$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/e5/c4e5a0-8219-4ff9-8287-1f4bea23e4c7/1/AWJv_YAOr6M2vfNDFB8D98OTw2Q.mft File: AWJv_YAOr6M2vfNDFB8D98OTw2Q.mft (raw, json) Hash identifier: M4un25sUO6NYJ46tv0wI615AGv34YIoRTvOlTJsPHRc= Subject key identifier: F6:1B:1A:EF:EF:B9:7B:B6:85:BF:88:8C:09:ED:47:DC:67:A7:95:72 Authority key identifier: 01:62:6F:FD:80:0E:AF:A3:36:BD:F3:43:14:1F:03:F7:C3:93:C3:64 Certificate issuer: /CN=01626ffd800eafa336bdf343141f03f7c393c364 Certificate serial: 019A00DA4D8723F96A8B9ECE5D9E64FDCE4D Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/AWJv_YAOr6M2vfNDFB8D98OTw2Q.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/e5/c4e5a0-8219-4ff9-8287-1f4bea23e4c7/1/AWJv_YAOr6M2vfNDFB8D98OTw2Q.mft Manifest number: 1427 Signing time: Mon 20 Oct 2025 09:01:37 +0000 Manifest this update: Mon 20 Oct 2025 09:01:37 +0000 Manifest next update: Tue 21 Oct 2025 09:01:37 +0000 Files and hashes: 1: 5brKbRBtOvHFjh0oXn8r8X9Yoww.roa (hash: ACQA/vy+zy4fT5JbE8/TavE1wLY971r5N9JADwPEgrU=) 2: 5f4jHn1pLp9_czy0P6q4mWQPuaQ.roa (hash: 3KM64Cf6ndit+2Kg00oB3Tn7DU/3A/UJsq/nZfbmrTw=) 3: AWJv_YAOr6M2vfNDFB8D98OTw2Q.crl (hash: /XA4DooyJAlfntAb6ittUhJQdMTaFsjQexHsIBFXcdY=) 4: DOQPFseUooqpRadfc9Jx4JU6a5w.roa (hash: XAqWMnzc6s03+/9ahgtWZZS99wqgCO9uHPxIAengots=) 5: HUhMVW-ldLEfTap6Snf3A4DJkEU.roa (hash: BWPDA7ah1ktjRpynxF0766anW0jKmETqpySALyHpL1I=) 6: KQ6n4tDni3AIbl89TiA9LShR5J4.roa (hash: eJSTrL5nCsUccTE0LUUEIBRIdvXEaKFzbIAwyimw6Ls=) 7: OrF2xG8avuxGrpmOXZN3cT6uOd4.roa (hash: 6sBq02Bpl0iKdz4R0G8yzMetYTxfTK9ZttAM0+HPHcY=) 8: TlLzQFaA8VlRrAgPC7RAijqNra0.roa (hash: SoMB+UVUymjveuF3MvkPc6BzZ0mDzrz28rZ+mOfkhhw=) 9: Un_m0DbVRENrUueiG3ELv6Kx-eE.roa (hash: pEXnje18ssNBz+sY/hTtrPTkAvEMGt9WYJcpE39pmUM=) 10: VOYB184l4I5HKOOxR4bYnxvGzZs.roa (hash: mdiqaccT7rJ4NJ3jvspjR5ZxSCjb6Tgu2CjLTSJb1Us=) 11: at_SsqmuruHw3U3ih5ZvkPERAo4.roa (hash: qgllsDkXSoqmopmK6Nvv+gOUGdbl9WK4/RlYS45trQE=) 12: mr-HNjr6kVeCJqK27hiMeoGu7wo.roa (hash: 2cCwRolIlWawdY4pJgJJRXgW9VztAAcC6pZFSIFR/7s=) 13: zkX0tVSTFsoyaxd_5uUsOhnJd-4.roa (hash: +7/YlZRCmdBXU3YPbp3jELJ7uYVAAvsXumfUvYl8oRk=) Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/e5/c4e5a0-8219-4ff9-8287-1f4bea23e4c7/1/AWJv_YAOr6M2vfNDFB8D98OTw2Q.crl rsync://rpki.ripe.net/repository/DEFAULT/e5/c4e5a0-8219-4ff9-8287-1f4bea23e4c7/1/AWJv_YAOr6M2vfNDFB8D98OTw2Q.mft rsync://rpki.ripe.net/repository/DEFAULT/AWJv_YAOr6M2vfNDFB8D98OTw2Q.