$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/47/bc7078-1ee4-42f1-bc34-1d21d1bce3fe/1/I0tUsRmns-_xUwhbcxVQfNhROg8.mft File: I0tUsRmns-_xUwhbcxVQfNhROg8.mft (raw, json) Hash identifier: n2BI4ftu0FV5TncTP7Cl/kbYHJ3AvQb7AqEbzbef7I0= Subject key identifier: F9:E0:8F:44:E9:69:58:00:C7:79:D7:11:20:4B:33:11:87:AD:03:FD Authority key identifier: 23:4B:54:B1:19:A7:B3:EF:F1:53:08:5B:73:15:50:7C:D8:51:3A:0F Certificate issuer: /CN=234b54b119a7b3eff153085b7315507cd8513a0f Certificate serial: 0199FC8F57895CF68474628D161E3D6C4830 Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/I0tUsRmns-_xUwhbcxVQfNhROg8.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/47/bc7078-1ee4-42f1-bc34-1d21d1bce3fe/1/I0tUsRmns-_xUwhbcxVQfNhROg8.mft Manifest number: 0D23 Signing time: Sun 19 Oct 2025 13:01:16 +0000 Manifest this update: Sun 19 Oct 2025 13:01:16 +0000 Manifest next update: Mon 20 Oct 2025 13:01:16 +0000 Files and hashes: 1: 2tV1T5SBsSkKar1qXX5FYlQ_B9Q.roa (hash: mGLI3Jd52qgMG50087Vl0ag+Rgi85Yfd8348tK3nJlQ=) 2: 9CjEL92KVQbBIKjAH6PWgI9d9kA.roa (hash: CxlINazLO+svbCxijVW6/kRGdkNG420xQ9K3jp5I7bo=) 3: 9Q-K0yA0D9jdkGXn7ifhVh2hLe4.roa (hash: BhOE66QanPWqjjysyWqBU6hcSToV2kkgkpmWedK9Plo=) 4: BKpPZ6YhMA786wWelQvZ2FdIeg0.roa (hash: CY94cVx1ALq/cp1lEiwu3JzO7Vk53LXHozpiwU2ifHA=) 5: Gg5xBTPmG5wIfgvjDfofedqUN2I.roa (hash: 44BexOUoVzM2f1vahHLSGVHdqnL6HKMPG3ed5PmM4sw=) 6: I0tUsRmns-_xUwhbcxVQfNhROg8.crl (hash: +hS6IHNetEGsHwHMtGE2+BQiySCRjVU1NSGdiRjieO8=) 7: KfWHlYFQnzVI2dPuoiLZqsly00A.roa (hash: hXW7e+AyYxT2PE5t8wRUT3atz/+WaH8gt4XQgdBp/mU=) 8: LtctFlc4GRCf3PIlxO5Sz70Upcc.roa (hash: 9oaNZGvrfQP+yRIBwwcg5U7jui8/sOP7Dz6ZLTuPIgM=) 9: LxwAd59gPAFiSwQsp6U5bWHTUIA.roa (hash: sV/jv6UM3eB6Fepo8zmoDeIxV8A3Cp94EBt2zbiu7+M=) 10: M73NPvrSZwGhIOTA9SbUvHl1x90.roa (hash: ijksxiMRPCxOAqaVav7odzv/IiE5tQUZQM4rRqWGT00=) 11: P4Ngmm4fscIJdjrtcZXwEWC6af0.roa (hash: Dgr4uE36WEf5Xw9kH8tw5qMQ+ewLeqeUvdPupgorbKg=) 12: gspg21PC-Bi6SGHc2DwZhP3SxPE.roa (hash: za152yl/mt+IWnj6LxRFIHIPMleLO2z2bWoNpUAX6js=) 13: nppvTips8XGcmj9VgC_a0xkLzT8.roa (hash: +FXbEH/4T1tplmkgWcOzmoIVkqvQhGApNb34NJo2CWU=) 14: urBSbMAYWiUVjS4RHFmzGqwvjpw.roa (hash: rG62D9ZHzopifBP96CZirceLJDCthMyab0aYX69q+Bo=) 15: y9rvtnyXZQSaHcISGufCbgd9oMg.roa (hash: YtKgQZ+a37E4WaxSPAYmpHW8Z8QKRoCD8fhZcaauCRA=) Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/47/bc7078-1ee4-42f1-bc34-1d21d1bce3fe/1/I0tUsRmns-_xUwhbcxVQfNhROg8.crl rsync://rpki.ripe.net/repository/DEFAULT/47/bc7078-1ee4-42f1-bc34-1d21d1bce3fe/1/I0tUsRmns-_xUwhbcxVQfNhROg8.mft rsync://rpki.ripe.net/repository/DEFAULT/I0tUsRmns-_xUwhbcxVQfNhROg8.