$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/9d/56167f-5327-4c88-b4ea-3beccaae336d/1/SeFL929C2k8qwAOmxp1hwjIOLNg.mft File: SeFL929C2k8qwAOmxp1hwjIOLNg.mft (raw, json) Hash identifier: T+Q8Hl7sLcP3pddsCLkFx5byudD0M5H/T4+tgxNTtes= Subject key identifier: 07:EF:E1:54:94:8A:72:CD:FE:22:BC:8F:B1:4B:00:26:FE:48:4C:08 Authority key identifier: 49:E1:4B:F7:6F:42:DA:4F:2A:C0:03:A6:C6:9D:61:C2:32:0E:2C:D8 Certificate issuer: /CN=49e14bf76f42da4f2ac003a6c69d61c2320e2cd8 Certificate serial: 0199FEB4EEC1F9595ACD48EEC22DF9B26942 Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/SeFL929C2k8qwAOmxp1hwjIOLNg.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/9d/56167f-5327-4c88-b4ea-3beccaae336d/1/SeFL929C2k8qwAOmxp1hwjIOLNg.mft Manifest number: 1152 Signing time: Sun 19 Oct 2025 23:01:34 +0000 Manifest this update: Sun 19 Oct 2025 23:01:34 +0000 Manifest next update: Mon 20 Oct 2025 23:01:34 +0000 Files and hashes: 1: 1JBbxjT9LW1M45TfUBltflWXjYo.roa (hash: +kWM+UT9oOWnxVo332YivS+2g4/PD34pohQWp5gFo5E=) 2: Ns_2WTykJXWBKeAZy8ZQQTGIZ4g.roa (hash: zHFP35lrOV5ykmqGRdLeDFScFpQtr+Xab1k7m30xSdw=) 3: OANXXNT4d7OJ6o497Ctf48xykTY.roa (hash: aZ2NtskCeNGxotOVm0/S/doAkEWhZqM1q8mtGb9yHS0=) 4: RI77ZK3aqTLPg2W-XBkxR7T7p4Q.roa (hash: nk2g70SgrOg1E7ZHO+z50BOPQEJsdzJ7hk5jt1A6+b0=) 5: SeFL929C2k8qwAOmxp1hwjIOLNg.crl (hash: T/Y2fUyNeWaK2j5tln/FKoLfmnyLY8ckDmHykxX6Fxg=) 6: X6bDse8LmUftPmqQf4kw_btsOvE.roa (hash: j651kWeKBdPGwLMPF+EPghkkL3051eJwiT7QuhCps4o=) 7: _GcWVg1NloetvFlVnnsXCsqW9jA.roa (hash: 8fDT+HFMs22XfNV5rWe49DrDAkwxKtbv8tRmabSl16Q=) 8: h6nXxCojgmG6H44QUolSl46rG3Q.roa (hash: Jg0E3EWR0gqOThcjNWzxcD0juv44xUicy/wOavdwVH4=) 9: kLzXL1ZkV5i7SczjHie-nPdTakk.roa (hash: KSQB5UsbV0dtTyrjqQ8bJx4qGPsJFrVxBc1ZJaVStDg=) 10: zGWw5y3QtBedo3lJVh0hQTzv87w.roa (hash: LJqgZZZrONstDDkOQIUQr4bq2xXQX5fdOe5gdv77tuI=) Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/9d/56167f-5327-4c88-b4ea-3beccaae336d/1/SeFL929C2k8qwAOmxp1hwjIOLNg.crl rsync://rpki.ripe.net/repository/DEFAULT/9d/56167f-5327-4c88-b4ea-3beccaae336d/1/SeFL929C2k8qwAOmxp1hwjIOLNg.mft rsync://rpki.ripe.net/repository/DEFAULT/SeFL929C2k8qwAOmxp1hwjIOLNg.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Mon 20 Oct 2025 15:00:58 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:99:fe:b4:ee:c1:f9:59:5a:cd:48:ee:c2:2d:f9:b2:69:42 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=49e14bf76f42da4f2ac003a6c69d61c2320e2cd8 Validity Not Before: Oct 19 23:01:34 2025 GMT Not After : Oct 20 23:01:34 2025 GMT Subject: CN=07efe154948a72cdfe22bc8fb14b0026fe484c08 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:cf:09:06:5f:60:99:65:9f:3e:1f:66:2e:b5:ce: 39:5d:e2:28:89:2c:17:7f:c3:ab:c0:19:cd:cd:ed: 9d:e3:eb:e5:c1:3b:14:95:64:98:04:31:08:73:38: 52:14:6a:3c:7d:9b:bf:9b:e6:22:81:1f:60:1b:dc: 76:c3:15:05:f9:0e:c9:2a:2e:86:a6:45:ce:27:5b: de:39:0f:35:67:95:36:52:9a:6d:8c:79:a6:01:7e: 94:ab:8d:62:af:49:bb:71:cb:5b:8a:f9:62:54:39: 5e:dd:f1:8b:b7:df:17:d4:9c:6a:e1:d5:8c:6c:00: 16:62:19:ad:48:71:fc:1c:73:94:b6:93:45:3e:32: 9e:ba:98:16:78:39:54:1f:44:ca:19:85:74:17:4f: e7:45:ab:9c:dd:73:2f:6f:61:71:6f:cc:0f:84:d1: 30:61:40:40:dd:f3:57:4e:d3:9c:d5:dd:a5:14:0a: 98:b6:e0:be:cd:38:31:88:76:8e:ae:f0:25:6d:ef: c4:cc:0b:c5:9a:88:6b:23:97:ac:43:12:a1:aa:ee: 1f:ea:7e:13:00:dc:d4:68:24:c1:9f:ae:f2:a6:1f: 13:d2:9e:c9:d6:45:fb:f3:4f:7d:b7:09:d2:90:b5: 5a:92:82:4e:fd:71:ea:bf:3c:0e:42:49:f6:16:c8: 0f:2b Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 07:EF:E1:54:94:8A:72:CD:FE:22:BC:8F:B1:4B:00:26:FE:48:4C:08 X509v3 Authority Key Identifier: keyid:49:E1:4B:F7:6F:42:DA:4F:2A:C0:03:A6:C6:9D:61:C2:32:0E:2C:D8 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/SeFL929C2k8qwAOmxp1hwjIOLNg.