$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/df/01058a-4a82-4818-972d-842858122bbc/1/RklSvBZUQexuLiAQyTPcgw82FzE.mft File: RklSvBZUQexuLiAQyTPcgw82FzE.mft (raw, json) Hash identifier: GX3iS+QU9duxNatBWYOKNDDo6uITAI7SqK52mK6fRkw= Subject key identifier: 0A:07:82:B2:4C:A6:C0:B1:45:D1:06:98:65:6F:90:84:85:F0:1A:A9 Authority key identifier: 46:49:52:BC:16:54:41:EC:6E:2E:20:10:C9:33:DC:83:0F:36:17:31 Certificate issuer: /CN=464952bc165441ec6e2e2010c933dc830f361731 Certificate serial: 019A00DA18EB52FA3D70AF829FF9241AEDF0 Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/RklSvBZUQexuLiAQyTPcgw82FzE.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/df/01058a-4a82-4818-972d-842858122bbc/1/RklSvBZUQexuLiAQyTPcgw82FzE.mft Manifest number: 0A8F Signing time: Mon 20 Oct 2025 09:01:24 +0000 Manifest this update: Mon 20 Oct 2025 09:01:24 +0000 Manifest next update: Tue 21 Oct 2025 09:01:24 +0000 Files and hashes: 1: 7HWHA8UqwHtsqDMBW-DwrAaDDjM.roa (hash: e8s5o0udkcNi/3gr4/Pby8a6BORkIl6Tk5BcUgdqf98=) 2: 8ZU3bGrm9xWhwMuNBNg_sVSf78w.roa (hash: q1BAPF4hVnnZILV3v3GzNcOP1nX7SZBYfnbCOVjjzwo=) 3: 9-Cs-wlSKolkQOZlHuZ6o38xnW8.roa (hash: /LvilRmKOS6giT5Dw0+bvBLFwH/Vk7jUGiOc4qBQkvY=) 4: CH-MNJ62x7kM2_t2iuWi-Pl441k.roa (hash: HaFXnQzr7MPgH+K0peJzoRzHcSdMpsIno7S1dDVTYls=) 5: CshdLYgm8KyBI5ue0kfqXsT_Uys.roa (hash: DVS6FpXLV5zruadQ+b5hngh4jzKnFCNJRTeuOL+rHMo=) 6: F93HK3zZbjyanEiJSO9cArJniew.roa (hash: wrh+x7Klvcmq0ZMqoDo7aM3datdsQCypsCC/kWY8BG4=) 7: RklSvBZUQexuLiAQyTPcgw82FzE.crl (hash: kNjAuBNnW3M5oxre+0pmMG+Ko8VOYoMAdk0n5GwBYOA=) 8: RocZhE1Sgw4wWmm8LnKO4d7f68w.roa (hash: +rys+d7y9dD2VIYL252iXtWKGL/n4lME4L1WtriVBxI=) 9: U47Wz_LD2xLJywbdswHmPzRJpDo.roa (hash: qCq8pw/dLAXcMlcPqPaGHxhAYIuN8gInNQEcnd7HSIs=) 10: bsJ2xZlOkw1plvuA7l4e3XmHypY.roa (hash: 1vESi505hq9zZ4EhI/OkoYePF4oay9Y9KHYuJ7nDjEk=) 11: cSOzcJuJznyp0-yCo16vcwC-SO4.roa (hash: /BcpV3CpFg+yHnaLyG3CeUoFmA/RLptEV35Vt1SRJwQ=) 12: g8u27N4QItUirByGNIpicNOy82Y.roa (hash: 86XD7A3oPGKMoD9IAzlfVhw0nOpZrI3Tfibq7N31K6c=) 13: iH3j8qY1-071YfTwOblznlAQw6s.roa (hash: yME8emyVjusbrBjqemdlgI+CwPOa3VlHZpR5ZeMxUWc=) 14: mGSm6WnPN8htR3E3SqRmvrkDAW0.roa (hash: ma8SoOibhRfVHVvLv4aSGOKoznJfyTFPs8hixxk0hN8=) 15: ryDPDikJ1i_zY_ss9G41qhvN3jc.roa (hash: h94vj7TMlIg5ainHE5mYHmcUUj3Q1WNeWVzGbaI/3Fg=) 16: s34gFp_Dg8YCv8xU55YOYuR_tp0.roa (hash: 6OSop7WtLWi7lLLdg7yDCXvjXq4AkQqEA6GX04GSf58=) Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/df/01058a-4a82-4818-972d-842858122bbc/1/RklSvBZUQexuLiAQyTPcgw82FzE.crl rsync://rpki.ripe.net/repository/DEFAULT/df/01058a-4a82-4818-972d-842858122bbc/1/RklSvBZUQexuLiAQyTPcgw82FzE.mft rsync://rpki.ripe.net/repository/DEFAULT/RklSvBZUQexuLiAQyTPcgw82FzE.