$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/dc/c515c9-df08-426c-80e6-0367268ff871/1/CBt6IuUc-5z4QgXkRJmYrVXY8GU.mft File: CBt6IuUc-5z4QgXkRJmYrVXY8GU.mft (raw, json) Hash identifier: 8JSZ/KkEFhqbR7/FaaOb2OYPZZtTp+blbaVusYgl//Q= Subject key identifier: 1F:77:93:FD:22:B9:48:52:F9:85:7F:CD:25:9E:8F:8F:C6:C0:A9:58 Authority key identifier: 08:1B:7A:22:E5:1C:FB:9C:F8:42:05:E4:44:99:98:AD:55:D8:F0:65 Certificate issuer: /CN=081b7a22e51cfb9cf84205e4449998ad55d8f065 Certificate serial: 0199FBEC0BD9732C75214946F467A53F0D53 Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/CBt6IuUc-5z4QgXkRJmYrVXY8GU.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/dc/c515c9-df08-426c-80e6-0367268ff871/1/CBt6IuUc-5z4QgXkRJmYrVXY8GU.mft Manifest number: 1717 Signing time: Sun 19 Oct 2025 10:02:54 +0000 Manifest this update: Sun 19 Oct 2025 10:02:54 +0000 Manifest next update: Mon 20 Oct 2025 10:02:54 +0000 Files and hashes: 1: 0EWIFMkHOwPxXxJO-cVVnlFMV9M.roa (hash: H3HRfMwSGiaOC4hjRP3JPpolbe1iEtk1HgVt+tXcFJg=) 2: 1Q8S-F04ndhiDn0SGwOoAJvpcJE.roa (hash: C3Etga/0CnN14pA6mDGityRvYUsO547YlA3aweNBuiE=) 3: 5HzzPzyXFWUltUFIxz7A1OHGi7o.roa (hash: KdXF+S8JaHRcZ3Ivt3Pqt/DXcq9oRCgLGhDICrSfT58=) 4: 8-WV0KFzAJRQQFuP9I6yLavMsag.roa (hash: I9thkkCJIm1PtEdyWstVE+kMoQxLauXSjcbMKnMywsw=) 5: 9NRiEzWNWvOsqkkmj1H_nO4JtIA.roa (hash: M1EfpG0UAk+KXmH4YDb8gbqx8X4cMoL0D3M3L/57Gmk=) 6: CBt6IuUc-5z4QgXkRJmYrVXY8GU.crl (hash: GuZtmP4qFuqDiBxsLWmYaTIN3ED6tK/xsgOiO6Q0rZQ=) 7: CdZHXMtiuXIYHPmoJY2aErxG8Z8.roa (hash: zau8aloWL7mHqdY4KBJaLbm12+SMJIeq7unHMUAtkpg=) 8: GnVxDQNRy4lZ_6dGRtjVD3G4cHQ.roa (hash: uewNPszrVAmQ8TC2z53P69rsch1KQGC60dIp6JPFrsU=) 9: M4I4vx1xHRyGLzdFv0m3WqQ7kbc.roa (hash: 2EMSvLZ8cjOngMWy3qqLP47J5l90EJ/AMLuHP59YgVk=) 10: QDnTB1-gKLLvkYk5f0mHuXK293g.roa (hash: ITp7yMZbWE36QWni9uBDxLpY4F+C9+SnVAj3E7l62Ts=) 11: XDAdp99VnBF7cnnsQ12OybJrT8Y.roa (hash: RlZg9LpMx3Sn+N/ygBjqDdQQDqiZuazZKwQVgxx0FBg=) 12: eFGQ6kbBV_hrT8LO7Hegwhdtmp4.roa (hash: jES5P/dghWs+K0qtSFSL1yyagafjHPgd6GGcK36aa40=) 13: tjV22hyfL6sKASeEJo6Ke2cIRMg.roa (hash: j+NWMjI7+Df8SVOaL0Iyl9IZZ4H1LL2E359iqV63je4=) 14: zCJNwAHBT-OuD8JSwLlWmHeq2i0.roa (hash: xxcu2GFnZrIoRaIL254U2SP3O3E+qALgdaalLMmqYoY=) Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/dc/c515c9-df08-426c-80e6-0367268ff871/1/CBt6IuUc-5z4QgXkRJmYrVXY8GU.crl rsync://rpki.ripe.net/repository/DEFAULT/dc/c515c9-df08-426c-80e6-0367268ff871/1/CBt6IuUc-5z4QgXkRJmYrVXY8GU.mft rsync://rpki.ripe.net/repository/DEFAULT/CBt6IuUc-5z4QgXkRJmYrVXY8GU.