$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/a9/0f3757-f0ed-4e7e-9329-b03df996e481/1/DbZ8XH-n_iSS7sN89CdkK3HUJbA.mft File: DbZ8XH-n_iSS7sN89CdkK3HUJbA.mft (raw, json) Hash identifier: CoGSdSVkR7FtHfsMLDZQ5r4ONTbXEzYvQX7DuAkAYbg= Subject key identifier: 4B:52:B9:A0:A9:2E:8D:18:73:43:F3:C8:8E:9C:19:CD:F4:C0:42:66 Authority key identifier: 0D:B6:7C:5C:7F:A7:FE:24:92:EE:C3:7C:F4:27:64:2B:71:D4:25:B0 Certificate issuer: /CN=0db67c5c7fa7fe2492eec37cf427642b71d425b0 Certificate serial: 0199FAD7B3CBB7044FD0A7F4A2622866B137 Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/DbZ8XH-n_iSS7sN89CdkK3HUJbA.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/a9/0f3757-f0ed-4e7e-9329-b03df996e481/1/DbZ8XH-n_iSS7sN89CdkK3HUJbA.mft Manifest number: 10AE Signing time: Sun 19 Oct 2025 05:01:04 +0000 Manifest this update: Sun 19 Oct 2025 05:01:04 +0000 Manifest next update: Mon 20 Oct 2025 05:01:04 +0000 Files and hashes: 1: 0mnSL4P1Mb9qsD-XMEq-yyZjaoE.roa (hash: TztJkngsor+bYH8BNBvFcrCq8QN/N29xad2ATDFfZg4=) 2: 4SJGO0ahyGrj6_wgUycRPIM87rQ.roa (hash: KKyfxNUe79UZQMGD42WojNOLaLKHp+8lyvcAmB4f9dM=) 3: 7K3k7b_VuVXreG4TZPCJYqZfF3E.roa (hash: Mlmhkf4jbq89VKvIVk+oiVN1ePN2hRV3HnX2uto8WJU=) 4: BrLyoPvlUaso46lX0KWb5vFGmM0.roa (hash: xL+T2GI69dhAcv4plVUHvDhKIEwvfeKCIn8Shgjm/i0=) 5: DbZ8XH-n_iSS7sN89CdkK3HUJbA.crl (hash: Z5IE81w44Xd0h7F4/srs35NkEoKqnzZghA6FyEFsqOI=) 6: ItkPtexNahvw3tDr3_bT8GEZfr8.roa (hash: SJn0U88NMdBnAS7glQzEzO/4h8XGSEZsIoQuSFWE8lQ=) 7: KPsZP5UxbVlCpzRsbOBIhy6z_pQ.roa (hash: kVAhbMyWoKA5VWa5Rhx+mEjaq4dPTfBEWmIzltLf7OA=) 8: O4hsLYqHDHOc5YtrhKrxfVw253c.roa (hash: ftP8M0zBEeWH13FQ0ROC4yQQqu5d0hiLyMqOEpuSB2s=) 9: S8NNzpYJ5i63QJglA0hS6lNTgN4.roa (hash: oQMGxS6aGqOdLfZr8vkFFrUapKMk/UebkSM9HMDYXqs=) 10: XHlN3RpeQmFr0S8d8kRmm2_r9Gw.roa (hash: 2CQIDqSJfPO5Zu/OEOhrMlJ6AbMdAt7LicT/EFEbIc8=) 11: XtPC-hLseHu-oNHb7iMp78D7fDc.roa (hash: hosi2cp2sXp7OezBXmUWbVNJewXZGC35mZTjc3/DqAc=) 12: bqCIwVZ2XpZx_IfIj7dYA8wJreY.roa (hash: i6u6U6/gyOnTl0MAd6o9UqfZD0C1nlK3nCbIBUXXrK4=) 13: qU-FNtg0qY4hJwKQMawgQqk-7hk.roa (hash: 13slz4AHZrhhHtsx3wRRPE08jfCa/LuOzvkrn3vV24A=) 14: wO5DmrwTSoyl76lHsJA2t5qAs9I.roa (hash: gFeojWx3JdvkiLn4u4KpLVd5bJnsp8Sl11CkVIEvvlw=) 15: yV5VAilxWOh0of_wXNotAN0Ules.roa (hash: okzmmgBoCtu74qSYeftTIK3U3j25WujMDAESaACQXMQ=) 16: zEVJ0_wf_uy6-Ifr09xIfyn08R0.roa (hash: Mx0lPSY3hw6TgVNilrBT17dSIAN0s4FyHxEYjNAbcQI=) Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/a9/0f3757-f0ed-4e7e-9329-b03df996e481/1/DbZ8XH-n_iSS7sN89CdkK3HUJbA.crl rsync://rpki.ripe.net/repository/DEFAULT/a9/0f3757-f0ed-4e7e-9329-b03df996e481/1/DbZ8XH-n_iSS7sN89CdkK3HUJbA.mft rsync://rpki.ripe.net/repository/DEFAULT/DbZ8XH-n_iSS7sN89CdkK3HUJbA.