$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/71/914d39-3020-4b79-ad26-d87affb8bc61/1/S0BcqrNLv95rjuZsYAhgxs6W8ys.mft File: S0BcqrNLv95rjuZsYAhgxs6W8ys.mft (raw, json) Hash identifier: JZSqojSG2ZQypZFH1pESRaxV4Wm0xsRKq4OL4+9h5pU= Subject key identifier: 86:20:3A:AE:58:C6:EF:71:AA:DA:74:9A:6E:87:FD:B7:2E:33:19:E0 Authority key identifier: 4B:40:5C:AA:B3:4B:BF:DE:6B:8E:E6:6C:60:08:60:C6:CE:96:F3:2B Certificate issuer: /CN=4b405caab34bbfde6b8ee66c600860c6ce96f32b Certificate serial: 0199FC8F22FBC633ACF2E750CF92D711F2E9 Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/S0BcqrNLv95rjuZsYAhgxs6W8ys.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/71/914d39-3020-4b79-ad26-d87affb8bc61/1/S0BcqrNLv95rjuZsYAhgxs6W8ys.mft Manifest number: 16E9 Signing time: Sun 19 Oct 2025 13:01:02 +0000 Manifest this update: Sun 19 Oct 2025 13:01:02 +0000 Manifest next update: Mon 20 Oct 2025 13:01:02 +0000 Files and hashes: 1: 11HD7yYKcpDp91MDnZ2qx4f7DA4.roa (hash: I82O47jamEqwRmGn3/G2hhZ8d3EhBnYIg9JLsYyDdcE=) 2: EVFSBas9Aq_MdNVwUd8bGuaA3Ws.roa (hash: BhtgRPsHAejHOiiDvH3HRPbC4SYTxdKvHTv4FGSpdUs=) 3: EwIzZdJ1IhMaFw8VKQftgylzjgE.roa (hash: TssNiQ/Zpv1pzvYDHFFLNu5wfEVQ4u0fKOIDHY91aqk=) 4: LVgdGGp1BXM3wqsV9OwWixTAngw.roa (hash: yASeozzYpGQSF5fg0wPLHaGxwKLjvcatKKCkqykA4I8=) 5: MJIbLhSmNC8a874fA2nbq57HEtg.roa (hash: WaRYM9CvEVYhUP+ZoiflR5McAGOB5Og+0p9cf3/LEak=) 6: P1A1BXCqCADzQosrk4MwUKPYxTk.roa (hash: LXH4t2ODNhUtfiB03lL7Y51z/AGbNaW0Y11NO+KNqsc=) 7: QHWMs-MZjDSwChSISEL6Gl0q8mw.roa (hash: MTwg/6CPgLRHHoER9F5LK/UDna9Vp7Lok94EKexAIUI=) 8: S0BcqrNLv95rjuZsYAhgxs6W8ys.crl (hash: 746qtLJE3N1Iq1cs3p1QbhrGkMhdTf5khT0l+tOK298=) 9: Xdvj43KnSMHPF5yK-nfEWq4KZoY.roa (hash: 0KUoHz1/LcxNxADlsv04gqLb680zAS0Z8MaiKDomgYY=) 10: foffFzsX_C0XZVackxzc9TT3Ql0.roa (hash: v5tw1DCZvp0dZORs+mozhjde3hmTpwW0Pvc0v2NmjrU=) Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/71/914d39-3020-4b79-ad26-d87affb8bc61/1/S0BcqrNLv95rjuZsYAhgxs6W8ys.crl rsync://rpki.ripe.net/repository/DEFAULT/71/914d39-3020-4b79-ad26-d87affb8bc61/1/S0BcqrNLv95rjuZsYAhgxs6W8ys.mft rsync://rpki.ripe.net/repository/DEFAULT/S0BcqrNLv95rjuZsYAhgxs6W8ys.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Mon 20 Oct 2025 11:18:59 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:99:fc:8f:22:fb:c6:33:ac:f2:e7:50:cf:92:d7:11:f2:e9 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=4b405caab34bbfde6b8ee66c600860c6ce96f32b Validity Not Before: Oct 19 13:01:02 2025 GMT Not After : Oct 20 13:01:02 2025 GMT Subject: CN=86203aae58c6ef71aada749a6e87fdb72e3319e0 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:ba:8f:4a:74:7d:5a:b3:0d:38:58:ed:6d:7a:1e: ab:ca:50:92:b2:69:3b:83:08:6e:0d:ec:d1:29:58: a3:7c:56:8c:35:51:b1:8f:19:d4:29:aa:c2:62:9f: 06:72:b3:2e:ea:b6:ce:2d:6b:57:ef:b4:7b:7b:f8: 30:29:8c:ff:ab:73:28:9b:26:35:97:37:99:d4:5e: 1b:73:e6:9c:23:c5:e0:ff:98:a1:60:12:65:73:ac: ea:7c:e4:08:5b:63:44:0a:03:59:82:af:01:cf:1f: c5:b0:b3:cf:9d:e2:01:2b:ee:5c:87:4e:c8:2a:f7: 6a:46:52:c8:e8:a7:3b:9c:a0:32:ea:a2:a5:29:95: 6f:c9:19:a7:14:73:c5:ee:cb:dd:a5:5b:13:0f:0a: 05:f9:40:89:22:05:da:ca:f6:20:44:eb:57:6f:c5: f4:ec:cd:3d:c0:79:7c:51:09:83:7e:5e:7b:4f:f0: 07:2c:ac:47:99:e6:af:81:6d:dd:fc:4d:2b:48:ef: ba:3b:d8:39:9a:d0:11:36:3e:4d:c1:48:11:f8:75: 34:90:f1:d1:3f:91:d9:59:f4:49:c1:25:f9:58:e1: c2:49:34:22:e6:de:f1:bb:ce:7f:95:8f:90:46:0c: c1:26:23:91:7f:07:a2:e2:79:3c:34:31:e0:93:3c: 6d:41 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 86:20:3A:AE:58:C6:EF:71:AA:DA:74:9A:6E:87:FD:B7:2E:33:19:E0 X509v3 Authority Key Identifier: keyid:4B:40:5C:AA:B3:4B:BF:DE:6B:8E:E6:6C:60:08:60:C6:CE:96:F3:2B X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/S0BcqrNLv95rjuZsYAhgxs6W8ys.