$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/bd/c7ee9e-b5bf-4c2d-a983-dee3ed497aee/1/Ben8oKhYT-scEjGQcUIwYbCP5FY.mft File: Ben8oKhYT-scEjGQcUIwYbCP5FY.mft (raw, json) Hash identifier: 3zJXFNMapDD/vo4NQcTvAf6txvACT0bko0obwp8G6wg= Subject key identifier: E4:F9:06:73:41:27:74:31:52:5E:65:BE:93:2C:04:60:22:85:DA:8B Authority key identifier: 05:E9:FC:A0:A8:58:4F:EB:1C:12:31:90:71:42:30:61:B0:8F:E4:56 Certificate issuer: /CN=05e9fca0a8584feb1c12319071423061b08fe456 Certificate serial: 0199FB0F32132351F18F28D6610B4C33EBB5 Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/Ben8oKhYT-scEjGQcUIwYbCP5FY.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/bd/c7ee9e-b5bf-4c2d-a983-dee3ed497aee/1/Ben8oKhYT-scEjGQcUIwYbCP5FY.mft Manifest number: 0EF0 Signing time: Sun 19 Oct 2025 06:01:40 +0000 Manifest this update: Sun 19 Oct 2025 06:01:40 +0000 Manifest next update: Mon 20 Oct 2025 06:01:40 +0000 Files and hashes: 1: 4JQtl6CjZI4Ed81VYmD8y3s93nc.roa (hash: DNWzfbgNl38BTmSJIdFxCJ7U9WCYuq21jLucbQaekUg=) 2: BL3LZfi-f3ywcf3FmAmJwnbzASI.roa (hash: DVAE75CLKTBw2pzOs2zlkLoQMMQUvF717xgboLC73+I=) 3: Ben8oKhYT-scEjGQcUIwYbCP5FY.crl (hash: ZMqVoH1Pfgj+Fs6S7dA7l2xSpfQVAxt3XtTxlZW35Fw=) 4: DeACqwGcvIcEJ9pagEhHd4n2i_M.roa (hash: WPp0dLB9p4cnbOnLtVE+B38AXmBSQMpiDZZIvPoqViw=) 5: FMfF0PRqbPl1Xgf7uetPmo11RwY.roa (hash: Nmk2r9tNYQqNw9x7igBvoQ88flRwtwnRPqDYVBzi6Zk=) 6: Q146qaaxZ1xmkBzI32xjl700K7Q.roa (hash: Dmot/z3pbyFtlPpe5Va8TlDgzImhsPNQJ1rELTx4Aro=) 7: XNBwXrAiwZu96uMUjODQvvz_Bzw.roa (hash: mCW8/M59wIOxOS0wM2q/LR+3KGIdWjCxHtDVDd4aiCU=) 8: Z4WfPAHr0U4HuMsBXDWE11AR6SY.roa (hash: nIFqFX+PoOUUY+ho0HNN5VDHjMoLJi/JVpJHhVS9zMY=) 9: fETfH_XiNbseiVsjZA2HM6Af2jI.roa (hash: uyRqpIalZYJdXa3YW/3/Z8wVH+1oAHTZduFpskFWKhg=) 10: foM10PwLyaHwLhfbaJzkwnbAE_w.roa (hash: DIaKJkxL7f9BTL5/9GbSSi0rXtJN9gz1NV5M8HRodzE=) 11: phO7epvCoYFhkG0dTV5RtGTfFoE.roa (hash: jkhzkXF+DB42uMow0dB8LWjmxEVbOyoIZtbBsaP8XFo=) 12: rS554DqYgNK00lANZV007fZTVkM.roa (hash: 3SSYULxYvCw8XOXXkyZRjzf+FifSR5lE3jD5NyjPQ0I=) 13: uZ82HsSJfJMX-injZJkIBGdxGBY.roa (hash: mT1BefewYqT0QULFBWTWCpATALXi+6J6LGgvQIVpGhI=) 14: wacKSVeFcrTyL4jcOjnOwrcddYQ.roa (hash: n1rU/BStziAQk9f5pDE6L63EitmHb6FHEduDthm4TxU=) 15: ytwdpN2_MmIz-ujAGkeOSyxFnQQ.roa (hash: Q1K4a50MOqKpSRbaxfZO8lYsK/lxhMtlTC8aBU8fdHU=) Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/bd/c7ee9e-b5bf-4c2d-a983-dee3ed497aee/1/Ben8oKhYT-scEjGQcUIwYbCP5FY.crl rsync://rpki.ripe.net/repository/DEFAULT/bd/c7ee9e-b5bf-4c2d-a983-dee3ed497aee/1/Ben8oKhYT-scEjGQcUIwYbCP5FY.mft rsync://rpki.ripe.net/repository/DEFAULT/Ben8oKhYT-scEjGQcUIwYbCP5FY.