$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/e2/ad3044-cdce-46cf-92c9-a954d053994a/1/1g9F98xLaR_UoxwfHAtPYF13pu8.mft File: 1g9F98xLaR_UoxwfHAtPYF13pu8.mft (raw, json) Hash identifier: KB71F4VDCzcPXQJi9FYZDWGJ8o7h2J2arVbSwJ9DGL0= Subject key identifier: AA:E6:39:BC:82:21:69:8F:B5:75:DA:35:2E:CE:6B:EC:66:0F:E6:82 Authority key identifier: D6:0F:45:F7:CC:4B:69:1F:D4:A3:1C:1F:1C:0B:4F:60:5D:77:A6:EF Certificate issuer: /CN=d60f45f7cc4b691fd4a31c1f1c0b4f605d77a6ef Certificate serial: 0199FD6B41EA0B8EB77813B67B7FD05F3F61 Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/1g9F98xLaR_UoxwfHAtPYF13pu8.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/e2/ad3044-cdce-46cf-92c9-a954d053994a/1/1g9F98xLaR_UoxwfHAtPYF13pu8.mft Manifest number: 16EC Signing time: Sun 19 Oct 2025 17:01:28 +0000 Manifest this update: Sun 19 Oct 2025 17:01:28 +0000 Manifest next update: Mon 20 Oct 2025 17:01:28 +0000 Files and hashes: 1: 1g9F98xLaR_UoxwfHAtPYF13pu8.crl (hash: XQrOcqE061kdGDIJKp4fACpKf/jhFb2shyPUMBplp0s=) 2: GMAT5cnP7VsDriW3_zL3dmojRH8.roa (hash: 9OZgqMWwoj0IlbvwNkLekurnPx7RT1aRlKGSPHOL6N4=) 3: IoE67Ac0pXcZcF9gBBC8VKka1vE.roa (hash: kt4XWZcgrYkLHsaAC2c2z5iyqyhmqC0zJwGvhSrnQ3E=) 4: MnG_2GzorHPsXNp5Vum7-rUjReY.roa (hash: D3z8cv+XlClqN6b2gc/ybPBfC33Ewbb6orbavaJ/jxk=) 5: PPMANDrLvF7lVgznicSOoAT3-3U.roa (hash: goEhx/poAjkzaQRi2RGACZSEuEQ6nJJ0p5PoSp7o6bo=) 6: b5u0PP2LUmpbpNJ4qAdIl3s9IjI.roa (hash: 4ZbWUTDO0hiozFSxacFGW2XCjTl1RPjd3yDPIUYji9M=) 7: jfxb2BR-CQiCSpU8DpDydbDz1b0.roa (hash: fObbuEbq3/zFmHWpgeQlp5JFopCYl+4GEGdq5exW77c=) 8: rrmPFSxVt5xEtowDvlnYGvxrH3s.roa (hash: mhHuydqllyBkMxNXx9HLabM7W+Fte6mEhiiQe0n8fRA=) 9: th1p5jE1fl21GfKXyCflURpVpo0.roa (hash: w4pXoPCT9slYbdDvFiyPewBrsldI3f9m6umM8Wv0SkE=) 10: viBgIC4abJYY7C__L2VefsiYSYI.roa (hash: r+Hi34v0Qt4A/ODVfo4uFHb77CXM38aMXnF2F0o4IcY=) 11: xNr5I0Wokl-j2aBAEkjZmpNRVng.roa (hash: epmYMuuR7FlxzNy/fvLKPn2AzgVlFDZhQf7tXXleECM=) Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/e2/ad3044-cdce-46cf-92c9-a954d053994a/1/1g9F98xLaR_UoxwfHAtPYF13pu8.crl rsync://rpki.ripe.net/repository/DEFAULT/e2/ad3044-cdce-46cf-92c9-a954d053994a/1/1g9F98xLaR_UoxwfHAtPYF13pu8.mft rsync://rpki.ripe.net/repository/DEFAULT/1g9F98xLaR_UoxwfHAtPYF13pu8.