$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/bd/f053cd-1d79-43a1-9aab-0e72416b4dc7/1/o4nnA1sI4YGjQfN-2nND0j8cr6Q.mft File: o4nnA1sI4YGjQfN-2nND0j8cr6Q.mft (raw, json) Hash identifier: HFeOaRuvPXcGNfFuUv6v+b5PZqPzKRUNL3VEap7MpBY= Subject key identifier: B9:46:E4:83:95:A1:34:26:3A:75:5C:AC:0E:14:8E:56:3D:66:6E:EF Authority key identifier: A3:89:E7:03:5B:08:E1:81:A3:41:F3:7E:DA:73:43:D2:3F:1C:AF:A4 Certificate issuer: /CN=a389e7035b08e181a341f37eda7343d23f1cafa4 Certificate serial: 0199FB7CEE97CDBD595D891DB9535E178DFD Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/o4nnA1sI4YGjQfN-2nND0j8cr6Q.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/bd/f053cd-1d79-43a1-9aab-0e72416b4dc7/1/o4nnA1sI4YGjQfN-2nND0j8cr6Q.mft Manifest number: 1612 Signing time: Sun 19 Oct 2025 08:01:32 +0000 Manifest this update: Sun 19 Oct 2025 08:01:32 +0000 Manifest next update: Mon 20 Oct 2025 08:01:32 +0000 Files and hashes: 1: A-6dGixYiVjP5SArd3OOXzF_y94.roa (hash: dHKBVyiR8mv13Z7wTMxDvJhUaTAdj4JJSYSEmomSgRI=) 2: EdyN193XAqCuwUeh3uoqwgMp6YM.roa (hash: aMp83WD7+8DMvO0EZKm2i6yVdt39wHGmWPL1VSmKtjM=) 3: KWzqOLtIWSWtWkByhLp85FW_7rM.roa (hash: +yMm4K7E6517qc0jJ3daW8uChLhsqKi3MVBCXwIyDXI=) 4: ZMT2qJeQlu-C5i0G01EBCNd-g6M.roa (hash: Jul8wggfGDzUNFRFlHhNzs2me0GUF4GTUbIsvxzWDwQ=) 5: adPv80nsAvDoMdbWFhmbQrTYx_c.roa (hash: 4ui5pcCs9o10PJAGBjhy0LQC0IJvn6eEg11QBgbYrhM=) 6: ayrwJOZcqXwPotZkkftDNJvjVWI.roa (hash: u8hehMe3mSy7WRp8JZKZ+vW+iYZYC7RSsKKYne4ZeUk=) 7: fnuqhATdgk7065LZ-MFpw_mk_Sk.roa (hash: MF0/pFOYDoQu2nRxFXy3gK33SujqFiXhgPkh2E7fsqk=) 8: hFLfi7y6acWn-HH4-tzBOKfKzRY.roa (hash: xYND5KQ7rz8GZqxEFiwwG/BrGvhFrStCdg/rXumDivA=) 9: mPlgxbWD56Le2xy3b_FhRsqSxsc.roa (hash: AfWfwIbPTYGoiVxVmMF6d4mso8lDoU2eXTIxJq7pZSw=) 10: o4nnA1sI4YGjQfN-2nND0j8cr6Q.crl (hash: cBvYOILHSdXFFr2AKH53ZeXMNayn8m6xLMMUlWrIaeU=) Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/bd/f053cd-1d79-43a1-9aab-0e72416b4dc7/1/o4nnA1sI4YGjQfN-2nND0j8cr6Q.crl rsync://rpki.ripe.net/repository/DEFAULT/bd/f053cd-1d79-43a1-9aab-0e72416b4dc7/1/o4nnA1sI4YGjQfN-2nND0j8cr6Q.mft rsync://rpki.ripe.net/repository/DEFAULT/o4nnA1sI4YGjQfN-2nND0j8cr6Q.