$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/80/4984df-6db2-4e0a-91f8-bf05acc82bd1/1/CoH-kFn2ggvBitWALy8fynfSVLc.mft File: CoH-kFn2ggvBitWALy8fynfSVLc.mft (raw, json) Hash identifier: YTEWvIBH9NIrtzmV1l4fa+KeoejAEBIjcyCQh1GaHOU= Subject key identifier: 93:8B:14:41:CC:10:3F:F8:1C:37:60:3E:7F:06:46:BF:44:0C:89:1E Authority key identifier: 0A:81:FE:90:59:F6:82:0B:C1:8A:D5:80:2F:2F:1F:CA:77:D2:54:B7 Certificate issuer: /CN=0a81fe9059f6820bc18ad5802f2f1fca77d254b7 Certificate serial: 0199FE104F5ABB0569F99A8CF85EFE0882DF Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/CoH-kFn2ggvBitWALy8fynfSVLc.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/80/4984df-6db2-4e0a-91f8-bf05acc82bd1/1/CoH-kFn2ggvBitWALy8fynfSVLc.mft Manifest number: 0A44 Signing time: Sun 19 Oct 2025 20:01:45 +0000 Manifest this update: Sun 19 Oct 2025 20:01:45 +0000 Manifest next update: Mon 20 Oct 2025 20:01:45 +0000 Files and hashes: 1: 31z7eSu8--35kebgOlCIABBeVf8.roa (hash: Bo6lIvIlV0RX6xhodzhO7tuvgscKOLMBcfTJSKlUYZw=) 2: 7pPLJaN3OTQBK8i-P4GOQNKJPho.roa (hash: HpLQLLrJKx/bS+zdiKUm5TCX+jRSuh5jVP1YSt/MOZY=) 3: CoH-kFn2ggvBitWALy8fynfSVLc.crl (hash: /+v7HH5+MhMt215UdyOhE6h8JC+LUXgCqYU0cuFXltU=) 4: EacbpO8P-LkG-h50-C35fVYJXyI.roa (hash: btUaf5jDz02025fLzDlihBUOmr88cX2MxuDiHPb5dc4=) 5: FstRBv2kO53NDHW81Q9Mg07SWg4.roa (hash: +uStvYqgj5hn3d6BL0rwAnmTzIsGb1x7W+G4jAHTkdA=) 6: Gf8Y2t4y9XW51teYl9-IOJM-QkE.roa (hash: JzLxoz0gWXWBbhQLZinkEP2bb0OKmAdUFJyyBJ71KUI=) 7: N0ylFt5LVYNjTI-_TsSgO84trzU.roa (hash: FGN5RCpPLee+DVEx92LqF5VUyDDoLbxxrafkYHnOVZg=) 8: PEEbtcraLxJZAPZLAW5H_KDLDwQ.roa (hash: wU0HPJ884+fnbW1G1BaCynti9gWD3Sn+0YrIsJUp3ns=) 9: hLdZE5q1FOXSO44ZofCjRXN9z7I.roa (hash: CmOCZv7BugezIWG5ZPHeIaee5S3CP9UP9zRJfwRzazg=) 10: i1bI7bZVKfcJ9vCnWPYEzcCSqOc.roa (hash: I9SME80ARJLDqvqmW5BBXCvNlxHc4Su4PKuf6AZPdG4=) 11: n_d7GjbZ9YbYK045nkHL_lX76pM.roa (hash: L6McSAJwh8T7ZY3ArgurepjkJRDGFkS06sAchDylLyc=) 12: pW-Kl5UPWqu6KG3_J4t1h52HuR0.roa (hash: 0HOBimxzzdToQy38vYlAJbGZVaBtPNrg0qioOLxF/+Q=) 13: tlqKEYYvFMWYK-JPntFn1nyKI1U.roa (hash: /wIoPxgkbhHCyNQ8NB2J0bNqG5fb1wxitY8EONuXMt0=) 14: yFPiywRMEHaITt3TRPzJux8bzAU.roa (hash: WnTskmfJ1KLR7sA0SYoAyMqXx6u45IJAhh3f7ztydOk=) Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/80/4984df-6db2-4e0a-91f8-bf05acc82bd1/1/CoH-kFn2ggvBitWALy8fynfSVLc.crl rsync://rpki.ripe.net/repository/DEFAULT/80/4984df-6db2-4e0a-91f8-bf05acc82bd1/1/CoH-kFn2ggvBitWALy8fynfSVLc.mft rsync://rpki.ripe.net/repository/DEFAULT/CoH-kFn2ggvBitWALy8fynfSVLc.