$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/d1/789caf-c8d2-419e-ae04-691422311729/1/8MEEBBaR3DhPOxqM35XJZijqba8.mft File: 8MEEBBaR3DhPOxqM35XJZijqba8.mft (raw, json) Hash identifier: L1qI3nCaUbBO1kS7jjVEbwQQs4020l9NkCbTj1xpzAI= Subject key identifier: DE:0D:6F:FF:4C:A2:64:08:91:74:B4:94:CD:BB:C1:EC:FF:06:D0:0C Authority key identifier: F0:C1:04:04:16:91:DC:38:4F:3B:1A:8C:DF:95:C9:66:28:EA:6D:AF Certificate issuer: /CN=f0c104041691dc384f3b1a8cdf95c96628ea6daf Certificate serial: 0199FC213B183F790436F97C1EC112D0A385 Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/8MEEBBaR3DhPOxqM35XJZijqba8.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/d1/789caf-c8d2-419e-ae04-691422311729/1/8MEEBBaR3DhPOxqM35XJZijqba8.mft Manifest number: 1698 Signing time: Sun 19 Oct 2025 11:01:00 +0000 Manifest this update: Sun 19 Oct 2025 11:01:00 +0000 Manifest next update: Mon 20 Oct 2025 11:01:00 +0000 Files and hashes: 1: 1-jVAuwl23O0NOs1-bK6yeNscKls.roa (hash: Uvxs615yu+WEWoRFMHOzorsioWG8H9U4nAbzC8roX+c=) 2: 8MEEBBaR3DhPOxqM35XJZijqba8.crl (hash: CpNPjAY7TfIFi2dy6XvRfCPFvL2XlhmOtHQ/7sz9ll8=) 3: Hl-LGslDYIhPlAkXHQHVv-RvB0w.roa (hash: O2E13yhrehXyHLH26oeDji6bWmBZEWAoPwvjmCy5UcQ=) 4: KeGOh-2gcusv29keikRHiEVKS4s.roa (hash: QrPYIqt13xYHx5UZtiEmzISVzXSCi7pxjFZqjccXxgI=) 5: PCT5Mgh2BfqwgaWaY02UF5LaLEs.roa (hash: XaBzd5GEKaiXR6sIMeiAlmk2HwlM0MvOxOjSag3QaY4=) 6: asCMHwRsfFwCKLi99bMyFo21krk.roa (hash: utShPNIu2DvLofXXWk5YOZ1a0OQi1aHbqM+BbMHKgoE=) 7: euk47PXoK5T6-tp0xVlaMzoR2zU.roa (hash: ELFMwMZ6NBCdcRDyZO9f72nzLI4WiJG57xVHtBVDcdU=) 8: fs_wxLugKiT_ydUrQOwGSh335rY.roa (hash: Q5dvvgKthsbcb9JzHMCTpI33x4XiWX2kEMaFSL83EKo=) 9: s-NcW6l6hXn5NOmuFXHN7mTAqcY.roa (hash: Ec6KZfarDMvuXKyozJ8ogUajfjL0rcRRpwLDmiHket8=) 10: xs5EMPFexMMDbg6ZozpAr6uWE70.roa (hash: qg/QvTawYThYqecFxjzESCzrgezKdtEVEc1jID0tLZg=) Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/d1/789caf-c8d2-419e-ae04-691422311729/1/8MEEBBaR3DhPOxqM35XJZijqba8.crl rsync://rpki.ripe.net/repository/DEFAULT/d1/789caf-c8d2-419e-ae04-691422311729/1/8MEEBBaR3DhPOxqM35XJZijqba8.mft rsync://rpki.ripe.net/repository/DEFAULT/8MEEBBaR3DhPOxqM35XJZijqba8.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Mon 20 Oct 2025 11:01:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:99:fc:21:3b:18:3f:79:04:36:f9:7c:1e:c1:12:d0:a3:85 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=f0c104041691dc384f3b1a8cdf95c96628ea6daf Validity Not Before: Oct 19 11:01:00 2025 GMT Not After : Oct 20 11:01:00 2025 GMT Subject: CN=de0d6fff4ca264089174b494cdbbc1ecff06d00c Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:d9:70:1a:d6:4e:f4:50:3b:a0:6f:4c:83:e1:8e: 45:b4:36:1f:0b:ed:7e:b2:af:0b:62:75:4c:c7:ee: 10:54:a8:71:2c:68:14:01:06:79:b3:1e:ea:66:2b: 22:23:3b:a0:ec:ea:59:c0:34:a8:f4:bf:6f:61:9c: 09:23:d2:43:ba:02:ec:49:61:20:c1:69:d6:16:5f: 78:65:48:63:b4:08:63:9a:51:71:98:28:13:4f:f0: 5d:b5:50:6c:1f:c6:eb:48:b3:cc:db:fd:c9:d0:5c: f4:59:a9:44:07:11:58:ec:65:04:6a:d7:05:9b:b2: fb:15:9d:7c:85:55:de:72:98:ff:ff:12:ac:51:5d: 93:0a:64:92:bf:e1:f0:c9:77:9c:e9:ee:d5:0c:aa: d8:9b:30:5c:ac:64:60:93:1d:df:56:a7:ba:9f:2c: 2a:6c:a3:9f:d6:5d:d9:d7:05:8b:b3:1e:1d:4b:a0: 08:74:26:a0:bb:1b:ee:57:b7:23:96:fa:16:bc:73: 01:74:e2:c1:50:a2:42:5b:14:36:52:df:88:8a:6c: f3:bc:c6:0b:ab:1a:3b:00:50:5b:13:c0:eb:24:37: 6c:0b:3e:02:7d:d7:f5:e6:10:7c:cd:de:6e:3f:c5: 86:02:5c:de:60:24:bf:86:99:70:c4:38:e9:cf:5f: a4:25 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: DE:0D:6F:FF:4C:A2:64:08:91:74:B4:94:CD:BB:C1:EC:FF:06:D0:0C X509v3 Authority Key Identifier: keyid:F0:C1:04:04:16:91:DC:38:4F:3B:1A:8C:DF:95:C9:66:28:EA:6D:AF X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/8MEEBBaR3DhPOxqM35XJZijqba8.