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Tue 21 Oct 2025 09:00:58 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9a:00:da:18:eb:52:fa:3d:70:af:82:9f:f9:24:1a:ed:f0 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=464952bc165441ec6e2e2010c933dc830f361731 Validity Not Before: Oct 20 09:01:24 2025 GMT Not After : Oct 21 09:01:24 2025 GMT Subject: CN=0a0782b24ca6c0b145d10698656f908485f01aa9 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:8c:5f:06:2c:6d:73:a1:a5:c7:91:6a:01:1e:fa: a5:6b:df:11:18:1e:35:ea:02:cc:27:d9:f2:74:c2: 11:82:f3:86:52:5c:81:48:af:eb:57:74:ff:db:bd: b4:eb:2d:dd:4f:8e:89:ef:d1:ea:05:1f:30:05:93: 2c:2d:1d:45:57:d2:09:a7:12:85:50:1c:07:42:e1: 86:54:c4:19:90:95:a5:ab:52:63:1f:62:db:e5:12: 9e:ba:f5:10:80:1d:08:27:44:42:c3:96:2a:9c:99: 9e:7e:df:48:ca:81:b6:a9:b9:94:a6:c6:ff:cb:d2: ef:1a:e7:c1:f9:ac:f6:0f:f8:17:d2:e1:d1:97:9b: 15:53:62:90:6d:0d:59:d5:18:48:3f:83:42:bd:2b: 6a:38:b7:aa:5e:40:de:b0:10:78:3c:59:c1:d1:6d: 9c:22:af:18:97:46:fa:1f:ec:dc:e2:19:47:a1:a7: 24:8f:64:7c:8b:fb:db:d5:7a:e8:20:8b:bf:37:1d: f7:4d:d9:c0:74:2d:74:2c:db:35:0b:e0:c0:6d:ce: c9:c5:a8:d8:59:3c:c5:e3:61:99:41:4f:53:1c:55: ad:b6:ec:2f:0d:a1:e3:6f:8b:06:4a:9a:ef:73:14: af:85:4a:f8:ff:03:32:4d:fd:6a:82:34:f5:26:bb: 55:97 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 0A:07:82:B2:4C:A6:C0:B1:45:D1:06:98:65:6F:90:84:85:F0:1A:A9 X509v3 Authority Key Identifier: keyid:46:49:52:BC:16:54:41:EC:6E:2E:20:10:C9:33:DC:83:0F:36:17:31 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/RklSvBZUQexuLiAQyTPcgw82FzE.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/df/01058a-4a82-4818-972d-842858122bbc/1/RklSvBZUQexuLiAQyTPcgw82FzE.mft X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/df/01058a-4a82-4818-972d-842858122bbc/1/RklSvBZUQexuLiAQyTPcgw82FzE.