$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/80/fb42ec-10b4-4dcf-bef0-2d143d7b853c/1/9fsy0iZrH5vOV8rJi8AkfyyRl_I.mft File: 9fsy0iZrH5vOV8rJi8AkfyyRl_I.mft (raw, json) Hash identifier: pB+UQG5w7tdOgfOQqPJ7TbtiLCVSAQlkjRnaMtqAux4= Subject key identifier: EB:87:97:67:E2:4D:FB:3E:2E:CD:EE:74:7B:48:EE:3C:D7:F2:38:EE Authority key identifier: F5:FB:32:D2:26:6B:1F:9B:CE:57:CA:C9:8B:C0:24:7F:2C:91:97:F2 Certificate issuer: /CN=f5fb32d2266b1f9bce57cac98bc0247f2c9197f2 Certificate serial: 0199FE473FF4DA9F6AF3EBA0112C09DDB50E Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/9fsy0iZrH5vOV8rJi8AkfyyRl_I.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/80/fb42ec-10b4-4dcf-bef0-2d143d7b853c/1/9fsy0iZrH5vOV8rJi8AkfyyRl_I.mft Manifest number: 109D Signing time: Sun 19 Oct 2025 21:01:46 +0000 Manifest this update: Sun 19 Oct 2025 21:01:46 +0000 Manifest next update: Mon 20 Oct 2025 21:01:46 +0000 Files and hashes: 1: 7InXKoGXPyPmSkShdNo1bN5BHPE.roa (hash: p0vQNoVwsgdCf98zXzcil2JDwtIbKg4o52YVuAX43Qg=) 2: 9fsy0iZrH5vOV8rJi8AkfyyRl_I.crl (hash: TnpdVF/AsyPUlqv8SJyKbu4oPBJjbP0PVrPH7Ut/WDw=) 3: G7eTk3jqB-BdA_Wy3K2E2YFtyTA.roa (hash: OtseOoY4gfu7tKjqn1wIwpg1/zv9XoIf0fx8DQ1CUfM=) 4: ISNHkwTdIse1R5eVAbZVrpNzf7I.roa (hash: aWcNBCaUk6iVQl/ljrkexa0tplOypXs9VyEvekzMA3M=) 5: L0ujmwzkJ6RRH45eugAjMYC2Zhg.roa (hash: ZYuGlloJDpR2SY2TTczc6v50q6dosW6j6YAj25G96Pg=) 6: LII7hRC3tP9UTUOEbD-OlE2YLz0.roa (hash: 2G0IT+KoXJQxpXp8HjaK3udKnKhR8XLas866IuV7Mj4=) 7: VTdQuPLguO6Ibw0Th9ypJCxyOf8.roa (hash: ipcRPToVDEN7EVH1AfqkAeCn3ymsz/f4y1+i87V66wQ=) 8: YvkbVKJlGhe5CueuyVxq1q2O70Q.roa (hash: /PYpgEWMTLMpLQZyNZ/8Wtvmlyq4J/45JtHdGT30fP8=) 9: _nLYAZC-VddX97JjR5Q6LKKqBQ4.roa (hash: ndREz8aC1hd1w5pe58qePL+6kw9PyDSZ6Q1HeOlC7Rc=) 10: aWqk2Eqq3IuFrdTCWqDT1ipjFfc.roa (hash: gCGkdVAQfPxZEOhksPMaLIdO7tZKi7jbSZk+qSfa8hA=) 11: d1Mc0OsWnepemmVerPa7kdZl1N8.roa (hash: JRdvIEtlRj7j9yeTQYkXzcTmst5QyvuiftJaDhMJ8Og=) 12: k_9bhWj2JcQnyMq-FPfEv0otOUw.roa (hash: Zs3oxA2HTYXtiE5lUDi8OJy4SVF/+vQT5qkuzqaf+ew=) 13: o4_pEwPipmYi6C3PXNhpC7by3MA.roa (hash: HbprNAxeP8NoQY7jwdw1Rs3l1Tj/TI85puQfPIX124c=) 14: qjxC3CMWMpiM1TpibiIWl8s1Se0.roa (hash: vL7m0foCqcx4qZwFUYV1ieilxVwO5UgoFDNdvDch1DE=) 15: t0gWV72zLQLExI3pDHKlUQNMCLg.roa (hash: sZqkeiCyvYuQZJfxR8h/KOL8f5qWehA/zicZawvNouA=) Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/80/fb42ec-10b4-4dcf-bef0-2d143d7b853c/1/9fsy0iZrH5vOV8rJi8AkfyyRl_I.crl rsync://rpki.ripe.net/repository/DEFAULT/80/fb42ec-10b4-4dcf-bef0-2d143d7b853c/1/9fsy0iZrH5vOV8rJi8AkfyyRl_I.mft rsync://rpki.ripe.net/repository/DEFAULT/9fsy0iZrH5vOV8rJi8AkfyyRl_I.