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Mon 20 Oct 2025 11:18:59 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:99:fc:8f:57:89:5c:f6:84:74:62:8d:16:1e:3d:6c:48:30 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=234b54b119a7b3eff153085b7315507cd8513a0f Validity Not Before: Oct 19 13:01:16 2025 GMT Not After : Oct 20 13:01:16 2025 GMT Subject: CN=f9e08f44e9695800c779d711204b331187ad03fd Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:9e:f9:1e:3e:2f:88:4a:d9:f9:c9:e7:e0:55:8e: 2c:38:00:51:19:61:b1:f6:b9:16:8b:89:a1:45:e2: 47:cb:2b:c9:35:74:07:bd:d5:5a:91:24:c1:1f:15: 7b:32:35:03:4a:fc:9c:ad:bb:9c:7c:c6:90:17:7f: e4:94:5b:cd:93:84:38:44:eb:9e:29:dd:fc:47:20: 4f:5f:85:56:5a:99:fb:c1:21:63:83:99:d7:2e:64: 4c:b0:11:10:56:c5:0d:a5:d3:6c:c7:3e:28:6d:91: 6e:57:25:37:35:80:6f:ee:14:47:33:be:d0:8e:9b: 3b:2f:6c:62:fe:6a:6a:72:fe:e6:14:d8:fd:10:74: b8:cb:2e:f8:46:3d:c7:b6:68:fe:68:5d:b8:e4:78: e2:9b:1b:d7:cd:2a:6c:f3:c2:b1:80:71:c5:d3:a9: 72:6f:18:30:47:8a:8d:04:96:30:ab:29:a1:e7:a3: 0e:ad:dd:cb:09:ce:13:be:65:49:63:d0:e6:f8:62: 9a:6f:94:fa:9a:be:e8:7e:b8:54:7a:ed:69:ac:c9: 6e:3a:f2:e9:81:b2:53:8e:5c:ba:76:66:de:b4:11: 3a:d9:bc:11:2d:68:e7:86:46:bd:ee:c2:2c:88:3f: ac:df:b5:07:e1:65:c3:a5:79:5b:cf:cb:ff:20:94: fb:fb Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: F9:E0:8F:44:E9:69:58:00:C7:79:D7:11:20:4B:33:11:87:AD:03:FD X509v3 Authority Key Identifier: keyid:23:4B:54:B1:19:A7:B3:EF:F1:53:08:5B:73:15:50:7C:D8:51:3A:0F X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/I0tUsRmns-_xUwhbcxVQfNhROg8.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/47/bc7078-1ee4-42f1-bc34-1d21d1bce3fe/1/I0tUsRmns-_xUwhbcxVQfNhROg8.mft X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/47/bc7078-1ee4-42f1-bc34-1d21d1bce3fe/1/I0tUsRmns-_xUwhbcxVQfNhROg8.