$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/53/e8cb44-a954-4672-b9a4-a49e5c6633bd/1/1-sy7cqqYhKW_jQ51dAShfl4jMiw.mft File: 1-sy7cqqYhKW_jQ51dAShfl4jMiw.mft (raw, json) Hash identifier: 5xRkv18sh/bGtbuZinLpHGM/thTWnAnPeLeT/TUSUck= Subject key identifier: 14:93:CC:C9:BF:84:3B:DE:B1:38:99:A3:17:8D:06:A0:04:C9:DF:46 Authority key identifier: FA:CC:BB:72:AA:98:84:A5:BF:8D:0E:75:74:04:A1:7E:5E:23:32:2C Certificate issuer: /CN=faccbb72aa9884a5bf8d0e757404a17e5e23322c Certificate serial: 0199FD3451E864829E5F7665ED51A4858A33 Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/1-sy7cqqYhKW_jQ51dAShfl4jMiw.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/53/e8cb44-a954-4672-b9a4-a49e5c6633bd/1/1-sy7cqqYhKW_jQ51dAShfl4jMiw.mft Manifest number: 16FC Signing time: Sun 19 Oct 2025 16:01:28 +0000 Manifest this update: Sun 19 Oct 2025 16:01:28 +0000 Manifest next update: Mon 20 Oct 2025 16:01:28 +0000 Files and hashes: 1: 0OeAqS6vX3gO6vvCqqj93y9hg-0.roa (hash: 4e6GVSZZmDnDLgJOl3djtnEbqT5lDhaJq4dAZ/qU/lk=) 2: 1-sy7cqqYhKW_jQ51dAShfl4jMiw.crl (hash: fjCdaD/vVt0QnkYOuGmA7n2G0pRjs9Vto2y2r/SElI0=) 3: 3ezvkbNYlAAPTTtiMpMfAXi1MZc.roa (hash: vAEGRwBdpnrHv/YkIQBOy6F594hqpTCRBhtvpnyCndE=) 4: B9T2tEPkzR3I7bfjqMLpjqVmqX0.roa (hash: jvG6Kma4d2VGMYtzkdxrMtFkS2r5Ue1ZSeSqhiErA3k=) 5: IHhv8_mZDx6A2j-F31Pdu0k8CrY.roa (hash: STtIVy8Sw+YzG++4aOUBuN18lGWUI/cMQ7xzdEE/ceE=) 6: NBa1UmmcofJztBL8pTAUTjZFH0k.roa (hash: 86hIGHbzSCBjbpNQmq5AwTHYQV5MFxXejgndiQ6r1LA=) 7: VO1QZo2vfxheLbeFL1rejYxNYBI.roa (hash: FCnZcb/OtfouViKRapPfAgcT5IF02/4Osl8N+1EzEnE=) 8: Wc2-UHBTfF-XHLzgQS0SwCmvlB0.roa (hash: 7aSWc04NFLdsEACjlaycXN0TGgVCRx18P8RZa+kCQIU=) 9: cUk9gF1NAvXhh8uQPdgOvohfLq4.roa (hash: kUG38NhhNKk78iTPsGRqnyUiXKkoTEwb6ImAUIs7EvU=) 10: doz6pIZLFsQi2mYQNJFMwi6P3-w.roa (hash: cmXkx2OZFz2XattOJlW1YfABpPcx3f/r/UMGYZNOMGI=) 11: ioa7P1e1SCYd3BcfFxtI-9P6P2k.roa (hash: 1p7OVkFIK8eU+7iB9pcEKKjlG4sNNxXEXZnDzToZ8Ac=) 12: pCc_cSWUTGqBPQv4cw6oAWrJ3Dw.roa (hash: 592DXKAG5uM8BEJZmdLRa+vW+5yO7qDryAvPgg1YlKU=) 13: pVMgUdSHj0nlaCG6yBmxCGoOV48.roa (hash: iYu6/b1RnNkG7/TqQe3ysX2HEttIbsgucDRlivFMstY=) 14: udVjWjtCw8-mpprcmzafPsXqAEg.roa (hash: 4jYyql/ul3ChaZUGCo2qkL0DtI4tuS2kYKNXsqMrYh4=) Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/53/e8cb44-a954-4672-b9a4-a49e5c6633bd/1/1-sy7cqqYhKW_jQ51dAShfl4jMiw.crl rsync://rpki.ripe.net/repository/DEFAULT/53/e8cb44-a954-4672-b9a4-a49e5c6633bd/1/1-sy7cqqYhKW_jQ51dAShfl4jMiw.mft rsync://rpki.ripe.net/repository/DEFAULT/1-sy7cqqYhKW_jQ51dAShfl4jMiw.