$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/d4/8c5f5a-804b-4df6-827b-c7ccd7943106/1/nZibOZjhn8APhnDPbJ10AXFc808.mft File: nZibOZjhn8APhnDPbJ10AXFc808.mft (raw, json) Hash identifier: 4aaENYzuFz6VTNBhDN2AvWXSrJVEgPCxR9muGHuosjY= Subject key identifier: FE:15:18:8E:5E:E0:1E:64:49:CA:19:A4:05:D8:61:85:9A:5D:43:9A Authority key identifier: 9D:98:9B:39:98:E1:9F:C0:0F:86:70:CF:6C:9D:74:01:71:5C:F3:4F Certificate issuer: /CN=9d989b3998e19fc00f8670cf6c9d7401715cf34f Certificate serial: 0199FC8F95535D156523E709137D145CAB99 Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/nZibOZjhn8APhnDPbJ10AXFc808.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/d4/8c5f5a-804b-4df6-827b-c7ccd7943106/1/nZibOZjhn8APhnDPbJ10AXFc808.mft Manifest number: 01D6 Signing time: Sun 19 Oct 2025 13:01:32 +0000 Manifest this update: Sun 19 Oct 2025 13:01:32 +0000 Manifest next update: Mon 20 Oct 2025 13:01:32 +0000 Files and hashes: 1: 2d84iaAy9peqMc8uPtiQJUVpqhA.roa (hash: XonhU7MQtuyMxgxQYBP6Y8GxbPwqjebSF5A8W+e+9Dk=) 2: 7dhCE4YFHCUjlqkpkZY7lO72jeU.roa (hash: U8fxbXZIOaigGsLrKkx21Oe8R/4CGL6VvmyMHjpBRGE=) 3: EzmgW5SIzKZhd3gcqi5vbAQspRs.roa (hash: 9GSjRSh1NRSv4vNrPQJMwH5N/rEwdp6boN/thonioHA=) 4: OWURZZQfXBLCjrMIo9lI7C6_8rU.roa (hash: mhkt0q1UgZZPM01b3Aszei1MJkXP1Fj7gDNO1ZQ7Zg0=) 5: Oi5y3oR-zAeDQVQqnqlub4mxZBY.roa (hash: wiW5g0XVDHNy1QPGb/8FJ3EhNGUt4wPgRz1ROLxdqCE=) 6: SWb9dWC7dX_rwlK0omJMc3wlDks.roa (hash: LsnTgIHVTvCHjZWRXF28FLY3Qh1KmfRKmu1wsQo8XRo=) 7: Vkn5Fjc1blCjW36pRVzcI2dLeRM.roa (hash: b4zxuu0+PWf6Y2gL35zDWaLiEcfMZ+LL8pUvtmTR45E=) 8: VtA0sYtoBS8bGZyWtELDxZdV15w.roa (hash: qr5xc7yY1HYHlnNGTTUy5XqyOe3bNLkhXLhBpl8oti4=) 9: XqFMryLIw1x1QzwoXKE2TA0QsD8.roa (hash: 4jdqgSKXalwNBkWrPQkzkWpgRaMNA4FVpS3FsC5tqMU=) 10: YzR4bVvYuilSAsgyIIG5IHRToDw.roa (hash: aeoTN5jE2adPRR+yahq8zhU6/6Zb1ls1gStL9w3wSCY=) 11: lcQi5Bm9eFSfTGrvmV8ciQpCrmk.roa (hash: RYrQUk3+RUhAVWqgU4UejdbJ0Pp8G4DFGkckRr+4ALw=) 12: nK63OUw5HovdmnJOU8TA3IOqFXc.roa (hash: At6fl1NEh3tU3v5PbKWMv3k4BjWoFVeGE3Mdg5kqGAA=) 13: nZibOZjhn8APhnDPbJ10AXFc808.crl (hash: xoROROrur5/nr+nLCAwfvXfFwLl1begb5mciS6PY0bw=) Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/d4/8c5f5a-804b-4df6-827b-c7ccd7943106/1/nZibOZjhn8APhnDPbJ10AXFc808.crl rsync://rpki.ripe.net/repository/DEFAULT/d4/8c5f5a-804b-4df6-827b-c7ccd7943106/1/nZibOZjhn8APhnDPbJ10AXFc808.mft rsync://rpki.ripe.net/repository/DEFAULT/nZibOZjhn8APhnDPbJ10AXFc808.