$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/bb/32109e-24c9-4c88-a8e8-fdf6638d2c04/1/a8XefXJVt9WCYMZaEgsWTvEO-QM.mft File: a8XefXJVt9WCYMZaEgsWTvEO-QM.mft (raw, json) Hash identifier: r/eUkMIY0gYOyBfAz7Nw/Di7fA78/yMTITEfMD8nemE= Subject key identifier: 5C:4B:C1:CF:90:4C:B3:43:99:56:3E:AB:06:9F:B8:5F:2A:28:F7:1D Authority key identifier: 6B:C5:DE:7D:72:55:B7:D5:82:60:C6:5A:12:0B:16:4E:F1:0E:F9:03 Certificate issuer: /CN=6bc5de7d7255b7d58260c65a120b164ef10ef903 Certificate serial: 0199FBEBC0E8046671AA6CDAAB51CE15DDD2 Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/a8XefXJVt9WCYMZaEgsWTvEO-QM.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/bb/32109e-24c9-4c88-a8e8-fdf6638d2c04/1/a8XefXJVt9WCYMZaEgsWTvEO-QM.mft Manifest number: 16BE Signing time: Sun 19 Oct 2025 10:02:35 +0000 Manifest this update: Sun 19 Oct 2025 10:02:35 +0000 Manifest next update: Mon 20 Oct 2025 10:02:35 +0000 Files and hashes: 1: 12ToQcSPt7mcdwlwu8cks0_4omc.roa (hash: Iyr2cE2tf2K+xaBK2dhfD2MWZhPJHAOvhdyF3JqR+/g=) 2: 2sbBAO7ATxHzEchFAB6gArPRZZY.roa (hash: UDJGL7lU9D2x+NFmBhQK2JHOpnmQvd/reJ4wMgvIZq8=) 3: 5ZYhCNxqOm04hmY0BhngKxN9rig.roa (hash: 83J35QD4/t+gUfggZnoS3qCNRY62Cfjrx/Jm442KIdY=) 4: CnBdxPcv8KTrt5XMCJCPewVSZRg.roa (hash: HTGJ4pleXKotSI8qqw3gOs/mMqVAW43VM+27Wir5axs=) 5: DNFKKqPzY2tTxyq4ZF-e6ESwWBk.roa (hash: ONyXaG/qy9WX6Bit7PbMeuasymNM8i3asJe1STaYw+o=) 6: HQby7lGCxVhcsYrFBxtLvu1Nq1s.roa (hash: OEoyOXMuUI9gzJHQlRaFw5QR3hyZ9zizJ0Zhg109soQ=) 7: KEB7URRNcLIkdHFl8_NaQFzoCUc.roa (hash: 8o0J9qbfKon/Y8q8sQm0uMymQ1kVnwb8u5ia9INGr/U=) 8: RVuh9Ovnia6HGIxuY5C4mqQkVzw.roa (hash: 7MdQXOdkGadK2Vo4n1LYddNyvg9R887clmJN5QnKDO0=) 9: _4iJCnTkrZTLi3Znw6No51nUp0U.roa (hash: q5ypixYuURsWaauidvKopOxQLyMvMh9Ff8agaEGE8Z8=) 10: a8XefXJVt9WCYMZaEgsWTvEO-QM.crl (hash: VUiHtPbUSCvwQGPRabKDjNXqbH8YK123DbZQBP8CAkE=) 11: egyYxAR3bwmsGgeknwOtvs63Vmw.roa (hash: XurIkmwZSfSrHBi1j2SOabRmxdimDBrxAVpSXYwSmK8=) 12: gCwZCj5y4eEHhiE3OdNG143EtPw.roa (hash: bJxdVgp0WUK1yUG+3MFHdMNTBJUCc3SJjDGJmr3bN5s=) 13: kWxL8-0FaQ5asnDLfivzWKH4-z8.roa (hash: aTbkIB4IPS1IGAIXN2uxEpuYorOcI3bZmMM6X6TsyjM=) Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/bb/32109e-24c9-4c88-a8e8-fdf6638d2c04/1/a8XefXJVt9WCYMZaEgsWTvEO-QM.crl rsync://rpki.ripe.net/repository/DEFAULT/bb/32109e-24c9-4c88-a8e8-fdf6638d2c04/1/a8XefXJVt9WCYMZaEgsWTvEO-QM.mft rsync://rpki.ripe.net/repository/DEFAULT/a8XefXJVt9WCYMZaEgsWTvEO-QM.