$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/c7/29e166-98d2-49f2-8497-0503749adea0/1/RotZLzEQvGw1JJqCcaDawamssM4.mft File: RotZLzEQvGw1JJqCcaDawamssM4.mft (raw, json) Hash identifier: nLiEf5ouMTTrVsrU1H3pChrI3cAxvrfvzNiSnLUIMlY= Subject key identifier: 6E:04:AD:1E:D1:43:BF:D2:FD:32:DC:0E:0E:D9:A2:E4:74:EE:E7:85 Authority key identifier: 46:8B:59:2F:31:10:BC:6C:35:24:9A:82:71:A0:DA:C1:A9:AC:B0:CE Certificate issuer: /CN=468b592f3110bc6c35249a8271a0dac1a9acb0ce Certificate serial: 0199FD344684C55299EEE577B8C756F69BDE Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/RotZLzEQvGw1JJqCcaDawamssM4.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/c7/29e166-98d2-49f2-8497-0503749adea0/1/RotZLzEQvGw1JJqCcaDawamssM4.mft Manifest number: 06F2 Signing time: Sun 19 Oct 2025 16:01:25 +0000 Manifest this update: Sun 19 Oct 2025 16:01:25 +0000 Manifest next update: Mon 20 Oct 2025 16:01:25 +0000 Files and hashes: 1: 4PdFFqbPgnyAF8OAZU59EP79EQE.roa (hash: 0N0pRYIfSwp4rQqEao9ImOBW5Z4au+nqt0SGDhOprnI=) 2: 8u1Ww9yNVHCXoKy959EsUaU71zs.roa (hash: MCjwWNvinwMVi61YdY3QarB5BMMcy4gUuYfqYD2T3PI=) 3: MSnKv-V5f4ZhMSBkUowC4eAKwnc.roa (hash: GNpg734fprSqUaaC2JbrcVA6y9oknxkgNnhf9ZX5sJE=) 4: MmkRluHTTNv9acWxYHJ3_GpMc5Q.roa (hash: V0Un6MJpun4HqmbH7gvdiyIo+DrhsdEBvML0fOcMAjk=) 5: RotZLzEQvGw1JJqCcaDawamssM4.crl (hash: 4MevnJrN7vrRVCpHJ41y0tfbpO0oir5VJTVgg20PkTY=) 6: _vYyrixRE-yXYNd95EagmmedMZs.roa (hash: Nq9E9fzlDdc1TerNy7pW2Y+cp+tsEL9ANsKsoDQ0Pwo=) 7: bvgsPr3D5PPxL6J89BfI0hjp6nU.roa (hash: gQ8pHX8IE1KeaNe50ukz0WLLfO6NzXHlCO7loLPh0Ow=) 8: e6BOh4A7Z0EqXS_Z7v985a00_NI.roa (hash: EqH9IVqgjmT9i4a41FluNoDodNsuWZemaPP3A4ZtRNU=) 9: elD2CPARB_SCiElYBqX86L528iA.roa (hash: 4GpojDoTFDR9/As1unQ2wQcCWk8x0pykSLzc87gKTZw=) 10: i1oSM0zm6FdsD8GW2rr18ZJYU9c.roa (hash: vhtU0Gjcgqwk2dDqzgcdqq71xJAqWywoPwJaRLlLExA=) 11: moar5P9-vHm1h7dW1fwgc72NFhw.roa (hash: JbVrT9GvQCxgYaVUxgeC2lZytQA7NzFvIW4W5mDjY3A=) 12: wpO2gWHd7fIiJY2UmwBghuKU8Pk.roa (hash: eNcYuQe4vVrI0lLxGnwWNPY5OwCaWdtNSK5bPAl0Ug8=) 13: yFyItdIHta0s-3JsQE1g1bZaQmc.roa (hash: 9FPQKZ4G6ZsztllhPuKJ42HA3kXP59Z/IFFv8SDa1x0=) Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/c7/29e166-98d2-49f2-8497-0503749adea0/1/RotZLzEQvGw1JJqCcaDawamssM4.crl rsync://rpki.ripe.net/repository/DEFAULT/c7/29e166-98d2-49f2-8497-0503749adea0/1/RotZLzEQvGw1JJqCcaDawamssM4.mft rsync://rpki.ripe.net/repository/DEFAULT/RotZLzEQvGw1JJqCcaDawamssM4.