$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/dd/9871ff-3f26-4b94-a464-6cc1d3ea832e/1/3uYj4q_3sDr-uUJgNIwWM7VNkFY.mft File: 3uYj4q_3sDr-uUJgNIwWM7VNkFY.mft (raw, json) Hash identifier: Z6ooKFZJzSHVXnVfFaDHfXBVcWcHHlv7LPELFi3gvVk= Subject key identifier: 66:38:D0:1B:17:A8:63:02:92:C2:30:B5:63:F1:59:5E:EC:65:8D:38 Authority key identifier: DE:E6:23:E2:AF:F7:B0:3A:FE:B9:42:60:34:8C:16:33:B5:4D:90:56 Certificate issuer: /CN=dee623e2aff7b03afeb94260348c1633b54d9056 Certificate serial: 0199FC218F76C460CA209558ECA0FAC90762 Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/3uYj4q_3sDr-uUJgNIwWM7VNkFY.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/dd/9871ff-3f26-4b94-a464-6cc1d3ea832e/1/3uYj4q_3sDr-uUJgNIwWM7VNkFY.mft Manifest number: 16EC Signing time: Sun 19 Oct 2025 11:01:21 +0000 Manifest this update: Sun 19 Oct 2025 11:01:21 +0000 Manifest next update: Mon 20 Oct 2025 11:01:21 +0000 Files and hashes: 1: 3uYj4q_3sDr-uUJgNIwWM7VNkFY.crl (hash: VjrtY+/qtHmZALtcyiIxhSrA42ZAqjwvSlKewNiAkGE=) 2: 6JZopMJN7uTSjk8RLqAqQqiOTv8.roa (hash: i0CLCf229jC92V+lcugJs5cHzmKb/QwzzortpUgSlE0=) 3: C_l7gY4HKMAH6m-SKmgQfr13Qes.roa (hash: pRZ/nLpDPpbsV4pq3dfe7vuh4pYoUDOFa7B5tX5SH6o=) 4: F28FkCdyuci3Fria3smj-aR0Mo8.roa (hash: +iHBrJeXSZDW37L79isCmbH1GRGsYAUMJPznVWSAn3s=) 5: HxeMl3I7fWCrTKC3UKE8t5xV0DI.roa (hash: zshfuevzv04489EuaUye3hUzbr9QLab/OpuQsfk2Dcs=) 6: J6fnUwtuy6KkAVjKhE44GNNzN8M.roa (hash: nJgWO4VkQ+dgAVkCE/fAmTK8VpG4vrJ+GVnehbPgZ8E=) 7: KwTls30WYcznTSabSq35vBeXpj0.roa (hash: X/ekOhBXSP8fVDHGwbrzlLZCwxwJt0Lb7wF+ki+I/bA=) 8: U_EQ5jekqkfzEnde1Ryv_SKglkw.roa (hash: cXnEtyK2NW31Ug/q25GQCbINI47bxmk/UuYt64mKZR0=) 9: aMc4nGsoGQu2w3W1s-uVvNsFK0I.roa (hash: /2ttmZLJW9TyxvH3IbbsGdnKYvWQ9tFHHmFxUOSmV/4=) 10: dNmEpnLjp-lO8gmW3k6P1Inx2O4.roa (hash: lJLSDkihxscSK2n9w3BUV6TQD0rnHs7+lDruW36I8YM=) Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/dd/9871ff-3f26-4b94-a464-6cc1d3ea832e/1/3uYj4q_3sDr-uUJgNIwWM7VNkFY.crl rsync://rpki.ripe.net/repository/DEFAULT/dd/9871ff-3f26-4b94-a464-6cc1d3ea832e/1/3uYj4q_3sDr-uUJgNIwWM7VNkFY.mft rsync://rpki.ripe.net/repository/DEFAULT/3uYj4q_3sDr-uUJgNIwWM7VNkFY.