$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/4f/9437a2-07e6-4e6a-aa3f-965d6d603bfa/1/1-CVUqFakIrBhrmTFd2MPkdQIzUo.mft File: 1-CVUqFakIrBhrmTFd2MPkdQIzUo.mft (raw, json) Hash identifier: NsBINjfCZbs2N5AtfncNsLC0oVc1i+WiiYHgyts9FrM= Subject key identifier: 91:C3:BD:A0:F3:E2:A5:59:4E:57:E6:D1:F4:64:0D:73:2A:FC:32:C5 Authority key identifier: F8:25:54:A8:56:A4:22:B0:61:AE:64:C5:77:63:0F:91:D4:08:CD:4A Certificate issuer: /CN=f82554a856a422b061ae64c577630f91d408cd4a Certificate serial: 0199FE7E0C55A85BFFFB0891ADE2CC6ADEB8 Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/1-CVUqFakIrBhrmTFd2MPkdQIzUo.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/4f/9437a2-07e6-4e6a-aa3f-965d6d603bfa/1/1-CVUqFakIrBhrmTFd2MPkdQIzUo.mft Manifest number: 16E9 Signing time: Sun 19 Oct 2025 22:01:37 +0000 Manifest this update: Sun 19 Oct 2025 22:01:37 +0000 Manifest next update: Mon 20 Oct 2025 22:01:37 +0000 Files and hashes: 1: 1-CVUqFakIrBhrmTFd2MPkdQIzUo.crl (hash: BZUsPF9huIsHJncjOIRxpXU98e3XKqorXHoVhU+E3vE=) 2: 8yyknMa8Qa7eji2_-25NgjHMwAs.roa (hash: 6EA1L4yNjiFkAAM6t2iZAA7ze8SV3lMCUhKNPg3vBUQ=) 3: 9QjCjG8fGXKK3KT9GGHW6MAVJzE.roa (hash: fSpz8n2jWyy0I2DDmxohRpaljlrP9nL5ZtLGzLKYuXU=) 4: H7En3yY1mH2yRYS167HpwA6AL5Q.roa (hash: FPJfC/52NavOyoGt4vZ9gio4MoEgpYKiZrTtURDieXE=) 5: K4UoliAJDnPT2oq72AyXanTYwdo.roa (hash: +5dNWwnlyTnn33FOhd8BsjDiWGBw/K7XK9sbIa7ROKQ=) 6: aWWA3-Hs7ng_GCTHIDmwQ5Rjbdg.roa (hash: isC8RltnKP3pjrz7ZvAls/aB0WZTll6Skvt9xKP3UkI=) 7: fPjaiW_RQVaw1K0jco_QmLpGo5s.roa (hash: agQGyFSnSoUI1Vx0MTRN/i+hHcE0hyBre8ShGUX7keA=) 8: lv4HmOqEkoJhmZ694ZcdnLwYlAM.roa (hash: jNXlLdUizmlPS7y4NkIFg6Z2F2lK4SSREn91C27cUCo=) 9: sERIvqHcZj2yU32m6o5QSyQReME.roa (hash: cfxbkVfwNX0hfImDTJjGC48Jbi/ZuYY11AKoePEqH8k=) 10: zTLxL4slk5kZQfWpH_PY-TD7nNM.roa (hash: tzDHOIgeKhCjAOTBNpSwMn6WduYNfsmvzrDJbeHe5/Y=) Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/4f/9437a2-07e6-4e6a-aa3f-965d6d603bfa/1/1-CVUqFakIrBhrmTFd2MPkdQIzUo.crl rsync://rpki.ripe.net/repository/DEFAULT/4f/9437a2-07e6-4e6a-aa3f-965d6d603bfa/1/1-CVUqFakIrBhrmTFd2MPkdQIzUo.mft rsync://rpki.ripe.net/repository/DEFAULT/1-CVUqFakIrBhrmTFd2MPkdQIzUo.