$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/3f/18c498-2171-4e1c-8d80-a6c49eb28287/1/dOPDNpcglLGowT1BgWhX0Zejquk.mft File: dOPDNpcglLGowT1BgWhX0Zejquk.mft (raw, json) Hash identifier: rffuJDbH1/nLUvs17YmnNEsHCAZASZlvQiOhN25AcCk= Subject key identifier: A9:95:77:60:D2:4D:54:F6:CD:0C:83:87:AB:AB:1A:ED:5D:17:3C:7E Authority key identifier: 74:E3:C3:36:97:20:94:B1:A8:C1:3D:41:81:68:57:D1:97:A3:AA:E9 Certificate issuer: /CN=74e3c336972094b1a8c13d41816857d197a3aae9 Certificate serial: 0199FC8F943948FD7FF5702D60F6F165E184 Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/dOPDNpcglLGowT1BgWhX0Zejquk.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/3f/18c498-2171-4e1c-8d80-a6c49eb28287/1/dOPDNpcglLGowT1BgWhX0Zejquk.mft Manifest number: 1407 Signing time: Sun 19 Oct 2025 13:01:32 +0000 Manifest this update: Sun 19 Oct 2025 13:01:32 +0000 Manifest next update: Mon 20 Oct 2025 13:01:32 +0000 Files and hashes: 1: 1jpCyAps9bajWpTTNjuuJqkvGNw.roa (hash: QdNF4dszmqN93C6OMT7lYcdmskEQt8kQtHTCFEeRLK4=) 2: 5TFH_eW2qIWRYXLPVqdNkYBm8RY.roa (hash: NHd1FZ0Cj9dSpCZXcpxcSuivwawk/XLiDV5hFVcK8gs=) 3: B-IzhwSKXhHkz88nSETOGD9yRG4.roa (hash: YnLpp9fGmyMsduAjb3ebFR0Lsy/94n7A+dxRiyz9BXo=) 4: LfVA7yFSUE0qhq_HYTK38H6PAlY.roa (hash: Kppg3VjpkBzGqtZq9DRkl+9W1VehTNUgM7T4eg/Jh/E=) 5: OI1U9tyTexI3zFMxN2_p-wXJb6Q.roa (hash: jEa8AhX1E/rcgU1N48+cRpXUd91VJFk6ahzuPB4XKow=) 6: UWwzSZwnxpR_r3Y4D6vttKdBBVs.roa (hash: 7svZa4xV7+uz3XJCftME26l72YGSUBkSe+OkDk5Vluk=) 7: VJ6MDr9v2VTJjopln-NK2ojxFwc.roa (hash: aCjSF+Bt+cDnTvcdibhV9s05hQuvY9LCYp3eMrgD2Ks=) 8: YOcpXFVJRTJW2caFAPTppkNQBuk.roa (hash: bsMm8G8+2Vegzn+c1SqEObi1wuYbeOXaQ994ZEYf674=) 9: a1U9llCdwrEqU4GkcwBsuwGny80.roa (hash: x9+7kA4QQzpZS4+gdNTWeXV2Ehq7i5FwV0w3Ws0zS7A=) 10: bilxvgHa_ortWdZiJoCPu9q2EO4.roa (hash: l/1X47j3OP5z+Rp05LuTXjyl7yZpgOm/aXT90ziTHDc=) 11: btX-zAe_zEJQ3ltM7sZKTKWNtzU.roa (hash: FXQNguGpvehosedHQRjCf06rJkvh5KY35ySN2Wig1dE=) 12: dOPDNpcglLGowT1BgWhX0Zejquk.crl (hash: /17euCbO/9hz+Nwm8p2VwJiSxdig3Mu1CILRC31xivg=) 13: leLN7dUwqNQXTkicjPodaPNaHrA.roa (hash: /TZBYmyqPdbIBcWc+Ubi8mL2e3Sg1zgKUo/8XZMZsK8=) 14: ltEUPJ59iMmxTdNEYLGbM1Yq6jY.roa (hash: 4OyHOUV/gpG2mHKMCDQGjjKuCFHSFtOInlqympBF1Os=) 15: pzyfVcqGqM8oIh9yspKnplAOyo4.roa (hash: hsiUYyCYakxAYsQctvaT1faoOH457ARGeeeeMVZVUZk=) Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/3f/18c498-2171-4e1c-8d80-a6c49eb28287/1/dOPDNpcglLGowT1BgWhX0Zejquk.crl rsync://rpki.ripe.net/repository/DEFAULT/3f/18c498-2171-4e1c-8d80-a6c49eb28287/1/dOPDNpcglLGowT1BgWhX0Zejquk.mft rsync://rpki.ripe.net/repository/DEFAULT/dOPDNpcglLGowT1BgWhX0Zejquk.