$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/cc/051fa2-c580-4a02-a186-e69f7a5d2d90/1/8P8sYimvdjqZ9TSaMlEN9KRSYUM.mft File: 8P8sYimvdjqZ9TSaMlEN9KRSYUM.mft (raw, json) Hash identifier: 54KRyyRoznU+uGM2m2QuYh9KukJhZIyyZsELxCyR3ws= Subject key identifier: 52:A8:C2:11:BC:2C:9F:81:92:E1:5B:96:80:C1:73:63:CE:22:44:BD Authority key identifier: F0:FF:2C:62:29:AF:76:3A:99:F5:34:9A:32:51:0D:F4:A4:52:61:43 Certificate issuer: /CN=f0ff2c6229af763a99f5349a32510df4a4526143 Certificate serial: 0199FD6AE0B8DA7B247D7440D0E66885A059 Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/8P8sYimvdjqZ9TSaMlEN9KRSYUM.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/cc/051fa2-c580-4a02-a186-e69f7a5d2d90/1/8P8sYimvdjqZ9TSaMlEN9KRSYUM.mft Manifest number: 16E7 Signing time: Sun 19 Oct 2025 17:01:03 +0000 Manifest this update: Sun 19 Oct 2025 17:01:03 +0000 Manifest next update: Mon 20 Oct 2025 17:01:03 +0000 Files and hashes: 1: 00x2a7vYcUP_RgzqZlJDShLq9Do.roa (hash: cq08qt5t6pt7+g4zB6xtHZuctjeJqy9pw/L/lk8TYFo=) 2: 8P8sYimvdjqZ9TSaMlEN9KRSYUM.crl (hash: uzvUnhlmCvZp215EtXySBdi57sHzyqR0utYE0HMuSwY=) 3: KVMzJG-tiBiXKGfDbX7s-fqSUcs.roa (hash: izdiO/l04uY0Tl9GP7xbaa4HsWMYkrOgbs0SiG0a1K8=) 4: OBC2jp5FIHT7G9c2m1xsJUD2ivs.roa (hash: DrwuyysosoB70lBjSllnHo3rVU0U0NusilzO8tRi9Q0=) 5: OxF-ngX6YGUArZrbAYmh9hpGzkU.roa (hash: zhEaR7GNPbf+2lOaH8uFUPJFKzbpuLS5x4CvU7dkxPs=) 6: Q2Pg2GNHELVKyFoNgxOuT8YFvLY.roa (hash: DsyRU7FSw+3XDKbBM9HrtgkzYSVPnqWwqknbD6CWVSU=) 7: RO-InVXPYoHaB1ZpM-19yr94dQs.roa (hash: 8Y6VcUcgO4alufdIJ4djN2KAnB4AyYetp1VZzDDuyNk=) 8: TbcAJ-7kgZbLEMeBArn-aI2s0Oc.roa (hash: ebCgIhbDpPxtlRtDjitUarjC0W1nxe0ujpocy11Koxs=) 9: _gM5SG_4QQqKocZtcQPCR80SAmI.roa (hash: ee8TJS3VrEj5YXrt15hISXpN3dVXM3P5ROyjlVEMHSs=) 10: fG6If6WZh4pXAVRu1gEQ7wbPbEs.roa (hash: OIBSpF8oXZotrR8RVX6KacBPnJZCoNiFLIZ7aWyayQU=) 11: gfQeyx6Q7sjS4Xpny9IUQ8tQxLY.roa (hash: zrq/geD7ajZHxMLm7OvFbnGGXeIS14GfMNfAscurlR8=) Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/cc/051fa2-c580-4a02-a186-e69f7a5d2d90/1/8P8sYimvdjqZ9TSaMlEN9KRSYUM.crl rsync://rpki.ripe.net/repository/DEFAULT/cc/051fa2-c580-4a02-a186-e69f7a5d2d90/1/8P8sYimvdjqZ9TSaMlEN9KRSYUM.mft rsync://rpki.ripe.net/repository/DEFAULT/8P8sYimvdjqZ9TSaMlEN9KRSYUM.