$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/4a/8b1fac-5a21-4848-a66a-10bb4579d528/1/CnMngF3yD7XB1vTokHR0PK6ySvc.mft File: CnMngF3yD7XB1vTokHR0PK6ySvc.mft (raw, json) Hash identifier: Xm990P1+XbMNeDhqfnkYkpXJ+iq1ftTYCm8lwsPycJY= Subject key identifier: 17:E3:4E:E1:74:B6:AA:E0:90:D1:D6:9F:46:F3:47:62:69:0B:44:39 Authority key identifier: 0A:73:27:80:5D:F2:0F:B5:C1:D6:F4:E8:90:74:74:3C:AE:B2:4A:F7 Certificate issuer: /CN=0a7327805df20fb5c1d6f4e89074743caeb24af7 Certificate serial: 019A03D9FFD97B5F88F0C37AFE60FFD498BD Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/CnMngF3yD7XB1vTokHR0PK6ySvc.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/4a/8b1fac-5a21-4848-a66a-10bb4579d528/1/CnMngF3yD7XB1vTokHR0PK6ySvc.mft Manifest number: 16FB Signing time: Mon 20 Oct 2025 23:00:09 +0000 Manifest this update: Mon 20 Oct 2025 23:00:09 +0000 Manifest next update: Tue 21 Oct 2025 23:00:09 +0000 Files and hashes: 1: AU3u1VuwQfZckeT14fdrTId0G1k.roa (hash: VL9lGqOz9NbiJezJsH1muW4OGo8/usp9uiYXSnWyMI4=) 2: AXI0xi2qyLNJTikoPIbIYoXGSqM.roa (hash: J6dTdi70cC+Xgn0MoRDsaTnvDGyEQm26GOPrxZ/rg18=) 3: CQxWaB1OicMMrqXCoQ0fopCoxdU.roa (hash: WjfHWnkqbfHKaqxUShNyRq++rhQwjg3tNVjy17YQNc4=) 4: CnMngF3yD7XB1vTokHR0PK6ySvc.crl (hash: dTO4nPmJ2h2iSQBihq2pDvLluLsoWuFlTMiuavxPtwo=) 5: GopMrpyToOz7hTEn02tSlWTChNc.roa (hash: PWyNZm9NNDQb4vDrYexwTILfoeBvuqO0/ZesnD+rBMg=) 6: QY3FsKWsHL7VlMduaclRNJ3pt_U.roa (hash: H5vPCo3lKDFJhLJsXdyGxkbSr+CZKxnZxfEUf2naVGc=) 7: Zla6xxqlwjD5HGAN16Pzo29Tijg.roa (hash: XT7/Z4sfo6kElFtdLFq3BhRYhs4vxj89ZfDzgHu8Ge4=) 8: hnMtsx259zWb5DPTAskFt19vieA.roa (hash: IS/K0LmABWhq/hUi5ijfbnkS8QGQcUBWRW0f7gTisD4=) 9: rF2NbE_tOwpSRvuv6q5i4RA7Ges.roa (hash: eR6zET3xve1jmE2cHBmZXtrSF9DwLLOsmXQGl2pVTjo=) 10: ydOhopDpEgxJrzwZy5o2ywKpW8w.roa (hash: cGNA9jtDwM6OD4vlqV4K4uD26uy/JQnhTPG3oY/YMmA=) Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/4a/8b1fac-5a21-4848-a66a-10bb4579d528/1/CnMngF3yD7XB1vTokHR0PK6ySvc.crl rsync://rpki.ripe.net/repository/DEFAULT/4a/8b1fac-5a21-4848-a66a-10bb4579d528/1/CnMngF3yD7XB1vTokHR0PK6ySvc.mft rsync://rpki.ripe.net/repository/DEFAULT/CnMngF3yD7XB1vTokHR0PK6ySvc.