$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/e5/c4e5a0-8219-4ff9-8287-1f4bea23e4c7/1/AWJv_YAOr6M2vfNDFB8D98OTw2Q.mft File: AWJv_YAOr6M2vfNDFB8D98OTw2Q.mft (raw, json) Hash identifier: EvQw3jiU/DPzuPH8LsmPlM52r7OiOhBS7xFF5CAfqlQ= Subject key identifier: 97:53:91:D9:CA:10:3C:7C:EA:3C:23:0A:40:69:9D:5B:75:1B:D1:6E Authority key identifier: 01:62:6F:FD:80:0E:AF:A3:36:BD:F3:43:14:1F:03:F7:C3:93:C3:64 Certificate issuer: /CN=01626ffd800eafa336bdf343141f03f7c393c364 Certificate serial: 019A02C76C8A839CF9C9C8B46AE927D1B726 Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/AWJv_YAOr6M2vfNDFB8D98OTw2Q.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/e5/c4e5a0-8219-4ff9-8287-1f4bea23e4c7/1/AWJv_YAOr6M2vfNDFB8D98OTw2Q.mft Manifest number: 1428 Signing time: Mon 20 Oct 2025 18:00:15 +0000 Manifest this update: Mon 20 Oct 2025 18:00:15 +0000 Manifest next update: Tue 21 Oct 2025 18:00:15 +0000 Files and hashes: 1: 5brKbRBtOvHFjh0oXn8r8X9Yoww.roa (hash: ACQA/vy+zy4fT5JbE8/TavE1wLY971r5N9JADwPEgrU=) 2: 5f4jHn1pLp9_czy0P6q4mWQPuaQ.roa (hash: 3KM64Cf6ndit+2Kg00oB3Tn7DU/3A/UJsq/nZfbmrTw=) 3: AWJv_YAOr6M2vfNDFB8D98OTw2Q.crl (hash: 86UlqzvpTBbC6sadAriSk75/RjWXdsSJ03xur8nuOg0=) 4: DOQPFseUooqpRadfc9Jx4JU6a5w.roa (hash: XAqWMnzc6s03+/9ahgtWZZS99wqgCO9uHPxIAengots=) 5: HUhMVW-ldLEfTap6Snf3A4DJkEU.roa (hash: BWPDA7ah1ktjRpynxF0766anW0jKmETqpySALyHpL1I=) 6: KQ6n4tDni3AIbl89TiA9LShR5J4.roa (hash: eJSTrL5nCsUccTE0LUUEIBRIdvXEaKFzbIAwyimw6Ls=) 7: OrF2xG8avuxGrpmOXZN3cT6uOd4.roa (hash: 6sBq02Bpl0iKdz4R0G8yzMetYTxfTK9ZttAM0+HPHcY=) 8: TlLzQFaA8VlRrAgPC7RAijqNra0.roa (hash: SoMB+UVUymjveuF3MvkPc6BzZ0mDzrz28rZ+mOfkhhw=) 9: Un_m0DbVRENrUueiG3ELv6Kx-eE.roa (hash: pEXnje18ssNBz+sY/hTtrPTkAvEMGt9WYJcpE39pmUM=) 10: VOYB184l4I5HKOOxR4bYnxvGzZs.roa (hash: mdiqaccT7rJ4NJ3jvspjR5ZxSCjb6Tgu2CjLTSJb1Us=) 11: at_SsqmuruHw3U3ih5ZvkPERAo4.roa (hash: qgllsDkXSoqmopmK6Nvv+gOUGdbl9WK4/RlYS45trQE=) 12: mr-HNjr6kVeCJqK27hiMeoGu7wo.roa (hash: 2cCwRolIlWawdY4pJgJJRXgW9VztAAcC6pZFSIFR/7s=) 13: zkX0tVSTFsoyaxd_5uUsOhnJd-4.roa (hash: +7/YlZRCmdBXU3YPbp3jELJ7uYVAAvsXumfUvYl8oRk=) Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/e5/c4e5a0-8219-4ff9-8287-1f4bea23e4c7/1/AWJv_YAOr6M2vfNDFB8D98OTw2Q.crl rsync://rpki.ripe.net/repository/DEFAULT/e5/c4e5a0-8219-4ff9-8287-1f4bea23e4c7/1/AWJv_YAOr6M2vfNDFB8D98OTw2Q.mft rsync://rpki.ripe.net/repository/DEFAULT/AWJv_YAOr6M2vfNDFB8D98OTw2Q.