$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/eb/eee131-bb8c-4887-869b-6fe4d8fed160/1/h0v4BwzuQwXRo4npEPtRArvMGUE.mft File: h0v4BwzuQwXRo4npEPtRArvMGUE.mft (raw, json) Hash identifier: YXRKc/P7TUuWnjth9h5MgylYehhdFTc4Mq2m3zlCX2c= Subject key identifier: 6B:0D:10:E0:5F:FE:22:F6:8A:9A:0F:C9:72:46:73:31:CB:C4:16:67 Authority key identifier: 87:4B:F8:07:0C:EE:43:05:D1:A3:89:E9:10:FB:51:02:BB:CC:19:41 Certificate issuer: /CN=874bf8070cee4305d1a389e910fb5102bbcc1941 Certificate serial: 0199FB7CD9793E4F96FE5ACAC3DA86BD87EF Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/h0v4BwzuQwXRo4npEPtRArvMGUE.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/eb/eee131-bb8c-4887-869b-6fe4d8fed160/1/h0v4BwzuQwXRo4npEPtRArvMGUE.mft Manifest number: 1071 Signing time: Sun 19 Oct 2025 08:01:27 +0000 Manifest this update: Sun 19 Oct 2025 08:01:27 +0000 Manifest next update: Mon 20 Oct 2025 08:01:27 +0000 Files and hashes: 1: 0OKEEKGhx09vrOl7RYzWo3_wxgQ.roa (hash: bVmqeltj/mUgRyI/UDd3qXuGmM6ZNTUv7NHdJ5Ecm14=) 2: 0na0952KGc1H37d43sfmQKJLL00.roa (hash: corUkZBv/wXf0UWamqTqW2vCXAO7jctIMZRyOPGvfMc=) 3: 0nyuKNwkHdjNx58vqjYZWHgdk04.roa (hash: IJwrVyR1/3bxuDIXcjl0pqsWJYg81ab8+TgzpFzMgak=) 4: 50gtoTdhN9nO756-F4DP2ztZ9co.roa (hash: PoNPNVOdbr6ZQt1a8yzQyLs5SXzvoUcV/tLE/CbCBRA=) 5: 5WW9l5SbU7Xc5dzcJPOjnh-Ti1k.roa (hash: 2mR14FDC49JE9sKTdrARapGEl+mL/ykOGzFFu5F/fQM=) 6: GPQpLDssO6fTD1dGaJR05RFssa4.roa (hash: fp71tS0Tf+vhKpm3TY4BWXK7QdJ3Wg7DCBdUoQ7F5lg=) 7: J9C16lcx8PgyurfKUP9kuPkC8qk.roa (hash: FgZNOU0gXFenPcB6tHkqCpKLWPVhc0a8myZew2TEgCo=) 8: LumIDmC9KaTmO5EmvKNIDB_MJ6I.roa (hash: T1v6ldOgSnHm0ILMw4lezNqfO7yaUlFFJv2DMeUijuQ=) 9: VvF4Vi4FweHBoF6fwzvWsqkmd1g.roa (hash: 0iNsEJDKXYV/LCkoqqh7O11YVgjXO/OY9nxGaKpwAV8=) 10: h0v4BwzuQwXRo4npEPtRArvMGUE.crl (hash: f7eSRbOeS+H6xE/KJaxXeYVps7aSxyh//fWCTzeYt/Y=) 11: vevN_FQh1oLDczAFJHEKh5hEOxE.roa (hash: T6+n5imfk+pQSeT5Osi01ihP8snYGAynnv1xpTuEaoU=) 12: xER0K9I9xK8DBLC6KDcI75JR9LY.roa (hash: OqOr60qixfUKi1rv4+JZ/v9458y498eM0Dbfd2dxyz4=) Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/eb/eee131-bb8c-4887-869b-6fe4d8fed160/1/h0v4BwzuQwXRo4npEPtRArvMGUE.crl rsync://rpki.ripe.net/repository/DEFAULT/eb/eee131-bb8c-4887-869b-6fe4d8fed160/1/h0v4BwzuQwXRo4npEPtRArvMGUE.mft rsync://rpki.ripe.net/repository/DEFAULT/h0v4BwzuQwXRo4npEPtRArvMGUE.