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Mon 20 Oct 2025 20:00:59 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:99:fe:7e:0c:55:a8:5b:ff:fb:08:91:ad:e2:cc:6a:de:b8 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=f82554a856a422b061ae64c577630f91d408cd4a Validity Not Before: Oct 19 22:01:37 2025 GMT Not After : Oct 20 22:01:37 2025 GMT Subject: CN=91c3bda0f3e2a5594e57e6d1f4640d732afc32c5 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:b7:81:34:78:07:e5:03:b6:ac:c9:b2:3d:97:fa: d9:ca:d9:a8:9f:fd:d0:fe:53:c5:e5:e9:7a:61:43: ca:f2:ba:d9:07:cd:73:52:a2:a5:d2:58:f0:8f:9c: 7b:09:1c:87:67:7b:d3:b7:82:4b:9b:ce:6a:3d:ef: 1c:51:c2:d7:2e:11:99:b3:a7:4b:c2:69:c7:7b:51: c7:20:75:5d:a9:c2:a9:d8:4c:8f:7f:f7:ff:f1:13: 38:dc:5d:e5:89:8a:5a:24:89:09:11:c4:40:9d:ed: 82:20:3b:7d:d1:90:10:60:86:22:a6:8b:c2:88:b4: b8:7d:6f:eb:b6:87:a0:a8:b2:f5:5f:96:d1:a9:73: e4:a9:ea:b5:30:bb:b6:29:37:75:bc:a0:eb:88:1c: 50:db:76:7a:96:08:84:df:47:12:97:02:10:41:d4: c7:eb:b8:3e:87:00:02:2e:49:1c:8d:6f:8e:ad:a3: 79:8b:84:79:cb:16:9c:10:52:e8:65:15:72:d9:a7: 80:bd:65:e6:cb:68:bf:94:a6:dc:92:2d:18:12:2c: 82:d0:2c:e7:87:d4:64:5a:39:1a:b9:c3:e4:28:94: 2c:08:2e:b6:53:06:d5:9a:b5:d4:77:a3:21:bc:c1: 56:5a:1f:79:c3:26:bf:3a:ca:6b:3f:65:9b:65:85: a8:69 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 91:C3:BD:A0:F3:E2:A5:59:4E:57:E6:D1:F4:64:0D:73:2A:FC:32:C5 X509v3 Authority Key Identifier: keyid:F8:25:54:A8:56:A4:22:B0:61:AE:64:C5:77:63:0F:91:D4:08:CD:4A X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/1-CVUqFakIrBhrmTFd2MPkdQIzUo.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/4f/9437a2-07e6-4e6a-aa3f-965d6d603bfa/1/1-CVUqFakIrBhrmTFd2MPkdQIzUo.mft X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/4f/9437a2-07e6-4e6a-aa3f-965d6d603bfa/1/1-CVUqFakIrBhrmTFd2MPkdQIzUo.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption a5:43:28:fd:30:8a:3f:27:59:81:fe:e0:ed:1a:65:9d:93:05: ff:7e:2a:82:9c:58:92:09:74:92:4c:27:15:62:aa:50:a3:61: 45:1e:3a:c8:25:f5:bf:e4:7c:0b:95:ca:8a:6e:cc:56:61:b2: f7:de:1e:e2:a5:49:49:d8:90:13:02:f6:2a:95:81:69:c9:ed: 1a:d2:47:27:66:eb:d1:86:c7:a4:e9:ac:43:ef:51:71:6f:8f: 8f:0c:b3:cf:57:10:01:6f:b1:6e:b8:f2:ac:39:ea:04:b5:05: 66:61:26:49:c3:1b:4d:31:b1:db:95:4a:c8:16:63:9c:b3:e4: f6:5c:51:30:ea:61:5f:38:83:a6:37:02:2c:96:1c:a3:48:0f: