$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/e7/b41ab6-b9f3-4b4a-9b7b-1ed10954bd96/1/V1PAYpCjcZlNdXcxhoX1vEpTjUc.mft File: V1PAYpCjcZlNdXcxhoX1vEpTjUc.mft (raw, json) Hash identifier: HJ3ndbbIUEM23DbNDWQ62eDn04BGjLGeikZ/HtKHM1w= Subject key identifier: F5:BC:CA:7B:35:3E:C3:15:E6:35:42:00:3D:7D:AB:89:9B:46:1E:FC Authority key identifier: 57:53:C0:62:90:A3:71:99:4D:75:77:31:86:85:F5:BC:4A:53:8D:47 Certificate issuer: /CN=5753c06290a371994d7577318685f5bc4a538d47 Certificate serial: 0199FBEC3619F8B78D1EAB0BEE8BCC6BC3BA Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/V1PAYpCjcZlNdXcxhoX1vEpTjUc.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/e7/b41ab6-b9f3-4b4a-9b7b-1ed10954bd96/1/V1PAYpCjcZlNdXcxhoX1vEpTjUc.mft Manifest number: 12D7 Signing time: Sun 19 Oct 2025 10:03:05 +0000 Manifest this update: Sun 19 Oct 2025 10:03:05 +0000 Manifest next update: Mon 20 Oct 2025 10:03:05 +0000 Files and hashes: 1: 1-2ze8RFqsfXiBAT11ime5104BjY.roa (hash: 1G/91kNwXr6Euhuawe1vb8XkKyyCivckcaN+MUB7G0c=) 2: 5lDpUUbHXzya0fMquFYbFulqqVs.roa (hash: f1hht89a/wconxQu5KNK8QHufJfhYi0HFOvBnekJIq0=) 3: FHAcQ1hSwnBkPa_1eYwrasvDBAI.roa (hash: UEqpRdrSw3UNWb3wNwi2VW+eLR/IeGW0ScqzLsmeYpU=) 4: FeD_-2NSvz_oTh1LHrP44NqzWIo.roa (hash: M0rfgf8nLa/Z7WmSdsaO8N+Wk6yxPhPTCcsAwupLmJk=) 5: G0XtWDoXmf3g4WPOe4oJBWwD53c.roa (hash: ah5ed8JgyczAK0ktQp/XfJNbJde2PQoHxbYeBWCDQq0=) 6: HlClfikOJrfktj0svDKphR0_6Ic.roa (hash: g1qw7C3eBB8cA1eir2ZaMGGhWvD9jq2Y2uAjecDMYHM=) 7: LXaOacmSywqNlfh5CO5J1YXXGmI.roa (hash: jtQHK2Bwk3+TO9AZet3mFNI8IuZDJg2fZaIIhEkYoQM=) 8: OXCR5eZAjAKFe_5_WqZvsLDsIGw.roa (hash: +dX5GIlPaHoX8hOklKsClO3JcTsDNTNWJiq3yrlcruo=) 9: SVRVY-q0OPWhiL6mBd92R9L5Zm4.roa (hash: dI19F02QJ/eVSmcDcyQsUmklhiicL/qqyQKGyXmUBoc=) 10: V1PAYpCjcZlNdXcxhoX1vEpTjUc.crl (hash: iuqzT0yFVcLHlFixlUlcRpoQOGnA/haQD1FeZm3obJs=) 11: Xdc1GXsEPiQ6GE6eHjFDA0ZgS3w.roa (hash: OE+tVEQ0oQcFP5VxqAmEpxiSoF7RE792pp1YSKmB2O0=) 12: ctU4FIR-r7525NdQcQhV07S1InU.roa (hash: AU7Mc04mkVMs25EZU4CCsCrYPVp1VtWzfOi9wTwg8to=) 13: e2eD9qK2hYztM9wMgcHLi8AhZs8.roa (hash: tUPW+7fViLoXv6YzC5FAQqNxsVyrAjo9of3A+F1usKg=) 14: s6UOiaPwRDDgS4GdUQJjrNxDCkA.roa (hash: MfReyFTsbPeeVwKX4SeLCT5vdQejZ0/27SaFtWWlLKo=) 15: valOsPAluNa3RG5X659q6dsU_FA.roa (hash: fkBC+Rvf3Gv+oy6BC36LsnU6WeruMquhW06fi/seA5s=) Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/e7/b41ab6-b9f3-4b4a-9b7b-1ed10954bd96/1/V1PAYpCjcZlNdXcxhoX1vEpTjUc.crl rsync://rpki.ripe.net/repository/DEFAULT/e7/b41ab6-b9f3-4b4a-9b7b-1ed10954bd96/1/V1PAYpCjcZlNdXcxhoX1vEpTjUc.mft rsync://rpki.ripe.net/repository/DEFAULT/V1PAYpCjcZlNdXcxhoX1vEpTjUc.