$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/82/7cb179-ad2c-4824-a1e5-ae07f32e4102/1/_EQpfpJxxu3wZJFfYYCuEmkN2os.mft File: _EQpfpJxxu3wZJFfYYCuEmkN2os.mft (raw, json) Hash identifier: 9elRw0CMiwqqdyjGQh/SDJAwjVjdcHLtOvDUakkIV2g= Subject key identifier: 0D:33:5A:53:B9:6B:0B:8E:08:0C:AA:A5:E0:AC:1F:F4:C4:8B:17:FE Authority key identifier: FC:44:29:7E:92:71:C6:ED:F0:64:91:5F:61:80:AE:12:69:0D:DA:8B Certificate issuer: /CN=fc44297e9271c6edf064915f6180ae12690dda8b Certificate serial: 0199FF22E251E8FF841269BB62ACE8E2FE5F Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/_EQpfpJxxu3wZJFfYYCuEmkN2os.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/82/7cb179-ad2c-4824-a1e5-ae07f32e4102/1/_EQpfpJxxu3wZJFfYYCuEmkN2os.mft Manifest number: 16F9 Signing time: Mon 20 Oct 2025 01:01:40 +0000 Manifest this update: Mon 20 Oct 2025 01:01:40 +0000 Manifest next update: Tue 21 Oct 2025 01:01:40 +0000 Files and hashes: 1: 32yhRz_S8ITRiOsBYkmV4NnQCYc.roa (hash: dVgxRZDbIbYdq2fLtDV8WTt0Yh4BvCJtbiIWE/I7V9o=) 2: 3YfXMGxAROTBpSHK0nXhT4XXVLA.roa (hash: t9FN1AE/iUXMjLgMElEEh/Ci+Kik/9ynPh+dOX7Z5u8=) 3: 4CRh1_CvU86oKkepqeWz0p8Z20g.roa (hash: eECawWd/eK8DTrkxHmdqWQ83awsrOYEANzuH8VdAHYk=) 4: 4yVwhdNr1x7QWhuQZt7jnU3WVfU.roa (hash: Avv1mWPFCgDH8L+bShCZ3laRZSIOjbCtfz5vWH2fX7s=) 5: 7hrowrIyQ_yhCn7NqJyPwlbnjvU.roa (hash: jaDUXbK3NwGZnP8kMILOfU6k2MmyLuZSMbC+5y9ZUnQ=) 6: EC4-LQ6kidGJzuS4NcMwvpf6NbU.roa (hash: p11JEQANSGpxSsSCC9KDVq2xpHH5TNvaJmupLy6k704=) 7: He_wIqs9WbeGj8B22HW3VzQspCQ.roa (hash: tlw/MPCRV5MVLGPRtjnV6Ynl8QAazIvng9cpXGa9Jjc=) 8: HuL3gMV6_zC2v4RtUtbhqokAt3o.roa (hash: oOaz6NQBz4nDsaAkIEoLusftKpiuLlvRyaHsm/ZmfH4=) 9: QOp8bh5ZPSuznKCRrGZLlhCTgcs.roa (hash: 7hAuGp/9PxCmWRCRnl/vszI74VutrV1FkyouYG2D0Ok=) 10: VoBqKFmkzHKUMH66kT01ur4Okdk.roa (hash: wrQGRmCWA6MmV9E979fU5JGLxSuHzNsXWbXUIKZWDCY=) 11: ZWOY1CQejAaInI5dPiW91XYX-d8.roa (hash: 99cY9onRLW//cQHI0vGgH4e5SQS2hb6TJu75LNYg/pg=) 12: _EQpfpJxxu3wZJFfYYCuEmkN2os.crl (hash: LqmGuZCvNau1dEq6hgszAQLwKvJKGY8Adi0Yg8s8k1Y=) 13: bvGIb4I9tPNSFQAgMarPZLbQdco.roa (hash: z2ND/X4p7VMdJla0AX/t4QpyjiykeGek/GP7iei/AGM=) 14: tineMtUjOADbmljZnXO2AjKqXkc.roa (hash: 0BfJzskVZ3BO+kzng4r5uCUBjRTYeY/YcraQ9f9oslk=) Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/82/7cb179-ad2c-4824-a1e5-ae07f32e4102/1/_EQpfpJxxu3wZJFfYYCuEmkN2os.crl rsync://rpki.ripe.net/repository/DEFAULT/82/7cb179-ad2c-4824-a1e5-ae07f32e4102/1/_EQpfpJxxu3wZJFfYYCuEmkN2os.mft rsync://rpki.ripe.net/repository/DEFAULT/_EQpfpJxxu3wZJFfYYCuEmkN2os.