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Mon 20 Oct 2025 06:00:58 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:99:fb:eb:c0:e8:04:66:71:aa:6c:da:ab:51:ce:15:dd:d2 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=6bc5de7d7255b7d58260c65a120b164ef10ef903 Validity Not Before: Oct 19 10:02:35 2025 GMT Not After : Oct 20 10:02:35 2025 GMT Subject: CN=5c4bc1cf904cb34399563eab069fb85f2a28f71d Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:ee:f4:90:41:d5:79:aa:30:91:13:73:f9:e7:1d: 23:b3:fc:ee:8d:d2:ef:ba:e7:0c:f3:b8:6b:47:89: aa:35:a6:67:a1:e4:8e:29:41:3e:ef:e7:90:8c:61: a6:b8:88:39:fe:c3:9b:4e:55:a2:94:db:cd:c7:50: 25:c6:5b:1c:e8:3e:d6:c9:38:46:39:5c:79:e6:c7: 41:6c:76:75:40:a8:c3:41:c0:8a:e0:ef:63:4c:05: 81:2d:5e:79:a9:48:6c:d5:70:b3:4f:72:47:77:d7: 9a:cc:f7:d8:d9:db:8b:fe:d6:0f:60:dd:4f:5b:0a: b3:63:f7:1d:f1:04:17:eb:41:3f:c7:0b:75:ba:99: 7d:9a:03:4f:eb:2e:be:f7:34:28:c9:da:45:dd:99: e8:d0:d6:42:06:61:56:d5:da:64:eb:10:95:85:ff: 94:f3:f7:00:2c:76:38:70:73:23:9e:98:60:8d:d5: a6:22:07:bb:cc:26:ef:e4:74:d8:bc:bd:ba:98:55: f3:99:40:e0:d8:ca:b6:33:d1:3c:01:9b:45:eb:f1: 72:70:66:c9:18:63:cc:87:fa:23:e0:ac:7b:93:c3: cb:04:35:01:14:39:08:4d:d4:18:ec:2b:2e:34:df: a5:54:43:73:a7:b8:05:4e:11:a3:50:4c:f2:4b:20: 3f:55 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 5C:4B:C1:CF:90:4C:B3:43:99:56:3E:AB:06:9F:B8:5F:2A:28:F7:1D X509v3 Authority Key Identifier: keyid:6B:C5:DE:7D:72:55:B7:D5:82:60:C6:5A:12:0B:16:4E:F1:0E:F9:03 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/a8XefXJVt9WCYMZaEgsWTvEO-QM.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/bb/32109e-24c9-4c88-a8e8-fdf6638d2c04/1/a8XefXJVt9WCYMZaEgsWTvEO-QM.mft X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/bb/32109e-24c9-4c88-a8e8-fdf6638d2c04/1/a8XefXJVt9WCYMZaEgsWTvEO-QM.