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Mon 20 Oct 2025 11:18:59 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:99:fc:8f:94:39:48:fd:7f:f5:70:2d:60:f6:f1:65:e1:84 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=74e3c336972094b1a8c13d41816857d197a3aae9 Validity Not Before: Oct 19 13:01:32 2025 GMT Not After : Oct 20 13:01:32 2025 GMT Subject: CN=a9957760d24d54f6cd0c8387abab1aed5d173c7e Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:a6:71:d2:fe:94:88:91:d4:54:92:a1:b4:9c:69: 36:f4:31:5f:72:98:1b:5d:b6:bf:34:b3:b8:2e:a9: b0:1b:03:bb:d3:f0:e1:5c:b6:a8:1a:2b:92:2e:b8: 58:28:81:c1:a4:fe:69:54:f1:b2:1b:e5:79:e2:50: 6d:19:2e:91:ff:92:f9:15:8d:05:71:fc:c0:0d:9a: 68:e4:e6:26:f7:97:b7:9d:59:25:37:e8:bc:d7:f3: a9:a6:b1:09:72:8e:6a:21:43:47:d6:3c:0a:f8:98: 7e:03:64:14:83:0b:7a:11:bd:94:1c:71:bb:02:02: 0f:90:f5:10:af:97:93:4a:c6:46:40:ae:ff:4d:f5: c1:f2:b6:8f:07:e6:2e:61:05:af:2f:d5:07:16:d0: e1:c1:1c:4f:bc:04:2b:04:24:e8:87:6d:73:a3:07: a8:9e:fe:d9:69:50:75:42:a3:6d:b3:50:f2:5c:f7: b4:3c:08:76:e2:b6:ed:48:ea:64:63:91:c7:30:6f: a8:74:56:d8:2e:b0:e4:55:25:7c:94:53:eb:d8:2c: 69:15:b8:a3:cf:05:14:46:58:e7:31:a3:85:6d:65: 1b:e5:0e:05:e7:0c:65:ba:4a:74:fa:24:b2:7b:a6: b4:28:4d:a3:26:1f:93:2f:9f:34:17:7c:fe:d1:2d: 72:c1 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: A9:95:77:60:D2:4D:54:F6:CD:0C:83:87:AB:AB:1A:ED:5D:17:3C:7E X509v3 Authority Key Identifier: keyid:74:E3:C3:36:97:20:94:B1:A8:C1:3D:41:81:68:57:D1:97:A3:AA:E9 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/dOPDNpcglLGowT1BgWhX0Zejquk.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/3f/18c498-2171-4e1c-8d80-a6c49eb28287/1/dOPDNpcglLGowT1BgWhX0Zejquk.mft X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/3f/18c498-2171-4e1c-8d80-a6c49eb28287/1/dOPDNpcglLGowT1BgWhX0Zejquk.