$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/6e/829fdf-ba63-4c23-91d1-d2bbf37dabb4/1/C1Vqy187lhtcwkoplfNO6R953BY.mft File: C1Vqy187lhtcwkoplfNO6R953BY.mft (raw, json) Hash identifier: x0Hp0mnrWNnLTZKnXrz0T821QSsBUHhve6wpHYQo7RA= Subject key identifier: 4E:0C:2E:C3:4B:ED:4E:4C:37:DF:89:90:FC:4B:E4:85:51:8D:35:F8 Authority key identifier: 0B:55:6A:CB:5F:3B:96:1B:5C:C2:4A:29:95:F3:4E:E9:1F:79:DC:16 Certificate issuer: /CN=0b556acb5f3b961b5cc24a2995f34ee91f79dc16 Certificate serial: 0199FCC682C75117114E9E1B2C5DDD951CB4 Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/C1Vqy187lhtcwkoplfNO6R953BY.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/6e/829fdf-ba63-4c23-91d1-d2bbf37dabb4/1/C1Vqy187lhtcwkoplfNO6R953BY.mft Manifest number: 1702 Signing time: Sun 19 Oct 2025 14:01:31 +0000 Manifest this update: Sun 19 Oct 2025 14:01:31 +0000 Manifest next update: Mon 20 Oct 2025 14:01:31 +0000 Files and hashes: 1: 7AEnLXSB1YaAfgMGKA-kT_KobA0.roa (hash: 5AKbmZJGLK7UnAttUygeGitl8Ob/t23TtR2u6flJg/c=) 2: C1Vqy187lhtcwkoplfNO6R953BY.crl (hash: AFBIZD+8Tl86+6fp9Ao1WNycULqoJ6uJlUULg4+dhY0=) 3: Ufuhf0_wn9lleED4LQKhcdXKZLY.roa (hash: f4Ng8ktmuEshcdJiOHZjPJAwq7/nitwlptaYvO0/DHU=) 4: XFCPjaaIP04nEp4Rlitk1zUJ8nA.roa (hash: 9Hrw22EfwJiPVEvx9iOeq1/U32N9ujjXKgQDN7kPNnY=) 5: bzDr7kn2LfhqjYsoZQLZ-uHwvQI.roa (hash: ETCcL6Lmgpdi6iyG4gf+W9Umfg+Mzqif1q2dVBD62g4=) 6: e38Kg8iCKqOVcGx8ZyJTu1IrTwc.roa (hash: yWG15kNG/dsh9zB22D/eO5GMJKGaRyWMaUm0mhvs7uI=) 7: irmafOolxajIUAAu4T-WCDDYGuE.roa (hash: B2dN9t4bHqneaqFXcxWnKXREXDW4ZcJ7+Z7DVVfobpU=) 8: n7XNxY-sa2O-8oAFuyK34I07FxU.roa (hash: 7HgkBdxidw6ZJ5Ks5cBFOnu0xmnIR/zyHKV2JfMTPLM=) 9: nikI6XTmNMIUEKKUIOhaKpaRfTY.roa (hash: 3OTWr1t7MNgVLjxLDAQClENVYG0IMxrFr2dhuyh8iLU=) 10: pkcx_-V9HNVC8HzviAJSCvzoxJg.roa (hash: V4tEVQoUWw/5eT8C/Z8qztjVCTQ8kgfSRy2bETB0V2w=) 11: wq6Oybyru5PjGYeKDTrdRRIxOok.roa (hash: +NxS5vTeW/Lv7n0fJHcbikUT3d8Gb7EPQOKgAIeQnGs=) 12: xYF8GskQRTruWnq0Q7-vo_GqfiQ.roa (hash: cnwhIOGst+6jb701ygWNYFM0wdy5cssALvw1jcPBdd8=) 13: zWjz2LNLq80pq2WuE0E1NBqZS1o.roa (hash: ap78rPxrVGTGOGfqvTyPywElC+o3n1VjpUH+IK1D8Yc=) Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/6e/829fdf-ba63-4c23-91d1-d2bbf37dabb4/1/C1Vqy187lhtcwkoplfNO6R953BY.crl rsync://rpki.ripe.net/repository/DEFAULT/6e/829fdf-ba63-4c23-91d1-d2bbf37dabb4/1/C1Vqy187lhtcwkoplfNO6R953BY.mft rsync://rpki.ripe.net/repository/DEFAULT/C1Vqy187lhtcwkoplfNO6R953BY.