$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/61/f92e2a-e1e4-487d-9acc-ed1f30cc1c57/1/h3e1s29m4TxDiMmTTaUHhWUV0HM.mft File: h3e1s29m4TxDiMmTTaUHhWUV0HM.mft (raw, json) Hash identifier: IPWZvffBcAYIOyTvK190vKqWZkGltzikMxyJ5B9KeW4= Subject key identifier: 77:B2:FE:43:F3:CF:10:95:5E:B6:D0:31:B5:F5:C2:D0:A3:DB:38:0A Authority key identifier: 87:77:B5:B3:6F:66:E1:3C:43:88:C9:93:4D:A5:07:85:65:15:D0:73 Certificate issuer: /CN=8777b5b36f66e13c4388c9934da507856515d073 Certificate serial: 0199FFC7463B281AF7AB3286DF5F4D1920FC Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/h3e1s29m4TxDiMmTTaUHhWUV0HM.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/61/f92e2a-e1e4-487d-9acc-ed1f30cc1c57/1/h3e1s29m4TxDiMmTTaUHhWUV0HM.mft Manifest number: 16F1 Signing time: Mon 20 Oct 2025 04:01:13 +0000 Manifest this update: Mon 20 Oct 2025 04:01:13 +0000 Manifest next update: Tue 21 Oct 2025 04:01:13 +0000 Files and hashes: 1: A6JGXr1SyvHwPS6KzQQ8jkJldSU.roa (hash: VUYWyhNS6ep9E7uE71FApUlIqX9LiZIrh4n1ahAsDso=) 2: TWqw0MHPHKoktRTg5xIAtx78yEM.roa (hash: PUFyi4vEY3nAKmSSQP1jmjE/95RjFLcOq0y69mlpJOM=) 3: V8TNai625jKsZmcQ_WZGrCSKrE4.roa (hash: vysxGoIRN63RAVmh7o1GuXI9idOSf2H3bNvDZcwjEdY=) 4: e6_LhXTjf-f7BeHN6H1yNQzFGts.roa (hash: li+C+e/TyH8gT/zIILB28hzFIhULplGnnZiYiHV9ZRc=) 5: gSW8bbfsJ2jQqNlN9dZhEGJFXP8.roa (hash: vU4Z2mH5UQmCsli4v0J2JenJSa7jKRcKq2cUWRszffQ=) 6: h3e1s29m4TxDiMmTTaUHhWUV0HM.crl (hash: oMgpzoVgSMW+tMMtxuJkSWzo5lSF7zRCD1JKYAOj7V0=) 7: i0jLZUHWlEbTjItngq0hMz6l6J0.roa (hash: +fs8xaq1rUOg67Y/1DC1FdTxOQepuB3UaDQqJ+epLzo=) 8: mYsvImsoUU3Ub9pNivjve1CZzdk.roa (hash: 6hty2hcbqDF/bBkU2gmepu7xCrLxFUdqyzgzAZcFQt8=) 9: mcMvNLDOLrmNQ78kKv9_JRA7DZE.roa (hash: VPPZszck1h4O1z0bSD4PbxyUsa9F/mGv1ZkFIvAMZag=) 10: rIHZb_5Mc64A87xwROb5WoKPTaQ.roa (hash: h28IpYVJGdPeChoNExuao8goV9hXIxbKmOle/GHbji8=) Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/61/f92e2a-e1e4-487d-9acc-ed1f30cc1c57/1/h3e1s29m4TxDiMmTTaUHhWUV0HM.crl rsync://rpki.ripe.net/repository/DEFAULT/61/f92e2a-e1e4-487d-9acc-ed1f30cc1c57/1/h3e1s29m4TxDiMmTTaUHhWUV0HM.mft rsync://rpki.ripe.net/repository/DEFAULT/h3e1s29m4TxDiMmTTaUHhWUV0HM.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Mon 20 Oct 2025 20:00:59 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:99:ff:c7:46:3b:28:1a:f7:ab:32:86:df:5f:4d:19:20:fc Signature Algorithm: sha256WithRSAEncryption Issuer: CN=8777b5b36f66e13c4388c9934da507856515d073 Validity Not Before: Oct 20 04:01:13 2025 GMT Not After : Oct 21 04:01:13 2025 GMT Subject: CN=77b2fe43f3cf10955eb6d031b5f5c2d0a3db380a Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:ae:d2:99:60:c4:84:90:b2:5c:73:be:1a:4e:9d: c8:43:97:05:46:e0:df:79:93:50:3a:f4:03:5d:05: 60:fd:8e:60:a5:47:0c:6c:9d:86:66:33:d2:f6:16: c3:76:69:31:e9:f2:43:9e:55:69:5e:8a:ed:c1:e4: 47:c9:50:14:ec:e7:28:de:e1:5f:91:99:5e:01:86: 5e:54:38:b3:6a:f7:7c:0d:89:c1:6c:80:9e:2d:46: 81:99:11:44:d2:4f:f2:21:5e:e8:12:89:07:70:83: a3:66:78:24:be:37:61:55:f7:e5:73:1f:16:36:04: 8f:82:12:11:6d:fc:fa:ac:dc:8b:1f:81:9d:2e:c2: 9e:dd:bf:bb:7e:70:fd:6a:8d:d2:20:93:9b:9b:17: 1a:aa:df:f0:cb:84:43:db:76:f2:a6:db:ea:3e:f7: 7a:2e:d7:97:a3:98:d3:c9:23:11:c6:d7:36:53:5b: 96:e4:2d:80:93:c1:62:3a:e5:18:68:b8:9e:72:04: 1d:ce:61:f3:14:32:b5:8e:98:4b:b0:82:26:c7:33: dd:33:7d:ee:76:98:24:29:ec:28:95:d9:4e:04:b2: d8:f0:b5:0f:d0:d4:a8:68:ac:c7:11:d7:e5:1b:6f: c9:bc:11:b5:58:d5:62:31:dd:8b:28:54:1b:25:ad: d4:d9 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 77:B2:FE:43:F3:CF:10:95:5E:B6:D0:31:B5:F5:C2:D0:A3:DB:38:0A X509v3 Authority Key Identifier: keyid:87:77:B5:B3:6F:66:E1:3C:43:88:C9:93:4D:A5:07:85:65:15:D0:73 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/h3e1s29m4TxDiMmTTaUHhWUV0HM.