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 79:1b:99:33:cd:3c:e3:8c:34:22:38:ca:16:7e:c6:6b:ba:4c: 21:55:3f:d7:7f:47:45:02:e2:44:8a:c8:4b:7e:db:07:03:01: 62:17:bb:f8:a4:fb:e6:88:bb:ce:42:61:07:4b:9e:39:b5:3b: 42:91:8f:f4:eb:9c:a1:8f:46:48:3b:60:29:82:c8:17:f5:3d: 6b:3d:9b:05:08:c3:fc:f0:39:21:9f:4e:69:4f:13:2d:04:e5: 3c:cf:c7:75:55:5f:eb:3b:c2:b7:3e:d5:2e:60:67:eb:e2:fa: f5:89:ad:b9:b1:86:45:f3:e9:62:a2:d1:6f:22:a2:1c:36:c3: 24:49:4e:ed:ed:f1:ab:66:8d:d1:ee:b2:b9:d1:1e:52:39:6b: 59:6e:30:e9:a2:ba:59:aa:d1:15:1a:2b:fa:48:46:46:cd:56: 8f:ad:8e:8d:42:cd:2c:fa:5b:83:a3:da:80:fe:7f:1a:6f:4a: 53:43:5b:93:59:97:28:b6:35:36:e1:8e:11:ed:bd:0b:78:9c: 9b:35:9e:36:72:15:e6:4a:9e:ec:4d:f6:da:b7:b9:91:c9:ac: 4a:96:11:72:39:8d:32:65:02:4a:1d:98:d3:ec:1f:26:ef:81: 0b:99:c6:19:d4:05:1e:ca:2e:9e:84:fd:ed:5b:47:2c:cd:60: 34:f3:f6:9e -----BEGIN CERTIFICATE----- MIIFFjCCA/6gAwIBAgISAZn768DoBGZxqmzaq1HOFd3SMA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKDZiYzVkZTdkNzI1NWI3ZDU4MjYwYzY1YTEyMGIxNjRlZjEw ZWY5MDMwHhcNMjUxMDE5MTAwMjM1WhcNMjUxMDIwMTAwMjM1WjAzMTEwLwYDVQQD Eyg1YzRiYzFjZjkwNGNiMzQzOTk1NjNlYWIwNjlmYjg1ZjJhMjhmNzFkMIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEA7vSQQdV5qjCRE3P55x0js/zujdLv uucM87hrR4mqNaZnoeSOKUE+7+eQjGGmuIg5/sObTlWilNvNx1Alxlsc6D7WyThG OVx55sdBbHZ1QKjDQcCK4O9jTAWBLV55qUhs1XCzT3JHd9eazPfY2duL/tYPYN1P WwqzY/cd8QQX60E/xwt1upl9mgNP6y6+9zQoydpF3Zno0NZCBmFW1dpk6xCVhf+U 8/cALHY4cHMjnphgjdWmIge7zCbv5HTYvL26mFXzmUDg2Mq2M9E8AZtF6/FycGbJ GGPMh/oj4Kx7k8PLBDUBFDkITdQY7CsuNN+lVENzp7gFThGjUEzySyA/VQIDAQAB o4ICIjCCAh4wHQYDVR0OBBYEFFxLwc+QTLNDmVY+qwafuF8qKPcdMB8GA1UdIwQY MBaAFGvF3n1yVbfVgmDGWhILFk7xDvkDMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvYThYZWZYSlZ0OVdDWU1aYUVnc1dUdkVPLVFNLmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC9iYi8zMjEwOWUtMjRjOS00Yzg4LWE4ZTgt ZmRmNjYzOGQyYzA0LzEvYThYZWZYSlZ0OVdDWU1aYUVnc1dUdkVPLVFNLm1mdDCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC9iYi8zMjEwOWUtMjRjOS00Yzg4LWE4ZTgtZmRmNjYzOGQyYzA0 LzEvYThYZWZYSlZ0OVdDWU1aYUVnc1dUdkVPLVFNLmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAeRuZM808 44w0IjjKFn7Ga7pMIVU/139HRQLiRIrIS37bBwMBYhe7+KT75oi7zkJhB0ueObU7 QpGP9OucoY9GSDtgKYLIF/U9az2bBQjD/PA5IZ9OaU8TLQTlPM/HdVVf6zvCtz7V LmBn6+L69YmtubGGRfPpYqLRbyKiHDbDJElO7e3xq2aN0e6yudEeUjlrWW4w6aK6 WarRFRor+khGRs1Wj62OjULNLPpbg6PagP5/Gm9KU0Nbk1mXKLY1NuGOEe29C3ic mzWeNnIV5kqe7E322re5kcmsSpYRcjmNMmUCSh2Y0+wfJu+BC5nGGdQFHsounoT9 7VtHLM1gNPP2ng== -----END CERTIFICATE-----Generated at Sun Oct 19 15:06:25 2025 by rpki-client