$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/90/c48271-dee5-4841-a7dd-b0d72e910efe/1/SIxl3DWbWMprpdPa64dPBYaE6MY.mft File: SIxl3DWbWMprpdPa64dPBYaE6MY.mft (raw, json) Hash identifier: vRBM87N9zh89fd9DTR4ZYLlZdST5wQJ7d2kDhbIg3lg= Subject key identifier: BA:D4:76:77:BB:76:3B:DD:15:7A:1C:E9:32:0B:02:67:B4:D2:1D:5E Authority key identifier: 48:8C:65:DC:35:9B:58:CA:6B:A5:D3:DA:EB:87:4F:05:86:84:E8:C6 Certificate issuer: /CN=488c65dc359b58ca6ba5d3daeb874f058684e8c6 Certificate serial: 0199FEEC03C86A7B9FD088EADD9609CAB181 Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/SIxl3DWbWMprpdPa64dPBYaE6MY.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/90/c48271-dee5-4841-a7dd-b0d72e910efe/1/SIxl3DWbWMprpdPa64dPBYaE6MY.mft Manifest number: 0C42 Signing time: Mon 20 Oct 2025 00:01:44 +0000 Manifest this update: Mon 20 Oct 2025 00:01:44 +0000 Manifest next update: Tue 21 Oct 2025 00:01:44 +0000 Files and hashes: 1: CUbuh0PM3yqW-CpytCXAWwYdQ7Q.roa (hash: j6MdXA11jocwq2zYd6v7F0+Oq8jAXnx5FNp5BWwzZDI=) 2: GlW6zMLj6EttAmWKHy7iwfBhWZE.roa (hash: ABJiNZOFb+afM+eJQ3jwpevUgACzN0c5eNSdwc405sQ=) 3: L80pK6ObZRSScU_AZIXdqKhbLPs.roa (hash: 18whVklVMP7ZtNSmFR8DrFdceRMOWEFp28FcU5z0yMo=) 4: OZiwI2QkuuLbAOllr-XJlZEbneE.roa (hash: mXAIyClIU1Z4vpuyMsGiBBynCYmQ4v0FodyB8WIXhxk=) 5: PIHm_2dfJM_TGdcbwqQtnYwPXVY.roa (hash: kVHy+yISe5vrX43T3bIZxXbjFq8ypYr+GWkGUxqbMqI=) 6: SIxl3DWbWMprpdPa64dPBYaE6MY.crl (hash: 8kCVa2G/0zCKctGQtJWBGyqumL5pF3TXWlJqwwX/GFk=) 7: cSVJv9Y-FnxxLG20frdAri_noBk.roa (hash: 34paWKddNtWaw0Vl7xzlk/3/M190Z6IXyvbGbAK4Tj8=) 8: ea6BO6jv5qXL6KOn3swl4W7fpN8.roa (hash: qb7RyOCex8dd5d/iXyz9TFdFXAm9eOIl5Q9VrGqRffk=) 9: f83w0UBpgcJD0dA64iAq7lmXARw.roa (hash: f9wovq1EqzUTh58ehH2r8oD0Nk4JJQcPOCa3DaAqpnI=) 10: h-PNQcjWOScse8WjyOhQeSbv950.roa (hash: /sFDGAAGqPfiAFmlm5KuC6NUsSeC3ZuPzrCQYYwFUic=) 11: ish05UKX4fVrvzNMO61JWME5e60.roa (hash: fxTiebuae7o4USUXNJvSnTZr/R7II3bNdrJaYwaOaWw=) 12: mNSZJOUVeZicld4QAL_-bUUCGDI.roa (hash: nBD9zjll4ut7eXUVf0/WxLdu+1b2MWKBGI9qLKkr07w=) 13: qxsheS1XzS3dymYbKGRvC_3BiO4.roa (hash: VtweZ6shC74Bgwh1irW6gEbqeXbHeH8CL8orxJ3cqko=) 14: sejuuPdZzCrTGWMQL8q6fL6s1bI.roa (hash: Ijpq2YAMnAhyxDacqfun38Wp4QxYF9meZt2cnqXBEVs=) 15: z4bsjVbTnI81Y7pi92gQtwuMcMA.roa (hash: 6k5So3y2nhT6Ksfiwx9bk8ELUKmJlBzOynlhbHwQFMg=) Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/90/c48271-dee5-4841-a7dd-b0d72e910efe/1/SIxl3DWbWMprpdPa64dPBYaE6MY.crl rsync://rpki.ripe.net/repository/DEFAULT/90/c48271-dee5-4841-a7dd-b0d72e910efe/1/SIxl3DWbWMprpdPa64dPBYaE6MY.mft rsync://rpki.ripe.net/repository/DEFAULT/SIxl3DWbWMprpdPa64dPBYaE6MY.