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Tue 21 Oct 2025 09:00:58 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9a:00:da:4d:87:23:f9:6a:8b:9e:ce:5d:9e:64:fd:ce:4d Signature Algorithm: sha256WithRSAEncryption Issuer: CN=01626ffd800eafa336bdf343141f03f7c393c364 Validity Not Before: Oct 20 09:01:37 2025 GMT Not After : Oct 21 09:01:37 2025 GMT Subject: CN=f61b1aefefb97bb685bf888c09ed47dc67a79572 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:e6:72:58:1e:9e:cf:a8:29:3c:90:f2:5c:b0:a4: d0:4b:75:60:aa:36:42:94:47:79:98:28:c7:9d:43: ef:93:c2:2d:27:68:da:57:af:93:b5:ae:fd:82:86: 86:22:47:89:5f:e7:35:05:69:46:f2:f7:45:06:17: fc:bb:f0:b9:eb:b6:a4:3d:51:b9:00:b3:f8:a7:ba: 34:8c:e0:43:c5:9c:3b:13:b7:2a:6c:76:e6:7d:55: d5:ae:0b:68:bd:06:99:23:bb:83:66:06:24:7a:d4: 49:24:d8:72:06:5c:e7:0d:ce:3d:9c:c2:f7:e9:b5: cf:77:0f:34:e9:06:8d:00:01:2b:a3:ff:96:a3:33: 61:01:4a:71:8d:65:c7:bb:31:fc:4b:00:85:b0:3c: 14:5a:c8:a9:fa:2e:a7:50:7b:b6:68:4c:c9:f3:d7: 0b:74:08:55:46:2a:b4:8e:b3:d6:0d:16:03:ca:83: 5a:27:b6:c7:1c:23:57:aa:42:20:cd:e5:8b:49:76: 80:6a:fe:d0:52:d4:30:e9:a2:6d:21:75:16:72:a1: 6b:6c:4f:cd:83:c8:d8:90:73:2f:34:1c:fa:ba:af: f8:cc:06:c7:47:57:84:5d:41:65:aa:ed:70:17:b5: 6f:a6:e0:74:3f:31:c9:25:7c:07:83:48:90:8e:90: c2:d9 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: F6:1B:1A:EF:EF:B9:7B:B6:85:BF:88:8C:09:ED:47:DC:67:A7:95:72 X509v3 Authority Key Identifier: keyid:01:62:6F:FD:80:0E:AF:A3:36:BD:F3:43:14:1F:03:F7:C3:93:C3:64 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/AWJv_YAOr6M2vfNDFB8D98OTw2Q.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/e5/c4e5a0-8219-4ff9-8287-1f4bea23e4c7/1/AWJv_YAOr6M2vfNDFB8D98OTw2Q.mft X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/e5/c4e5a0-8219-4ff9-8287-1f4bea23e4c7/1/AWJv_YAOr6M2vfNDFB8D98OTw2Q.