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Mon 20 Oct 2025 05:01:04 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:99:fa:d7:b3:cb:b7:04:4f:d0:a7:f4:a2:62:28:66:b1:37 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=0db67c5c7fa7fe2492eec37cf427642b71d425b0 Validity Not Before: Oct 19 05:01:04 2025 GMT Not After : Oct 20 05:01:04 2025 GMT Subject: CN=4b52b9a0a92e8d187343f3c88e9c19cdf4c04266 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:9a:7e:c3:e9:27:6f:15:67:be:30:27:6c:a8:67: 56:bf:2f:da:ed:3d:45:cf:15:51:12:9a:1e:ab:d7: ce:08:04:5f:24:34:31:b9:1d:7a:1d:a2:a1:42:71: 0c:fc:e2:7f:2d:08:7d:ea:aa:25:e0:ee:be:52:e5: fb:04:ed:e8:18:1e:2a:f8:fd:84:3c:14:d5:af:aa: 77:94:b5:a7:33:6f:eb:21:6f:4f:58:84:ee:98:b1: 1f:c6:bc:c6:c0:34:12:c9:a1:43:bb:ec:15:f2:49: 81:46:5c:5b:33:79:08:56:1f:59:af:7c:81:28:f4: d0:cd:2d:70:a3:94:de:4e:f7:40:cb:65:28:0a:c6: 7d:98:2a:09:d1:1e:d9:32:2a:44:68:8a:7a:45:45: bd:64:5d:8b:cf:a8:70:6d:33:f9:15:a9:ed:3e:ca: 24:79:d9:86:76:6a:d5:03:45:b0:e9:4c:57:98:99: 0e:1a:48:32:af:17:49:3f:a3:f4:b7:c0:79:28:68: ae:0b:38:4b:4c:6b:50:89:8f:d0:44:d7:ff:ec:35: a4:bf:32:25:f6:98:80:09:ad:db:fe:80:f4:ab:74: a1:5c:2d:87:5c:44:b3:16:dc:80:5f:5f:f8:44:a4: b8:ab:8a:e5:9a:c4:86:ed:0b:11:d0:0d:3d:ca:ea: 86:1b Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 4B:52:B9:A0:A9:2E:8D:18:73:43:F3:C8:8E:9C:19:CD:F4:C0:42:66 X509v3 Authority Key Identifier: keyid:0D:B6:7C:5C:7F:A7:FE:24:92:EE:C3:7C:F4:27:64:2B:71:D4:25:B0 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/DbZ8XH-n_iSS7sN89CdkK3HUJbA.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/a9/0f3757-f0ed-4e7e-9329-b03df996e481/1/DbZ8XH-n_iSS7sN89CdkK3HUJbA.mft X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/a9/0f3757-f0ed-4e7e-9329-b03df996e481/1/DbZ8XH-n_iSS7sN89CdkK3HUJbA.