$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/e9/129564-f1db-4dc5-8906-6fcdcd5ab660/1/D_gMvf4YNUo8_bov4HmqLrxY3NQ.mft File: D_gMvf4YNUo8_bov4HmqLrxY3NQ.mft (raw, json) Hash identifier: MS6UE43bW/8m7Ft8XUFLTAbSy9+m9B86dpbaTIYUe2A= Subject key identifier: 1D:AC:65:84:ED:C7:FF:13:83:7B:DD:CA:39:5C:72:CB:57:17:54:E2 Authority key identifier: 0F:F8:0C:BD:FE:18:35:4A:3C:FD:BA:2F:E0:79:AA:2E:BC:58:DC:D4 Certificate issuer: /CN=0ff80cbdfe18354a3cfdba2fe079aa2ebc58dcd4 Certificate serial: 0199FB45F5CAC840BF3C11B9022706B07305 Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/D_gMvf4YNUo8_bov4HmqLrxY3NQ.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/e9/129564-f1db-4dc5-8906-6fcdcd5ab660/1/D_gMvf4YNUo8_bov4HmqLrxY3NQ.mft Manifest number: 11E9 Signing time: Sun 19 Oct 2025 07:01:30 +0000 Manifest this update: Sun 19 Oct 2025 07:01:30 +0000 Manifest next update: Mon 20 Oct 2025 07:01:30 +0000 Files and hashes: 1: 36cneJws6HIb-_f2mS0l66nxLX4.roa (hash: cv3+x1XjkIvksuAO0LUX+L5FwL88LDLqWblnVZ+rq3Q=) 2: 8AuUB3FxiHV1blKo-b6xY84eohk.roa (hash: Kg20ZKTXvW1uV16aDD+SNuojir6sQqoC1ASnSIoi3uI=) 3: ALwZhIzMltcNA93bXSkzknwg_14.roa (hash: 8/oCBG94vIxN2asbJtnpsK13+hX56C8+2PdARaHhKJk=) 4: DEkBy5NY_LBNS4NnY8NdFK8rzcA.roa (hash: +sPTotcuWF+CjCR1a5iOtYDxd/TTy8d8sIEt72jDjC4=) 5: D_gMvf4YNUo8_bov4HmqLrxY3NQ.crl (hash: aMrmAk+mDDGBF1je9vEBNgsRP9X9EBe3wzrG9ssPWc0=) 6: E4H11vqlDsWfsKfFnRaByGFpFjE.roa (hash: uk2Eyw6ijxdod6j6CVfKRX8Y6AcwVXdvoKqS9Zsbg6E=) 7: GK6sSI8I6Ck9l0KxlxiTx3CR9nI.roa (hash: Q0nMWgUs5VqHeZOmvrfOcHnb629+mFC+BasITyYx9y4=) 8: MKy6XWAYP3zxh7zwKNcWOiDPR-k.roa (hash: R+XM0slVwo6Gs1r7U5p3g+xfmCVjwikkwCXqqmpC4RI=) 9: P1pvZ_QpHLCNhor-GrDuuGuoxWU.roa (hash: j2Q3VKziFV5MgEQnuqrclJc+B8ndKOKWRmqLDbcpuQk=) 10: TBO-3J5fI4kjR6nBhhGm9Q7Fxxs.roa (hash: GxuPpCFAskC5A0RoCelobXY9HbueDhOq2tEj0W9aVGs=) 11: XDcWQfbkwvZ4pO52-Rl-lOrB_iw.roa (hash: ht+KVJK83F1lQo8Wp6/sNr0N7S9QYHVd5SEP7bnL0Q4=) 12: fegZDjvnxgRurYo7N2dE56doPrs.roa (hash: G1Sc4jTNIBp0OhDx/ZdY4eKnulZIfcXzqIWbYkym44I=) 13: hNPAJBJQcRtE-SJjyoGEKsljmXA.roa (hash: cxILOvyPqMN2Kz+W/9LGBBCgK1NOKrZ4exJ0ZNKhTeQ=) 14: pDnsD5Q1hTzMW2k6uZ4MVh9ZizU.roa (hash: Ug4pqyVy1hepE30KQdlNpPdKYvaVRsEaEW6Bq45BqsI=) 15: rY4Fp-Dk7WkrCbqk7rdEiiNEmj4.roa (hash: rnMK9FKk4H5lXqqOHDb/rM0tbc6UoAnWXexKMf+rh/I=) 16: svu4gQ0pPgVBKQU6339vQZbXEAQ.roa (hash: RAHfZT/d13ig7RU8lQNXL5nHpSOa8CZeRzLwR9xpJH8=) Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/e9/129564-f1db-4dc5-8906-6fcdcd5ab660/1/D_gMvf4YNUo8_bov4HmqLrxY3NQ.crl rsync://rpki.ripe.net/repository/DEFAULT/e9/129564-f1db-4dc5-8906-6fcdcd5ab660/1/D_gMvf4YNUo8_bov4HmqLrxY3NQ.mft rsync://rpki.ripe.net/repository/DEFAULT/D_gMvf4YNUo8_bov4HmqLrxY3NQ.