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Mon 20 Oct 2025 06:00:58 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:99:fb:ec:36:19:f8:b7:8d:1e:ab:0b:ee:8b:cc:6b:c3:ba Signature Algorithm: sha256WithRSAEncryption Issuer: CN=5753c06290a371994d7577318685f5bc4a538d47 Validity Not Before: Oct 19 10:03:05 2025 GMT Not After : Oct 20 10:03:05 2025 GMT Subject: CN=f5bcca7b353ec315e63542003d7dab899b461efc Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:e5:55:d0:f6:f1:a6:e2:ad:5d:b1:42:17:79:56: 7a:31:23:06:55:bb:58:1d:5a:93:11:9b:3d:fd:44: 2a:2d:08:51:df:31:93:2a:c8:26:15:e3:71:1c:89: e5:d9:82:52:bc:91:20:46:df:d1:df:5d:ab:6e:0e: 9b:30:d2:74:20:e1:03:67:d2:6b:4a:15:01:91:db: 25:cb:94:09:cf:1b:37:b2:64:e5:33:d4:aa:6c:86: 0d:a6:3d:94:f7:88:26:63:bd:2d:40:7e:5a:e3:1e: d4:4f:f6:b7:36:5c:6d:62:26:3a:ce:a4:25:9e:6c: 64:12:e3:13:32:26:df:59:42:86:17:80:8e:ff:b9: 39:6f:83:e6:0e:03:92:55:ba:a2:e8:9a:c1:16:5c: 13:50:13:f0:21:51:73:b8:88:fd:f4:2c:1d:79:0d: 86:41:ed:6c:a9:c5:b8:91:bc:5e:b7:39:a0:e0:55: 02:9e:21:82:af:67:db:bc:d7:82:a8:fb:77:0b:3a: f9:9c:1a:b5:6b:9e:fb:b6:06:9b:d2:b2:63:a0:8f: b6:36:bd:a7:a4:99:fe:d3:eb:a9:49:72:c7:65:49: b2:41:7b:40:82:37:0b:c9:c2:e7:7d:c7:da:d8:cd: 52:53:03:71:f6:0e:1b:4d:d1:21:78:0b:e0:6d:ce: 8b:9b Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: F5:BC:CA:7B:35:3E:C3:15:E6:35:42:00:3D:7D:AB:89:9B:46:1E:FC X509v3 Authority Key Identifier: keyid:57:53:C0:62:90:A3:71:99:4D:75:77:31:86:85:F5:BC:4A:53:8D:47 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/V1PAYpCjcZlNdXcxhoX1vEpTjUc.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/e7/b41ab6-b9f3-4b4a-9b7b-1ed10954bd96/1/V1PAYpCjcZlNdXcxhoX1vEpTjUc.mft X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/e7/b41ab6-b9f3-4b4a-9b7b-1ed10954bd96/1/V1PAYpCjcZlNdXcxhoX1vEpTjUc.