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Mon 20 Oct 2025 10:02:54 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:99:fb:ec:0b:d9:73:2c:75:21:49:46:f4:67:a5:3f:0d:53 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=081b7a22e51cfb9cf84205e4449998ad55d8f065 Validity Not Before: Oct 19 10:02:54 2025 GMT Not After : Oct 20 10:02:54 2025 GMT Subject: CN=1f7793fd22b94852f9857fcd259e8f8fc6c0a958 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:99:8d:84:1e:74:5a:b1:6f:c4:f6:94:2a:3e:8f: fc:d7:ee:17:30:58:fc:a6:7a:ae:18:8f:fc:4a:8b: 71:fd:97:2d:18:3e:84:ba:79:e6:03:b2:e3:24:01: 9d:83:4c:82:d1:11:99:6f:dc:0a:1d:00:28:96:03: 86:99:c9:74:60:3f:7d:17:78:64:5a:cf:bb:f5:84: dc:62:95:1f:b9:2b:30:a1:9a:9f:0c:8d:59:c5:be: 76:bc:14:43:50:43:33:48:5f:de:fb:8c:91:f5:8a: af:b8:c2:35:55:1c:97:1c:6a:44:dc:8c:27:58:5b: ed:68:84:d1:18:94:18:1b:ea:35:06:53:c6:06:50: b4:7c:ce:54:97:5a:a7:30:a6:24:15:30:da:a4:3e: 88:3f:a1:f0:5a:9b:12:7e:fc:75:fa:99:04:f0:42: 54:a9:f7:5c:ce:dc:24:60:88:20:49:ab:de:78:ed: 2e:39:6d:55:66:10:10:f2:87:00:62:26:bc:99:92: 5b:fd:d1:af:ae:f1:6a:8e:bd:95:a4:c2:44:02:ee: be:a6:b0:ad:16:d9:1a:e3:e2:04:b6:f9:d3:23:f2: 42:71:0f:2e:b9:23:27:c4:c3:52:48:c6:69:3d:77: 2b:6e:a1:1b:9e:1d:f3:4a:bf:6d:74:dc:e5:aa:b8: ae:4f Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 1F:77:93:FD:22:B9:48:52:F9:85:7F:CD:25:9E:8F:8F:C6:C0:A9:58 X509v3 Authority Key Identifier: keyid:08:1B:7A:22:E5:1C:FB:9C:F8:42:05:E4:44:99:98:AD:55:D8:F0:65 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/CBt6IuUc-5z4QgXkRJmYrVXY8GU.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/dc/c515c9-df08-426c-80e6-0367268ff871/1/CBt6IuUc-5z4QgXkRJmYrVXY8GU.mft X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/dc/c515c9-df08-426c-80e6-0367268ff871/1/CBt6IuUc-5z4QgXkRJmYrVXY8GU.