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Mon 20 Oct 2025 11:18:59 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:99:fd:34:51:e8:64:82:9e:5f:76:65:ed:51:a4:85:8a:33 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=faccbb72aa9884a5bf8d0e757404a17e5e23322c Validity Not Before: Oct 19 16:01:28 2025 GMT Not After : Oct 20 16:01:28 2025 GMT Subject: CN=1493ccc9bf843bdeb13899a3178d06a004c9df46 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:d8:ec:1c:f3:1e:cf:d5:00:46:2a:f1:d0:c1:ba: b2:0e:1f:cf:6c:e3:4f:6b:c5:43:36:95:ee:1c:58: d8:9d:02:33:e6:c9:7a:9b:22:13:b5:84:b6:c8:60: 1f:bc:6e:44:9a:9c:47:ca:eb:c0:e0:46:d5:60:52: 15:2b:58:87:6f:f4:a4:6d:88:d3:58:43:f8:ef:2f: 2c:7c:22:b5:f6:fc:b8:95:35:8d:92:c5:cc:0e:ac: 90:20:56:c8:94:38:58:e6:0d:6c:b6:bd:bd:46:71: 66:14:9f:99:a4:62:05:15:2e:02:fe:89:8d:ee:ec: e6:40:79:1f:11:ca:19:a6:df:c1:84:78:ce:c9:1d: 9a:f7:47:a1:1f:dc:d9:1d:b6:ab:43:7c:8f:47:ec: 70:fa:7d:e0:09:ec:97:44:32:8a:f6:6f:7e:71:06: 3e:8a:10:0c:85:31:cc:2a:aa:bb:47:c8:e1:4f:e1: 09:4f:be:a6:5e:02:90:b0:6a:2f:16:01:45:21:18: 5f:ce:e4:06:ec:ac:5f:9c:2e:df:43:a9:49:7e:ce: 11:8d:00:88:7f:19:a1:56:a7:68:5e:21:e2:88:ed: d4:7a:8a:d8:53:38:33:a1:67:86:27:c9:9c:78:85: e7:8b:35:75:ed:5f:76:69:cf:f2:cd:0c:71:9c:b6: 45:f1 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 14:93:CC:C9:BF:84:3B:DE:B1:38:99:A3:17:8D:06:A0:04:C9:DF:46 X509v3 Authority Key Identifier: keyid:FA:CC:BB:72:AA:98:84:A5:BF:8D:0E:75:74:04:A1:7E:5E:23:32:2C X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/1-sy7cqqYhKW_jQ51dAShfl4jMiw.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/53/e8cb44-a954-4672-b9a4-a49e5c6633bd/1/1-sy7cqqYhKW_jQ51dAShfl4jMiw.mft X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/53/e8cb44-a954-4672-b9a4-a49e5c6633bd/1/1-sy7cqqYhKW_jQ51dAShfl4jMiw.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption c6:c4:09:32:37:fe:42:59:97:ea:5d:a0:d0:f0:84:82:4a:c3: f2:2a:ac:53:9f:9a:07:3c:c9:2c:77:41:ea:47:dc:4f:46:15: 55:2a:d2:b6:24:a3:69:5c:20:df:b1:b7:0b:fc:67:17:9f:51: 8e:39:c9:64:d0:a0:7b:92:a1:fc:85:9b:cf:72:d9:11:03:5d: d6:65:d0:24:19:62:b7:c7:ac:0b:f7:79:59:28:d0:ec:a6:2f: 7c:9a:f9:05:60:55:ae:5e:85:48:1e:4a:6c:66:9d:da:2e:6e: 