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/61/f92e2a-e1e4-487d-9acc-ed1f30cc1c57/1/h3e1s29m4TxDiMmTTaUHhWUV0HM.mft X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/61/f92e2a-e1e4-487d-9acc-ed1f30cc1c57/1/h3e1s29m4TxDiMmTTaUHhWUV0HM.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 03:29:ea:65:98:8c:d8:32:db:2f:3b:81:2c:78:4d:6e:6d:ae: c9:c1:eb:85:af:53:17:7a:ae:32:87:67:9a:09:0f:de:dd:0d: f8:9c:58:b0:37:c7:91:3c:da:e7:aa:43:b4:49:6f:53:ec:bd: 3c:17:f2:bd:fe:9b:e7:59:4d:b3:38:14:b9:fe:4a:a1:89:da: ce:fa:bd:91:49:43:9c:c9:82:2b:df:c0:8a:8d:07:14:23:5e: f4:29:d5:46:59:29:74:3b:8b:de:3b:c7:89:c8:d3:b7:0a:20: 37:31:4b:5a:dd:b1:ae:e5:74:aa:38:2e:81:ea:97:9f:3b:0d: 5a:b1:73:4d:cc:e0:56:41:34:f1:b7:3e:24:03:b4:1c:23:44: 77:a0:a1:2f:f6:49:94:6f:18:18:01:c0:ae:b6:c4:6f:ae:46: 69:2f:75:d6:d8:c4:a9:4e:06:aa:c4:8a:40:92:96:19:49:01: e6:23:81:96:d8:24:d6:29:61:b2:47:2c:b0:39:80:8e:e6:00: e4:05:bf:40:37:2b:eb:94:fc:02:ba:c0:7a:95:92:18:f7:8c: ef:56:5b:e1:74:08:d7:32:cc:34:0a:0d:fc:a3:27:97:21:dc: 9e:76:d8:13:40:9e:62:13:3d:e2:e5:bd:98:52:46:15:a3:af: ae:0c:8b:4b -----BEGIN CERTIFICATE----- MIIFFjCCA/6gAwIBAgISAZn/x0Y7KBr3qzKG319NGSD8MA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKDg3NzdiNWIzNmY2NmUxM2M0Mzg4Yzk5MzRkYTUwNzg1NjUx NWQwNzMwHhcNMjUxMDIwMDQwMTEzWhcNMjUxMDIxMDQwMTEzWjAzMTEwLwYDVQQD Eyg3N2IyZmU0M2YzY2YxMDk1NWViNmQwMzFiNWY1YzJkMGEzZGIzODBhMIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEArtKZYMSEkLJcc74aTp3IQ5cFRuDf eZNQOvQDXQVg/Y5gpUcMbJ2GZjPS9hbDdmkx6fJDnlVpXortweRHyVAU7Oco3uFf kZleAYZeVDizavd8DYnBbICeLUaBmRFE0k/yIV7oEokHcIOjZngkvjdhVfflcx8W NgSPghIRbfz6rNyLH4GdLsKe3b+7fnD9ao3SIJObmxcaqt/wy4RD23byptvqPvd6 LteXo5jTySMRxtc2U1uW5C2Ak8FiOuUYaLiecgQdzmHzFDK1jphLsIImxzPdM33u dpgkKewoldlOBLLY8LUP0NSoaKzHEdflG2/JvBG1WNViMd2LKFQbJa3U2QIDAQAB o4ICIjCCAh4wHQYDVR0OBBYEFHey/kPzzxCVXrbQMbX1wtCj2zgKMB8GA1UdIwQY MBaAFId3tbNvZuE8Q4jJk02lB4VlFdBzMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvaDNlMXMyOW00VHhEaU1tVFRhVUhoV1VWMEhNLmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC82MS9mOTJlMmEtZTFlNC00ODdkLTlhY2Mt ZWQxZjMwY2MxYzU3LzEvaDNlMXMyOW00VHhEaU1tVFRhVUhoV1VWMEhNLm1mdDCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC82MS9mOTJlMmEtZTFlNC00ODdkLTlhY2MtZWQxZjMwY2MxYzU3 LzEvaDNlMXMyOW00VHhEaU1tVFRhVUhoV1VWMEhNLmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAAynqZZiM 2DLbLzuBLHhNbm2uycHrha9TF3quModnmgkP3t0N+JxYsDfHkTza56pDtElvU+y9 PBfyvf6b51lNszgUuf5KoYnazvq9kUlDnMmCK9/Aio0HFCNe9CnVRlkpdDuL3jvH icjTtwogNzFLWt2xruV0qjgugeqXnzsNWrFzTczgVkE08bc+JAO0HCNEd6ChL/ZJ lG8YGAHArrbEb65GaS911tjEqU4GqsSKQJKWGUkB5iOBltgk1ilhskcssDmAjuYA 5AW/QDcr65T8ArrAepWSGPeM71Zb4XQI1zLMNAoN/KMnlyHcnnbYE0CeYhM94uW9 mFJGFaOvrgyLSw== -----END CERTIFICATE-----Generated at Mon Oct 20 06:33:06 2025 by rpki-client