$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/70/5edf7a-ab9a-45e7-a612-d169c088b412/1/EbabWdGfKYfknxhS1guxd3-AowE.mft File: EbabWdGfKYfknxhS1guxd3-AowE.mft (raw, json) Hash identifier: M1dLqScxW0GUD6tZuhPW63DQA/y8d8jq/mxSG/EoeqE= Subject key identifier: 11:39:BC:49:1E:91:85:B4:CE:5E:77:D4:F9:11:D6:54:A1:22:6A:D7 Authority key identifier: 11:B6:9B:59:D1:9F:29:87:E4:9F:18:52:D6:0B:B1:77:7F:80:A3:01 Certificate issuer: /CN=11b69b59d19f2987e49f1852d60bb1777f80a301 Certificate serial: 0199FE0FFDC737D304C04CE0DE0FDB4DA1BC Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/EbabWdGfKYfknxhS1guxd3-AowE.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/70/5edf7a-ab9a-45e7-a612-d169c088b412/1/EbabWdGfKYfknxhS1guxd3-AowE.mft Manifest number: 17C4 Signing time: Sun 19 Oct 2025 20:01:24 +0000 Manifest this update: Sun 19 Oct 2025 20:01:24 +0000 Manifest next update: Mon 20 Oct 2025 20:01:24 +0000 Files and hashes: 1: 1--WDAhFOBW7ncSoM8jfxu_x_aPA.roa (hash: 5hRd7iHG9OvxZkn9587WnUFx5p+RxhyhidWTwSlJ2mE=) 2: 4qKtq5VyVr4i6mCaCCL3IEDl3u0.roa (hash: n8ZWKxQJZb9Dr8bci1Ig4La7cUpMPW5gwdYW9MK9KNg=) 3: 9de0VEdjbWo-tUqmz8gijTg6IaE.roa (hash: f2qUpX3qXVm+Q2CbUSag5dNIyDCVc83yVIgmgfZphx0=) 4: EbabWdGfKYfknxhS1guxd3-AowE.crl (hash: AutJs/9d9OglZ2vE1QyRW553wySNxrtJs6bWF4ISX5A=) 5: EiEIQCc_qMer4lOJnSDqRcuD1Lc.roa (hash: ijZabFruWckgrMPN8StTP6ptBpbQ5XdRowFLqAhy8V0=) 6: JIWcXiw5e-DMCtEQjl82_rCum6M.roa (hash: aum4OzbjHbjDqqRbPTuypoabo0V5INMyV5rJ/7+2kJk=) 7: LYyCN6bVAxrdAqssFsaMooA1cyM.roa (hash: fh0Q/owkGARNWJl/Qfv1E3Qz9twiN5rLdddCKNO0Ak8=) 8: hh5gFEvny7iJIP363sERSCjh-rs.roa (hash: nHmDgAhsTOhkwPJGUNXsbu1PrrGNS0xivvoOwxQO9Og=) 9: ke7Pxta8VpaoIZehaqEkUOxJVjY.roa (hash: /w8HaARGeZYUDrzIiinqB3uzBNqHoroNWtdxiuibk3g=) 10: m_tlWUOIWaF4O_mjcwdztas9rOo.roa (hash: V1xrpreGZsh6JQHtnWjxR2Gdbl7SWoTT5ac0JiggNfw=) 11: mpiw9JhQM7LKtUVCRbcJs0dukrY.roa (hash: 6u6djeisAdzHv9sPzUqJK6BMNgw7cN5OEZXaoLYZmKY=) 12: pJ5WVqz27sc4GN_2TdiId1RFRS8.roa (hash: G9CNm7jTF73M1GlxFCdHMqAq+/05g/o+kvhEPuf5Cdo=) 13: pgY7a6E6tgPcuDGaJ9In9AClvQU.roa (hash: LI5gLLz864YQ5E9OGWp9/KKXRdmX9ZlNd6zL73F9k74=) Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/70/5edf7a-ab9a-45e7-a612-d169c088b412/1/EbabWdGfKYfknxhS1guxd3-AowE.crl rsync://rpki.ripe.net/repository/DEFAULT/70/5edf7a-ab9a-45e7-a612-d169c088b412/1/EbabWdGfKYfknxhS1guxd3-AowE.mft rsync://rpki.ripe.net/repository/DEFAULT/EbabWdGfKYfknxhS1guxd3-AowE.