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Mon 20 Oct 2025 08:01:27 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:99:fb:7c:d9:79:3e:4f:96:fe:5a:ca:c3:da:86:bd:87:ef Signature Algorithm: sha256WithRSAEncryption Issuer: CN=874bf8070cee4305d1a389e910fb5102bbcc1941 Validity Not Before: Oct 19 08:01:27 2025 GMT Not After : Oct 20 08:01:27 2025 GMT Subject: CN=6b0d10e05ffe22f68a9a0fc972467331cbc41667 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:b7:97:84:1c:83:65:5e:95:78:48:09:7b:67:3a: 02:eb:bd:7b:df:08:7f:0d:ed:46:94:9b:71:eb:be: 89:fc:bc:6a:50:27:cf:aa:a4:d4:00:7b:b6:a4:7d: 04:fa:ce:51:bb:fc:8d:40:41:39:52:35:ca:21:f0: 3a:b5:5b:65:2c:17:02:ee:0c:41:38:48:38:4b:23: 48:e8:86:81:10:5a:75:d7:44:7f:97:f7:5b:22:09: 73:5a:2f:40:c8:b4:ba:de:9c:3a:25:18:f3:8e:8d: ef:e6:e8:0e:65:ac:a8:43:80:6a:36:00:48:96:c3: 40:80:d6:82:c8:5c:15:fb:fc:9e:8e:b5:ef:5d:06: f8:a9:8c:95:3b:6b:80:92:b7:34:05:07:7d:61:08: 90:4c:5c:b9:76:9a:b6:72:7d:03:89:5f:8f:98:ee: 34:9a:1a:cd:d3:a8:43:2b:67:11:18:30:11:b0:30: 69:29:b2:ab:97:26:7c:82:77:57:19:bf:4e:b0:b2: 6f:bc:5c:5b:12:cc:6a:73:08:82:f4:56:20:c1:a1: 0c:a5:c7:fa:4e:6a:c6:05:87:ea:40:33:02:7a:9e: 37:39:37:dd:e2:ce:02:19:6b:cb:62:08:42:26:a3: b7:59:67:31:55:50:55:02:3f:4e:ab:56:f5:a3:f9: 3c:bd Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 6B:0D:10:E0:5F:FE:22:F6:8A:9A:0F:C9:72:46:73:31:CB:C4:16:67 X509v3 Authority Key Identifier: keyid:87:4B:F8:07:0C:EE:43:05:D1:A3:89:E9:10:FB:51:02:BB:CC:19:41 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/h0v4BwzuQwXRo4npEPtRArvMGUE.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/eb/eee131-bb8c-4887-869b-6fe4d8fed160/1/h0v4BwzuQwXRo4npEPtRArvMGUE.mft X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/eb/eee131-bb8c-4887-869b-6fe4d8fed160/1/h0v4BwzuQwXRo4npEPtRArvMGUE.