$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/f9/9c27c2-fdbe-4e39-ba92-1d5d945a05a3/1/Eu-eSf7PJQnrZ2nu4s3UpSU7ccU.mft File: Eu-eSf7PJQnrZ2nu4s3UpSU7ccU.mft (raw, json) Hash identifier: 5/FCz6tRI8mNiS+jsJUeUe0myvLo71njkOYpvo2YUtk= Subject key identifier: E8:80:7B:29:5F:C4:75:54:A0:19:99:43:6E:48:2B:F8:3C:D2:63:B7 Authority key identifier: 12:EF:9E:49:FE:CF:25:09:EB:67:69:EE:E2:CD:D4:A5:25:3B:71:C5 Certificate issuer: /CN=12ef9e49fecf2509eb6769eee2cdd4a5253b71c5 Certificate serial: 0199FFC76DF25D61633F438A0C7EB727558A Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/Eu-eSf7PJQnrZ2nu4s3UpSU7ccU.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/f9/9c27c2-fdbe-4e39-ba92-1d5d945a05a3/1/Eu-eSf7PJQnrZ2nu4s3UpSU7ccU.mft Manifest number: 0BC8 Signing time: Mon 20 Oct 2025 04:01:23 +0000 Manifest this update: Mon 20 Oct 2025 04:01:23 +0000 Manifest next update: Tue 21 Oct 2025 04:01:23 +0000 Files and hashes: 1: 7wsTBZBl7GZWD2Iz0FrSwyRVJ04.roa (hash: fwjNRmkTe8kVn/j52/EKp0E6JqljaPFPK9QiBQrrlK0=) 2: Eu-eSf7PJQnrZ2nu4s3UpSU7ccU.crl (hash: Z9LplgCxBntcO8zeeF9OJNtAq2WWVxwrSOwv3ALuwn4=) 3: Fy2GYv_kkuwx83Qd1KeVh-6dfZU.roa (hash: JaIkPoZMYnthxP767Zb5Z9K5QqLJcpVYjoZdS+pB+W4=) 4: LgMAwFHt8ggsK1FnlL_JjhZsLaQ.roa (hash: yn7mdMvuYXDgqEYqedAY3gMvLNbKFVSpxkN6tnSZODQ=) 5: QraTR7yNyQc7QzyGCXFcoCp6_UE.roa (hash: h6vJiae6wz8ey2eXD7UvaxJ1x0GaKZTR4XXtKIGevoo=) 6: RiWqQ-C3EhSETSw9TfTVTB3MJ0k.roa (hash: kbrif54aXcBi1RJomWW7K6RSZGU1nXGZcQ7MR0YTUMY=) 7: Xb4K6QGWK6u2H5rpgCimBfmnPeo.roa (hash: evjk8yV3VEqaA3LwbzzX9i/xxrm2pBL5U0hXMWqJQB4=) 8: d2MIp2qYuBZCHWiIbVeAISsNGI4.roa (hash: ma8Nz3xs0m2BEdDPTCkwHa6WDhwuna/hfw1DQ0N0ODE=) 9: m09Q3jOZRSTE-FdvQUkBR3XIKzk.roa (hash: XLPF+3wh4y3SbqH9rmLaw8G9WMXj7xl5WG3PO3HNUzA=) 10: rJQH8M_OPU271UGjm2wxK0gzeLg.roa (hash: N/ZRV4R2yCVU3LDYw3mzJrI+NJLwtUYMsQ2SFW+KCCI=) Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/f9/9c27c2-fdbe-4e39-ba92-1d5d945a05a3/1/Eu-eSf7PJQnrZ2nu4s3UpSU7ccU.crl rsync://rpki.ripe.net/repository/DEFAULT/f9/9c27c2-fdbe-4e39-ba92-1d5d945a05a3/1/Eu-eSf7PJQnrZ2nu4s3UpSU7ccU.mft rsync://rpki.ripe.net/repository/DEFAULT/Eu-eSf7PJQnrZ2nu4s3UpSU7ccU.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Tue 21 Oct 2025 00:00:58 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:99:ff:c7:6d:f2:5d:61:63:3f:43:8a:0c:7e:b7:27:55:8a Signature Algorithm: sha256WithRSAEncryption Issuer: CN=12ef9e49fecf2509eb6769eee2cdd4a5253b71c5 Validity Not Before: Oct 20 04:01:23 2025 GMT Not After : Oct 21 04:01:23 2025 GMT Subject: CN=e8807b295fc47554a01999436e482bf83cd263b7 