$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/dd/9f09aa-dd5e-4e06-b28e-e871b21790de/1/9zQlckyuJz8pYwYNyGXG8LBCXK0.mft File: 9zQlckyuJz8pYwYNyGXG8LBCXK0.mft (raw, json) Hash identifier: 5hliFGrqP1eZ0wngfEg5L69I6Yiiu95huohJ5VsOjjA= Subject key identifier: 6B:1B:51:96:19:96:30:28:D8:AD:E5:B6:18:B7:AB:4F:F8:44:BF:CC Authority key identifier: F7:34:25:72:4C:AE:27:3F:29:63:06:0D:C8:65:C6:F0:B0:42:5C:AD Certificate issuer: /CN=f73425724cae273f2963060dc865c6f0b0425cad Certificate serial: 0199FE46B7E4C8D51C4721FC8C69DBC50CC5 Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/9zQlckyuJz8pYwYNyGXG8LBCXK0.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/dd/9f09aa-dd5e-4e06-b28e-e871b21790de/1/9zQlckyuJz8pYwYNyGXG8LBCXK0.mft Manifest number: A5 Signing time: Sun 19 Oct 2025 21:01:11 +0000 Manifest this update: Sun 19 Oct 2025 21:01:11 +0000 Manifest next update: Mon 20 Oct 2025 21:01:11 +0000 Files and hashes: 1: 4pRecLSQ-xIl4IPEZzRcqIax3-I.roa (hash: H+a8jrfauVXAPTlOBPXoA0IxSm3rMjg8mh86PIxmueU=) 2: 9zQlckyuJz8pYwYNyGXG8LBCXK0.crl (hash: 2/2hylqotMmuGf8qRvbCW18ZJBxQRaYWgOrEp5urAio=) 3: HS9PpWT4FCSSstlIOFCaEuTYhZA.roa (hash: dTpJ+Vqey+wyIsJCiKM1TfllRZ7B3eMpNoAigDi5hoo=) 4: JNDj7IkhbQ_3xrbEz4uAXQ1Yv3Q.roa (hash: Wl0WwrfiuzHjyAyUMW+l+iPzUUYZzp7CP7Vher9u5s8=) 5: TDs3SCHkSwxi2Xb9E5-5lxldSWA.roa (hash: UmMaqKmCtjb0oErlYVHbczcMBZ32+2r0z5hmDOfKCCM=) 6: V6wlyE81nOSUZZNevO5fwFq_yuI.roa (hash: BJWgiCN26bDpqIeJaukxrOIxIn7K1eaqwr8a29JJlYg=) 7: Y6E3ztUNuP-EkxZVJnP3QMV8f34.roa (hash: 5ZMvfHfzXA3N5iMX/egkwzxlZHE1t5ELeXRMtB3b6GA=) 8: g_xhFlxALcLse_-Oj4PBePBZJnY.roa (hash: ZZWn8HGPLGkcu+1b7mxcw+bmNtXcMX/Z/tSj0BCyotA=) 9: kRIa94MWYWrUOVwjc9XA73SAMOA.roa (hash: CLFC01EOAmxOj0g9Emkl9wa15kGO2yyt+4qXoqbGCJI=) 10: wMrCQWEm2lPKU1aAl1mFhi-JWnE.roa (hash: hT7L1jOf2Ub3XumgetpA4h0Ys4xPjaNTHFtmr8cP4hQ=) Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/dd/9f09aa-dd5e-4e06-b28e-e871b21790de/1/9zQlckyuJz8pYwYNyGXG8LBCXK0.crl rsync://rpki.ripe.net/repository/DEFAULT/dd/9f09aa-dd5e-4e06-b28e-e871b21790de/1/9zQlckyuJz8pYwYNyGXG8LBCXK0.mft rsync://rpki.ripe.net/repository/DEFAULT/9zQlckyuJz8pYwYNyGXG8LBCXK0.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Mon 20 Oct 2025 15:00:58 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:99:fe:46:b7:e4:c8:d5:1c:47:21:fc:8c:69:db:c5:0c:c5 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=f73425724cae273f2963060dc865c6f0b0425cad Validity Not Before: Oct 19 21:01:11 2025 GMT Not After : Oct 20 21:01:11 2025 GMT Subject: CN=6b1b519619963028d8ade5b618b7ab4ff844bfcc Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:d2:d7:40:f9:ab:14:06:90:c6:0a:53:93:d3:ae: 58:72:ec:37:6b:a1:e2:aa:37:85:05:b0:f9:3e:73: 6b:89:42:9c:bb:2f:4f:c6:a1:02:97:18:be:7e:f6: 8b:b7:d8:fc:78:5e:60:bc:e5:fb:fa:8e:8d:58:3e: 8d:a6:fa:0e:a0:7a:2f:ec:48:62:da:f1:1f:5b:33: 75:22:fe:af:8a:5a:3a:5d:38:3e:0e:a5:c9:a0:83: cd:50:e8:17:65:70:98:d0:b3:35:6a:4c:df:dd:ca: 71:7a:b3:c6:46:54:3c:2a:de:85:b2:87:6e:18:c8: 11:5e:3d:83:73:d2:cd:92:a2:75:8e:54:eb:2f:a3: 62:ce:32:d3:d3:c7:7d:7f:b2:48:34:ca:b9:a8:d8: 41:69:81:66:24:a3:8a:56:71:a4:cf:9d:b8:e3:63: a4:22:07:5f:5c:60:49:27:64:0a:11:7d:89:fe:89: 32:43:f8:1e:7e:eb:2f:71:d8:93:2d:78:26:d7:4e: dc:30:82:eb:bc:54:04:1c:43:df:cc:7f:f2:fc:d2: be:e8:28:07:51:d5:3e:00:1d:31:79:a6:5c:05:bc: aa:c4:b0:82:93:86:4d:0b:db:ea:11:4e:e3:ba:8c: 3d:4a:0b:3d:dd:05:bb:74:85:54:e7:35:f3:9b:1a: 5d:33 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 6B:1B:51:96:19:96:30:28:D8:AD:E5:B6:18:B7:AB:4F:F8:44:BF:CC X509v3 Authority Key Identifier: keyid:F7:34:25:72:4C:AE:27:3F:29:63:06:0D:C8:65:C6:F0:B0:42:5C:AD X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/9zQlckyuJz8pYwYNyGXG8LBCXK0.