$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/3f/2b2878-5b79-40f7-b4b5-356c4d7bb452/1/9sPgJ9LRwtNtfJVIZyJsg7ZetW8.mft File: 9sPgJ9LRwtNtfJVIZyJsg7ZetW8.mft (raw, json) Hash identifier: 1hZGtPIicnOJzP+dyybU8+t11Nelv5zLfZNzj/jxatc= Subject key identifier: 16:AF:A6:ED:3E:E5:C7:5C:D9:07:FF:59:A6:A1:73:A4:62:BB:98:7E Authority key identifier: F6:C3:E0:27:D2:D1:C2:D3:6D:7C:95:48:67:22:6C:83:B6:5E:B5:6F Certificate issuer: /CN=f6c3e027d2d1c2d36d7c954867226c83b65eb56f Certificate serial: 0199FBEC33F1F40CDB9193B1618EBF35E68A Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/9sPgJ9LRwtNtfJVIZyJsg7ZetW8.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/3f/2b2878-5b79-40f7-b4b5-356c4d7bb452/1/9sPgJ9LRwtNtfJVIZyJsg7ZetW8.mft Manifest number: 0EFC Signing time: Sun 19 Oct 2025 10:03:04 +0000 Manifest this update: Sun 19 Oct 2025 10:03:04 +0000 Manifest next update: Mon 20 Oct 2025 10:03:04 +0000 Files and hashes: 1: 1-FnvQqT9mIqxipsRqFjYsNQSlBM.roa (hash: +uFY0K06aPvv+IH1erLogXQwEEO2k+DY8eNZLIXFHV4=) 2: 3gHc2sELy-q8GzBNb0pGNEAUeSU.roa (hash: +uoA4jjzPF6dggZHTrB3SBkyhtONGCYmRKaDkDvy7ys=) 3: 9sPgJ9LRwtNtfJVIZyJsg7ZetW8.crl (hash: 2+Im9lk5Qa/HzyLeZJLYCXNRwA+B6OtizrgSjQpGNgs=) 4: EpH20P4xP3V2g4vErHJO-EvTAVU.roa (hash: jeooPDRiBjDAUPoIXhITPTt2zTmHZ7KLWf5fCQG5sIo=) 5: RMDB6gMXfrtTmWIrc-eFyDWvjA8.roa (hash: GVzUypSd1fZNP3R7rqeVrhxf+B3I3xeeeYXchU/dNhc=) 6: SI90qQvScrNKS-02paw66Vtte1g.roa (hash: CoRUrg+WB47FS25HKQ2HVa4e+itGukiRC6ZwlYviHec=) 7: VunL007YcgdB0SQwEVqZksZS8Fs.roa (hash: 216WPQB/uK03AqzN7nO6bEUvYIaYzP3vD9//CYpZtZI=) 8: mvmUvaM2JRysTq3IiKyyysU6GY8.roa (hash: dMiGawP2eEnw55fXqAakbpr7IIQ2Da7zAMRfk+xhjuE=) 9: xfkDaLGtqI9S0koDwH1ibKq86PQ.roa (hash: 9SMgRbgNtClui+eod+bviRGqIN366+5FDeHZRxM9wm0=) 10: yIehYePK6tLNgPSevPZc6yI-hyM.roa (hash: b4yVl+3Ck0JmNj4X3LbJqBzo9dAh1Vn8oWFOm89Ahv4=) Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/3f/2b2878-5b79-40f7-b4b5-356c4d7bb452/1/9sPgJ9LRwtNtfJVIZyJsg7ZetW8.crl rsync://rpki.ripe.net/repository/DEFAULT/3f/2b2878-5b79-40f7-b4b5-356c4d7bb452/1/9sPgJ9LRwtNtfJVIZyJsg7ZetW8.mft rsync://rpki.ripe.net/repository/DEFAULT/9sPgJ9LRwtNtfJVIZyJsg7ZetW8.