$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/a4/dcdae6-d695-4266-ba9b-93b3a3696d96/1/5jGwgNTqb9Bham5wHHyBXW_4fAA.mft File: 5jGwgNTqb9Bham5wHHyBXW_4fAA.mft (raw, json) Hash identifier: cf5rfm/axNUn+YgteINm/O6uf723RlENvTgOQ4CuF4o= Subject key identifier: A3:06:79:62:61:93:2D:9D:D2:78:F4:BB:A3:C3:73:8E:41:DB:C7:BD Authority key identifier: E6:31:B0:80:D4:EA:6F:D0:61:6A:6E:70:1C:7C:81:5D:6F:F8:7C:00 Certificate issuer: /CN=e631b080d4ea6fd0616a6e701c7c815d6ff87c00 Certificate serial: 0199FC8F97B2C3341B9C4376FF887C5333CF Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/5jGwgNTqb9Bham5wHHyBXW_4fAA.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/a4/dcdae6-d695-4266-ba9b-93b3a3696d96/1/5jGwgNTqb9Bham5wHHyBXW_4fAA.mft Manifest number: 08AD Signing time: Sun 19 Oct 2025 13:01:32 +0000 Manifest this update: Sun 19 Oct 2025 13:01:32 +0000 Manifest next update: Mon 20 Oct 2025 13:01:32 +0000 Files and hashes: 1: 36JMsnCTZ3dwGq1Ka9Cuddl862c.roa (hash: rxGSLpm5OrdXLa8c65qMAKh6CEoXBb/8Ki3iPQlCtp4=) 2: 5jGwgNTqb9Bham5wHHyBXW_4fAA.crl (hash: amQX2qYjiMQ9bNk0Ze3UHJ13BLi2m6YlSITqXdqD+ik=) 3: 8rKYK-iYG1qg8KyjX_ZfdJFjUJo.roa (hash: 6c5KWPrXXMji3H6W3aAMo6TC6fKptrhCcp/hd4gp2T0=) 4: 9qt_AxGF-iefTgTj9gP8JXPuDuE.roa (hash: dzLOUtBgexrBsG0CJE0tpFxhbM0NWc5a6JMvh5ssT/c=) 5: Gx61TcX_jg_POohtFk3y578RK3s.roa (hash: cdRA7EEe8Z56qv2cSGc980wpIss1qxURTPJYCEyx71I=) 6: LzZkWrTJKB_nRLE2CHcTnYb72Ak.roa (hash: bDGvw/cq/31+ME9ha7pMFsDpy5ZNw/W2wJW0IhefjPs=) 7: RnK86UmIAp-Vf8TMZLM03XjM-aE.roa (hash: tadpJcfzMaehdbJngFohNz6vat40laG6LyK588h2pfQ=) 8: TH1GQt5phoccIVru2X6WLJ52OMs.roa (hash: lBAEWmb8yHalrh5kruZJueiLdM1gxTgfao1k6b840VY=) 9: ZJprrbhKMAT5LtByVt0jo1FSWOs.roa (hash: nZtkV2GPrU6rUiWBvWUJ+IXzV+B3ZnqxZo9hlzMGkqE=) 10: dVeJBp__tKyi8xuuXGDrr7L9rpA.roa (hash: pavqcGgA7qNjgp+uyhIxt8IASt/7r1r3IBQvQqb7v/c=) 11: mJWGLM8T_1at8gmBKfytV80xCsY.roa (hash: nBO32lhSvSUXg7lebbqssrsekQToM8cKNZVTOaKe1bQ=) Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/a4/dcdae6-d695-4266-ba9b-93b3a3696d96/1/5jGwgNTqb9Bham5wHHyBXW_4fAA.crl rsync://rpki.ripe.net/repository/DEFAULT/a4/dcdae6-d695-4266-ba9b-93b3a3696d96/1/5jGwgNTqb9Bham5wHHyBXW_4fAA.mft rsync://rpki.ripe.net/repository/DEFAULT/5jGwgNTqb9Bham5wHHyBXW_4fAA.