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Mon 20 Oct 2025 15:00:58 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:99:fe:0f:fd:c7:37:d3:04:c0:4c:e0:de:0f:db:4d:a1:bc Signature Algorithm: sha256WithRSAEncryption Issuer: CN=11b69b59d19f2987e49f1852d60bb1777f80a301 Validity Not Before: Oct 19 20:01:24 2025 GMT Not After : Oct 20 20:01:24 2025 GMT Subject: CN=1139bc491e9185b4ce5e77d4f911d654a1226ad7 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:a9:34:e8:6f:68:d3:e4:2d:4c:23:dc:27:fb:6d: 56:25:72:f3:74:e2:c4:e5:4b:0b:8e:8e:05:ab:e8: 15:d7:ef:66:90:6d:1f:2a:44:27:60:f3:0f:26:60: 94:6d:9c:52:d7:8d:18:af:ea:1b:a6:bd:11:ee:0d: 80:50:6f:8a:1d:49:95:4b:00:70:16:a0:a5:7b:f0: 26:cd:87:75:0b:b7:bb:98:16:e8:2c:7f:55:88:90: 72:2f:dd:c1:97:7c:fa:95:25:c1:ec:af:a1:69:82: 6b:cc:31:1f:ce:a8:0b:2f:54:80:73:7a:5f:78:71: 5d:41:98:69:bd:f9:2e:79:74:cc:ad:9b:ca:f8:3e: d3:b6:22:da:a1:de:91:a6:d7:1d:fc:c8:35:2d:6e: 89:3f:7c:28:b6:f1:f5:78:c8:86:f8:67:1d:1b:cb: 9e:30:21:07:05:63:ff:95:41:ea:5d:0a:b2:80:db: 28:ee:d5:16:ee:8d:02:fb:44:da:ca:c7:e8:81:91: 5e:d1:d0:60:21:8f:54:94:24:10:44:f7:e5:ab:5c: 14:14:15:93:8c:12:88:81:30:a5:7c:e1:f4:0c:3d: 06:ef:bd:f8:e9:6e:4c:a7:27:ab:ca:a8:a2:78:58: d0:c8:de:e0:03:67:0f:11:f4:c4:0d:c0:d9:32:4b: 1b:eb Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 11:39:BC:49:1E:91:85:B4:CE:5E:77:D4:F9:11:D6:54:A1:22:6A:D7 X509v3 Authority Key Identifier: keyid:11:B6:9B:59:D1:9F:29:87:E4:9F:18:52:D6:0B:B1:77:7F:80:A3:01 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/EbabWdGfKYfknxhS1guxd3-AowE.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/70/5edf7a-ab9a-45e7-a612-d169c088b412/1/EbabWdGfKYfknxhS1guxd3-AowE.mft X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/70/5edf7a-ab9a-45e7-a612-d169c088b412/1/EbabWdGfKYfknxhS1guxd3-AowE.