$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/4f/53a947-fd03-4014-9827-c5d8950818ec/1/_0TbrKVtrDGUAfaKUNkX9UJGEa0.mft File: _0TbrKVtrDGUAfaKUNkX9UJGEa0.mft (raw, json) Hash identifier: fJQpd8RtQGMcT2HVqL/0VX+SHNA5HWs5d5PoeGsIXvI= Subject key identifier: 5D:38:DD:46:D2:A4:1D:EB:FC:9E:DF:BF:7E:2A:72:BE:3E:9C:9D:63 Authority key identifier: FF:44:DB:AC:A5:6D:AC:31:94:01:F6:8A:50:D9:17:F5:42:46:11:AD Certificate issuer: /CN=ff44dbaca56dac319401f68a50d917f5424611ad Certificate serial: 0199FC583D9612A634DAB324D5315A188424 Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/_0TbrKVtrDGUAfaKUNkX9UJGEa0.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/4f/53a947-fd03-4014-9827-c5d8950818ec/1/_0TbrKVtrDGUAfaKUNkX9UJGEa0.mft Manifest number: 0EF5 Signing time: Sun 19 Oct 2025 12:01:05 +0000 Manifest this update: Sun 19 Oct 2025 12:01:05 +0000 Manifest next update: Mon 20 Oct 2025 12:01:05 +0000 Files and hashes: 1: 1-cpyjHU8WHBS-JnYyweRG_JlxsQ.roa (hash: Bc2YUgBN1eHG7yUrAAjgkxLZbgg1NrbTbKbM93kzdXo=) 2: 23cjywgox101LeW5GrrQWi4IHG0.roa (hash: uYyFedbey5ChPUlaasPp5Y63DNZ1EjHPXUKggcmyWcA=) 3: 2nquZxIjKuCQeOgojOXW1X_s_QM.roa (hash: jFRO0lP11v/Hnir4mOKoo6txSwXFruzZ7RBet4hmmmk=) 4: 7-RqEu_RBz9mfOLDtCp7Hvp-HNA.roa (hash: VgV4hIvu8+OJHYszRf2pjeepXfzTOT8zOwDWfq2EnHU=) 5: QQQnQcpvGBf2C-BzCpjUlxD_kV0.roa (hash: 3oCmUMut8zjGqT5v8Ibyl5GG5ZNBsCX2Q1FPnCYPFwc=) 6: _0TbrKVtrDGUAfaKUNkX9UJGEa0.crl (hash: PeDVQ0mK0+O9WPU+BKZFzkiQDqxl7Y7mewTJ1w7ZxCM=) 7: gIx-NvwmPwDjbwzrImEaevKFMi8.roa (hash: qVqkRd3AaQOFICZgsJ5zunJ8w7waJ2c1Sms4AJtjCl4=) 8: qWecP1fjBHk_xiZL6w3FMxqmMFs.roa (hash: H6nLoMO+CEX9wLJPNIjsGgGm6hrsOhinY+8mLTIndRM=) 9: wvlIJaBXdAerQ4c5dRBxRunJgjQ.roa (hash: JyQWbotgOXPXDAJ2gTdNj+PiW7DZmyYe59ktU38Qs6o=) 10: zwQeVe6KjT7mK7CzDjhb-oUfUeY.roa (hash: RDrcDVJwzADiTPiX9sXWISoKDjj7Zx0CdydUNeF8j6Q=) Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/4f/53a947-fd03-4014-9827-c5d8950818ec/1/_0TbrKVtrDGUAfaKUNkX9UJGEa0.crl rsync://rpki.ripe.net/repository/DEFAULT/4f/53a947-fd03-4014-9827-c5d8950818ec/1/_0TbrKVtrDGUAfaKUNkX9UJGEa0.mft rsync://rpki.ripe.net/repository/DEFAULT/_0TbrKVtrDGUAfaKUNkX9UJGEa0.