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Mon 20 Oct 2025 06:00:58 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:99:fb:7c:ee:97:cd:bd:59:5d:89:1d:b9:53:5e:17:8d:fd Signature Algorithm: sha256WithRSAEncryption Issuer: CN=a389e7035b08e181a341f37eda7343d23f1cafa4 Validity Not Before: Oct 19 08:01:32 2025 GMT Not After : Oct 20 08:01:32 2025 GMT Subject: CN=b946e48395a134263a755cac0e148e563d666eef Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:a4:75:79:91:fd:7e:e1:19:e3:14:55:0c:52:71: f0:d3:b3:b4:d7:4a:18:54:a1:8d:c4:b3:34:f2:ef: d4:2b:cb:56:01:02:ed:52:15:94:89:72:f6:18:11: 12:cf:60:a0:87:93:83:a8:30:88:71:79:7b:25:65: bf:9d:f6:34:cb:e0:95:11:6f:98:b1:fa:6e:50:e7: 82:40:0f:87:c7:c9:70:d7:ba:e7:72:c7:52:4d:5e: ff:9f:1b:2e:c1:bf:d8:63:70:58:a1:b2:6f:0f:dd: e7:0b:a4:26:ba:35:f6:10:b9:11:0c:44:b8:d3:ea: 89:b5:32:1c:42:f5:d6:80:14:7b:8d:1a:4a:a9:2d: ba:71:87:19:02:73:0b:b2:7f:14:a0:12:32:8d:b0: ac:20:7c:db:6e:28:92:40:98:bd:08:f5:33:1d:45: 71:23:29:06:fd:d0:ab:fa:95:0c:66:64:41:e8:ec: 5d:6a:c4:8f:f8:71:dd:35:db:51:95:34:86:e1:c7: 91:f6:71:10:c7:ee:bf:08:b0:00:ca:47:18:3a:c5: 53:98:8e:d7:bd:d5:c0:38:63:6d:e3:55:92:69:cb: 43:51:81:d5:fc:85:9b:61:9c:8e:3d:91:36:e1:e2: 4a:d4:c6:ca:cd:01:b3:20:eb:d3:7b:25:58:55:7a: 60:ab Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: B9:46:E4:83:95:A1:34:26:3A:75:5C:AC:0E:14:8E:56:3D:66:6E:EF X509v3 Authority Key Identifier: keyid:A3:89:E7:03:5B:08:E1:81:A3:41:F3:7E:DA:73:43:D2:3F:1C:AF:A4 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/o4nnA1sI4YGjQfN-2nND0j8cr6Q.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/bd/f053cd-1d79-43a1-9aab-0e72416b4dc7/1/o4nnA1sI4YGjQfN-2nND0j8cr6Q.mft X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/bd/f053cd-1d79-43a1-9aab-0e72416b4dc7/1/o4nnA1sI4YGjQfN-2nND0j8cr6Q.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 89:b2:9b:a3:d4:0d:5d:63:e6:a1:2f:59:42:71:be:3d:c6:39: 65:ef:69:cb:e7:9c:7e:05:c7:5e:d4:dd:6d:cf:fd:20:7f:9d: 03:6a:f8:57:cd:4f:f5:ae:79:f5:3a:c5:39:3e:b0:de:68:a0: 37:41:44:54:7d:0d:11:cb:20:9e:93:c5:4b:f6:97:be:75:05: 2d:eb:de:39:1c:d7:08:68:c7:e2:3d:12:45:db:7c:39:b3:b3: fc:09:9c:0a:60:73:3d:04:82:9f:24:35:c0:62:fb:1b:15:3c: 