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Mon 20 Oct 2025 11:18:59 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:99:fc:c6:82:c7:51:17:11:4e:9e:1b:2c:5d:dd:95:1c:b4 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=0b556acb5f3b961b5cc24a2995f34ee91f79dc16 Validity Not Before: Oct 19 14:01:31 2025 GMT Not After : Oct 20 14:01:31 2025 GMT Subject: CN=4e0c2ec34bed4e4c37df8990fc4be485518d35f8 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:a9:75:a7:da:cc:37:56:07:90:79:63:33:3f:69: 8c:72:92:9e:31:55:8c:4c:c4:0e:ee:49:8b:78:79: 07:24:42:0f:55:ee:ff:b4:fc:f7:b2:84:db:34:13: c2:8e:24:46:f1:cd:19:cc:85:23:06:db:25:36:ae: 6c:ca:86:45:ce:ad:28:09:d0:f8:0a:0f:7b:ab:69: 04:07:c9:90:0e:08:d3:eb:5d:3f:ee:58:21:8e:1a: 29:c0:e1:61:2e:2e:5b:25:02:db:bc:24:b6:8a:c7: f8:05:91:1b:ac:1e:2d:a1:ee:56:2f:3c:5b:2c:74: e1:17:9f:94:31:48:fc:07:35:fe:32:59:44:4c:ca: c6:83:06:00:86:27:6e:a1:b8:a8:64:6e:2d:01:54: 0d:7c:5d:5b:d7:fb:58:e7:c1:0c:15:bb:93:f3:4c: 49:46:a0:d5:66:cc:4e:1b:06:5c:46:05:ba:fe:2d: 64:35:66:43:9e:07:95:54:45:a9:b4:eb:79:4b:56: 6f:fb:d0:0a:32:fc:94:76:cb:a2:19:d0:b1:42:f3: 86:9c:f6:9e:63:37:36:0e:2f:31:78:dd:e5:91:9f: 32:d8:b8:6d:67:dd:55:42:eb:f0:72:53:7d:3c:39: 6e:40:8d:e2:49:ce:00:4d:b9:01:82:52:1d:a1:d8: 16:0d Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 4E:0C:2E:C3:4B:ED:4E:4C:37:DF:89:90:FC:4B:E4:85:51:8D:35:F8 X509v3 Authority Key Identifier: keyid:0B:55:6A:CB:5F:3B:96:1B:5C:C2:4A:29:95:F3:4E:E9:1F:79:DC:16 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/C1Vqy187lhtcwkoplfNO6R953BY.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/6e/829fdf-ba63-4c23-91d1-d2bbf37dabb4/1/C1Vqy187lhtcwkoplfNO6R953BY.mft X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/6e/829fdf-ba63-4c23-91d1-d2bbf37dabb4/1/C1Vqy187lhtcwkoplfNO6R953BY.