$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/f2/cc6e99-6e5f-401b-912d-1095544c6c50/1/mc5WmhTC2zdy8jGHzmjmVB7ABI4.mft File: mc5WmhTC2zdy8jGHzmjmVB7ABI4.mft (raw, json) Hash identifier: YasuhGAwzzQKKfez2YL+Q9T3AbVZ6akKqL5t/BzsVWM= Subject key identifier: 05:3B:6C:39:A8:E4:0C:CD:B9:11:87:E3:DD:EE:46:D3:BA:26:C3:BC Authority key identifier: 99:CE:56:9A:14:C2:DB:37:72:F2:31:87:CE:68:E6:54:1E:C0:04:8E Certificate issuer: /CN=99ce569a14c2db3772f23187ce68e6541ec0048e Certificate serial: 0199FD6B3179D6F949666000967AF158885E Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/mc5WmhTC2zdy8jGHzmjmVB7ABI4.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/f2/cc6e99-6e5f-401b-912d-1095544c6c50/1/mc5WmhTC2zdy8jGHzmjmVB7ABI4.mft Manifest number: 1705 Signing time: Sun 19 Oct 2025 17:01:24 +0000 Manifest this update: Sun 19 Oct 2025 17:01:24 +0000 Manifest next update: Mon 20 Oct 2025 17:01:24 +0000 Files and hashes: 1: 7hlWKm8vTIF0LH1H2oS6Admh1TI.roa (hash: JGgMMA+OZIrWq67kkKcLVk/aNndkz3SnG1R5RYOVvj8=) 2: 8Okcs_WzeZSlRzql6-e5V5V7syA.roa (hash: Bgf74cz9Nwo/ctlxM9vVhY3z4DibfYQP6Uszu31EXc8=) 3: AJpw_2i3EoQNYD9kunMPYOdByi8.roa (hash: 2y+udfjFmNVer5C4pJzKndxIM53KHs0ELdljGNxXclM=) 4: BW-ZjApW-eGpyxFEOc0qqC_7S5k.roa (hash: RqpMiCDIPeUSPd1EPbgHwl0XZwlcr7/eFSWcSxO7pPY=) 5: Ik8Kqt-zKfrsdQjyrAjHXX-mlLc.roa (hash: Zg9C0+0W8n0QIjR6RRPkp/OJIpBk8iu2+syGMIoxQyg=) 6: RYdEtsOojE3SXyShhqAjMIQl9xQ.roa (hash: bxAZYk1bj8j4gGSsg9+CUkCHFq1GRl7baVopFxolE0s=) 7: WBeAt2UOvPgAdfpllYF8DBrXsx8.roa (hash: IGhLKO/rQTI4tOBHJDgWqI73xTyqxuZsgF0ztyC/dOc=) 8: dMlBq16YcIM7-JR7sVrQGjUo5Ts.roa (hash: i7NU7NT4PhY/w3tg6T+Z3qdRHBm2oFSaLm/74+Urx2g=) 9: f4e7IUwG3JkPasx3oPPOpKnw014.roa (hash: oT75cSQjF7ggxHOJOkz6Sxjs0hfilCF0H6NE1nJtUfo=) 10: gxtC8l8oaWA1zjOrZ9ktdsPQQVU.roa (hash: vd/vsDbZHQEzR4RjmLN3O01yjktlXhyMf/QsrpGLKZc=) 11: mNguxrQSssFTgOvDx-TtVJcngJ0.roa (hash: p4yScE1NaP9LVRZLGH/RikX/bIEDOl76JK/45ns5C9Q=) 12: mc5WmhTC2zdy8jGHzmjmVB7ABI4.crl (hash: x/bdMjZqIC2m71A3FOZNH5FRPQ5+ytvr35pxCJ8yF0A=) 13: tGisfrUmcm7oDtUaKLvnP0jBq0s.roa (hash: nA2OAz9Nlstpul0i0fjQIz6ieEk/T79qTn4SzXVWXBw=) 14: u_mqTybwgy-hqVDwwCNi1Bf-8tI.roa (hash: JZzfV1nFUUQsICoBUJ9//kJmxjSvH3d3D7ybB8QQr/Y=) Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/f2/cc6e99-6e5f-401b-912d-1095544c6c50/1/mc5WmhTC2zdy8jGHzmjmVB7ABI4.crl rsync://rpki.ripe.net/repository/DEFAULT/f2/cc6e99-6e5f-401b-912d-1095544c6c50/1/mc5WmhTC2zdy8jGHzmjmVB7ABI4.mft rsync://rpki.ripe.net/repository/DEFAULT/mc5WmhTC2zdy8jGHzmjmVB7ABI4.