$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/c3/1b4105-3471-4592-bf07-73fd3bc19aa7/1/_zFJJHOnjG_p9Tn5-n0iUlYKK34.mft File: _zFJJHOnjG_p9Tn5-n0iUlYKK34.mft (raw, json) Hash identifier: 64Eo0ZsWg+IP3uZbPNz4Q4cUuNO0YfsMz6wfn4WBx6Y= Subject key identifier: B1:5A:4F:35:9A:46:0A:75:A0:13:68:45:88:4A:6A:89:84:F9:D2:25 Authority key identifier: FF:31:49:24:73:A7:8C:6F:E9:F5:39:F9:FA:7D:22:52:56:0A:2B:7E Certificate issuer: /CN=ff31492473a78c6fe9f539f9fa7d2252560a2b7e Certificate serial: 0199FB7CD892907573E1D604C4C82D1BA8B3 Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/_zFJJHOnjG_p9Tn5-n0iUlYKK34.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/c3/1b4105-3471-4592-bf07-73fd3bc19aa7/1/_zFJJHOnjG_p9Tn5-n0iUlYKK34.mft Manifest number: 16A9 Signing time: Sun 19 Oct 2025 08:01:27 +0000 Manifest this update: Sun 19 Oct 2025 08:01:27 +0000 Manifest next update: Mon 20 Oct 2025 08:01:27 +0000 Files and hashes: 1: F_cRK7_FuJ1SOPF-eStGPWamodQ.roa (hash: bwgPCaYQdCUVOLDgCvOHRKGxaq7IRtIbjKPrwDwOiGI=) 2: Itnfb5cOidqPHmrm9ItGmwZzqpE.roa (hash: iss4kvemyRAUGLNEu7CN/erlN+DUp3hzgmc3aCXZAfU=) 3: JaFKfYKslg0WUVhBG8hHu6LqTvw.roa (hash: 4GgDdTVxQxqewTP0EOz1RIPWIQ2EEWazgc1qxopxzyA=) 4: NiD2SDjoMC5kCqhJ0LqUs7rzMnw.roa (hash: 9+KHXzf6QQ6hX/XBCMhmaRntprEYELpBh7Oa+Qw01T4=) 5: ShXwELNENSFmGBdjnWGg5NqouYI.roa (hash: CvtdGpDGnIEThk2qtR3nRVqJ7XKDlnHvbjdMw3b5GEg=) 6: U6O4fPn6akIpWmgc4yJT0O6kLpo.roa (hash: yofA2VyhfSO3CESlgcLfFamVAKarRdUA7fzOcVSh6T0=) 7: _zFJJHOnjG_p9Tn5-n0iUlYKK34.crl (hash: BdvT6g5zuR8+A/FkM2annkgzToRmMuesg4jVxZ0tZuc=) 8: ccs7nyLFaW5A18K4O1qhpOVnDF0.roa (hash: kVq8Rt+cDTCddUdzX9poi4CfmBkJSUYFh1PJxqkXE8A=) 9: u3VJR1_M7JzYx842qLGTM0en5V0.roa (hash: qbP/xDwKS1NUr1YSZhW1L+ZrVrT39XIk/W4+EAm8kOI=) 10: y4Nw6VYuIuUZOv6I685fKqZhbWQ.roa (hash: JM0RAslsFdrhEKUBmY+ywDM/Jo6q24Igd7pWLFOkC9Q=) 11: zIstcjB0l5dXMsxLJF-PmySyWoY.roa (hash: sZKTonBPo728p5sx2a7KurcsOwIi7QOOMBd8o6TZnS4=) Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/c3/1b4105-3471-4592-bf07-73fd3bc19aa7/1/_zFJJHOnjG_p9Tn5-n0iUlYKK34.crl rsync://rpki.ripe.net/repository/DEFAULT/c3/1b4105-3471-4592-bf07-73fd3bc19aa7/1/_zFJJHOnjG_p9Tn5-n0iUlYKK34.mft rsync://rpki.ripe.net/repository/DEFAULT/_zFJJHOnjG_p9Tn5-n0iUlYKK34.