$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/89/d00889-e5ca-4090-a6a4-2ac6ff75beb0/1/p23Z2tdYd_fSjRTgjcVbEzC9E7c.mft File: p23Z2tdYd_fSjRTgjcVbEzC9E7c.mft (raw, json) Hash identifier: t5mp3ZiLpN0wo/hDveaslSggLxZAmFXPKNueQOEunXU= Subject key identifier: 66:E4:1C:6F:61:92:DD:40:D1:FA:07:0C:7C:CC:2C:25:5C:D5:CD:ED Authority key identifier: A7:6D:D9:DA:D7:58:77:F7:D2:8D:14:E0:8D:C5:5B:13:30:BD:13:B7 Certificate issuer: /CN=a76dd9dad75877f7d28d14e08dc55b1330bd13b7 Certificate serial: 0199FFFEAF1B7F4428D387ECB5744361B0D7 Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/p23Z2tdYd_fSjRTgjcVbEzC9E7c.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/89/d00889-e5ca-4090-a6a4-2ac6ff75beb0/1/p23Z2tdYd_fSjRTgjcVbEzC9E7c.mft Manifest number: 16FB Signing time: Mon 20 Oct 2025 05:01:44 +0000 Manifest this update: Mon 20 Oct 2025 05:01:44 +0000 Manifest next update: Tue 21 Oct 2025 05:01:44 +0000 Files and hashes: 1: QT7D6zXAVoUxNK5Dz_Sr3Ysp0jY.roa (hash: NxSCkfWg+RxkMBPwT+VShHgw3RROnFUgM7kWEk11WTI=) 2: XbTeM1PqMKcQqGHBF2Epuf32B9A.roa (hash: hOnMCvxmcOEtS0aimUSMyI+EYwi7WWRIO2fcpaLnTMo=) 3: hRG76VocwZXhxkxCAJrESxkkjbY.roa (hash: R6reBqJWi+zQpuGx/72cFGp8W0OEKy5DLaWeb2k91DA=) 4: iWHLz7pb0VOnknWH2cLTUErxOZo.roa (hash: jWeDGrOMaI4VEcetBFaHjDSN9dYVfQeBBIRCHkcbqGg=) 5: l-wNxi1bPZkNern9TbmWMfg4MJ4.roa (hash: WyFvbV1rJyTWSGqAchaQ6NeEA4bf29r+mAAX5z8uy7I=) 6: nKH_sxXM1uxYbMZBzn1lBWWh5Gk.roa (hash: g58milGmDWRWbcSoOduM9RCTlJ8I/zXGlZd0g1v6y6Y=) 7: nWpFu-ia2X0bjJCOwDt5OD3QhUU.roa (hash: j+w1oRLaR1UCeH6IJgbFlYRh4McsjrNOg64gWYp7KyE=) 8: p23Z2tdYd_fSjRTgjcVbEzC9E7c.crl (hash: pqvlBfkDFt5twzuWO85QlQXKyzvfpW8J5HS5Z4dHYT4=) 9: qK4AAnwuTwRwNOb2CLLZs8W9VuI.roa (hash: cqQ7l3QbvSMEr2phGWC5VDW+4MerE13RpRcZdGJsAvw=) 10: vIlI_dchwexZNflF7gIM73uLcOg.roa (hash: pny1c3FWYabHzSSLkClEvdiIBKMwq09M8u+AIiKsPlk=) 11: ydZkgwYcvYbM7mbYd53RAsEkq3U.roa (hash: qwmH6QR7NKSIBlvN+e3NJdnmXczvm/lNUAul9UFFgLI=) Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/89/d00889-e5ca-4090-a6a4-2ac6ff75beb0/1/p23Z2tdYd_fSjRTgjcVbEzC9E7c.crl rsync://rpki.ripe.net/repository/DEFAULT/89/d00889-e5ca-4090-a6a4-2ac6ff75beb0/1/p23Z2tdYd_fSjRTgjcVbEzC9E7c.mft rsync://rpki.ripe.net/repository/DEFAULT/p23Z2tdYd_fSjRTgjcVbEzC9E7c.