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Mon 20 Oct 2025 11:18:59 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:99:fd:6b:41:ea:0b:8e:b7:78:13:b6:7b:7f:d0:5f:3f:61 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=d60f45f7cc4b691fd4a31c1f1c0b4f605d77a6ef Validity Not Before: Oct 19 17:01:28 2025 GMT Not After : Oct 20 17:01:28 2025 GMT Subject: CN=aae639bc8221698fb575da352ece6bec660fe682 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:b4:b7:0b:2e:7d:48:21:2e:c8:d8:fa:c4:53:96: 26:87:79:c8:1a:ce:06:93:69:99:9d:33:9d:6a:f7: c7:eb:84:b8:c0:cd:e6:1d:36:5b:17:34:05:48:2e: 37:9f:64:44:a0:ca:a5:9f:c8:23:cf:6c:53:0b:d7: 80:04:b0:08:a8:e2:6c:60:a4:8f:fd:22:96:72:87: f2:07:a4:ce:c8:7e:70:07:3c:55:1b:26:8f:ef:e4: d9:03:bb:3b:dd:0a:d2:8f:25:26:a2:98:45:86:80: 7a:fd:f6:d1:23:42:8b:ed:0f:b8:d4:2c:0d:94:7e: bc:22:d8:a8:a2:e3:6b:c6:95:fb:f9:45:ac:0d:72: 29:56:95:35:72:6a:8e:75:41:d0:1f:e0:72:b4:8e: 18:f8:7a:58:a1:03:77:ff:f0:4d:ed:77:27:37:13: 08:d8:dc:c6:36:5d:d1:52:3a:5c:2d:5d:1c:1b:79: 5b:97:32:d4:89:5a:59:4d:f7:8a:ef:71:4a:2f:39: e1:13:05:59:c9:09:d8:9d:c3:27:c5:2d:e2:65:45: 0f:bc:3e:2c:ac:64:8a:22:fb:bd:77:3c:73:34:2c: 7f:02:1c:ec:4d:19:f9:3c:94:48:c8:bf:94:1f:82: 09:8b:ba:2c:2c:35:de:1d:bc:2f:cc:39:14:ea:2d: 84:d7 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: AA:E6:39:BC:82:21:69:8F:B5:75:DA:35:2E:CE:6B:EC:66:0F:E6:82 X509v3 Authority Key Identifier: keyid:D6:0F:45:F7:CC:4B:69:1F:D4:A3:1C:1F:1C:0B:4F:60:5D:77:A6:EF X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/1g9F98xLaR_UoxwfHAtPYF13pu8.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/e2/ad3044-cdce-46cf-92c9-a954d053994a/1/1g9F98xLaR_UoxwfHAtPYF13pu8.mft X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/e2/ad3044-cdce-46cf-92c9-a954d053994a/1/1g9F98xLaR_UoxwfHAtPYF13pu8.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 64:12:50:70:2c:61:11:15:79:c6:6a:a8:80:40:c7:2e:be:cc: a9:88:50:8c:37:05:4e:71:90:a6:eb:88:70:9d:16:cc:3d:64: 29:0a:8b:73:e4:28:52:29:67:92:38:8c:cb:1a:3d:6e:cc:1f: 2e:b6:f5:d3:e2:d8:d8:fa:21:46:aa:87:af:c6:93:4c:f4:23: 20:b4:1b:ef:11:76:48:44:af:3c:16:e4:95:30:91:97:ed:30: 