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 4a:fa:0d:b6:d7:22:35:4c:4c:eb:7b:8c:15:b7:16:4f:57:01: 75:c1:ce:90:5f:e8:49:68:66:28:1d:f5:3e:89:5d:db:d0:94: bf:5a:3a:ae:0f:32:83:b7:06:e9:be:7b:87:9d:ed:b4:99:90: 8a:f2:8d:89:1c:99:90:6b:da:9b:ca:8f:fc:39:2f:b7:73:ce: e9:b3:1b:37:d3:5a:25:b6:95:59:35:15:d3:44:66:9b:ab:50: 79:f8:c5:04:a2:ed:b1:bb:ee:ea:69:4e:27:fb:73:0f:44:95: 85:13:89:a4:fa:56:21:24:e1:12:6b:2c:96:48:67:8a:a2:fe: 93:b6:f0:6a:74:90:6a:72:27:b3:95:11:ab:1b:f0:82:fb:12: c0:09:9a:4f:44:25:ef:84:db:86:fd:a0:09:e0:d7:82:51:7e: f8:1e:ff:83:22:e8:13:95:80:94:57:bc:c2:07:39:95:7e:69: f0:79:a8:b8:e9:8f:c2:02:76:7a:80:c5:ba:b8:06:54:a0:41: 74:6a:5e:d6:67:09:6e:25:79:26:11:d1:f4:9d:b5:69:b6:56: b2:5e:9f:0a:b9:6a:47:b1:b6:24:ec:aa:cc:c3:b6:51:fd:67: 01:25:b6:74:40:27:ed:d5:c5:67:80:3c:c9:07:fd:c5:77:7b: db:78:5c:9b -----BEGIN CERTIFICATE----- MIIFFjCCA/6gAwIBAgISAZoA2hjrUvo9cK+Cn/kkGu3wMA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKDQ2NDk1MmJjMTY1NDQxZWM2ZTJlMjAxMGM5MzNkYzgzMGYz NjE3MzEwHhcNMjUxMDIwMDkwMTI0WhcNMjUxMDIxMDkwMTI0WjAzMTEwLwYDVQQD EygwYTA3ODJiMjRjYTZjMGIxNDVkMTA2OTg2NTZmOTA4NDg1ZjAxYWE5MIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAjF8GLG1zoaXHkWoBHvqla98RGB41 6gLMJ9nydMIRgvOGUlyBSK/rV3T/27206y3dT46J79HqBR8wBZMsLR1FV9IJpxKF UBwHQuGGVMQZkJWlq1JjH2Lb5RKeuvUQgB0IJ0RCw5YqnJmeft9IyoG2qbmUpsb/ y9LvGufB+az2D/gX0uHRl5sVU2KQbQ1Z1RhIP4NCvStqOLeqXkDesBB4PFnB0W2c Iq8Yl0b6H+zc4hlHoackj2R8i/vb1XroIIu/Nx33TdnAdC10LNs1C+DAbc7JxajY WTzF42GZQU9THFWttuwvDaHjb4sGSprvcxSvhUr4/wMyTf1qgjT1JrtVlwIDAQAB o4ICIjCCAh4wHQYDVR0OBBYEFAoHgrJMpsCxRdEGmGVvkISF8BqpMB8GA1UdIwQY MBaAFEZJUrwWVEHsbi4gEMkz3IMPNhcxMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvUmtsU3ZCWlVRZXh1TGlBUXlUUGNndzgyRnpFLmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC9kZi8wMTA1OGEtNGE4Mi00ODE4LTk3MmQt ODQyODU4MTIyYmJjLzEvUmtsU3ZCWlVRZXh1TGlBUXlUUGNndzgyRnpFLm1mdDCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC9kZi8wMTA1OGEtNGE4Mi00ODE4LTk3MmQtODQyODU4MTIyYmJj LzEvUmtsU3ZCWlVRZXh1TGlBUXlUUGNndzgyRnpFLmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEASvoNttci NUxM63uMFbcWT1cBdcHOkF/oSWhmKB31Pold29CUv1o6rg8yg7cG6b57h53ttJmQ ivKNiRyZkGvam8qP/Dkvt3PO6bMbN9NaJbaVWTUV00Rmm6tQefjFBKLtsbvu6mlO J/tzD0SVhROJpPpWISThEmsslkhniqL+k7bwanSQanIns5URqxvwgvsSwAmaT0Ql 74Tbhv2gCeDXglF++B7/gyLoE5WAlFe8wgc5lX5p8HmouOmPwgJ2eoDFurgGVKBB dGpe1mcJbiV5JhHR9J21abZWsl6fCrlqR7G2JOyqzMO2Uf1nASW2dEAn7dXFZ4A8 yQf9xXd723hcmw== -----END CERTIFICATE-----Generated at Mon Oct 20 11:32:41 2025 by rpki-client