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Mon 20 Oct 2025 15:00:58 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:99:fe:47:3f:f4:da:9f:6a:f3:eb:a0:11:2c:09:dd:b5:0e Signature Algorithm: sha256WithRSAEncryption Issuer: CN=f5fb32d2266b1f9bce57cac98bc0247f2c9197f2 Validity Not Before: Oct 19 21:01:46 2025 GMT Not After : Oct 20 21:01:46 2025 GMT Subject: CN=eb879767e24dfb3e2ecdee747b48ee3cd7f238ee Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:88:72:86:ac:f6:93:97:9d:a3:31:c4:6d:59:a7: 86:d8:b4:3b:55:ee:a6:29:6b:6e:86:75:63:c3:a1: 05:16:51:90:4a:f6:90:69:8e:a0:0d:c7:55:fa:7f: 12:a5:27:11:72:6a:20:61:62:18:c0:4a:27:c6:c4: 66:a5:fa:b0:b5:db:76:d3:b7:d7:48:6b:aa:6d:24: 5f:a5:7b:f9:eb:9c:19:e4:92:53:60:45:24:2c:09: 5a:69:8e:fa:74:a2:13:21:a7:48:e7:93:b5:55:27: f6:a8:73:31:1c:55:c0:2e:4b:7c:e4:41:4b:fc:06: b1:4c:80:37:a2:5b:d9:3f:e7:86:b3:45:03:d8:5c: 66:d2:8b:21:a3:64:5d:31:d8:d5:ee:a3:16:b0:85: 9d:d2:7a:97:61:20:44:0f:0d:3f:98:bc:7d:38:a1: c5:c7:71:60:44:55:c6:70:a1:f2:9a:de:ed:a1:65: 9e:db:a1:9c:13:07:85:c7:d9:4c:42:5c:96:65:8a: c0:f7:b2:47:a4:91:0a:27:fa:13:75:75:6a:19:5e: 47:88:ef:01:6d:b4:bb:44:35:e0:39:78:40:fc:c1: 47:7a:87:d6:47:51:c4:c6:70:d7:79:95:5d:9f:7c: b4:62:17:c7:90:8b:1a:9a:0b:88:53:49:d9:92:7d: c0:d3 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: EB:87:97:67:E2:4D:FB:3E:2E:CD:EE:74:7B:48:EE:3C:D7:F2:38:EE X509v3 Authority Key Identifier: keyid:F5:FB:32:D2:26:6B:1F:9B:CE:57:CA:C9:8B:C0:24:7F:2C:91:97:F2 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/9fsy0iZrH5vOV8rJi8AkfyyRl_I.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/80/fb42ec-10b4-4dcf-bef0-2d143d7b853c/1/9fsy0iZrH5vOV8rJi8AkfyyRl_I.mft X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/80/fb42ec-10b4-4dcf-bef0-2d143d7b853c/1/9fsy0iZrH5vOV8rJi8AkfyyRl_I.