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Mon 20 Oct 2025 06:00:58 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:99:fb:ec:33:f1:f4:0c:db:91:93:b1:61:8e:bf:35:e6:8a Signature Algorithm: sha256WithRSAEncryption Issuer: CN=f6c3e027d2d1c2d36d7c954867226c83b65eb56f Validity Not Before: Oct 19 10:03:04 2025 GMT Not After : Oct 20 10:03:04 2025 GMT Subject: CN=16afa6ed3ee5c75cd907ff59a6a173a462bb987e Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:93:37:9b:6c:f0:d3:ca:1f:23:88:48:a6:2a:03: 9c:74:03:f8:0b:08:7b:58:5e:b4:e5:ed:d5:b1:a3: c7:de:9c:1a:5d:cd:29:9a:2f:2b:ec:41:a5:78:01: b2:df:ef:66:7f:b3:2f:c5:f6:2f:91:b5:0e:23:30: 3e:20:2a:0f:63:6a:e9:79:8a:ee:21:bd:6f:76:43: 35:44:3f:29:c9:74:ff:cb:50:14:19:fe:1a:7b:76: 6e:cd:2b:ac:32:96:91:f4:8c:13:cc:65:36:1d:22: 41:ee:b3:63:a1:d1:4b:ae:61:5f:1f:86:e0:47:2a: e5:6e:e7:b9:56:a1:4a:68:50:f3:46:c2:b3:02:df: 73:e2:ba:1d:0c:58:ed:07:0c:6d:01:db:88:ed:f0: ec:d0:b8:df:6a:a4:83:a9:cf:d7:d2:8f:83:57:71: c1:24:6d:94:82:93:e6:de:59:02:52:7e:9a:68:78: c0:5a:fe:09:2a:94:3f:b3:90:5b:5d:e2:0c:8d:b7: e2:0f:75:e7:95:3c:1b:06:d7:d0:2e:84:6e:d9:08: bf:66:cd:98:a1:43:ff:5f:5b:fc:46:cd:4b:e2:77: 6e:83:88:b8:46:a8:f2:aa:fe:2d:58:be:6c:1e:37: 7b:9f:cc:61:07:a4:fa:c4:03:fa:9b:c2:b9:2b:bb: 23:8d Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 16:AF:A6:ED:3E:E5:C7:5C:D9:07:FF:59:A6:A1:73:A4:62:BB:98:7E X509v3 Authority Key Identifier: keyid:F6:C3:E0:27:D2:D1:C2:D3:6D:7C:95:48:67:22:6C:83:B6:5E:B5:6F X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/9sPgJ9LRwtNtfJVIZyJsg7ZetW8.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/3f/2b2878-5b79-40f7-b4b5-356c4d7bb452/1/9sPgJ9LRwtNtfJVIZyJsg7ZetW8.mft X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/3f/2b2878-5b79-40f7-b4b5-356c4d7bb452/1/9sPgJ9LRwtNtfJVIZyJsg7ZetW8.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 0b:f1:03:bd:59:7f:9c:47:6d:6c:c9:68:22:35:ec:e4:5e:53: 4c:18:38:e2:8b:59:08:0c:f6:eb:9f:96:a9:a8:51:dd:bc:f4: 74:46:59:8e:ac:d1:dc:70:56:b7:40:84:ea:bb:00:53:3f:1f: b3:ef:65:fe:23:78:63:d0:a2:35:ac:8f:53:1b:af:66:58:cf: 26:3f:94:07:8e:14:d6:30:58:84:43:26:d7:da:5a:c7:2d:70: d9:2d:50:1d:11:92:33:ad:5e:7b:22:5c:07:4f:a2:65:ea:05: 