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Tue 21 Oct 2025 18:00:15 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9a:02:c7:6c:8a:83:9c:f9:c9:c8:b4:6a:e9:27:d1:b7:26 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=01626ffd800eafa336bdf343141f03f7c393c364 Validity Not Before: Oct 20 18:00:15 2025 GMT Not After : Oct 21 18:00:15 2025 GMT Subject: CN=975391d9ca103c7cea3c230a40699d5b751bd16e Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:ae:83:e2:b8:03:d6:e5:0a:88:ae:ac:33:1c:d8: cd:c5:9b:35:4f:5c:11:d6:3a:bc:a5:1e:66:7a:25: 6f:44:53:cb:4f:ec:51:66:cd:85:e1:3d:23:f5:fd: eb:cb:0e:78:b5:5a:92:55:e4:22:46:e2:4b:96:7b: 3a:b4:41:26:3e:00:9d:5c:17:20:48:33:0a:47:7e: 8d:cc:b7:d1:68:8d:2e:e9:b2:b9:cb:fe:a6:48:b2: 21:34:45:22:27:52:73:f7:95:8a:79:77:81:65:d4: 5d:8c:38:6e:01:12:4e:df:38:51:44:29:08:a2:e0: 7e:5e:e3:ef:a1:04:3b:f4:8b:30:35:87:15:a4:d5: 0d:63:92:ae:52:63:3e:9b:3f:b4:a9:de:00:07:7e: 8b:40:00:42:87:b9:71:ee:fb:09:44:be:df:97:3e: 34:28:ea:70:68:58:e8:64:f1:cb:fe:f7:10:ae:a5: 23:82:72:c7:7b:a7:88:fd:ed:2c:99:fe:59:32:21: 18:b8:85:7f:57:a5:38:ee:fb:26:93:df:18:08:c5: 17:b0:a2:5b:0e:f8:1c:d8:cf:95:0b:ff:f3:b1:03: f2:a7:0a:1b:b3:41:15:b5:ec:41:7d:84:30:30:6f: e4:e9:3f:20:0f:dd:78:c4:4f:3f:fe:15:9b:5b:94: d3:09 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 97:53:91:D9:CA:10:3C:7C:EA:3C:23:0A:40:69:9D:5B:75:1B:D1:6E X509v3 Authority Key Identifier: keyid:01:62:6F:FD:80:0E:AF:A3:36:BD:F3:43:14:1F:03:F7:C3:93:C3:64 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/AWJv_YAOr6M2vfNDFB8D98OTw2Q.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/e5/c4e5a0-8219-4ff9-8287-1f4bea23e4c7/1/AWJv_YAOr6M2vfNDFB8D98OTw2Q.mft X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/e5/c4e5a0-8219-4ff9-8287-1f4bea23e4c7/1/AWJv_YAOr6M2vfNDFB8D98OTw2Q.