$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/5f/956db9-c8f7-4b9f-a56e-bc6db7248add/1/cPmxat8v0xmIhZkitEV0gd1-70A.mft File: cPmxat8v0xmIhZkitEV0gd1-70A.mft (raw, json) Hash identifier: DMbNB8dvUXjcXXTGs+fko3w5ebHW/+C6dLzNjsAAEx8= Subject key identifier: 6A:BA:04:76:06:5A:7C:68:91:9B:8B:96:F7:42:19:C5:64:A2:CF:38 Authority key identifier: 70:F9:B1:6A:DF:2F:D3:19:88:85:99:22:B4:45:74:81:DD:7E:EF:40 Certificate issuer: /CN=70f9b16adf2fd31988859922b4457481dd7eef40 Certificate serial: 0199FB45DE26642D838E0C2662BB02A7CC95 Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/cPmxat8v0xmIhZkitEV0gd1-70A.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/5f/956db9-c8f7-4b9f-a56e-bc6db7248add/1/cPmxat8v0xmIhZkitEV0gd1-70A.mft Manifest number: 1482 Signing time: Sun 19 Oct 2025 07:01:24 +0000 Manifest this update: Sun 19 Oct 2025 07:01:24 +0000 Manifest next update: Mon 20 Oct 2025 07:01:24 +0000 Files and hashes: 1: 0vnSiPOWnmFU81unx3CiiKoqL9Y.roa (hash: DfmLpO9j7T70YWipxuVu48t55S7NoYp0HKdaTOCmQYU=) 2: 5WpWrypca4XGx0ISHtuZYRT_cno.roa (hash: R8ZoU8UZw1Z3gy7t3IJTFumdlDzgJjWSubPKAJkbvV0=) 3: 5hhLPsRpw9KA7o9wasEihzJSXoA.roa (hash: rLTFQz+FRyLZFkOs44WSv8ULNMp8Sfi16jOBN6XhYiE=) 4: 8-icgNG9YFfARW17qjTdCn9yD80.roa (hash: vebs5VRK2d7EVc4VYZnrKXN0FKJQS1X4sYhCt1gzy4o=) 5: ElpdsCAHWnrspf_BQqwQgScgsBo.roa (hash: qGJ7OM5aBe7dvyjzLtp4kDohE2tNL4nfvnY6+uLyiBw=) 6: GMWgFQwd8nrIkV51lAwKwBtEBhI.roa (hash: +zDKOCeZ+E87qba/A9Qx+V3SrLOM1wpx9qfe7qe53g8=) 7: JOBERo-vgg6dldBoWViTCfV7X-A.roa (hash: ce+d5taUPY+G9x5sjcA70ndAe38v7dhbZx0JrAG/CD4=) 8: T1V76bxlhezLMl4Tzlvgqgk0pcg.roa (hash: Hk9kWyBSS3VZQ3ORtc2F2qsaXDclUxsqlus/HDJzLds=) 9: TGAbtOOQvJAO29jntkyfdiXsA34.roa (hash: Qa/Pmj8niQ7pWqzQURSMGZYQ5K31JvVZc6izGiwMvgM=) 10: VvWxBpgkQSp13g1sdt8P4SzC2m0.roa (hash: 9FE7dSvN+4LiBj47pFfaG8MIDBafbeRoSmTUhhQ2sfk=) 11: Z5phhVwVfpK6dkc5C1-vYmhcYUU.roa (hash: iIyIPk2NBxkdVR06TYJeH+vh01QOalQb+F2tpumtM+w=) 12: _CppwLlq6EutxXy9VYLWRzQtpMI.roa (hash: HLVjcT4MvYXdp8jvaIO+svVJJc+g5S0hq1BnrCGWs9M=) 13: cPmxat8v0xmIhZkitEV0gd1-70A.crl (hash: b1pWUUQLDiY7nGR9Q5H1sW1t/qJqvTmrwG1fLDT3foc=) 14: ezMLdhISIqr2PAqGoulAf-qQ6FY.roa (hash: MoVmtNQ9G0A/NJidABkGuBmF42AfIIukbBtAhp8lY68=) 15: fC3AtSHj4uWnRNCJOJWyffnxb_c.roa (hash: k4yZxxd7Kbg9gUH1VtnIM62vxLC45Jz4VtvfU0eH3rQ=) 16: mA4IEAHXR0LDJS0AO7AgvdyymfA.roa (hash: B62czMPy2pKQJ5FL2R2C5ZUZdywtpL+Cj+O5hZ16Rv4=) 17: q56DpE6SjT4lDV119A67V9CrQMI.roa (hash: