$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/a7/9151c0-3326-4801-9363-c7d19930d66d/1/tOgroXFdaurlsBAnJf_gyDRzXX0.mft File: tOgroXFdaurlsBAnJf_gyDRzXX0.mft (raw, json) Hash identifier: nX7SarTMXaTOwpgeoCkrC69MeCPD4rs/ePiFurT6TuU= Subject key identifier: CF:F2:D6:6F:01:7E:84:0B:31:F8:4F:15:53:9D:75:88:AF:67:28:53 Authority key identifier: B4:E8:2B:A1:71:5D:6A:EA:E5:B0:10:27:25:FF:E0:C8:34:73:5D:7D Certificate issuer: /CN=b4e82ba1715d6aeae5b0102725ffe0c834735d7d Certificate serial: 0199FB0F08E868B0C0F112DB3A95EC6A0D90 Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/tOgroXFdaurlsBAnJf_gyDRzXX0.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/a7/9151c0-3326-4801-9363-c7d19930d66d/1/tOgroXFdaurlsBAnJf_gyDRzXX0.mft Manifest number: 0ED9 Signing time: Sun 19 Oct 2025 06:01:30 +0000 Manifest this update: Sun 19 Oct 2025 06:01:30 +0000 Manifest next update: Mon 20 Oct 2025 06:01:30 +0000 Files and hashes: 1: 52GXxgdg7vWygkQsHwnq_P3gjJA.roa (hash: i/4OVKKicHKNXCwirS/rOH1bcQmeEUg5ZtGhz1sY85I=) 2: 69jsCPkwXK1lmTxeQTyCID9PpjA.roa (hash: h/Q47E5oO3l5JxeekNZr7l4rqZH5SyA0969VUEHNB8w=) 3: 9MVV1yAh59mTgEP_W258bMa49_o.roa (hash: iCN3glju44EdxjBrGRw+NZhFmqg56yUA7pS6/PNweyY=) 4: AjV2rlIwTElr058YXLjGHHrdXf0.roa (hash: LTFD7RWDdMyUwIhuINghYkedTIuVGScYQK467Diulf0=) 5: Dgr2wvOQnRz5hgawqSG0QB7Wpf8.roa (hash: qz1bNfdEE/9TcJfQDqdc+8FtR45UoCnUkyfUGSABkmQ=) 6: ObtlGayrPGhbC0NJB3cANhdfN9g.roa (hash: IXODRFBoDBQAcQ/y7+mqgK85yVkykmHrcIsLk/+rl+k=) 7: UdUz-kT-b500-FTrkpKhOG9_Lzg.roa (hash: 0R7mO9NcYxR+lIBqqxDSdOzb7Oi6PF6Gf+MJjbPBZOg=) 8: VifVBKjqmDhUgid5BLElJTuQJo4.roa (hash: WI5+mxqhucetVt6cCUvKQ5QuoJnG/kLcpHeXlC1Yb5Y=) 9: lKCL8VeF7spgo1KPqTl3MnMrJFU.roa (hash: G5kvKqbW+q0BKre+iGyFYRJgxgTgTCaLSiQqwrZLbuM=) 10: tOgroXFdaurlsBAnJf_gyDRzXX0.crl (hash: 3YcqjtdBGpWZ/3oasD/XN48Frh8AD0sMjygf2ggle6w=) Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/a7/9151c0-3326-4801-9363-c7d19930d66d/1/tOgroXFdaurlsBAnJf_gyDRzXX0.crl rsync://rpki.ripe.net/repository/DEFAULT/a7/9151c0-3326-4801-9363-c7d19930d66d/1/tOgroXFdaurlsBAnJf_gyDRzXX0.mft rsync://rpki.ripe.net/repository/DEFAULT/tOgroXFdaurlsBAnJf_gyDRzXX0.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Mon 20 Oct 2025 06:00:58 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:99:fb:0f:08:e8:68:b0:c0:f1:12:db:3a:95:ec:6a:0d:90 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=b4e82ba1715d6aeae5b0102725ffe0c834735d7d Validity Not Before: Oct 19 06:01:30 2025 GMT Not After : Oct 20 06:01:30 2025 GMT Subject: CN=cff2d66f017e840b31f84f15539d7588af672853 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:a4:bb:43:e2:7d:e7:9c:a4:2b:a6:b3:5e:41:1f: 71:62:a4:d7:5e:52:08:76:60:fa:94:ea:e0:a3:6b: 30:9c:42:e6:24:82:f3:37:e8:34:12:3d:75:cb:59: 41:7b:26:58:96:f7:36:bc:32:58:71:1f:f4:7c:0b: cc:62:42:27:a4:53:c9:e4:bb:4d:a7:c1:d7:e9:12: 51:4a:c1:4c:6b:71:a5:d3:80:fa:ee:e3:a7:45:bb: 27:50:ad:42:43:58:0c:26:d8:5c:0a:18:3d:7c:54: de:25:10:b8:71:70:46:4e:c8:a9:17:d2:1f:14:f2: 81:bf:60:95:8a:37:63:9b:71:59:b2:9f:49:57:5b: 31:63:fb:a5:54:d5:95:1f:df:25:52:bb:ed:f9:e6: d0:55:20:dd:69:0e:4d:2c:ad:33:fb:d4:5b:14:ab: 02:85:24:a2:8a:27:14:b5:ea:bb:88:37:27:c8:42: 93:be:90:ef:9a:f3:3e:68:a8:d3:0d:b5:f1:00:fd: eb:6e:56:4b:b9:f4:ab:44:be:e2:52:8e:c5:6a:1b: 91:ab:c5:2a:a1:38:e1:5d:3d:17:50:85:37:b4:84: e3:b4:d6:34:ca:12:01:f9:a9:c8:9b:50:37:3d:a0: fd:71:f8:e7:f8:08:a5:c9:06:8b:ce:fd:e7:e1:ce: 6e:5b Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: CF:F2:D6:6F:01:7E:84:0B:31:F8:4F:15:53:9D:75:88:AF:67:28:53 X509v3 Authority Key Identifier: keyid:B4:E8:2B:A1:71:5D:6A:EA:E5:B0:10:27:25:FF:E0:C8:34:73:5D:7D X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/tOgroXFdaurlsBAnJf_gyDRzXX0.