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Mon 20 Oct 2025 17:01:03 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:99:fd:6a:e0:b8:da:7b:24:7d:74:40:d0:e6:68:85:a0:59 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=f0ff2c6229af763a99f5349a32510df4a4526143 Validity Not Before: Oct 19 17:01:03 2025 GMT Not After : Oct 20 17:01:03 2025 GMT Subject: CN=52a8c211bc2c9f8192e15b9680c17363ce2244bd Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:b9:76:97:26:93:33:b0:15:16:b4:ce:d6:2c:70: 57:5c:92:87:4c:5d:da:a1:61:99:d9:b4:ae:ff:c4: 88:b0:69:4e:7f:9d:4b:f9:92:3f:84:d3:e5:d0:6d: 72:54:f2:b8:92:ae:dd:47:a7:2a:82:e4:68:24:e6: fa:43:b9:5c:e7:cc:6f:6a:49:19:28:6b:21:71:08: 95:fc:b9:37:0d:ca:f2:da:81:15:10:9b:eb:07:34: 41:1f:38:89:6f:c1:4e:33:a8:10:d5:b9:f8:ff:7c: 65:d9:bd:0e:5c:60:f9:11:ec:88:25:b0:7c:01:63: 77:2b:bc:74:fb:a3:0d:f3:43:5a:bb:af:cc:88:18: 59:35:5e:21:ae:ba:ee:9e:0c:dc:fd:e0:92:06:3c: 67:64:0f:24:3a:a6:18:d8:96:dd:35:48:96:8d:ee: f9:75:40:d1:fe:45:9b:ba:f0:7f:0e:26:03:91:01: 4a:c0:bc:a2:cd:7c:6a:5f:e5:9f:a5:d8:b5:68:2d: fa:16:d9:05:32:3f:5e:47:fd:57:a0:b0:93:28:14: 06:24:33:3c:a5:71:76:66:be:69:19:52:c2:89:24: ef:e5:e1:88:cc:40:c7:b4:43:4c:93:d2:d4:65:83: 82:c9:a7:78:f4:a6:06:21:26:35:bf:20:cd:42:b6: 0e:29 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 52:A8:C2:11:BC:2C:9F:81:92:E1:5B:96:80:C1:73:63:CE:22:44:BD X509v3 Authority Key Identifier: keyid:F0:FF:2C:62:29:AF:76:3A:99:F5:34:9A:32:51:0D:F4:A4:52:61:43 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/8P8sYimvdjqZ9TSaMlEN9KRSYUM.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/cc/051fa2-c580-4a02-a186-e69f7a5d2d90/1/8P8sYimvdjqZ9TSaMlEN9KRSYUM.mft X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/cc/051fa2-c580-4a02-a186-e69f7a5d2d90/1/8P8sYimvdjqZ9TSaMlEN9KRSYUM.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption c3:d3:a6:70:fa:0e:f5:69:7c:2e:cd:3d:bf:64:f3:3b:95:30: 63:b5:14:fe:dd:19:90:4b:a4:25:71:ca:4a:a2:1b:cd:16:f9: 2d:48:fc:0c:58:a7:83:f7:0e:cc:ca:40:c0:46:a5:26:36:0b: 5b:ff:7a:7d:f0:43:bb:05:e9:60:44:13:1f:ef:2f:8a:68:9f: fd:bb:ac:64:c2:83:00:83:95:2e:f3:e8:2a:70:01:f7:20:fe: 