$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/df/01058a-4a82-4818-972d-842858122bbc/1/RklSvBZUQexuLiAQyTPcgw82FzE.mft File: RklSvBZUQexuLiAQyTPcgw82FzE.mft (raw, json) Hash identifier: PgDfLVO7ypiUC0mQNKRsMYDYG6yijylMIhaSj9aFSOg= Subject key identifier: C4:B6:7A:81:7D:C1:FF:EF:DB:DE:50:AC:7C:F5:83:25:A6:74:5A:1D Authority key identifier: 46:49:52:BC:16:54:41:EC:6E:2E:20:10:C9:33:DC:83:0F:36:17:31 Certificate issuer: /CN=464952bc165441ec6e2e2010c933dc830f361731 Certificate serial: 0199FEEB92A7D755D02428C293253395FF78 Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/RklSvBZUQexuLiAQyTPcgw82FzE.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/df/01058a-4a82-4818-972d-842858122bbc/1/RklSvBZUQexuLiAQyTPcgw82FzE.mft Manifest number: 0A8E Signing time: Mon 20 Oct 2025 00:01:15 +0000 Manifest this update: Mon 20 Oct 2025 00:01:15 +0000 Manifest next update: Tue 21 Oct 2025 00:01:15 +0000 Files and hashes: 1: 7HWHA8UqwHtsqDMBW-DwrAaDDjM.roa (hash: e8s5o0udkcNi/3gr4/Pby8a6BORkIl6Tk5BcUgdqf98=) 2: 8ZU3bGrm9xWhwMuNBNg_sVSf78w.roa (hash: q1BAPF4hVnnZILV3v3GzNcOP1nX7SZBYfnbCOVjjzwo=) 3: 9-Cs-wlSKolkQOZlHuZ6o38xnW8.roa (hash: /LvilRmKOS6giT5Dw0+bvBLFwH/Vk7jUGiOc4qBQkvY=) 4: CH-MNJ62x7kM2_t2iuWi-Pl441k.roa (hash: HaFXnQzr7MPgH+K0peJzoRzHcSdMpsIno7S1dDVTYls=) 5: CshdLYgm8KyBI5ue0kfqXsT_Uys.roa (hash: DVS6FpXLV5zruadQ+b5hngh4jzKnFCNJRTeuOL+rHMo=) 6: F93HK3zZbjyanEiJSO9cArJniew.roa (hash: wrh+x7Klvcmq0ZMqoDo7aM3datdsQCypsCC/kWY8BG4=) 7: RklSvBZUQexuLiAQyTPcgw82FzE.crl (hash: E3mdD2N46FWkrVRmBai5Zb5N7Om6Nc58XukGGKXwg+Q=) 8: RocZhE1Sgw4wWmm8LnKO4d7f68w.roa (hash: +rys+d7y9dD2VIYL252iXtWKGL/n4lME4L1WtriVBxI=) 9: U47Wz_LD2xLJywbdswHmPzRJpDo.roa (hash: qCq8pw/dLAXcMlcPqPaGHxhAYIuN8gInNQEcnd7HSIs=) 10: bsJ2xZlOkw1plvuA7l4e3XmHypY.roa (hash: 1vESi505hq9zZ4EhI/OkoYePF4oay9Y9KHYuJ7nDjEk=) 11: cSOzcJuJznyp0-yCo16vcwC-SO4.roa (hash: /BcpV3CpFg+yHnaLyG3CeUoFmA/RLptEV35Vt1SRJwQ=) 12: g8u27N4QItUirByGNIpicNOy82Y.roa (hash: 86XD7A3oPGKMoD9IAzlfVhw0nOpZrI3Tfibq7N31K6c=) 13: iH3j8qY1-071YfTwOblznlAQw6s.roa (hash: yME8emyVjusbrBjqemdlgI+CwPOa3VlHZpR5ZeMxUWc=) 14: mGSm6WnPN8htR3E3SqRmvrkDAW0.roa (hash: ma8SoOibhRfVHVvLv4aSGOKoznJfyTFPs8hixxk0hN8=) 15: ryDPDikJ1i_zY_ss9G41qhvN3jc.roa (hash: h94vj7TMlIg5ainHE5mYHmcUUj3Q1WNeWVzGbaI/3Fg=) 16: s34gFp_Dg8YCv8xU55YOYuR_tp0.roa (hash: 6OSop7WtLWi7lLLdg7yDCXvjXq4AkQqEA6GX04GSf58=) Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/df/01058a-4a82-4818-972d-842858122bbc/1/RklSvBZUQexuLiAQyTPcgw82FzE.crl rsync://rpki.ripe.net/repository/DEFAULT/df/01058a-4a82-4818-972d-842858122bbc/1/RklSvBZUQexuLiAQyTPcgw82FzE.mft rsync://rpki.ripe.net/repository/DEFAULT/RklSvBZUQexuLiAQyTPcgw82FzE.