$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/7c/f5593d-689c-4dfe-8d96-2dd7890dc689/1/i4JDP_6UvzU2_sMnVD05YVggIHI.mft File: i4JDP_6UvzU2_sMnVD05YVggIHI.mft (raw, json) Hash identifier: dfQtOGHfTwiZTbGX1J+S6NbDwF/iVXxjtDQLy50o4Vc= Subject key identifier: 77:1C:1D:9A:6D:03:2B:C6:C1:B6:FF:80:E5:88:BA:0A:74:A2:96:7D Authority key identifier: 8B:82:43:3F:FE:94:BF:35:36:FE:C3:27:54:3D:39:61:58:20:20:72 Certificate issuer: /CN=8b82433ffe94bf3536fec327543d396158202072 Certificate serial: 0199FCC66EF0917A33CF83CED229DF868D5B Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/i4JDP_6UvzU2_sMnVD05YVggIHI.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/7c/f5593d-689c-4dfe-8d96-2dd7890dc689/1/i4JDP_6UvzU2_sMnVD05YVggIHI.mft Manifest number: 0CFC Signing time: Sun 19 Oct 2025 14:01:26 +0000 Manifest this update: Sun 19 Oct 2025 14:01:26 +0000 Manifest next update: Mon 20 Oct 2025 14:01:26 +0000 Files and hashes: 1: D0yJcu0JvPJ2IZ6qvrN_68RL81A.roa (hash: NXJKvgJ+KpYYxv4h48ZyQkogSfsaqjnCJ9F84sJ/8IA=) 2: Nd4zcWCzw3-1A_arAnFzFiKe6Go.roa (hash: EgMjZHetBNx4J/OkDXO51fdcct4Zmu7ztTgWF0Abz/w=) 3: W9TFdD94lkINNpe0yudKptP_VLs.roa (hash: cP06PmfxXfnVdgeDD5yGsXjPUheUvD8ffIUpVLl0OGI=) 4: burw7ViboU8T2PJghCZQ6EBQMD4.roa (hash: mSnt7Oq4rlVXYF8azRVIlELr/bG38i2/1WyCF/cFuGg=) 5: fk9piBmxadoxJuP7Wx4UPTdBTGM.roa (hash: P0efcRRoA7jHUP2kLMx2ZKnIu/J2T6OthYnnV4Yj06A=) 6: gYA_rHJcDyZ1I8qy1R4L0zDW9qI.roa (hash: u5z8BQnf6PynI8NBRk8KSGbQCrjifEnXJWVptV9ywSs=) 7: i18UwsW836pXDqDI-_udK1tEZ-Y.roa (hash: 7PmqUHR5yopsMl3jKYP4Y7Ciu3sTdxWLAQhutkIC9xo=) 8: i4JDP_6UvzU2_sMnVD05YVggIHI.crl (hash: 18ieE5l5QTw0kfxYD90IWPzhBn7GNOBqa3l0SfLL2pE=) 9: k_0zEMHxmfACdt3JyIQe32n-3UE.roa (hash: 1zpkXrC9Bl+aFyn5Yr4Xer+2HoYHjHajiHX7XweXMcg=) 10: xNtGHv1YLmz0baQ6fFAsVkQIQLw.roa (hash: glTrDTx+iBPrwn7/BNyzFNiZr9vyz3H84OvS4u/lrN4=) 11: yx9i8LZCbjvaDebLsn4vp_1QQsw.roa (hash: koRh5dNP2sZyFodyKIh0Iqwubeq7l02U0bZSoimi8yU=) 12: yyP9fmeZAYp1K1vaVu0uJv4Agws.roa (hash: egmTg6Tzum2/xFgjHv1aVGDhof0qC374Rh2lR+uVm0s=) Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/7c/f5593d-689c-4dfe-8d96-2dd7890dc689/1/i4JDP_6UvzU2_sMnVD05YVggIHI.crl rsync://rpki.ripe.net/repository/DEFAULT/7c/f5593d-689c-4dfe-8d96-2dd7890dc689/1/i4JDP_6UvzU2_sMnVD05YVggIHI.mft rsync://rpki.ripe.net/repository/DEFAULT/i4JDP_6UvzU2_sMnVD05YVggIHI.