$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/4e/822400-3248-4702-b29b-a1b7ceefa16c/1/1-GUbEZTxLpjnDT2njv5N0kZ81CM.mft File: 1-GUbEZTxLpjnDT2njv5N0kZ81CM.mft (raw, json) Hash identifier: ieSdmVReF3bPPoSjMuCpfZRpqfJAlGeD8EwmLhmbQ4M= Subject key identifier: 29:6C:A8:36:EF:49:7C:A3:09:02:D2:5C:CB:BF:EB:D7:BB:70:EB:B0 Authority key identifier: F8:65:1B:11:94:F1:2E:98:E7:0D:3D:A7:8E:FE:4D:D2:46:7C:D4:23 Certificate issuer: /CN=f8651b1194f12e98e70d3da78efe4dd2467cd423 Certificate serial: 0199FCC6B065401A74EC37B51E8AB5B92CCD Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/1-GUbEZTxLpjnDT2njv5N0kZ81CM.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/4e/822400-3248-4702-b29b-a1b7ceefa16c/1/1-GUbEZTxLpjnDT2njv5N0kZ81CM.mft Manifest number: 170C Signing time: Sun 19 Oct 2025 14:01:43 +0000 Manifest this update: Sun 19 Oct 2025 14:01:43 +0000 Manifest next update: Mon 20 Oct 2025 14:01:43 +0000 Files and hashes: 1: 1-GUbEZTxLpjnDT2njv5N0kZ81CM.crl (hash: i5uBw/nvI6uf0rYrcaSP8sozD2arrtIJmXSqz5hazUc=) 2: 3hqHxrvg3mzouwJIaLoLL_1aNOk.roa (hash: drAUMdvTeG+q3QoTZVXvlX6+e/XeTGI2FRMHejM5978=) 3: IvUzmjfbrcAfjWuG5bEXnsKARX0.roa (hash: n6VtpGGacFVSIXviiCkhoox8/pF8W1r+IL34+q5ydvQ=) 4: ULPXRm8In0iucltCiTjO30AS1C0.roa (hash: 97n1pECWSKGJxeSXP3tl/iwpgFcjm2jvqPMD3YywHEo=) 5: UYDoB3x60CZ0QlNGESbwAlWd428.roa (hash: TFnakiXJIH+PyATRJlNHqXCNQvSIEl+DgNHmhyYXVOo=) 6: UdGuE2Gyay0X3Zt4q22vWPkwoSY.roa (hash: nlcyfBPqkJaOzfcIWqCIaFS2zyTBpHfF2/864QcqW28=) 7: VQZVlZqkH9S0x1DXirk8cG7IBS0.roa (hash: h1xoMHU3zfRgAJSFC+W5JQaCDJcd5C2MzoJ2iAIlLk0=) 8: Wt480qXVmMwEOAd2PwO3BIY-yQ8.roa (hash: ZoHaxK2Mo9GKYjgUd0e4MjoyY0dURGfiyktgIwjh6+8=) 9: _JxuUmQNn1m3KtCimjG9Vgr7i_M.roa (hash: hJQU6rbuZYGS1pkrfUwG7QwSC6DVL5unzpcEQ2Wukds=) 10: hkpjjAx2DE4nxJX8muiagvMf5-U.roa (hash: mjZ4UF9NabA85FX7we/nz5hALtUkEeudaC8FfNN02Rw=) 11: meb9WVVNYbUZtDoy7aw2n1DbXn0.roa (hash: A50uxX8uLtTa/WN+Skz9Umq+gxTofH2FJfLXImSmNB8=) 12: rY3YaEfNR8aK_Auk0z3q4MtQKGY.roa (hash: n8nvB0B+rc4j1I8LugdLmK4QQWr+nH8/CQl43jdxd20=) 13: y5m_rHh94hm7s_roT6tgjV0bYFM.roa (hash: 4v/VMYzi1Xi6KW+Q8k5KPuzBpu8zE8jLazu2ptlLL50=) Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/4e/822400-3248-4702-b29b-a1b7ceefa16c/1/1-GUbEZTxLpjnDT2njv5N0kZ81CM.crl rsync://rpki.ripe.net/repository/DEFAULT/4e/822400-3248-4702-b29b-a1b7ceefa16c/1/1-GUbEZTxLpjnDT2njv5N0kZ81CM.mft rsync://rpki.ripe.net/repository/DEFAULT/1-GUbEZTxLpjnDT2njv5N0kZ81CM.