sEJe90A/qwDILaO38ksc6uM3fs95yXl9fIcKPIheClI=) 18: qQMnV_AHkaoypfzXBStNqOIC8i4.roa (hash: 8/gHPP6AgbL3NuW+OG2JLB+jSLFsV5WrdZq7Of0LMpg=) 19: t-GC4kGf7lvSnOYAiTpgmlkKEL4.roa (hash: 9rNbslHDQxGg0Ew50MQa2Fk3HC4+vs4VNNeusuZLYr8=) Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/5f/956db9-c8f7-4b9f-a56e-bc6db7248add/1/cPmxat8v0xmIhZkitEV0gd1-70A.crl rsync://rpki.ripe.net/repository/DEFAULT/5f/956db9-c8f7-4b9f-a56e-bc6db7248add/1/cPmxat8v0xmIhZkitEV0gd1-70A.mft rsync://rpki.ripe.net/repository/DEFAULT/cPmxat8v0xmIhZkitEV0gd1-70A.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Mon 20 Oct 2025 06:00:58 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:99:fb:45:de:26:64:2d:83:8e:0c:26:62:bb:02:a7:cc:95 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=70f9b16adf2fd31988859922b4457481dd7eef40 Validity Not Before: Oct 19 07:01:24 2025 GMT Not After : Oct 20 07:01:24 2025 GMT Subject: CN=6aba0476065a7c68919b8b96f74219c564a2cf38 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:cb:b6:12:05:ef:dc:93:6e:ef:d3:2f:f2:3d:ec: 0a:7a:f2:9e:ea:b5:08:69:c1:6d:15:d6:62:51:dd: eb:85:49:d0:72:fa:3c:f8:63:96:7c:14:32:26:4a: 25:7a:80:b7:09:81:97:07:31:8c:f6:c4:b4:19:6b: b0:4f:8b:2c:83:58:e3:eb:b0:b2:49:c3:05:29:aa: 1f:21:ec:ca:d7:44:74:c3:a2:83:7a:15:39:f7:ca: 02:b3:0c:0b:1e:84:8c:f0:70:b1:f1:95:30:a2:22: 8e:de:a0:58:ea:a2:d1:36:d1:38:ea:d3:af:6b:3b: 34:08:7d:e7:2b:fa:df:85:c9:13:8c:bb:9b:5c:c8: bd:1a:17:0e:e1:12:87:3b:8a:c7:7e:17:0c:51:ad: 37:bc:30:92:cd:8e:c2:bd:9b:56:b8:ce:40:53:72: c1:99:8e:00:3f:89:93:86:4a:81:8a:61:e8:87:1a: 76:bc:23:dc:dc:58:bd:14:37:24:e5:3c:ed:60:29: c7:f6:90:7e:d6:ec:9d:b1:95:cc:35:5d:3e:91:d2: f1:d1:0f:05:2d:b2:c5:1f:ff:3f:40:60:c1:d2:b1: 24:b5:65:72:d7:40:67:ff:88:a4:be:60:e4:61:da: 62:ec:4b:78:bc:cc:15:cd:22:ac:f2:ca:73:81:f0: 30:fb Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 6A:BA:04:76:06:5A:7C:68:91:9B:8B:96:F7:42:19:C5:64:A2:CF:38 X509v3 Authority Key Identifier: keyid:70:F9:B1:6A:DF:2F:D3:19:88:85:99:22:B4:45:74:81:DD:7E:EF:40 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/cPmxat8v0xmIhZkitEV0gd1-70A.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/5f/956db9-c8f7-4b9f-a56e-bc6db7248add/1/cPmxat8v0xmIhZkitEV0gd1-70A.mft X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/5f/956db9-c8f7-4b9f-a56e-bc6db7248add/1/cPmxat8v0xmIhZkitEV0gd1-70A.