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Mon 20 Oct 2025 06:00:58 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:99:fb:0f:32:13:23:51:f1:8f:28:d6:61:0b:4c:33:eb:b5 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=05e9fca0a8584feb1c12319071423061b08fe456 Validity Not Before: Oct 19 06:01:40 2025 GMT Not After : Oct 20 06:01:40 2025 GMT Subject: CN=e4f9067341277431525e65be932c04602285da8b Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:c9:1e:6c:26:b8:6b:f9:d4:86:d9:e9:87:19:5c: 96:8d:75:f5:33:4c:db:51:57:f2:05:0a:d4:2e:2a: aa:ba:f4:26:38:b4:4b:72:86:25:ec:dd:06:99:90: 8f:18:e3:b8:98:fb:88:bb:9b:46:e3:6f:45:fb:3c: 82:f7:17:0d:43:61:d8:c2:21:5c:b8:2a:09:30:57: 74:89:26:45:e6:70:63:3a:7a:57:1c:3a:38:b1:c8: 42:90:47:43:af:97:c3:04:93:c7:7a:88:0b:82:28: 4d:7a:8e:b4:4c:ba:cc:7b:f6:0e:ea:12:66:f2:88: a8:d3:50:c5:6e:fe:da:19:ef:ab:ce:50:01:64:bd: 94:1d:7d:d5:ad:ae:20:d9:3d:c9:cc:55:42:34:8b: 38:0b:67:8c:8c:64:30:b1:77:45:a3:ff:9c:c8:64: a8:a7:35:23:6a:95:17:9e:30:cc:68:74:58:29:49: 54:95:38:a2:eb:fe:64:96:65:e9:9d:6d:ca:b3:51: 4f:58:82:e8:81:bc:21:e5:8e:dd:24:ee:c4:89:ea: 83:99:c0:00:e1:d6:8a:ec:75:1d:4e:05:69:1b:07: 88:82:a2:b1:1e:53:2b:4c:ab:19:80:7d:38:d2:b9: e3:90:ea:a1:47:91:04:cd:82:69:77:1e:63:d7:56: 14:d3 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: E4:F9:06:73:41:27:74:31:52:5E:65:BE:93:2C:04:60:22:85:DA:8B X509v3 Authority Key Identifier: keyid:05:E9:FC:A0:A8:58:4F:EB:1C:12:31:90:71:42:30:61:B0:8F:E4:56 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/Ben8oKhYT-scEjGQcUIwYbCP5FY.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/bd/c7ee9e-b5bf-4c2d-a983-dee3ed497aee/1/Ben8oKhYT-scEjGQcUIwYbCP5FY.mft X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/bd/c7ee9e-b5bf-4c2d-a983-dee3ed497aee/1/Ben8oKhYT-scEjGQcUIwYbCP5FY.