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Mon 20 Oct 2025 11:18:59 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:99:fc:58:3d:96:12:a6:34:da:b3:24:d5:31:5a:18:84:24 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=ff44dbaca56dac319401f68a50d917f5424611ad Validity Not Before: Oct 19 12:01:05 2025 GMT Not After : Oct 20 12:01:05 2025 GMT Subject: CN=5d38dd46d2a41debfc9edfbf7e2a72be3e9c9d63 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:bb:e1:25:79:0b:44:cc:f0:30:b8:ff:0b:ab:1b: 19:e2:62:46:66:7c:0b:f5:d3:34:7c:fc:81:13:98: bd:bb:3f:7f:1d:ce:99:a5:00:47:52:6c:33:a3:07: d5:aa:c5:9d:66:66:d5:70:19:16:88:91:d2:ee:26: db:ac:b2:77:9a:9a:7f:e6:c0:80:cc:1e:3e:d5:20: 50:d6:d6:3a:37:dc:5d:fd:d7:7b:f4:f3:cc:b7:11: ae:a4:25:a7:40:8b:4d:34:0f:74:32:b7:6c:db:bf: 07:af:95:cc:9f:a5:f8:ed:8f:33:4e:26:56:b5:fb: e9:e9:07:f7:a1:c3:b7:2e:1f:20:c3:d1:a4:1f:f8: 1a:fa:88:4c:07:95:94:56:9e:27:44:bd:6e:d9:41: d7:5e:72:cb:5e:82:31:d7:23:0f:5a:e1:fd:99:84: dc:0b:4a:c0:b9:92:9b:e7:76:59:63:81:56:fe:b8: c6:ee:6e:d9:d3:be:71:b2:78:3a:07:49:e1:6b:a6: 99:66:f6:78:35:bd:9a:c3:9d:49:23:3d:3f:ee:7c: c9:ea:1d:0b:e7:a0:ce:31:a3:a6:1b:1c:ef:e9:a2: 42:4c:60:05:8c:dc:d4:80:c1:a9:df:4b:4c:e8:38: 7b:08:fc:bd:8c:bd:fc:35:c1:03:0a:b3:f1:52:da: 54:69 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 5D:38:DD:46:D2:A4:1D:EB:FC:9E:DF:BF:7E:2A:72:BE:3E:9C:9D:63 X509v3 Authority Key Identifier: keyid:FF:44:DB:AC:A5:6D:AC:31:94:01:F6:8A:50:D9:17:F5:42:46:11:AD X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/_0TbrKVtrDGUAfaKUNkX9UJGEa0.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/4f/53a947-fd03-4014-9827-c5d8950818ec/1/_0TbrKVtrDGUAfaKUNkX9UJGEa0.mft X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/4f/53a947-fd03-4014-9827-c5d8950818ec/1/_0TbrKVtrDGUAfaKUNkX9UJGEa0.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 2a:83:56:7d:5c:0c:4a:b0:67:da:c2:8e:17:e3:68:2c:03:6b: 04:94:09:bc:cb:ed:0e:77:0b:2e:f9:00:03:98:88:39:41:72: 00:02:f1:b4:d0:bf:b2:60:82:a2:b4:71:5f:23:f6:9e:d9:0b: e0:3e:bd:84:23:89:df:b2:d8:c4:32:e1:fd:bf:f1:53:de:31: ce:c2:32:66:44:d0:4c:45:d0:e2:23:5a:ed:7d:e3:4c:c6:af: 27:12:cc:2a:36:e3:37:1d:d1:72:36:09:e8:69:41:4f:4d:1f: