$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/71/ac017c-ff29-43cf-a3d6-29f1beb2f282/1/7W2p5BaG0hwSeZyOhLJ0qoJBUIw.mft File: 7W2p5BaG0hwSeZyOhLJ0qoJBUIw.mft (raw, json) Hash identifier: jpE3P8AtdKZYBF2n8AKVs1VrYoV/NCR+nMZvEHre/Pw= Subject key identifier: 89:28:1B:2E:AE:7E:7A:D8:7D:EA:5A:5D:F3:97:95:F3:B0:1C:55:05 Authority key identifier: ED:6D:A9:E4:16:86:D2:1C:12:79:9C:8E:84:B2:74:AA:82:41:50:8C Certificate issuer: /CN=ed6da9e41686d21c12799c8e84b274aa8241508c Certificate serial: 0199FC8F266C2D5FDEEA59C3B8C230E38951 Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/7W2p5BaG0hwSeZyOhLJ0qoJBUIw.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/71/ac017c-ff29-43cf-a3d6-29f1beb2f282/1/7W2p5BaG0hwSeZyOhLJ0qoJBUIw.mft Manifest number: 16F3 Signing time: Sun 19 Oct 2025 13:01:03 +0000 Manifest this update: Sun 19 Oct 2025 13:01:03 +0000 Manifest next update: Mon 20 Oct 2025 13:01:03 +0000 Files and hashes: 1: 3mF0o8ObxMG1vPes91bWbw0tnsA.roa (hash: UJhMkfjPft/QeBcE4Z26qo9FCGStMKR3bjVpARVrtgI=) 2: 4Kx-vHuWGicyF3SMrQ7KSs4yNdM.roa (hash: /Y71/tOsnj44V3PPOqV8jyNAecsoDys+kyFhb/Na/TY=) 3: 7W2p5BaG0hwSeZyOhLJ0qoJBUIw.crl (hash: VeDAk2nKJbb7JpT2KWaOrnLkcd4+iuhrM1zfp+G40b8=) 4: DnWgBwSyPonu4ANiqDXcSFS5Sss.roa (hash: l2btTGNwK1K4Uvs9UU8E5RV5U3WcxEKUPo27wW3zozU=) 5: Kwj4i4rNyzJUOvELNWnXH3R-jw4.roa (hash: FGt3z3IlUQQX3L4JhYd4ue2NJONgSL3qDjZtT83LgI4=) 6: YMGBAXPMmaM-UVPjn2WwHTw99Dg.roa (hash: sho3Yzk1N5vFpwylHlhAFYtjqhBGr18UkAS7r1nBk5k=) 7: Zvza_AEVzZujcB3uf3ENKXzKqQM.roa (hash: 57giD/GidN1QIt0FbCVf8xCexXWHCYg5Vqj76NoF+sc=) 8: _ERs_WqsyKBsbDNrpF7678MzuE8.roa (hash: x/e8FoqvrkwlrxEHgqowJDwm2nzTqRfGs9L2jLZX1F0=) 9: mCecvopZfXG3WIu7Fhw-f_4DPAk.roa (hash: MecNKHL4HsnfTECbSBEtAo1C5aYtC+yZbiahatmHpI0=) 10: tkwaNKS943lqIrcwP4wFPu7CmLA.roa (hash: LUFlc4a0Hl1DhNUuKnQE9p25tD0hoETIl0Xrym01FDA=) 11: xiXR5CA0LknEtnJqptzk0g7U8nI.roa (hash: hnOXUmiCqjx6p2C6Uol9CSOlJTYzXWkQvpMB/lW+MX8=) Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/71/ac017c-ff29-43cf-a3d6-29f1beb2f282/1/7W2p5BaG0hwSeZyOhLJ0qoJBUIw.crl rsync://rpki.ripe.net/repository/DEFAULT/71/ac017c-ff29-43cf-a3d6-29f1beb2f282/1/7W2p5BaG0hwSeZyOhLJ0qoJBUIw.mft rsync://rpki.ripe.net/repository/DEFAULT/7W2p5BaG0hwSeZyOhLJ0qoJBUIw.