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Tue 21 Oct 2025 00:00:58 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:99:ff:fe:af:1b:7f:44:28:d3:87:ec:b5:74:43:61:b0:d7 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=a76dd9dad75877f7d28d14e08dc55b1330bd13b7 Validity Not Before: Oct 20 05:01:44 2025 GMT Not After : Oct 21 05:01:44 2025 GMT Subject: CN=66e41c6f6192dd40d1fa070c7ccc2c255cd5cded Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:b4:79:cb:b4:66:ab:e6:0d:ed:36:ee:b5:e8:50: 63:7d:54:6c:b1:12:ba:31:72:a4:dd:ba:53:6f:01: 30:4c:b1:0a:f7:27:32:0a:d8:83:d5:d7:18:2c:29: 1f:41:cc:06:99:a7:05:79:7e:19:8e:4c:17:ad:9b: b4:04:6e:97:c3:76:87:61:a6:75:57:cb:e9:a6:0f: c3:e2:94:b9:1b:e6:0d:0f:cc:a1:bd:66:63:28:92: 20:f4:7b:5b:60:3b:bb:c2:28:a5:ee:4f:89:00:9f: aa:ba:1a:bd:d2:b1:74:a4:d6:c7:33:ac:99:69:b7: 0c:7e:a7:a0:3a:87:b8:0e:e8:67:fc:0f:30:49:a6: 49:1b:33:8e:8e:55:85:41:71:6f:fc:33:0c:8d:9b: ec:d0:e2:35:db:a9:ed:8f:b5:c2:40:02:e0:f1:56: fd:ec:61:e2:f0:fd:a4:2c:8b:52:32:61:37:b4:45: ac:5f:70:90:09:ee:02:b9:cd:7f:aa:9f:b8:24:85: 2f:4d:b6:d7:1f:45:20:10:e8:05:7d:4c:d3:9c:f0: 32:be:94:49:b6:ce:d2:b7:d4:7c:e9:59:30:87:af: 3b:8b:35:1c:7b:bb:23:13:af:a5:28:a7:d8:ba:27: 64:d5:0f:8e:d8:a9:0e:8f:9e:f4:0f:1f:6e:76:6a: 1a:93 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 66:E4:1C:6F:61:92:DD:40:D1:FA:07:0C:7C:CC:2C:25:5C:D5:CD:ED X509v3 Authority Key Identifier: keyid:A7:6D:D9:DA:D7:58:77:F7:D2:8D:14:E0:8D:C5:5B:13:30:BD:13:B7 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/p23Z2tdYd_fSjRTgjcVbEzC9E7c.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/89/d00889-e5ca-4090-a6a4-2ac6ff75beb0/1/p23Z2tdYd_fSjRTgjcVbEzC9E7c.mft X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/89/d00889-e5ca-4090-a6a4-2ac6ff75beb0/1/p23Z2tdYd_fSjRTgjcVbEzC9E7c.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 03:3a:aa:18:6f:c6:07:b7:07:d0:0a:52:0d:14:9f:d4:95:cf: 02:1a:33:91:8d:2a:c0:83:4e:ca:64:d8:70:83:83:dd:83:7b: 4d:c6:b4:10:59:d6:48:7f:65:61:40:9b:7c:fa:00:51:ab:df: b7:49:4d:e9:bd:58:c2:e1:71:06:ef:f8:27:b7:fd:98:fe:4c: a9:09:f6:d6:86:2f:86:fd:a7:34:ff:4a:b5:5f:cb:c8:b2:8e: ba:4e:7b:7f:b9:a0:d1:a0:48:c5:66:4b:c5:56:38:c2:f6:6b: 21:b5:9c:ff:ed:15:07:d3:de:73:e6:22:49:00:27:46:88:42: 4d:69:9c:a0:46:58:de:b5:7c:9a:b8:94:3a:06:fe:f1:8e:ad: 2f:b0:5b:01:e1:24:45:18:da:e9:04:2a:af:ce:1d:47:3b:d7: 48:94:0e:35:90:75:2d:52:4e:b6:7b:51:5e:b1:40:9d:98:79: da:c4:3e:69:14:52:ec:47:66:1a:29:98:f2:23:a0:83:c0:ea: 84:44:86:88:08:75:f0:f6:49:bc:d1:fc:4f:a5:ef:19:7e:25: c4:14:72:d8:59:29:74:ed:b6:aa:d9:91:a4:6d:63:90:70:12: da:c2:1e:a7:23:d0:75:fa:1d:d5:a9:97:ad:a7:ff:d3:0c:30: 61:ab:29:5f -----BEGIN CERTIFICATE----- MIIFFjCCA/6gAwIBAgISAZn//q8bf0Qo04fstXRDYbDXMA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKGE3NmRkOWRhZDc1ODc3ZjdkMjhkMTRlMDhkYzU1YjEzMzBi ZDEzYjcwHhcNMjUxMDIwMDUwMTQ0WhcNMjUxMDIxMDUwMTQ0WjAzMTEwLwYDVQQD Eyg2NmU0MWM2ZjYxOTJkZDQwZDFmYTA3MGM3Y2NjMmMyNTVjZDVjZGVkMIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAtHnLtGar5g3tNu616FBjfVRssRK6 MXKk3bpTbwEwTLEK9ycyCtiD1dcYLCkfQcwGmacFeX4ZjkwXrZu0BG6Xw3aHYaZ1 V8vppg/D4pS5G+YND8yhvWZjKJIg9HtbYDu7wiil7k+JAJ+quhq90rF0pNbHM6yZ abcMfqegOoe4Duhn/A8wSaZJGzOOjlWFQXFv/DMMjZvs0OI126ntj7XCQALg8Vb9 7GHi8P2kLItSMmE3tEWsX3CQCe4Cuc1/qp+4JIUvTbbXH0UgEOgFfUzTnPAyvpRJ ts7St9R86Vkwh687izUce7sjE6+lKKfYuidk1Q+O2KkOj570Dx9udmoakwIDAQAB o4ICIjCCAh4wHQYDVR0OBBYEFGbkHG9hkt1A0foHDHzMLCVc1c3tMB8GA1UdIwQY MBaAFKdt2drXWHf30o0U4I3FWxMwvRO3MA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvcDIzWjJ0ZFlkX2ZTalJUZ2pjVmJFekM5RTdjLmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC84OS9kMDA4ODktZTVjYS00MDkwLWE2YTQt MmFjNmZmNzViZWIwLzEvcDIzWjJ0ZFlkX2ZTalJUZ2pjVmJFekM5RTdjLm1mdDCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC84OS9kMDA4ODktZTVjYS00MDkwLWE2YTQtMmFjNmZmNzViZWIw LzEvcDIzWjJ0ZFlkX2ZTalJUZ2pjVmJFekM5RTdjLmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAAzqqGG/G B7cH0ApSDRSf1JXPAhozkY0qwINOymTYcIOD3YN7Tca0EFnWSH9lYUCbfPoAUavf t0lN6b1YwuFxBu/4J7f9mP5MqQn21oYvhv2nNP9KtV/LyLKOuk57f7mg0aBIxWZL xVY4wvZrIbWc/+0VB9Pec+YiSQAnRohCTWmcoEZY3rV8mriUOgb+8Y6tL7BbAeEk RRja6QQqr84dRzvXSJQONZB1LVJOtntRXrFAnZh52sQ+aRRS7EdmGimY8iOgg8Dq hESGiAh18PZJvNH8T6XvGX4lxBRy2FkpdO22qtmRpG1jkHAS2sIepyPQdfod1amX raf/0wwwYaspXw== -----END CERTIFICATE-----Generated at Mon Oct 20 09:22:51 2025 by rpki-client