f8:06:78:43:e1:ce:7a:a7:6b:5d:f0:8e:d5:ee:a6:b2:dd:ee: 04:39:83:d9:cd:0a:20:94:07:e0:16:af:38:8f:d2:55:52:4d: a7:4d:95:78:cb:17:5b:77:15:66:46:80:fc:60:a4:87:d2:00: a6:56:09:81:eb:95:65:0b:70:a9:4f:fa:09:56:5a:f0:c9:28: 86:b5:4f:6e:60:43:bb:6d:74:70:6d:84:9e:39:0d:fe:13:16: 67:18:18:42:d5:68:36:44:e6:a2:11:48:25:45:c4:4f:c4:bb: ac:81:7b:cc:03:ad:48:d3:fb:10:ed:54:ad:8c:85:63:15:ec: 92:4d:44:28:e6:aa:db:0d:61:dc:ea:29:36:cd:dc:0f:19:fb: e6:ee:c0:ff -----BEGIN CERTIFICATE----- MIIFFjCCA/6gAwIBAgISAZn8WD2WEqY02rMk1TFaGIQkMA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKGZmNDRkYmFjYTU2ZGFjMzE5NDAxZjY4YTUwZDkxN2Y1NDI0 NjExYWQwHhcNMjUxMDE5MTIwMTA1WhcNMjUxMDIwMTIwMTA1WjAzMTEwLwYDVQQD Eyg1ZDM4ZGQ0NmQyYTQxZGViZmM5ZWRmYmY3ZTJhNzJiZTNlOWM5ZDYzMIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAu+EleQtEzPAwuP8LqxsZ4mJGZnwL 9dM0fPyBE5i9uz9/Hc6ZpQBHUmwzowfVqsWdZmbVcBkWiJHS7ibbrLJ3mpp/5sCA zB4+1SBQ1tY6N9xd/dd79PPMtxGupCWnQItNNA90Mrds278Hr5XMn6X47Y8zTiZW tfvp6Qf3ocO3Lh8gw9GkH/ga+ohMB5WUVp4nRL1u2UHXXnLLXoIx1yMPWuH9mYTc C0rAuZKb53ZZY4FW/rjG7m7Z075xsng6B0nha6aZZvZ4Nb2aw51JIz0/7nzJ6h0L 56DOMaOmGxzv6aJCTGAFjNzUgMGp30tM6Dh7CPy9jL38NcEDCrPxUtpUaQIDAQAB o4ICIjCCAh4wHQYDVR0OBBYEFF043UbSpB3r/J7fv34qcr4+nJ1jMB8GA1UdIwQY MBaAFP9E26ylbawxlAH2ilDZF/VCRhGtMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvXzBUYnJLVnRyREdVQWZhS1VOa1g5VUpHRWEwLmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC80Zi81M2E5NDctZmQwMy00MDE0LTk4Mjct YzVkODk1MDgxOGVjLzEvXzBUYnJLVnRyREdVQWZhS1VOa1g5VUpHRWEwLm1mdDCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC80Zi81M2E5NDctZmQwMy00MDE0LTk4MjctYzVkODk1MDgxOGVj LzEvXzBUYnJLVnRyREdVQWZhS1VOa1g5VUpHRWEwLmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAKoNWfVwM SrBn2sKOF+NoLANrBJQJvMvtDncLLvkAA5iIOUFyAALxtNC/smCCorRxXyP2ntkL 4D69hCOJ37LYxDLh/b/xU94xzsIyZkTQTEXQ4iNa7X3jTMavJxLMKjbjNx3RcjYJ 6GlBT00f+AZ4Q+HOeqdrXfCO1e6mst3uBDmD2c0KIJQH4BavOI/SVVJNp02VeMsX W3cVZkaA/GCkh9IAplYJgeuVZQtwqU/6CVZa8MkohrVPbmBDu210cG2EnjkN/hMW ZxgYQtVoNkTmohFIJUXET8S7rIF7zAOtSNP7EO1UrYyFYxXskk1EKOaq2w1h3Oop Ns3cDxn75u7A/w== -----END CERTIFICATE-----Generated at Sun Oct 19 20:07:26 2025 by rpki-client