$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/b2/6c203d-6221-460a-af49-c12218765154/1/MlCPt4HKbb2CIfLC-VSjp0RrK0I.mft File: MlCPt4HKbb2CIfLC-VSjp0RrK0I.mft (raw, json) Hash identifier: LNQZVhEVg6X/vEsYay05E0pGq43SJElKwAaaiyEWh6o= Subject key identifier: 5B:68:7A:96:55:1A:95:8B:7D:98:1A:14:54:49:5B:22:70:C2:E3:CB Authority key identifier: 32:50:8F:B7:81:CA:6D:BD:82:21:F2:C2:F9:54:A3:A7:44:6B:2B:42 Certificate issuer: /CN=32508fb781ca6dbd8221f2c2f954a3a7446b2b42 Certificate serial: 0199FD347201F18D88347EDE7EDCCDD79F27 Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/MlCPt4HKbb2CIfLC-VSjp0RrK0I.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/b2/6c203d-6221-460a-af49-c12218765154/1/MlCPt4HKbb2CIfLC-VSjp0RrK0I.mft Manifest number: 16EF Signing time: Sun 19 Oct 2025 16:01:36 +0000 Manifest this update: Sun 19 Oct 2025 16:01:36 +0000 Manifest next update: Mon 20 Oct 2025 16:01:36 +0000 Files and hashes: 1: 7sUlQFo2i2sGz_Vst269K_D-c-U.roa (hash: awgZwYT2+l2C5RaRZHXtrmJNbZfubWqB+2+301bBQBU=) 2: MlCPt4HKbb2CIfLC-VSjp0RrK0I.crl (hash: wO0ct3KwO1RIfiWERdHhisIEzyDZOkwpJ1xdFJXc+3o=) 3: N6977Tm3BxtAWxQMZFqlxhSXVqI.roa (hash: avNpgfUO6xrr8rilL4FRK/J7Wxu+LI2r4IfOPlXIeJI=) 4: OqobHIZLFLbZk0OR9E-PF1zk1Lw.roa (hash: Op02L+M19/z5j79qbmcRNqPT6icOYzM0VJzQXj5mmv8=) 5: TEsKuOI8Wr3xLM61BToTHvaxLG0.roa (hash: rGoXl2FfQwurIyUgTu1Dn9mUe7pNqUYv/AJnXAkg28U=) 6: i7jWP6E6hcB7Kvbk4mThF2buTs8.roa (hash: OqH0B+K5eYlDv/BpS97jLxNiwQggexBzkbjaho23mP4=) 7: nqc-9YDKd79YsE90D6bPl2BpKgE.roa (hash: VLqSIZaMWc7sFSdSIdfn5EqqZNs2ezp2l6diOyM4sNY=) 8: rgeIy49dLmNJww9sp8JRWKXD-n8.roa (hash: L8MUX4zAy84NplfwfzJB7WI9HcrmosjCL1UuxDQCssQ=) 9: xZ2vcM-Bgt-peFWCq0zItN8_N0c.roa (hash: IJSnWW805B1m7rlymmTJG2w628sB6dalr9ieL5l/bMk=) 10: zZigjvCd6NcudatYLyfpsyOboFA.roa (hash: vGtEfaZy/GpSD6Vra1IvWRrERF5jpy55majvnW9xdMY=) Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/b2/6c203d-6221-460a-af49-c12218765154/1/MlCPt4HKbb2CIfLC-VSjp0RrK0I.crl rsync://rpki.ripe.net/repository/DEFAULT/b2/6c203d-6221-460a-af49-c12218765154/1/MlCPt4HKbb2CIfLC-VSjp0RrK0I.mft rsync://rpki.ripe.net/repository/DEFAULT/MlCPt4HKbb2CIfLC-VSjp0RrK0I.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Mon 20 Oct 2025 11:18:59 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:99:fd:34:72:01:f1:8d:88:34:7e:de:7e:dc:cd:d7:9f:27 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=32508fb781ca6dbd8221f2c2f954a3a7446b2b42 Validity Not Before: Oct 19 16:01:36 2025 GMT Not After : Oct 20 16:01:36 2025 GMT Subject: CN=5b687a96551a958b7d981a1454495b2270c2e3cb Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:b5:cb:7c:4d:6a:5c:ea:78:3d:21:d7:34:5c:76: be:f2:0b:33:bd:a2:f7:c9:d7:25:f0:10:c9:e7:3b: f4:d3:63:35:3b:33:8f:47:9e:21:37:85:cf:64:f6: c9:8b:f9:be:64:c6:58:be:b6:26:48:4f:ad:38:90: b8:22:ad:fe:c2:a6:f4:49:b8:5b:d1:80:9f:cb:ef: fc:61:12:43:71:cd:7d:c5:ba:73:dc:7b:02:37:83: 55:18:b4:38:25:af:b3:31:76:0e:39:a6:18:18:13: 82:45:e9:34:ce:9c:d5:23:f9:80:28:bc:53:ca:2b: 51:f4:e1:01:a3:be:9c:df:a1:96:30:a4:2a:83:84: 61:fe:a2:e5:13:58:4e:16:af:a8:8c:58:cd:b2:92: 25:4d:47:91:cd:e6:e7:2e:58:24:b2:a6:35:f0:cd: c7:48:b9:71:ce:0e:53:e4:f8:70:c0:9c:6a:2d:ab: f0:6e:71:ac:ed:9d:66:e5:86:fc:9b:fc:ab:ae:e3: ea:81:1c:2c:c5:86:75:6e:0a:52:59:25:d8:64:9b: fc:f5:03:67:cb:51:83:2e:84:80:aa:66:e3:f3:16: 10:16:a1:23:48:f2:71:fc:42:9e:f0:6b:5b:ea:c1: 8c:19:74:90:ee:e9:64:0a:37:21:f5:47:5f:9a:54: 1a:ff Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 5B:68:7A:96:55:1A:95:8B:7D:98:1A:14:54:49:5B:22:70:C2:E3:CB X509v3 Authority Key Identifier: keyid:32:50:8F:B7:81:CA:6D:BD:82:21:F2:C2:F9:54:A3:A7:44:6B:2B:42 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/MlCPt4HKbb2CIfLC-VSjp0RrK0I.