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Mon 20 Oct 2025 11:01:21 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:99:fc:21:8f:76:c4:60:ca:20:95:58:ec:a0:fa:c9:07:62 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=dee623e2aff7b03afeb94260348c1633b54d9056 Validity Not Before: Oct 19 11:01:21 2025 GMT Not After : Oct 20 11:01:21 2025 GMT Subject: CN=6638d01b17a8630292c230b563f1595eec658d38 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:c5:60:a5:9c:af:78:9f:dc:a2:49:2f:62:aa:2e: 62:c2:05:3e:43:d1:43:88:18:ee:33:a2:2c:7c:cc: ab:47:7d:75:74:69:96:0d:b9:d1:27:05:a2:6e:34: b8:27:e6:58:3c:87:54:29:f0:71:bd:0d:90:1f:ae: 47:d6:05:bd:86:a8:4d:a6:1c:cc:50:e1:7d:83:ce: 14:86:d8:aa:4d:f8:bd:52:c8:58:f7:bd:b9:e9:d5: 08:22:16:10:d4:84:c9:30:d2:64:68:f7:e3:b3:d9: 11:a5:ea:44:11:97:6d:c5:15:1b:bc:07:ce:33:f8: 27:b9:a4:7b:89:c3:a5:a8:02:2e:bb:c4:21:0b:ea: 81:f9:15:f2:7e:a1:0c:be:38:28:e9:bd:4a:6c:89: 0b:e7:64:74:96:7d:5c:c2:a0:94:f7:37:68:e6:92: ae:7b:63:36:7b:2c:7d:e7:7e:1a:7b:a1:9d:b3:22: dc:0e:65:5c:69:97:d6:7e:9a:dc:ad:cc:24:08:4b: 8b:50:2f:e6:02:2c:79:56:c1:d0:1b:08:b2:64:eb: 4d:60:f8:94:9c:71:82:c2:ce:0f:cd:a8:93:3a:26: 39:1b:ba:36:28:ed:77:50:a9:cc:0a:9c:f5:fd:4a: 7a:a0:4d:b3:83:84:89:b3:8d:6c:0a:95:7f:0e:3d: 73:e1 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 66:38:D0:1B:17:A8:63:02:92:C2:30:B5:63:F1:59:5E:EC:65:8D:38 X509v3 Authority Key Identifier: keyid:DE:E6:23:E2:AF:F7:B0:3A:FE:B9:42:60:34:8C:16:33:B5:4D:90:56 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/3uYj4q_3sDr-uUJgNIwWM7VNkFY.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/dd/9871ff-3f26-4b94-a464-6cc1d3ea832e/1/3uYj4q_3sDr-uUJgNIwWM7VNkFY.mft X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/dd/9871ff-3f26-4b94-a464-6cc1d3ea832e/1/3uYj4q_3sDr-uUJgNIwWM7VNkFY.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 37:13:fd:6c:f5:81:64:8e:98:dd:bd:1c:d0:21:86:69:a6:00: c6:6c:a8:43:ca:b4:e4:d3:08:27:c7:1e:06:b8:24:73:24:70: 62:87:93:b5:53:84:12:1f:d4:44:9f:47:c0:6f:4d:b3:6d:09: 78:b1:cf:6f:0a:83:7c:47:b2:b8:9b:33:9c:94:22:44:b0:b8: 61:71:2f:86:77:e4:cd:f1:58:9f:26:6b:aa:22:57:2d:76:d3: 38:ba:75:dd:ac:88:6e:86:39:e2:2c:ca:aa:ed:46:af:b6:b9: e6:95:72:52:c6:7e:68:96:97:b1:df:ba:ca:c1:a3:24:a3:ec: 3c:f7:c9:ce:37:8a:c1:74:af:27:30:49:f3:21:63:21:e7:9b: b9:f6:d2:f7:61:8a:00:00:d5:e7:a7:fb:60:52:16:d1:50:a7: 93:26:ce:5a:0a:a9:26:2d:91:4e:71:44:ca:a5:04:b2:51:d6: 2a:bd:6b:11:ef:d4:9f:1f:5e:18:dd:a7:03:59:00:d8:b3:5e: 2b:39:ce:e8:29:4e:5b:e1:1a:34:dd:f2:fd:0a:7c:5b:90:68: c1:8b:fd:ba:ef:a7:54:4a:33:5d:b6:1d:b1:1a:37:33:2b:d5: 58:75:64:2e:5c:7c:63:82:9c:85:83:6d:e8:15:2f:b1:20:d1: ff:ec:4e:76 -----BEGIN CERTIFICATE----- MIIFFjCCA/6gAwIBAgISAZn8IY92xGDKIJVY7KD6yQdiMA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKGRlZTYyM2UyYWZmN2IwM2FmZWI5NDI2MDM0OGMxNjMzYjU0 ZDkwNTYwHhcNMjUxMDE5MTEwMTIxWhcNMjUxMDIwMTEwMTIxWjAzMTEwLwYDVQQD Eyg2NjM4ZDAxYjE3YTg2MzAyOTJjMjMwYjU2M2YxNTk1ZWVjNjU4ZDM4MIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAxWClnK94n9yiSS9iqi5iwgU+Q9FD iBjuM6IsfMyrR311dGmWDbnRJwWibjS4J+ZYPIdUKfBxvQ2QH65H1gW9hqhNphzM UOF9g84UhtiqTfi9UshY97256dUIIhYQ1ITJMNJkaPfjs9kRpepEEZdtxRUbvAfO M/gnuaR7icOlqAIuu8QhC+qB+RXyfqEMvjgo6b1KbIkL52R0ln1cwqCU9zdo5pKu e2M2eyx9534ae6GdsyLcDmVcaZfWfprcrcwkCEuLUC/mAix5VsHQGwiyZOtNYPiU nHGCws4PzaiTOiY5G7o2KO13UKnMCpz1/Up6oE2zg4SJs41sCpV/Dj1z4QIDAQAB o4ICIjCCAh4wHQYDVR0OBBYEFGY40BsXqGMCksIwtWPxWV7sZY04MB8GA1UdIwQY MBaAFN7mI+Kv97A6/rlCYDSMFjO1TZBWMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvM3VZajRxXzNzRHItdVVKZ05Jd1dNN1ZOa0ZZLmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC9kZC85ODcxZmYtM2YyNi00Yjk0LWE0NjQt NmNjMWQzZWE4MzJlLzEvM3VZajRxXzNzRHItdVVKZ05Jd1dNN1ZOa0ZZLm1mdDCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC9kZC85ODcxZmYtM2YyNi00Yjk0LWE0NjQtNmNjMWQzZWE4MzJl LzEvM3VZajRxXzNzRHItdVVKZ05Jd1dNN1ZOa0ZZLmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEANxP9bPWB ZI6Y3b0c0CGGaaYAxmyoQ8q05NMIJ8ceBrgkcyRwYoeTtVOEEh/URJ9HwG9Ns20J eLHPbwqDfEeyuJsznJQiRLC4YXEvhnfkzfFYnyZrqiJXLXbTOLp13ayIboY54izK qu1Gr7a55pVyUsZ+aJaXsd+6ysGjJKPsPPfJzjeKwXSvJzBJ8yFjIeebufbS92GK AADV56f7YFIW0VCnkybOWgqpJi2RTnFEyqUEslHWKr1rEe/Unx9eGN2nA1kA2LNe KznO6ClOW+EaNN3y/Qp8W5BowYv9uu+nVEozXbYdsRo3MyvVWHVkLlx8Y4KchYNt 6BUvsSDR/+xOdg== -----END CERTIFICATE-----Generated at Sun Oct 19 18:27:33 2025 by rpki-client