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/a7/9151c0-3326-4801-9363-c7d19930d66d/1/tOgroXFdaurlsBAnJf_gyDRzXX0.mft X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/a7/9151c0-3326-4801-9363-c7d19930d66d/1/tOgroXFdaurlsBAnJf_gyDRzXX0.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 31:27:f7:78:a4:9d:30:b1:d9:2b:7a:5f:21:27:8a:c8:71:bb: 27:f6:7e:19:67:b6:c4:a7:da:6b:e6:ef:4c:10:d6:22:d0:ca: b0:8e:ce:af:59:67:a6:5a:8b:9e:82:80:09:f3:e3:92:af:15: f5:d7:46:76:93:d4:f5:04:ac:ef:f5:c9:45:27:97:a7:26:f0: 1a:00:fe:bb:96:1e:67:aa:e3:31:1d:15:18:8c:0f:3c:39:7f: dc:70:22:37:0d:55:f8:95:16:5c:ca:b4:69:b3:49:93:1e:d4: 54:25:1d:89:f0:40:3a:cd:69:f9:b3:7b:65:b0:c7:08:c3:90: 85:2a:34:5a:dc:af:c6:11:88:f8:51:fc:5a:3d:37:95:0e:1a: bc:35:80:9e:4f:22:a0:49:de:4e:67:47:b3:e8:59:6d:4a:39: 1c:62:ef:eb:b7:74:b3:8a:1e:75:80:40:07:fd:9d:d6:89:ae: a9:4c:54:72:56:2f:a6:c9:d8:f3:5f:15:e5:76:8e:f1:be:46: 6e:60:ac:32:79:6a:44:90:0c:ed:77:b4:fa:36:34:7d:6b:08: ff:97:96:08:34:8c:3b:c0:70:9f:5f:6c:39:6b:1e:c8:14:ff: 83:67:a6:84:02:fc:ae:b1:03:48:92:d2:5e:21:67:81:0f:78: f2:6d:da:21 -----BEGIN CERTIFICATE----- MIIFFjCCA/6gAwIBAgISAZn7DwjoaLDA8RLbOpXsag2QMA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKGI0ZTgyYmExNzE1ZDZhZWFlNWIwMTAyNzI1ZmZlMGM4MzQ3 MzVkN2QwHhcNMjUxMDE5MDYwMTMwWhcNMjUxMDIwMDYwMTMwWjAzMTEwLwYDVQQD EyhjZmYyZDY2ZjAxN2U4NDBiMzFmODRmMTU1MzlkNzU4OGFmNjcyODUzMIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEApLtD4n3nnKQrprNeQR9xYqTXXlII dmD6lOrgo2swnELmJILzN+g0Ej11y1lBeyZYlvc2vDJYcR/0fAvMYkInpFPJ5LtN p8HX6RJRSsFMa3Gl04D67uOnRbsnUK1CQ1gMJthcChg9fFTeJRC4cXBGTsipF9If FPKBv2CVijdjm3FZsp9JV1sxY/ulVNWVH98lUrvt+ebQVSDdaQ5NLK0z+9RbFKsC hSSiiicUteq7iDcnyEKTvpDvmvM+aKjTDbXxAP3rblZLufSrRL7iUo7FahuRq8Uq oTjhXT0XUIU3tITjtNY0yhIB+anIm1A3PaD9cfjn+AilyQaLzv3n4c5uWwIDAQAB o4ICIjCCAh4wHQYDVR0OBBYEFM/y1m8BfoQLMfhPFVOddYivZyhTMB8GA1UdIwQY MBaAFLToK6FxXWrq5bAQJyX/4Mg0c119MA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvdE9ncm9YRmRhdXJsc0JBbkpmX2d5RFJ6WFgwLmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC9hNy85MTUxYzAtMzMyNi00ODAxLTkzNjMt YzdkMTk5MzBkNjZkLzEvdE9ncm9YRmRhdXJsc0JBbkpmX2d5RFJ6WFgwLm1mdDCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC9hNy85MTUxYzAtMzMyNi00ODAxLTkzNjMtYzdkMTk5MzBkNjZk LzEvdE9ncm9YRmRhdXJsc0JBbkpmX2d5RFJ6WFgwLmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAMSf3eKSd MLHZK3pfISeKyHG7J/Z+GWe2xKfaa+bvTBDWItDKsI7Or1lnplqLnoKACfPjkq8V 9ddGdpPU9QSs7/XJRSeXpybwGgD+u5YeZ6rjMR0VGIwPPDl/3HAiNw1V+JUWXMq0 abNJkx7UVCUdifBAOs1p+bN7ZbDHCMOQhSo0WtyvxhGI+FH8Wj03lQ4avDWAnk8i oEneTmdHs+hZbUo5HGLv67d0s4oedYBAB/2d1omuqUxUclYvpsnY818V5XaO8b5G bmCsMnlqRJAM7Xe0+jY0fWsI/5eWCDSMO8Bwn19sOWseyBT/g2emhAL8rrEDSJLS XiFngQ948m3aIQ== -----END CERTIFICATE-----Generated at Sun Oct 19 15:37:21 2025 by rpki-client