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Mon 20 Oct 2025 06:00:58 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:99:fc:8f:26:6c:2d:5f:de:ea:59:c3:b8:c2:30:e3:89:51 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=ed6da9e41686d21c12799c8e84b274aa8241508c Validity Not Before: Oct 19 13:01:03 2025 GMT Not After : Oct 20 13:01:03 2025 GMT Subject: CN=89281b2eae7e7ad87dea5a5df39795f3b01c5505 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:b0:b7:b2:05:56:2e:76:4b:9a:7c:9e:90:ea:df: 88:d7:6a:e6:64:c3:ef:ad:14:d9:8e:3b:20:ff:b9: 46:fc:f5:94:38:aa:a4:8a:61:48:ec:06:b6:aa:33: 07:8d:10:db:9d:df:54:71:24:34:bb:74:bc:a7:63: f0:10:8d:ee:d2:df:17:3f:be:8e:57:ae:d7:f9:be: ac:18:f9:f2:27:c8:bb:22:aa:ef:f3:c4:58:c4:13: f6:97:a3:25:67:f9:19:5c:29:f6:d9:72:9a:67:93: 52:97:ce:a2:41:91:8e:ac:73:04:48:c9:60:29:cf: a4:e3:7c:fb:b5:93:ac:15:69:e9:9c:c1:95:15:87: fe:a9:b9:33:13:de:46:56:fe:68:61:6c:20:be:e5: 7d:83:ad:0c:b4:8c:a5:ba:e5:5d:a2:21:7f:12:1e: 98:92:e4:9e:f3:a7:a2:48:46:f5:9e:17:ef:fe:0f: f8:23:fb:f6:cd:3f:8e:e9:63:74:02:b6:50:8b:a8: c1:d6:66:ce:cf:9b:ea:ec:5f:c1:23:d7:ef:d8:75: c7:9f:f3:97:77:c3:b1:42:9e:09:f6:86:49:fe:3e: 77:57:66:4a:1d:73:17:19:57:31:55:df:cf:e6:dd: 01:7f:90:7a:aa:22:a3:46:fd:7c:21:de:5d:b4:9c: e9:f7 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 89:28:1B:2E:AE:7E:7A:D8:7D:EA:5A:5D:F3:97:95:F3:B0:1C:55:05 X509v3 Authority Key Identifier: keyid:ED:6D:A9:E4:16:86:D2:1C:12:79:9C:8E:84:B2:74:AA:82:41:50:8C X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/7W2p5BaG0hwSeZyOhLJ0qoJBUIw.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/71/ac017c-ff29-43cf-a3d6-29f1beb2f282/1/7W2p5BaG0hwSeZyOhLJ0qoJBUIw.mft X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/71/ac017c-ff29-43cf-a3d6-29f1beb2f282/1/7W2p5BaG0hwSeZyOhLJ0qoJBUIw.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 5f:a4:ad:93:0f:ed:db:6b:eb:93:6c:fa:49:77:80:a4:c1:16: e4:22:84:36:bf:7c:9c:b5:81:a7:2b:1f:56:57:c3:09:5f:3c: e1:d2:c8:f8:f0:93:54:35:ca:34:a8:de:46:f6:82:63:60:fc: 6d:1b:e3:ba:7d:7a:d8:bd:96:ce:b4:8d:68:bb:32:f7:1d:17: 2d:1e:c6:72:8f:35:60:c7:e1:c9:a4:ff:45:2c:b0:13:be:a4: