$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/9e/aba502-d191-4fd7-a7cf-504f2766760f/1/snJh1xU0i_1zzp27ckiGVpk7ovE.mft File: snJh1xU0i_1zzp27ckiGVpk7ovE.mft (raw, json) Hash identifier: 8vgI4AIOmZZricLxo9jfuZUXCN4AH7NWnmpR9YYKGis= Subject key identifier: 7D:F0:28:FC:D5:74:81:2D:71:6F:DA:08:4B:02:A7:51:98:D1:64:8A Authority key identifier: B2:72:61:D7:15:34:8B:FD:73:CE:9D:BB:72:48:86:56:99:3B:A2:F1 Certificate issuer: /CN=b27261d715348bfd73ce9dbb72488656993ba2f1 Certificate serial: 0199FC21BABCB9FE9D1016E24BE39DD1397A Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/snJh1xU0i_1zzp27ckiGVpk7ovE.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/9e/aba502-d191-4fd7-a7cf-504f2766760f/1/snJh1xU0i_1zzp27ckiGVpk7ovE.mft Manifest number: 120F Signing time: Sun 19 Oct 2025 11:01:32 +0000 Manifest this update: Sun 19 Oct 2025 11:01:32 +0000 Manifest next update: Mon 20 Oct 2025 11:01:32 +0000 Files and hashes: 1: 54iLRsUEYQSLlV8kHVTer9P4keA.roa (hash: Oib7LJlXh4bUMGiTPxF+59IQOdwF+fvCUOmQ1Sv5YqM=) 2: 83ZfI9Fyoy0-0Ed7XViCJUVWAUk.roa (hash: x5Erfp0LUGN9evcbs1ECyXblatyvnAhrnm8OrbCDB8k=) 3: DtWqKYrRCyGx6dsd9f2L7CKfIRc.roa (hash: O7NemdIlDZpd4quz6YecLMnjW1CyD/u06cKhcBOTRro=) 4: GrZCo-Pl-pKds5zmwg7ubalVFTA.roa (hash: XSM4rBpjvcsUyAb/r/u55Oo3ZCJqxZNIGwjYsJQ68bw=) 5: M80ufUXhkNHfa9K4zU6X6k_ofZQ.roa (hash: 4dQl+qST57nUFs67WwcEmlUV01oY2iEO29630JMqbwE=) 6: OcXOGlX2Gc26JEdm5iWVWnBYg58.roa (hash: /vGDKbgE4iZUS4BzIvVP16inipE2apdXrS0M45rcngw=) 7: QpucqboD9L8Uv9-I8wC2eqyytjM.roa (hash: QJ36JcAEae+tPmwoLHxsrKQ/qHkNlapv2iTQudy3nXg=) 8: VLrSYlONO7JZUvaeI6OzgjRksA0.roa (hash: LTkUIoLhvOTPKcASxWAtrGL8orynFjazuB3yg7c0ZYo=) 9: W95VCieFrYA-UWvQbNSL7N3Y2Cg.roa (hash: YvWvtJ9d+roXNfi60DzUNUYY7G9jfkQp1ZTCPAwbx+g=) 10: Yw4yz2qvg4rQujrK-dIx_KPixQM.roa (hash: rPOdhOXTd0LJkvjvgXHjpfcSX15w4WKfBaBl0s4PykM=) 11: mMdAkncXd62KSLEMH5-GZ2xifmI.roa (hash: BsiKxHj0OcEVg20ZYqrvGiqQgj+ynivI6054d313+QE=) 12: snJh1xU0i_1zzp27ckiGVpk7ovE.crl (hash: rhdwsO7FU6JpOlsnTfiSuFjetdSoMxJkZzJZj8ftvHw=) 13: tXmj_lk4J_cxjq5mg9Y-DnR4g68.roa (hash: FkJnyg1Nbp4kUP6A2c71ys6CgKIoTjWwYiDec6OD1BY=) 14: x93oIxwN7f9CnY5MK-gEMFA9RCs.roa (hash: iUrM+UkqfotbOBAOD6sNrVDAFzEQJnu2I0F39zCKGjM=) 15: x_9TAtatN7OaJxTBmrfHpUlXZDA.roa (hash: 2gG4s/omQ5P0Lbi33p1Th/x4L/bao6YkNKtuc6UmamA=) Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/9e/aba502-d191-4fd7-a7cf-504f2766760f/1/snJh1xU0i_1zzp27ckiGVpk7ovE.crl rsync://rpki.ripe.net/repository/DEFAULT/9e/aba502-d191-4fd7-a7cf-504f2766760f/1/snJh1xU0i_1zzp27ckiGVpk7ovE.mft rsync://rpki.ripe.net/repository/DEFAULT/snJh1xU0i_1zzp27ckiGVpk7ovE.