$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/e1/0f9f02-c2ad-4ec8-b4d5-dfbfa3fcf021/1/5L6O_sH7A9ivl5rxy6E6CEWnsLo.mft File: 5L6O_sH7A9ivl5rxy6E6CEWnsLo.mft (raw, json) Hash identifier: 4rEla778X3nD1Hd+ROh2TYVS74TVUPaAwpB5m5LfmMU= Subject key identifier: CE:90:64:FD:EB:D0:BD:EF:E0:95:E4:51:0A:B2:80:B3:05:E0:68:4B Authority key identifier: E4:BE:8E:FE:C1:FB:03:D8:AF:97:9A:F1:CB:A1:3A:08:45:A7:B0:BA Certificate issuer: /CN=e4be8efec1fb03d8af979af1cba13a0845a7b0ba Certificate serial: 0199FDD98301C1E7AD19D336A2E4B232DC84 Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/5L6O_sH7A9ivl5rxy6E6CEWnsLo.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/e1/0f9f02-c2ad-4ec8-b4d5-dfbfa3fcf021/1/5L6O_sH7A9ivl5rxy6E6CEWnsLo.mft Manifest number: 0BE4 Signing time: Sun 19 Oct 2025 19:01:54 +0000 Manifest this update: Sun 19 Oct 2025 19:01:54 +0000 Manifest next update: Mon 20 Oct 2025 19:01:54 +0000 Files and hashes: 1: 2m_CYVmLsPzF7bcN6vIid84YZD8.roa (hash: LBmz6BkcC+hYAgg9NpyTpTiVYvW2FI/a+Z33OiNH3bM=) 2: 4nVbm_9mW8-MAn0I_kGjdBfxhVw.roa (hash: pTL9FLQm2ArdSOx4IvTJl5dYC4wcCTYCswuw3GEGHMQ=) 3: 5L6O_sH7A9ivl5rxy6E6CEWnsLo.crl (hash: Ixjl2e1+t71KhZsnRqITcNJdFuDsZkrX2mzN9YtHqUo=) 4: ASUGNfdEr-zmHuBMKbmczWEEyX0.roa (hash: XbBf6Nfds25faGeda9A9EZrA0jUpRsOTRIO73TfrGdU=) 5: D_RGKNjU3HO1804H_N4lL39f8xU.roa (hash: lQxsMyLpAGFJHo/y+xtaq8v1/ZEVry9ym0LdrZC/Bgk=) 6: Di4BCmfwCebJmpiiwQVl8kD1SGY.roa (hash: YROnCwrXQNQ5Na/T+Qstm6PeSLYo1KpF7+7yHOQYHZY=) 7: IpmNqXNW_slvomPPNDBgUsOEzfM.roa (hash: Pw8rvzKx3ysNgK3+6i7f6vpgrH3WD3WqD3kHoDoxu9U=) 8: IrnZpWugwiVaDWE0Y8y2HTk6myM.roa (hash: hz4dzGEJlp9nAI/PksWqX4be/cNB9cFXoUk0RTppUW4=) 9: UPL7qImi1Ys3kJpNeUneyjua3iE.roa (hash: yEbc7GI9w/HHKG7S49YH0IbZWjyzBWFPN0Ij4so55ao=) 10: Wqi1dLZsHvoMXUpSlZaZNHPgS_4.roa (hash: uMbe0TM0fIuYtnHf63Llp9sJ+CZVXJ/tOzlQU2AOjts=) 11: gqYJ1QlxZp2sfbvxF5yVPiDZ3Dk.roa (hash: +mkHl1F4HLXN9PfWQktZtYiROfsgXfptEmlNuP4F0GM=) 12: hrJ9G8LdPfpuv4HEnlrj0UM1FZI.roa (hash: Ap/wGOk300z33ESWLkwykljx6YcmZDQ+kuaPYGOBuOE=) 13: ip51KpcMdfOcRWLVf2HbT1-y1Tk.roa (hash: w96a29aqdZpAZsW1TalxljppYBFpY8XCQQF21I+O+bg=) 14: qOKY-IzakK8b3r-fGGAM7SuFUFM.roa (hash: 0xmS3lTVgR47MEU89O0ODLmZ+nEhlRcq1hkGVTaLD7U=) 15: u_PvNoZGGKwKo1fIPAvA4pNGOWE.roa (hash: 7nleymXLPmClcPELIrjirAmjx3u5krkfwTmE5v3abBQ=) Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/e1/0f9f02-c2ad-4ec8-b4d5-dfbfa3fcf021/1/5L6O_sH7A9ivl5rxy6E6CEWnsLo.crl rsync://rpki.ripe.net/repository/DEFAULT/e1/0f9f02-c2ad-4ec8-b4d5-dfbfa3fcf021/1/5L6O_sH7A9ivl5rxy6E6CEWnsLo.mft rsync://rpki.ripe.net/repository/DEFAULT/5L6O_sH7A9ivl5rxy6E6CEWnsLo.