$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/75/a1ae70-7996-4687-a0d7-5e0f4ab809bb/1/dD5EftuKXg4bHX9c3Ch8NkpfsLU.mft File: dD5EftuKXg4bHX9c3Ch8NkpfsLU.mft (raw, json) Hash identifier: 7JxoQ+ySoKSasbMhkwrRQooe8oN91CMCueUpp00nBYs= Subject key identifier: D0:2F:FE:05:39:97:FB:DC:9B:0D:A4:78:A2:BF:7E:83:52:40:3C:30 Authority key identifier: 74:3E:44:7E:DB:8A:5E:0E:1B:1D:7F:5C:DC:28:7C:36:4A:5F:B0:B5 Certificate issuer: /CN=743e447edb8a5e0e1b1d7f5cdc287c364a5fb0b5 Certificate serial: 0199FEB517FA61A8D0A5EBED966C735A9A50 Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/dD5EftuKXg4bHX9c3Ch8NkpfsLU.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/75/a1ae70-7996-4687-a0d7-5e0f4ab809bb/1/dD5EftuKXg4bHX9c3Ch8NkpfsLU.mft Manifest number: 1452 Signing time: Sun 19 Oct 2025 23:01:44 +0000 Manifest this update: Sun 19 Oct 2025 23:01:44 +0000 Manifest next update: Mon 20 Oct 2025 23:01:44 +0000 Files and hashes: 1: 3CaVGaLlRCBtJGBXfSGA7zW-rCs.roa (hash: /HyApflaldYM3wui8EYCuzUIG18+LCBycHK+Nr4v5s8=) 2: DK3tbQCBnJzEUSphxlbPexSxuSc.roa (hash: oy+VYg7xPVfsl+GWes1fmQYw3lo7t6n2do65fz6s9kA=) 3: F3KiiuTmtSL0XadHjHoQhTxAjH4.roa (hash: DWttmKkJnsIWb4tK0mLgOer/tZtQK2/fxxZHdJXXFak=) 4: M8l7pbK1m9EtbYQB0XFpZb7IbwY.roa (hash: eslpNhlfUyI1j7Yq81Ny5UVDGoF4QOI7V1IgSfchCsk=) 5: MgiKwN-5ay_SX7gBV14IpwObPpc.roa (hash: ZZYOOJcwsP5G4b73NL4Ryq/ZDk5dWzEXKQetkfj+MUE=) 6: _urUnPm3dxe0dhHO4I67DMxNM8w.roa (hash: peMugiexGfIHSWdQB0rJ+olLWcWf0//IWy/3iCQCuZI=) 7: dD5EftuKXg4bHX9c3Ch8NkpfsLU.crl (hash: rZ4VTlV1g9CIXsPj/NIss2Ub3aP85wH/1i0T2eFbszc=) 8: hQB2r9gTIbHW15huYRlUIXpesE0.roa (hash: csnzwT6/c2mdObYLNEDgkBjX2FKvNM2ZYq0WnVUdcOk=) 9: kSpuRGxO_iNcJfkapdieZEQ9Gzw.roa (hash: 91LnZ3BDnBwvzNsiz95IDFu3DO+o+HcnWci0jcIsOmg=) 10: mOjdcIu2BlDS20XDZ7cdmtuYdO0.roa (hash: KiJxzqYwZVngrheebaPLTly7mDpF6/pmTDX4Y/LyHCY=) 11: mvjla0bo-b4smMyT4MbECv-Xg3g.roa (hash: Vqa7w/SLiL/4k4HQ/RKtBsHmvexhX5wGtbX9qiUFZ2c=) 12: qBT7a5CpMfyvurJ2SX8QUT0oraU.roa (hash: hc2fg3T7W+eYu2lwU1oNlfPn3yPiUOsKzcmNvDQBw90=) Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/75/a1ae70-7996-4687-a0d7-5e0f4ab809bb/1/dD5EftuKXg4bHX9c3Ch8NkpfsLU.crl rsync://rpki.ripe.net/repository/DEFAULT/75/a1ae70-7996-4687-a0d7-5e0f4ab809bb/1/dD5EftuKXg4bHX9c3Ch8NkpfsLU.mft rsync://rpki.ripe.net/repository/DEFAULT/dD5EftuKXg4bHX9c3Ch8NkpfsLU.