$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/81/a7ce7a-8443-46eb-8cba-3bb4d6200518/1/AjKkv7d5ZAWlVrdZ8dGT5MTTcSk.mft File: AjKkv7d5ZAWlVrdZ8dGT5MTTcSk.mft (raw, json) Hash identifier: xQhE1UwBMz9wVc61r+v9OgqACvPN9LNLtPSlK9892Gk= Subject key identifier: 74:E4:43:8D:37:8A:47:20:EB:A4:0D:DC:98:70:0B:2E:75:5E:7A:C5 Authority key identifier: 02:32:A4:BF:B7:79:64:05:A5:56:B7:59:F1:D1:93:E4:C4:D3:71:29 Certificate issuer: /CN=0232a4bfb7796405a556b759f1d193e4c4d37129 Certificate serial: 0199FBEB27FB09C6EAE7E01DC9330ECBD1F9 Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/AjKkv7d5ZAWlVrdZ8dGT5MTTcSk.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/81/a7ce7a-8443-46eb-8cba-3bb4d6200518/1/AjKkv7d5ZAWlVrdZ8dGT5MTTcSk.mft Manifest number: 16EE Signing time: Sun 19 Oct 2025 10:01:56 +0000 Manifest this update: Sun 19 Oct 2025 10:01:56 +0000 Manifest next update: Mon 20 Oct 2025 10:01:56 +0000 Files and hashes: 1: 2MTpcYnM1k7_eZxG4JM1vyDTgyk.roa (hash: ymmdwaUbb6XKWmKTfQm4pWw8ouzRa7gwqokbxv+gmWU=) 2: 3CW8ZrBicXZ-3Xo2rFwfHtSekAs.roa (hash: 7ay6ExNqGjacU7HN/bzX0dJI8r/LlyrNhedhAiFT9ik=) 3: 4MiALt5VQvZmZRNJbgiFndSZM4w.roa (hash: GJAf7lhefseebsxtLfvA2JkOrit3YnALqwfo2sORCvw=) 4: 7XLrZeKON3mi_Y8HbdkwhdOJHZM.roa (hash: uPZBCvQWdyX5oSW3u+GYq0zKOz3VqYp/42l/kQKgi6Y=) 5: AjKkv7d5ZAWlVrdZ8dGT5MTTcSk.crl (hash: SIGCVbofrrXg03IyDk8ayOPq4h+pQ+YheNy3CHWjRi0=) 6: Woo9uQ4ucTRYjMh9ah88cw5clxk.roa (hash: WrdAqZeK7ES2+LIoGcfX11G6G4YXGyd2qn4CZO/jQsA=) 7: Xih-EfVQ2lODpeM1Ya_8fjlb3e0.roa (hash: l4FttRaMYnWfbRGN1GiO7VFVJgCvU1nAC+1h/ttWafI=) 8: Z2PHW8LvacSdhO2HpcioR4D6P_g.roa (hash: kHWtIvwFttg31Y3IHOia+gnD127BKytZFvvHo2JKuAw=) 9: gbjyDe1jMzAx-GtGqvOl5rcNw2Y.roa (hash: bZY4frDqpa0VtHIgDLvz2UTVVluMMplhW24wn9Ofe38=) 10: kSocueKI3xqrxYrVlgp46XPJhoY.roa (hash: 38MoDqAostLgesLzGLlzSF6QuxV0tRHQ2WgTUcouUvI=) 11: zDn6BG65-N44C0uDlJe3RzkiUTs.roa (hash: EM6Uwy/Us+r0AtgVlMQcbmCbt0K/tS3jHqszI1mZVYQ=) Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/81/a7ce7a-8443-46eb-8cba-3bb4d6200518/1/AjKkv7d5ZAWlVrdZ8dGT5MTTcSk.crl rsync://rpki.ripe.net/repository/DEFAULT/81/a7ce7a-8443-46eb-8cba-3bb4d6200518/1/AjKkv7d5ZAWlVrdZ8dGT5MTTcSk.mft rsync://rpki.ripe.net/repository/DEFAULT/AjKkv7d5ZAWlVrdZ8dGT5MTTcSk.