$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/ab/7282b4-7f11-4ee0-abea-e13e5579c5dc/1/Q9W6CBXJ9Rk_gJie6JOsrMS6iEk.mft File: Q9W6CBXJ9Rk_gJie6JOsrMS6iEk.mft (raw, json) Hash identifier: 7RtNiwouOlnGq5wpHdsVM5OlQGwvAiyGltWu7aGxdHA= Subject key identifier: B2:57:97:BC:6F:D7:18:E7:BD:B9:CA:E9:AA:25:BD:6D:63:FD:41:0C Authority key identifier: 43:D5:BA:08:15:C9:F5:19:3F:80:98:9E:E8:93:AC:AC:C4:BA:88:49 Certificate issuer: /CN=43d5ba0815c9f5193f80989ee893acacc4ba8849 Certificate serial: 0199FEEB82C9331F660225CCE2DED651DEAD Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/Q9W6CBXJ9Rk_gJie6JOsrMS6iEk.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/ab/7282b4-7f11-4ee0-abea-e13e5579c5dc/1/Q9W6CBXJ9Rk_gJie6JOsrMS6iEk.mft Manifest number: 1701 Signing time: Mon 20 Oct 2025 00:01:11 +0000 Manifest this update: Mon 20 Oct 2025 00:01:11 +0000 Manifest next update: Tue 21 Oct 2025 00:01:11 +0000 Files and hashes: 1: Bt_BJ_rJvQ-dhFs_SCmV1G3Ogsk.roa (hash: MRBJocdcxttyraiCxJuRCmX4CgQbJJdUodQ85Hkwc4U=) 2: JyxghoeF6hDC8N6SVjWRhYxsMBM.roa (hash: xPNYZdV7e7Lg6hC+x9cwa/uaXPSCMeE53FUH9lU5TIM=) 3: OYF94ILNmc9IGZCl0trT_vCrveA.roa (hash: uj8o2STwQYQOQKO9jHh+UgR4tdLDjqQa9LhPcW5B4qI=) 4: Q9W6CBXJ9Rk_gJie6JOsrMS6iEk.crl (hash: 5YDsJzTAmltteFIKfxV9At4/p3b/46jFVnqXUV4F6nU=) 5: a2-Ak-XNzMq87nGfxm17NNrDD-w.roa (hash: oobPnpb12mxX5CV2sXI30Is1iiyb45x/TVEFVdIFWQ0=) 6: bDUFsRxvOWilElkS5MfCCIWk1XQ.roa (hash: mAKIKAHs72Ncw5cLpVcqx2omnJ6e82AfVTrRpnwNpJU=) 7: bkFu5lpbMCNQfDrUwHK85noTE8w.roa (hash: LF7GIBSOnpzm9vehsDsQICT9UHecDF3rayxCzLBTmJc=) 8: i4BvPEbIU0LE_KGbaw2Du_jwtCU.roa (hash: /Y2NvzZtZ5IYW3kWzP26GGHk2SWDVIrWTwCk4pyyB7E=) 9: tyWKDUVqC5IzOiqKJqRpStnyBMA.roa (hash: qWagwXDRFIv38+Ji9vgNoeMWS7OrJF0vAZgWVKNUl5M=) 10: xXPje22kQWotZEDmug62wH0gDiA.roa (hash: agsgwd8NBBgzTmUw5oBm+qVdc/ai59WAMmo29EAFg6c=) Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/ab/7282b4-7f11-4ee0-abea-e13e5579c5dc/1/Q9W6CBXJ9Rk_gJie6JOsrMS6iEk.crl rsync://rpki.ripe.net/repository/DEFAULT/ab/7282b4-7f11-4ee0-abea-e13e5579c5dc/1/Q9W6CBXJ9Rk_gJie6JOsrMS6iEk.mft rsync://rpki.ripe.net/repository/DEFAULT/Q9W6CBXJ9Rk_gJie6JOsrMS6iEk.