$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/9e/f76e20-5859-415d-86b3-119efcbb2023/1/u4MGMPI7Bwore99Sn3OUjJfqzUA.mft File: u4MGMPI7Bwore99Sn3OUjJfqzUA.mft (raw, json) Hash identifier: qZXTml3X5LmvW3ShNV2ZC7t8QwF/j2gwkOA+BLIq1xU= Subject key identifier: ED:2E:53:95:AA:2F:62:C7:87:FB:CB:78:1A:D6:C2:51:34:4F:1E:65 Authority key identifier: BB:83:06:30:F2:3B:07:0A:2B:7B:DF:52:9F:73:94:8C:97:EA:CD:40 Certificate issuer: /CN=bb830630f23b070a2b7bdf529f73948c97eacd40 Certificate serial: 0199FB7CB3EA941F81754CDA49AADE4B307A Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/u4MGMPI7Bwore99Sn3OUjJfqzUA.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/9e/f76e20-5859-415d-86b3-119efcbb2023/1/u4MGMPI7Bwore99Sn3OUjJfqzUA.mft Manifest number: 178C Signing time: Sun 19 Oct 2025 08:01:17 +0000 Manifest this update: Sun 19 Oct 2025 08:01:17 +0000 Manifest next update: Mon 20 Oct 2025 08:01:17 +0000 Files and hashes: 1: 2zKVxa5ZKGpg1zDrETT8fTyAG8U.roa (hash: RUglVoeUy6tdJhM2FiBGFBEjFDwNfOCa0rtIGcZ1G9w=) 2: 4b9izW4q-rZz0OWQO5fC5XUHYeY.roa (hash: 9wYly/cGREYrx63PXNBvuVlfGIfSHaXqrrjuZtYRkA0=) 3: Gz0iFYrUNgHeuQCC9qIDpI1gM10.roa (hash: yfRRmDD8oP24zRG8ugP9id/6TUAxIUH4fg/JBB0Gw4c=) 4: MdYXP9JDqyEnQSSpfC3vQstDRu4.roa (hash: 9CrtuWJI6l7IbdwDLorSOiVfWXkvbfh9OjjPb0sDWaY=) 5: Or69i08je9IL_3FfPQ5ndTzvaFs.roa (hash: EOOy075Oq0onvPdfIA9R8xzQhr3n3IW53fTBxa2LQcc=) 6: PbW71RIBvB328VTIPh1scqZr_24.roa (hash: ZhoUQFHnvxU9klhLxoI/zN467hf68pEuS9x78HwJXRs=) 7: SDOLmAhobKGDPwlOvXakvXkm9LU.roa (hash: zmS1T8bhM8/AfzZdTFVM6nmbZ8DYbKH7HiNAE7C3CHU=) 8: bu-aY814oN0zZmuedO0-L6nA1Js.roa (hash: l9qaLt4gYL7GO6wlotPMWtCoUA115L85+uv76tlCG/s=) 9: fi7u_8aaxqQqH2QeccD8KGKx3hM.roa (hash: 0Mmbiog2iLNRJeesgr68dLzWfBwYCoI0LBsDE3h2PiQ=) 10: gA2tvRQPKpMOl9Y6QBKjGjY3jBY.roa (hash: KLknWNja5ldLxki+NqQAO+FIkHHmOEWoi6xunsD7f5k=) 11: u4MGMPI7Bwore99Sn3OUjJfqzUA.crl (hash: 7r9sUaL2DDjjMu2tIIRq4uhjWfqdMZJAtvFdbmOdlRs=) Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/9e/f76e20-5859-415d-86b3-119efcbb2023/1/u4MGMPI7Bwore99Sn3OUjJfqzUA.crl rsync://rpki.ripe.net/repository/DEFAULT/9e/f76e20-5859-415d-86b3-119efcbb2023/1/u4MGMPI7Bwore99Sn3OUjJfqzUA.mft rsync://rpki.ripe.net/repository/DEFAULT/u4MGMPI7Bwore99Sn3OUjJfqzUA.