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Mon 20 Oct 2025 06:00:58 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:99:fc:c6:6e:f0:91:7a:33:cf:83:ce:d2:29:df:86:8d:5b Signature Algorithm: sha256WithRSAEncryption Issuer: CN=8b82433ffe94bf3536fec327543d396158202072 Validity Not Before: Oct 19 14:01:26 2025 GMT Not After : Oct 20 14:01:26 2025 GMT Subject: CN=771c1d9a6d032bc6c1b6ff80e588ba0a74a2967d Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:ba:b0:a5:6d:9a:41:ef:9a:84:45:60:ef:2b:38: 27:de:b1:85:c6:f3:ab:d7:ef:86:13:5a:49:c6:f6: 71:75:1f:c9:79:80:f9:6c:5e:f8:ab:39:8e:6c:60: 9d:7b:26:cd:e6:d3:ab:54:51:65:7d:5b:77:d4:21: d9:1e:e9:1e:f3:48:54:0c:f4:60:63:b0:ae:e4:3b: 82:3c:7a:5f:5b:ff:ed:00:50:2f:19:ce:7b:7f:81: f2:dc:ec:33:c0:69:2b:a0:17:4b:30:37:69:0a:0b: fe:04:4d:3e:64:8b:96:ab:3d:df:09:47:5f:9d:aa: d2:94:17:1e:88:44:79:8d:8c:68:44:b4:94:73:8f: 00:a0:87:a6:6d:95:28:5f:a9:83:09:48:52:de:87: 64:0b:a8:aa:92:c8:0e:84:40:47:19:dd:82:5f:ef: 15:35:c2:f6:85:c5:eb:91:22:0c:56:25:92:49:c3: 24:59:37:33:4e:78:65:12:e4:20:17:72:f6:c2:6e: 99:93:03:c3:a4:ad:9a:1d:11:1a:02:a5:81:07:70: 61:99:7e:d8:7e:c8:c2:c4:0e:0a:96:b5:dc:6b:1f: ca:16:0e:47:f4:61:cb:1f:3e:eb:9d:9d:d4:c9:4e: 07:a6:46:8b:40:1c:09:d7:85:fc:60:5b:1f:41:8b: e6:f9 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 77:1C:1D:9A:6D:03:2B:C6:C1:B6:FF:80:E5:88:BA:0A:74:A2:96:7D X509v3 Authority Key Identifier: keyid:8B:82:43:3F:FE:94:BF:35:36:FE:C3:27:54:3D:39:61:58:20:20:72 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/i4JDP_6UvzU2_sMnVD05YVggIHI.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/7c/f5593d-689c-4dfe-8d96-2dd7890dc689/1/i4JDP_6UvzU2_sMnVD05YVggIHI.mft X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/7c/f5593d-689c-4dfe-8d96-2dd7890dc689/1/i4JDP_6UvzU2_sMnVD05YVggIHI.