$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/c0/e45e30-e7d8-4fb8-90ad-f71038e967a4/1/tIUv-6fVfFqK-7bqW-r33-wMFFo.mft File: tIUv-6fVfFqK-7bqW-r33-wMFFo.mft (raw, json) Hash identifier: gUpjYZiK/qKrahVFLkHk1xy4ZRpOtkQn3RTm1oGHCBw= Subject key identifier: 31:92:35:FB:6E:46:98:7A:1A:96:71:F1:E8:63:DB:D1:9A:5F:F9:D4 Authority key identifier: B4:85:2F:FB:A7:D5:7C:5A:8A:FB:B6:EA:5B:EA:F7:DF:EC:0C:14:5A Certificate issuer: /CN=b4852ffba7d57c5a8afbb6ea5beaf7dfec0c145a Certificate serial: 0199FC589FB99EBC6BD49A21866F4745F2E3 Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/tIUv-6fVfFqK-7bqW-r33-wMFFo.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/c0/e45e30-e7d8-4fb8-90ad-f71038e967a4/1/tIUv-6fVfFqK-7bqW-r33-wMFFo.mft Manifest number: 16F7 Signing time: Sun 19 Oct 2025 12:01:30 +0000 Manifest this update: Sun 19 Oct 2025 12:01:30 +0000 Manifest next update: Mon 20 Oct 2025 12:01:30 +0000 Files and hashes: 1: 2zBG6wv0zKBe2XlbGkfLL9rOdtY.roa (hash: lxNpEB+wfb/SASGgTTjYX3zTxUdrCP8FyxAXU//G0JE=) 2: 60ZaPiBpi8SxBTjOjQUT9FiEU2Q.roa (hash: +EenJI8/Zu0itO/r18F94M+NWWU8CW03dUIDwunEbUc=) 3: EU2O-Gd0BV713EAdFoGJuGMnLgQ.roa (hash: DIGhFlsty46rXCRlbLUopCZPIy0Ap7bO0kln0jsUUZQ=) 4: O3sXFCWDkxRLQArJVgciZYJOH2k.roa (hash: wEiLpu8rEygqvBvHCRoBqicZ9xgf2J+eV7J8nj+KxjA=) 5: ZjHl0XpQM8CCJz6Om67G0wOmvS4.roa (hash: xCetPcOL8RFsZEGexQBgMW05eQfuM1TVnSNp6oyXZtQ=) 6: d8mFLNhZassFfsIT0V6Pg-FoNgA.roa (hash: G1lxk+WJgE19vtZBUhgAhwauP4CikNyKzPmcQ0hwXlc=) 7: dEvm44MVXindQlOEmPEQUDFIhOs.roa (hash: dVgBBC/Rmim2eB3c1PNCO34aKUguzhPQDH4vqUewLA0=) 8: l1wLvb6NKoGEYg4t8n0m6fJ0nkM.roa (hash: ql0IO639qJqy1cMjdHcoEEjUejhdun3XvEvt+WT91vI=) 9: nf_J-Be6PvK26ukKjJl6IQe1MJY.roa (hash: 0NfHfYZttT9eDOJu1RyDhX+/FDw371Nzr/BlGE9d+BA=) 10: tIUv-6fVfFqK-7bqW-r33-wMFFo.crl (hash: UW9gZrGx0psvN8NaN77bmKPAiLsXwjT6004SICCJSwU=) 11: w7JADU6oCGh6YbUdtkn1AWlz8C8.roa (hash: BeTxZ9eibtqN9brjaSZeCdnih1w74ddiTrBxnDrR2hk=) Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/c0/e45e30-e7d8-4fb8-90ad-f71038e967a4/1/tIUv-6fVfFqK-7bqW-r33-wMFFo.crl rsync://rpki.ripe.net/repository/DEFAULT/c0/e45e30-e7d8-4fb8-90ad-f71038e967a4/1/tIUv-6fVfFqK-7bqW-r33-wMFFo.mft rsync://rpki.ripe.net/repository/DEFAULT/tIUv-6fVfFqK-7bqW-r33-wMFFo.