$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/ed/8e8e82-5274-4d2f-8ca0-ab19fcb0ce64/1/4VgI8_khvIw-6ofHWExYTBAAsFE.mft File: 4VgI8_khvIw-6ofHWExYTBAAsFE.mft (raw, json) Hash identifier: 1djMOrxi3gW/ze9S6JLxcddvkmvGoYayk5l/RGnUP6s= Subject key identifier: 9D:B3:1E:95:00:61:6D:23:37:3F:50:7F:46:B1:7A:48:D7:6F:11:96 Authority key identifier: E1:58:08:F3:F9:21:BC:8C:3E:EA:87:C7:58:4C:58:4C:10:00:B0:51 Certificate issuer: /CN=e15808f3f921bc8c3eea87c7584c584c1000b051 Certificate serial: 0199FF59889F5457A6EE3B2E51EE021191B4 Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/4VgI8_khvIw-6ofHWExYTBAAsFE.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/ed/8e8e82-5274-4d2f-8ca0-ab19fcb0ce64/1/4VgI8_khvIw-6ofHWExYTBAAsFE.mft Manifest number: 1708 Signing time: Mon 20 Oct 2025 02:01:21 +0000 Manifest this update: Mon 20 Oct 2025 02:01:21 +0000 Manifest next update: Tue 21 Oct 2025 02:01:21 +0000 Files and hashes: 1: 4VgI8_khvIw-6ofHWExYTBAAsFE.crl (hash: iiwhkhKh6LlM5CgV63DCE8QcIh2cDeqHR1wZh8H/SF8=) 2: 7hCd_HKEYkXLvNCBLfMsTezcRXs.roa (hash: U6tVugGWrDYmHCXTomFCnYlQyCN2W9AcT+utfrGkYmM=) 3: 7x5HPsZJJU7oLctSDX_VaOPYLzI.roa (hash: uhuBwDP+Oa9qCbvp8OKGgxlY2ye1DhBRDdxJD61Z03g=) 4: BqWFQfCpNOawJLR_2bQgKiWus78.roa (hash: dwDCQUgPm6/+eGPO1V7wb2aMqwp5qzv/WSd8fL7sTv4=) 5: HK9YTPeAPa2mm7JsqVFDcEqWktE.roa (hash: pGFfaceKosL6QVYMO3oG4sR8CNlOKvbDd43IVlI91l4=) 6: SiUykNKTjaApyo1sqndO19rBYAs.roa (hash: jaR1D2Lqsnpc33UxJXomGKoF/S6s6EdMDhOpwvCqmiY=) 7: dsVEniM-PjP3aF57gRKfJeGsuXA.roa (hash: rATVs9dRCK5irdzRkSY1vrtCfxCwPvZoSJA3EPbdN5Q=) 8: jNJogHc9h5lodSxhpjDRYEENUOM.roa (hash: O0aQYdB/pHChDSdymrPe8W/YPJRqMLBI8pg3+YHjgZ8=) 9: pm4iWvL8z96fIGtjxaGjSXeRJT4.roa (hash: ZYVelcX+1GR4HDMDdE6U47zsAh6vEcuxWCIg/8E3uZE=) 10: qeW6k62Ova_Op7BhYtzucMuedHs.roa (hash: iPCOF2sKXY5KaN1yHnhdOMP4cE9n3NAPWSlvKOP6/hY=) 11: qispPpKIlPSWV1rI1EAZQtlT-p0.roa (hash: sBtkCqwyGciPSktKwAiba5P4WFIxvlZFVG+B/hvcwgI=) 12: ttSCm0GX77Lv7F9AG7Ej_PDwc8E.roa (hash: CXBZohUwM39VG497MDaDZEXDgP7mhwxpOgtdpsLOGh4=) 13: xyWS8GMXAK5cHVz0I4kSnXYHwUs.roa (hash: U2goV1mLS2kaWO5TW5yX21b9KWWpNNSkN88rAFVfNXQ=) 14: z1XxJmXXx8uVxhk9CwQJXiPqHzU.roa (hash: EaljD/90P2BfuVNTpmwdBC+zdctwtxvncMDcXLvuk10=) Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/ed/8e8e82-5274-4d2f-8ca0-ab19fcb0ce64/1/4VgI8_khvIw-6ofHWExYTBAAsFE.crl rsync://rpki.ripe.net/repository/DEFAULT/ed/8e8e82-5274-4d2f-8ca0-ab19fcb0ce64/1/4VgI8_khvIw-6ofHWExYTBAAsFE.mft rsync://rpki.ripe.net/repository/DEFAULT/4VgI8_khvIw-6ofHWExYTBAAsFE.