$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/85/ede94e-ba2a-41ee-b12c-e0534e23859b/1/5llvGxY8qwxFqE7rEyYbZfGiKWI.mft File: 5llvGxY8qwxFqE7rEyYbZfGiKWI.mft (raw, json) Hash identifier: l+EtjgTkyi4BZ7Yuudf7YBawTXwwK2PWKvFNI6lU3+M= Subject key identifier: 95:EA:2A:FE:61:D8:E9:78:06:FF:8E:AE:0E:20:2A:A2:D1:2C:22:CB Authority key identifier: E6:59:6F:1B:16:3C:AB:0C:45:A8:4E:EB:13:26:1B:65:F1:A2:29:62 Certificate issuer: /CN=e6596f1b163cab0c45a84eeb13261b65f1a22962 Certificate serial: 0199FBEB9B6583FBB7B6F56A6F6AB5958728 Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/5llvGxY8qwxFqE7rEyYbZfGiKWI.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/85/ede94e-ba2a-41ee-b12c-e0534e23859b/1/5llvGxY8qwxFqE7rEyYbZfGiKWI.mft Manifest number: 16F5 Signing time: Sun 19 Oct 2025 10:02:25 +0000 Manifest this update: Sun 19 Oct 2025 10:02:25 +0000 Manifest next update: Mon 20 Oct 2025 10:02:25 +0000 Files and hashes: 1: 5llvGxY8qwxFqE7rEyYbZfGiKWI.crl (hash: bobBgH0jJxWxtyd5lMVm5OqasHnarPwrfZTkT3mAiNc=) 2: EPrKtO_Wui_AIcoB1IjnBBpjTA0.roa (hash: Ns7k+bsMT28IYTUvIKM9gdNIwjEuXm0xT0/L3x28CpU=) 3: GSrzoMsqdrffXvz8XfRbb06cdoU.roa (hash: qO16W1LJUB1Sf5kzJO7kSt5JrIHbHWcZRaQOTtkSO+c=) 4: UY47b1nKTBymo-_2aL9oMC7vX38.roa (hash: bK73SZPBKj3iAjuEKmNGnIADIWNE9D/9YsMH7QmUlZ0=) 5: c9pIRKumzJnPv6L0_0S99z5-7Pw.roa (hash: JszoDngQwRDEsojUMs8/qjNo60rDhfYCdak0Z9nn2Bg=) 6: ffZavXQaQNIwwKVW84vxnOTS_2k.roa (hash: oA0RmBJXJ8Iaj/uIUokVdX89kZuQ0WJjVTCDBbmztv8=) 7: g7knCJ57jgLAS24rI4X3btb-M4c.roa (hash: 3UFtXY+vf3X8W6kWA8FvJJwhkGk4KqYw38fo24s58Sk=) 8: gFreThJqNlHPvyHQ79dnfJgTPWo.roa (hash: L3hMFyzcKxYUiA62qUifu4SJz3107QolnvNpa2edIOo=) 9: iwjx0AhvwxAf6vZnR0V70CNSj3k.roa (hash: s4vyo2AL6KEF6yGbsgdcSILxp1qahFdr2Um6ni3Nsz4=) 10: qZ2rbeeUwV9WnVFloyx-2WLLaic.roa (hash: PyKdiPPGb3idbj43k0xja1+Mj7fQbqPrKGkBwHfZq1c=) 11: tCNgCc7S1ewGtgMhWiXaNGTqwZ8.roa (hash: 0ar853JOpvsnmzIOleciC89u2nN3g3yWX8hEwIiz39U=) Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/85/ede94e-ba2a-41ee-b12c-e0534e23859b/1/5llvGxY8qwxFqE7rEyYbZfGiKWI.crl rsync://rpki.ripe.net/repository/DEFAULT/85/ede94e-ba2a-41ee-b12c-e0534e23859b/1/5llvGxY8qwxFqE7rEyYbZfGiKWI.mft rsync://rpki.ripe.net/repository/DEFAULT/5llvGxY8qwxFqE7rEyYbZfGiKWI.