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Mon 20 Oct 2025 11:18:59 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:99:fd:34:46:84:c5:52:99:ee:e5:77:b8:c7:56:f6:9b:de Signature Algorithm: sha256WithRSAEncryption Issuer: CN=468b592f3110bc6c35249a8271a0dac1a9acb0ce Validity Not Before: Oct 19 16:01:25 2025 GMT Not After : Oct 20 16:01:25 2025 GMT Subject: CN=6e04ad1ed143bfd2fd32dc0e0ed9a2e474eee785 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:b4:dc:3b:81:98:62:0a:e2:50:c1:f7:4b:ab:f8: 40:02:28:4b:c8:04:5b:02:77:05:03:d1:bd:d5:4a: 06:b0:aa:83:dc:57:b5:4d:61:1d:c5:67:be:87:4d: 50:ec:b3:26:88:32:83:f3:bb:28:06:c0:ee:65:64: 60:bd:fc:e8:4f:9e:98:2e:be:fc:12:13:a7:d4:9e: 3a:cb:33:09:68:be:0d:c8:64:07:cf:07:97:9c:b1: a6:2c:42:57:27:ac:98:d4:02:89:22:a8:96:52:26: 97:2a:62:ad:0d:ac:98:50:2c:7d:2c:b8:8e:6b:91: fb:91:b2:0e:97:95:5c:0c:59:95:18:80:8f:5f:74: 80:09:95:d4:1c:a6:57:ee:42:62:84:75:c0:b1:a3: 15:cb:31:05:fc:ee:d1:ce:2e:af:ef:85:0f:77:7a: 3d:99:28:ac:f3:b2:6b:04:06:c9:15:fa:e5:86:9a: 23:1f:c5:8a:8e:6d:82:92:5a:a4:52:de:35:89:30: 80:9a:0a:cb:10:fa:f2:2b:fc:fc:63:a2:f1:6a:f8: 9d:69:5b:c5:b7:6b:b9:74:e8:d7:17:f2:7f:82:17: 98:71:76:26:98:ac:01:c9:a7:78:f3:da:f3:69:83: 45:cf:8d:71:de:2a:0d:8c:b8:f8:34:46:99:7c:e2: cf:b9 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 6E:04:AD:1E:D1:43:BF:D2:FD:32:DC:0E:0E:D9:A2:E4:74:EE:E7:85 X509v3 Authority Key Identifier: keyid:46:8B:59:2F:31:10:BC:6C:35:24:9A:82:71:A0:DA:C1:A9:AC:B0:CE X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/RotZLzEQvGw1JJqCcaDawamssM4.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/c7/29e166-98d2-49f2-8497-0503749adea0/1/RotZLzEQvGw1JJqCcaDawamssM4.mft X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/c7/29e166-98d2-49f2-8497-0503749adea0/1/RotZLzEQvGw1JJqCcaDawamssM4.