$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/c9/40498e-d1c0-484c-abcb-61e7f40d5dd6/1/rr85Ti8bJRyI2YiocWEIRYB4bvU.mft File: rr85Ti8bJRyI2YiocWEIRYB4bvU.mft (raw, json) Hash identifier: k96lcT7Cn1qyeHAb8M36SbuLHX/dhfheIrTU+JEyabI= Subject key identifier: D5:74:13:96:37:E8:00:72:EE:C7:FF:1E:C2:40:3A:C4:3A:51:26:62 Authority key identifier: AE:BF:39:4E:2F:1B:25:1C:88:D9:88:A8:71:61:08:45:80:78:6E:F5 Certificate issuer: /CN=aebf394e2f1b251c88d988a87161084580786ef5 Certificate serial: 0199FC2151BBF3E46447556ECCE3C4226E6C Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/rr85Ti8bJRyI2YiocWEIRYB4bvU.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/c9/40498e-d1c0-484c-abcb-61e7f40d5dd6/1/rr85Ti8bJRyI2YiocWEIRYB4bvU.mft Manifest number: 16FA Signing time: Sun 19 Oct 2025 11:01:05 +0000 Manifest this update: Sun 19 Oct 2025 11:01:05 +0000 Manifest next update: Mon 20 Oct 2025 11:01:05 +0000 Files and hashes: 1: 0M_CHtTZz2ksD2BrxQYB5GYr6Qs.roa (hash: pjePI9MMIzsxZCozr1MX0ua7tggMW3H280y5yB3P7S0=) 2: 1-_mCNfP9_HNiBcEsvWHOFnGkC9I.roa (hash: JsQNy89vRBMXhfgHBZLMyPK1KVQmDn747eH7PkqTbv4=) 3: 499vYtwuw8upiAA2ubHtry-MPMw.roa (hash: Z3mdQWlNWDCy7MpQvjVwxOFHXRgVUsKCd9CYyZydkdQ=) 4: BV9MkYw-noIEhqphKumJe_rAYPw.roa (hash: cTycQR7uMvIZ+ka9U/Z707XPur1pq5RdGRaj9s/WBEk=) 5: C9bq6HqiO8wvPt8Ohvw7Ya0CzfI.roa (hash: eBedAMyLvvyEc8yS2VDwWUUS44f1pIhLP9yn06vWvAA=) 6: L3ZGNHnhgVbtJA6v9_KfCLPdQu4.roa (hash: tRfv/CcITA5fhGSfuor8bEI1B/6QYSwrTAH88Vxz5+8=) 7: c_qSQSef9yQq7ko-zsOrz05POQI.roa (hash: FNYiHqlJ6193udyi9UzOaM0voKaXuvqgwAhp2rGz6i4=) 8: rq3_2EMmh0cv5ivlO8JPPUeogQc.roa (hash: 9kTdzZUfT/wSfRhG2PTu31/f9X4NTLfSEK/53blCYJ4=) 9: rr85Ti8bJRyI2YiocWEIRYB4bvU.crl (hash: /3Ujee203CpIfRwbhBbYznbHBt8viiv2Z8BHkPp5Hn8=) 10: uFaCHWPgxrsotozK3-PvWIlEI14.roa (hash: E71w1Kj/9g7CI68LBGPMUUdmv1Dhxwi441Gs522xPmQ=) Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/c9/40498e-d1c0-484c-abcb-61e7f40d5dd6/1/rr85Ti8bJRyI2YiocWEIRYB4bvU.crl rsync://rpki.ripe.net/repository/DEFAULT/c9/40498e-d1c0-484c-abcb-61e7f40d5dd6/1/rr85Ti8bJRyI2YiocWEIRYB4bvU.mft rsync://rpki.ripe.net/repository/DEFAULT/rr85Ti8bJRyI2YiocWEIRYB4bvU.