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Mon 20 Oct 2025 20:00:59 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:99:ff:59:88:9f:54:57:a6:ee:3b:2e:51:ee:02:11:91:b4 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=e15808f3f921bc8c3eea87c7584c584c1000b051 Validity Not Before: Oct 20 02:01:21 2025 GMT Not After : Oct 21 02:01:21 2025 GMT Subject: CN=9db31e9500616d23373f507f46b17a48d76f1196 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:b1:c3:4d:44:57:f3:e4:3d:b5:61:d9:f2:7f:bd: d1:23:6f:eb:28:ec:6b:cd:52:b4:9c:1f:5e:ab:4a: 8c:bd:54:21:98:56:2f:8c:2e:88:fe:86:12:99:06: de:ef:95:6a:1f:14:74:d1:23:66:88:b6:66:0c:8b: 1e:b1:f6:09:51:41:d1:de:30:38:b9:1c:c9:18:46: 12:dd:07:91:e3:05:f4:4f:64:f0:71:31:b1:98:da: 10:eb:8b:ad:1a:74:51:72:b1:bb:aa:73:32:a4:b9: 6a:48:fe:9c:aa:0d:4c:ef:13:c3:e2:0a:bf:e7:ac: 2b:e5:97:bf:d7:15:6c:fb:0e:a3:30:ea:f6:f3:24: 62:9f:d2:ed:2a:4b:5a:d4:f4:e2:c0:35:dd:62:74: 95:d5:ed:97:99:15:c2:38:37:42:88:74:67:2c:d1: b2:3b:e4:43:fd:e5:84:2a:d8:b9:e7:33:8a:1d:83: 8c:24:f0:9e:3e:04:cb:c6:e5:21:4c:7a:57:8c:36: 05:b8:37:d9:67:71:5a:d2:43:3c:c5:c4:f7:be:1c: d9:b6:41:40:7c:4d:59:11:36:89:4c:a4:46:2f:94: 7a:c3:d1:d9:b1:9f:41:17:7a:7f:27:7f:c6:22:bd: 7b:75:ea:ae:85:76:6a:86:55:04:44:a0:41:07:2d: d9:e7 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 9D:B3:1E:95:00:61:6D:23:37:3F:50:7F:46:B1:7A:48:D7:6F:11:96 X509v3 Authority Key Identifier: keyid:E1:58:08:F3:F9:21:BC:8C:3E:EA:87:C7:58:4C:58:4C:10:00:B0:51 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/4VgI8_khvIw-6ofHWExYTBAAsFE.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/ed/8e8e82-5274-4d2f-8ca0-ab19fcb0ce64/1/4VgI8_khvIw-6ofHWExYTBAAsFE.mft X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/ed/8e8e82-5274-4d2f-8ca0-ab19fcb0ce64/1/4VgI8_khvIw-6ofHWExYTBAAsFE.