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 61:1b:56:16:9e:1e:14:7e:86:57:e1:97:e1:09:89:91:d5:23: de:9b:a9:05:4d:c7:04:6d:9c:3e:92:c0:be:20:08:f1:a6:1a: 1f:bf:fa:36:8b:b5:27:4e:f3:f8:aa:6b:ce:97:ab:68:48:e9: 5c:83:e8:e1:9e:b0:ed:a6:64:42:ab:63:46:2a:4c:1d:b7:56: 55:65:5b:49:c3:a6:ee:fe:23:e0:25:81:4e:da:c0:4e:1a:fe: 1b:63:7b:7b:bc:16:d7:69:5c:10:33:43:eb:ad:9e:e3:f4:07: b9:6d:38:56:9f:84:ed:f7:23:af:ff:33:86:3d:e3:fa:24:34: 6d:be:66:8c:12:ad:74:89:20:07:e3:41:f8:d4:84:3c:7c:8c: 3d:16:0d:f7:62:44:ba:33:9d:60:d0:bc:fe:b2:c7:55:a9:8a: f8:0b:25:1d:0f:de:28:e2:6d:d8:25:63:7d:15:c7:26:a7:cf: c8:13:c2:c5:a0:8f:07:68:eb:69:83:ee:a1:db:6e:e0:7f:5d: 29:43:13:23:be:6e:cc:00:99:17:9a:88:67:b1:58:58:1a:e7: 42:8a:1b:08:61:76:2b:96:2b:88:fd:2d:4f:a2:d0:90:22:0a: 0b:78:02:04:95:ad:fd:b1:d1:c4:82:45:79:c2:0d:3e:0e:11: 27:27:a4:ab -----BEGIN CERTIFICATE----- MIIFFjCCA/6gAwIBAgISAZn617PLtwRP0Kf0omIoZrE3MA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKDBkYjY3YzVjN2ZhN2ZlMjQ5MmVlYzM3Y2Y0Mjc2NDJiNzFk NDI1YjAwHhcNMjUxMDE5MDUwMTA0WhcNMjUxMDIwMDUwMTA0WjAzMTEwLwYDVQQD Eyg0YjUyYjlhMGE5MmU4ZDE4NzM0M2YzYzg4ZTljMTljZGY0YzA0MjY2MIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAmn7D6SdvFWe+MCdsqGdWvy/a7T1F zxVREpoeq9fOCARfJDQxuR16HaKhQnEM/OJ/LQh96qol4O6+UuX7BO3oGB4q+P2E PBTVr6p3lLWnM2/rIW9PWITumLEfxrzGwDQSyaFDu+wV8kmBRlxbM3kIVh9Zr3yB KPTQzS1wo5TeTvdAy2UoCsZ9mCoJ0R7ZMipEaIp6RUW9ZF2Lz6hwbTP5FantPsok edmGdmrVA0Ww6UxXmJkOGkgyrxdJP6P0t8B5KGiuCzhLTGtQiY/QRNf/7DWkvzIl 9piACa3b/oD0q3ShXC2HXESzFtyAX1/4RKS4q4rlmsSG7QsR0A09yuqGGwIDAQAB o4ICIjCCAh4wHQYDVR0OBBYEFEtSuaCpLo0Yc0PzyI6cGc30wEJmMB8GA1UdIwQY MBaAFA22fFx/p/4kku7DfPQnZCtx1CWwMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvRGJaOFhILW5faVNTN3NOODlDZGtLM0hVSmJBLmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC9hOS8wZjM3NTctZjBlZC00ZTdlLTkzMjkt YjAzZGY5OTZlNDgxLzEvRGJaOFhILW5faVNTN3NOODlDZGtLM0hVSmJBLm1mdDCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC9hOS8wZjM3NTctZjBlZC00ZTdlLTkzMjktYjAzZGY5OTZlNDgx LzEvRGJaOFhILW5faVNTN3NOODlDZGtLM0hVSmJBLmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAYRtWFp4e FH6GV+GX4QmJkdUj3pupBU3HBG2cPpLAviAI8aYaH7/6Nou1J07z+KprzperaEjp XIPo4Z6w7aZkQqtjRipMHbdWVWVbScOm7v4j4CWBTtrAThr+G2N7e7wW12lcEDND 662e4/QHuW04Vp+E7fcjr/8zhj3j+iQ0bb5mjBKtdIkgB+NB+NSEPHyMPRYN92JE ujOdYNC8/rLHVamK+AslHQ/eKOJt2CVjfRXHJqfPyBPCxaCPB2jraYPuodtu4H9d KUMTI75uzACZF5qIZ7FYWBrnQoobCGF2K5YriP0tT6LQkCIKC3gCBJWt/bHRxIJF ecINPg4RJyekqw== -----END CERTIFICATE-----Generated at Sun Oct 19 15:25:46 2025 by rpki-client