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Mon 20 Oct 2025 20:00:59 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:99:fe:eb:92:a7:d7:55:d0:24:28:c2:93:25:33:95:ff:78 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=464952bc165441ec6e2e2010c933dc830f361731 Validity Not Before: Oct 20 00:01:15 2025 GMT Not After : Oct 21 00:01:15 2025 GMT Subject: CN=c4b67a817dc1ffefdbde50ac7cf58325a6745a1d Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:a3:dc:32:0e:c2:4c:33:65:4a:e8:7f:c6:64:0a: 1a:48:ce:fb:10:93:34:f3:f6:cd:4a:5e:aa:2a:c8: 81:e5:7d:1c:f1:9c:ad:8a:de:d1:40:01:d8:b2:ff: e5:bd:15:d6:c8:c5:c5:17:f7:50:a4:eb:b8:1d:d2: f0:e6:f6:07:11:22:1c:17:05:de:22:8a:b2:36:6d: fd:cb:bd:10:2c:91:e4:52:62:a8:66:47:04:c4:5b: 58:28:22:30:0b:35:18:8f:e8:5e:99:38:c6:8e:72: bd:42:39:13:5f:08:ae:e4:6f:50:27:a4:01:44:3a: b6:b9:2e:a4:40:eb:26:44:d8:71:fb:94:41:68:e7: 00:75:72:4e:a2:44:82:17:89:73:55:67:be:40:6d: bb:ff:94:63:95:bd:3b:f1:93:c4:2b:c0:ab:06:45: 1d:69:e4:f5:7a:2d:76:97:6d:90:0a:ce:8e:e8:ac: 6f:34:ff:17:15:cf:c8:6a:ff:ca:49:ea:51:d0:11: d7:15:e9:82:a6:15:f4:2b:22:f7:16:11:cd:b2:b8: c2:8f:2c:9a:34:91:83:03:48:a9:a9:0f:1c:8f:c3: 49:0f:d0:33:69:fe:00:7e:d8:fc:2f:d5:60:23:03: cb:33:3b:5f:c9:ca:3f:46:0f:73:2a:d5:36:0b:1c: ce:ff Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: C4:B6:7A:81:7D:C1:FF:EF:DB:DE:50:AC:7C:F5:83:25:A6:74:5A:1D X509v3 Authority Key Identifier: keyid:46:49:52:BC:16:54:41:EC:6E:2E:20:10:C9:33:DC:83:0F:36:17:31 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/RklSvBZUQexuLiAQyTPcgw82FzE.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/df/01058a-4a82-4818-972d-842858122bbc/1/RklSvBZUQexuLiAQyTPcgw82FzE.mft X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/df/01058a-4a82-4818-972d-842858122bbc/1/RklSvBZUQexuLiAQyTPcgw82FzE.