$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/b8/6d5d75-4d1e-4697-b1d3-36e344abc9d3/1/437h7O0Z-KCjpjW_qiZCk-NDd5U.mft File: 437h7O0Z-KCjpjW_qiZCk-NDd5U.mft (raw, json) Hash identifier: Yv8fLj+z8x9vDnxh3R+/rwIBZxEIh9niTknXyCI23MM= Subject key identifier: 81:62:A4:B1:1A:03:BF:CD:1C:F5:3C:72:F4:99:14:AD:8E:2B:AA:0B Authority key identifier: E3:7E:E1:EC:ED:19:F8:A0:A3:A6:35:BF:AA:26:42:93:E3:43:77:95 Certificate issuer: /CN=e37ee1eced19f8a0a3a635bfaa264293e3437795 Certificate serial: 0199FFC862C6DE1F65D8CF7FEF1EE2992746 Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/437h7O0Z-KCjpjW_qiZCk-NDd5U.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/b8/6d5d75-4d1e-4697-b1d3-36e344abc9d3/1/437h7O0Z-KCjpjW_qiZCk-NDd5U.mft Manifest number: 170D Signing time: Mon 20 Oct 2025 04:02:26 +0000 Manifest this update: Mon 20 Oct 2025 04:02:26 +0000 Manifest next update: Tue 21 Oct 2025 04:02:26 +0000 Files and hashes: 1: 1-gMcB2tX1aJagc2aIqyie1JosUM.roa (hash: e/zYIsHTFYDxeTkK5hyPfn+knzLFEB1hZl3ZQmxyCc0=) 2: 437h7O0Z-KCjpjW_qiZCk-NDd5U.crl (hash: /4D/dsu5ERqnyZ4Iq6jZ+1amUAk+YO9viJ1erBBcX9g=) 3: 9eNXipbIkyVdZ3T8NqmEYXwSLqE.roa (hash: BrQPu/EjsIQipBfThN07mTNPYYMcHP60+6UvtDcOjIw=) 4: EFuxyCYga5KedfhIetzIM8Wqp3Y.roa (hash: O+IR1hZ8a8RGzU0SmSAJy1+brABxzqq2amGl3toGZFo=) 5: JS9UWtZttem3o1fXhyj6cDhffLI.roa (hash: 2i5hM4JyTJhdNStU0tEfjgguQh3ME+ydQZVTRw+h18A=) 6: RX5TjbcaEwYk1IhE69eAlXBXNyQ.roa (hash: c0wkjrnxIEHQj5HUBmajY9pyKvCItPr80kJiD5UVJ6c=) 7: TxnmQLTJ7RG9p8EWlmGMzoVFKYM.roa (hash: ya4Fhh2AAgBvWI3PefXXRZJhuG79XQoe+sEudA3lm48=) 8: Ug41i06gdv9Ukc46NZ5XcrOupdE.roa (hash: llRNNcmXFkFqLY4QgsxGuCXjBef7WAi2K7CKwj9Mkc8=) 9: ZYZn-5YwBHa46UGZ7YpzFXkXV2c.roa (hash: nysaKplSjq7+66zMvup13xDe5hG/XF/iaG+ccwRnc48=) 10: iTq1k1-n5HC3mDH6yOxsGqky0UI.roa (hash: AGbGIRgcWmrYfxQjlQUEIVcfb2QPCldn/oJ/TJ7MR/A=) 11: ijEqoAEZpU0XwucBGAsnbQDDdNw.roa (hash: JCAoDA+s8OPB6Om2MtNX+ndsLOblJSylnwNeZbS7ZEI=) 12: oUN6hm9XIH9hez7uSosGEeiTS64.roa (hash: O2lJOrBjeZAv4ECvJJ0xPhkbtSeFQ6Qb6tFoYeeLtF0=) 13: rHz8kaauSx9yjUtMHgkc7yNJ95o.roa (hash: PhKHXgs0bJsWkyri4OmHbJXKHUs8Dv3fw5JQFOIgfUI=) Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/b8/6d5d75-4d1e-4697-b1d3-36e344abc9d3/1/437h7O0Z-KCjpjW_qiZCk-NDd5U.crl rsync://rpki.ripe.net/repository/DEFAULT/b8/6d5d75-4d1e-4697-b1d3-36e344abc9d3/1/437h7O0Z-KCjpjW_qiZCk-NDd5U.mft rsync://rpki.ripe.net/repository/DEFAULT/437h7O0Z-KCjpjW_qiZCk-NDd5U.