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Mon 20 Oct 2025 11:18:59 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:99:fc:58:9f:b9:9e:bc:6b:d4:9a:21:86:6f:47:45:f2:e3 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=b4852ffba7d57c5a8afbb6ea5beaf7dfec0c145a Validity Not Before: Oct 19 12:01:30 2025 GMT Not After : Oct 20 12:01:30 2025 GMT Subject: CN=319235fb6e46987a1a9671f1e863dbd19a5ff9d4 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:96:ba:ce:9b:f7:d0:ea:3a:36:8f:99:7f:94:fa: 3a:95:33:09:28:39:db:f3:9e:fa:d0:b5:30:7a:28: 4a:19:0a:3d:f3:5f:0c:1d:ef:4b:4d:a7:e3:55:c6: 61:17:26:56:ee:fa:6b:7d:a1:f4:76:70:26:44:43: 20:62:c4:7f:dd:39:96:06:b7:ff:d9:a7:2e:b0:7a: 36:04:f6:a2:37:48:8e:10:b7:74:81:97:0a:6c:e5: d4:62:99:b5:7f:a0:77:5d:23:4c:44:23:0f:18:d5: bf:75:34:8f:22:4a:e5:14:e4:7c:f6:fa:c4:b0:cf: 73:c1:60:7e:96:43:b3:24:2c:fa:94:58:ec:b6:99: 82:81:7b:40:15:0f:13:55:cc:25:cb:1f:31:71:ad: 22:7b:0d:2a:36:f1:ab:6b:e4:bc:85:ac:92:c2:df: 5f:36:4c:23:ef:4e:e7:f1:fc:c7:21:49:1f:14:4b: 3c:74:6a:17:85:5b:24:18:1b:c3:53:2d:f6:62:69: fb:92:0c:e6:4e:b7:7f:8e:18:d4:c0:b9:17:72:54: f5:3a:ce:8a:80:bf:6c:62:9c:87:22:6f:85:53:d6: cb:ec:d0:64:fb:c1:e6:e0:75:a5:2d:fe:50:bb:eb: 50:82:12:dc:9b:c7:e5:07:68:71:e7:36:3d:c5:d9: c2:4f Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 31:92:35:FB:6E:46:98:7A:1A:96:71:F1:E8:63:DB:D1:9A:5F:F9:D4 X509v3 Authority Key Identifier: keyid:B4:85:2F:FB:A7:D5:7C:5A:8A:FB:B6:EA:5B:EA:F7:DF:EC:0C:14:5A X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/tIUv-6fVfFqK-7bqW-r33-wMFFo.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/c0/e45e30-e7d8-4fb8-90ad-f71038e967a4/1/tIUv-6fVfFqK-7bqW-r33-wMFFo.mft X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/c0/e45e30-e7d8-4fb8-90ad-f71038e967a4/1/tIUv-6fVfFqK-7bqW-r33-wMFFo.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 7c:cd:92:de:bb:f4:b6:49:83:df:15:65:e9:c7:53:48:df:4e: aa:ae:12:e4:51:40:7e:c7:98:c2:e3:42:d3:36:a9:f4:57:48: 80:28:05:e1:21:a8:16:5a:12:c9:69:ca:46:c0:63:8d:f9:2f: 3d:c8:b4:06:5f:ce:66:56:14:32:aa:70:3e:d9:ca:9c:21:f9: 9a:55:74:5b:3f:19:c7:60:a9:c5:88:67:6e:a0:3a:84:9c:ed: 