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Mon 20 Oct 2025 13:01:32 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:99:fc:8f:95:53:5d:15:65:23:e7:09:13:7d:14:5c:ab:99 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=9d989b3998e19fc00f8670cf6c9d7401715cf34f Validity Not Before: Oct 19 13:01:32 2025 GMT Not After : Oct 20 13:01:32 2025 GMT Subject: CN=fe15188e5ee01e6449ca19a405d861859a5d439a Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:cc:37:98:ec:7b:65:87:8b:3f:ec:c7:f0:a7:8a: e4:57:91:09:54:74:a5:a9:be:af:e3:ff:92:f1:74: a6:dc:6a:4c:88:31:fd:18:0e:98:66:b2:6c:25:2b: c4:34:c4:28:c9:85:8d:d7:1d:65:f6:c6:fd:83:62: 0a:54:c4:fd:24:ad:32:ad:9c:69:2d:1f:b9:f2:84: c0:aa:48:15:24:e9:7b:cc:97:84:e6:37:97:52:97: 00:29:25:aa:93:37:a8:f2:bf:3a:08:08:cc:a8:eb: 7b:63:6c:0a:f8:2d:5c:c8:61:e3:2c:1c:ec:fe:8e: b5:3b:e8:a3:71:60:80:2c:1d:9a:52:f7:ef:0c:e9: 39:47:4f:c5:22:9d:df:21:68:7c:ba:70:73:ff:0b: 26:72:19:f5:31:4e:19:92:a9:41:c5:cd:3b:4a:f8: c5:d0:9e:36:e7:c1:8d:92:19:51:f4:14:f8:fe:03: c8:e9:1b:fd:56:9c:46:d2:06:97:7c:83:d6:7a:95: 04:67:9b:b8:96:c0:ba:75:0c:5d:14:53:7b:14:dd: 18:f7:37:04:d6:6b:0d:56:3b:e2:c2:71:49:d0:d1: 7a:7a:72:9c:c6:08:be:28:ac:d1:66:54:e9:cf:fc: da:e8:e2:33:31:78:f3:6d:eb:2a:85:5e:9a:bd:b4: 90:a5 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: FE:15:18:8E:5E:E0:1E:64:49:CA:19:A4:05:D8:61:85:9A:5D:43:9A X509v3 Authority Key Identifier: keyid:9D:98:9B:39:98:E1:9F:C0:0F:86:70:CF:6C:9D:74:01:71:5C:F3:4F X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/nZibOZjhn8APhnDPbJ10AXFc808.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/d4/8c5f5a-804b-4df6-827b-c7ccd7943106/1/nZibOZjhn8APhnDPbJ10AXFc808.mft X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/d4/8c5f5a-804b-4df6-827b-c7ccd7943106/1/nZibOZjhn8APhnDPbJ10AXFc808.