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Mon 20 Oct 2025 15:00:58 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:99:fd:6b:31:79:d6:f9:49:66:60:00:96:7a:f1:58:88:5e Signature Algorithm: sha256WithRSAEncryption Issuer: CN=99ce569a14c2db3772f23187ce68e6541ec0048e Validity Not Before: Oct 19 17:01:24 2025 GMT Not After : Oct 20 17:01:24 2025 GMT Subject: CN=053b6c39a8e40ccdb91187e3ddee46d3ba26c3bc Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:cd:38:27:8a:1a:07:72:54:dc:09:a4:d0:89:db: 1b:76:14:87:60:58:8a:ae:e8:dd:ff:0d:a3:15:d0: b6:b7:9f:e7:da:31:82:43:ba:b8:98:45:77:a6:50: c2:a8:27:1f:d6:f4:78:ed:cd:6f:5f:22:e6:80:20: 69:a3:c3:d1:8e:3b:0c:36:b4:10:50:fc:2b:9f:15: 72:79:f2:c7:b2:3b:62:a8:80:15:98:8e:08:99:27: f5:41:6b:6b:89:4d:2f:7b:00:7d:dc:98:e4:5b:37: d9:6a:54:0a:7f:8f:c8:1e:2f:5c:e5:c0:83:f9:ab: d5:a8:93:35:95:4e:0d:ba:48:75:2c:fb:60:41:eb: 42:b4:33:d2:51:35:dd:99:63:d4:69:73:3a:a3:9a: c3:5e:13:1d:3c:93:d7:11:6e:e6:ef:13:46:a8:ef: 89:e4:90:52:cf:05:fe:fb:a1:f9:ba:62:6d:d2:44: 19:a1:74:40:83:e7:72:f8:3d:42:10:1a:31:6a:f5: 55:c1:be:68:07:16:8b:12:33:a2:4f:f5:86:f6:f4: 88:d8:3c:c3:ae:2d:6a:02:cb:cd:86:32:b0:31:ee: e9:13:0b:e2:d2:f9:76:f7:cc:8b:4b:59:33:72:ab: 75:30:b7:02:a0:b3:2e:cc:ad:a2:a3:6d:aa:0d:d9: ef:d9 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 05:3B:6C:39:A8:E4:0C:CD:B9:11:87:E3:DD:EE:46:D3:BA:26:C3:BC X509v3 Authority Key Identifier: keyid:99:CE:56:9A:14:C2:DB:37:72:F2:31:87:CE:68:E6:54:1E:C0:04:8E X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/mc5WmhTC2zdy8jGHzmjmVB7ABI4.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/f2/cc6e99-6e5f-401b-912d-1095544c6c50/1/mc5WmhTC2zdy8jGHzmjmVB7ABI4.mft X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/f2/cc6e99-6e5f-401b-912d-1095544c6c50/1/mc5WmhTC2zdy8jGHzmjmVB7ABI4.