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/dd/9f09aa-dd5e-4e06-b28e-e871b21790de/1/9zQlckyuJz8pYwYNyGXG8LBCXK0.mft X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/dd/9f09aa-dd5e-4e06-b28e-e871b21790de/1/9zQlckyuJz8pYwYNyGXG8LBCXK0.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 5f:43:f3:c2:db:6f:ad:cb:b6:a4:ee:24:a1:84:06:a1:bf:98: 99:85:69:1d:3f:14:e5:5c:eb:e5:a6:6c:e7:05:67:a9:1a:2b: 0d:1f:2e:fa:dd:b7:85:28:9c:64:55:6c:d3:8e:78:b1:0a:e0: 5c:27:40:a0:fd:e4:96:1b:64:a1:d0:c1:35:2b:e7:d0:04:63: 00:92:b6:75:ec:69:77:32:fa:5d:07:06:61:17:42:d4:b9:a2: 4b:f2:26:3f:02:0d:7b:f9:0c:fb:d1:d6:57:73:be:b1:68:d8: eb:b8:13:96:25:51:a8:90:12:9b:66:06:9f:8e:5a:99:37:13: d4:82:d3:22:9b:15:11:26:66:2c:4d:85:c5:69:da:4a:85:d9: e3:2f:ee:0c:9e:b5:b8:7f:ba:30:f7:e3:d1:a5:f0:36:be:69: a3:82:63:b3:72:35:c3:50:74:74:fc:11:4e:fe:d4:b1:ad:5f: f0:a6:75:75:31:36:07:e9:ec:45:2b:c4:89:35:b8:73:6b:50: 32:0c:10:68:d0:3d:46:b4:08:be:8f:a7:da:71:49:ac:b5:c6: 2a:7c:a5:e3:5f:28:11:7e:f8:c0:67:e2:7d:74:0e:1b:00:a8: 14:38:46:fc:74:21:f6:7b:58:4c:d0:1a:70:2d:13:8d:dc:92: c2:91:5a:7c -----BEGIN CERTIFICATE----- MIIFFjCCA/6gAwIBAgISAZn+RrfkyNUcRyH8jGnbxQzFMA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKGY3MzQyNTcyNGNhZTI3M2YyOTYzMDYwZGM4NjVjNmYwYjA0 MjVjYWQwHhcNMjUxMDE5MjEwMTExWhcNMjUxMDIwMjEwMTExWjAzMTEwLwYDVQQD Eyg2YjFiNTE5NjE5OTYzMDI4ZDhhZGU1YjYxOGI3YWI0ZmY4NDRiZmNjMIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEA0tdA+asUBpDGClOT065Ycuw3a6Hi qjeFBbD5PnNriUKcuy9PxqEClxi+fvaLt9j8eF5gvOX7+o6NWD6NpvoOoHov7Ehi 2vEfWzN1Iv6vilo6XTg+DqXJoIPNUOgXZXCY0LM1akzf3cpxerPGRlQ8Kt6Fsodu GMgRXj2Dc9LNkqJ1jlTrL6NizjLT08d9f7JINMq5qNhBaYFmJKOKVnGkz52442Ok IgdfXGBJJ2QKEX2J/okyQ/gefusvcdiTLXgm107cMILrvFQEHEPfzH/y/NK+6CgH UdU+AB0xeaZcBbyqxLCCk4ZNC9vqEU7juow9Sgs93QW7dIVU5zXzmxpdMwIDAQAB o4ICIjCCAh4wHQYDVR0OBBYEFGsbUZYZljAo2K3lthi3q0/4RL/MMB8GA1UdIwQY MBaAFPc0JXJMric/KWMGDchlxvCwQlytMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvOXpRbGNreXVKejhwWXdZTnlHWEc4TEJDWEswLmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC9kZC85ZjA5YWEtZGQ1ZS00ZTA2LWIyOGUt ZTg3MWIyMTc5MGRlLzEvOXpRbGNreXVKejhwWXdZTnlHWEc4TEJDWEswLm1mdDCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC9kZC85ZjA5YWEtZGQ1ZS00ZTA2LWIyOGUtZTg3MWIyMTc5MGRl LzEvOXpRbGNreXVKejhwWXdZTnlHWEc4TEJDWEswLmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAX0Pzwttv rcu2pO4koYQGob+YmYVpHT8U5Vzr5aZs5wVnqRorDR8u+t23hSicZFVs0454sQrg XCdAoP3klhtkodDBNSvn0ARjAJK2dexpdzL6XQcGYRdC1LmiS/ImPwINe/kM+9HW V3O+sWjY67gTliVRqJASm2YGn45amTcT1ILTIpsVESZmLE2FxWnaSoXZ4y/uDJ61 uH+6MPfj0aXwNr5po4Jjs3I1w1B0dPwRTv7Usa1f8KZ1dTE2B+nsRSvEiTW4c2tQ MgwQaNA9RrQIvo+n2nFJrLXGKnyl418oEX74wGfifXQOGwCoFDhG/HQh9ntYTNAa cC0TjdySwpFafA== -----END CERTIFICATE-----Generated at Mon Oct 20 00:19:05 2025 by rpki-client