$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/ca/4a9cc4-2b9a-4ef2-a33a-872b3710c2a1/1/ge7UCROD2e1AVtn07_fSYi3c4gU.mft File: ge7UCROD2e1AVtn07_fSYi3c4gU.mft (raw, json) Hash identifier: biHia+MXcwAsT+zsN2jZinjwQiqxnmLIJd6SP/sXaUg= Subject key identifier: CF:B3:8C:2D:4C:DA:0D:4B:BB:A3:BC:E6:62:CD:D3:00:E1:17:48:91 Authority key identifier: 81:EE:D4:09:13:83:D9:ED:40:56:D9:F4:EF:F7:D2:62:2D:DC:E2:05 Certificate issuer: /CN=81eed4091383d9ed4056d9f4eff7d2622ddce205 Certificate serial: 0199FC8FB4776AF60CD01B1345B879A85796 Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/ge7UCROD2e1AVtn07_fSYi3c4gU.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/ca/4a9cc4-2b9a-4ef2-a33a-872b3710c2a1/1/ge7UCROD2e1AVtn07_fSYi3c4gU.mft Manifest number: 16FB Signing time: Sun 19 Oct 2025 13:01:40 +0000 Manifest this update: Sun 19 Oct 2025 13:01:40 +0000 Manifest next update: Mon 20 Oct 2025 13:01:40 +0000 Files and hashes: 1: 1-FVNiQvWEXUQsyhSP2mXL7ZeFhI.roa (hash: h2VWp4VUz/KwikufobsIYuUTWP+PbubtA5kM1+IYNJ4=) 2: 1-cC_8sf2Sjlcbm7-DZh4XuYIArQ.roa (hash: 0N5yH6BWqUs7tPNNDSMGPx2mfE/ZRDiPQfeLQl52Wgo=) 3: Ew5F5AGBJsYmYSBOTzLn8emIPt4.roa (hash: cSAJagq5Djw72JJ+fQ3PJbaQWXRjfxPvkGqzSGEtOiQ=) 4: GTiO-SupitdTmKiZ_HKcU4MJuTk.roa (hash: +PZAxnriWNXJlrxxhGkuM8aqghAi9SsDw/xLwTjAVR8=) 5: XF9ImwV6WWJIs0xQcjK4t7jAy60.roa (hash: cqd2xtXIiuriNNQV4wixCocQ/6vU5JsRpBkdhH+9z5k=) 6: f6ghH_7B3PzM3ktCIJpbMer11MQ.roa (hash: gQOe3jDJjm6Z8U0Sg1BUTciGU/YhoqXEIyyDOVhhKCY=) 7: ge7UCROD2e1AVtn07_fSYi3c4gU.crl (hash: Yv5BlZFykyMU/ugmyAcu0EThf7cw9yTZekNmVh7Osbc=) 8: qWZ64G_gV6r1a1VTWhYwuR9ilIk.roa (hash: SNBGanOggO8FdGYV/GuiVAQ6b34zKk2VTZJhKLFl+04=) 9: uhgMFZw8rs0tJvJzvMK6WeU68F0.roa (hash: qV6k2QQIZBdjD0SstNGQRZVonpUjQ86it1wpOl33iLI=) 10: xb_V8FoCziLwhsNf2nDbMavL4CE.roa (hash: FYXyUhIT7c2rjGPzDYmHZI9gN0Jm7MertTGE0IiU5ck=) Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/ca/4a9cc4-2b9a-4ef2-a33a-872b3710c2a1/1/ge7UCROD2e1AVtn07_fSYi3c4gU.crl rsync://rpki.ripe.net/repository/DEFAULT/ca/4a9cc4-2b9a-4ef2-a33a-872b3710c2a1/1/ge7UCROD2e1AVtn07_fSYi3c4gU.mft rsync://rpki.ripe.net/repository/DEFAULT/ge7UCROD2e1AVtn07_fSYi3c4gU.