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 13:83:0d:58:f9:c4:fb:0a:77:2d:97:70:a2:ca:28:3c:cf:c8: e3:2f:2a:8b:44:d6:fe:4d:1f:c4:c9:a5:f6:ce:02:de:9f:1b: f1:32:16:05:9a:f2:b6:5b:29:b9:cb:0b:f6:e7:e2:86:fb:3b: de:06:60:14:73:1b:62:b0:92:db:7e:87:b9:05:43:81:0a:ab: 83:ab:7f:23:69:62:20:c4:b6:32:f6:92:ee:83:b7:a2:73:43: 49:65:d5:a6:f9:31:04:2a:c4:ba:38:b8:51:e5:ea:94:51:e7: db:60:65:c3:94:66:f2:62:e3:8f:cc:53:cd:cb:e0:b2:cd:53: 9e:41:f2:58:d9:82:1e:3a:c9:0c:d0:35:e9:07:cf:91:d0:51: 45:88:7d:3d:46:e8:01:87:79:05:97:90:c1:b4:c1:87:02:c4: 64:15:98:be:bc:7a:88:bf:23:76:72:ad:4f:0f:ad:e7:85:5d: 57:bf:83:af:fb:16:0d:12:50:43:bd:02:8a:68:fa:7c:6c:fe: c6:07:4c:dc:e5:00:4c:6e:b7:d3:3c:3e:81:af:7b:24:d4:3b: db:e3:11:a3:b9:4b:dc:ff:9c:48:5f:ae:bf:58:bb:8c:4d:5d: 8d:6a:97:e7:f0:bb:b3:b6:bc:61:7e:b0:06:f6:a4:d8:0d:6b: 95:b5:7a:06 -----BEGIN CERTIFICATE----- MIIFFjCCA/6gAwIBAgISAZn9NEaExVKZ7uV3uMdW9pveMA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKDQ2OGI1OTJmMzExMGJjNmMzNTI0OWE4MjcxYTBkYWMxYTlh Y2IwY2UwHhcNMjUxMDE5MTYwMTI1WhcNMjUxMDIwMTYwMTI1WjAzMTEwLwYDVQQD Eyg2ZTA0YWQxZWQxNDNiZmQyZmQzMmRjMGUwZWQ5YTJlNDc0ZWVlNzg1MIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAtNw7gZhiCuJQwfdLq/hAAihLyARb AncFA9G91UoGsKqD3Fe1TWEdxWe+h01Q7LMmiDKD87soBsDuZWRgvfzoT56YLr78 EhOn1J46yzMJaL4NyGQHzweXnLGmLEJXJ6yY1AKJIqiWUiaXKmKtDayYUCx9LLiO a5H7kbIOl5VcDFmVGICPX3SACZXUHKZX7kJihHXAsaMVyzEF/O7Rzi6v74UPd3o9 mSis87JrBAbJFfrlhpojH8WKjm2CklqkUt41iTCAmgrLEPryK/z8Y6LxavidaVvF t2u5dOjXF/J/gheYcXYmmKwByad489rzaYNFz41x3ioNjLj4NEaZfOLPuQIDAQAB o4ICIjCCAh4wHQYDVR0OBBYEFG4ErR7RQ7/S/TLcDg7ZouR07ueFMB8GA1UdIwQY MBaAFEaLWS8xELxsNSSagnGg2sGprLDOMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvUm90Wkx6RVF2R3cxSkpxQ2NhRGF3YW1zc000LmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC9jNy8yOWUxNjYtOThkMi00OWYyLTg0OTct MDUwMzc0OWFkZWEwLzEvUm90Wkx6RVF2R3cxSkpxQ2NhRGF3YW1zc000Lm1mdDCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC9jNy8yOWUxNjYtOThkMi00OWYyLTg0OTctMDUwMzc0OWFkZWEw LzEvUm90Wkx6RVF2R3cxSkpxQ2NhRGF3YW1zc000LmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAE4MNWPnE +wp3LZdwosooPM/I4y8qi0TW/k0fxMml9s4C3p8b8TIWBZrytlspucsL9ufihvs7 3gZgFHMbYrCS236HuQVDgQqrg6t/I2liIMS2MvaS7oO3onNDSWXVpvkxBCrEuji4 UeXqlFHn22Blw5Rm8mLjj8xTzcvgss1TnkHyWNmCHjrJDNA16QfPkdBRRYh9PUbo AYd5BZeQwbTBhwLEZBWYvrx6iL8jdnKtTw+t54VdV7+Dr/sWDRJQQ70Cimj6fGz+ xgdM3OUATG630zw+ga97JNQ72+MRo7lL3P+cSF+uv1i7jE1djWqX5/C7s7a8YX6w Bvak2A1rlbV6Bg== -----END CERTIFICATE-----Generated at Sun Oct 19 20:50:41 2025 by rpki-client