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Mon 20 Oct 2025 20:00:59 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:99:fe:ec:03:c8:6a:7b:9f:d0:88:ea:dd:96:09:ca:b1:81 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=488c65dc359b58ca6ba5d3daeb874f058684e8c6 Validity Not Before: Oct 20 00:01:44 2025 GMT Not After : Oct 21 00:01:44 2025 GMT Subject: CN=bad47677bb763bdd157a1ce9320b0267b4d21d5e Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:c5:0c:3f:d7:a9:19:6c:90:b5:d9:6b:5e:c4:9c: 20:67:bf:7b:8b:f0:8a:7e:e0:d8:2d:0a:4f:db:8d: 61:15:19:62:94:71:c0:41:f1:06:f8:84:86:89:33: 3e:00:da:c1:52:6d:5a:74:c4:a9:0e:14:4a:09:5b: 2c:79:40:82:82:2b:7f:e8:32:59:6a:91:30:ef:35: eb:69:0d:f8:3c:a0:c3:50:35:a4:74:bf:26:82:5d: a8:0b:22:da:5c:8f:73:85:fe:7e:7f:22:6f:04:76: 5a:a2:7e:26:f1:7c:2a:a3:4e:0a:d7:a3:fc:68:59: 71:5f:29:01:79:8f:1a:ed:57:0a:1c:0f:91:cf:3b: e7:59:a6:f1:c6:c8:d1:36:fe:aa:fc:2c:87:30:f9: 2e:d7:3c:1b:d3:85:6c:38:f2:f3:3b:e3:5e:e5:a4: 9f:ce:47:74:ed:e9:f4:50:d2:fb:48:79:ab:1a:a7: e6:27:f1:a9:84:da:20:b0:3d:0e:6d:6a:8d:11:4e: e7:f7:11:56:e6:f8:c1:42:77:0c:ab:eb:56:82:58: 98:c5:2a:a1:e2:fa:8e:c2:23:bd:a4:6b:d7:84:cd: 95:4f:1e:37:0e:68:df:99:85:85:08:99:e1:bd:68: fc:02:c5:db:5e:5c:60:7d:f7:a6:bc:47:d3:57:84: 08:4d Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: BA:D4:76:77:BB:76:3B:DD:15:7A:1C:E9:32:0B:02:67:B4:D2:1D:5E X509v3 Authority Key Identifier: keyid:48:8C:65:DC:35:9B:58:CA:6B:A5:D3:DA:EB:87:4F:05:86:84:E8:C6 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/SIxl3DWbWMprpdPa64dPBYaE6MY.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/90/c48271-dee5-4841-a7dd-b0d72e910efe/1/SIxl3DWbWMprpdPa64dPBYaE6MY.mft X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/90/c48271-dee5-4841-a7dd-b0d72e910efe/1/SIxl3DWbWMprpdPa64dPBYaE6MY.