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Mon 20 Oct 2025 19:01:54 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:99:fd:d9:83:01:c1:e7:ad:19:d3:36:a2:e4:b2:32:dc:84 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=e4be8efec1fb03d8af979af1cba13a0845a7b0ba Validity Not Before: Oct 19 19:01:54 2025 GMT Not After : Oct 20 19:01:54 2025 GMT Subject: CN=ce9064fdebd0bdefe095e4510ab280b305e0684b Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:b2:2d:9e:b3:85:7f:a1:aa:e0:2e:0f:a6:62:47: 3b:ba:9b:27:1c:2f:39:da:3c:5f:2b:66:c0:8d:03: 57:61:0b:ad:ba:66:52:03:aa:a8:1e:a0:ef:f6:66: e6:e3:93:46:d0:be:a1:b3:ed:af:97:a4:65:8c:4b: a5:dc:53:01:c5:0b:28:b6:db:8c:0c:60:ff:e2:88: 0d:9a:50:35:e8:57:55:86:53:bd:50:14:72:c5:a8: fd:67:3a:9a:78:a9:c6:54:a6:41:cc:3d:10:02:94: 5f:b1:c0:e5:0f:b3:71:b7:5c:67:9b:82:25:d0:52: a4:71:d6:22:ae:20:97:08:c7:9c:a0:e8:68:65:54: a6:67:70:8d:a8:ea:52:39:77:1a:7f:d6:6f:f6:f2: 40:c8:10:91:5f:28:dd:ae:70:89:2c:da:8f:b2:0b: ce:8e:23:70:c6:47:be:c6:24:fd:45:ad:09:0a:8f: 15:5f:9e:55:bd:15:c9:78:f7:32:69:f7:85:b3:1c: a6:04:13:cc:4c:c3:7e:ed:56:d0:a4:d9:d6:24:d0: c6:13:f2:a9:9d:65:10:a0:e4:ee:3b:a8:b5:9f:b9: c8:04:81:aa:c7:f2:2e:eb:a8:57:26:b3:c6:f9:05: 0f:1c:e0:c8:b8:bd:a8:c6:25:d0:ae:1f:c2:aa:2d: dd:61 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: CE:90:64:FD:EB:D0:BD:EF:E0:95:E4:51:0A:B2:80:B3:05:E0:68:4B X509v3 Authority Key Identifier: keyid:E4:BE:8E:FE:C1:FB:03:D8:AF:97:9A:F1:CB:A1:3A:08:45:A7:B0:BA X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/5L6O_sH7A9ivl5rxy6E6CEWnsLo.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/e1/0f9f02-c2ad-4ec8-b4d5-dfbfa3fcf021/1/5L6O_sH7A9ivl5rxy6E6CEWnsLo.mft X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/e1/0f9f02-c2ad-4ec8-b4d5-dfbfa3fcf021/1/5L6O_sH7A9ivl5rxy6E6CEWnsLo.