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Mon 20 Oct 2025 11:01:32 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:99:fc:21:ba:bc:b9:fe:9d:10:16:e2:4b:e3:9d:d1:39:7a Signature Algorithm: sha256WithRSAEncryption Issuer: CN=b27261d715348bfd73ce9dbb72488656993ba2f1 Validity Not Before: Oct 19 11:01:32 2025 GMT Not After : Oct 20 11:01:32 2025 GMT Subject: CN=7df028fcd574812d716fda084b02a75198d1648a Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:d3:8d:48:df:2b:bd:53:1a:2d:72:f1:89:6f:a8: db:27:d8:8f:bb:87:24:b0:60:42:1e:2b:18:88:5d: a5:af:b1:4e:0c:f9:58:04:52:8b:6b:d9:50:ac:39: 12:0c:fd:ba:1e:05:69:2f:7e:26:34:9f:e6:ac:c1: fd:44:e3:75:09:1e:3a:54:3c:53:3c:07:09:49:2f: 8a:de:fd:c1:23:54:4a:62:e4:90:4c:cb:15:54:96: b8:cb:47:64:10:89:00:99:94:3d:9a:f6:04:ee:89: f8:68:95:4e:59:5f:f8:fe:a7:39:b0:19:bf:da:d8: ad:ee:c0:ac:fb:04:0c:cb:be:02:51:dd:2e:ef:ec: d8:26:08:c5:f3:52:03:67:51:c2:bc:f8:d4:de:da: 41:8b:db:41:79:1c:87:62:c9:55:de:12:b6:6c:55: e3:5d:65:3e:0f:86:d4:6f:33:77:cb:35:ac:31:5a: e4:8e:93:8f:ee:0a:d6:61:38:37:2f:7c:cf:82:cf: b3:be:84:12:af:b3:e8:fd:03:36:4d:4d:8a:22:40: ab:70:bf:21:5c:85:a1:a9:d2:a3:0a:b1:6f:fa:f6: 4e:b4:a7:54:46:f2:b0:d0:0b:45:e3:ef:34:c9:58: 36:79:19:64:76:26:4d:a0:64:a8:5a:7b:cd:08:e8: b0:3b Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 7D:F0:28:FC:D5:74:81:2D:71:6F:DA:08:4B:02:A7:51:98:D1:64:8A X509v3 Authority Key Identifier: keyid:B2:72:61:D7:15:34:8B:FD:73:CE:9D:BB:72:48:86:56:99:3B:A2:F1 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/snJh1xU0i_1zzp27ckiGVpk7ovE.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/9e/aba502-d191-4fd7-a7cf-504f2766760f/1/snJh1xU0i_1zzp27ckiGVpk7ovE.mft X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/9e/aba502-d191-4fd7-a7cf-504f2766760f/1/snJh1xU0i_1zzp27ckiGVpk7ovE.