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Mon 20 Oct 2025 06:00:58 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:99:fb:7c:b3:ea:94:1f:81:75:4c:da:49:aa:de:4b:30:7a Signature Algorithm: sha256WithRSAEncryption Issuer: CN=bb830630f23b070a2b7bdf529f73948c97eacd40 Validity Not Before: Oct 19 08:01:17 2025 GMT Not After : Oct 20 08:01:17 2025 GMT Subject: CN=ed2e5395aa2f62c787fbcb781ad6c251344f1e65 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:dd:e4:1d:2b:86:a9:6d:24:2b:3d:e3:4e:c1:58: 65:af:e6:dd:d4:08:57:b1:36:34:8f:67:d2:92:ee: c6:67:de:2f:08:f4:4f:d4:a1:de:d1:22:2f:b9:f7: cb:b5:d3:91:22:68:89:e2:01:9a:e1:e9:45:21:d4: d9:a5:2d:e1:d9:63:6e:b8:9a:e3:a4:f9:12:0d:16: 47:4a:28:57:23:79:1c:0a:3b:27:dd:ef:0a:6f:ac: 2d:a2:ad:0d:de:39:c0:f8:69:1a:5f:02:f4:c1:66: b1:55:20:b0:bd:65:29:a6:0c:9b:3e:51:d8:ca:64: 91:d9:cc:1a:b0:f8:3a:22:6b:00:5e:32:2b:b4:15: 73:0b:25:c6:49:22:b0:4d:69:9a:56:2f:0d:f4:fd: f1:5e:dc:09:da:64:77:1b:be:f1:73:0f:45:07:4c: 4e:4c:bb:d9:3f:5f:db:40:79:99:d3:b3:27:aa:5b: f4:c8:2e:3d:84:c8:47:c1:11:86:a9:4f:39:f4:af: 60:e5:fa:6f:ae:f4:8e:d8:91:cf:43:bc:3b:15:b3: a5:3b:9e:aa:90:13:cb:40:b2:b5:72:36:f6:52:9d: 30:df:fe:7c:a6:dc:b7:3e:3e:a4:9a:b8:b1:a3:77: 63:9c:27:26:e5:ec:80:d9:5d:cd:db:d7:07:53:8e: 62:d1 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: ED:2E:53:95:AA:2F:62:C7:87:FB:CB:78:1A:D6:C2:51:34:4F:1E:65 X509v3 Authority Key Identifier: keyid:BB:83:06:30:F2:3B:07:0A:2B:7B:DF:52:9F:73:94:8C:97:EA:CD:40 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/u4MGMPI7Bwore99Sn3OUjJfqzUA.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/9e/f76e20-5859-415d-86b3-119efcbb2023/1/u4MGMPI7Bwore99Sn3OUjJfqzUA.mft X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/9e/f76e20-5859-415d-86b3-119efcbb2023/1/u4MGMPI7Bwore99Sn3OUjJfqzUA.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 8a:c8:d5:c8:1b:bd:a0:14:6c:62:a9:d6:32:fa:b8:f2:25:1d: 33:98:d8:df:19:07:c8:1e:0c:6e:a2:de:92:cb:6f:68:d4:82: b3:57:08:f0:d6:ac:18:da:11:bf:0c:69:f3:57:85:3f:27:67: 26:86:bd:f7:22:8b:00:56:61:d8:10:57:ef:fe:52:8e:e1:89: 42:1a:bc:45:54:5a:e6:11:47:2b:48:9f:01:ff:62:ac:3e:15: 