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 71:68:49:0c:84:23:5d:8c:06:01:b4:1c:6a:d6:8d:12:16:c1: eb:1c:7f:fd:fe:53:f2:e4:ec:93:d1:7c:be:b5:9c:f1:26:94: 93:9a:48:fc:20:57:a9:bf:7f:ab:f5:f8:d4:4d:2e:ec:24:bf: 89:b3:43:ae:02:62:f3:ef:39:b5:1b:57:7c:92:51:82:47:8f: 3e:36:d3:7c:ca:93:3f:c6:65:91:38:0b:38:b1:c3:2a:74:f7: a7:9e:f8:b1:ed:b4:1c:ec:45:12:0d:aa:81:98:1e:ca:6e:7e: 68:41:ad:fc:dc:51:b4:dc:94:6b:02:23:d0:3a:1a:20:ff:8c: d0:59:e9:4e:65:ab:6e:e3:4d:e7:6e:16:c9:fe:9e:7b:24:f0: 0b:a7:57:0a:63:82:14:e1:31:e1:59:4b:58:81:3a:e0:93:c5: b5:28:36:ec:8f:f5:75:30:5d:01:2b:83:ed:1c:b0:72:27:c6: 96:d7:f7:f0:a8:89:a4:86:83:3d:ee:33:e6:4f:0e:fb:04:a1: 14:31:b3:f9:2a:bd:56:37:80:71:c4:c4:59:78:ab:d0:9d:ec: 2b:c0:28:b1:f3:6d:e1:12:a7:ff:89:c5:78:e0:c0:26:8f:83: 5a:c0:49:81:08:34:42:7d:62:19:45:63:58:02:c9:24:9e:71: 3a:b7:41:22 -----BEGIN CERTIFICATE----- MIIFFjCCA/6gAwIBAgISAZn+D/3HN9MEwEzg3g/bTaG8MA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKDExYjY5YjU5ZDE5ZjI5ODdlNDlmMTg1MmQ2MGJiMTc3N2Y4 MGEzMDEwHhcNMjUxMDE5MjAwMTI0WhcNMjUxMDIwMjAwMTI0WjAzMTEwLwYDVQQD EygxMTM5YmM0OTFlOTE4NWI0Y2U1ZTc3ZDRmOTExZDY1NGExMjI2YWQ3MIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAqTTob2jT5C1MI9wn+21WJXLzdOLE 5UsLjo4Fq+gV1+9mkG0fKkQnYPMPJmCUbZxS140Yr+obpr0R7g2AUG+KHUmVSwBw FqCle/AmzYd1C7e7mBboLH9ViJByL93Bl3z6lSXB7K+haYJrzDEfzqgLL1SAc3pf eHFdQZhpvfkueXTMrZvK+D7TtiLaod6Rptcd/Mg1LW6JP3wotvH1eMiG+GcdG8ue MCEHBWP/lUHqXQqygNso7tUW7o0C+0TaysfogZFe0dBgIY9UlCQQRPflq1wUFBWT jBKIgTClfOH0DD0G77346W5MpyeryqiieFjQyN7gA2cPEfTEDcDZMksb6wIDAQAB o4ICIjCCAh4wHQYDVR0OBBYEFBE5vEkekYW0zl531PkR1lShImrXMB8GA1UdIwQY MBaAFBG2m1nRnymH5J8YUtYLsXd/gKMBMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvRWJhYldkR2ZLWWZrbnhoUzFndXhkMy1Bb3dFLmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC83MC81ZWRmN2EtYWI5YS00NWU3LWE2MTIt ZDE2OWMwODhiNDEyLzEvRWJhYldkR2ZLWWZrbnhoUzFndXhkMy1Bb3dFLm1mdDCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC83MC81ZWRmN2EtYWI5YS00NWU3LWE2MTItZDE2OWMwODhiNDEy LzEvRWJhYldkR2ZLWWZrbnhoUzFndXhkMy1Bb3dFLmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAcWhJDIQj XYwGAbQcataNEhbB6xx//f5T8uTsk9F8vrWc8SaUk5pI/CBXqb9/q/X41E0u7CS/ ibNDrgJi8+85tRtXfJJRgkePPjbTfMqTP8ZlkTgLOLHDKnT3p574se20HOxFEg2q gZgeym5+aEGt/NxRtNyUawIj0DoaIP+M0FnpTmWrbuNN524Wyf6eeyTwC6dXCmOC FOEx4VlLWIE64JPFtSg27I/1dTBdASuD7RywcifGltf38KiJpIaDPe4z5k8O+wSh FDGz+Sq9VjeAccTEWXir0J3sK8AosfNt4RKn/4nFeODAJo+DWsBJgQg0Qn1iGUVj WALJJJ5xOrdBIg== -----END CERTIFICATE-----Generated at Mon Oct 20 00:01:12 2025 by rpki-client