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 1d:91:63:f4:ee:88:f1:2b:25:3a:72:04:cf:54:fb:b5:72:66: 30:4a:ce:da:15:ba:b3:6c:71:81:31:e1:9a:7a:ab:d5:b4:56: 15:21:00:ca:27:3b:98:e7:0b:bf:bb:3c:bb:20:32:e1:b2:f3: 22:97:64:49:42:19:ab:7f:95:9e:11:f6:1f:53:1a:4a:8d:e4: 2c:b8:36:c8:a2:c7:00:70:c1:01:5f:4e:65:5f:02:92:30:2e: b3:56:c1:c9:9c:26:1c:f8:41:05:3b:c8:09:34:4a:b6:8a:cf: 23:9c:70:93:b3:6c:d2:d7:4c:8e:e5:a9:09:30:9e:03:a7:19: 71:27:5e:98:cc:8b:71:66:04:49:79:ef:48:18:10:67:4d:e0: 9c:d7:02:75:99:79:9d:75:0e:ca:7f:3e:53:d1:f3:1a:7d:f7: ca:fc:1c:83:e6:f9:2c:37:ff:5a:d8:18:20:64:52:8a:ec:06: 29:3c:b8:62:71:96:86:57:09:b8:0a:5d:73:63:cd:97:50:54: ea:f4:67:2c:67:63:cf:45:5e:66:66:f1:dd:f2:40:b1:07:70: 8d:1d:e8:b0:97:02:31:73:a9:92:4a:29:e7:60:dd:ae:cd:56: 05:08:13:ee:b7:93:22:8f:04:14:ec:41:29:4b:45:c3:bf:17: 0f:b1:ad:9e -----BEGIN CERTIFICATE----- MIIFFjCCA/6gAwIBAgISAZn7Rd4mZC2DjgwmYrsCp8yVMA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKDcwZjliMTZhZGYyZmQzMTk4ODg1OTkyMmI0NDU3NDgxZGQ3 ZWVmNDAwHhcNMjUxMDE5MDcwMTI0WhcNMjUxMDIwMDcwMTI0WjAzMTEwLwYDVQQD Eyg2YWJhMDQ3NjA2NWE3YzY4OTE5YjhiOTZmNzQyMTljNTY0YTJjZjM4MIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAy7YSBe/ck27v0y/yPewKevKe6rUI acFtFdZiUd3rhUnQcvo8+GOWfBQyJkoleoC3CYGXBzGM9sS0GWuwT4ssg1jj67Cy ScMFKaofIezK10R0w6KDehU598oCswwLHoSM8HCx8ZUwoiKO3qBY6qLRNtE46tOv azs0CH3nK/rfhckTjLubXMi9GhcO4RKHO4rHfhcMUa03vDCSzY7CvZtWuM5AU3LB mY4AP4mThkqBimHohxp2vCPc3Fi9FDck5TztYCnH9pB+1uydsZXMNV0+kdLx0Q8F LbLFH/8/QGDB0rEktWVy10Bn/4ikvmDkYdpi7Et4vMwVzSKs8spzgfAw+wIDAQAB o4ICIjCCAh4wHQYDVR0OBBYEFGq6BHYGWnxokZuLlvdCGcVkos84MB8GA1UdIwQY MBaAFHD5sWrfL9MZiIWZIrRFdIHdfu9AMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvY1BteGF0OHYweG1JaFpraXRFVjBnZDEtNzBBLmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC81Zi85NTZkYjktYzhmNy00YjlmLWE1NmUt YmM2ZGI3MjQ4YWRkLzEvY1BteGF0OHYweG1JaFpraXRFVjBnZDEtNzBBLm1mdDCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC81Zi85NTZkYjktYzhmNy00YjlmLWE1NmUtYmM2ZGI3MjQ4YWRk LzEvY1BteGF0OHYweG1JaFpraXRFVjBnZDEtNzBBLmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAHZFj9O6I 8SslOnIEz1T7tXJmMErO2hW6s2xxgTHhmnqr1bRWFSEAyic7mOcLv7s8uyAy4bLz IpdkSUIZq3+VnhH2H1MaSo3kLLg2yKLHAHDBAV9OZV8CkjAus1bByZwmHPhBBTvI CTRKtorPI5xwk7Ns0tdMjuWpCTCeA6cZcSdemMyLcWYESXnvSBgQZ03gnNcCdZl5 nXUOyn8+U9HzGn33yvwcg+b5LDf/WtgYIGRSiuwGKTy4YnGWhlcJuApdc2PNl1BU 6vRnLGdjz0VeZmbx3fJAsQdwjR3osJcCMXOpkkop52Ddrs1WBQgT7reTIo8EFOxB KUtFw78XD7Gtng== -----END CERTIFICATE-----Generated at Sun Oct 19 15:23:07 2025 by rpki-client