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Mon 20 Oct 2025 20:00:59 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:99:fe:b5:17:fa:61:a8:d0:a5:eb:ed:96:6c:73:5a:9a:50 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=743e447edb8a5e0e1b1d7f5cdc287c364a5fb0b5 Validity Not Before: Oct 19 23:01:44 2025 GMT Not After : Oct 20 23:01:44 2025 GMT Subject: CN=d02ffe053997fbdc9b0da478a2bf7e8352403c30 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:a8:95:16:a0:cc:53:81:d9:3c:28:d9:2d:2f:da: 75:b3:ad:e6:cf:ae:76:49:be:d7:3f:de:a7:56:40: 62:64:4f:bb:eb:8a:ae:a6:3e:00:94:3e:d1:59:e7: cd:11:d4:a2:ed:13:e9:c9:a9:95:b1:01:6e:aa:89: de:9b:26:21:63:8d:59:f2:5c:97:e7:a3:0e:a5:89: 7f:9f:51:90:17:4a:34:1a:4d:bf:71:65:5d:52:30: ec:11:c6:81:cd:a9:aa:18:52:42:50:b0:1d:d4:c6: 21:0c:1c:74:89:2c:14:59:51:e7:40:3f:69:bb:ce: 4c:b8:71:ed:b7:61:87:00:6d:0b:13:89:19:86:32: bd:5b:4a:53:63:28:24:eb:04:33:49:ef:d2:46:dd: 0a:0e:a5:8b:26:42:84:5a:2b:b5:87:98:59:47:76: 76:f9:6c:5c:3a:30:5c:b0:b3:48:6e:36:a0:2e:c1: 9f:28:e9:25:95:96:c4:69:00:d9:3c:84:f2:46:c4: 22:3d:ec:1b:3c:f5:9d:e4:87:ea:d2:68:54:b5:f4: dd:4d:45:dd:e1:e4:57:82:1c:f9:3e:53:24:22:c0: 4a:c5:64:ee:f3:be:01:74:db:d9:4e:28:3e:df:e6: a2:5b:58:52:23:df:6b:cf:fb:a2:5f:92:a1:21:f0: 75:15 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: D0:2F:FE:05:39:97:FB:DC:9B:0D:A4:78:A2:BF:7E:83:52:40:3C:30 X509v3 Authority Key Identifier: keyid:74:3E:44:7E:DB:8A:5E:0E:1B:1D:7F:5C:DC:28:7C:36:4A:5F:B0:B5 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/dD5EftuKXg4bHX9c3Ch8NkpfsLU.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/75/a1ae70-7996-4687-a0d7-5e0f4ab809bb/1/dD5EftuKXg4bHX9c3Ch8NkpfsLU.mft X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/75/a1ae70-7996-4687-a0d7-5e0f4ab809bb/1/dD5EftuKXg4bHX9c3Ch8NkpfsLU.