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Mon 20 Oct 2025 06:00:58 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:99:fb:45:f5:ca:c8:40:bf:3c:11:b9:02:27:06:b0:73:05 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=0ff80cbdfe18354a3cfdba2fe079aa2ebc58dcd4 Validity Not Before: Oct 19 07:01:30 2025 GMT Not After : Oct 20 07:01:30 2025 GMT Subject: CN=1dac6584edc7ff13837bddca395c72cb571754e2 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:d7:84:43:f3:2e:34:70:2e:25:58:85:76:60:9e: f4:99:e9:21:83:05:17:0a:03:25:dc:fa:1a:30:aa: 08:3e:82:33:9c:59:dd:ff:81:6d:88:9d:a5:6e:2b: 3c:80:17:92:45:3e:48:b5:a1:2c:fe:90:c4:60:e7: 8d:78:51:9c:c9:55:e8:b9:bc:25:01:62:4d:ed:33: ec:55:9f:36:86:d7:86:8c:c6:f9:26:2f:30:cb:31: 5c:28:76:28:74:ca:36:7f:91:db:23:35:d5:f0:a0: 3c:07:34:84:1a:68:5c:04:29:ae:cc:cf:51:63:68: 33:86:ce:07:6b:b6:69:60:60:e9:54:b2:10:86:6e: a1:60:8f:62:11:fb:29:80:e8:3b:94:b9:19:75:4b: 37:cc:9f:98:d9:75:59:8a:c6:89:96:f7:04:3a:e0: 35:66:07:b3:45:0f:b4:b9:59:5f:05:cf:d3:f6:a9: 06:8c:d8:b9:d8:33:5e:46:ab:f5:7d:e5:ee:2b:a2: cf:4f:e2:56:ca:dd:9f:6d:ca:fc:5f:f8:35:01:a1: 36:a5:ae:44:ed:3b:d7:72:55:20:f8:40:16:db:4a: cf:ab:60:74:e6:6a:ef:40:ec:b4:55:46:12:a7:17: 00:4f:1f:44:a0:ef:1b:3b:e2:68:a0:f3:5a:c9:e1: 84:9f Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 1D:AC:65:84:ED:C7:FF:13:83:7B:DD:CA:39:5C:72:CB:57:17:54:E2 X509v3 Authority Key Identifier: keyid:0F:F8:0C:BD:FE:18:35:4A:3C:FD:BA:2F:E0:79:AA:2E:BC:58:DC:D4 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/D_gMvf4YNUo8_bov4HmqLrxY3NQ.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/e9/129564-f1db-4dc5-8906-6fcdcd5ab660/1/D_gMvf4YNUo8_bov4HmqLrxY3NQ.mft X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/e9/129564-f1db-4dc5-8906-6fcdcd5ab660/1/D_gMvf4YNUo8_bov4HmqLrxY3NQ.