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Mon 20 Oct 2025 08:01:27 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:99:fb:7c:d8:92:90:75:73:e1:d6:04:c4:c8:2d:1b:a8:b3 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=ff31492473a78c6fe9f539f9fa7d2252560a2b7e Validity Not Before: Oct 19 08:01:27 2025 GMT Not After : Oct 20 08:01:27 2025 GMT Subject: CN=b15a4f359a460a75a0136845884a6a8984f9d225 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:aa:69:c3:81:c7:61:c7:07:f8:bd:9f:42:5e:09: ae:38:34:fe:82:1e:c8:29:3d:d0:69:bb:6e:6d:14: 46:f1:8b:03:b3:74:95:15:9e:65:9e:87:2d:60:ad: 92:14:8b:ad:31:93:a3:9e:aa:3f:ba:2c:2f:fb:0e: 4b:35:7d:02:50:cc:b5:85:19:60:3a:2c:ea:d7:88: d7:b4:fa:56:e0:6f:f5:f1:ec:02:31:b1:8b:c9:9f: 01:3e:dd:44:4a:4c:e0:ef:c2:7c:13:29:46:23:0e: d3:e0:d9:fa:58:6b:b4:c1:01:54:b4:82:b7:bc:b4: 10:15:be:ad:67:d3:9f:05:24:25:66:3d:41:ed:37: 3a:a6:60:c6:ee:d2:a0:7e:52:d3:06:71:4a:c6:ff: 83:94:83:89:96:9c:9a:24:4a:5c:d3:81:c9:72:bf: 87:09:85:6d:79:71:60:15:35:48:a1:82:26:97:92: 4e:51:2d:22:f8:18:ba:3a:a3:46:0b:72:80:ca:de: 32:14:e5:ca:55:aa:16:ac:e6:7b:5e:75:9b:8d:60: 35:4b:d2:96:2e:1e:b4:68:57:45:0e:88:d1:28:f5: 99:4c:f5:d3:8f:a8:11:62:d3:33:85:1a:6b:96:de: ae:f1:cd:7a:7b:be:6e:5b:41:f0:6c:b9:ee:09:a6: 68:85 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: B1:5A:4F:35:9A:46:0A:75:A0:13:68:45:88:4A:6A:89:84:F9:D2:25 X509v3 Authority Key Identifier: keyid:FF:31:49:24:73:A7:8C:6F:E9:F5:39:F9:FA:7D:22:52:56:0A:2B:7E X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/_zFJJHOnjG_p9Tn5-n0iUlYKK34.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/c3/1b4105-3471-4592-bf07-73fd3bc19aa7/1/_zFJJHOnjG_p9Tn5-n0iUlYKK34.mft X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/c3/1b4105-3471-4592-bf07-73fd3bc19aa7/1/_zFJJHOnjG_p9Tn5-n0iUlYKK34.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 2b:f8:af:88:95:a5:9a:23:e1:cc:c5:f9:12:a2:9b:44:53:d5: ca:3d:b0:2a:ae:0d:b8:f2:3c:29:35:99:7b:0a:63:48:87:a3: d0:59:3d:00:eb:f8:a4:a9:5b:0d:9f:40:e4:e3:f6:22:62:ea: df:58:90:1f:9d:25:c8:5c:d4:de:9d:e5:a4:e7:f6:27:61:d9: 25:f4:31:3e:54:9f:6a:52:e9:5c:15:97:16:1c:7b:43:61:67: 