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/d1/789caf-c8d2-419e-ae04-691422311729/1/8MEEBBaR3DhPOxqM35XJZijqba8.mft X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/d1/789caf-c8d2-419e-ae04-691422311729/1/8MEEBBaR3DhPOxqM35XJZijqba8.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 4d:7f:3d:fd:3d:62:d6:86:25:61:20:a5:88:b7:8c:c9:14:af: 27:1b:18:51:ab:bb:8b:3d:3a:4b:08:7b:5a:7c:c9:c9:ac:c8: e4:eb:b8:23:1c:db:29:59:52:38:4b:de:d1:2b:0f:29:a5:f8: 9e:19:d9:7a:1f:05:cf:e2:db:c5:65:bd:6a:8d:e7:0e:97:0f: 44:6c:e2:bb:ac:ab:e6:1b:47:80:52:84:1d:7e:66:f8:03:a5: 77:a3:97:84:fd:0c:7e:10:da:ac:b9:3b:c3:5d:85:fb:64:8f: 45:1c:7e:bd:b6:a8:15:58:7b:5a:0c:bb:bf:d6:c1:32:a6:d7: 28:90:6d:07:cf:e0:f1:c5:f9:7c:2b:37:f3:a0:50:19:1a:76: 95:57:b0:75:c1:6d:b8:75:e0:79:d6:47:e9:2b:be:11:92:95: 14:22:47:ce:fd:c0:f0:57:1e:90:b9:35:b1:3d:ce:af:24:1c: 62:19:48:11:74:40:20:69:b8:3d:fb:38:39:95:dd:85:3c:d4: 91:71:13:2a:5c:fb:fa:09:d6:bd:82:03:b6:01:77:4b:e8:00: dc:b7:d7:94:53:d9:1d:00:1d:bf:da:34:96:31:aa:2b:a3:ce: cd:a2:84:4c:79:0f:93:90:0a:d2:17:f8:4c:8e:76:58:c7:bd: 81:6e:9a:06 -----BEGIN CERTIFICATE----- MIIFFjCCA/6gAwIBAgISAZn8ITsYP3kENvl8HsES0KOFMA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKGYwYzEwNDA0MTY5MWRjMzg0ZjNiMWE4Y2RmOTVjOTY2Mjhl YTZkYWYwHhcNMjUxMDE5MTEwMTAwWhcNMjUxMDIwMTEwMTAwWjAzMTEwLwYDVQQD EyhkZTBkNmZmZjRjYTI2NDA4OTE3NGI0OTRjZGJiYzFlY2ZmMDZkMDBjMIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEA2XAa1k70UDugb0yD4Y5FtDYfC+1+ sq8LYnVMx+4QVKhxLGgUAQZ5sx7qZisiIzug7OpZwDSo9L9vYZwJI9JDugLsSWEg wWnWFl94ZUhjtAhjmlFxmCgTT/BdtVBsH8brSLPM2/3J0Fz0WalEBxFY7GUEatcF m7L7FZ18hVXecpj//xKsUV2TCmSSv+HwyXec6e7VDKrYmzBcrGRgkx3fVqe6nywq bKOf1l3Z1wWLsx4dS6AIdCaguxvuV7cjlvoWvHMBdOLBUKJCWxQ2Ut+IimzzvMYL qxo7AFBbE8DrJDdsCz4Cfdf15hB8zd5uP8WGAlzeYCS/hplwxDjpz1+kJQIDAQAB o4ICIjCCAh4wHQYDVR0OBBYEFN4Nb/9MomQIkXS0lM27wez/BtAMMB8GA1UdIwQY MBaAFPDBBAQWkdw4TzsajN+VyWYo6m2vMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvOE1FRUJCYVIzRGhQT3hxTTM1WEpaaWpxYmE4LmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC9kMS83ODljYWYtYzhkMi00MTllLWFlMDQt NjkxNDIyMzExNzI5LzEvOE1FRUJCYVIzRGhQT3hxTTM1WEpaaWpxYmE4Lm1mdDCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC9kMS83ODljYWYtYzhkMi00MTllLWFlMDQtNjkxNDIyMzExNzI5 LzEvOE1FRUJCYVIzRGhQT3hxTTM1WEpaaWpxYmE4LmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEATX89/T1i 1oYlYSCliLeMyRSvJxsYUau7iz06Swh7WnzJyazI5Ou4IxzbKVlSOEve0SsPKaX4 nhnZeh8Fz+LbxWW9ao3nDpcPRGziu6yr5htHgFKEHX5m+AOld6OXhP0MfhDarLk7 w12F+2SPRRx+vbaoFVh7Wgy7v9bBMqbXKJBtB8/g8cX5fCs386BQGRp2lVewdcFt uHXgedZH6Su+EZKVFCJHzv3A8FcekLk1sT3OryQcYhlIEXRAIGm4Pfs4OZXdhTzU kXETKlz7+gnWvYIDtgF3S+gA3LfXlFPZHQAdv9o0ljGqK6POzaKETHkPk5AK0hf4 TI52WMe9gW6aBg== -----END CERTIFICATE-----Generated at Sun Oct 19 18:24:15 2025 by rpki-client