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Tue 21 Oct 2025 22:00:03 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9a:03:d9:ff:d9:7b:5f:88:f0:c3:7a:fe:60:ff:d4:98:bd Signature Algorithm: sha256WithRSAEncryption Issuer: CN=0a7327805df20fb5c1d6f4e89074743caeb24af7 Validity Not Before: Oct 20 23:00:09 2025 GMT Not After : Oct 21 23:00:09 2025 GMT Subject: CN=17e34ee174b6aae090d1d69f46f34762690b4439 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:d3:fc:af:c8:7e:8b:52:5d:36:48:db:c9:aa:04: ab:34:2a:8d:ef:27:69:43:a9:28:26:13:7b:0a:cb: 99:47:c6:b3:aa:e6:7c:c7:4f:ed:87:d1:c3:10:80: e1:eb:1a:29:40:1d:70:31:aa:07:ec:ee:d0:04:44: 52:79:0c:67:47:3f:9c:af:42:10:1e:2a:e7:df:26: d8:ce:c4:3c:28:85:3b:26:af:1b:92:b5:e3:88:bf: a3:b8:5a:40:9b:ea:6f:db:8d:24:ed:18:fa:9e:e6: af:0b:1b:03:8d:f8:d1:d7:01:5e:20:ab:26:f5:46: 20:c1:33:0b:3c:97:5e:7d:e9:0b:46:0b:72:d5:0b: 0f:96:56:0e:e9:d5:24:c0:76:c2:b6:9b:86:eb:b8: c7:3b:9b:a4:e4:c4:d6:68:11:03:c5:78:30:dc:96: 70:22:d8:75:82:94:30:7d:67:d2:da:89:fa:d1:b5: 11:88:85:98:e3:34:fc:ef:81:f7:a1:eb:8d:bb:dc: 22:37:33:98:21:4b:12:77:44:a2:be:51:d7:d3:69: c4:f6:38:4e:9d:83:e6:95:8e:29:e1:82:b7:ee:c0: a8:24:95:7f:0e:10:8f:18:66:f7:3e:de:e7:33:f7: 34:a3:7e:fb:80:93:0a:4c:40:36:1a:32:2f:97:52: 89:f9 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 17:E3:4E:E1:74:B6:AA:E0:90:D1:D6:9F:46:F3:47:62:69:0B:44:39 X509v3 Authority Key Identifier: keyid:0A:73:27:80:5D:F2:0F:B5:C1:D6:F4:E8:90:74:74:3C:AE:B2:4A:F7 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/CnMngF3yD7XB1vTokHR0PK6ySvc.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/4a/8b1fac-5a21-4848-a66a-10bb4579d528/1/CnMngF3yD7XB1vTokHR0PK6ySvc.mft X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/4a/8b1fac-5a21-4848-a66a-10bb4579d528/1/CnMngF3yD7XB1vTokHR0PK6ySvc.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 17:0c:70:57:cc:5d:70:cf:ec:ad:fc:3c:45:07:7d:39:0d:a2: 19:8d:53:8b:58:1c:ec:5b:10:02:78:4d:9d:3b:a8:f8:7e:d8: 73:cf:e4:6b:b4:c2:97:4f:e9:19:56:13:94:66:56:94:bc:c7: ee:da:40:90:a3:a8:fb:27:be:7b:f2:07:55:72:a9:2c:5c:af: 03:65:42:f4:74:de:59:31:f8:5e:33:9e:33:fb:80:a3:9e:fa: 12:b1:0c:07:02:9f:94:ed:8a:97:d8:7a:34:fe:3a:ed:88:6d: 