/0d4STg-K2059lXbOrjJfZo3SJLE.mft X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/3a/abe134-0093-4652-9057-4f4c9b343e90/1/0d4STg-K2059lXbOrjJfZo3SJLE.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 0e:87:09:aa:4a:81:c6:45:18:f2:a0:bd:18:d4:7b:e0:25:55: f6:69:f1:a2:10:97:8e:69:66:40:6d:bf:d4:d2:06:80:70:2e: 80:5d:25:5e:df:d1:dd:a3:5e:61:22:6d:a5:a0:03:ca:bb:99: 1a:eb:16:19:de:fe:3c:4b:55:93:f4:f5:b5:01:bb:1d:a6:54: a3:d2:f8:69:e9:f6:4b:be:a0:8e:1a:78:31:cc:ce:9d:e3:c0: fd:33:a0:08:0a:74:e9:0e:e0:30:5f:b1:32:84:69:4c:dd:5d: 40:b2:09:63:85:cb:b5:34:a3:e7:66:1c:f9:ea:a1:d6:f3:0c: e3:ad:b9:fd:ce:ed:a7:0c:11:8c:79:ac:27:28:8f:b1:04:d0: b2:65:4c:c8:33:ae:ef:7d:09:e7:ff:53:b3:3a:38:89:07:82: 9f:1a:e2:08:ec:33:96:f5:ec:b2:66:78:73:2b:8a:2a:93:83: 4c:e8:e5:ba:db:b0:8e:af:40:4d:f5:e8:11:92:8f:fa:c3:f9: 48:f0:93:5a:61:97:e5:07:fb:a8:bd:78:b0:f7:43:47:87:3c: 2d:bd:2a:15:b4:18:0c:44:be:63:77:a8:46:fe:cc:97:4d:50: 39:a5:70:26:ba:da:b4:63:01:fd:74:8d:5f:9b:3a:ab:5e:30: 59:e2:0c:ed -----BEGIN CERTIFICATE----- MIIFFjCCA/6gAwIBAgISAZn8jz4qUp7tDVykgyKmC7psMA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKGQxZGUxMjRlMGY4YWRiNGU3ZDk1NzZjZWFlMzI1ZjY2OGRk MjI0YjEwHhcNMjUxMDE5MTMwMTA5WhcNMjUxMDIwMTMwMTA5WjAzMTEwLwYDVQQD Eyg4OTRkMjhiNjlkMTVhOWMyOWRlY2NkYzc0NDI2ZmVmMDM3YjIxYTk4MIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAxzWc8tgrkT45tsvYmLXzDE28SbQF XOkpNBvhC8eF6dgcsCaZToo8Us0Nav530wB83bW6bIuFmdYywaO5VP+aOZNs3uer QIsG40QpYUxZuHRphpOdjTEsPdh7vAprYyTcmagxZYPAyZprLucrrOSSKIn9tQEG /L9+xD8vxY3NozxSfzW/TKR8x8Ksas4cHyptU1UdAP5GqG/dOLApRuwpchePQZKK OWCfHd7lpNNTli7LTuoy8WihjwU2JO3GDJRqIGATw8cxDJ/++28dVWbzJx0eMwMB wqxKSaMl8+jEtrAvcwNWq270c191xZ6wtA5gb2f3jZFtd9OQC9Wj9+j/MQIDAQAB o4ICIjCCAh4wHQYDVR0OBBYEFIlNKLadFanCnezNx0Qm/vA3shqYMB8GA1UdIwQY MBaAFNHeEk4PittOfZV2zq4yX2aN0iSxMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvMGQ0U1RnLUsyMDU5bFhiT3JqSmZabzNTSkxFLmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC8zYS9hYmUxMzQtMDA5My00NjUyLTkwNTct NGY0YzliMzQzZTkwLzEvMGQ0U1RnLUsyMDU5bFhiT3JqSmZabzNTSkxFLm1mdDCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC8zYS9hYmUxMzQtMDA5My00NjUyLTkwNTctNGY0YzliMzQzZTkw LzEvMGQ0U1RnLUsyMDU5bFhiT3JqSmZabzNTSkxFLmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEADocJqkqB xkUY8qC9GNR74CVV9mnxohCXjmlmQG2/1NIGgHAugF0lXt/R3aNeYSJtpaADyruZ GusWGd7+PEtVk/T1tQG7HaZUo9L4aen2S76gjhp4MczOnePA/TOgCAp06Q7gMF+x MoRpTN1dQLIJY4XLtTSj52Yc+eqh1vMM4625/c7tpwwRjHmsJyiPsQTQsmVMyDOu 730J5/9Tszo4iQeCnxriCOwzlvXssmZ4cyuKKpODTOjlutuwjq9ATfXoEZKP+sP5 SPCTWmGX5Qf7qL14sPdDR4c8Lb0qFbQYDES+Y3eoRv7Ml01QOaVwJrratGMB/XSN X5s6q14wWeIM7Q== -----END CERTIFICATE-----Generated at Sun Oct 19 15:39:58 2025 by rpki-client