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/71/914d39-3020-4b79-ad26-d87affb8bc61/1/S0BcqrNLv95rjuZsYAhgxs6W8ys.mft X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/71/914d39-3020-4b79-ad26-d87affb8bc61/1/S0BcqrNLv95rjuZsYAhgxs6W8ys.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 26:03:aa:7d:e6:8f:7e:a3:64:a1:40:87:d7:17:34:bb:2a:0c: e2:ee:49:f2:48:fb:25:97:9c:a8:c7:56:50:e8:6a:d2:ba:9f: 3f:41:df:d5:b0:b5:14:4b:f8:05:79:f9:70:2c:e0:8b:61:4c: 49:0f:44:ba:a9:a6:8d:e9:e5:54:e3:34:21:46:1f:f1:bd:89: d5:75:0a:00:77:fa:e9:d4:d7:67:4c:a4:bc:8d:3e:52:08:05: 44:b4:b1:0d:b0:27:52:7d:24:9d:a2:f8:ef:94:71:7e:d1:55: fb:d9:01:29:dc:fd:7e:9b:16:ad:d4:01:ca:01:67:5e:42:75: c8:fb:0a:fb:f6:a2:d4:9e:51:72:c5:58:39:09:ef:36:e8:24: 8c:f4:6d:db:71:a9:f8:99:b0:aa:e2:7f:93:83:f6:7e:e5:0c: 04:db:4c:c3:84:48:5b:fe:72:11:6f:da:09:74:15:2d:4f:b5: b7:e7:3d:78:57:ce:e1:46:d7:68:ce:57:cf:e5:16:a0:f3:1b: 21:71:7a:b9:57:06:37:dd:95:79:bc:74:74:1e:dc:a9:9e:4c: 9f:77:41:9b:42:41:b0:83:47:53:6d:f2:c8:18:d6:e4:75:78: 77:f2:f7:07:15:8f:0a:d4:ce:8c:34:a7:66:40:14:86:b6:b2: 24:67:41:ea -----BEGIN CERTIFICATE----- MIIFFjCCA/6gAwIBAgISAZn8jyL7xjOs8udQz5LXEfLpMA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKDRiNDA1Y2FhYjM0YmJmZGU2YjhlZTY2YzYwMDg2MGM2Y2U5 NmYzMmIwHhcNMjUxMDE5MTMwMTAyWhcNMjUxMDIwMTMwMTAyWjAzMTEwLwYDVQQD Eyg4NjIwM2FhZTU4YzZlZjcxYWFkYTc0OWE2ZTg3ZmRiNzJlMzMxOWUwMIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAuo9KdH1asw04WO1teh6rylCSsmk7 gwhuDezRKVijfFaMNVGxjxnUKarCYp8GcrMu6rbOLWtX77R7e/gwKYz/q3MomyY1 lzeZ1F4bc+acI8Xg/5ihYBJlc6zqfOQIW2NECgNZgq8Bzx/FsLPPneIBK+5ch07I KvdqRlLI6Kc7nKAy6qKlKZVvyRmnFHPF7svdpVsTDwoF+UCJIgXayvYgROtXb8X0 7M09wHl8UQmDfl57T/AHLKxHmeavgW3d/E0rSO+6O9g5mtARNj5NwUgR+HU0kPHR P5HZWfRJwSX5WOHCSTQi5t7xu85/lY+QRgzBJiORfwei4nk8NDHgkzxtQQIDAQAB o4ICIjCCAh4wHQYDVR0OBBYEFIYgOq5Yxu9xqtp0mm6H/bcuMxngMB8GA1UdIwQY MBaAFEtAXKqzS7/ea47mbGAIYMbOlvMrMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvUzBCY3FyTkx2OTVyanVac1lBaGd4czZXOHlzLmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC83MS85MTRkMzktMzAyMC00Yjc5LWFkMjYt ZDg3YWZmYjhiYzYxLzEvUzBCY3FyTkx2OTVyanVac1lBaGd4czZXOHlzLm1mdDCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC83MS85MTRkMzktMzAyMC00Yjc5LWFkMjYtZDg3YWZmYjhiYzYx LzEvUzBCY3FyTkx2OTVyanVac1lBaGd4czZXOHlzLmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAJgOqfeaP fqNkoUCH1xc0uyoM4u5J8kj7JZecqMdWUOhq0rqfP0Hf1bC1FEv4BXn5cCzgi2FM SQ9EuqmmjenlVOM0IUYf8b2J1XUKAHf66dTXZ0ykvI0+UggFRLSxDbAnUn0knaL4 75RxftFV+9kBKdz9fpsWrdQBygFnXkJ1yPsK+/ai1J5RcsVYOQnvNugkjPRt23Gp +JmwquJ/k4P2fuUMBNtMw4RIW/5yEW/aCXQVLU+1t+c9eFfO4UbXaM5Xz+UWoPMb IXF6uVcGN92Vebx0dB7cqZ5Mn3dBm0JBsINHU23yyBjW5HV4d/L3BxWPCtTOjDSn ZkAUhrayJGdB6g== -----END CERTIFICATE-----Generated at Sun Oct 19 18:23:49 2025 by rpki-client