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 7c:4c:52:ef:86:44:82:e2:81:1f:f4:fb:1f:59:0e:6c:cc:d7: 3a:15:6d:4a:e5:d6:33:fc:3b:68:85:9c:a0:da:19:f6:d9:92: 6f:7e:1f:0d:f3:cc:d6:4c:c2:ef:21:5a:e9:cf:8c:88:9f:3d: 27:de:8b:7d:b0:31:fc:0c:f7:17:f3:93:e7:e3:3a:d6:a2:4e: 5f:cd:11:17:1c:e0:35:4c:61:fa:69:63:34:ec:d4:22:77:42: 65:ad:8e:d8:4e:6a:2f:81:1a:99:c3:65:1d:fd:b0:e3:fc:44: 1c:4c:51:32:55:15:83:2a:90:9d:3e:f5:ad:52:e4:30:5f:09: b4:60:08:0a:63:96:43:11:99:6b:ac:bc:c5:2b:52:22:f1:5c: 89:8c:59:89:0c:b4:82:6a:9e:15:6f:59:f6:ad:fa:9a:84:c5: 8f:1a:a4:61:a6:61:fa:1b:07:2b:6f:c1:96:c0:35:c2:b4:78: 7a:ab:e3:16:e7:b3:3e:06:2c:c0:99:20:4a:07:b8:fb:0f:fd: 7e:e7:a6:02:2f:2b:49:30:92:cd:02:46:36:60:16:6e:52:a7: 82:e4:07:47:07:1b:89:eb:42:f6:fc:60:fa:b1:d8:66:43:41: fd:28:2e:ba:c7:d5:12:67:05:5c:aa:37:d1:08:0c:1c:21:1a: b7:ad:6b:47 -----BEGIN CERTIFICATE----- MIIFFjCCA/6gAwIBAgISAZn92YMBweetGdM2ouSyMtyEMA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKGU0YmU4ZWZlYzFmYjAzZDhhZjk3OWFmMWNiYTEzYTA4NDVh N2IwYmEwHhcNMjUxMDE5MTkwMTU0WhcNMjUxMDIwMTkwMTU0WjAzMTEwLwYDVQQD EyhjZTkwNjRmZGViZDBiZGVmZTA5NWU0NTEwYWIyODBiMzA1ZTA2ODRiMIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAsi2es4V/oargLg+mYkc7upsnHC85 2jxfK2bAjQNXYQutumZSA6qoHqDv9mbm45NG0L6hs+2vl6RljEul3FMBxQsottuM DGD/4ogNmlA16FdVhlO9UBRyxaj9ZzqaeKnGVKZBzD0QApRfscDlD7Nxt1xnm4Il 0FKkcdYiriCXCMecoOhoZVSmZ3CNqOpSOXcaf9Zv9vJAyBCRXyjdrnCJLNqPsgvO jiNwxke+xiT9Ra0JCo8VX55VvRXJePcyafeFsxymBBPMTMN+7VbQpNnWJNDGE/Kp nWUQoOTuO6i1n7nIBIGqx/Iu66hXJrPG+QUPHODIuL2oxiXQrh/Cqi3dYQIDAQAB o4ICIjCCAh4wHQYDVR0OBBYEFM6QZP3r0L3v4JXkUQqygLMF4GhLMB8GA1UdIwQY MBaAFOS+jv7B+wPYr5ea8cuhOghFp7C6MA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvNUw2T19zSDdBOWl2bDVyeHk2RTZDRVduc0xvLmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC9lMS8wZjlmMDItYzJhZC00ZWM4LWI0ZDUt ZGZiZmEzZmNmMDIxLzEvNUw2T19zSDdBOWl2bDVyeHk2RTZDRVduc0xvLm1mdDCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC9lMS8wZjlmMDItYzJhZC00ZWM4LWI0ZDUtZGZiZmEzZmNmMDIx LzEvNUw2T19zSDdBOWl2bDVyeHk2RTZDRVduc0xvLmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAfExS74ZE guKBH/T7H1kObMzXOhVtSuXWM/w7aIWcoNoZ9tmSb34fDfPM1kzC7yFa6c+MiJ89 J96LfbAx/Az3F/OT5+M61qJOX80RFxzgNUxh+mljNOzUIndCZa2O2E5qL4EamcNl Hf2w4/xEHExRMlUVgyqQnT71rVLkMF8JtGAICmOWQxGZa6y8xStSIvFciYxZiQy0 gmqeFW9Z9q36moTFjxqkYaZh+hsHK2/BlsA1wrR4eqvjFuezPgYswJkgSge4+w/9 fuemAi8rSTCSzQJGNmAWblKnguQHRwcbietC9vxg+rHYZkNB/SguusfVEmcFXKo3 0QgMHCEat61rRw== -----END CERTIFICATE-----Generated at Mon Oct 20 02:07:49 2025 by rpki-client