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 8d:d2:62:0f:05:54:71:b9:92:e0:28:62:7d:72:4f:81:69:49: 67:53:ea:66:6c:ef:ea:e9:95:92:06:be:c0:89:12:18:c8:81: 2a:11:3c:7b:06:7a:e0:ef:8f:da:98:5b:f8:3a:fc:3d:3f:6e: 4f:a6:91:bb:57:a5:91:d0:43:4f:b4:41:9f:d5:1c:55:28:1e: 53:2a:e9:94:45:e6:77:31:69:8f:fe:52:72:80:ea:0a:92:f8: dc:0a:3a:f1:1d:2b:9e:15:79:31:81:78:e7:51:1b:c6:71:84: 97:fd:8b:98:0b:49:c0:c8:ac:a2:01:1c:dc:d7:cd:7d:81:cb: 9b:a8:2a:6c:95:03:11:d3:0a:5f:77:5b:62:84:d9:44:4d:40: 91:51:30:e1:f4:51:0a:db:19:a1:7a:ef:7f:ea:0c:f3:c2:1d: d0:18:74:01:df:d5:5f:02:fe:bd:70:ae:94:9c:2a:4f:0a:e1: 7e:54:18:20:1f:06:b8:f6:bf:11:7c:82:e1:3f:60:78:bb:55: b4:31:d0:0a:3d:b4:66:7b:48:d0:e3:3a:68:49:a2:c4:20:dd: 14:f3:34:27:62:2f:9f:31:a8:01:73:88:17:27:f8:3a:3e:3d: 33:e4:61:57:69:8f:b5:48:c6:d2:af:20:6c:08:91:7e:34:7f: c9:3b:ec:9c -----BEGIN CERTIFICATE----- MIIFFjCCA/6gAwIBAgISAZn+tRf6YajQpevtlmxzWppQMA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKDc0M2U0NDdlZGI4YTVlMGUxYjFkN2Y1Y2RjMjg3YzM2NGE1 ZmIwYjUwHhcNMjUxMDE5MjMwMTQ0WhcNMjUxMDIwMjMwMTQ0WjAzMTEwLwYDVQQD EyhkMDJmZmUwNTM5OTdmYmRjOWIwZGE0NzhhMmJmN2U4MzUyNDAzYzMwMIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAqJUWoMxTgdk8KNktL9p1s63mz652 Sb7XP96nVkBiZE+764qupj4AlD7RWefNEdSi7RPpyamVsQFuqonemyYhY41Z8lyX 56MOpYl/n1GQF0o0Gk2/cWVdUjDsEcaBzamqGFJCULAd1MYhDBx0iSwUWVHnQD9p u85MuHHtt2GHAG0LE4kZhjK9W0pTYygk6wQzSe/SRt0KDqWLJkKEWiu1h5hZR3Z2 +WxcOjBcsLNIbjagLsGfKOkllZbEaQDZPITyRsQiPewbPPWd5Ifq0mhUtfTdTUXd 4eRXghz5PlMkIsBKxWTu874BdNvZTig+3+aiW1hSI99rz/uiX5KhIfB1FQIDAQAB o4ICIjCCAh4wHQYDVR0OBBYEFNAv/gU5l/vcmw2keKK/foNSQDwwMB8GA1UdIwQY MBaAFHQ+RH7bil4OGx1/XNwofDZKX7C1MA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvZEQ1RWZ0dUtYZzRiSFg5YzNDaDhOa3Bmc0xVLmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC83NS9hMWFlNzAtNzk5Ni00Njg3LWEwZDct NWUwZjRhYjgwOWJiLzEvZEQ1RWZ0dUtYZzRiSFg5YzNDaDhOa3Bmc0xVLm1mdDCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC83NS9hMWFlNzAtNzk5Ni00Njg3LWEwZDctNWUwZjRhYjgwOWJi LzEvZEQ1RWZ0dUtYZzRiSFg5YzNDaDhOa3Bmc0xVLmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAjdJiDwVU cbmS4ChifXJPgWlJZ1PqZmzv6umVkga+wIkSGMiBKhE8ewZ64O+P2phb+Dr8PT9u T6aRu1elkdBDT7RBn9UcVSgeUyrplEXmdzFpj/5ScoDqCpL43Ao68R0rnhV5MYF4 51EbxnGEl/2LmAtJwMisogEc3NfNfYHLm6gqbJUDEdMKX3dbYoTZRE1AkVEw4fRR CtsZoXrvf+oM88Id0Bh0Ad/VXwL+vXCulJwqTwrhflQYIB8GuPa/EXyC4T9geLtV tDHQCj20ZntI0OM6aEmixCDdFPM0J2IvnzGoAXOIFyf4Oj49M+RhV2mPtUjG0q8g bAiRfjR/yTvsnA== -----END CERTIFICATE-----Generated at Mon Oct 20 02:50:12 2025 by rpki-client