05:d5:ed:1c:9c:61:d2:ae:c6:a6:26:7d:75:04:c5:03:e4:32: a5:73:1b:10:15:82:77:10:6f:5b:48:92:10:7e:b4:6e:62:49: d6:b4:66:eb:f7:8e:25:63:4a:40:ff:de:de:ab:bf:1d:b5:73: 57:66:cf:08:1f:fe:e9:73:7e:e4:9f:95:0a:ea:78:4e:e0:f6: fb:90:c6:cd:f8:c3:d2:e0:6b:75:b4:36:9e:68:54:05:6c:44: d9:d1:2a:bf:9b:50:ad:5a:c1:3c:d7:ef:94:da:c9:8c:e4:53: 0c:7b:c6:d3:75:67:8c:3e:1d:f6:52:d9:f3:3b:c1:93:31:ef: e2:8b:06:1b:3c:b0:7c:12:c5:ec:ad:5e:d5:0e:ad:82:8f:de: f3:24:ba:0e:bc:a5:e4:d9:17:38:fb:09:c2:0c:2f:83:76:06: 10:52:91:8e -----BEGIN CERTIFICATE----- MIIFFjCCA/6gAwIBAgISAZn7fLPqlB+BdUzaSareSzB6MA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKGJiODMwNjMwZjIzYjA3MGEyYjdiZGY1MjlmNzM5NDhjOTdl YWNkNDAwHhcNMjUxMDE5MDgwMTE3WhcNMjUxMDIwMDgwMTE3WjAzMTEwLwYDVQQD EyhlZDJlNTM5NWFhMmY2MmM3ODdmYmNiNzgxYWQ2YzI1MTM0NGYxZTY1MIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEA3eQdK4apbSQrPeNOwVhlr+bd1AhX sTY0j2fSku7GZ94vCPRP1KHe0SIvuffLtdORImiJ4gGa4elFIdTZpS3h2WNuuJrj pPkSDRZHSihXI3kcCjsn3e8Kb6wtoq0N3jnA+GkaXwL0wWaxVSCwvWUppgybPlHY ymSR2cwasPg6ImsAXjIrtBVzCyXGSSKwTWmaVi8N9P3xXtwJ2mR3G77xcw9FB0xO TLvZP1/bQHmZ07Mnqlv0yC49hMhHwRGGqU859K9g5fpvrvSO2JHPQ7w7FbOlO56q kBPLQLK1cjb2Up0w3/58pty3Pj6kmrixo3djnCcm5eyA2V3N29cHU45i0QIDAQAB o4ICIjCCAh4wHQYDVR0OBBYEFO0uU5WqL2LHh/vLeBrWwlE0Tx5lMB8GA1UdIwQY MBaAFLuDBjDyOwcKK3vfUp9zlIyX6s1AMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvdTRNR01QSTdCd29yZTk5U24zT1VqSmZxelVBLmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC85ZS9mNzZlMjAtNTg1OS00MTVkLTg2YjMt MTE5ZWZjYmIyMDIzLzEvdTRNR01QSTdCd29yZTk5U24zT1VqSmZxelVBLm1mdDCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC85ZS9mNzZlMjAtNTg1OS00MTVkLTg2YjMtMTE5ZWZjYmIyMDIz LzEvdTRNR01QSTdCd29yZTk5U24zT1VqSmZxelVBLmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAisjVyBu9 oBRsYqnWMvq48iUdM5jY3xkHyB4MbqLekstvaNSCs1cI8NasGNoRvwxp81eFPydn Joa99yKLAFZh2BBX7/5SjuGJQhq8RVRa5hFHK0ifAf9irD4VBdXtHJxh0q7GpiZ9 dQTFA+QypXMbEBWCdxBvW0iSEH60bmJJ1rRm6/eOJWNKQP/e3qu/HbVzV2bPCB/+ 6XN+5J+VCup4TuD2+5DGzfjD0uBrdbQ2nmhUBWxE2dEqv5tQrVrBPNfvlNrJjORT DHvG03VnjD4d9lLZ8zvBkzHv4osGGzywfBLF7K1e1Q6tgo/e8yS6Dryl5NkXOPsJ wgwvg3YGEFKRjg== -----END CERTIFICATE-----Generated at Sun Oct 19 15:31:12 2025 by rpki-client