5a:90:61:8c:d6:26:41:e1:f2:a1:91:5c:a1:fc:6b:d7:35:ab: da:3b:0a:93:93:08:f5:c3:7a:91:22:7b:6a:87:7f:2a:c0:25: 0e:1a:52:f0:38:5e:a3:d0:53:21:ab:19:ae:9e:ef:5d:bc:57: d3:ac:cb:22:3a:e2:1d:fb:62:10:62:0b:90:6c:2d:54:09:66: 97:76:e8:78:0b:82:0e:65:a3:e2:a9:5e:4f:89:08:31:a4:8f: 1d:8b:9c:af:0b:e4:85:c7:97:26:b2:c5:89:88:7f:8a:90:4a: 21:c5:2c:58:0a:42:a3:4c:53:95:32:dd:2e:f4:fb:a5:ca:d7: 27:78:3b:30:36:00:ba:9b:38:92:10:86:8e:62:5c:25:37:26: ce:95:0b:2a:6f:fc:13:e8:63:eb:a9:2e:c0:b8:c9:d4:1c:47: a6:12:32:c0 -----BEGIN CERTIFICATE----- MIIFFjCCA/6gAwIBAgISAZn7fNiSkHVz4dYExMgtG6izMA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKGZmMzE0OTI0NzNhNzhjNmZlOWY1MzlmOWZhN2QyMjUyNTYw YTJiN2UwHhcNMjUxMDE5MDgwMTI3WhcNMjUxMDIwMDgwMTI3WjAzMTEwLwYDVQQD EyhiMTVhNGYzNTlhNDYwYTc1YTAxMzY4NDU4ODRhNmE4OTg0ZjlkMjI1MIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAqmnDgcdhxwf4vZ9CXgmuODT+gh7I KT3QabtubRRG8YsDs3SVFZ5lnoctYK2SFIutMZOjnqo/uiwv+w5LNX0CUMy1hRlg Oizq14jXtPpW4G/18ewCMbGLyZ8BPt1ESkzg78J8EylGIw7T4Nn6WGu0wQFUtIK3 vLQQFb6tZ9OfBSQlZj1B7Tc6pmDG7tKgflLTBnFKxv+DlIOJlpyaJEpc04HJcr+H CYVteXFgFTVIoYIml5JOUS0i+Bi6OqNGC3KAyt4yFOXKVaoWrOZ7XnWbjWA1S9KW Lh60aFdFDojRKPWZTPXTj6gRYtMzhRprlt6u8c16e75uW0HwbLnuCaZohQIDAQAB o4ICIjCCAh4wHQYDVR0OBBYEFLFaTzWaRgp1oBNoRYhKaomE+dIlMB8GA1UdIwQY MBaAFP8xSSRzp4xv6fU5+fp9IlJWCit+MA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvX3pGSkpIT25qR19wOVRuNS1uMGlVbFlLSzM0LmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC9jMy8xYjQxMDUtMzQ3MS00NTkyLWJmMDct NzNmZDNiYzE5YWE3LzEvX3pGSkpIT25qR19wOVRuNS1uMGlVbFlLSzM0Lm1mdDCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC9jMy8xYjQxMDUtMzQ3MS00NTkyLWJmMDctNzNmZDNiYzE5YWE3 LzEvX3pGSkpIT25qR19wOVRuNS1uMGlVbFlLSzM0LmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAK/iviJWl miPhzMX5EqKbRFPVyj2wKq4NuPI8KTWZewpjSIej0Fk9AOv4pKlbDZ9A5OP2ImLq 31iQH50lyFzU3p3lpOf2J2HZJfQxPlSfalLpXBWXFhx7Q2FnWpBhjNYmQeHyoZFc ofxr1zWr2jsKk5MI9cN6kSJ7aod/KsAlDhpS8Dheo9BTIasZrp7vXbxX06zLIjri HftiEGILkGwtVAlml3boeAuCDmWj4qleT4kIMaSPHYucrwvkhceXJrLFiYh/ipBK IcUsWApCo0xTlTLdLvT7pcrXJ3g7MDYAups4khCGjmJcJTcmzpULKm/8E+hj66ku wLjJ1BxHphIywA== -----END CERTIFICATE-----Generated at Sun Oct 19 17:58:48 2025 by rpki-client