9e:00:7e:01:fc:a6:ea:51:d9:99:2f:44:f7:b1:95:13:72:81: ac:0d:db:c1:56:36:a5:52:9c:69:4d:c2:d7:ee:c1:bc:7e:9b: c0:0f:f1:a2:e3:92:cb:28:ac:ef:6d:76:05:b6:a4:a1:6a:1f: 5d:1e:cc:b2:be:d5:a4:4b:88:8c:79:99:57:a8:38:e7:20:fa: 90:25:82:88:5c:8b:b2:55:bb:a8:e3:69:cb:8e:89:b0:65:45: e0:a8:6f:cf:f5:21:8c:2f:64:56:65:d4:88:3b:e4:90:69:5c: 58:f9:f5:d6:ae:35:e5:a8:a8:3e:ed:6e:41:94:17:21:2d:79: 91:63:10:0c:35:91:b1:3d:3d:82:ca:80:23:ce:3c:7a:8e:bb: d6:06:af:45:3b:7e:6d:19:6c:d3:c6:80:f6:92:38:f6:32:09: 57:69:8b:9f -----BEGIN CERTIFICATE----- MIIFFjCCA/6gAwIBAgISAZn9auC42nskfXRA0OZohaBZMA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKGYwZmYyYzYyMjlhZjc2M2E5OWY1MzQ5YTMyNTEwZGY0YTQ1 MjYxNDMwHhcNMjUxMDE5MTcwMTAzWhcNMjUxMDIwMTcwMTAzWjAzMTEwLwYDVQQD Eyg1MmE4YzIxMWJjMmM5ZjgxOTJlMTViOTY4MGMxNzM2M2NlMjI0NGJkMIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAuXaXJpMzsBUWtM7WLHBXXJKHTF3a oWGZ2bSu/8SIsGlOf51L+ZI/hNPl0G1yVPK4kq7dR6cqguRoJOb6Q7lc58xvakkZ KGshcQiV/Lk3Dcry2oEVEJvrBzRBHziJb8FOM6gQ1bn4/3xl2b0OXGD5EeyIJbB8 AWN3K7x0+6MN80Nau6/MiBhZNV4hrrrungzc/eCSBjxnZA8kOqYY2JbdNUiWje75 dUDR/kWbuvB/DiYDkQFKwLyizXxqX+Wfpdi1aC36FtkFMj9eR/1XoLCTKBQGJDM8 pXF2Zr5pGVLCiSTv5eGIzEDHtENMk9LUZYOCyad49KYGISY1vyDNQrYOKQIDAQAB o4ICIjCCAh4wHQYDVR0OBBYEFFKowhG8LJ+BkuFbloDBc2POIkS9MB8GA1UdIwQY MBaAFPD/LGIpr3Y6mfU0mjJRDfSkUmFDMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvOFA4c1lpbXZkanFaOVRTYU1sRU45S1JTWVVNLmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC9jYy8wNTFmYTItYzU4MC00YTAyLWExODYt ZTY5ZjdhNWQyZDkwLzEvOFA4c1lpbXZkanFaOVRTYU1sRU45S1JTWVVNLm1mdDCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC9jYy8wNTFmYTItYzU4MC00YTAyLWExODYtZTY5ZjdhNWQyZDkw LzEvOFA4c1lpbXZkanFaOVRTYU1sRU45S1JTWVVNLmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAw9OmcPoO 9Wl8Ls09v2TzO5UwY7UU/t0ZkEukJXHKSqIbzRb5LUj8DFing/cOzMpAwEalJjYL W/96ffBDuwXpYEQTH+8vimif/busZMKDAIOVLvPoKnAB9yD+ngB+Afym6lHZmS9E 97GVE3KBrA3bwVY2pVKcaU3C1+7BvH6bwA/xouOSyyis7212BbakoWofXR7Msr7V pEuIjHmZV6g45yD6kCWCiFyLslW7qONpy46JsGVF4Khvz/UhjC9kVmXUiDvkkGlc WPn11q415aioPu1uQZQXIS15kWMQDDWRsT09gsqAI848eo671gavRTt+bRls08aA 9pI49jIJV2mLnw== -----END CERTIFICATE-----Generated at Mon Oct 20 02:50:40 2025 by rpki-client