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 11:89:e5:0c:ba:d3:b5:4d:75:c0:51:d3:50:20:c1:1f:df:41: ef:98:91:c2:3d:00:90:7c:aa:e1:90:dc:f2:d0:fe:fc:24:5b: 72:d0:33:71:cd:f7:6f:ab:4e:77:83:32:54:31:c5:b1:ce:a8: e2:f4:d6:d8:10:73:4d:fd:42:74:84:b0:2e:ac:50:a7:fe:93: ce:66:07:5e:c2:39:1c:43:9f:a0:91:03:5f:29:67:c9:9b:dd: 36:26:f5:c1:06:b4:12:80:fd:e2:21:1b:68:1a:33:e7:e5:8a: 3e:85:b9:20:af:a0:75:91:99:46:2d:56:eb:51:70:34:43:ae: 31:70:87:05:5f:f1:ce:6e:7e:e0:18:a7:c8:a3:11:ee:fd:d2: b6:2c:43:58:76:ff:26:32:20:09:d0:60:b9:45:2b:c0:ac:6b: 1e:5d:0c:b1:4b:5d:56:86:78:eb:c0:a3:66:8a:94:bc:c9:58: b5:07:4d:c6:b8:17:00:0b:f8:e0:3e:91:cc:b3:d9:e8:d7:28: 09:16:62:02:f2:12:13:0d:6e:c9:12:ab:7c:3d:2b:22:3b:f4: 19:fc:d7:40:c7:45:79:5a:0f:8c:fd:0a:31:8d:e9:ae:ca:31: b6:75:d1:ea:3e:7f:27:61:a8:4f:59:71:d9:e5:b2:16:f9:d2: 40:78:80:46 -----BEGIN CERTIFICATE----- MIIFFjCCA/6gAwIBAgISAZn8xoLHURcRTp4bLF3dlRy0MA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKDBiNTU2YWNiNWYzYjk2MWI1Y2MyNGEyOTk1ZjM0ZWU5MWY3 OWRjMTYwHhcNMjUxMDE5MTQwMTMxWhcNMjUxMDIwMTQwMTMxWjAzMTEwLwYDVQQD Eyg0ZTBjMmVjMzRiZWQ0ZTRjMzdkZjg5OTBmYzRiZTQ4NTUxOGQzNWY4MIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAqXWn2sw3VgeQeWMzP2mMcpKeMVWM TMQO7kmLeHkHJEIPVe7/tPz3soTbNBPCjiRG8c0ZzIUjBtslNq5syoZFzq0oCdD4 Cg97q2kEB8mQDgjT610/7lghjhopwOFhLi5bJQLbvCS2isf4BZEbrB4toe5WLzxb LHThF5+UMUj8BzX+MllETMrGgwYAhiduobioZG4tAVQNfF1b1/tY58EMFbuT80xJ RqDVZsxOGwZcRgW6/i1kNWZDngeVVEWptOt5S1Zv+9AKMvyUdsuiGdCxQvOGnPae Yzc2Di8xeN3lkZ8y2LhtZ91VQuvwclN9PDluQI3iSc4ATbkBglIdodgWDQIDAQAB o4ICIjCCAh4wHQYDVR0OBBYEFE4MLsNL7U5MN9+JkPxL5IVRjTX4MB8GA1UdIwQY MBaAFAtVastfO5YbXMJKKZXzTukfedwWMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvQzFWcXkxODdsaHRjd2tvcGxmTk82Ujk1M0JZLmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC82ZS84MjlmZGYtYmE2My00YzIzLTkxZDEt ZDJiYmYzN2RhYmI0LzEvQzFWcXkxODdsaHRjd2tvcGxmTk82Ujk1M0JZLm1mdDCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC82ZS84MjlmZGYtYmE2My00YzIzLTkxZDEtZDJiYmYzN2RhYmI0 LzEvQzFWcXkxODdsaHRjd2tvcGxmTk82Ujk1M0JZLmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAEYnlDLrT tU11wFHTUCDBH99B75iRwj0AkHyq4ZDc8tD+/CRbctAzcc33b6tOd4MyVDHFsc6o 4vTW2BBzTf1CdISwLqxQp/6TzmYHXsI5HEOfoJEDXylnyZvdNib1wQa0EoD94iEb aBoz5+WKPoW5IK+gdZGZRi1W61FwNEOuMXCHBV/xzm5+4BinyKMR7v3StixDWHb/ JjIgCdBguUUrwKxrHl0MsUtdVoZ468CjZoqUvMlYtQdNxrgXAAv44D6RzLPZ6Nco CRZiAvISEw1uyRKrfD0rIjv0GfzXQMdFeVoPjP0KMY3prsoxtnXR6j5/J2GoT1lx 2eWyFvnSQHiARg== -----END CERTIFICATE-----Generated at Sun Oct 19 18:06:55 2025 by rpki-client