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 44:f0:18:46:a2:06:7b:8a:26:7f:27:f9:e9:27:0d:26:40:85: eb:fe:fc:6f:c1:90:27:6d:84:af:38:95:5c:c1:75:d6:44:58: 46:07:4a:b4:76:d8:ba:21:bd:29:bc:bc:1d:a3:7e:c3:fa:aa: 90:85:4b:77:1a:d4:02:2c:90:c8:aa:5f:5a:30:0a:03:de:4d: e1:40:59:fd:4a:3b:50:19:19:9b:ae:19:75:36:2f:84:72:64: 7b:6a:eb:90:61:eb:ab:7a:1f:0c:2c:6f:07:8a:ad:28:fb:84: 0c:ca:39:44:71:7f:05:fd:01:08:e9:ed:63:15:44:e8:98:ca: 91:20:d2:46:b3:e9:b0:4c:6a:71:81:d7:b8:9f:03:ff:0b:ef: ed:0e:a4:b4:ef:1c:50:bc:99:79:08:73:a0:a9:03:4f:20:17: ff:a3:1e:c8:a5:77:6b:ae:70:ca:29:31:ee:cf:21:a4:1e:2c: 18:4c:ad:7d:25:ca:5a:88:86:45:42:c4:17:79:9c:20:2c:e3: ab:b5:88:d9:76:cd:a2:98:02:88:ac:c5:be:95:6f:bf:06:3e: da:51:aa:f4:d7:03:6d:46:4d:a0:ac:a5:47:19:85:f4:8b:50: 52:22:09:0c:42:86:0a:d1:43:13:46:51:ad:14:e1:90:c6:97: 48:62:92:b9 -----BEGIN CERTIFICATE----- MIIFFjCCA/6gAwIBAgISAZn8j5VTXRVlI+cJE30UXKuZMA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKDlkOTg5YjM5OThlMTlmYzAwZjg2NzBjZjZjOWQ3NDAxNzE1 Y2YzNGYwHhcNMjUxMDE5MTMwMTMyWhcNMjUxMDIwMTMwMTMyWjAzMTEwLwYDVQQD EyhmZTE1MTg4ZTVlZTAxZTY0NDljYTE5YTQwNWQ4NjE4NTlhNWQ0MzlhMIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAzDeY7Htlh4s/7Mfwp4rkV5EJVHSl qb6v4/+S8XSm3GpMiDH9GA6YZrJsJSvENMQoyYWN1x1l9sb9g2IKVMT9JK0yrZxp LR+58oTAqkgVJOl7zJeE5jeXUpcAKSWqkzeo8r86CAjMqOt7Y2wK+C1cyGHjLBzs /o61O+ijcWCALB2aUvfvDOk5R0/FIp3fIWh8unBz/wsmchn1MU4ZkqlBxc07SvjF 0J4258GNkhlR9BT4/gPI6Rv9VpxG0gaXfIPWepUEZ5u4lsC6dQxdFFN7FN0Y9zcE 1msNVjviwnFJ0NF6enKcxgi+KKzRZlTpz/za6OIzMXjzbesqhV6avbSQpQIDAQAB o4ICIjCCAh4wHQYDVR0OBBYEFP4VGI5e4B5kScoZpAXYYYWaXUOaMB8GA1UdIwQY MBaAFJ2YmzmY4Z/AD4Zwz2yddAFxXPNPMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvblppYk9aamhuOEFQaG5EUGJKMTBBWEZjODA4LmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC9kNC84YzVmNWEtODA0Yi00ZGY2LTgyN2It YzdjY2Q3OTQzMTA2LzEvblppYk9aamhuOEFQaG5EUGJKMTBBWEZjODA4Lm1mdDCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC9kNC84YzVmNWEtODA0Yi00ZGY2LTgyN2ItYzdjY2Q3OTQzMTA2 LzEvblppYk9aamhuOEFQaG5EUGJKMTBBWEZjODA4LmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEARPAYRqIG e4omfyf56ScNJkCF6/78b8GQJ22ErziVXMF11kRYRgdKtHbYuiG9Kby8HaN+w/qq kIVLdxrUAiyQyKpfWjAKA95N4UBZ/Uo7UBkZm64ZdTYvhHJke2rrkGHrq3ofDCxv B4qtKPuEDMo5RHF/Bf0BCOntYxVE6JjKkSDSRrPpsExqcYHXuJ8D/wvv7Q6ktO8c ULyZeQhzoKkDTyAX/6MeyKV3a65wyikx7s8hpB4sGEytfSXKWoiGRULEF3mcICzj q7WI2XbNopgCiKzFvpVvvwY+2lGq9NcDbUZNoKylRxmF9ItQUiIJDEKGCtFDE0ZR rRThkMaXSGKSuQ== -----END CERTIFICATE-----Generated at Sun Oct 19 23:05:19 2025 by rpki-client