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Tue 21 Oct 2025 00:00:58 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:99:ff:22:e2:51:e8:ff:84:12:69:bb:62:ac:e8:e2:fe:5f Signature Algorithm: sha256WithRSAEncryption Issuer: CN=fc44297e9271c6edf064915f6180ae12690dda8b Validity Not Before: Oct 20 01:01:40 2025 GMT Not After : Oct 21 01:01:40 2025 GMT Subject: CN=0d335a53b96b0b8e080caaa5e0ac1ff4c48b17fe Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:a0:3e:a9:10:4c:3b:f8:96:18:6a:0d:38:03:c1: b8:17:11:28:46:74:a4:93:07:c9:48:97:e5:80:e3: 7f:e0:db:9d:3b:f9:6f:39:23:64:3c:6f:e7:2a:4f: bd:cf:64:94:15:2e:34:b1:2f:0b:bb:58:4c:55:97: eb:d8:62:6b:1b:0d:fa:c4:81:71:6f:8c:32:cc:67: 08:c7:33:ae:5d:f7:96:ff:da:7e:0c:58:63:ba:b3: 52:0b:52:60:58:a3:2c:a1:8c:1b:33:1b:10:d9:98: 3b:7b:73:6f:01:00:57:7f:57:6b:f4:4d:0b:11:cd: 67:46:34:aa:82:99:03:22:e3:45:0f:04:53:b5:ee: 7a:43:0f:6d:a7:92:e7:59:18:8f:ae:31:1d:09:73: 68:51:6b:ba:a5:56:55:f8:e0:08:9e:12:a0:12:c5: 88:39:d4:93:88:4f:b4:3a:8e:80:6c:b1:e2:e6:84: cf:3e:64:f9:3e:a3:70:ba:cb:13:cb:62:ca:3c:0e: 65:f5:73:33:4e:20:11:92:e3:91:ff:b4:4b:f0:9a: 61:da:86:16:0b:c5:4f:6f:e9:d1:b0:a1:cd:22:9f: f1:0c:f9:75:60:4b:7d:14:f8:06:aa:15:c6:22:d4: 0b:58:c8:d8:fc:2a:de:6d:ee:65:0f:f3:f5:9b:b8: db:c9 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 0D:33:5A:53:B9:6B:0B:8E:08:0C:AA:A5:E0:AC:1F:F4:C4:8B:17:FE X509v3 Authority Key Identifier: keyid:FC:44:29:7E:92:71:C6:ED:F0:64:91:5F:61:80:AE:12:69:0D:DA:8B X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/_EQpfpJxxu3wZJFfYYCuEmkN2os.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/82/7cb179-ad2c-4824-a1e5-ae07f32e4102/1/_EQpfpJxxu3wZJFfYYCuEmkN2os.mft X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/82/7cb179-ad2c-4824-a1e5-ae07f32e4102/1/_EQpfpJxxu3wZJFfYYCuEmkN2os.