$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/f9/488f61-2f00-4639-97b8-d24f562dedd2/1/52ASbc54vBbmbC5udjWEisRoRq8.mft File: 52ASbc54vBbmbC5udjWEisRoRq8.mft (raw, json) Hash identifier: vKqqMs83Ot0wHgXajPjFxvBFvxJYajMC/lTaXOZ02DU= Subject key identifier: 34:B9:7B:8C:BD:6F:E4:A6:F1:1E:01:EF:18:7A:31:EB:D5:D7:7F:67 Authority key identifier: E7:60:12:6D:CE:78:BC:16:E6:6C:2E:6E:76:35:84:8A:C4:68:46:AF Certificate issuer: /CN=e760126dce78bc16e66c2e6e7635848ac46846af Certificate serial: 0199FC218BE8A5C7667861ED33C465D61FEA Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/52ASbc54vBbmbC5udjWEisRoRq8.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/f9/488f61-2f00-4639-97b8-d24f562dedd2/1/52ASbc54vBbmbC5udjWEisRoRq8.mft Manifest number: 172A Signing time: Sun 19 Oct 2025 11:01:20 +0000 Manifest this update: Sun 19 Oct 2025 11:01:20 +0000 Manifest next update: Mon 20 Oct 2025 11:01:20 +0000 Files and hashes: 1: 52ASbc54vBbmbC5udjWEisRoRq8.crl (hash: 8LNSfe7B6uXojVThZesIx2H424IZF3KoQ+tI7Jop8Ik=) 2: 7YzRWXLDcfjfZ1pfSykSzsi_Bqo.roa (hash: upRBCre7SZMIKE1wJY8xBkRe6ItlC6jUoHp+iPPL2jY=) 3: 7tiEv9a2cte9CpBTPcqjs8xnBKQ.roa (hash: Lp0nRST7H/IZB0m5wIyra+a/lX3Kx1yfYMfJAqiypu0=) 4: EITg7csqrpeo1pWcmy2hcqbXflU.roa (hash: pLn3UHOxp1ZQsuVQtFPMgV4G2hJKf/PNaA8sX+IS7d0=) 5: MrqpvKVhGghgWqjcBqKvEuXDI-w.roa (hash: 2m6ct1yYKNn97oNHEpEMtqOhuEyZV5Dslxg+dpwmv70=) 6: XYXhwm5zrEH45rmFW9NeBdpLBdY.roa (hash: bQLqshA+DTy2hlHQrxwZt5i9j5XdNbOU29TgB/eCftc=) 7: cHgsLum03vUPk1ZqgWFlR06D1Gs.roa (hash: cQZtsmDbQpAD/17b4zQranEZKH1IDqAE5jHDvC9CNKs=) 8: kPSNnw4_4qELTdWvaGuzZV1m1HA.roa (hash: 4wdK73NzeZ3ZvPINCQjy0JUV5WCBpYsSrh/XOjnZGIg=) 9: opmTxamDTTGhXXB97pQEAvfnlEA.roa (hash: +a21sRDHCzkVFGym6Uca5XjXTPbBTo6ZNir2uKNCj3g=) 10: uQU12zYitg_amaVlwJpXM9XCEAY.roa (hash: IYdpyZTPtIiqFILl8uMqJOM+CkHBFW5wOhN+3p4JTWU=) 11: wsqrJncE8vGcQKRwVGIW7jNdJzQ.roa (hash: QMuERI1zOel2P+0Zvoc3OxuHc55kEcoxlWPyCWA8NgA=) Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/f9/488f61-2f00-4639-97b8-d24f562dedd2/1/52ASbc54vBbmbC5udjWEisRoRq8.crl rsync://rpki.ripe.net/repository/DEFAULT/f9/488f61-2f00-4639-97b8-d24f562dedd2/1/52ASbc54vBbmbC5udjWEisRoRq8.mft rsync://rpki.ripe.net/repository/DEFAULT/52ASbc54vBbmbC5udjWEisRoRq8.