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption aa:c6:50:8b:37:e5:d0:8f:ec:e1:6e:32:b4:e3:46:73:37:4f: ee:6e:bf:f7:9a:a8:ba:04:d1:c3:69:a0:c6:93:b3:13:fa:69: bd:d9:f1:78:b3:28:c0:9b:63:ee:0f:a7:69:27:2b:38:5a:53: 65:f9:bc:da:81:1f:90:96:17:33:72:36:26:ac:b0:57:bc:8d: 44:f7:1e:73:8e:c2:ae:91:e2:b6:75:e7:7f:75:8b:e2:e0:d6: dd:d0:a0:f9:d2:b8:3a:5f:0a:90:21:ea:8b:8d:47:01:f1:de: 3e:ab:79:77:af:80:48:05:df:1a:e8:b8:a8:77:67:97:25:d8: ce:cb:88:10:e3:39:ef:49:4c:ba:8e:08:bd:f3:bd:f2:11:70: 16:da:35:2b:1b:7d:a3:ea:de:47:cd:78:89:f9:f4:ea:d8:f5: 28:a4:42:07:65:05:2c:ec:79:11:0a:c6:9a:5b:87:f5:07:c5: 9d:2d:0d:91:a3:08:f5:d9:ed:e8:59:94:9a:6f:6c:e2:b8:1d: be:7c:78:68:da:37:7f:3e:76:7c:da:6f:da:12:9a:84:6a:fb: fa:4b:65:29:a7:1c:46:e4:2f:80:0e:91:7a:7f:82:41:91:87: d7:ca:33:01:28:19:ed:24:c9:11:38:d7:ee:03:d4:61:91:cd: 3d:28:ed:31 -----BEGIN CERTIFICATE----- MIIFFjCCA/6gAwIBAgISAZn77DYZ+LeNHqsL7ovMa8O6MA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKDU3NTNjMDYyOTBhMzcxOTk0ZDc1NzczMTg2ODVmNWJjNGE1 MzhkNDcwHhcNMjUxMDE5MTAwMzA1WhcNMjUxMDIwMTAwMzA1WjAzMTEwLwYDVQQD EyhmNWJjY2E3YjM1M2VjMzE1ZTYzNTQyMDAzZDdkYWI4OTliNDYxZWZjMIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEA5VXQ9vGm4q1dsUIXeVZ6MSMGVbtY HVqTEZs9/UQqLQhR3zGTKsgmFeNxHInl2YJSvJEgRt/R312rbg6bMNJ0IOEDZ9Jr ShUBkdsly5QJzxs3smTlM9SqbIYNpj2U94gmY70tQH5a4x7UT/a3NlxtYiY6zqQl nmxkEuMTMibfWUKGF4CO/7k5b4PmDgOSVbqi6JrBFlwTUBPwIVFzuIj99CwdeQ2G Qe1sqcW4kbxetzmg4FUCniGCr2fbvNeCqPt3Czr5nBq1a577tgab0rJjoI+2Nr2n pJn+0+upSXLHZUmyQXtAgjcLycLnfcfa2M1SUwNx9g4bTdEheAvgbc6LmwIDAQAB o4ICIjCCAh4wHQYDVR0OBBYEFPW8yns1PsMV5jVCAD19q4mbRh78MB8GA1UdIwQY MBaAFFdTwGKQo3GZTXV3MYaF9bxKU41HMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvVjFQQVlwQ2pjWmxOZFhjeGhvWDF2RXBUalVjLmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC9lNy9iNDFhYjYtYjlmMy00YjRhLTliN2It MWVkMTA5NTRiZDk2LzEvVjFQQVlwQ2pjWmxOZFhjeGhvWDF2RXBUalVjLm1mdDCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC9lNy9iNDFhYjYtYjlmMy00YjRhLTliN2ItMWVkMTA5NTRiZDk2 LzEvVjFQQVlwQ2pjWmxOZFhjeGhvWDF2RXBUalVjLmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAqsZQizfl 0I/s4W4ytONGczdP7m6/95qougTRw2mgxpOzE/ppvdnxeLMowJtj7g+naScrOFpT Zfm82oEfkJYXM3I2JqywV7yNRPcec47CrpHitnXnf3WL4uDW3dCg+dK4Ol8KkCHq i41HAfHePqt5d6+ASAXfGui4qHdnlyXYzsuIEOM570lMuo4IvfO98hFwFto1Kxt9 o+reR814ifn06tj1KKRCB2UFLOx5EQrGmluH9QfFnS0NkaMI9dnt6FmUmm9s4rgd vnx4aNo3fz52fNpv2hKahGr7+ktlKaccRuQvgA6Ren+CQZGH18ozASgZ7STJETjX 7gPUYZHNPSjtMQ== -----END CERTIFICATE-----Generated at Sun Oct 19 15:28:25 2025 by rpki-client