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Tue 21 Oct 2025 00:00:58 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:99:ff:c8:62:c6:de:1f:65:d8:cf:7f:ef:1e:e2:99:27:46 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=e37ee1eced19f8a0a3a635bfaa264293e3437795 Validity Not Before: Oct 20 04:02:26 2025 GMT Not After : Oct 21 04:02:26 2025 GMT Subject: CN=8162a4b11a03bfcd1cf53c72f49914ad8e2baa0b Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:db:57:91:b4:c4:16:50:0c:f8:b3:60:77:f6:81: 93:e1:01:0d:1f:a9:33:0c:80:3b:b1:29:83:41:de: 11:1c:fa:76:9e:30:0c:43:03:35:0a:04:ec:e1:ce: e3:b2:0d:10:f6:55:57:2a:50:ec:66:71:0d:d9:52: 8e:66:98:b4:52:73:a1:37:95:b2:fb:bc:1d:f9:f4: eb:10:19:65:03:6d:e5:cf:bb:50:7e:97:c0:e3:f1: 0c:60:3e:1d:2f:a4:ee:fc:35:32:a9:04:88:b9:3b: 45:71:64:20:65:fc:db:b7:b6:50:fe:12:d8:c9:b9: 36:66:93:4f:16:b7:c1:87:16:6c:2f:19:a2:11:a5: f8:d2:59:bd:ae:1e:39:1f:c7:77:ac:74:32:a7:71: 90:89:58:c8:65:2d:21:60:89:a7:9d:a1:bc:72:be: 7a:38:2e:4c:01:a6:51:c2:46:50:2f:fc:52:72:e6: 68:fa:b0:96:70:5d:84:d3:a6:0a:9e:fb:4d:1a:fc: fb:70:87:82:7f:3b:5b:01:0a:17:d3:11:f1:ae:36: f3:c3:09:ff:41:4f:ef:98:ef:9c:3b:cb:50:8f:38: 18:ab:2b:63:77:eb:ed:5d:9d:ee:a2:8e:d9:5e:55: a7:2b:63:d1:b8:99:10:ee:5c:44:bd:89:ed:b6:91: 10:b3 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 81:62:A4:B1:1A:03:BF:CD:1C:F5:3C:72:F4:99:14:AD:8E:2B:AA:0B X509v3 Authority Key Identifier: keyid:E3:7E:E1:EC:ED:19:F8:A0:A3:A6:35:BF:AA:26:42:93:E3:43:77:95 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/437h7O0Z-KCjpjW_qiZCk-NDd5U.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/b8/6d5d75-4d1e-4697-b1d3-36e344abc9d3/1/437h7O0Z-KCjpjW_qiZCk-NDd5U.mft X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/b8/6d5d75-4d1e-4697-b1d3-36e344abc9d3/1/437h7O0Z-KCjpjW_qiZCk-NDd5U.