f7:10:63:17:d3:aa:04:2f:e7:86:80:1e:25:47:77:95:22:dd: bf:a1:c1:8d:8c:5a:71:44:2f:56:83:05:59:77:11:b9:c4:b2: 7e:14:56:0e:58:1c:47:48:66:03:ce:f0:24:cc:d1:73:39:06: 6f:e0:2e:3d:ad:1d:5e:2f:e1:a8:13:0a:fd:61:59:f6:48:e3: 66:d7:61:47:30:cc:eb:e4:f9:82:9e:98:1a:1f:90:be:05:28: e3:79:1f:98:f5:e7:23:79:74:ae:2e:42:7e:53:0f:b4:34:e1: c8:9c:34:7f -----BEGIN CERTIFICATE----- MIIFGTCCBAGgAwIBAgISAZn+fgxVqFv/+wiRreLMat64MA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKGY4MjU1NGE4NTZhNDIyYjA2MWFlNjRjNTc3NjMwZjkxZDQw OGNkNGEwHhcNMjUxMDE5MjIwMTM3WhcNMjUxMDIwMjIwMTM3WjAzMTEwLwYDVQQD Eyg5MWMzYmRhMGYzZTJhNTU5NGU1N2U2ZDFmNDY0MGQ3MzJhZmMzMmM1MIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAt4E0eAflA7asybI9l/rZytmon/3Q /lPF5el6YUPK8rrZB81zUqKl0ljwj5x7CRyHZ3vTt4JLm85qPe8cUcLXLhGZs6dL wmnHe1HHIHVdqcKp2EyPf/f/8RM43F3liYpaJIkJEcRAne2CIDt90ZAQYIYipovC iLS4fW/rtoegqLL1X5bRqXPkqeq1MLu2KTd1vKDriBxQ23Z6lgiE30cSlwIQQdTH 67g+hwACLkkcjW+OraN5i4R5yxacEFLoZRVy2aeAvWXmy2i/lKbcki0YEiyC0Czn h9RkWjkaucPkKJQsCC62UwbVmrXUd6MhvMFWWh95wya/OsprP2WbZYWoaQIDAQAB o4ICJTCCAiEwHQYDVR0OBBYEFJHDvaDz4qVZTlfm0fRkDXMq/DLFMB8GA1UdIwQY MBaAFPglVKhWpCKwYa5kxXdjD5HUCM1KMA4GA1UdDwEB/wQEAwIHgDBlBggrBgEF BQcBAQRZMFcwVQYIKwYBBQUHMAKGSXJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvMS1DVlVxRmFrSXJCaHJtVEZkMk1Qa2RRSXpVby5jZXIw gY4GCCsGAQUFBwELBIGBMH8wfQYIKwYBBQUHMAuGcXJzeW5jOi8vcnBraS5yaXBl Lm5ldC9yZXBvc2l0b3J5L0RFRkFVTFQvNGYvOTQzN2EyLTA3ZTYtNGU2YS1hYTNm LTk2NWQ2ZDYwM2JmYS8xLzEtQ1ZVcUZha0lyQmhybVRGZDJNUGtkUUl6VW8ubWZ0 MIGCBgNVHR8EezB5MHegdaBzhnFyc3luYzovL3Jwa2kucmlwZS5uZXQvcmVwb3Np dG9yeS9ERUZBVUxULzRmLzk0MzdhMi0wN2U2LTRlNmEtYWEzZi05NjVkNmQ2MDNi ZmEvMS8xLUNWVXFGYWtJckJocm1URmQyTVBrZFFJelVvLmNybDAYBgNVHSABAf8E DjAMMAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgAC BQAwFQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEApUMo /TCKPydZgf7g7RplnZMF/34qgpxYkgl0kkwnFWKqUKNhRR46yCX1v+R8C5XKim7M VmGy994e4qVJSdiQEwL2KpWBacntGtJHJ2br0YbHpOmsQ+9RcW+Pjwyzz1cQAW+x brjyrDnqBLUFZmEmScMbTTGx25VKyBZjnLPk9lxRMOphXziDpjcCLJYco0gP9xBj F9OqBC/nhoAeJUd3lSLdv6HBjYxacUQvVoMFWXcRucSyfhRWDlgcR0hmA87wJMzR czkGb+AuPa0dXi/hqBMK/WFZ9kjjZtdhRzDM6+T5gp6YGh+QvgUo43kfmPXnI3l0 ri5CflMPtDThyJw0fw== -----END CERTIFICATE-----Generated at Mon Oct 20 06:23:52 2025 by rpki-client