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 5e:84:95:06:e7:99:8b:e8:0b:77:06:46:ec:71:72:c1:58:a6: 1e:b1:22:f3:84:d7:cc:fe:75:ce:19:c8:9f:15:5a:21:44:74: 30:56:6f:37:55:a3:fd:45:59:bb:fc:7a:18:48:4d:77:06:65: 68:02:d3:ab:9a:bf:4a:ad:63:6f:17:15:b3:33:53:4f:1b:04: 67:34:30:e8:8b:f3:19:d9:e8:48:6e:f0:b6:8e:1b:0e:17:26: 15:a0:ca:d5:57:13:11:6c:ed:d4:b2:1e:3f:c6:68:13:68:71: 92:09:b1:b4:c5:8e:b3:cf:f1:ec:d2:1e:fc:df:15:64:19:02: 54:94:c0:5d:dc:a5:6e:80:a2:20:55:fc:94:40:ed:00:db:52: 3d:80:0e:6b:fb:00:11:88:fc:13:4f:fb:53:d1:1a:24:65:80: 67:51:1a:1d:d9:4c:21:af:77:e9:a3:2a:cf:74:73:df:ae:a0: d1:57:f5:b6:be:c0:0c:aa:20:6a:17:c7:37:d8:76:29:c5:d1: 1a:3b:d3:e2:19:b1:1d:6f:95:2b:1b:18:bc:57:e4:79:7f:c2: f9:06:63:cc:46:69:53:2b:1a:b1:67:dc:a5:25:3a:85:c3:08: c9:a7:fb:f9:29:5c:58:50:40:d3:f2:f6:c6:ca:38:b9:37:22: f1:9e:cf:a1 -----BEGIN CERTIFICATE----- MIIFFjCCA/6gAwIBAgISAZoCx2yKg5z5yci0aukn0bcmMA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKDAxNjI2ZmZkODAwZWFmYTMzNmJkZjM0MzE0MWYwM2Y3YzM5 M2MzNjQwHhcNMjUxMDIwMTgwMDE1WhcNMjUxMDIxMTgwMDE1WjAzMTEwLwYDVQQD Eyg5NzUzOTFkOWNhMTAzYzdjZWEzYzIzMGE0MDY5OWQ1Yjc1MWJkMTZlMIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAroPiuAPW5QqIrqwzHNjNxZs1T1wR 1jq8pR5meiVvRFPLT+xRZs2F4T0j9f3ryw54tVqSVeQiRuJLlns6tEEmPgCdXBcg SDMKR36NzLfRaI0u6bK5y/6mSLIhNEUiJ1Jz95WKeXeBZdRdjDhuARJO3zhRRCkI ouB+XuPvoQQ79IswNYcVpNUNY5KuUmM+mz+0qd4AB36LQABCh7lx7vsJRL7flz40 KOpwaFjoZPHL/vcQrqUjgnLHe6eI/e0smf5ZMiEYuIV/V6U47vsmk98YCMUXsKJb Dvgc2M+VC//zsQPypwobs0EVtexBfYQwMG/k6T8gD914xE8//hWbW5TTCQIDAQAB o4ICIjCCAh4wHQYDVR0OBBYEFJdTkdnKEDx86jwjCkBpnVt1G9FuMB8GA1UdIwQY MBaAFAFib/2ADq+jNr3zQxQfA/fDk8NkMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvQVdKdl9ZQU9yNk0ydmZOREZCOEQ5OE9UdzJRLmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC9lNS9jNGU1YTAtODIxOS00ZmY5LTgyODct MWY0YmVhMjNlNGM3LzEvQVdKdl9ZQU9yNk0ydmZOREZCOEQ5OE9UdzJRLm1mdDCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC9lNS9jNGU1YTAtODIxOS00ZmY5LTgyODctMWY0YmVhMjNlNGM3 LzEvQVdKdl9ZQU9yNk0ydmZOREZCOEQ5OE9UdzJRLmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAXoSVBueZ i+gLdwZG7HFywVimHrEi84TXzP51zhnInxVaIUR0MFZvN1Wj/UVZu/x6GEhNdwZl aALTq5q/Sq1jbxcVszNTTxsEZzQw6IvzGdnoSG7wto4bDhcmFaDK1VcTEWzt1LIe P8ZoE2hxkgmxtMWOs8/x7NIe/N8VZBkCVJTAXdylboCiIFX8lEDtANtSPYAOa/sA EYj8E0/7U9EaJGWAZ1EaHdlMIa936aMqz3Rz366g0Vf1tr7ADKogahfHN9h2KcXR GjvT4hmxHW+VKxsYvFfkeX/C+QZjzEZpUysasWfcpSU6hcMIyaf7+SlcWFBA0/L2 xso4uTci8Z7PoQ== -----END CERTIFICATE-----Generated at Tue Oct 21 02:29:05 2025 by rpki-client