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/b2/6c203d-6221-460a-af49-c12218765154/1/MlCPt4HKbb2CIfLC-VSjp0RrK0I.mft X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/b2/6c203d-6221-460a-af49-c12218765154/1/MlCPt4HKbb2CIfLC-VSjp0RrK0I.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 03:79:9d:b1:9e:b8:63:1d:c2:99:05:65:23:cb:e9:42:07:c6: c1:3d:f8:9c:9f:fa:82:b9:26:e5:90:a3:02:d1:92:73:d9:a6: f1:51:99:4a:86:23:bf:b9:29:9b:02:b7:53:f4:c8:aa:f0:03: ac:d3:cd:c8:2f:00:32:43:89:af:64:52:1b:8e:b3:63:ce:ec: d7:cb:46:94:0b:75:e9:fa:50:5e:e2:8f:dc:3d:e0:31:39:35: 7f:4d:f3:d3:8f:1b:de:56:bb:8d:c2:91:10:54:e7:c6:f6:5d: 86:b0:d6:aa:b4:ba:bb:24:37:0e:bb:e7:e0:78:59:0f:10:01: 8c:70:29:af:82:6d:28:e6:ce:db:ed:79:78:e0:fb:ce:d2:80: d5:8b:b0:72:98:af:7b:a9:fa:2e:02:f3:fa:e9:29:7b:51:be: ec:5c:7e:bb:c2:aa:8d:15:e9:91:af:64:d7:03:52:4d:e2:d5: 3f:b5:eb:d4:4e:fa:fe:b3:70:9c:92:44:14:c5:81:27:9f:d8: b5:47:31:37:94:09:b9:cd:f4:e0:03:51:26:4c:32:0e:c5:9a: 2a:0e:e9:b8:cd:17:25:4b:51:92:38:76:fd:e5:7a:be:b9:32: 20:f9:b4:7f:b7:b0:26:78:34:c1:da:4e:f7:97:03:1d:1b:91: 74:a6:c8:29 -----BEGIN CERTIFICATE----- MIIFFjCCA/6gAwIBAgISAZn9NHIB8Y2INH7eftzN158nMA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKDMyNTA4ZmI3ODFjYTZkYmQ4MjIxZjJjMmY5NTRhM2E3NDQ2 YjJiNDIwHhcNMjUxMDE5MTYwMTM2WhcNMjUxMDIwMTYwMTM2WjAzMTEwLwYDVQQD Eyg1YjY4N2E5NjU1MWE5NThiN2Q5ODFhMTQ1NDQ5NWIyMjcwYzJlM2NiMIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAtct8TWpc6ng9Idc0XHa+8gszvaL3 ydcl8BDJ5zv002M1OzOPR54hN4XPZPbJi/m+ZMZYvrYmSE+tOJC4Iq3+wqb0Sbhb 0YCfy+/8YRJDcc19xbpz3HsCN4NVGLQ4Ja+zMXYOOaYYGBOCRek0zpzVI/mAKLxT yitR9OEBo76c36GWMKQqg4Rh/qLlE1hOFq+ojFjNspIlTUeRzebnLlgksqY18M3H SLlxzg5T5PhwwJxqLavwbnGs7Z1m5Yb8m/yrruPqgRwsxYZ1bgpSWSXYZJv89QNn y1GDLoSAqmbj8xYQFqEjSPJx/EKe8Gtb6sGMGXSQ7ulkCjch9UdfmlQa/wIDAQAB o4ICIjCCAh4wHQYDVR0OBBYEFFtoepZVGpWLfZgaFFRJWyJwwuPLMB8GA1UdIwQY MBaAFDJQj7eBym29giHywvlUo6dEaytCMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvTWxDUHQ0SEtiYjJDSWZMQy1WU2pwMFJySzBJLmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC9iMi82YzIwM2QtNjIyMS00NjBhLWFmNDkt YzEyMjE4NzY1MTU0LzEvTWxDUHQ0SEtiYjJDSWZMQy1WU2pwMFJySzBJLm1mdDCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC9iMi82YzIwM2QtNjIyMS00NjBhLWFmNDktYzEyMjE4NzY1MTU0 LzEvTWxDUHQ0SEtiYjJDSWZMQy1WU2pwMFJySzBJLmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAA3mdsZ64 Yx3CmQVlI8vpQgfGwT34nJ/6grkm5ZCjAtGSc9mm8VGZSoYjv7kpmwK3U/TIqvAD rNPNyC8AMkOJr2RSG46zY87s18tGlAt16fpQXuKP3D3gMTk1f03z048b3la7jcKR EFTnxvZdhrDWqrS6uyQ3Drvn4HhZDxABjHApr4JtKObO2+15eOD7ztKA1Yuwcpiv e6n6LgLz+ukpe1G+7Fx+u8KqjRXpka9k1wNSTeLVP7Xr1E76/rNwnJJEFMWBJ5/Y tUcxN5QJuc304ANRJkwyDsWaKg7puM0XJUtRkjh2/eV6vrkyIPm0f7ewJng0wdpO 95cDHRuRdKbIKQ== -----END CERTIFICATE-----Generated at Sun Oct 19 18:05:32 2025 by rpki-client