11:01:c3:53:4a:cb:36:52:5b:ed:b8:b6:9a:31:9d:e4:b1:de: 1b:d6:d4:39:ec:24:44:70:45:a8:75:c3:a9:63:de:10:58:1b: af:59:c3:f1:93:cb:fd:cb:f2:31:97:35:ac:db:32:8d:55:00: 33:d9:ff:22:bf:ad:53:2a:a1:06:6f:2b:13:ee:99:88:9e:c4: 62:44:b0:97:bd:bd:c1:98:47:5e:5a:4a:51:5f:dc:91:32:5e: 15:2b:66:a5:81:e9:ea:f0:d1:7d:aa:db:4e:44:ff:57:cf:89: c4:23:99:44:f0:18:78:7f:bc:f4:02:eb:9d:f0:83:5a:ec:a0: ac:bb:00:ce:ad:14:57:ba:c8:96:2a:67:45:99:03:35:58:02: 62:91:b5:52:b7:1c:39:02:42:37:f5:ef:38:66:4a:65:13:bd: f7:50:bf:c4 -----BEGIN CERTIFICATE----- MIIFFjCCA/6gAwIBAgISAZn9a0HqC463eBO2e3/QXz9hMA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKGQ2MGY0NWY3Y2M0YjY5MWZkNGEzMWMxZjFjMGI0ZjYwNWQ3 N2E2ZWYwHhcNMjUxMDE5MTcwMTI4WhcNMjUxMDIwMTcwMTI4WjAzMTEwLwYDVQQD EyhhYWU2MzliYzgyMjE2OThmYjU3NWRhMzUyZWNlNmJlYzY2MGZlNjgyMIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAtLcLLn1IIS7I2PrEU5Ymh3nIGs4G k2mZnTOdavfH64S4wM3mHTZbFzQFSC43n2REoMqln8gjz2xTC9eABLAIqOJsYKSP /SKWcofyB6TOyH5wBzxVGyaP7+TZA7s73QrSjyUmophFhoB6/fbRI0KL7Q+41CwN lH68ItioouNrxpX7+UWsDXIpVpU1cmqOdUHQH+BytI4Y+HpYoQN3//BN7XcnNxMI 2NzGNl3RUjpcLV0cG3lblzLUiVpZTfeK73FKLznhEwVZyQnYncMnxS3iZUUPvD4s rGSKIvu9dzxzNCx/AhzsTRn5PJRIyL+UH4IJi7osLDXeHbwvzDkU6i2E1wIDAQAB o4ICIjCCAh4wHQYDVR0OBBYEFKrmObyCIWmPtXXaNS7Oa+xmD+aCMB8GA1UdIwQY MBaAFNYPRffMS2kf1KMcHxwLT2Bdd6bvMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvMWc5Rjk4eExhUl9Vb3h3ZkhBdFBZRjEzcHU4LmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC9lMi9hZDMwNDQtY2RjZS00NmNmLTkyYzkt YTk1NGQwNTM5OTRhLzEvMWc5Rjk4eExhUl9Vb3h3ZkhBdFBZRjEzcHU4Lm1mdDCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC9lMi9hZDMwNDQtY2RjZS00NmNmLTkyYzktYTk1NGQwNTM5OTRh LzEvMWc5Rjk4eExhUl9Vb3h3ZkhBdFBZRjEzcHU4LmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAZBJQcCxh ERV5xmqogEDHLr7MqYhQjDcFTnGQpuuIcJ0WzD1kKQqLc+QoUilnkjiMyxo9bswf Lrb10+LY2PohRqqHr8aTTPQjILQb7xF2SESvPBbklTCRl+0wEQHDU0rLNlJb7bi2 mjGd5LHeG9bUOewkRHBFqHXDqWPeEFgbr1nD8ZPL/cvyMZc1rNsyjVUAM9n/Ir+t UyqhBm8rE+6ZiJ7EYkSwl729wZhHXlpKUV/ckTJeFStmpYHp6vDRfarbTkT/V8+J xCOZRPAYeH+89ALrnfCDWuygrLsAzq0UV7rIlipnRZkDNVgCYpG1UrccOQJCN/Xv OGZKZRO991C/xA== -----END CERTIFICATE-----Generated at Sun Oct 19 20:00:46 2025 by rpki-client