6d:d1:02:8d:d6:87:e5:35:55:cd:09:0b:f1:28:1b:df:d1:8b: c5:a7:9d:fe:8e:33:11:b0:ed:74:d0:c9:06:00:55:9d:c5:bc: 54:56:07:a8:58:2b:be:40:33:6d:85:9a:2b:15:49:67:eb:65: 3a:92:10:a5:fa:33:93:d4:a6:8d:9f:0e:33:1a:bf:e6:da:e5: 2b:a8:a8:a6:9a:77:bf:de:d3:b5:a6:24:96:01:0e:ed:3d:fa: 6c:44:b1:b1:01:a0:14:8a:31:a6:a9:64:eb:e4:85:32:ff:92: 7e:b4:f2:95:56:f7:cd:53:3a:d5:00:14:ee:fa:89:da:e6:74: a0:71:81:71:87:c6:1b:4a:e5:99:9c:63:e8:4a:76:cf:67:34: 5a:9c:b8:e7:73:aa:c8:cd:c9:b4:e9:39:07:02:37:12:f7:de: c4:01:79:77 -----BEGIN CERTIFICATE----- MIIFFjCCA/6gAwIBAgISAZn8WJ+5nrxr1Johhm9HRfLjMA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKGI0ODUyZmZiYTdkNTdjNWE4YWZiYjZlYTViZWFmN2RmZWMw YzE0NWEwHhcNMjUxMDE5MTIwMTMwWhcNMjUxMDIwMTIwMTMwWjAzMTEwLwYDVQQD EygzMTkyMzVmYjZlNDY5ODdhMWE5NjcxZjFlODYzZGJkMTlhNWZmOWQ0MIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAlrrOm/fQ6jo2j5l/lPo6lTMJKDnb 85760LUweihKGQo9818MHe9LTafjVcZhFyZW7vprfaH0dnAmREMgYsR/3TmWBrf/ 2acusHo2BPaiN0iOELd0gZcKbOXUYpm1f6B3XSNMRCMPGNW/dTSPIkrlFOR89vrE sM9zwWB+lkOzJCz6lFjstpmCgXtAFQ8TVcwlyx8xca0iew0qNvGra+S8haySwt9f Nkwj707n8fzHIUkfFEs8dGoXhVskGBvDUy32Ymn7kgzmTrd/jhjUwLkXclT1Os6K gL9sYpyHIm+FU9bL7NBk+8Hm4HWlLf5Qu+tQghLcm8flB2hx5zY9xdnCTwIDAQAB o4ICIjCCAh4wHQYDVR0OBBYEFDGSNftuRph6GpZx8ehj29GaX/nUMB8GA1UdIwQY MBaAFLSFL/un1Xxaivu26lvq99/sDBRaMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvdElVdi02ZlZmRnFLLTdicVctcjMzLXdNRkZvLmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC9jMC9lNDVlMzAtZTdkOC00ZmI4LTkwYWQt ZjcxMDM4ZTk2N2E0LzEvdElVdi02ZlZmRnFLLTdicVctcjMzLXdNRkZvLm1mdDCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC9jMC9lNDVlMzAtZTdkOC00ZmI4LTkwYWQtZjcxMDM4ZTk2N2E0 LzEvdElVdi02ZlZmRnFLLTdicVctcjMzLXdNRkZvLmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAfM2S3rv0 tkmD3xVl6cdTSN9Oqq4S5FFAfseYwuNC0zap9FdIgCgF4SGoFloSyWnKRsBjjfkv Pci0Bl/OZlYUMqpwPtnKnCH5mlV0Wz8Zx2CpxYhnbqA6hJztbdECjdaH5TVVzQkL 8Sgb39GLxaed/o4zEbDtdNDJBgBVncW8VFYHqFgrvkAzbYWaKxVJZ+tlOpIQpfoz k9SmjZ8OMxq/5trlK6ioppp3v97TtaYklgEO7T36bESxsQGgFIoxpqlk6+SFMv+S frTylVb3zVM61QAU7vqJ2uZ0oHGBcYfGG0rlmZxj6Ep2z2c0Wpy453OqyM3JtOk5 BwI3EvfexAF5dw== -----END CERTIFICATE-----Generated at Sun Oct 19 17:54:34 2025 by rpki-client