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 52:e6:9a:99:71:04:88:8b:b6:fa:be:73:aa:9e:34:26:ab:fd: 0a:98:c3:98:94:79:83:ee:02:1d:4d:26:89:59:2b:f1:f2:8f: 93:00:96:10:7d:6b:60:f5:a8:a7:d4:d4:92:8e:03:84:a5:3a: 86:03:65:0f:bd:6c:99:05:23:94:4b:77:e2:72:d8:85:9c:12: 8c:87:3b:a0:06:ba:b0:5a:3a:a5:98:91:47:ec:d4:65:fa:56: 3c:07:6b:51:98:0e:d1:a1:84:07:02:b7:df:84:b9:4b:78:7c: ae:f8:d2:84:3e:de:35:d9:35:f9:23:94:28:81:95:6a:42:60: 85:a1:5b:4c:cc:37:59:f5:97:ce:3e:f7:37:19:8e:e2:99:4d: 5d:ae:eb:3d:be:f2:43:f0:b5:d5:e4:c4:e0:7a:7d:d2:03:2a: cc:9b:f3:a0:c5:cc:05:41:cf:a2:29:eb:11:94:0c:7a:f6:9f: 9f:c1:51:cc:d4:4a:0b:6c:79:ca:15:57:b4:36:6e:ac:d3:36: 2d:c6:6e:3b:c3:77:01:d6:92:aa:1e:2d:1e:06:d7:bf:f9:41: 73:35:f0:b0:40:8d:c7:bd:59:64:bf:6c:b0:7f:fe:cd:90:9b: 23:09:35:70:b7:cf:cd:7d:e3:eb:5d:27:ae:9e:c7:78:0c:37: 7b:b7:45:87 -----BEGIN CERTIFICATE----- MIIFFjCCA/6gAwIBAgISAZn8Ibq8uf6dEBbiS+Od0Tl6MA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKGIyNzI2MWQ3MTUzNDhiZmQ3M2NlOWRiYjcyNDg4NjU2OTkz YmEyZjEwHhcNMjUxMDE5MTEwMTMyWhcNMjUxMDIwMTEwMTMyWjAzMTEwLwYDVQQD Eyg3ZGYwMjhmY2Q1NzQ4MTJkNzE2ZmRhMDg0YjAyYTc1MTk4ZDE2NDhhMIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEA041I3yu9UxotcvGJb6jbJ9iPu4ck sGBCHisYiF2lr7FODPlYBFKLa9lQrDkSDP26HgVpL34mNJ/mrMH9RON1CR46VDxT PAcJSS+K3v3BI1RKYuSQTMsVVJa4y0dkEIkAmZQ9mvYE7on4aJVOWV/4/qc5sBm/ 2tit7sCs+wQMy74CUd0u7+zYJgjF81IDZ1HCvPjU3tpBi9tBeRyHYslV3hK2bFXj XWU+D4bUbzN3yzWsMVrkjpOP7grWYTg3L3zPgs+zvoQSr7Po/QM2TU2KIkCrcL8h XIWhqdKjCrFv+vZOtKdURvKw0AtF4+80yVg2eRlkdiZNoGSoWnvNCOiwOwIDAQAB o4ICIjCCAh4wHQYDVR0OBBYEFH3wKPzVdIEtcW/aCEsCp1GY0WSKMB8GA1UdIwQY MBaAFLJyYdcVNIv9c86du3JIhlaZO6LxMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvc25KaDF4VTBpXzF6enAyN2NraUdWcGs3b3ZFLmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC85ZS9hYmE1MDItZDE5MS00ZmQ3LWE3Y2Yt NTA0ZjI3NjY3NjBmLzEvc25KaDF4VTBpXzF6enAyN2NraUdWcGs3b3ZFLm1mdDCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC85ZS9hYmE1MDItZDE5MS00ZmQ3LWE3Y2YtNTA0ZjI3NjY3NjBm LzEvc25KaDF4VTBpXzF6enAyN2NraUdWcGs3b3ZFLmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAUuaamXEE iIu2+r5zqp40Jqv9CpjDmJR5g+4CHU0miVkr8fKPkwCWEH1rYPWop9TUko4DhKU6 hgNlD71smQUjlEt34nLYhZwSjIc7oAa6sFo6pZiRR+zUZfpWPAdrUZgO0aGEBwK3 34S5S3h8rvjShD7eNdk1+SOUKIGVakJghaFbTMw3WfWXzj73NxmO4plNXa7rPb7y Q/C11eTE4Hp90gMqzJvzoMXMBUHPoinrEZQMevafn8FRzNRKC2x5yhVXtDZurNM2 LcZuO8N3AdaSqh4tHgbXv/lBczXwsECNx71ZZL9ssH/+zZCbIwk1cLfPzX3j610n rp7HeAw3e7dFhw== -----END CERTIFICATE-----Generated at Sun Oct 19 18:24:27 2025 by rpki-client