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Mon 20 Oct 2025 11:18:59 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:99:fc:8f:97:b2:c3:34:1b:9c:43:76:ff:88:7c:53:33:cf Signature Algorithm: sha256WithRSAEncryption Issuer: CN=e631b080d4ea6fd0616a6e701c7c815d6ff87c00 Validity Not Before: Oct 19 13:01:32 2025 GMT Not After : Oct 20 13:01:32 2025 GMT Subject: CN=a306796261932d9dd278f4bba3c3738e41dbc7bd Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:a3:e6:99:ab:18:2e:85:38:d0:b7:f9:d6:6e:52: a4:2a:2a:1d:1e:3a:fb:1b:6e:b3:63:77:1d:d2:61: 70:ea:63:54:b0:85:66:08:33:de:74:25:51:16:32: b8:f4:1d:ca:b9:93:18:19:d6:ce:ae:fd:21:a5:da: 53:cb:19:e6:5e:b2:c5:e1:46:b3:3d:fc:35:60:e2: a9:69:02:15:8d:bf:2b:62:12:fa:89:6a:4c:8f:0f: fb:52:a6:6d:ef:79:86:8c:9f:33:11:fa:5e:33:6a: a3:e4:3a:5c:ce:9f:a8:ef:b3:cb:9e:28:f0:5b:0a: 86:e8:23:9c:65:03:4b:1c:57:0b:b8:7b:b0:de:c4: 01:96:d1:ab:78:c8:fe:ee:3d:cd:11:75:6e:09:9d: dd:49:51:e7:7a:2b:aa:3e:c1:b7:2a:d9:e0:fa:33: 53:7d:e8:45:2a:bd:08:e3:d1:62:bd:ad:5e:bc:ef: c7:99:66:c9:d3:8d:2e:c3:51:32:ac:c7:0c:6f:05: d7:0a:dd:89:18:5f:bd:56:e9:e7:f0:79:7b:3f:e9: 0b:7b:ae:d2:c4:09:1c:16:5e:0d:6b:37:d7:4f:0e: 7a:05:7e:f4:9f:5b:ff:fa:bc:38:ed:47:68:0a:70: ec:e2:fd:5a:28:7a:6e:1e:c9:b9:6a:c5:d7:dc:d2: ec:4f Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: A3:06:79:62:61:93:2D:9D:D2:78:F4:BB:A3:C3:73:8E:41:DB:C7:BD X509v3 Authority Key Identifier: keyid:E6:31:B0:80:D4:EA:6F:D0:61:6A:6E:70:1C:7C:81:5D:6F:F8:7C:00 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/5jGwgNTqb9Bham5wHHyBXW_4fAA.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/a4/dcdae6-d695-4266-ba9b-93b3a3696d96/1/5jGwgNTqb9Bham5wHHyBXW_4fAA.mft X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/a4/dcdae6-d695-4266-ba9b-93b3a3696d96/1/5jGwgNTqb9Bham5wHHyBXW_4fAA.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 9a:62:c4:a8:51:51:be:c4:71:d1:4d:12:f9:37:1d:01:e6:c0: 7c:49:ad:e8:9d:a9:b8:e1:c0:6e:2a:81:24:af:a5:70:41:38: 01:a5:75:a4:ec:63:f3:7a:38:38:1f:95:6f:e4:7f:2a:43:ed: 0e:c2:c1:85:7b:6e:ca:13:55:67:16:d1:2f:32:e2:e3:83:ad: c1:c6:b2:f2:86:33:8b:9f:87:1c:2e:14:e3:ae:ca:c3:ba:41: 