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Mon 20 Oct 2025 20:00:59 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:99:fe:10:4f:5a:bb:05:69:f9:9a:8c:f8:5e:fe:08:82:df Signature Algorithm: sha256WithRSAEncryption Issuer: CN=0a81fe9059f6820bc18ad5802f2f1fca77d254b7 Validity Not Before: Oct 19 20:01:45 2025 GMT Not After : Oct 20 20:01:45 2025 GMT Subject: CN=938b1441cc103ff81c37603e7f0646bf440c891e Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:9b:eb:0d:15:db:82:05:a8:75:c3:1c:e1:5b:4e: 6c:08:4b:91:ac:a3:a8:58:b2:7d:df:0c:b3:7c:cf: fa:e6:52:71:8c:60:64:5e:e0:d9:29:c5:6a:d5:af: 08:f5:e3:7d:67:68:1b:34:33:75:96:18:89:85:76: 57:ae:a6:e3:6d:c8:6d:9a:98:0e:db:b0:6d:bc:d9: 1b:79:48:bf:ea:2f:fc:87:6e:5b:08:4a:0a:23:03: 34:8d:fb:b4:f5:a0:8d:c1:58:98:30:05:48:4b:13: a2:99:11:ab:14:b4:6a:27:29:62:f0:ec:af:d1:de: 9b:85:4c:61:a5:4c:20:9d:ee:91:aa:4f:40:6f:de: b6:29:84:fc:0e:6f:73:46:93:4f:21:3f:ec:a3:e1: 55:09:ba:f2:8f:f9:22:f5:9b:f4:80:b4:7c:ae:77: e2:03:61:db:26:24:35:52:17:92:5d:1f:99:60:9e: 64:56:9e:86:b5:43:98:8b:79:7f:37:91:f2:2c:cc: 37:42:8e:9e:1c:57:99:8c:b7:ab:a0:be:a6:7b:c4: a4:ef:42:fb:c4:a1:40:cd:39:37:9b:f6:cf:85:93: 9c:fd:09:45:68:54:fc:87:50:6f:51:c7:15:7c:ed: 1f:e7:5e:f4:c0:88:1e:69:35:7e:60:52:48:b6:12: a3:0d Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 93:8B:14:41:CC:10:3F:F8:1C:37:60:3E:7F:06:46:BF:44:0C:89:1E X509v3 Authority Key Identifier: keyid:0A:81:FE:90:59:F6:82:0B:C1:8A:D5:80:2F:2F:1F:CA:77:D2:54:B7 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/CoH-kFn2ggvBitWALy8fynfSVLc.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/80/4984df-6db2-4e0a-91f8-bf05acc82bd1/1/CoH-kFn2ggvBitWALy8fynfSVLc.mft X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/80/4984df-6db2-4e0a-91f8-bf05acc82bd1/1/CoH-kFn2ggvBitWALy8fynfSVLc.