$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/b8/4f6985-b94a-47cc-a300-6f2cf4f03ceb/1/2x1uukY7dWSr-uk4tG7UcYfeDsA.mft File: 2x1uukY7dWSr-uk4tG7UcYfeDsA.mft (raw, json) Hash identifier: kHQoSAKRQPi97RVMHaqH6+onKeOCT8OLZ1uy/U94KLM= Subject key identifier: C9:5C:1C:FB:5F:96:75:FE:C5:B3:9A:13:01:45:38:AE:D1:BC:FE:9E Authority key identifier: DB:1D:6E:BA:46:3B:75:64:AB:FA:E9:38:B4:6E:D4:71:87:DE:0E:C0 Certificate issuer: /CN=db1d6eba463b7564abfae938b46ed47187de0ec0 Certificate serial: 0199FC219C33F95B868D077C8E48B4861B17 Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/2x1uukY7dWSr-uk4tG7UcYfeDsA.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/b8/4f6985-b94a-47cc-a300-6f2cf4f03ceb/1/2x1uukY7dWSr-uk4tG7UcYfeDsA.mft Manifest number: 0A03 Signing time: Sun 19 Oct 2025 11:01:25 +0000 Manifest this update: Sun 19 Oct 2025 11:01:25 +0000 Manifest next update: Mon 20 Oct 2025 11:01:25 +0000 Files and hashes: 1: 2x1uukY7dWSr-uk4tG7UcYfeDsA.crl (hash: BfVZd3Yma2XiTVcLBISbp2uqrmoo7wD9Mu5dO9U+XFA=) 2: 87iBXWDpSIwRDGkwc7K8UhWgGyI.roa (hash: GnB7PMQFypZjuArzdsmg92AtM/uSLFw3faYH5HVQkIw=) 3: GCvMpFjTox7n5FmOa5IgrXeN2Mo.roa (hash: Y53wvi3S7ITug5cC6QdZKUB+NY5xkHHiQyyYmB7inpo=) 4: GE8S6QweGIt3c85t_rnGab-IpQg.roa (hash: 6PBV94W3VYcFPHikrfHt83RqRfHZjAYrztUDVd5Z6y8=) 5: GxPqJ9WQ-DKd_9ctcg8-12jFGZ0.roa (hash: KATN8CFnbRX1tzVerM2G5h88BqUwwD5kvjL2DX0FIcw=) 6: MKXJ66CRttluCaD2As6acb3eAwI.roa (hash: A1bSrmMEPbiNQFfUVIkOSltYihJGIH6EUwYcLxbC5P4=) 7: cHT0qzGhhZWWUdosb7dz_r29LkI.roa (hash: LL8UCKvFFQoG00GXqpjxb1DBAQ64iWVLzPMwKvO00IA=) 8: djyQgKDBzjTtDqekGHCbyDvwrGE.roa (hash: cybcX12xZijqQUsvS6pf9buN4wQXxjv+dDk5QDV0/Ys=) 9: gr1d5o3sHGA3VWu-8KVK6b7UyM4.roa (hash: GHLuG9O5AVwW61aYh11UvqNMmcEewfjv/mRXgyvZ4yg=) 10: meKHpovGdB4bkHh1XXR1ExLPB-w.roa (hash: fUS6khGidxNfptHJmzXmdTQGgfqFk4mALBHny815Klg=) 11: nPeZE7NjK8v1X9W6OWWQV8CL9dk.roa (hash: i5DQUMA7TTXDg8w9uPAc9gbe3ID2PYonRIJFljEMgcM=) Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/b8/4f6985-b94a-47cc-a300-6f2cf4f03ceb/1/2x1uukY7dWSr-uk4tG7UcYfeDsA.crl rsync://rpki.ripe.net/repository/DEFAULT/b8/4f6985-b94a-47cc-a300-6f2cf4f03ceb/1/2x1uukY7dWSr-uk4tG7UcYfeDsA.mft rsync://rpki.ripe.net/repository/DEFAULT/2x1uukY7dWSr-uk4tG7UcYfeDsA.