74:ef:9b:74:47:0f:8b:66:b5:f6:8d:b3:72:f5:8e:a6:8c:50: 85:0f:d7:13:ca:32:76:84:c3:f4:b0:79:1c:90:91:b7:8e:dd: 90:62:93:e3:05:36:5f:dd:a5:b1:23:4b:10:fa:71:8f:2a:54: d4:11:21:a4:0b:e6:94:1b:f1:4d:0e:9d:05:d7:96:42:05:a0: 97:37:d7:97:95:c9:36:68:32:9f:b8:f8:08:62:07:2a:b7:24: 0f:0c:a1:74:6a:85:4b:8b:46:fd:93:01:85:3d:ff:da:8e:37: f5:ea:79:59:5d:19:ef:f2:0b:11:12:9a:fa:bf:55:de:8c:8e: d2:37:62:75:a2:ba:bf:95:1b:af:e0:f8:2e:37:9d:78:d2:08: 03:4c:86:ea:0f:62:ab:96:e2:ef:7a:8a:c4:ec:71:c8:ab:10: 48:16:08:76 -----BEGIN CERTIFICATE----- MIIFFjCCA/6gAwIBAgISAZn8j5eywzQbnEN2/4h8UzPPMA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKGU2MzFiMDgwZDRlYTZmZDA2MTZhNmU3MDFjN2M4MTVkNmZm ODdjMDAwHhcNMjUxMDE5MTMwMTMyWhcNMjUxMDIwMTMwMTMyWjAzMTEwLwYDVQQD EyhhMzA2Nzk2MjYxOTMyZDlkZDI3OGY0YmJhM2MzNzM4ZTQxZGJjN2JkMIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAo+aZqxguhTjQt/nWblKkKiodHjr7 G26zY3cd0mFw6mNUsIVmCDPedCVRFjK49B3KuZMYGdbOrv0hpdpTyxnmXrLF4Uaz Pfw1YOKpaQIVjb8rYhL6iWpMjw/7UqZt73mGjJ8zEfpeM2qj5Dpczp+o77PLnijw WwqG6COcZQNLHFcLuHuw3sQBltGreMj+7j3NEXVuCZ3dSVHneiuqPsG3Ktng+jNT fehFKr0I49Fiva1evO/HmWbJ040uw1EyrMcMbwXXCt2JGF+9Vunn8Hl7P+kLe67S xAkcFl4NazfXTw56BX70n1v/+rw47UdoCnDs4v1aKHpuHsm5asXX3NLsTwIDAQAB o4ICIjCCAh4wHQYDVR0OBBYEFKMGeWJhky2d0nj0u6PDc45B28e9MB8GA1UdIwQY MBaAFOYxsIDU6m/QYWpucBx8gV1v+HwAMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvNWpHd2dOVHFiOUJoYW01d0hIeUJYV180ZkFBLmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC9hNC9kY2RhZTYtZDY5NS00MjY2LWJhOWIt OTNiM2EzNjk2ZDk2LzEvNWpHd2dOVHFiOUJoYW01d0hIeUJYV180ZkFBLm1mdDCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC9hNC9kY2RhZTYtZDY5NS00MjY2LWJhOWItOTNiM2EzNjk2ZDk2 LzEvNWpHd2dOVHFiOUJoYW01d0hIeUJYV180ZkFBLmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAmmLEqFFR vsRx0U0S+TcdAebAfEmt6J2puOHAbiqBJK+lcEE4AaV1pOxj83o4OB+Vb+R/KkPt DsLBhXtuyhNVZxbRLzLi44Otwcay8oYzi5+HHC4U467Kw7pBdO+bdEcPi2a19o2z cvWOpoxQhQ/XE8oydoTD9LB5HJCRt47dkGKT4wU2X92lsSNLEPpxjypU1BEhpAvm lBvxTQ6dBdeWQgWglzfXl5XJNmgyn7j4CGIHKrckDwyhdGqFS4tG/ZMBhT3/2o43 9ep5WV0Z7/ILERKa+r9V3oyO0jdidaK6v5Ubr+D4LjedeNIIA0yG6g9iq5bi73qK xOxxyKsQSBYIdg== -----END CERTIFICATE-----Generated at Sun Oct 19 18:40:33 2025 by rpki-client