7e:ea:bf:15:a4:51:d6:f8:38:e1:2c:f8:d3:5d:c3:0d:b8:b9: 50:7f:9e:b2:63:a2:d1:d9:ce:c0:9b:d2:e6:77:4c:a5:1d:ee: 09:3a:11:00:6a:3f:43:2a:af:55:a2:0e:7a:47:9c:12:e9:5a: e9:bd:be:5c:0e:d2:76:d4:9f:71:a8:9f:7f:58:5d:ae:c7:59: e2:56:b6:88:f9:8d:8e:87:0e:67:df:12:43:f1:10:05:8f:28: bb:00:f5:42:b4:ca:b9:13:c7:28:b5:4f:2f:02:d5:54:10:a9: 8e:4e:9a:60:58:48:04:fb:54:48:1d:c5:07:73:5f:eb:12:aa: 80:4d:ad:df:84:40:85:8c:a9:10:db:cb:84:58:a5:f0:54:ab: 60:c1:a1:ae -----BEGIN CERTIFICATE----- MIIFFjCCA/6gAwIBAgISAZn77DPx9AzbkZOxYY6/NeaKMA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKGY2YzNlMDI3ZDJkMWMyZDM2ZDdjOTU0ODY3MjI2YzgzYjY1 ZWI1NmYwHhcNMjUxMDE5MTAwMzA0WhcNMjUxMDIwMTAwMzA0WjAzMTEwLwYDVQQD EygxNmFmYTZlZDNlZTVjNzVjZDkwN2ZmNTlhNmExNzNhNDYyYmI5ODdlMIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAkzebbPDTyh8jiEimKgOcdAP4Cwh7 WF605e3VsaPH3pwaXc0pmi8r7EGleAGy3+9mf7MvxfYvkbUOIzA+ICoPY2rpeYru Ib1vdkM1RD8pyXT/y1AUGf4ae3ZuzSusMpaR9IwTzGU2HSJB7rNjodFLrmFfH4bg Ryrlbue5VqFKaFDzRsKzAt9z4rodDFjtBwxtAduI7fDs0LjfaqSDqc/X0o+DV3HB JG2UgpPm3lkCUn6aaHjAWv4JKpQ/s5BbXeIMjbfiD3XnlTwbBtfQLoRu2Qi/Zs2Y oUP/X1v8Rs1L4ndug4i4Rqjyqv4tWL5sHjd7n8xhB6T6xAP6m8K5K7sjjQIDAQAB o4ICIjCCAh4wHQYDVR0OBBYEFBavpu0+5cdc2Qf/Waahc6Riu5h+MB8GA1UdIwQY MBaAFPbD4CfS0cLTbXyVSGcibIO2XrVvMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvOXNQZ0o5TFJ3dE50ZkpWSVp5SnNnN1pldFc4LmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC8zZi8yYjI4NzgtNWI3OS00MGY3LWI0YjUt MzU2YzRkN2JiNDUyLzEvOXNQZ0o5TFJ3dE50ZkpWSVp5SnNnN1pldFc4Lm1mdDCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC8zZi8yYjI4NzgtNWI3OS00MGY3LWI0YjUtMzU2YzRkN2JiNDUy LzEvOXNQZ0o5TFJ3dE50ZkpWSVp5SnNnN1pldFc4LmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAC/EDvVl/ nEdtbMloIjXs5F5TTBg44otZCAz265+WqahR3bz0dEZZjqzR3HBWt0CE6rsAUz8f s+9l/iN4Y9CiNayPUxuvZljPJj+UB44U1jBYhEMm19paxy1w2S1QHRGSM61eeyJc B0+iZeoFfuq/FaRR1vg44Sz4013DDbi5UH+esmOi0dnOwJvS5ndMpR3uCToRAGo/ QyqvVaIOekecEula6b2+XA7SdtSfcaiff1hdrsdZ4la2iPmNjocOZ98SQ/EQBY8o uwD1QrTKuRPHKLVPLwLVVBCpjk6aYFhIBPtUSB3FB3Nf6xKqgE2t34RAhYypENvL hFil8FSrYMGhrg== -----END CERTIFICATE-----Generated at Sun Oct 19 15:05:36 2025 by rpki-client