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Mon 20 Oct 2025 11:18:59 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:99:fc:8f:b4:77:6a:f6:0c:d0:1b:13:45:b8:79:a8:57:96 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=81eed4091383d9ed4056d9f4eff7d2622ddce205 Validity Not Before: Oct 19 13:01:40 2025 GMT Not After : Oct 20 13:01:40 2025 GMT Subject: CN=cfb38c2d4cda0d4bbba3bce662cdd300e1174891 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:b3:53:c7:3b:99:60:f9:22:95:82:9e:54:81:94: 25:a4:5c:27:98:3c:d0:69:b1:49:e4:4e:b0:40:50: 01:7d:46:22:2b:06:d8:4f:e1:c8:b7:3f:27:57:b2: 8e:4b:fd:de:7b:8b:68:7f:80:27:83:66:cd:6e:a5: 4e:b9:fa:83:cb:07:fd:50:88:ef:5d:72:de:69:37: f7:ad:3d:73:3a:5f:72:b1:5b:9c:d2:93:33:3e:12: 9f:2a:09:83:05:7c:79:ca:44:29:f4:fa:4b:c5:07: 95:f0:a6:97:37:c7:05:c2:54:be:70:7a:14:f1:84: 23:79:d0:cc:dd:52:ab:c7:f0:0f:8d:fe:10:4c:53: 2f:3d:30:50:ae:01:9a:10:fa:d3:84:80:30:16:68: 08:8a:ec:e4:2c:76:2e:b1:18:1a:ac:2a:f5:f0:7a: cb:83:a7:77:2f:03:c2:b9:d2:22:1a:cc:a6:a1:50: dc:d4:e4:f7:73:ec:12:44:a6:69:5a:0e:01:e0:cd: ec:78:b4:e6:3d:a3:ac:a9:3d:18:df:0b:2a:f9:4c: 9b:4e:5f:eb:7e:13:c1:df:53:c2:f4:c9:3b:56:c3: 98:08:59:8d:72:83:f8:f9:01:68:b2:63:80:ad:54: c4:41:d1:f4:9d:b0:e6:3b:50:26:a8:97:8b:ca:e6: 85:bd Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: CF:B3:8C:2D:4C:DA:0D:4B:BB:A3:BC:E6:62:CD:D3:00:E1:17:48:91 X509v3 Authority Key Identifier: keyid:81:EE:D4:09:13:83:D9:ED:40:56:D9:F4:EF:F7:D2:62:2D:DC:E2:05 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/ge7UCROD2e1AVtn07_fSYi3c4gU.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/ca/4a9cc4-2b9a-4ef2-a33a-872b3710c2a1/1/ge7UCROD2e1AVtn07_fSYi3c4gU.mft X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/ca/4a9cc4-2b9a-4ef2-a33a-872b3710c2a1/1/ge7UCROD2e1AVtn07_fSYi3c4gU.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 41:ed:19:e2:59:c1:3f:d5:7f:01:48:ba:25:8b:cc:74:b4:ce: 3f:cb:4e:ae:ed:2e:23:ac:99:78:cc:4e:5b:fc:02:96:a2:de: ce:de:24:ef:e2:ed:49:47:76:5c:cc:12:85:c8:9e:96:ec:97: 7f:19:1f:94:28:85:36:55:62:19:ca:8e:92:c7:09:96:30:4d: 2a:f7:22:dc:4e:90:1e:d2:68:1d:ae:45:40:52:27:4a:63:06: 48:90:f1:f1:e9:b3:aa:dd:8e:b5:25:e8:d8:4b:4f:52:ec:d8: c7:7f:8f:0b:d6:ee:09:aa:0f:a6:ce:4a:c2:3e:e9:bc:d7:e5: 36:96:95:39:ba:3d:ea:7c:d1:f8:ea:25:8a:31:53:36:29:56: bb:a7:5d:2e:57:fb:57:92:90:58:74:7e:10:4c:cc:83:bb:f5: b8:61:2f:24:81:0a:d8:70:b0:41:71:12:c6:ef:29:fc:10:74: 26:54:b6:2d:b5:04:c5:1c:e8:ed:da:3b:79:14:6d:8b:f1:88: de:e2:1c:8c:06:a5:c2:dc:33:dc:fb:15:01:f0:e1:77:cc:9e: a6:30:c3:74:82:4e:14:e6:bb:d6:7f:f0:57:9b:63:51:25:21: ba:a2:80:3e:5f:67:a6:fd:a5:fb:09:67:55:a5:ce:1a:cb:4f: 7e:1f:1b:02 -----BEGIN CERTIFICATE----- MIIFFjCCA/6gAwIBAgISAZn8j7R3avYM0BsTRbh5qFeWMA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKDgxZWVkNDA5MTM4M2Q5ZWQ0MDU2ZDlmNGVmZjdkMjYyMmRk Y2UyMDUwHhcNMjUxMDE5MTMwMTQwWhcNMjUxMDIwMTMwMTQwWjAzMTEwLwYDVQQD EyhjZmIzOGMyZDRjZGEwZDRiYmJhM2JjZTY2MmNkZDMwMGUxMTc0ODkxMIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAs1PHO5lg+SKVgp5UgZQlpFwnmDzQ abFJ5E6wQFABfUYiKwbYT+HItz8nV7KOS/3ee4tof4Ang2bNbqVOufqDywf9UIjv XXLeaTf3rT1zOl9ysVuc0pMzPhKfKgmDBXx5ykQp9PpLxQeV8KaXN8cFwlS+cHoU 8YQjedDM3VKrx/APjf4QTFMvPTBQrgGaEPrThIAwFmgIiuzkLHYusRgarCr18HrL g6d3LwPCudIiGsymoVDc1OT3c+wSRKZpWg4B4M3seLTmPaOsqT0Y3wsq+UybTl/r fhPB31PC9Mk7VsOYCFmNcoP4+QFosmOArVTEQdH0nbDmO1AmqJeLyuaFvQIDAQAB o4ICIjCCAh4wHQYDVR0OBBYEFM+zjC1M2g1Lu6O85mLN0wDhF0iRMB8GA1UdIwQY MBaAFIHu1AkTg9ntQFbZ9O/30mIt3OIFMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvZ2U3VUNST0QyZTFBVnRuMDdfZlNZaTNjNGdVLmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC9jYS80YTljYzQtMmI5YS00ZWYyLWEzM2Et ODcyYjM3MTBjMmExLzEvZ2U3VUNST0QyZTFBVnRuMDdfZlNZaTNjNGdVLm1mdDCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC9jYS80YTljYzQtMmI5YS00ZWYyLWEzM2EtODcyYjM3MTBjMmEx LzEvZ2U3VUNST0QyZTFBVnRuMDdfZlNZaTNjNGdVLmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAQe0Z4lnB P9V/AUi6JYvMdLTOP8tOru0uI6yZeMxOW/wClqLezt4k7+LtSUd2XMwShcieluyX fxkflCiFNlViGcqOkscJljBNKvci3E6QHtJoHa5FQFInSmMGSJDx8emzqt2OtSXo 2EtPUuzYx3+PC9buCaoPps5Kwj7pvNflNpaVObo96nzR+OolijFTNilWu6ddLlf7 V5KQWHR+EEzMg7v1uGEvJIEK2HCwQXESxu8p/BB0JlS2LbUExRzo7do7eRRti/GI 3uIcjAalwtwz3PsVAfDhd8yepjDDdIJOFOa71n/wV5tjUSUhuqKAPl9npv2l+wln VaXOGstPfh8bAg== -----END CERTIFICATE-----Generated at Sun Oct 19 17:26:00 2025 by rpki-client