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption ba:63:ac:3e:69:56:31:c0:9d:4d:c6:d2:f3:36:28:30:0d:30: 7b:36:67:53:c7:f7:91:ea:b7:91:51:0e:a0:3c:86:07:86:f4: 3c:11:99:72:13:9a:cd:13:d5:43:f0:87:16:71:9e:a6:98:21: 88:3f:95:8e:67:00:10:f8:6d:6d:c1:07:66:c3:71:0a:00:ae: 1d:0e:e8:92:5f:c6:c2:b5:1d:01:a5:2b:71:ff:67:ae:ea:28: 54:aa:1a:9d:f8:b1:59:77:7d:7a:a2:cc:6a:4e:90:4d:a5:58: 40:58:2e:6c:48:f9:8b:0d:41:48:a7:53:98:04:8d:d4:93:d0: fa:f7:b5:52:ea:59:11:b9:7c:26:fa:39:a2:57:4f:6e:bf:ea: 4c:74:34:8c:0e:29:3a:ef:83:72:cc:10:72:4b:96:6f:94:29: eb:73:ea:b0:1e:16:42:17:dd:5c:11:76:ef:75:66:81:d9:68: d8:c5:29:d5:fa:13:58:b5:a2:34:38:55:87:7b:d8:eb:06:95: 38:53:f6:03:62:92:2d:56:58:b9:3b:56:4b:74:68:c7:b8:eb: 94:42:b1:52:25:43:74:4f:88:b6:d1:a5:8a:ab:cd:6a:94:9b: 94:92:a7:62:fd:21:c2:6a:25:65:c3:d7:63:b3:56:f1:70:9b: 95:43:83:ff -----BEGIN CERTIFICATE----- MIIFFjCCA/6gAwIBAgISAZn+Rz/02p9q8+ugESwJ3bUOMA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKGY1ZmIzMmQyMjY2YjFmOWJjZTU3Y2FjOThiYzAyNDdmMmM5 MTk3ZjIwHhcNMjUxMDE5MjEwMTQ2WhcNMjUxMDIwMjEwMTQ2WjAzMTEwLwYDVQQD EyhlYjg3OTc2N2UyNGRmYjNlMmVjZGVlNzQ3YjQ4ZWUzY2Q3ZjIzOGVlMIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAiHKGrPaTl52jMcRtWaeG2LQ7Ve6m KWtuhnVjw6EFFlGQSvaQaY6gDcdV+n8SpScRcmogYWIYwEonxsRmpfqwtdt207fX SGuqbSRfpXv565wZ5JJTYEUkLAlaaY76dKITIadI55O1VSf2qHMxHFXALkt85EFL /AaxTIA3olvZP+eGs0UD2Fxm0osho2RdMdjV7qMWsIWd0nqXYSBEDw0/mLx9OKHF x3FgRFXGcKHymt7toWWe26GcEweFx9lMQlyWZYrA97JHpJEKJ/oTdXVqGV5HiO8B bbS7RDXgOXhA/MFHeofWR1HExnDXeZVdn3y0YhfHkIsamguIU0nZkn3A0wIDAQAB o4ICIjCCAh4wHQYDVR0OBBYEFOuHl2fiTfs+Ls3udHtI7jzX8jjuMB8GA1UdIwQY MBaAFPX7MtImax+bzlfKyYvAJH8skZfyMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvOWZzeTBpWnJINXZPVjhySmk4QWtmeXlSbF9JLmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC84MC9mYjQyZWMtMTBiNC00ZGNmLWJlZjAt MmQxNDNkN2I4NTNjLzEvOWZzeTBpWnJINXZPVjhySmk4QWtmeXlSbF9JLm1mdDCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC84MC9mYjQyZWMtMTBiNC00ZGNmLWJlZjAtMmQxNDNkN2I4NTNj LzEvOWZzeTBpWnJINXZPVjhySmk4QWtmeXlSbF9JLmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAumOsPmlW McCdTcbS8zYoMA0wezZnU8f3keq3kVEOoDyGB4b0PBGZchOazRPVQ/CHFnGeppgh iD+VjmcAEPhtbcEHZsNxCgCuHQ7okl/GwrUdAaUrcf9nruooVKoanfixWXd9eqLM ak6QTaVYQFgubEj5iw1BSKdTmASN1JPQ+ve1UupZEbl8Jvo5oldPbr/qTHQ0jA4p Ou+DcswQckuWb5Qp63PqsB4WQhfdXBF273Vmgdlo2MUp1foTWLWiNDhVh3vY6waV OFP2A2KSLVZYuTtWS3Rox7jrlEKxUiVDdE+IttGliqvNapSblJKnYv0hwmolZcPX Y7NW8XCblUOD/w== -----END CERTIFICATE-----Generated at Mon Oct 20 00:15:18 2025 by rpki-client