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Mon 20 Oct 2025 10:01:56 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:99:fb:eb:27:fb:09:c6:ea:e7:e0:1d:c9:33:0e:cb:d1:f9 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=0232a4bfb7796405a556b759f1d193e4c4d37129 Validity Not Before: Oct 19 10:01:56 2025 GMT Not After : Oct 20 10:01:56 2025 GMT Subject: CN=74e4438d378a4720eba40ddc98700b2e755e7ac5 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:96:1d:10:0b:f7:4e:72:e4:1a:eb:17:b2:1d:96: 6c:20:91:51:c2:2f:dd:c8:19:1e:1c:ef:94:c2:10: 1e:70:d7:ef:dc:14:9a:5c:17:ac:a1:a8:3d:ed:51: 04:c2:37:89:a8:5f:90:15:a1:92:6b:30:bd:96:31: c3:a5:00:b8:8e:a5:d6:18:21:5a:49:11:80:73:15: 05:46:ed:fd:83:43:fc:23:36:e4:49:6e:91:9f:a1: 95:ca:91:5a:0f:68:32:5e:8d:8a:c0:6b:dd:9f:06: 3d:58:ba:e3:af:5c:21:73:f2:d2:9b:d4:6e:b4:b2: 73:c9:d7:0f:82:6a:81:6d:5f:19:79:52:dc:34:f0: 2c:a1:be:35:b9:85:6e:27:a2:2a:e3:7b:49:b0:f1: 29:d7:aa:76:6f:60:0e:72:f1:40:46:b1:9b:45:c0: d6:60:12:5c:2e:40:fd:97:22:8e:49:f4:c0:e1:42: f7:92:f5:6f:b4:76:24:a0:36:74:33:62:f4:90:9e: 4b:67:ce:c7:7a:c6:e8:a7:83:e0:92:34:44:d7:f0: 43:3d:85:df:55:b0:49:0f:ed:21:75:db:a1:8a:f1: 75:72:ef:2e:2d:58:b8:00:34:f9:fa:33:ba:bd:e7: cc:f2:f0:5b:5a:e8:e4:c3:fe:d7:61:fc:04:54:28: 65:61 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 74:E4:43:8D:37:8A:47:20:EB:A4:0D:DC:98:70:0B:2E:75:5E:7A:C5 X509v3 Authority Key Identifier: keyid:02:32:A4:BF:B7:79:64:05:A5:56:B7:59:F1:D1:93:E4:C4:D3:71:29 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/AjKkv7d5ZAWlVrdZ8dGT5MTTcSk.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/81/a7ce7a-8443-46eb-8cba-3bb4d6200518/1/AjKkv7d5ZAWlVrdZ8dGT5MTTcSk.mft X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/81/a7ce7a-8443-46eb-8cba-3bb4d6200518/1/AjKkv7d5ZAWlVrdZ8dGT5MTTcSk.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 0f:87:12:0f:bd:b6:f6:54:91:70:3b:41:f3:b4:18:2b:0d:f3: 6f:9e:38:e3:dc:ac:06:d2:00:f7:f1:1a:04:91:c2:72:2b:d0: e2:5d:12:48:7d:79:29:a1:e6:ae:b8:07:f5:ca:e0:f4:35:03: c1:9e:51:8d:50:e5:cf:77:22:67:d6:69:06:b2:0d:21:26:47: a5:0b:de:10:1d:e5:9f:fe:12:cf:64:ba:b4:54:a9:65:b1:9c: 