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Mon 20 Oct 2025 06:00:58 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:99:fc:21:51:bb:f3:e4:64:47:55:6e:cc:e3:c4:22:6e:6c Signature Algorithm: sha256WithRSAEncryption Issuer: CN=aebf394e2f1b251c88d988a87161084580786ef5 Validity Not Before: Oct 19 11:01:05 2025 GMT Not After : Oct 20 11:01:05 2025 GMT Subject: CN=d574139637e80072eec7ff1ec2403ac43a512662 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:a4:c0:32:04:54:b5:86:4f:d4:85:70:43:4b:ef: bb:72:b1:1b:26:ab:ac:05:74:3b:d6:b9:8f:fa:63: 43:56:23:9f:a9:9c:9f:e8:a8:03:7d:75:55:59:a4: ce:2c:6f:c7:6f:1f:8c:0d:f9:a6:aa:1b:c8:d7:cd: d6:6e:0f:d8:e6:e5:7e:69:a6:1e:d5:75:4a:bd:93: 0d:56:76:2f:92:15:9a:79:8a:b3:3c:2d:59:b8:34: fc:1e:4f:54:b6:3f:a2:7b:8c:46:43:c5:c6:36:97: 77:42:c2:b2:de:74:b6:81:1f:4a:f4:c5:c9:51:52: bf:7f:ff:3d:ac:3e:d3:9c:58:4c:b0:b1:e4:89:b0: 3e:cd:37:62:ff:cd:87:7b:d8:ea:18:84:0b:a0:48: 6c:00:c2:2d:99:3f:19:b7:23:7f:9a:25:35:fc:5c: 09:ea:e1:51:65:f0:41:b2:76:a1:e9:30:2e:0e:2b: 75:c3:33:43:48:10:eb:c7:c1:ad:9c:2c:82:c5:05: c7:f2:bc:66:5e:75:e4:e5:dc:d4:79:f1:57:c5:80: db:46:4f:03:35:92:e4:5b:9e:4e:52:ed:50:c0:1c: fe:5a:da:05:3f:28:27:46:1b:1f:98:38:a9:30:36: d3:6b:4f:15:28:42:96:27:7a:45:a1:54:d3:d9:83: 90:0b Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: D5:74:13:96:37:E8:00:72:EE:C7:FF:1E:C2:40:3A:C4:3A:51:26:62 X509v3 Authority Key Identifier: keyid:AE:BF:39:4E:2F:1B:25:1C:88:D9:88:A8:71:61:08:45:80:78:6E:F5 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/rr85Ti8bJRyI2YiocWEIRYB4bvU.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/c9/40498e-d1c0-484c-abcb-61e7f40d5dd6/1/rr85Ti8bJRyI2YiocWEIRYB4bvU.mft X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/c9/40498e-d1c0-484c-abcb-61e7f40d5dd6/1/rr85Ti8bJRyI2YiocWEIRYB4bvU.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 19:81:4c:24:3e:f5:b5:cc:e1:e2:27:86:bd:2e:d1:dc:b9:15: a2:9d:fa:a3:5d:d6:38:07:a7:7f:1c:44:c7:a8:92:6f:ac:95: 1e:c9:5a:b2:8d:68:4e:c5:af:f8:13:88:62:26:71:8e:6b:d0: 6e:00:ef:95:70:d4:6d:9f:7d:94:e7:27:b4:99:b8:9a:8e:ff: 4c:c4:6b:8d:90:c4:9a:c1:2a:9e:16:10:8e:cb:7e:39:e9:d5: 03:c4:20:78:8c:9c:2b:3e:3b:03:93:74:b0:f5:f3:7f:a5:58: 