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 61:2d:3c:78:6e:38:e1:d5:f6:fa:03:a5:13:24:f1:fa:29:a1: f4:ce:4a:a2:a6:ee:f9:ca:a0:65:9e:83:e9:11:5e:c8:fc:75: 7e:23:af:c7:b9:cc:44:41:98:d5:f1:e4:44:5e:b1:91:eb:ac: 01:36:a3:d9:ea:63:79:fb:f5:29:0a:57:34:43:86:4b:e1:57: 3a:60:55:bd:1e:a3:e2:99:1f:83:6b:ad:42:7a:6c:44:dd:99: ce:35:5e:7e:1e:62:3a:b7:a4:a3:ae:d3:4c:de:2c:34:1b:75: e5:9f:1f:6e:85:6d:ea:c8:fd:7c:55:b2:7c:b3:34:38:ce:21: f7:be:b4:81:30:52:eb:b4:75:97:08:be:5a:9e:de:b4:2e:39: fe:7d:cd:a6:53:04:57:2c:9b:3f:43:34:53:b5:9b:c6:b1:68: 18:66:ed:54:8e:15:e5:10:8a:0e:01:c9:13:36:f0:a7:06:50: 28:eb:f9:a1:7c:52:db:e6:5c:07:99:ad:c7:d6:60:eb:27:63: c9:d3:a7:07:08:b2:97:31:31:84:86:d4:f6:05:00:d3:be:9a: 4a:c9:8b:df:a0:8f:d0:6c:43:2d:5e:ef:65:d0:5c:44:a4:78: 02:0a:c9:b1:3e:dc:b9:b9:f6:ab:8e:67:2d:9c:a2:c1:80:03: c1:f9:64:d0 -----BEGIN CERTIFICATE----- MIIFFjCCA/6gAwIBAgISAZn+7APIanuf0Ijq3ZYJyrGBMA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKDQ4OGM2NWRjMzU5YjU4Y2E2YmE1ZDNkYWViODc0ZjA1ODY4 NGU4YzYwHhcNMjUxMDIwMDAwMTQ0WhcNMjUxMDIxMDAwMTQ0WjAzMTEwLwYDVQQD EyhiYWQ0NzY3N2JiNzYzYmRkMTU3YTFjZTkzMjBiMDI2N2I0ZDIxZDVlMIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAxQw/16kZbJC12WtexJwgZ797i/CK fuDYLQpP241hFRlilHHAQfEG+ISGiTM+ANrBUm1adMSpDhRKCVsseUCCgit/6DJZ apEw7zXraQ34PKDDUDWkdL8mgl2oCyLaXI9zhf5+fyJvBHZaon4m8Xwqo04K16P8 aFlxXykBeY8a7VcKHA+RzzvnWabxxsjRNv6q/CyHMPku1zwb04VsOPLzO+Ne5aSf zkd07en0UNL7SHmrGqfmJ/GphNogsD0ObWqNEU7n9xFW5vjBQncMq+tWgliYxSqh 4vqOwiO9pGvXhM2VTx43DmjfmYWFCJnhvWj8AsXbXlxgffemvEfTV4QITQIDAQAB o4ICIjCCAh4wHQYDVR0OBBYEFLrUdne7djvdFXoc6TILAme00h1eMB8GA1UdIwQY MBaAFEiMZdw1m1jKa6XT2uuHTwWGhOjGMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvU0l4bDNEV2JXTXBycGRQYTY0ZFBCWWFFNk1ZLmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC85MC9jNDgyNzEtZGVlNS00ODQxLWE3ZGQt YjBkNzJlOTEwZWZlLzEvU0l4bDNEV2JXTXBycGRQYTY0ZFBCWWFFNk1ZLm1mdDCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC85MC9jNDgyNzEtZGVlNS00ODQxLWE3ZGQtYjBkNzJlOTEwZWZl LzEvU0l4bDNEV2JXTXBycGRQYTY0ZFBCWWFFNk1ZLmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAYS08eG44 4dX2+gOlEyTx+imh9M5Koqbu+cqgZZ6D6RFeyPx1fiOvx7nMREGY1fHkRF6xkeus ATaj2epjefv1KQpXNEOGS+FXOmBVvR6j4pkfg2utQnpsRN2ZzjVefh5iOreko67T TN4sNBt15Z8fboVt6sj9fFWyfLM0OM4h9760gTBS67R1lwi+Wp7etC45/n3NplME VyybP0M0U7WbxrFoGGbtVI4V5RCKDgHJEzbwpwZQKOv5oXxS2+ZcB5mtx9Zg6ydj ydOnBwiylzExhIbU9gUA076aSsmL36CP0GxDLV7vZdBcRKR4AgrJsT7cubn2q45n LZyiwYADwflk0A== -----END CERTIFICATE-----Generated at Mon Oct 20 05:55:52 2025 by rpki-client