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 54:85:69:35:f6:60:91:02:b0:6f:01:87:71:a9:d6:4e:2c:f1: b6:60:a4:52:a9:39:d7:db:ef:3f:57:8c:fe:1c:22:2a:33:55: 67:ae:2c:16:9a:ee:d9:8d:a0:03:fc:9e:2f:9a:7c:ff:a1:6f: 61:c9:ad:5a:84:e5:d2:f3:69:08:28:03:73:82:52:26:b5:03: 75:62:33:e7:d6:89:ac:9a:55:6c:2b:54:93:e8:91:c3:54:52: 9b:c6:75:f1:9a:12:f2:69:4e:f1:53:1a:a6:e7:09:a4:96:10: 33:f6:9e:08:e2:58:17:34:b7:c8:7a:91:91:3c:0d:3d:25:61: 67:cf:e8:c5:b7:00:c2:fa:f7:7c:53:20:ed:33:73:dd:9c:92: c6:ba:38:f4:9b:49:b1:e4:98:59:57:93:e8:ee:a8:5e:99:77: 2c:f7:2a:c1:93:5d:e1:44:29:26:c8:a1:74:45:25:ac:18:12: 3f:39:bf:50:5c:13:8e:1d:3f:16:46:5b:b3:6f:f7:47:73:1c: 2a:34:a2:87:00:d0:02:8d:3b:a9:ef:39:b6:da:d7:e1:dc:d6: 04:77:98:18:98:51:f6:92:aa:27:59:30:84:fc:b5:d3:3c:2b: 1d:e9:d9:a9:75:d1:a3:75:4a:a9:c8:24:8e:91:49:97:41:a0: 8b:5f:d5:c5 -----BEGIN CERTIFICATE----- MIIFFjCCA/6gAwIBAgISAZn7RfXKyEC/PBG5AicGsHMFMA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKDBmZjgwY2JkZmUxODM1NGEzY2ZkYmEyZmUwNzlhYTJlYmM1 OGRjZDQwHhcNMjUxMDE5MDcwMTMwWhcNMjUxMDIwMDcwMTMwWjAzMTEwLwYDVQQD EygxZGFjNjU4NGVkYzdmZjEzODM3YmRkY2EzOTVjNzJjYjU3MTc1NGUyMIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEA14RD8y40cC4lWIV2YJ70mekhgwUX CgMl3PoaMKoIPoIznFnd/4FtiJ2lbis8gBeSRT5ItaEs/pDEYOeNeFGcyVXoubwl AWJN7TPsVZ82hteGjMb5Ji8wyzFcKHYodMo2f5HbIzXV8KA8BzSEGmhcBCmuzM9R Y2gzhs4Ha7ZpYGDpVLIQhm6hYI9iEfspgOg7lLkZdUs3zJ+Y2XVZisaJlvcEOuA1 ZgezRQ+0uVlfBc/T9qkGjNi52DNeRqv1feXuK6LPT+JWyt2fbcr8X/g1AaE2pa5E 7TvXclUg+EAW20rPq2B05mrvQOy0VUYSpxcATx9EoO8bO+JooPNayeGEnwIDAQAB o4ICIjCCAh4wHQYDVR0OBBYEFB2sZYTtx/8Tg3vdyjlccstXF1TiMB8GA1UdIwQY MBaAFA/4DL3+GDVKPP26L+B5qi68WNzUMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvRF9nTXZmNFlOVW84X2JvdjRIbXFMcnhZM05RLmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC9lOS8xMjk1NjQtZjFkYi00ZGM1LTg5MDYt NmZjZGNkNWFiNjYwLzEvRF9nTXZmNFlOVW84X2JvdjRIbXFMcnhZM05RLm1mdDCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC9lOS8xMjk1NjQtZjFkYi00ZGM1LTg5MDYtNmZjZGNkNWFiNjYw LzEvRF9nTXZmNFlOVW84X2JvdjRIbXFMcnhZM05RLmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAVIVpNfZg kQKwbwGHcanWTizxtmCkUqk519vvP1eM/hwiKjNVZ64sFpru2Y2gA/yeL5p8/6Fv YcmtWoTl0vNpCCgDc4JSJrUDdWIz59aJrJpVbCtUk+iRw1RSm8Z18ZoS8mlO8VMa pucJpJYQM/aeCOJYFzS3yHqRkTwNPSVhZ8/oxbcAwvr3fFMg7TNz3ZySxro49JtJ seSYWVeT6O6oXpl3LPcqwZNd4UQpJsihdEUlrBgSPzm/UFwTjh0/FkZbs2/3R3Mc KjSihwDQAo07qe85ttrX4dzWBHeYGJhR9pKqJ1kwhPy10zwrHenZqXXRo3VKqcgk jpFJl0Ggi1/VxQ== -----END CERTIFICATE-----Generated at Sun Oct 19 15:05:21 2025 by rpki-client