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 57:0b:15:89:38:c6:51:1c:3c:7e:1e:ed:f4:45:84:b8:9c:73: 99:c9:61:8b:d4:4c:8a:5c:30:e3:ff:e0:cb:9b:ca:4c:a9:5a: 30:b5:9c:c5:2d:a4:81:f0:39:35:c3:e0:d5:75:39:91:4a:c4: 11:23:5c:1b:c5:20:36:7d:a2:5b:12:d6:eb:7e:44:dd:54:0d: 53:16:73:53:97:1e:cc:cb:b2:da:44:4a:9c:0a:c5:0d:97:67: c8:bd:3b:54:05:d3:f9:a7:62:b0:88:70:93:c1:8e:65:d3:04: 4f:45:5f:83:0b:a0:8e:e2:1e:32:72:19:ed:f6:59:3a:ed:61: b8:7a:4d:89:1f:28:2f:37:be:b4:47:6d:91:50:c9:5b:41:15: b2:ef:6f:d7:84:2d:cf:4c:1b:06:55:9f:77:18:86:02:fb:7f: c9:bd:18:1f:a5:dc:2b:38:4e:e5:48:5c:15:c9:90:a3:bf:7e: 48:6b:12:9b:05:b3:d0:85:bb:18:6c:ef:70:67:47:af:84:52: 1d:b3:80:a8:4b:3c:8b:6c:b5:81:fe:c7:40:b6:9f:b5:64:7f: fc:16:34:ab:e1:5e:0b:d9:26:c5:27:a2:d2:1e:b3:31:1a:69: 8e:c5:91:69:fa:b5:bc:92:a5:37:6e:94:29:ff:f3:31:d9:02: 81:62:dd:1d -----BEGIN CERTIFICATE----- MIIFFjCCA/6gAwIBAgISAZn8xm7wkXozz4PO0infho1bMA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKDhiODI0MzNmZmU5NGJmMzUzNmZlYzMyNzU0M2QzOTYxNTgy MDIwNzIwHhcNMjUxMDE5MTQwMTI2WhcNMjUxMDIwMTQwMTI2WjAzMTEwLwYDVQQD Eyg3NzFjMWQ5YTZkMDMyYmM2YzFiNmZmODBlNTg4YmEwYTc0YTI5NjdkMIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAurClbZpB75qERWDvKzgn3rGFxvOr 1++GE1pJxvZxdR/JeYD5bF74qzmObGCdeybN5tOrVFFlfVt31CHZHuke80hUDPRg Y7Cu5DuCPHpfW//tAFAvGc57f4Hy3OwzwGkroBdLMDdpCgv+BE0+ZIuWqz3fCUdf narSlBceiER5jYxoRLSUc48AoIembZUoX6mDCUhS3odkC6iqksgOhEBHGd2CX+8V NcL2hcXrkSIMViWSScMkWTczTnhlEuQgF3L2wm6ZkwPDpK2aHREaAqWBB3BhmX7Y fsjCxA4KlrXcax/KFg5H9GHLHz7rnZ3UyU4HpkaLQBwJ14X8YFsfQYvm+QIDAQAB o4ICIjCCAh4wHQYDVR0OBBYEFHccHZptAyvGwbb/gOWIugp0opZ9MB8GA1UdIwQY MBaAFIuCQz/+lL81Nv7DJ1Q9OWFYICByMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvaTRKRFBfNlV2elUyX3NNblZEMDVZVmdnSUhJLmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC83Yy9mNTU5M2QtNjg5Yy00ZGZlLThkOTYt MmRkNzg5MGRjNjg5LzEvaTRKRFBfNlV2elUyX3NNblZEMDVZVmdnSUhJLm1mdDCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC83Yy9mNTU5M2QtNjg5Yy00ZGZlLThkOTYtMmRkNzg5MGRjNjg5 LzEvaTRKRFBfNlV2elUyX3NNblZEMDVZVmdnSUhJLmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAVwsViTjG URw8fh7t9EWEuJxzmclhi9RMilww4//gy5vKTKlaMLWcxS2kgfA5NcPg1XU5kUrE ESNcG8UgNn2iWxLW635E3VQNUxZzU5cezMuy2kRKnArFDZdnyL07VAXT+adisIhw k8GOZdMET0VfgwugjuIeMnIZ7fZZOu1huHpNiR8oLze+tEdtkVDJW0EVsu9v14Qt z0wbBlWfdxiGAvt/yb0YH6XcKzhO5UhcFcmQo79+SGsSmwWz0IW7GGzvcGdHr4RS HbOAqEs8i2y1gf7HQLaftWR//BY0q+FeC9kmxSei0h6zMRppjsWRafq1vJKlN26U Kf/zMdkCgWLdHQ== -----END CERTIFICATE-----Generated at Sun Oct 19 15:32:44 2025 by rpki-client