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 76:63:13:10:8a:45:81:fb:56:12:c4:4a:4b:c0:bd:9e:83:6d: 0e:f4:62:7b:44:f7:56:8e:b7:7c:97:f2:eb:c7:f3:b0:ac:52: 48:f4:5e:c0:03:71:78:2f:fe:69:e5:38:72:9e:e3:83:ea:dc: da:84:5f:a7:7c:2f:61:19:4f:17:15:70:eb:3e:2c:39:18:22: be:99:93:68:9d:24:29:f6:bf:94:d4:b2:29:6b:b2:88:5c:d7: 67:17:76:b2:27:d0:3a:7a:64:95:69:8e:2e:16:8d:d2:86:22: cd:37:7c:04:0d:c1:30:fc:9e:c0:a3:50:c3:a4:ed:82:c4:06: 76:64:5a:0c:a1:92:a8:79:4a:ed:89:a2:e8:e6:08:a4:03:99: a4:46:29:a9:c5:98:97:96:30:61:48:46:50:8c:95:b5:e3:c4: fc:a2:07:1c:c2:53:40:2d:9e:93:5b:b1:25:ab:d9:cc:17:85: bc:3a:5b:4c:41:19:81:e8:a6:11:8e:2c:97:b5:d1:0d:19:71: ae:e9:c3:7f:81:1f:e6:b7:4d:2b:22:da:66:83:73:f7:9d:85: cf:c2:8f:55:c2:8e:75:98:81:87:24:f5:b5:e5:8e:9d:a7:d2: 38:94:bf:e6:eb:5d:1f:a2:38:a2:49:72:4e:6e:d0:9a:00:e9: 5a:45:8a:4c -----BEGIN CERTIFICATE----- MIIFFjCCA/6gAwIBAgISAZn9azF51vlJZmAAlnrxWIheMA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKDk5Y2U1NjlhMTRjMmRiMzc3MmYyMzE4N2NlNjhlNjU0MWVj MDA0OGUwHhcNMjUxMDE5MTcwMTI0WhcNMjUxMDIwMTcwMTI0WjAzMTEwLwYDVQQD EygwNTNiNmMzOWE4ZTQwY2NkYjkxMTg3ZTNkZGVlNDZkM2JhMjZjM2JjMIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAzTgnihoHclTcCaTQidsbdhSHYFiK rujd/w2jFdC2t5/n2jGCQ7q4mEV3plDCqCcf1vR47c1vXyLmgCBpo8PRjjsMNrQQ UPwrnxVyefLHsjtiqIAVmI4ImSf1QWtriU0vewB93JjkWzfZalQKf4/IHi9c5cCD +avVqJM1lU4Nukh1LPtgQetCtDPSUTXdmWPUaXM6o5rDXhMdPJPXEW7m7xNGqO+J 5JBSzwX++6H5umJt0kQZoXRAg+dy+D1CEBoxavVVwb5oBxaLEjOiT/WG9vSI2DzD ri1qAsvNhjKwMe7pEwvi0vl298yLS1kzcqt1MLcCoLMuzK2io22qDdnv2QIDAQAB o4ICIjCCAh4wHQYDVR0OBBYEFAU7bDmo5AzNuRGH493uRtO6JsO8MB8GA1UdIwQY MBaAFJnOVpoUwts3cvIxh85o5lQewASOMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvbWM1V21oVEMyemR5OGpHSHptam1WQjdBQkk0LmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC9mMi9jYzZlOTktNmU1Zi00MDFiLTkxMmQt MTA5NTU0NGM2YzUwLzEvbWM1V21oVEMyemR5OGpHSHptam1WQjdBQkk0Lm1mdDCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC9mMi9jYzZlOTktNmU1Zi00MDFiLTkxMmQtMTA5NTU0NGM2YzUw LzEvbWM1V21oVEMyemR5OGpHSHptam1WQjdBQkk0LmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAdmMTEIpF gftWEsRKS8C9noNtDvRie0T3Vo63fJfy68fzsKxSSPRewANxeC/+aeU4cp7jg+rc 2oRfp3wvYRlPFxVw6z4sORgivpmTaJ0kKfa/lNSyKWuyiFzXZxd2sifQOnpklWmO LhaN0oYizTd8BA3BMPyewKNQw6TtgsQGdmRaDKGSqHlK7Ymi6OYIpAOZpEYpqcWY l5YwYUhGUIyVtePE/KIHHMJTQC2ek1uxJavZzBeFvDpbTEEZgeimEY4sl7XRDRlx runDf4Ef5rdNKyLaZoNz952Fz8KPVcKOdZiBhyT1teWOnafSOJS/5utdH6I4okly Tm7QmgDpWkWKTA== -----END CERTIFICATE-----Generated at Sun Oct 19 23:09:55 2025 by rpki-client