10:75:0d:7c:b5:4d:07:f2:5c:02:cd:fd:3f:87:27:36:37:b9: 90:9c:8c:4c:ad:c7:98:ac:dd:98:a5:b6:e8:dc:5a:58:65:a7: 08:2f:d7:b8:63:94:4b:00:70:0a:d1:00:d2:2b:f2:7a:2d:ba: 31:3b:8d:64:05:1f:7d:87:a7:92:e2:a8:b9:f5:dd:ca:31:68: 96:a9:77:11:ee:26:4d:a6:0a:0c:4c:f6:de:3d:f4:c1:e4:76: 4f:d3:24:b0:b6:79:50:eb:f8:57:87:b3:94:1a:5c:a1:8b:e1: 55:c1:43:5a:2d:63:99:ad:c4:08:55:7b:79:67:cc:e6:d0:29: 21:18:aa:bf:ea:ff:06:73:cc:62:4a:cd:e3:98:85:8d:54:d7: ae:b1:29:d8 -----BEGIN CERTIFICATE----- MIIFGTCCBAGgAwIBAgISAZn9NFHoZIKeX3Zl7VGkhYozMA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKGZhY2NiYjcyYWE5ODg0YTViZjhkMGU3NTc0MDRhMTdlNWUy MzMyMmMwHhcNMjUxMDE5MTYwMTI4WhcNMjUxMDIwMTYwMTI4WjAzMTEwLwYDVQQD EygxNDkzY2NjOWJmODQzYmRlYjEzODk5YTMxNzhkMDZhMDA0YzlkZjQ2MIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEA2Owc8x7P1QBGKvHQwbqyDh/PbONP a8VDNpXuHFjYnQIz5sl6myITtYS2yGAfvG5EmpxHyuvA4EbVYFIVK1iHb/SkbYjT WEP47y8sfCK19vy4lTWNksXMDqyQIFbIlDhY5g1str29RnFmFJ+ZpGIFFS4C/omN 7uzmQHkfEcoZpt/BhHjOyR2a90ehH9zZHbarQ3yPR+xw+n3gCeyXRDKK9m9+cQY+ ihAMhTHMKqq7R8jhT+EJT76mXgKQsGovFgFFIRhfzuQG7KxfnC7fQ6lJfs4RjQCI fxmhVqdoXiHiiO3UeorYUzgzoWeGJ8mceIXnizV17V92ac/yzQxxnLZF8QIDAQAB o4ICJTCCAiEwHQYDVR0OBBYEFBSTzMm/hDvesTiZoxeNBqAEyd9GMB8GA1UdIwQY MBaAFPrMu3KqmISlv40OdXQEoX5eIzIsMA4GA1UdDwEB/wQEAwIHgDBlBggrBgEF BQcBAQRZMFcwVQYIKwYBBQUHMAKGSXJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvMS1zeTdjcXFZaEtXX2pRNTFkQVNoZmw0ak1pdy5jZXIw gY4GCCsGAQUFBwELBIGBMH8wfQYIKwYBBQUHMAuGcXJzeW5jOi8vcnBraS5yaXBl Lm5ldC9yZXBvc2l0b3J5L0RFRkFVTFQvNTMvZThjYjQ0LWE5NTQtNDY3Mi1iOWE0 LWE0OWU1YzY2MzNiZC8xLzEtc3k3Y3FxWWhLV19qUTUxZEFTaGZsNGpNaXcubWZ0 MIGCBgNVHR8EezB5MHegdaBzhnFyc3luYzovL3Jwa2kucmlwZS5uZXQvcmVwb3Np dG9yeS9ERUZBVUxULzUzL2U4Y2I0NC1hOTU0LTQ2NzItYjlhNC1hNDllNWM2NjMz YmQvMS8xLXN5N2NxcVloS1dfalE1MWRBU2hmbDRqTWl3LmNybDAYBgNVHSABAf8E DjAMMAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgAC BQAwFQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAxsQJ Mjf+QlmX6l2g0PCEgkrD8iqsU5+aBzzJLHdB6kfcT0YVVSrStiSjaVwg37G3C/xn F59RjjnJZNCge5Kh/IWbz3LZEQNd1mXQJBlit8esC/d5WSjQ7KYvfJr5BWBVrl6F SB5KbGad2i5uEHUNfLVNB/JcAs39P4cnNje5kJyMTK3HmKzdmKW26NxaWGWnCC/X uGOUSwBwCtEA0ivyei26MTuNZAUffYenkuKoufXdyjFolql3Ee4mTaYKDEz23j30 weR2T9MksLZ5UOv4V4ezlBpcoYvhVcFDWi1jma3ECFV7eWfM5tApIRiqv+r/BnPM YkrN45iFjVTXrrEp2A== -----END CERTIFICATE-----Generated at Sun Oct 19 20:45:01 2025 by rpki-client