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Mon 20 Oct 2025 11:18:59 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:99:fc:c6:b0:65:40:1a:74:ec:37:b5:1e:8a:b5:b9:2c:cd Signature Algorithm: sha256WithRSAEncryption Issuer: CN=f8651b1194f12e98e70d3da78efe4dd2467cd423 Validity Not Before: Oct 19 14:01:43 2025 GMT Not After : Oct 20 14:01:43 2025 GMT Subject: CN=296ca836ef497ca30902d25ccbbfebd7bb70ebb0 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:92:03:ca:8c:5e:fe:eb:86:c7:93:c3:c0:ec:25: ba:89:e4:3b:32:76:ff:63:f7:79:44:38:8c:70:13: a3:39:43:9d:f8:fd:a6:e0:7c:e7:07:57:31:bf:cf: 7e:97:73:e8:96:04:e8:e2:b5:de:d2:5e:49:7f:a7: d6:0a:e3:f1:1e:b2:20:af:ff:8f:7e:f9:16:2e:f5: 81:ef:34:6c:97:61:3b:c7:55:1e:f8:cb:77:c3:5e: 16:cd:77:b0:82:78:0e:1b:15:d6:67:b2:26:f2:af: 1b:af:7a:af:25:56:7f:28:0d:4f:0c:e9:2b:58:90: 07:50:49:39:50:2c:7f:25:f6:e5:a8:10:31:a4:57: 76:5c:7c:40:a3:db:e9:32:d7:0b:9a:dd:cf:8d:4b: 9c:28:c4:57:38:80:fe:32:5f:70:7e:3b:d9:5d:34: 63:3f:1f:b5:0a:c4:5b:4f:38:d6:eb:cb:73:02:d1: 7e:ec:5b:80:5e:94:fa:fd:d6:37:c3:5a:cc:49:4b: 2e:68:6b:d7:1d:2a:ff:52:4c:43:f3:d9:15:44:68: 12:01:3f:e4:63:26:9e:a3:d8:af:47:94:cc:c2:35: 11:a6:ae:2d:9e:18:93:e0:03:bc:4d:15:ac:75:d1: 89:be:8d:6a:ee:9a:19:98:83:1f:d0:bb:fa:73:40: 0a:ab Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 29:6C:A8:36:EF:49:7C:A3:09:02:D2:5C:CB:BF:EB:D7:BB:70:EB:B0 X509v3 Authority Key Identifier: keyid:F8:65:1B:11:94:F1:2E:98:E7:0D:3D:A7:8E:FE:4D:D2:46:7C:D4:23 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/1-GUbEZTxLpjnDT2njv5N0kZ81CM.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/4e/822400-3248-4702-b29b-a1b7ceefa16c/1/1-GUbEZTxLpjnDT2njv5N0kZ81CM.mft X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/4e/822400-3248-4702-b29b-a1b7ceefa16c/1/1-GUbEZTxLpjnDT2njv5N0kZ81CM.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 25:42:f0:a6:04:62:c6:8c:c3:68:5d:27:a1:f7:0b:60:50:4d: b5:53:9c:86:5e:a2:0d:33:8d:3d:4d:c0:64:12:d2:5f:b4:65: 82:83:32:89:69:f1:c9:bf:b1:e1:4b:b5:f3:6e:0d:79:70:8e: ba:9e:e8:f5:1d:1e:3c:7f:07:10:e9:dc:30:a8:d7:f9:4a:56: be:3e:0d:e2:20:1c:cc:58:b7:e7:9a:63:11:7e:bf:7d:4f:80: a9:02:96:a4:5e:58:b9:ba:30:18:85:42:f8:42:69:b7:29:2b: 21:69:86:57:48:37:62:a0:f6:e6:11:ca:ab:77:96:96:5d:31: 