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 05:73:53:ee:ce:55:35:15:5a:21:22:f6:41:30:d5:a2:cc:fc: 32:2a:75:60:af:ff:ab:cc:88:fd:46:24:c0:17:0e:f8:f0:4e: 55:7c:37:39:f8:d4:66:e6:c4:ce:24:41:00:4e:aa:76:66:bf: 9b:55:ba:ce:22:75:fd:3c:ef:00:04:a6:64:38:57:cf:95:e8: 90:a9:2c:32:b1:37:8b:f0:f6:f2:23:dd:09:94:91:f6:95:ed: b3:20:23:4d:6f:b6:48:65:d2:af:17:e1:1d:59:a6:63:82:90: a9:bc:15:29:38:76:44:3e:4a:0a:53:a8:c9:27:af:84:57:21: da:17:cb:48:83:b9:00:7d:81:03:c0:c9:38:3c:7e:89:35:cb: f4:c4:65:24:3b:af:90:e6:7f:0c:13:a0:39:ca:6e:06:86:42: 74:8b:1a:37:7d:b9:ac:af:af:27:66:c2:00:14:46:f6:54:1d: 3a:62:e6:f8:f6:84:c2:82:62:7e:c0:e5:2b:94:7f:96:6a:e7: 3d:46:fc:03:6a:98:b6:0f:38:ac:56:35:c4:c2:e0:fd:c0:21: 56:56:85:60:c4:6e:57:2e:0f:da:fb:8c:4f:b5:ac:8f:78:c0: d1:03:af:a1:c7:e4:c5:60:08:af:58:c5:64:e0:67:15:a3:db: e6:1f:60:1e -----BEGIN CERTIFICATE----- MIIFFjCCA/6gAwIBAgISAZn/yGLG3h9l2M9/7x7imSdGMA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKGUzN2VlMWVjZWQxOWY4YTBhM2E2MzViZmFhMjY0MjkzZTM0 Mzc3OTUwHhcNMjUxMDIwMDQwMjI2WhcNMjUxMDIxMDQwMjI2WjAzMTEwLwYDVQQD Eyg4MTYyYTRiMTFhMDNiZmNkMWNmNTNjNzJmNDk5MTRhZDhlMmJhYTBiMIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEA21eRtMQWUAz4s2B39oGT4QENH6kz DIA7sSmDQd4RHPp2njAMQwM1CgTs4c7jsg0Q9lVXKlDsZnEN2VKOZpi0UnOhN5Wy +7wd+fTrEBllA23lz7tQfpfA4/EMYD4dL6Tu/DUyqQSIuTtFcWQgZfzbt7ZQ/hLY ybk2ZpNPFrfBhxZsLxmiEaX40lm9rh45H8d3rHQyp3GQiVjIZS0hYImnnaG8cr56 OC5MAaZRwkZQL/xScuZo+rCWcF2E06YKnvtNGvz7cIeCfztbAQoX0xHxrjbzwwn/ QU/vmO+cO8tQjzgYqytjd+vtXZ3uoo7ZXlWnK2PRuJkQ7lxEvYnttpEQswIDAQAB o4ICIjCCAh4wHQYDVR0OBBYEFIFipLEaA7/NHPU8cvSZFK2OK6oLMB8GA1UdIwQY MBaAFON+4eztGfigo6Y1v6omQpPjQ3eVMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvNDM3aDdPMFotS0NqcGpXX3FpWkNrLU5EZDVVLmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC9iOC82ZDVkNzUtNGQxZS00Njk3LWIxZDMt MzZlMzQ0YWJjOWQzLzEvNDM3aDdPMFotS0NqcGpXX3FpWkNrLU5EZDVVLm1mdDCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC9iOC82ZDVkNzUtNGQxZS00Njk3LWIxZDMtMzZlMzQ0YWJjOWQz LzEvNDM3aDdPMFotS0NqcGpXX3FpWkNrLU5EZDVVLmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEABXNT7s5V NRVaISL2QTDVosz8Mip1YK//q8yI/UYkwBcO+PBOVXw3OfjUZubEziRBAE6qdma/ m1W6ziJ1/TzvAASmZDhXz5XokKksMrE3i/D28iPdCZSR9pXtsyAjTW+2SGXSrxfh HVmmY4KQqbwVKTh2RD5KClOoySevhFch2hfLSIO5AH2BA8DJODx+iTXL9MRlJDuv kOZ/DBOgOcpuBoZCdIsaN325rK+vJ2bCABRG9lQdOmLm+PaEwoJifsDlK5R/lmrn PUb8A2qYtg84rFY1xMLg/cAhVlaFYMRuVy4P2vuMT7Wsj3jA0QOvocfkxWAIr1jF ZOBnFaPb5h9gHg== -----END CERTIFICATE-----Generated at Mon Oct 20 09:42:46 2025 by rpki-client