51:83:77:10:7b:86:4b:d5:0a:f4:7b:bd:f3:78:45:3b:cb:1d: 52:51:2a:8b:b6:f2:af:c5:28:7a:85:39:ca:05:32:48:ca:ca: 65:5b:6b:40:d8:c9:98:9f:e6:84:d6:2a:ed:89:b4:69:b4:70: fc:e0:6a:06:85:9b:f6:00:db:bf:cb:d4:a6:4d:b2:d2:0b:22: 4b:42:ef:e0:34:44:7e:25:44:fd:3f:50:74:c8:b4:cf:35:e9: b8:55:b9:8c:ba:6f:62:22:4a:0c:48:d8:ab:38:78:19:4f:70: b2:d1:82:44:f4:0a:b5:07:da:fd:7b:68:8a:4f:ad:42:b3:ab: 52:17:2f:d4:92:db:e5:f2:40:de:97:aa:6d:4c:9b:bc:06:7b: 38:9c:21:e8 -----BEGIN CERTIFICATE----- MIIFFjCCA/6gAwIBAgISAZn7fO6Xzb1ZXYkduVNeF439MA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKGEzODllNzAzNWIwOGUxODFhMzQxZjM3ZWRhNzM0M2QyM2Yx Y2FmYTQwHhcNMjUxMDE5MDgwMTMyWhcNMjUxMDIwMDgwMTMyWjAzMTEwLwYDVQQD EyhiOTQ2ZTQ4Mzk1YTEzNDI2M2E3NTVjYWMwZTE0OGU1NjNkNjY2ZWVmMIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEApHV5kf1+4RnjFFUMUnHw07O010oY VKGNxLM08u/UK8tWAQLtUhWUiXL2GBESz2Cgh5ODqDCIcXl7JWW/nfY0y+CVEW+Y sfpuUOeCQA+Hx8lw17rncsdSTV7/nxsuwb/YY3BYobJvD93nC6QmujX2ELkRDES4 0+qJtTIcQvXWgBR7jRpKqS26cYcZAnMLsn8UoBIyjbCsIHzbbiiSQJi9CPUzHUVx IykG/dCr+pUMZmRB6OxdasSP+HHdNdtRlTSG4ceR9nEQx+6/CLAAykcYOsVTmI7X vdXAOGNt41WSactDUYHV/IWbYZyOPZE24eJK1MbKzQGzIOvTeyVYVXpgqwIDAQAB o4ICIjCCAh4wHQYDVR0OBBYEFLlG5IOVoTQmOnVcrA4UjlY9Zm7vMB8GA1UdIwQY MBaAFKOJ5wNbCOGBo0HzftpzQ9I/HK+kMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvbzRubkExc0k0WUdqUWZOLTJuTkQwajhjcjZRLmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC9iZC9mMDUzY2QtMWQ3OS00M2ExLTlhYWIt MGU3MjQxNmI0ZGM3LzEvbzRubkExc0k0WUdqUWZOLTJuTkQwajhjcjZRLm1mdDCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC9iZC9mMDUzY2QtMWQ3OS00M2ExLTlhYWItMGU3MjQxNmI0ZGM3 LzEvbzRubkExc0k0WUdqUWZOLTJuTkQwajhjcjZRLmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAibKbo9QN XWPmoS9ZQnG+PcY5Ze9py+ecfgXHXtTdbc/9IH+dA2r4V81P9a559TrFOT6w3mig N0FEVH0NEcsgnpPFS/aXvnUFLeveORzXCGjH4j0SRdt8ObOz/AmcCmBzPQSCnyQ1 wGL7GxU8UYN3EHuGS9UK9Hu983hFO8sdUlEqi7byr8UoeoU5ygUySMrKZVtrQNjJ mJ/mhNYq7Ym0abRw/OBqBoWb9gDbv8vUpk2y0gsiS0Lv4DREfiVE/T9QdMi0zzXp uFW5jLpvYiJKDEjYqzh4GU9wstGCRPQKtQfa/Xtoik+tQrOrUhcv1JLb5fJA3peq bUybvAZ7OJwh6A== -----END CERTIFICATE-----Generated at Sun Oct 19 15:42:23 2025 by rpki-client