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 40:32:12:58:a4:89:b9:8b:23:14:fe:84:4b:d1:d8:66:12:0e: 23:e0:3b:56:75:a3:78:5d:4f:6f:f5:f7:e7:70:06:ba:b1:e1: 8f:63:5f:48:cc:fe:8f:b9:ea:3f:91:59:b3:8f:bb:dc:14:29: a6:2b:69:9d:31:c8:b0:88:52:c7:19:b4:1d:f2:dc:78:52:a8: 0a:56:a6:44:ea:03:92:41:99:e9:bf:69:19:17:af:de:2a:85: 50:24:4d:0c:eb:ed:1b:4a:fa:6f:fd:1c:6b:7b:90:3c:13:8f: 0a:e6:36:0c:0f:73:d2:15:50:11:34:13:0f:dc:33:44:e4:3e: b8:53:16:f2:a2:43:28:a1:7b:e0:0f:39:17:ab:2e:d7:d7:0c: 6a:ff:36:17:4f:4f:17:04:34:f5:12:31:55:c6:19:29:44:73: c8:cd:e5:d6:0b:cd:e2:c4:74:f4:73:dc:7c:a1:c5:48:ce:7b: 00:b3:03:d9:9f:74:a4:5b:21:f2:6a:bc:d9:82:28:02:9c:13: 6c:1a:ec:4d:55:09:8b:70:09:f4:f5:08:b9:91:4b:79:1a:e5: ff:15:76:ba:23:a1:97:e7:e6:11:f0:9f:c5:30:97:c8:92:57: ce:b3:61:d4:bc:3b:8a:02:b1:09:63:f0:30:40:53:17:3d:d2: e4:e0:93:36 -----BEGIN CERTIFICATE----- MIIFFjCCA/6gAwIBAgISAZn+EE9auwVp+ZqM+F7+CILfMA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKDBhODFmZTkwNTlmNjgyMGJjMThhZDU4MDJmMmYxZmNhNzdk MjU0YjcwHhcNMjUxMDE5MjAwMTQ1WhcNMjUxMDIwMjAwMTQ1WjAzMTEwLwYDVQQD Eyg5MzhiMTQ0MWNjMTAzZmY4MWMzNzYwM2U3ZjA2NDZiZjQ0MGM4OTFlMIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAm+sNFduCBah1wxzhW05sCEuRrKOo WLJ93wyzfM/65lJxjGBkXuDZKcVq1a8I9eN9Z2gbNDN1lhiJhXZXrqbjbchtmpgO 27BtvNkbeUi/6i/8h25bCEoKIwM0jfu09aCNwViYMAVISxOimRGrFLRqJyli8Oyv 0d6bhUxhpUwgne6Rqk9Ab962KYT8Dm9zRpNPIT/so+FVCbryj/ki9Zv0gLR8rnfi A2HbJiQ1UheSXR+ZYJ5kVp6GtUOYi3l/N5HyLMw3Qo6eHFeZjLeroL6me8Sk70L7 xKFAzTk3m/bPhZOc/QlFaFT8h1BvUccVfO0f5170wIgeaTV+YFJIthKjDQIDAQAB o4ICIjCCAh4wHQYDVR0OBBYEFJOLFEHMED/4HDdgPn8GRr9EDIkeMB8GA1UdIwQY MBaAFAqB/pBZ9oILwYrVgC8vH8p30lS3MA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvQ29ILWtGbjJnZ3ZCaXRXQUx5OGZ5bmZTVkxjLmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC84MC80OTg0ZGYtNmRiMi00ZTBhLTkxZjgt YmYwNWFjYzgyYmQxLzEvQ29ILWtGbjJnZ3ZCaXRXQUx5OGZ5bmZTVkxjLm1mdDCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC84MC80OTg0ZGYtNmRiMi00ZTBhLTkxZjgtYmYwNWFjYzgyYmQx LzEvQ29ILWtGbjJnZ3ZCaXRXQUx5OGZ5bmZTVkxjLmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAQDISWKSJ uYsjFP6ES9HYZhIOI+A7VnWjeF1Pb/X353AGurHhj2NfSMz+j7nqP5FZs4+73BQp pitpnTHIsIhSxxm0HfLceFKoClamROoDkkGZ6b9pGRev3iqFUCRNDOvtG0r6b/0c a3uQPBOPCuY2DA9z0hVQETQTD9wzROQ+uFMW8qJDKKF74A85F6su19cMav82F09P FwQ09RIxVcYZKURzyM3l1gvN4sR09HPcfKHFSM57ALMD2Z90pFsh8mq82YIoApwT bBrsTVUJi3AJ9PUIuZFLeRrl/xV2uiOhl+fmEfCfxTCXyJJXzrNh1Lw7igKxCWPw MEBTFz3S5OCTNg== -----END CERTIFICATE-----Generated at Mon Oct 20 02:28:48 2025 by rpki-client