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Tue 21 Oct 2025 00:00:58 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:99:fe:eb:82:c9:33:1f:66:02:25:cc:e2:de:d6:51:de:ad Signature Algorithm: sha256WithRSAEncryption Issuer: CN=43d5ba0815c9f5193f80989ee893acacc4ba8849 Validity Not Before: Oct 20 00:01:11 2025 GMT Not After : Oct 21 00:01:11 2025 GMT Subject: CN=b25797bc6fd718e7bdb9cae9aa25bd6d63fd410c Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:c9:be:d4:81:4d:4a:fb:29:d0:c4:0b:72:4f:4d: 12:c2:df:e2:2b:09:25:d1:fc:5c:25:1d:6b:d1:28: 5e:74:eb:d3:bb:f7:6e:67:c1:aa:13:03:86:7c:73: d6:a9:f9:a7:97:b5:1e:f2:76:e5:7c:3c:3a:2b:90: 31:8e:42:ee:d5:e3:db:92:5c:00:43:78:5c:e0:d9: 56:7b:ca:3f:a7:d6:87:e1:26:04:67:fb:ce:62:46: 04:48:f2:b0:b1:d6:8a:21:2e:81:1d:87:1b:3b:d9: 36:84:7e:4f:ac:48:31:cf:76:9e:95:7b:b0:a4:33: 72:a1:f0:07:19:de:65:8b:06:77:b9:4e:9b:a2:99: 37:07:d1:3a:ad:31:51:2d:f4:35:cb:18:ce:bb:5f: bb:3a:19:7a:b5:4c:6a:fa:17:9a:f3:6c:de:08:ab: 50:89:fd:dd:b1:b8:29:d4:20:5a:a1:a4:47:73:24: 6c:5d:40:a7:34:fa:96:f3:cb:45:2f:4c:24:14:25: 2c:a1:01:6a:93:28:c4:1d:d3:a3:5f:d3:41:d2:27: 8d:6f:0d:f3:b9:03:ef:1f:a7:ee:56:0d:81:8d:c3: 50:8b:71:dd:4b:fc:cd:39:f1:be:9b:c1:7f:9c:4e: 3e:6a:7d:ab:f1:d4:0f:5d:2f:87:1e:fa:63:6b:3a: ac:4b Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: B2:57:97:BC:6F:D7:18:E7:BD:B9:CA:E9:AA:25:BD:6D:63:FD:41:0C X509v3 Authority Key Identifier: keyid:43:D5:BA:08:15:C9:F5:19:3F:80:98:9E:E8:93:AC:AC:C4:BA:88:49 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/Q9W6CBXJ9Rk_gJie6JOsrMS6iEk.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/ab/7282b4-7f11-4ee0-abea-e13e5579c5dc/1/Q9W6CBXJ9Rk_gJie6JOsrMS6iEk.mft X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/ab/7282b4-7f11-4ee0-abea-e13e5579c5dc/1/Q9W6CBXJ9Rk_gJie6JOsrMS6iEk.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption ac:9a:02:86:2b:ac:96:f2:3e:30:6c:44:ff:dc:9f:2d:b9:2d: b6:32:7e:04:b0:fd:28:f3:79:7a:e7:63:d0:36:0b:f4:d4:99: 22:47:7c:57:4f:69:b1:bd:51:51:fd:6c:ad:e0:1b:8c:57:bb: e6:97:7b:20:7c:93:68:1e:06:10:b7:03:ed:ed:aa:e7:10:12: 78:a2:7d:93:ae:70:f0:25:95:42:e3:91:f6:0c:95:d0:52:f8: 87:03:17:ad:31:67:fd:79:11:d0:56:03:7f:f9:95:8a:5e:ef: 