$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/58/952230-c262-41cc-b956-cfc46a76ec78/1/N04nKbFzaYkKFRL2Q80I5Lov9BQ.mft File: N04nKbFzaYkKFRL2Q80I5Lov9BQ.mft (raw, json) Hash identifier: XUoIry5rarvTs9hKq4qMFQ1y2/4U+hzW3mJncjtAfYU= Subject key identifier: 58:50:E9:AB:BF:69:31:31:14:8C:59:ED:6E:71:EB:81:F3:7F:6D:68 Authority key identifier: 37:4E:27:29:B1:73:69:89:0A:15:12:F6:43:CD:08:E4:BA:2F:F4:14 Certificate issuer: /CN=374e2729b17369890a1512f643cd08e4ba2ff414 Certificate serial: 0199FA69DC266D87B49DC6590E5737664D36 Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/N04nKbFzaYkKFRL2Q80I5Lov9BQ.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/58/952230-c262-41cc-b956-cfc46a76ec78/1/N04nKbFzaYkKFRL2Q80I5Lov9BQ.mft Manifest number: 0F56 Signing time: Sun 19 Oct 2025 03:01:05 +0000 Manifest this update: Sun 19 Oct 2025 03:01:05 +0000 Manifest next update: Mon 20 Oct 2025 03:01:05 +0000 Files and hashes: 1: 1-KKzJUCNPPXvfs50dce1cbfiWMY.roa (hash: jVGyXLe98f2aA3WGzwFHo9btWoP5lEFJLj3g4uMkn5w=) 2: 3520iAwmR0BvV2MPg7TBl3ALKj4.roa (hash: w6lShDZfgepO7x4Np/TeK1Ek0txjQUSZQ5viOdvUQa4=) 3: B61tQVa6NJ0bpDCTZZdDA-JxPNs.roa (hash: ZKlioiMsbmVox1tDp8lKCvDKm6sseRUmvR0/0NjHIaA=) 4: GRA3t_KyWFYxg2CQJHBaXlViSP8.roa (hash: N4cHeR4tmiAj9zbtfRvcPi/r/p86jgb0tb1toEi1byE=) 5: N04nKbFzaYkKFRL2Q80I5Lov9BQ.crl (hash: A6Jqallh2Lm8Wjj/9kBSlffMP/+8/+buGl9ACJoquX4=) 6: gpxmpBKSRlxJbhTXj2ljKLoLY98.roa (hash: ZoAsNs3QEg3YCXPSplhPm5vvHec86X8GlWAXHSj/DDE=) 7: mVQLg2vFtKhXYkiJgy9EzEclH78.roa (hash: 8XlUZL+eJtMSbbcbuZH2lnnnxy7c34P4HzZYP3Ogx2U=) 8: mtEhXVsq4tQu2Q9mIDoxxW8IYZw.roa (hash: AojxXVHH/gbQ3MPiJY/87qknZA5A4RNwVQYYZL9bDe8=) 9: sVAaC1BBBoytcdwHWkooZRIR8-s.roa (hash: 36HHVgLaL2pXQjYCKOW8rL/zYREdNh/lyntTzD4auF8=) 10: wg9s7DQX6eW3dDdaARTAPpRTzqc.roa (hash: BT19Mg+zBya+5K3DArKvF9emtWlSQhaPjSW20vhvIVk=) Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/58/952230-c262-41cc-b956-cfc46a76ec78/1/N04nKbFzaYkKFRL2Q80I5Lov9BQ.crl rsync://rpki.ripe.net/repository/DEFAULT/58/952230-c262-41cc-b956-cfc46a76ec78/1/N04nKbFzaYkKFRL2Q80I5Lov9BQ.mft rsync://rpki.ripe.net/repository/DEFAULT/N04nKbFzaYkKFRL2Q80I5Lov9BQ.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Mon 20 Oct 2025 03:01:05 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:99:fa:69:dc:26:6d:87:b4:9d:c6:59:0e:57:37:66:4d:36 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=374e2729b17369890a1512f643cd08e4ba2ff414 Validity Not Before: Oct 19 03:01:05 2025 GMT Not After : Oct 20 03:01:05 2025 GMT Subject: CN=5850e9abbf693131148c59ed6e71eb81f37f6d68 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:8e:be:45:36:7f:b8:96:fb:e2:0c:22:e7:ce:e2: 52:79:d8:0e:04:03:ce:d0:2c:f9:95:fb:1e:51:84: cd:aa:1e:8e:9d:81:b4:d6:88:6a:7c:63:d6:5a:32: 71:7b:1b:ea:1f:42:5d:37:b9:1a:54:9c:7e:38:a1: 09:7a:b7:3c:9c:29:f3:3d:62:9c:91:71:12:55:87: 03:c8:7e:12:1b:b1:d5:f4:a3:01:6e:12:52:df:2d: db:73:7a:5c:e0:ef:51:d0:12:50:b6:94:11:3a:9d: 14:55:5d:77:dc:95:db:33:ff:c8:6e:92:43:d3:1e: ad:ad:be:0f:11:c9:9d:11:e4:f7:00:38:a3:ab:c7: f8:ac:24:b2:f1:22:65:73:a0:fc:02:33:6e:5c:1b: 1f:55:3d:c7:2c:6c:76:8b:6e:6c:31:10:f9:2e:a2: ef:00:17:8f:de:ef:19:07:c0:8b:d7:9d:33:5b:6f: 2f:53:eb:ab:d1:14:20:5e:25:07:a9:33:de:ce:b0: 0b:66:38:f8:44:d0:3d:8e:f5:79:e8:ee:55:34:18: e9:15:c6:59:65:e8:cb:b0:f0:1c:80:ee:f0:42:7d: cf:49:29:88:2a:82:9f:93:6a:ba:2d:03:c6:08:92: 5f:1d:26:7a:15:b8:3a:bd:ef:06:75:b9:7d:ba:5e: 14:53 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 58:50:E9:AB:BF:69:31:31:14:8C:59:ED:6E:71:EB:81:F3:7F:6D:68 X509v3 Authority Key Identifier: keyid:37:4E:27:29:B1:73:69:89:0A:15:12:F6:43:CD:08:E4:BA:2F:F4:14 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/N04nKbFzaYkKFRL2Q80I5Lov9BQ.