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption dd:3c:64:06:90:64:d0:17:24:02:ec:5f:0c:5a:c9:0a:b9:48: 2b:04:36:12:76:7e:86:36:9f:ce:6d:89:d9:ec:6c:64:5b:28: 42:1e:4a:13:fa:a2:ee:f5:78:c8:45:29:26:7e:b0:d2:f8:f2: 6e:c1:22:e3:14:1c:4e:0d:15:e0:c1:95:df:39:f9:2d:56:ee: 78:70:8e:eb:2b:63:24:76:ef:fc:ce:38:70:21:91:10:69:87: a6:f8:1b:1a:92:3b:98:f8:c0:fb:7d:ef:09:72:5d:34:de:86: cf:d5:60:64:51:e1:5b:29:d3:cc:ef:c5:11:b8:96:fe:5f:9c: d1:50:2c:9c:e8:e4:a9:c3:50:a7:cb:e7:27:38:80:5c:7c:c1: bf:74:c6:fb:5d:47:c7:93:17:67:14:c6:28:bd:4b:dd:b2:47: ce:ff:0e:a1:41:90:b9:73:a9:5c:3b:91:08:cd:a6:aa:a9:58: ac:a6:e1:bc:9e:ed:07:d6:2c:29:d0:de:50:14:3c:4d:2e:c5: 2d:70:0d:85:ae:b1:1a:63:f3:a7:20:51:aa:34:b7:b8:f9:09: fa:60:23:3e:37:d0:db:8c:02:7b:20:10:48:6e:f9:97:9f:6c: 18:6e:cf:41:fd:c2:02:b6:c4:09:9c:fc:69:5a:4e:97:29:1b: 43:95:04:7d -----BEGIN CERTIFICATE----- MIIFFjCCA/6gAwIBAgISAZn7DzITI1HxjyjWYQtMM+u1MA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKDA1ZTlmY2EwYTg1ODRmZWIxYzEyMzE5MDcxNDIzMDYxYjA4 ZmU0NTYwHhcNMjUxMDE5MDYwMTQwWhcNMjUxMDIwMDYwMTQwWjAzMTEwLwYDVQQD EyhlNGY5MDY3MzQxMjc3NDMxNTI1ZTY1YmU5MzJjMDQ2MDIyODVkYThiMIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAyR5sJrhr+dSG2emHGVyWjXX1M0zb UVfyBQrULiqquvQmOLRLcoYl7N0GmZCPGOO4mPuIu5tG429F+zyC9xcNQ2HYwiFc uCoJMFd0iSZF5nBjOnpXHDo4schCkEdDr5fDBJPHeogLgihNeo60TLrMe/YO6hJm 8oio01DFbv7aGe+rzlABZL2UHX3Vra4g2T3JzFVCNIs4C2eMjGQwsXdFo/+cyGSo pzUjapUXnjDMaHRYKUlUlTii6/5klmXpnW3Ks1FPWILogbwh5Y7dJO7EieqDmcAA 4daK7HUdTgVpGweIgqKxHlMrTKsZgH040rnjkOqhR5EEzYJpdx5j11YU0wIDAQAB o4ICIjCCAh4wHQYDVR0OBBYEFOT5BnNBJ3QxUl5lvpMsBGAihdqLMB8GA1UdIwQY MBaAFAXp/KCoWE/rHBIxkHFCMGGwj+RWMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvQmVuOG9LaFlULXNjRWpHUWNVSXdZYkNQNUZZLmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC9iZC9jN2VlOWUtYjViZi00YzJkLWE5ODMt ZGVlM2VkNDk3YWVlLzEvQmVuOG9LaFlULXNjRWpHUWNVSXdZYkNQNUZZLm1mdDCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC9iZC9jN2VlOWUtYjViZi00YzJkLWE5ODMtZGVlM2VkNDk3YWVl LzEvQmVuOG9LaFlULXNjRWpHUWNVSXdZYkNQNUZZLmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEA3TxkBpBk 0BckAuxfDFrJCrlIKwQ2EnZ+hjafzm2J2exsZFsoQh5KE/qi7vV4yEUpJn6w0vjy bsEi4xQcTg0V4MGV3zn5LVbueHCO6ytjJHbv/M44cCGREGmHpvgbGpI7mPjA+33v CXJdNN6Gz9VgZFHhWynTzO/FEbiW/l+c0VAsnOjkqcNQp8vnJziAXHzBv3TG+11H x5MXZxTGKL1L3bJHzv8OoUGQuXOpXDuRCM2mqqlYrKbhvJ7tB9YsKdDeUBQ8TS7F LXANha6xGmPzpyBRqjS3uPkJ+mAjPjfQ24wCeyAQSG75l59sGG7PQf3CArbECZz8 aVpOlykbQ5UEfQ== -----END CERTIFICATE-----Generated at Sun Oct 19 15:08:14 2025 by rpki-client