bd:67:34:39:22:70:b0:eb:5f:de:cd:b2:2b:61:01:73:42:0b: cc:cc:46:b6:d9:43:4a:e7:2a:51:7b:a7:cc:41:fc:eb:d7:6d: b7:87:b0:c5:01:c7:f4:fe:10:56:ec:84:12:97:58:b3:06:1a: 41:6b:16:90:d9:50:3d:5f:73:c9:1a:39:70:40:8c:37:51:06: 07:ee:8b:7a:8f:ba:5a:a9:fe:e0:ff:e2:ba:56:7a:1f:b9:0c: 6e:4f:17:2a:c5:81:d8:19:bd:5f:f5:64:7a:dd:68:66:91:40: fb:67:65:17:60:d4:e6:a3:d4:0e:98:ef:24:3c:06:9e:61:0c: e2:2d:bc:d6:ef:ed:77:fb:93:e7:a0:30:37:0a:c3:86:2e:17: 98:6a:52:73:20:51:5b:73:2c:31:12:fd:32:64:c4:8f:0b:a5: c5:f4:f8:eb -----BEGIN CERTIFICATE----- MIIFFjCCA/6gAwIBAgISAZn8jyZsLV/e6lnDuMIw44lRMA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKGVkNmRhOWU0MTY4NmQyMWMxMjc5OWM4ZTg0YjI3NGFhODI0 MTUwOGMwHhcNMjUxMDE5MTMwMTAzWhcNMjUxMDIwMTMwMTAzWjAzMTEwLwYDVQQD Eyg4OTI4MWIyZWFlN2U3YWQ4N2RlYTVhNWRmMzk3OTVmM2IwMWM1NTA1MIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAsLeyBVYudkuafJ6Q6t+I12rmZMPv rRTZjjsg/7lG/PWUOKqkimFI7Aa2qjMHjRDbnd9UcSQ0u3S8p2PwEI3u0t8XP76O V67X+b6sGPnyJ8i7Iqrv88RYxBP2l6MlZ/kZXCn22XKaZ5NSl86iQZGOrHMESMlg Kc+k43z7tZOsFWnpnMGVFYf+qbkzE95GVv5oYWwgvuV9g60MtIyluuVdoiF/Eh6Y kuSe86eiSEb1nhfv/g/4I/v2zT+O6WN0ArZQi6jB1mbOz5vq7F/BI9fv2HXHn/OX d8OxQp4J9oZJ/j53V2ZKHXMXGVcxVd/P5t0Bf5B6qiKjRv18Id5dtJzp9wIDAQAB o4ICIjCCAh4wHQYDVR0OBBYEFIkoGy6ufnrYfepaXfOXlfOwHFUFMB8GA1UdIwQY MBaAFO1tqeQWhtIcEnmcjoSydKqCQVCMMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvN1cycDVCYUcwaHdTZVp5T2hMSjBxb0pCVUl3LmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC83MS9hYzAxN2MtZmYyOS00M2NmLWEzZDYt MjlmMWJlYjJmMjgyLzEvN1cycDVCYUcwaHdTZVp5T2hMSjBxb0pCVUl3Lm1mdDCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC83MS9hYzAxN2MtZmYyOS00M2NmLWEzZDYtMjlmMWJlYjJmMjgy LzEvN1cycDVCYUcwaHdTZVp5T2hMSjBxb0pCVUl3LmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAX6Stkw/t 22vrk2z6SXeApMEW5CKENr98nLWBpysfVlfDCV884dLI+PCTVDXKNKjeRvaCY2D8 bRvjun162L2WzrSNaLsy9x0XLR7Gco81YMfhyaT/RSywE76kvWc0OSJwsOtf3s2y K2EBc0ILzMxGttlDSucqUXunzEH869dtt4ewxQHH9P4QVuyEEpdYswYaQWsWkNlQ PV9zyRo5cECMN1EGB+6Leo+6Wqn+4P/iulZ6H7kMbk8XKsWB2Bm9X/Vket1oZpFA +2dlF2DU5qPUDpjvJDwGnmEM4i281u/td/uT56AwNwrDhi4XmGpScyBRW3MsMRL9 MmTEjwulxfT46w== -----END CERTIFICATE-----Generated at Sun Oct 19 15:18:58 2025 by rpki-client