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 51:ef:e3:33:1d:cb:c2:1f:d4:c5:81:cf:5c:86:07:55:de:37: e3:c9:e4:3d:ea:33:b1:25:97:fd:fb:2d:9b:f1:7d:be:a5:e1: b0:06:26:50:7f:2b:9a:d9:4c:68:48:84:6a:03:11:00:d7:00: c5:11:22:2b:51:87:89:a1:43:8c:1c:1e:00:3a:4d:e2:24:0e: da:19:5c:8b:62:b6:d5:97:66:3b:7b:a5:b6:b1:23:a4:9c:88: e5:67:52:fa:16:8f:aa:db:95:4a:05:59:34:13:3d:eb:82:01: 6b:14:e6:aa:33:ed:0e:73:6d:06:36:04:af:c7:67:d5:5e:a9: bf:36:54:d7:5c:c0:b4:9a:2e:32:6c:8a:17:d7:10:6f:a4:74: 03:94:f3:95:d6:8f:de:94:53:01:b6:83:b4:07:22:91:3f:83: 2b:37:f7:5f:51:05:1c:41:8f:71:d1:62:3c:c6:68:ba:05:19: 35:16:59:b7:fe:17:02:b2:ef:7a:f1:fd:ba:96:1d:33:a9:82: 58:c1:1f:0d:12:6e:3b:88:5c:c1:ad:56:f2:4c:d1:f4:e5:1d: ed:9a:a5:a2:30:87:de:c5:2a:a1:9b:0f:8e:4f:8d:f6:12:2f: 6d:7c:a1:01:4c:b4:20:64:12:ac:1b:da:c8:69:ee:73:75:74: da:fa:7c:18 -----BEGIN CERTIFICATE----- MIIFFjCCA/6gAwIBAgISAZn/IuJR6P+EEmm7Yqzo4v5fMA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKGZjNDQyOTdlOTI3MWM2ZWRmMDY0OTE1ZjYxODBhZTEyNjkw ZGRhOGIwHhcNMjUxMDIwMDEwMTQwWhcNMjUxMDIxMDEwMTQwWjAzMTEwLwYDVQQD EygwZDMzNWE1M2I5NmIwYjhlMDgwY2FhYTVlMGFjMWZmNGM0OGIxN2ZlMIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAoD6pEEw7+JYYag04A8G4FxEoRnSk kwfJSJflgON/4NudO/lvOSNkPG/nKk+9z2SUFS40sS8Lu1hMVZfr2GJrGw36xIFx b4wyzGcIxzOuXfeW/9p+DFhjurNSC1JgWKMsoYwbMxsQ2Zg7e3NvAQBXf1dr9E0L Ec1nRjSqgpkDIuNFDwRTte56Qw9tp5LnWRiPrjEdCXNoUWu6pVZV+OAInhKgEsWI OdSTiE+0Oo6AbLHi5oTPPmT5PqNwussTy2LKPA5l9XMzTiARkuOR/7RL8Jph2oYW C8VPb+nRsKHNIp/xDPl1YEt9FPgGqhXGItQLWMjY/Crebe5lD/P1m7jbyQIDAQAB o4ICIjCCAh4wHQYDVR0OBBYEFA0zWlO5awuOCAyqpeCsH/TEixf+MB8GA1UdIwQY MBaAFPxEKX6Sccbt8GSRX2GArhJpDdqLMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvX0VRcGZwSnh4dTN3WkpGZllZQ3VFbWtOMm9zLmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC84Mi83Y2IxNzktYWQyYy00ODI0LWExZTUt YWUwN2YzMmU0MTAyLzEvX0VRcGZwSnh4dTN3WkpGZllZQ3VFbWtOMm9zLm1mdDCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC84Mi83Y2IxNzktYWQyYy00ODI0LWExZTUtYWUwN2YzMmU0MTAy LzEvX0VRcGZwSnh4dTN3WkpGZllZQ3VFbWtOMm9zLmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAUe/jMx3L wh/UxYHPXIYHVd4348nkPeozsSWX/fstm/F9vqXhsAYmUH8rmtlMaEiEagMRANcA xREiK1GHiaFDjBweADpN4iQO2hlci2K21ZdmO3ultrEjpJyI5WdS+haPqtuVSgVZ NBM964IBaxTmqjPtDnNtBjYEr8dn1V6pvzZU11zAtJouMmyKF9cQb6R0A5TzldaP 3pRTAbaDtAcikT+DKzf3X1EFHEGPcdFiPMZougUZNRZZt/4XArLvevH9upYdM6mC WMEfDRJuO4hcwa1W8kzR9OUd7ZqlojCH3sUqoZsPjk+N9hIvbXyhAUy0IGQSrBva yGnuc3V02vp8GA== -----END CERTIFICATE-----Generated at Mon Oct 20 08:48:12 2025 by rpki-client