99:d5:db:0d:d7:8a:62:d7:08:bb:87:6e:46:84:cf:e1:7e:6b: d7:d8:17:f5:c8:30:34:30:68:bb:05:1f:d0:c4:64:96:74:d9: 4e:cc:09:a4:da:28:ae:b6:97:9f:90:53:c7:51:68:af:44:1b: 66:a0:39:ad:62:b4:9b:84:67:8d:15:11:34:fa:e1:ed:31:d1: e1:34:70:e6:2f:b2:3e:84:8d:ed:9c:ac:13:ce:c6:8b:3c:8b: 47:64:29:bb:eb:cf:ad:01:39:d9:f4:72:27:84:48:6f:82:ed: c9:03:84:98:36:f3:9c:b7:de:9d:8e:f1:ad:3e:e9:67:16:8a: c2:d3:64:73:ad:56:db:a5:56:54:1b:fe:fd:66:0f:2d:ee:de: 6c:5d:fb:fd -----BEGIN CERTIFICATE----- MIIFFjCCA/6gAwIBAgISAZn8IVG78+RkR1VuzOPEIm5sMA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKGFlYmYzOTRlMmYxYjI1MWM4OGQ5ODhhODcxNjEwODQ1ODA3 ODZlZjUwHhcNMjUxMDE5MTEwMTA1WhcNMjUxMDIwMTEwMTA1WjAzMTEwLwYDVQQD EyhkNTc0MTM5NjM3ZTgwMDcyZWVjN2ZmMWVjMjQwM2FjNDNhNTEyNjYyMIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEApMAyBFS1hk/UhXBDS++7crEbJqus BXQ71rmP+mNDViOfqZyf6KgDfXVVWaTOLG/Hbx+MDfmmqhvI183Wbg/Y5uV+aaYe 1XVKvZMNVnYvkhWaeYqzPC1ZuDT8Hk9Utj+ie4xGQ8XGNpd3QsKy3nS2gR9K9MXJ UVK/f/89rD7TnFhMsLHkibA+zTdi/82He9jqGIQLoEhsAMItmT8ZtyN/miU1/FwJ 6uFRZfBBsnah6TAuDit1wzNDSBDrx8GtnCyCxQXH8rxmXnXk5dzUefFXxYDbRk8D NZLkW55OUu1QwBz+WtoFPygnRhsfmDipMDbTa08VKEKWJ3pFoVTT2YOQCwIDAQAB o4ICIjCCAh4wHQYDVR0OBBYEFNV0E5Y36ABy7sf/HsJAOsQ6USZiMB8GA1UdIwQY MBaAFK6/OU4vGyUciNmIqHFhCEWAeG71MA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvcnI4NVRpOGJKUnlJMllpb2NXRUlSWUI0YnZVLmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC9jOS80MDQ5OGUtZDFjMC00ODRjLWFiY2It NjFlN2Y0MGQ1ZGQ2LzEvcnI4NVRpOGJKUnlJMllpb2NXRUlSWUI0YnZVLm1mdDCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC9jOS80MDQ5OGUtZDFjMC00ODRjLWFiY2ItNjFlN2Y0MGQ1ZGQ2 LzEvcnI4NVRpOGJKUnlJMllpb2NXRUlSWUI0YnZVLmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAGYFMJD71 tczh4ieGvS7R3LkVop36o13WOAenfxxEx6iSb6yVHslaso1oTsWv+BOIYiZxjmvQ bgDvlXDUbZ99lOcntJm4mo7/TMRrjZDEmsEqnhYQjst+OenVA8QgeIycKz47A5N0 sPXzf6VYmdXbDdeKYtcIu4duRoTP4X5r19gX9cgwNDBouwUf0MRklnTZTswJpNoo rraXn5BTx1For0QbZqA5rWK0m4RnjRURNPrh7THR4TRw5i+yPoSN7ZysE87GizyL R2Qpu+vPrQE52fRyJ4RIb4LtyQOEmDbznLfenY7xrT7pZxaKwtNkc61W26VWVBv+ /WYPLe7ebF37/Q== -----END CERTIFICATE-----Generated at Sun Oct 19 15:26:49 2025 by rpki-client