25:ea:26:ea:25:bb:33:f0:96:50:4d:e2:6a:14:07:f6:85:87: 13:fc:3d:68:6c:ec:b0:cd:c7:97:8b:21:9b:0c:89:ee:4f:c8: c2:d6:d6:d8:df:00:85:be:66:05:39:78:88:70:c5:3a:cb:ea: ee:13:73:e0:f0:aa:12:9d:fc:02:e6:0b:1e:31:1a:ea:17:2b: 2a:5c:13:1e:02:a1:0f:35:e9:43:15:fd:d6:8d:00:31:51:ee: 06:f1:f0:a3:1e:0d:0f:a5:af:b6:7e:6a:bd:5b:3c:19:c3:1a: 50:1d:79:d9:d8:d0:38:a8:91:a6:79:bb:85:b9:00:f5:b1:b8: e9:15:50:14:52:d9:75:af:68:be:7b:39:5f:e5:7b:0b:bb:b7: 87:3d:7a:36:a7:73:6d:c0:50:c5:9e:91:48:c0:5e:96:1c:57: 0c:99:bf:fc -----BEGIN CERTIFICATE----- MIIFFjCCA/6gAwIBAgISAZn76yf7Ccbq5+AdyTMOy9H5MA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKDAyMzJhNGJmYjc3OTY0MDVhNTU2Yjc1OWYxZDE5M2U0YzRk MzcxMjkwHhcNMjUxMDE5MTAwMTU2WhcNMjUxMDIwMTAwMTU2WjAzMTEwLwYDVQQD Eyg3NGU0NDM4ZDM3OGE0NzIwZWJhNDBkZGM5ODcwMGIyZTc1NWU3YWM1MIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAlh0QC/dOcuQa6xeyHZZsIJFRwi/d yBkeHO+UwhAecNfv3BSaXBesoag97VEEwjeJqF+QFaGSazC9ljHDpQC4jqXWGCFa SRGAcxUFRu39g0P8IzbkSW6Rn6GVypFaD2gyXo2KwGvdnwY9WLrjr1whc/LSm9Ru tLJzydcPgmqBbV8ZeVLcNPAsob41uYVuJ6Iq43tJsPEp16p2b2AOcvFARrGbRcDW YBJcLkD9lyKOSfTA4UL3kvVvtHYkoDZ0M2L0kJ5LZ87Hesbop4PgkjRE1/BDPYXf VbBJD+0hdduhivF1cu8uLVi4ADT5+jO6vefM8vBbWujkw/7XYfwEVChlYQIDAQAB o4ICIjCCAh4wHQYDVR0OBBYEFHTkQ403ikcg66QN3JhwCy51XnrFMB8GA1UdIwQY MBaAFAIypL+3eWQFpVa3WfHRk+TE03EpMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvQWpLa3Y3ZDVaQVdsVnJkWjhkR1Q1TVRUY1NrLmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC84MS9hN2NlN2EtODQ0My00NmViLThjYmEt M2JiNGQ2MjAwNTE4LzEvQWpLa3Y3ZDVaQVdsVnJkWjhkR1Q1TVRUY1NrLm1mdDCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC84MS9hN2NlN2EtODQ0My00NmViLThjYmEtM2JiNGQ2MjAwNTE4 LzEvQWpLa3Y3ZDVaQVdsVnJkWjhkR1Q1TVRUY1NrLmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAD4cSD722 9lSRcDtB87QYKw3zb54449ysBtIA9/EaBJHCcivQ4l0SSH15KaHmrrgH9crg9DUD wZ5RjVDlz3ciZ9ZpBrINISZHpQveEB3ln/4Sz2S6tFSpZbGcJeom6iW7M/CWUE3i ahQH9oWHE/w9aGzssM3Hl4shmwyJ7k/IwtbW2N8Ahb5mBTl4iHDFOsvq7hNz4PCq Ep38AuYLHjEa6hcrKlwTHgKhDzXpQxX91o0AMVHuBvHwox4ND6Wvtn5qvVs8GcMa UB152djQOKiRpnm7hbkA9bG46RVQFFLZda9ovns5X+V7C7u3hz16NqdzbcBQxZ6R SMBelhxXDJm//A== -----END CERTIFICATE-----Generated at Sun Oct 19 17:30:41 2025 by rpki-client