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Mon 20 Oct 2025 10:02:25 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:99:fb:eb:9b:65:83:fb:b7:b6:f5:6a:6f:6a:b5:95:87:28 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=e6596f1b163cab0c45a84eeb13261b65f1a22962 Validity Not Before: Oct 19 10:02:25 2025 GMT Not After : Oct 20 10:02:25 2025 GMT Subject: CN=95ea2afe61d8e97806ff8eae0e202aa2d12c22cb Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:df:22:ac:44:6b:84:af:d5:1c:15:10:18:28:09: 51:03:c7:53:62:9f:dc:00:c3:7e:36:ed:bc:4d:58: 19:27:51:80:22:1e:e7:c9:bc:47:d8:e8:a8:cd:29: 34:7d:ad:29:6c:0c:69:e0:cb:86:d0:8d:ee:a3:77: 25:cf:b0:02:34:42:77:cd:b8:ee:af:b8:2d:19:0c: 4e:c1:cf:fe:51:e3:f3:0f:7f:5d:f8:92:b9:8c:d0: 9b:f9:bc:e2:46:f7:bb:bc:40:0e:d8:d8:d3:db:21: 5c:a6:a3:bf:db:07:e9:79:1e:ef:82:57:a1:bd:15: 1c:a0:48:f0:00:fd:4b:08:24:e4:34:d4:e4:fc:00: 46:8b:0d:cf:ed:97:c5:54:92:7b:5c:40:71:21:55: a7:6f:af:73:7b:5b:cd:b5:a3:48:0d:15:43:9f:e0: 80:ac:aa:f8:b2:df:b0:b4:1c:07:5c:59:fa:17:58: c0:87:7d:2e:3d:ea:7c:fa:98:94:47:ce:42:01:43: f3:86:d8:c0:0a:82:28:c3:70:76:be:bc:08:82:69: 94:76:10:1a:4e:da:a3:53:36:71:00:05:5d:68:a8: 7c:d9:0f:95:bd:f7:27:fb:13:c1:74:36:7e:df:91: aa:f4:a3:dd:d6:86:d0:0f:37:3d:74:19:87:dc:3e: c9:8b Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 95:EA:2A:FE:61:D8:E9:78:06:FF:8E:AE:0E:20:2A:A2:D1:2C:22:CB X509v3 Authority Key Identifier: keyid:E6:59:6F:1B:16:3C:AB:0C:45:A8:4E:EB:13:26:1B:65:F1:A2:29:62 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/5llvGxY8qwxFqE7rEyYbZfGiKWI.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/85/ede94e-ba2a-41ee-b12c-e0534e23859b/1/5llvGxY8qwxFqE7rEyYbZfGiKWI.mft X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/85/ede94e-ba2a-41ee-b12c-e0534e23859b/1/5llvGxY8qwxFqE7rEyYbZfGiKWI.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 66:9b:76:7e:07:13:cd:e1:d8:7b:18:f7:e9:1c:f3:4e:84:31: 55:3b:b9:16:5f:23:44:e8:50:84:87:7d:c2:75:ce:a1:cd:1e: 2a:d4:69:79:f3:d5:80:1a:70:10:2e:0f:c5:bb:e6:f7:f2:c7: e4:bd:b0:bf:61:39:8c:f5:55:81:f0:fa:02:8f:0c:d7:39:43: 63:db:eb:9a:1e:9c:8f:6d:71:90:99:1c:26:c9:31:87:47:6e: af:d0:0f:06:08:87:24:64:18:a9:f4:9c:9c:cb:d3:a0:9c:60: db:3b:8c:17:b9:69:f1:b2:d9:65:84:7b:e5:67:e2:55:96:32: 21:07:a0:b4:af:26:d5:f1:88:4e:af:d2:6d:ed:83:99:30:d2: ae:42:ea:d6:06:4a:44:6f:7a:68:e9:c6:46:86:c7:af:f5:61: 4d:0e:be:c2:30:15:a0:54:e9:ff:36:34:1c:e1:2f:08:d4:a4: 2a:d2:69:6f:0b:b5:5a:19:2b:e2:cb:2b:e7:ad:e2:e0:36:7a: 7d:8a:df:0f:24:b4:ad:78:4d:59:81:ab:d3:f3:f7:e4:ba:de: 89:88:0e:32:b0:88:c1:c0:10:49:a4:6d:9d:42:0e:da:75:28: 6d:a1:c1:77:5f:b1:4a:3d:98:08:64:72:8f:38:ca:15:b5:79: 4e:45:8c:b1 -----BEGIN CERTIFICATE----- MIIFFjCCA/6gAwIBAgISAZn765tlg/u3tvVqb2q1lYcoMA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKGU2NTk2ZjFiMTYzY2FiMGM0NWE4NGVlYjEzMjYxYjY1ZjFh MjI5NjIwHhcNMjUxMDE5MTAwMjI1WhcNMjUxMDIwMTAwMjI1WjAzMTEwLwYDVQQD Eyg5NWVhMmFmZTYxZDhlOTc4MDZmZjhlYWUwZTIwMmFhMmQxMmMyMmNiMIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEA3yKsRGuEr9UcFRAYKAlRA8dTYp/c AMN+Nu28TVgZJ1GAIh7nybxH2OiozSk0fa0pbAxp4MuG0I3uo3clz7ACNEJ3zbju r7gtGQxOwc/+UePzD39d+JK5jNCb+bziRve7vEAO2NjT2yFcpqO/2wfpeR7vgleh vRUcoEjwAP1LCCTkNNTk/ABGiw3P7ZfFVJJ7XEBxIVWnb69ze1vNtaNIDRVDn+CA rKr4st+wtBwHXFn6F1jAh30uPep8+piUR85CAUPzhtjACoIow3B2vrwIgmmUdhAa TtqjUzZxAAVdaKh82Q+Vvfcn+xPBdDZ+35Gq9KPd1obQDzc9dBmH3D7JiwIDAQAB o4ICIjCCAh4wHQYDVR0OBBYEFJXqKv5h2Ol4Bv+Org4gKqLRLCLLMB8GA1UdIwQY MBaAFOZZbxsWPKsMRahO6xMmG2XxoiliMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvNWxsdkd4WThxd3hGcUU3ckV5WWJaZkdpS1dJLmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC84NS9lZGU5NGUtYmEyYS00MWVlLWIxMmMt ZTA1MzRlMjM4NTliLzEvNWxsdkd4WThxd3hGcUU3ckV5WWJaZkdpS1dJLm1mdDCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC84NS9lZGU5NGUtYmEyYS00MWVlLWIxMmMtZTA1MzRlMjM4NTli LzEvNWxsdkd4WThxd3hGcUU3ckV5WWJaZkdpS1dJLmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAZpt2fgcT zeHYexj36RzzToQxVTu5Fl8jROhQhId9wnXOoc0eKtRpefPVgBpwEC4Pxbvm9/LH 5L2wv2E5jPVVgfD6Ao8M1zlDY9vrmh6cj21xkJkcJskxh0dur9APBgiHJGQYqfSc nMvToJxg2zuMF7lp8bLZZYR75WfiVZYyIQegtK8m1fGITq/Sbe2DmTDSrkLq1gZK RG96aOnGRobHr/VhTQ6+wjAVoFTp/zY0HOEvCNSkKtJpbwu1Whkr4ssr563i4DZ6 fYrfDyS0rXhNWYGr0/P35LreiYgOMrCIwcAQSaRtnUIO2nUobaHBd1+xSj2YCGRy jzjKFbV5TkWMsQ== -----END CERTIFICATE-----Generated at Sun Oct 19 17:27:33 2025 by rpki-client