85:b8:83:6d:91:0a:5c:14:7d:0a:2c:ca:06:50:b9:28:2e:00: 41:ed:0f:66:af:86:77:54:de:45:30:12:4e:7d:83:d2:12:ef: eb:c1:e2:c1:fa:36:e1:7f:ea:ea:8e:9c:95:08:85:57:63:b8: f4:62:7e:42:17:9b:ed:b9:37:68:08:89:c0:30:0d:a0:23:86: d4:d7:1d:fc:1c:ee:36:71:f8:d3:6d:60:fc:0a:e9:f2:ae:1e: 2c:88:e2:d2:26:dc:9b:91:ec:d8:65:af:ee:13:c6:f6:bd:db: d6:d1:ed:fe:34:ce:0e:e2:b6:18:9d:5a:07:b8:e6:e0:6f:a0: 54:47:0e:ce:24:66:23:48:32:ab:73:ab:a2:ef:66:c9:a1:f2: 94:f3:af:14 -----BEGIN CERTIFICATE----- MIIFFjCCA/6gAwIBAgISAZoD2f/Ze1+I8MN6/mD/1Ji9MA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKDBhNzMyNzgwNWRmMjBmYjVjMWQ2ZjRlODkwNzQ3NDNjYWVi MjRhZjcwHhcNMjUxMDIwMjMwMDA5WhcNMjUxMDIxMjMwMDA5WjAzMTEwLwYDVQQD EygxN2UzNGVlMTc0YjZhYWUwOTBkMWQ2OWY0NmYzNDc2MjY5MGI0NDM5MIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEA0/yvyH6LUl02SNvJqgSrNCqN7ydp Q6koJhN7CsuZR8azquZ8x0/th9HDEIDh6xopQB1wMaoH7O7QBERSeQxnRz+cr0IQ Hirn3ybYzsQ8KIU7Jq8bkrXjiL+juFpAm+pv240k7Rj6nuavCxsDjfjR1wFeIKsm 9UYgwTMLPJdefekLRgty1QsPllYO6dUkwHbCtpuG67jHO5uk5MTWaBEDxXgw3JZw Ith1gpQwfWfS2on60bURiIWY4zT874H3oeuNu9wiNzOYIUsSd0SivlHX02nE9jhO nYPmlY4p4YK37sCoJJV/DhCPGGb3Pt7nM/c0o377gJMKTEA2GjIvl1KJ+QIDAQAB o4ICIjCCAh4wHQYDVR0OBBYEFBfjTuF0tqrgkNHWn0bzR2JpC0Q5MB8GA1UdIwQY MBaAFApzJ4Bd8g+1wdb06JB0dDyuskr3MA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvQ25NbmdGM3lEN1hCMXZUb2tIUjBQSzZ5U3ZjLmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC80YS84YjFmYWMtNWEyMS00ODQ4LWE2NmEt MTBiYjQ1NzlkNTI4LzEvQ25NbmdGM3lEN1hCMXZUb2tIUjBQSzZ5U3ZjLm1mdDCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC80YS84YjFmYWMtNWEyMS00ODQ4LWE2NmEtMTBiYjQ1NzlkNTI4 LzEvQ25NbmdGM3lEN1hCMXZUb2tIUjBQSzZ5U3ZjLmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAFwxwV8xd cM/srfw8RQd9OQ2iGY1Ti1gc7FsQAnhNnTuo+H7Yc8/ka7TCl0/pGVYTlGZWlLzH 7tpAkKOo+ye+e/IHVXKpLFyvA2VC9HTeWTH4XjOeM/uAo576ErEMBwKflO2Kl9h6 NP467YhthbiDbZEKXBR9CizKBlC5KC4AQe0PZq+Gd1TeRTASTn2D0hLv68Hiwfo2 4X/q6o6clQiFV2O49GJ+Qheb7bk3aAiJwDANoCOG1Ncd/BzuNnH4021g/Arp8q4e LIji0ibcm5Hs2GWv7hPG9r3b1tHt/jTODuK2GJ1aB7jm4G+gVEcOziRmI0gyq3Or ou9myaHylPOvFA== -----END CERTIFICATE-----Generated at Tue Oct 21 07:01:16 2025 by rpki-client