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Mon 20 Oct 2025 11:01:20 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:99:fc:21:8b:e8:a5:c7:66:78:61:ed:33:c4:65:d6:1f:ea Signature Algorithm: sha256WithRSAEncryption Issuer: CN=e760126dce78bc16e66c2e6e7635848ac46846af Validity Not Before: Oct 19 11:01:20 2025 GMT Not After : Oct 20 11:01:20 2025 GMT Subject: CN=34b97b8cbd6fe4a6f11e01ef187a31ebd5d77f67 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:f7:75:87:ff:b0:a4:d4:08:c4:1e:69:f2:5b:3f: d7:08:41:22:c0:9e:5e:81:21:32:49:a8:15:b3:8e: ef:02:12:9b:c1:e4:ea:64:48:15:76:5c:1b:f0:53: 00:ca:37:ff:30:ab:36:6d:5e:c4:22:83:25:2c:1d: 0a:ba:24:9f:6c:3c:2c:43:85:45:ca:9a:b6:41:ea: 14:7e:05:40:1e:07:db:aa:67:87:0d:c3:c9:be:d3: 4b:ea:65:62:5d:88:e7:75:f9:e2:63:db:f4:66:98: 53:34:25:fb:97:8c:44:8a:a6:23:0e:97:8c:7d:d9: 63:7e:14:93:e0:de:71:89:b8:a7:36:1b:a9:26:01: 25:a0:a4:43:b8:db:fc:1b:15:7f:31:90:3f:eb:d6: 9e:d0:ee:47:44:a6:e8:5c:ec:a1:c2:fd:9a:17:f3: 8f:d0:68:9b:bc:70:ec:82:2e:53:e3:c0:21:f7:7c: 2a:60:db:63:c0:61:04:30:cf:4b:e7:f5:44:37:28: bc:99:36:a6:56:0b:43:b5:23:2e:53:09:b9:ec:e2: 3d:f4:4c:ce:dd:6b:cb:c8:27:69:69:ee:8a:93:73: ab:96:00:96:9d:b6:24:25:9e:86:e8:32:0f:f8:fc: 09:eb:c8:bc:23:05:ea:f8:ce:ff:8b:c2:51:85:e3: b8:75 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 34:B9:7B:8C:BD:6F:E4:A6:F1:1E:01:EF:18:7A:31:EB:D5:D7:7F:67 X509v3 Authority Key Identifier: keyid:E7:60:12:6D:CE:78:BC:16:E6:6C:2E:6E:76:35:84:8A:C4:68:46:AF X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/52ASbc54vBbmbC5udjWEisRoRq8.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/f9/488f61-2f00-4639-97b8-d24f562dedd2/1/52ASbc54vBbmbC5udjWEisRoRq8.mft X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/f9/488f61-2f00-4639-97b8-d24f562dedd2/1/52ASbc54vBbmbC5udjWEisRoRq8.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 9c:22:09:62:af:3c:69:73:48:88:5d:94:3b:1c:f2:a8:b1:a7: 8b:4a:62:31:6c:00:2b:ae:d6:8b:f1:35:8a:3c:8e:67:d3:00: b4:10:3c:c4:0f:09:27:ac:2d:da:0c:bb:21:b9:fb:bc:6f:6b: fb:30:c0:01:dc:78:0d:e3:53:aa:1f:8f:f6:58:0d:df:e3:68: 0a:5f:0c:2a:1b:40:76:c6:56:29:28:84:25:6e:04:6a:45:e7: 