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 46:5c:0c:79:58:0d:d0:53:83:bd:9d:68:99:44:31:a3:e8:90: 94:53:13:7e:01:9d:87:a4:88:50:77:ec:fc:5b:e0:30:f3:6c: b8:48:36:7f:bb:d4:7e:89:09:fa:e2:28:2a:93:44:fe:07:e1: a1:82:ad:f8:6a:1d:90:b1:a5:d4:c5:39:90:0d:33:e6:cc:f9: 54:d0:0d:df:48:c8:db:59:33:63:cd:4a:eb:02:d4:be:af:5e: 73:2b:57:93:07:b9:0b:f1:35:34:1f:a0:18:3a:92:fd:5f:95: f3:71:df:23:52:f7:63:97:9c:6e:6b:4a:d8:0c:be:43:a9:7f: ed:f1:0f:76:d3:91:1a:55:2c:00:ba:b6:1c:3f:c5:df:eb:fc: 82:97:d0:d9:d0:39:27:9a:d7:8f:16:75:d5:8b:c1:6e:83:58: ee:31:0a:09:16:c5:1f:ff:d3:10:28:e2:4b:c5:56:b4:ec:76: 14:7d:a0:d8:12:28:af:af:39:03:ce:75:9f:45:52:e0:5e:9e: 3d:d8:18:fb:aa:d6:ba:2b:5c:37:33:ce:c6:2e:6f:aa:62:f3: 84:70:21:d1:a9:54:97:0e:c1:56:72:15:9a:cf:72:68:eb:fa: 41:36:6a:02:8b:14:5c:bf:51:34:8f:8f:4c:80:d9:51:19:ea: 54:9e:52:c8 -----BEGIN CERTIFICATE----- MIIFFjCCA/6gAwIBAgISAZn+65Kn11XQJCjCkyUzlf94MA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKDQ2NDk1MmJjMTY1NDQxZWM2ZTJlMjAxMGM5MzNkYzgzMGYz NjE3MzEwHhcNMjUxMDIwMDAwMTE1WhcNMjUxMDIxMDAwMTE1WjAzMTEwLwYDVQQD EyhjNGI2N2E4MTdkYzFmZmVmZGJkZTUwYWM3Y2Y1ODMyNWE2NzQ1YTFkMIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAo9wyDsJMM2VK6H/GZAoaSM77EJM0 8/bNSl6qKsiB5X0c8Zytit7RQAHYsv/lvRXWyMXFF/dQpOu4HdLw5vYHESIcFwXe IoqyNm39y70QLJHkUmKoZkcExFtYKCIwCzUYj+hemTjGjnK9QjkTXwiu5G9QJ6QB RDq2uS6kQOsmRNhx+5RBaOcAdXJOokSCF4lzVWe+QG27/5Rjlb078ZPEK8CrBkUd aeT1ei12l22QCs6O6KxvNP8XFc/Iav/KSepR0BHXFemCphX0KyL3FhHNsrjCjyya NJGDA0ipqQ8cj8NJD9Azaf4Aftj8L9VgIwPLMztfyco/Rg9zKtU2CxzO/wIDAQAB o4ICIjCCAh4wHQYDVR0OBBYEFMS2eoF9wf/v295QrHz1gyWmdFodMB8GA1UdIwQY MBaAFEZJUrwWVEHsbi4gEMkz3IMPNhcxMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvUmtsU3ZCWlVRZXh1TGlBUXlUUGNndzgyRnpFLmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC9kZi8wMTA1OGEtNGE4Mi00ODE4LTk3MmQt ODQyODU4MTIyYmJjLzEvUmtsU3ZCWlVRZXh1TGlBUXlUUGNndzgyRnpFLm1mdDCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC9kZi8wMTA1OGEtNGE4Mi00ODE4LTk3MmQtODQyODU4MTIyYmJj LzEvUmtsU3ZCWlVRZXh1TGlBUXlUUGNndzgyRnpFLmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEARlwMeVgN 0FODvZ1omUQxo+iQlFMTfgGdh6SIUHfs/FvgMPNsuEg2f7vUfokJ+uIoKpNE/gfh oYKt+GodkLGl1MU5kA0z5sz5VNAN30jI21kzY81K6wLUvq9ecytXkwe5C/E1NB+g GDqS/V+V83HfI1L3Y5ecbmtK2Ay+Q6l/7fEPdtORGlUsALq2HD/F3+v8gpfQ2dA5 J5rXjxZ11YvBboNY7jEKCRbFH//TECjiS8VWtOx2FH2g2BIor685A851n0VS4F6e PdgY+6rWuitcNzPOxi5vqmLzhHAh0alUlw7BVnIVms9yaOv6QTZqAosUXL9RNI+P TIDZURnqVJ5SyA== -----END CERTIFICATE-----Generated at Mon Oct 20 04:48:19 2025 by rpki-client