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 75:20:27:ba:ee:60:04:f8:cb:ea:85:04:95:9f:c5:da:7d:53: 0c:49:db:e1:7c:af:41:33:20:d4:91:dd:49:fc:3a:f7:e2:3f: 13:14:73:7d:f6:de:62:8c:b3:2f:7f:2a:a1:cd:04:f0:1c:32: 9f:23:bd:bc:62:8b:e5:83:fb:0b:90:6c:f3:0e:2c:22:29:00: 5b:29:af:07:7a:f0:e9:1b:18:cd:92:c6:81:e0:d0:c2:8d:c6: 87:e9:63:24:af:2a:6e:8f:20:4e:db:94:58:96:d5:82:3c:a2: 84:56:ac:82:f1:80:b6:bf:d9:30:59:32:c3:28:6d:42:fe:ce: 7b:39:21:91:7a:ca:1a:40:c8:af:be:bc:75:66:ff:08:9b:94: fc:99:9e:d1:51:85:d7:df:48:4f:ce:39:cf:5f:d8:1e:7c:36: 3d:70:17:48:af:81:cf:b1:4a:ae:1a:8e:5c:65:73:4e:c9:2e: b1:98:0b:ef:3e:b1:84:79:92:2b:cd:e9:e2:92:af:e9:6c:8e: 5b:6d:e0:e4:92:84:be:70:86:30:3f:d7:31:36:ba:fd:27:fb: aa:b0:d6:30:eb:b9:cb:34:d0:d6:02:00:f2:39:92:f8:99:cb: cf:5b:93:d2:df:bc:81:10:e8:64:76:4b:22:ed:6b:ac:6d:e5: b2:a0:96:78 -----BEGIN CERTIFICATE----- MIIFFjCCA/6gAwIBAgISAZn77AvZcyx1IUlG9GelPw1TMA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKDA4MWI3YTIyZTUxY2ZiOWNmODQyMDVlNDQ0OTk5OGFkNTVk OGYwNjUwHhcNMjUxMDE5MTAwMjU0WhcNMjUxMDIwMTAwMjU0WjAzMTEwLwYDVQQD EygxZjc3OTNmZDIyYjk0ODUyZjk4NTdmY2QyNTllOGY4ZmM2YzBhOTU4MIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAmY2EHnRasW/E9pQqPo/81+4XMFj8 pnquGI/8Sotx/ZctGD6EunnmA7LjJAGdg0yC0RGZb9wKHQAolgOGmcl0YD99F3hk Ws+79YTcYpUfuSswoZqfDI1Zxb52vBRDUEMzSF/e+4yR9YqvuMI1VRyXHGpE3Iwn WFvtaITRGJQYG+o1BlPGBlC0fM5Ul1qnMKYkFTDapD6IP6HwWpsSfvx1+pkE8EJU qfdcztwkYIggSaveeO0uOW1VZhAQ8ocAYia8mZJb/dGvrvFqjr2VpMJEAu6+prCt Ftka4+IEtvnTI/JCcQ8uuSMnxMNSSMZpPXcrbqEbnh3zSr9tdNzlqriuTwIDAQAB o4ICIjCCAh4wHQYDVR0OBBYEFB93k/0iuUhS+YV/zSWej4/GwKlYMB8GA1UdIwQY MBaAFAgbeiLlHPuc+EIF5ESZmK1V2PBlMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvQ0J0Nkl1VWMtNXo0UWdYa1JKbVlyVlhZOEdVLmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC9kYy9jNTE1YzktZGYwOC00MjZjLTgwZTYt MDM2NzI2OGZmODcxLzEvQ0J0Nkl1VWMtNXo0UWdYa1JKbVlyVlhZOEdVLm1mdDCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC9kYy9jNTE1YzktZGYwOC00MjZjLTgwZTYtMDM2NzI2OGZmODcx LzEvQ0J0Nkl1VWMtNXo0UWdYa1JKbVlyVlhZOEdVLmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAdSAnuu5g BPjL6oUElZ/F2n1TDEnb4XyvQTMg1JHdSfw69+I/ExRzffbeYoyzL38qoc0E8Bwy nyO9vGKL5YP7C5Bs8w4sIikAWymvB3rw6RsYzZLGgeDQwo3Gh+ljJK8qbo8gTtuU WJbVgjyihFasgvGAtr/ZMFkywyhtQv7OezkhkXrKGkDIr768dWb/CJuU/Jme0VGF 199IT845z1/YHnw2PXAXSK+Bz7FKrhqOXGVzTskusZgL7z6xhHmSK83p4pKv6WyO W23g5JKEvnCGMD/XMTa6/Sf7qrDWMOu5yzTQ1gIA8jmS+JnLz1uT0t+8gRDoZHZL Iu1rrG3lsqCWeA== -----END CERTIFICATE-----Generated at Sun Oct 19 18:01:33 2025 by rpki-client