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Mon 20 Oct 2025 11:01:25 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:99:fc:21:9c:33:f9:5b:86:8d:07:7c:8e:48:b4:86:1b:17 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=db1d6eba463b7564abfae938b46ed47187de0ec0 Validity Not Before: Oct 19 11:01:25 2025 GMT Not After : Oct 20 11:01:25 2025 GMT Subject: CN=c95c1cfb5f9675fec5b39a13014538aed1bcfe9e Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:c5:cb:df:a8:aa:c6:18:6e:52:2b:ae:77:f2:48: 26:e0:1b:6f:44:7b:1b:30:27:4c:d2:57:ae:f1:a7: 90:dd:1e:3b:70:55:21:9c:c2:8a:e4:2f:44:50:9c: bb:68:0d:81:4c:b8:c3:d7:47:06:2a:1b:ed:4b:bb: de:c9:6b:29:26:47:94:1e:86:35:37:37:6f:26:8d: c0:64:52:34:46:25:50:2c:66:aa:e9:c0:df:8a:a4: 2a:4a:7b:0c:3e:ff:88:39:91:cf:4f:e9:0e:1b:ff: 01:61:bc:30:c0:ac:38:83:3f:0e:df:95:51:00:92: 27:4f:d9:0e:47:cd:1c:1b:1b:e0:58:5b:38:bb:05: 48:a5:99:fe:db:2d:5c:0b:65:01:92:f6:93:dc:05: d2:3b:15:37:32:53:e6:8e:59:1d:77:54:24:99:20: b3:7f:a1:5d:fc:25:76:cb:63:d2:1b:c0:e8:c7:2c: b6:83:1a:3c:1a:34:82:3c:e7:fd:54:8b:0f:85:5b: 8e:ba:5d:88:60:f9:c3:b1:da:14:8d:b6:18:c9:1a: 39:68:ae:8e:36:34:43:4a:2f:71:6d:d7:01:71:2d: a9:09:5b:59:9d:12:36:bf:bd:51:4c:15:d4:95:ed: fb:4e:dd:6f:e7:07:01:86:c6:46:9d:91:ef:1b:ed: dd:b5 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: C9:5C:1C:FB:5F:96:75:FE:C5:B3:9A:13:01:45:38:AE:D1:BC:FE:9E X509v3 Authority Key Identifier: keyid:DB:1D:6E:BA:46:3B:75:64:AB:FA:E9:38:B4:6E:D4:71:87:DE:0E:C0 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/2x1uukY7dWSr-uk4tG7UcYfeDsA.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/b8/4f6985-b94a-47cc-a300-6f2cf4f03ceb/1/2x1uukY7dWSr-uk4tG7UcYfeDsA.mft X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/b8/4f6985-b94a-47cc-a300-6f2cf4f03ceb/1/2x1uukY7dWSr-uk4tG7UcYfeDsA.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption ac:7f:38:bc:ae:8a:8d:55:22:92:e1:2f:a8:0a:1e:88:24:c0: 14:70:f4:02:34:71:06:cc:ce:0e:5e:58:70:7d:4d:b6:33:b4: 32:49:47:f7:86:ef:6c:ef:eb:42:c7:b7:16:67:c2:25:31:01: 4b:1b:2c:53:c0:7f:42:94:20:12:fa:5e:b3:9e:48:76:02:a1: ef:87:29:56:ed:10:c5:25:9d:86:da:43:e0:7a:bf:fb:3d:20: ff:45:07:11:cb:36:a0:94:10:af:ad:cf:29:21:7f:19:58:55: a9:09:48:23:a4:35:9c:1c:2c:f8:c2:15:de:5f:34:e2:b0:08: 4a:fc:bd:a0:4a:d6:ea:d3:b9:35:5d:20:1c:22:43:59:b8:e8: 2e:d0:94:68:c5:a0:b8:c5:8a:12:bc:7e:51:2f:d7:22:02:9f: 00:7c:87:ba:66:96:bf:58:73:d3:ba:a4:18:35:f2:b5:b8:09: f8:5c:d5:4a:60:b5:a0:24:c5:80:ca:4f:d7:93:50:2a:7b:dd: 7f:10:e0:9c:bc:5c:13:0b:cb:94:e7:13:e0:da:b2:a0:f8:3b: a3:98:8a:d5:8e:57:0a:5e:91:f2:a4:d8:7f:04:83:bf:1b:bd: e1:b4:a1:fa:3a:66:57:59:88:e3:33:e8:ae:35:8f:4a:32:e1: f1:2e:43:52 -----BEGIN CERTIFICATE----- MIIFFjCCA/6gAwIBAgISAZn8IZwz+VuGjQd8jki0hhsXMA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKGRiMWQ2ZWJhNDYzYjc1NjRhYmZhZTkzOGI0NmVkNDcxODdk ZTBlYzAwHhcNMjUxMDE5MTEwMTI1WhcNMjUxMDIwMTEwMTI1WjAzMTEwLwYDVQQD EyhjOTVjMWNmYjVmOTY3NWZlYzViMzlhMTMwMTQ1MzhhZWQxYmNmZTllMIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAxcvfqKrGGG5SK6538kgm4BtvRHsb MCdM0leu8aeQ3R47cFUhnMKK5C9EUJy7aA2BTLjD10cGKhvtS7veyWspJkeUHoY1 NzdvJo3AZFI0RiVQLGaq6cDfiqQqSnsMPv+IOZHPT+kOG/8BYbwwwKw4gz8O35VR AJInT9kOR80cGxvgWFs4uwVIpZn+2y1cC2UBkvaT3AXSOxU3MlPmjlkdd1QkmSCz f6Fd/CV2y2PSG8Doxyy2gxo8GjSCPOf9VIsPhVuOul2IYPnDsdoUjbYYyRo5aK6O NjRDSi9xbdcBcS2pCVtZnRI2v71RTBXUle37Tt1v5wcBhsZGnZHvG+3dtQIDAQAB o4ICIjCCAh4wHQYDVR0OBBYEFMlcHPtflnX+xbOaEwFFOK7RvP6eMB8GA1UdIwQY MBaAFNsdbrpGO3Vkq/rpOLRu1HGH3g7AMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvMngxdXVrWTdkV1NyLXVrNHRHN1VjWWZlRHNBLmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC9iOC80ZjY5ODUtYjk0YS00N2NjLWEzMDAt NmYyY2Y0ZjAzY2ViLzEvMngxdXVrWTdkV1NyLXVrNHRHN1VjWWZlRHNBLm1mdDCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC9iOC80ZjY5ODUtYjk0YS00N2NjLWEzMDAtNmYyY2Y0ZjAzY2Vi LzEvMngxdXVrWTdkV1NyLXVrNHRHN1VjWWZlRHNBLmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEArH84vK6K jVUikuEvqAoeiCTAFHD0AjRxBszODl5YcH1NtjO0MklH94bvbO/rQse3FmfCJTEB SxssU8B/QpQgEvpes55IdgKh74cpVu0QxSWdhtpD4Hq/+z0g/0UHEcs2oJQQr63P KSF/GVhVqQlII6Q1nBws+MIV3l804rAISvy9oErW6tO5NV0gHCJDWbjoLtCUaMWg uMWKErx+US/XIgKfAHyHumaWv1hz07qkGDXytbgJ+FzVSmC1oCTFgMpP15NQKnvd fxDgnLxcEwvLlOcT4NqyoPg7o5iK1Y5XCl6R8qTYfwSDvxu94bSh+jpmV1mI4zPo rjWPSjLh8S5DUg== -----END CERTIFICATE-----Generated at Sun Oct 19 17:33:48 2025 by rpki-client