23:32:c7:40:aa:5d:e2:36:48:b5:91:df:f6:11:4a:6e:d2:11: 49:1f:8d:97:af:6c:ad:5d:30:72:90:e6:80:2e:e8:f8:4c:36: 57:82:31:f5:28:28:a3:72:66:c4:92:20:68:fd:6e:1c:e9:73: 13:3c:60:24:f4:9a:ea:bb:5c:1e:30:ce:41:db:f3:e3:84:a2: 8d:d1:92:51:85:2a:a2:cf:90:9a:11:93:b1:02:b5:f0:db:c5: 99:a1:04:4e:8c:ec:fa:48:c3:98:c3:a6:f8:fc:b7:09:a3:1c: af:d8:af:54:9e:43:31:5f:5f:2d:48:9c:5c:16:3c:46:d9:fd: c8:c2:f3:97 -----BEGIN CERTIFICATE----- MIIFGTCCBAGgAwIBAgISAZn8xrBlQBp07De1Hoq1uSzNMA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKGY4NjUxYjExOTRmMTJlOThlNzBkM2RhNzhlZmU0ZGQyNDY3 Y2Q0MjMwHhcNMjUxMDE5MTQwMTQzWhcNMjUxMDIwMTQwMTQzWjAzMTEwLwYDVQQD EygyOTZjYTgzNmVmNDk3Y2EzMDkwMmQyNWNjYmJmZWJkN2JiNzBlYmIwMIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAkgPKjF7+64bHk8PA7CW6ieQ7Mnb/ Y/d5RDiMcBOjOUOd+P2m4HznB1cxv89+l3PolgTo4rXe0l5Jf6fWCuPxHrIgr/+P fvkWLvWB7zRsl2E7x1Ue+Mt3w14WzXewgngOGxXWZ7Im8q8br3qvJVZ/KA1PDOkr WJAHUEk5UCx/JfblqBAxpFd2XHxAo9vpMtcLmt3PjUucKMRXOID+Ml9wfjvZXTRj Px+1CsRbTzjW68tzAtF+7FuAXpT6/dY3w1rMSUsuaGvXHSr/UkxD89kVRGgSAT/k Yyaeo9ivR5TMwjURpq4tnhiT4AO8TRWsddGJvo1q7poZmIMf0Lv6c0AKqwIDAQAB o4ICJTCCAiEwHQYDVR0OBBYEFClsqDbvSXyjCQLSXMu/69e7cOuwMB8GA1UdIwQY MBaAFPhlGxGU8S6Y5w09p47+TdJGfNQjMA4GA1UdDwEB/wQEAwIHgDBlBggrBgEF BQcBAQRZMFcwVQYIKwYBBQUHMAKGSXJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvMS1HVWJFWlR4THBqbkRUMm5qdjVOMGtaODFDTS5jZXIw gY4GCCsGAQUFBwELBIGBMH8wfQYIKwYBBQUHMAuGcXJzeW5jOi8vcnBraS5yaXBl Lm5ldC9yZXBvc2l0b3J5L0RFRkFVTFQvNGUvODIyNDAwLTMyNDgtNDcwMi1iMjli LWExYjdjZWVmYTE2Yy8xLzEtR1ViRVpUeExwam5EVDJuanY1TjBrWjgxQ00ubWZ0 MIGCBgNVHR8EezB5MHegdaBzhnFyc3luYzovL3Jwa2kucmlwZS5uZXQvcmVwb3Np dG9yeS9ERUZBVUxULzRlLzgyMjQwMC0zMjQ4LTQ3MDItYjI5Yi1hMWI3Y2VlZmEx NmMvMS8xLUdVYkVaVHhMcGpuRFQybmp2NU4wa1o4MUNNLmNybDAYBgNVHSABAf8E DjAMMAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgAC BQAwFQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAJULw pgRixozDaF0nofcLYFBNtVOchl6iDTONPU3AZBLSX7RlgoMyiWnxyb+x4Uu1824N eXCOup7o9R0ePH8HEOncMKjX+UpWvj4N4iAczFi355pjEX6/fU+AqQKWpF5Yubow GIVC+EJptykrIWmGV0g3YqD25hHKq3eWll0xIzLHQKpd4jZItZHf9hFKbtIRSR+N l69srV0wcpDmgC7o+Ew2V4Ix9Sgoo3JmxJIgaP1uHOlzEzxgJPSa6rtcHjDOQdvz 44SijdGSUYUqos+QmhGTsQK18NvFmaEETozs+kjDmMOm+Py3CaMcr9ivVJ5DMV9f LUicXBY8Rtn9yMLzlw== -----END CERTIFICATE-----Generated at Sun Oct 19 20:43:56 2025 by rpki-client