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption bd:27:16:4c:2e:0c:95:9b:7e:9f:da:5e:dd:8a:d3:c9:c5:78: f9:3c:58:2c:a2:bb:2a:4e:1a:8e:88:5e:d0:79:f9:fe:e0:46: cc:d0:d2:70:b3:a1:ec:d7:ec:57:15:32:d4:8f:4b:81:f2:91: 56:36:5d:32:77:b4:eb:70:8a:f3:1a:99:c6:06:01:10:c0:73: 2f:3a:ce:86:05:14:9b:9f:dd:12:81:3d:ed:ea:08:23:a5:c3: 9b:5a:87:9a:79:5c:23:bc:0a:dd:4a:e3:f7:3e:86:3c:5d:1a: b6:7f:11:00:a4:53:9a:ce:ac:86:0e:39:fc:34:e7:97:5a:90: 56:11:3a:6d:52:e4:a8:be:d4:6f:e3:26:62:a7:06:ad:bb:2a: 53:cc:b4:72:82:bf:94:15:0b:7f:ce:29:a6:e8:bd:97:61:5b: a2:23:83:c2:4e:6c:fb:c7:3c:56:cf:e9:4e:d2:47:8a:a7:e2: a7:7d:aa:c5:79:3b:01:cc:24:2d:cb:36:3d:d0:52:71:11:91: 90:2c:23:09:79:26:e5:76:4d:65:82:f4:44:0d:d5:cf:df:f4: dc:06:02:01:5a:0f:47:a0:4a:a7:ee:cc:81:6c:29:87:e5:b8: 15:46:81:4e:c7:d4:c5:fa:9b:48:3b:6e:25:be:35:f1:02:4a: 1c:f9:d6:c5 -----BEGIN CERTIFICATE----- MIIFFjCCA/6gAwIBAgISAZn8j5Q5SP1/9XAtYPbxZeGEMA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKDc0ZTNjMzM2OTcyMDk0YjFhOGMxM2Q0MTgxNjg1N2QxOTdh M2FhZTkwHhcNMjUxMDE5MTMwMTMyWhcNMjUxMDIwMTMwMTMyWjAzMTEwLwYDVQQD EyhhOTk1Nzc2MGQyNGQ1NGY2Y2QwYzgzODdhYmFiMWFlZDVkMTczYzdlMIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEApnHS/pSIkdRUkqG0nGk29DFfcpgb Xba/NLO4LqmwGwO70/DhXLaoGiuSLrhYKIHBpP5pVPGyG+V54lBtGS6R/5L5FY0F cfzADZpo5OYm95e3nVklN+i81/OpprEJco5qIUNH1jwK+Jh+A2QUgwt6Eb2UHHG7 AgIPkPUQr5eTSsZGQK7/TfXB8raPB+YuYQWvL9UHFtDhwRxPvAQrBCToh21zoweo nv7ZaVB1QqNts1DyXPe0PAh24rbtSOpkY5HHMG+odFbYLrDkVSV8lFPr2CxpFbij zwUURljnMaOFbWUb5Q4F5wxlukp0+iSye6a0KE2jJh+TL580F3z+0S1ywQIDAQAB o4ICIjCCAh4wHQYDVR0OBBYEFKmVd2DSTVT2zQyDh6urGu1dFzx+MB8GA1UdIwQY MBaAFHTjwzaXIJSxqME9QYFoV9GXo6rpMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvZE9QRE5wY2dsTEdvd1QxQmdXaFgwWmVqcXVrLmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC8zZi8xOGM0OTgtMjE3MS00ZTFjLThkODAt YTZjNDllYjI4Mjg3LzEvZE9QRE5wY2dsTEdvd1QxQmdXaFgwWmVqcXVrLm1mdDCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC8zZi8xOGM0OTgtMjE3MS00ZTFjLThkODAtYTZjNDllYjI4Mjg3 LzEvZE9QRE5wY2dsTEdvd1QxQmdXaFgwWmVqcXVrLmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAvScWTC4M lZt+n9pe3YrTycV4+TxYLKK7Kk4ajohe0Hn5/uBGzNDScLOh7NfsVxUy1I9LgfKR VjZdMne063CK8xqZxgYBEMBzLzrOhgUUm5/dEoE97eoII6XDm1qHmnlcI7wK3Urj 9z6GPF0atn8RAKRTms6shg45/DTnl1qQVhE6bVLkqL7Ub+MmYqcGrbsqU8y0coK/ lBULf84ppui9l2FboiODwk5s+8c8Vs/pTtJHiqfip32qxXk7AcwkLcs2PdBScRGR kCwjCXkm5XZNZYL0RA3Vz9/03AYCAVoPR6BKp+7MgWwph+W4FUaBTsfUxfqbSDtu Jb418QJKHPnWxQ== -----END CERTIFICATE-----Generated at Sun Oct 19 17:33:56 2025 by rpki-client