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 69:02:07:f6:88:05:d7:4f:03:a8:ea:11:29:df:42:58:a0:0c: a2:00:7f:15:98:fc:38:63:d0:97:06:95:a7:be:f9:d0:3d:2a: ac:d1:ff:90:6c:bc:26:01:59:4e:8d:d0:c7:f8:47:18:ef:81: 0c:79:33:a5:67:c6:99:17:90:f1:e0:2c:63:86:ed:b4:2a:0e: 37:01:0b:15:ec:57:07:ab:3f:3e:27:b1:d3:62:fa:00:e2:b7: 8e:ab:d5:4d:53:63:1b:8d:22:a3:59:c1:95:6d:b1:d9:31:fc: b1:7d:b0:ac:07:43:0e:cc:6f:92:b0:60:09:f1:a3:e3:4f:97: 81:5b:66:5b:d0:20:0a:68:55:9b:99:af:ee:85:7a:0a:4e:4e: 9e:98:f0:06:21:81:9b:30:07:22:d3:e5:d7:9d:16:8a:26:a2: af:9b:a5:3c:16:f4:dc:99:d8:db:70:6f:02:3e:db:46:bf:f7: ba:24:72:1f:c4:2e:d6:53:0d:0a:a9:1e:5c:83:a3:a8:ff:21: 16:ea:ec:9b:02:1e:47:d6:47:3f:1b:6e:b8:a7:ae:c5:6e:7a: 2c:d1:30:be:f9:a1:e9:9b:32:88:49:18:8c:9a:57:4e:24:09: 8f:d7:9a:64:36:a4:be:b3:90:a5:60:81:64:00:3e:ab:b0:16: 26:f7:f5:25 -----BEGIN CERTIFICATE----- MIIFFjCCA/6gAwIBAgISAZn8j1eJXPaEdGKNFh49bEgwMA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKDIzNGI1NGIxMTlhN2IzZWZmMTUzMDg1YjczMTU1MDdjZDg1 MTNhMGYwHhcNMjUxMDE5MTMwMTE2WhcNMjUxMDIwMTMwMTE2WjAzMTEwLwYDVQQD EyhmOWUwOGY0NGU5Njk1ODAwYzc3OWQ3MTEyMDRiMzMxMTg3YWQwM2ZkMIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAnvkePi+IStn5yefgVY4sOABRGWGx 9rkWi4mhReJHyyvJNXQHvdVakSTBHxV7MjUDSvycrbucfMaQF3/klFvNk4Q4ROue Kd38RyBPX4VWWpn7wSFjg5nXLmRMsBEQVsUNpdNsxz4obZFuVyU3NYBv7hRHM77Q jps7L2xi/mpqcv7mFNj9EHS4yy74Rj3Htmj+aF245HjimxvXzSps88KxgHHF06ly bxgwR4qNBJYwqymh56MOrd3LCc4TvmVJY9Dm+GKab5T6mr7ofrhUeu1prMluOvLp gbJTjly6dmbetBE62bwRLWjnhka97sIsiD+s37UH4WXDpXlbz8v/IJT7+wIDAQAB o4ICIjCCAh4wHQYDVR0OBBYEFPngj0TpaVgAx3nXESBLMxGHrQP9MB8GA1UdIwQY MBaAFCNLVLEZp7Pv8VMIW3MVUHzYUToPMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvSTB0VXNSbW5zLV94VXdoYmN4VlFmTmhST2c4LmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC80Ny9iYzcwNzgtMWVlNC00MmYxLWJjMzQt MWQyMWQxYmNlM2ZlLzEvSTB0VXNSbW5zLV94VXdoYmN4VlFmTmhST2c4Lm1mdDCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC80Ny9iYzcwNzgtMWVlNC00MmYxLWJjMzQtMWQyMWQxYmNlM2Zl LzEvSTB0VXNSbW5zLV94VXdoYmN4VlFmTmhST2c4LmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAaQIH9ogF 108DqOoRKd9CWKAMogB/FZj8OGPQlwaVp7750D0qrNH/kGy8JgFZTo3Qx/hHGO+B DHkzpWfGmReQ8eAsY4bttCoONwELFexXB6s/Piex02L6AOK3jqvVTVNjG40io1nB lW2x2TH8sX2wrAdDDsxvkrBgCfGj40+XgVtmW9AgCmhVm5mv7oV6Ck5OnpjwBiGB mzAHItPl150Wiiair5ulPBb03JnY23BvAj7bRr/3uiRyH8Qu1lMNCqkeXIOjqP8h FursmwIeR9ZHPxtuuKeuxW56LNEwvvmh6ZsyiEkYjJpXTiQJj9eaZDakvrOQpWCB ZAA+q7AWJvf1JQ== -----END CERTIFICATE-----Generated at Sun Oct 19 17:31:28 2025 by rpki-client