93:f5:3d:72:87:6a:5b:fd:48:0f:25:1d:a5:04:84:c7:2a:e6: 91:c3:da:81:c6:6e:f9:e2:62:34:3b:75:ba:c8:77:be:68:22: 45:7e:f7:86:6c:03:8d:b9:01:e1:9b:79:75:5c:37:23:4b:a3: c4:41:40:9c:10:14:ce:d5:00:eb:67:16:ed:e1:a8:21:b9:7f: 73:25:88:55:09:98:45:72:2a:57:45:66:57:32:6f:b4:62:b9: c6:59:db:61:88:16:34:27:e2:57:81:58:db:f9:62:50:6f:b5: 6d:e0:f1:10:7e:04:0c:f7:b0:6c:f2:32:50:a7:fd:c3:ce:49: 0b:4a:46:c9:2a:b6:a6:3c:a7:30:34:1a:51:14:bc:84:64:02: 29:25:10:9d:d8:4d:f6:22:4b:28:aa:8c:c5:1f:6f:7b:50:e8: e1:06:d7:30 -----BEGIN CERTIFICATE----- MIIFFjCCA/6gAwIBAgISAZn8IYvopcdmeGHtM8Rl1h/qMA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKGU3NjAxMjZkY2U3OGJjMTZlNjZjMmU2ZTc2MzU4NDhhYzQ2 ODQ2YWYwHhcNMjUxMDE5MTEwMTIwWhcNMjUxMDIwMTEwMTIwWjAzMTEwLwYDVQQD EygzNGI5N2I4Y2JkNmZlNGE2ZjExZTAxZWYxODdhMzFlYmQ1ZDc3ZjY3MIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEA93WH/7Ck1AjEHmnyWz/XCEEiwJ5e gSEySagVs47vAhKbweTqZEgVdlwb8FMAyjf/MKs2bV7EIoMlLB0KuiSfbDwsQ4VF ypq2QeoUfgVAHgfbqmeHDcPJvtNL6mViXYjndfniY9v0ZphTNCX7l4xEiqYjDpeM fdljfhST4N5xibinNhupJgEloKRDuNv8GxV/MZA/69ae0O5HRKboXOyhwv2aF/OP 0GibvHDsgi5T48Ah93wqYNtjwGEEMM9L5/VENyi8mTamVgtDtSMuUwm57OI99EzO 3WvLyCdpae6Kk3OrlgCWnbYkJZ6G6DIP+PwJ68i8IwXq+M7/i8JRheO4dQIDAQAB o4ICIjCCAh4wHQYDVR0OBBYEFDS5e4y9b+Sm8R4B7xh6MevV139nMB8GA1UdIwQY MBaAFOdgEm3OeLwW5mwubnY1hIrEaEavMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvNTJBU2JjNTR2QmJtYkM1dWRqV0Vpc1JvUnE4LmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC9mOS80ODhmNjEtMmYwMC00NjM5LTk3Yjgt ZDI0ZjU2MmRlZGQyLzEvNTJBU2JjNTR2QmJtYkM1dWRqV0Vpc1JvUnE4Lm1mdDCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC9mOS80ODhmNjEtMmYwMC00NjM5LTk3YjgtZDI0ZjU2MmRlZGQy LzEvNTJBU2JjNTR2QmJtYkM1dWRqV0Vpc1JvUnE4LmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAnCIJYq88 aXNIiF2UOxzyqLGni0piMWwAK67Wi/E1ijyOZ9MAtBA8xA8JJ6wt2gy7Ibn7vG9r +zDAAdx4DeNTqh+P9lgN3+NoCl8MKhtAdsZWKSiEJW4EakXnk/U9codqW/1IDyUd pQSExyrmkcPagcZu+eJiNDt1ush3vmgiRX73hmwDjbkB4Zt5dVw3I0ujxEFAnBAU ztUA62cW7eGoIbl/cyWIVQmYRXIqV0VmVzJvtGK5xlnbYYgWNCfiV4FY2/liUG+1 beDxEH4EDPewbPIyUKf9w85JC0pGySq2pjynMDQaURS8hGQCKSUQndhN9iJLKKqM xR9ve1Do4QbXMA== -----END CERTIFICATE-----Generated at Sun Oct 19 17:27:15 2025 by rpki-client