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 58:4b:28:f8:1f:b0:e5:ad:ce:c8:cd:18:33:e2:8d:b5:17:66: 4e:80:06:d0:b2:b6:cc:0a:0b:01:88:73:08:63:80:56:61:fb: c4:81:91:47:e6:58:b6:da:2a:ab:31:44:96:2a:20:21:b1:72: f3:68:99:ac:83:2d:b7:71:a6:bc:df:54:92:d8:fa:b2:90:b8: a0:c8:24:8f:10:e7:75:83:76:a8:bc:bf:40:4c:c6:66:b0:89: 06:b5:43:3e:d8:98:90:99:24:fb:16:1f:87:38:4e:65:24:5f: 94:fe:56:19:fa:80:60:23:31:cf:f0:ac:00:1e:9d:f6:69:e8: 8c:b5:35:db:64:f6:91:e7:8f:55:2e:19:42:31:18:c0:83:7c: ea:67:84:0f:7e:f6:7d:35:82:13:80:c4:8c:85:33:d3:b0:5d: c2:8d:d3:d2:c1:51:90:19:86:6f:84:dc:ad:4c:65:89:cc:b0: 88:9c:e2:e7:16:c6:11:d1:06:0b:5e:bf:85:5a:3b:a0:93:de: 81:87:36:49:5b:17:45:8f:a7:36:aa:8e:e5:06:ce:05:2a:21: 37:88:76:92:d7:ab:3d:61:ee:6a:e9:a1:3b:80:0f:a9:78:f9: 05:1f:a6:fa:14:07:81:8c:c9:bd:1d:29:98:e2:4f:96:d9:54: 71:66:23:6c -----BEGIN CERTIFICATE----- MIIFFjCCA/6gAwIBAgISAZn7fNl5Pk+W/lrKw9qGvYfvMA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKDg3NGJmODA3MGNlZTQzMDVkMWEzODllOTEwZmI1MTAyYmJj YzE5NDEwHhcNMjUxMDE5MDgwMTI3WhcNMjUxMDIwMDgwMTI3WjAzMTEwLwYDVQQD Eyg2YjBkMTBlMDVmZmUyMmY2OGE5YTBmYzk3MjQ2NzMzMWNiYzQxNjY3MIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAt5eEHINlXpV4SAl7ZzoC67173wh/ De1GlJtx676J/LxqUCfPqqTUAHu2pH0E+s5Ru/yNQEE5UjXKIfA6tVtlLBcC7gxB OEg4SyNI6IaBEFp110R/l/dbIglzWi9AyLS63pw6JRjzjo3v5ugOZayoQ4BqNgBI lsNAgNaCyFwV+/yejrXvXQb4qYyVO2uAkrc0BQd9YQiQTFy5dpq2cn0DiV+PmO40 mhrN06hDK2cRGDARsDBpKbKrlyZ8gndXGb9OsLJvvFxbEsxqcwiC9FYgwaEMpcf6 TmrGBYfqQDMCep43OTfd4s4CGWvLYghCJqO3WWcxVVBVAj9Oq1b1o/k8vQIDAQAB o4ICIjCCAh4wHQYDVR0OBBYEFGsNEOBf/iL2ipoPyXJGczHLxBZnMB8GA1UdIwQY MBaAFIdL+AcM7kMF0aOJ6RD7UQK7zBlBMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvaDB2NEJ3enVRd1hSbzRucEVQdFJBcnZNR1VFLmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC9lYi9lZWUxMzEtYmI4Yy00ODg3LTg2OWIt NmZlNGQ4ZmVkMTYwLzEvaDB2NEJ3enVRd1hSbzRucEVQdFJBcnZNR1VFLm1mdDCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC9lYi9lZWUxMzEtYmI4Yy00ODg3LTg2OWItNmZlNGQ4ZmVkMTYw LzEvaDB2NEJ3enVRd1hSbzRucEVQdFJBcnZNR1VFLmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAWEso+B+w 5a3OyM0YM+KNtRdmToAG0LK2zAoLAYhzCGOAVmH7xIGRR+ZYttoqqzFEliogIbFy 82iZrIMtt3GmvN9Uktj6spC4oMgkjxDndYN2qLy/QEzGZrCJBrVDPtiYkJkk+xYf hzhOZSRflP5WGfqAYCMxz/CsAB6d9mnojLU122T2keePVS4ZQjEYwIN86meED372 fTWCE4DEjIUz07Bdwo3T0sFRkBmGb4TcrUxlicywiJzi5xbGEdEGC16/hVo7oJPe gYc2SVsXRY+nNqqO5QbOBSohN4h2kterPWHuaumhO4APqXj5BR+m+hQHgYzJvR0p mOJPltlUcWYjbA== -----END CERTIFICATE-----Generated at Sun Oct 19 17:31:44 2025 by rpki-client