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/9d/56167f-5327-4c88-b4ea-3beccaae336d/1/SeFL929C2k8qwAOmxp1hwjIOLNg.mft X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/9d/56167f-5327-4c88-b4ea-3beccaae336d/1/SeFL929C2k8qwAOmxp1hwjIOLNg.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 53:e7:20:04:81:0d:70:1d:9e:fc:71:b0:60:5d:7d:a8:81:5c: 7c:bc:cf:6c:24:38:73:97:bd:a3:b5:77:17:22:d8:cd:4b:6d: 35:aa:c5:8d:1e:8c:45:e5:85:c1:dc:2e:b7:a8:89:c8:4b:50: 02:bf:f6:9c:72:87:44:b1:8a:73:4c:67:3a:9b:de:7b:95:48: 12:4b:dd:21:97:73:ef:bf:d5:a0:dc:25:5e:c8:c4:ce:71:f0: 59:ee:c3:c6:e9:5a:e6:f4:8c:8e:df:06:7e:4a:d4:e1:3f:13: 49:a1:31:7e:dc:26:00:82:62:92:61:20:54:72:49:ed:5c:93: 9f:3a:80:cd:3a:ca:9d:75:6e:33:fb:be:ac:d8:eb:97:29:ea: a8:b9:8c:00:08:ba:71:72:e2:66:69:a3:5f:f7:6e:f0:05:1b: be:1b:d8:57:51:05:21:d4:52:0b:97:49:03:1d:be:57:38:e3: 21:5a:72:90:16:09:d7:7d:5d:b7:60:bd:59:ad:3a:c9:c6:c3: fa:c2:c9:3a:f9:0a:41:59:f0:c2:b3:e3:e0:6a:2f:86:9f:dc: 2a:e1:6f:f8:a5:46:b2:e6:ea:56:d7:5c:3f:88:07:7e:c9:bf: 7c:c7:9b:c3:e1:f4:cd:45:c2:b2:ae:08:45:2e:f1:8b:3e:53: af:4d:f1:15 -----BEGIN CERTIFICATE----- MIIFFjCCA/6gAwIBAgISAZn+tO7B+VlazUjuwi35smlCMA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKDQ5ZTE0YmY3NmY0MmRhNGYyYWMwMDNhNmM2OWQ2MWMyMzIw ZTJjZDgwHhcNMjUxMDE5MjMwMTM0WhcNMjUxMDIwMjMwMTM0WjAzMTEwLwYDVQQD EygwN2VmZTE1NDk0OGE3MmNkZmUyMmJjOGZiMTRiMDAyNmZlNDg0YzA4MIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAzwkGX2CZZZ8+H2Yutc45XeIoiSwX f8OrwBnNze2d4+vlwTsUlWSYBDEIczhSFGo8fZu/m+YigR9gG9x2wxUF+Q7JKi6G pkXOJ1veOQ81Z5U2UpptjHmmAX6Uq41ir0m7cctbivliVDle3fGLt98X1Jxq4dWM bAAWYhmtSHH8HHOUtpNFPjKeupgWeDlUH0TKGYV0F0/nRauc3XMvb2Fxb8wPhNEw YUBA3fNXTtOc1d2lFAqYtuC+zTgxiHaOrvAlbe/EzAvFmohrI5esQxKhqu4f6n4T ANzUaCTBn67yph8T0p7J1kX78099twnSkLVakoJO/XHqvzwOQkn2FsgPKwIDAQAB o4ICIjCCAh4wHQYDVR0OBBYEFAfv4VSUinLN/iK8j7FLACb+SEwIMB8GA1UdIwQY MBaAFEnhS/dvQtpPKsADpsadYcIyDizYMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvU2VGTDkyOUMyazhxd0FPbXhwMWh3aklPTE5nLmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC85ZC81NjE2N2YtNTMyNy00Yzg4LWI0ZWEt M2JlY2NhYWUzMzZkLzEvU2VGTDkyOUMyazhxd0FPbXhwMWh3aklPTE5nLm1mdDCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC85ZC81NjE2N2YtNTMyNy00Yzg4LWI0ZWEtM2JlY2NhYWUzMzZk LzEvU2VGTDkyOUMyazhxd0FPbXhwMWh3aklPTE5nLmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAU+cgBIEN cB2e/HGwYF19qIFcfLzPbCQ4c5e9o7V3FyLYzUttNarFjR6MReWFwdwut6iJyEtQ Ar/2nHKHRLGKc0xnOpvee5VIEkvdIZdz77/VoNwlXsjEznHwWe7Dxula5vSMjt8G fkrU4T8TSaExftwmAIJikmEgVHJJ7VyTnzqAzTrKnXVuM/u+rNjrlynqqLmMAAi6 cXLiZmmjX/du8AUbvhvYV1EFIdRSC5dJAx2+VzjjIVpykBYJ131dt2C9Wa06ycbD +sLJOvkKQVnwwrPj4Govhp/cKuFv+KVGsubqVtdcP4gHfsm/fMebw+H0zUXCsq4I RS7xiz5Tr03xFQ== -----END CERTIFICATE-----Generated at Mon Oct 20 01:10:08 2025 by rpki-client