9b:17:71:59:5f:2d:78:29:2a:ff:cb:8d:f8:2c:11:6a:da:12: 3e:ce:18:f4:3b:ea:99:d8:8f:1b:4a:3b:8f:57:68:a0:6f:88: b1:29:f2:ec:11:4f:e9:11:ab:8a:8b:63:9c:43:b5:e0:70:ee: 81:9f:b3:6e:4d:4a:35:ac:ba:e3:d7:eb:ea:eb:fb:a0:71:84: f9:c4:82:3b:9d:49:7b:a5:7b:d4:32:fa:de:79:da:1f:34:3d: 83:e8:16:40:21:50:d2:45:20:84:20:a5:b1:43:12:51:27:69: af:e8:40:b3:fa:55:d1:67:fd:20:02:a2:6d:97:cb:33:c2:f0: 07:1e:2d:9a:ed:cd:65:e5:42:bf:5c:51:3c:12:43:c7:0f:d3: 8a:a8:0b:7d -----BEGIN CERTIFICATE----- MIIFFjCCA/6gAwIBAgISAZn+64LJMx9mAiXM4t7WUd6tMA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKDQzZDViYTA4MTVjOWY1MTkzZjgwOTg5ZWU4OTNhY2FjYzRi YTg4NDkwHhcNMjUxMDIwMDAwMTExWhcNMjUxMDIxMDAwMTExWjAzMTEwLwYDVQQD EyhiMjU3OTdiYzZmZDcxOGU3YmRiOWNhZTlhYTI1YmQ2ZDYzZmQ0MTBjMIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAyb7UgU1K+ynQxAtyT00Swt/iKwkl 0fxcJR1r0ShedOvTu/duZ8GqEwOGfHPWqfmnl7Ue8nblfDw6K5AxjkLu1ePbklwA Q3hc4NlWe8o/p9aH4SYEZ/vOYkYESPKwsdaKIS6BHYcbO9k2hH5PrEgxz3aelXuw pDNyofAHGd5liwZ3uU6bopk3B9E6rTFRLfQ1yxjOu1+7Ohl6tUxq+hea82zeCKtQ if3dsbgp1CBaoaRHcyRsXUCnNPqW88tFL0wkFCUsoQFqkyjEHdOjX9NB0ieNbw3z uQPvH6fuVg2BjcNQi3HdS/zNOfG+m8F/nE4+an2r8dQPXS+HHvpjazqsSwIDAQAB o4ICIjCCAh4wHQYDVR0OBBYEFLJXl7xv1xjnvbnK6aolvW1j/UEMMB8GA1UdIwQY MBaAFEPVuggVyfUZP4CYnuiTrKzEuohJMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvUTlXNkNCWEo5UmtfZ0ppZTZKT3NyTVM2aUVrLmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC9hYi83MjgyYjQtN2YxMS00ZWUwLWFiZWEt ZTEzZTU1NzljNWRjLzEvUTlXNkNCWEo5UmtfZ0ppZTZKT3NyTVM2aUVrLm1mdDCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC9hYi83MjgyYjQtN2YxMS00ZWUwLWFiZWEtZTEzZTU1NzljNWRj LzEvUTlXNkNCWEo5UmtfZ0ppZTZKT3NyTVM2aUVrLmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEArJoChius lvI+MGxE/9yfLbkttjJ+BLD9KPN5eudj0DYL9NSZIkd8V09psb1RUf1sreAbjFe7 5pd7IHyTaB4GELcD7e2q5xASeKJ9k65w8CWVQuOR9gyV0FL4hwMXrTFn/XkR0FYD f/mVil7vmxdxWV8teCkq/8uN+CwRatoSPs4Y9DvqmdiPG0o7j1dooG+IsSny7BFP 6RGriotjnEO14HDugZ+zbk1KNay649fr6uv7oHGE+cSCO51Je6V71DL63nnaHzQ9 g+gWQCFQ0kUghCClsUMSUSdpr+hAs/pV0Wf9IAKibZfLM8LwBx4tmu3NZeVCv1xR PBJDxw/TiqgLfQ== -----END CERTIFICATE-----Generated at Mon Oct 20 08:48:13 2025 by rpki-client