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 4c:3e:5c:2d:d2:14:85:44:bf:83:3b:2b:3e:7e:4f:8e:72:df: 32:b8:a0:1c:2e:71:e7:39:31:59:53:1e:08:ca:62:76:2b:d6: ca:67:95:00:ca:f8:14:62:4e:e8:44:f6:93:50:b8:e2:69:5d: c8:e4:0f:9a:21:76:c1:66:fb:e4:48:31:6b:57:ec:9d:73:03: fc:81:7b:d8:93:31:a3:8d:17:c5:96:91:d8:12:be:9c:a9:e4: f0:2f:e9:37:94:2d:23:0c:bf:e2:ac:61:b3:c3:90:00:58:d1: 11:0f:ea:52:52:79:50:6d:3e:b4:21:dc:b3:91:14:e4:07:3f: 1a:3c:38:f5:79:ef:a3:0c:eb:9e:b3:fb:2f:1e:e4:99:e0:b4: ba:f0:11:b6:1d:30:42:bd:6c:60:b8:c4:43:7f:86:88:9a:b4: 48:26:5d:8a:cc:b3:ae:27:26:4e:fc:dd:77:86:d5:60:fe:80: bb:67:bf:d0:25:bb:6e:72:ae:28:fe:4b:73:ef:c7:93:cd:52: 18:58:0d:f6:e3:d3:95:e8:76:35:7e:50:e7:2c:a3:a9:eb:2b: b6:e6:a3:58:69:0a:e6:50:8d:9f:93:74:17:db:f5:74:6a:6d: 6a:67:c0:0c:04:69:40:e7:40:dd:75:f4:4c:e7:d0:e8:6e:5b: 3e:71:84:a6 -----BEGIN CERTIFICATE----- MIIFFjCCA/6gAwIBAgISAZoA2k2HI/lqi57OXZ5k/c5NMA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKDAxNjI2ZmZkODAwZWFmYTMzNmJkZjM0MzE0MWYwM2Y3YzM5 M2MzNjQwHhcNMjUxMDIwMDkwMTM3WhcNMjUxMDIxMDkwMTM3WjAzMTEwLwYDVQQD EyhmNjFiMWFlZmVmYjk3YmI2ODViZjg4OGMwOWVkNDdkYzY3YTc5NTcyMIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEA5nJYHp7PqCk8kPJcsKTQS3VgqjZC lEd5mCjHnUPvk8ItJ2jaV6+Tta79goaGIkeJX+c1BWlG8vdFBhf8u/C567akPVG5 ALP4p7o0jOBDxZw7E7cqbHbmfVXVrgtovQaZI7uDZgYketRJJNhyBlznDc49nML3 6bXPdw806QaNAAEro/+WozNhAUpxjWXHuzH8SwCFsDwUWsip+i6nUHu2aEzJ89cL dAhVRiq0jrPWDRYDyoNaJ7bHHCNXqkIgzeWLSXaAav7QUtQw6aJtIXUWcqFrbE/N g8jYkHMvNBz6uq/4zAbHR1eEXUFlqu1wF7VvpuB0PzHJJXwHg0iQjpDC2QIDAQAB o4ICIjCCAh4wHQYDVR0OBBYEFPYbGu/vuXu2hb+IjAntR9xnp5VyMB8GA1UdIwQY MBaAFAFib/2ADq+jNr3zQxQfA/fDk8NkMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvQVdKdl9ZQU9yNk0ydmZOREZCOEQ5OE9UdzJRLmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC9lNS9jNGU1YTAtODIxOS00ZmY5LTgyODct MWY0YmVhMjNlNGM3LzEvQVdKdl9ZQU9yNk0ydmZOREZCOEQ5OE9UdzJRLm1mdDCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC9lNS9jNGU1YTAtODIxOS00ZmY5LTgyODctMWY0YmVhMjNlNGM3 LzEvQVdKdl9ZQU9yNk0ydmZOREZCOEQ5OE9UdzJRLmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEATD5cLdIU hUS/gzsrPn5PjnLfMrigHC5x5zkxWVMeCMpidivWymeVAMr4FGJO6ET2k1C44mld yOQPmiF2wWb75Egxa1fsnXMD/IF72JMxo40XxZaR2BK+nKnk8C/pN5QtIwy/4qxh s8OQAFjREQ/qUlJ5UG0+tCHcs5EU5Ac/Gjw49XnvowzrnrP7Lx7kmeC0uvARth0w Qr1sYLjEQ3+GiJq0SCZdisyzricmTvzdd4bVYP6Au2e/0CW7bnKuKP5Lc+/Hk81S GFgN9uPTleh2NX5Q5yyjqesrtuajWGkK5lCNn5N0F9v1dGptamfADARpQOdA3XX0 TOfQ6G5bPnGEpg== -----END CERTIFICATE-----Generated at Mon Oct 20 15:01:56 2025 by rpki-client