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/58/952230-c262-41cc-b956-cfc46a76ec78/1/N04nKbFzaYkKFRL2Q80I5Lov9BQ.mft X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/58/952230-c262-41cc-b956-cfc46a76ec78/1/N04nKbFzaYkKFRL2Q80I5Lov9BQ.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 92:0e:47:08:40:36:00:98:be:bc:d6:e6:10:c9:e1:6b:7c:bf: d9:0e:c6:e8:c2:a0:48:7e:1a:01:e4:2b:86:79:b6:1f:b9:ba: f9:f0:49:93:25:84:dc:20:e5:ce:8e:7b:22:3c:7b:99:30:29: 7b:9f:ff:c5:c8:86:1e:4d:c3:34:50:fa:e6:f6:2d:e6:92:30: db:c2:db:f2:03:ef:6a:29:0a:c5:dd:9c:4b:a2:84:e2:d4:e2: 45:8e:43:f8:b9:63:30:de:77:e0:ab:b0:77:c3:51:b8:3b:04: 32:88:38:8a:bd:f7:c1:0f:d9:ba:a1:e9:af:9b:72:b9:a9:cd: f3:85:d5:2c:2c:b2:0b:75:bb:27:8b:25:1d:a0:34:e2:fb:06: f6:cc:4e:e6:43:3d:27:65:90:5d:ea:d1:a8:6c:3d:f0:05:19: dc:d5:f3:1e:51:b9:d3:f4:70:dc:03:c0:62:be:f2:48:2e:a4: 02:ff:4e:39:66:11:53:09:17:9e:2d:80:01:4b:c9:0c:b0:13: 43:11:4f:27:b3:a1:07:ef:89:4e:a4:4b:84:2d:c0:79:55:ff: 28:ed:59:79:69:5e:30:90:ce:d3:e9:07:80:fb:88:a3:14:2c: 2f:6e:4e:8b:08:7c:bc:13:85:b2:40:68:11:c7:06:46:bb:63: e1:8b:6c:68 -----BEGIN CERTIFICATE----- MIIFFjCCA/6gAwIBAgISAZn6adwmbYe0ncZZDlc3Zk02MA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKDM3NGUyNzI5YjE3MzY5ODkwYTE1MTJmNjQzY2QwOGU0YmEy ZmY0MTQwHhcNMjUxMDE5MDMwMTA1WhcNMjUxMDIwMDMwMTA1WjAzMTEwLwYDVQQD Eyg1ODUwZTlhYmJmNjkzMTMxMTQ4YzU5ZWQ2ZTcxZWI4MWYzN2Y2ZDY4MIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAjr5FNn+4lvviDCLnzuJSedgOBAPO 0Cz5lfseUYTNqh6OnYG01ohqfGPWWjJxexvqH0JdN7kaVJx+OKEJerc8nCnzPWKc kXESVYcDyH4SG7HV9KMBbhJS3y3bc3pc4O9R0BJQtpQROp0UVV133JXbM//IbpJD 0x6trb4PEcmdEeT3ADijq8f4rCSy8SJlc6D8AjNuXBsfVT3HLGx2i25sMRD5LqLv ABeP3u8ZB8CL150zW28vU+ur0RQgXiUHqTPezrALZjj4RNA9jvV56O5VNBjpFcZZ ZejLsPAcgO7wQn3PSSmIKoKfk2q6LQPGCJJfHSZ6Fbg6ve8Gdbl9ul4UUwIDAQAB o4ICIjCCAh4wHQYDVR0OBBYEFFhQ6au/aTExFIxZ7W5x64Hzf21oMB8GA1UdIwQY MBaAFDdOJymxc2mJChUS9kPNCOS6L/QUMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvTjA0bktiRnphWWtLRlJMMlE4MEk1TG92OUJRLmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC81OC85NTIyMzAtYzI2Mi00MWNjLWI5NTYt Y2ZjNDZhNzZlYzc4LzEvTjA0bktiRnphWWtLRlJMMlE4MEk1TG92OUJRLm1mdDCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC81OC85NTIyMzAtYzI2Mi00MWNjLWI5NTYtY2ZjNDZhNzZlYzc4 LzEvTjA0bktiRnphWWtLRlJMMlE4MEk1TG92OUJRLmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAkg5HCEA2 AJi+vNbmEMnha3y/2Q7G6MKgSH4aAeQrhnm2H7m6+fBJkyWE3CDlzo57Ijx7mTAp e5//xciGHk3DNFD65vYt5pIw28Lb8gPvaikKxd2cS6KE4tTiRY5D+LljMN534Kuw d8NRuDsEMog4ir33wQ/ZuqHpr5tyuanN84XVLCyyC3W7J4slHaA04vsG9sxO5kM9 J2WQXerRqGw98AUZ3NXzHlG50/Rw3APAYr7ySC6kAv9OOWYRUwkXni2AAUvJDLAT QxFPJ7OhB++JTqRLhC3AeVX/KO1ZeWleMJDO0+kHgPuIoxQsL25Oiwh8vBOFskBo EccGRrtj4YtsaA== -----END CERTIFICATE-----Generated at Sun Oct 19 13:13:30 2025 by rpki-client