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 2b:db:3a:f6:99:20:42:0e:5d:59:53:59:3b:28:19:aa:f2:ce: 16:76:d1:5d:d8:bd:2e:9a:9d:e8:4f:2d:51:58:35:a5:a5:d6: 5a:67:0b:bd:b2:c2:8e:f6:14:d9:b6:fb:28:3a:7a:18:24:9c: bf:c4:1c:8a:59:9b:1c:84:af:dc:46:b0:07:83:c8:a5:ac:90: 3e:34:5e:96:9f:c9:6f:02:57:9d:ff:dc:f2:36:e2:54:8a:42: 7e:86:82:d9:10:82:76:8e:2a:af:fd:84:a1:fd:a0:e3:63:6c: 96:ca:89:b8:2b:80:e6:b6:67:03:94:85:d5:f1:38:df:74:c1: 7e:48:9a:7b:a0:47:da:40:27:b4:b8:56:e5:c1:20:fb:ab:d1: 28:af:a8:7f:e6:58:00:9c:04:05:02:8c:f2:b2:ba:8e:e5:4f: 50:5e:8a:48:c3:37:dc:6e:00:8f:17:c6:f7:03:49:fb:ed:c7: 7d:be:d6:da:8e:6b:e1:fe:12:04:59:97:0d:ef:1e:13:78:c4: ae:3a:e0:06:6d:d4:7c:81:1f:ad:27:29:d6:09:5f:00:9b:f0: d0:2a:e8:e9:7c:06:c8:22:a5:20:0f:d9:54:2e:d6:75:30:ca: ef:56:1e:02:8e:c3:e1:26:3d:54:9c:75:da:59:3e:b8:fc:88: 84:47:5c:af -----BEGIN CERTIFICATE----- MIIFFjCCA/6gAwIBAgISAZn/WYifVFem7jsuUe4CEZG0MA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKGUxNTgwOGYzZjkyMWJjOGMzZWVhODdjNzU4NGM1ODRjMTAw MGIwNTEwHhcNMjUxMDIwMDIwMTIxWhcNMjUxMDIxMDIwMTIxWjAzMTEwLwYDVQQD Eyg5ZGIzMWU5NTAwNjE2ZDIzMzczZjUwN2Y0NmIxN2E0OGQ3NmYxMTk2MIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAscNNRFfz5D21Ydnyf73RI2/rKOxr zVK0nB9eq0qMvVQhmFYvjC6I/oYSmQbe75VqHxR00SNmiLZmDIsesfYJUUHR3jA4 uRzJGEYS3QeR4wX0T2TwcTGxmNoQ64utGnRRcrG7qnMypLlqSP6cqg1M7xPD4gq/ 56wr5Ze/1xVs+w6jMOr28yRin9LtKkta1PTiwDXdYnSV1e2XmRXCODdCiHRnLNGy O+RD/eWEKti55zOKHYOMJPCePgTLxuUhTHpXjDYFuDfZZ3Fa0kM8xcT3vhzZtkFA fE1ZETaJTKRGL5R6w9HZsZ9BF3p/J3/GIr17dequhXZqhlUERKBBBy3Z5wIDAQAB o4ICIjCCAh4wHQYDVR0OBBYEFJ2zHpUAYW0jNz9Qf0axekjXbxGWMB8GA1UdIwQY MBaAFOFYCPP5IbyMPuqHx1hMWEwQALBRMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvNFZnSThfa2h2SXctNm9mSFdFeFlUQkFBc0ZFLmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC9lZC84ZThlODItNTI3NC00ZDJmLThjYTAt YWIxOWZjYjBjZTY0LzEvNFZnSThfa2h2SXctNm9mSFdFeFlUQkFBc0ZFLm1mdDCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC9lZC84ZThlODItNTI3NC00ZDJmLThjYTAtYWIxOWZjYjBjZTY0 LzEvNFZnSThfa2h2SXctNm9mSFdFeFlUQkFBc0ZFLmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAK9s69pkg Qg5dWVNZOygZqvLOFnbRXdi9Lpqd6E8tUVg1paXWWmcLvbLCjvYU2bb7KDp6GCSc v8QcilmbHISv3EawB4PIpayQPjRelp/JbwJXnf/c8jbiVIpCfoaC2RCCdo4qr/2E of2g42NslsqJuCuA5rZnA5SF1fE433TBfkiae6BH2kAntLhW5cEg+6vRKK+of+ZY AJwEBQKM8rK6juVPUF6KSMM33G4AjxfG9wNJ++3Hfb7W2o5r4f4SBFmXDe8eE3jE rjrgBm3UfIEfrScp1glfAJvw0Cro6XwGyCKlIA/ZVC7WdTDK71YeAo7D4SY9VJx1 2lk+uPyIhEdcrw== -----END CERTIFICATE-----Generated at Mon Oct 20 05:55:43 2025 by rpki-client