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:85:ef:ca:a6:b4:f4:f3:4a:d8:5b:0a:b1:d3:8d: ce:65:ee:e8:f9:3f:b1:c3:e0:34:ef:50:a9:88:f2: b0:e8:42:2b:f9:28:20:49:25:9f:fd:f0:c0:0a:8e: 39:6e:f2:b5:d6:88:15:79:79:fb:76:83:2f:d8:e7: c5:d7:28:f0:10:58:ed:d0:4e:da:e6:12:04:92:d5: c9:75:30:56:a6:3d:bd:b9:a6:66:90:06:50:fe:3a: 78:ca:77:50:1f:6c:ed:ff:08:ec:7b:19:af:99:98: 50:34:a8:78:f2:3a:c6:e9:e9:6b:54:3f:38:8c:ed: ab:8b:7d:ea:30:00:08:f2:b4:c5:82:26:66:26:7b: 45:fb:55:b9:83:48:6e:d6:78:c8:f2:55:cf:ea:7c: 47:3f:ea:f4:9c:e9:03:68:4d:ab:1c:f7:b6:f6:d1: d3:06:04:21:88:b2:f1:f9:e9:a6:cf:54:a7:0c:36: 95:34:a5:ca:dc:fd:26:5f:60:96:8c:4d:3f:d4:ee: d9:e9:28:c1:f4:e4:ef:fb:62:b5:d7:7b:33:83:57: 0c:6f:e9:21:78:51:09:9b:4c:6f:d3:13:41:e1:bf: 5b:31:2c:77:37:1d:73:d8:09:a0:d2:dc:99:df:8c: 92:e9:c4:30:19:bf:78:7f:7f:35:c6:45:38:3d:52: 95:dd Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: E8:80:7B:29:5F:C4:75:54:A0:19:99:43:6E:48:2B:F8:3C:D2:63:B7 X509v3 Authority Key Identifier: keyid:12:EF:9E:49:FE:CF:25:09:EB:67:69:EE:E2:CD:D4:A5:25:3B:71:C5 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/Eu-eSf7PJQnrZ2nu4s3UpSU7ccU.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/f9/9c27c2-fdbe-4e39-ba92-1d5d945a05a3/1/Eu-eSf7PJQnrZ2nu4s3UpSU7ccU.mft X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/f9/9c27c2-fdbe-4e39-ba92-1d5d945a05a3/1/Eu-eSf7PJQnrZ2nu4s3UpSU7ccU.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 3d:f1:7d:9f:ac:63:5e:75:60:7b:34:2a:b5:b9:f5:58:42:9d: 70:ec:8d:16:bf:a0:36:f8:aa:81:c9:5a:d1:b3:65:2b:b1:e2: f0:40:4d:4e:9f:0e:0d:99:da:3f:86:6f:8b:2b:a3:1a:cb:cd: 1c:4f:3a:b1:e8:1b:43:08:8f:e4:25:22:b2:c0:56:8c:33:1f: 31:56:a8:f7:e3:b6:a6:99:20:3f:24:af:ba:26:a2:10:18:59: 49:57:1a:cb:3f:98:36:76:0e:3b:6a:c0:73:44:fc:89:3c:a3: 7d:3e:a8:c9:a9:96:8d:51:30:59:f4:66:8d:e2:33:5c:1a:0b: e9:58:b8:a1:77:7b:4a:2e:4e:6f:b7:6c:54:2c:39:5d:c5:b8: 5f:34:8b:c1:2c:75:cd:93:bf:c7:45:82:c8:02:c8:26:db:62: ef:cb:6b:ab:bb:4a:9b:31:be:33:f6:4e:30:06:fb:b3:c7:2a: 2d:f5:84:9f:a4:bc:f9:59:b5:4a:be:4f:c3:f3:c4:bd:45:16: 6e:4d:40:89:fd:07:e3:c9:5b:a9:b4:18:a2:de:93:c3:75:6d: c7:08:2c:25:13:37:27:06:dd:25:f2:bd:c6:12:4e:8f:d7:45: 5f:af:09:3b:d8:6d:8e:b3:84:1c:83:0c:3a:a8:d9:f0:9e:b0: 89:34:37:29 -----BEGIN CERTIFICATE----- MIIFFjCCA/6gAwIBAgISAZn/x23yXWFjP0OKDH63J1WKMA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKDEyZWY5ZTQ5ZmVjZjI1MDllYjY3NjllZWUyY2RkNGE1MjUz YjcxYzUwHhcNMjUxMDIwMDQwMTIzWhcNMjUxMDIxMDQwMTIzWjAzMTEwLwYDVQQD EyhlODgwN2IyOTVmYzQ3NTU0YTAxOTk5NDM2ZTQ4MmJmODNjZDI2M2I3MIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAhe/KprT080rYWwqx043OZe7o+T+x w+A071CpiPKw6EIr+SggSSWf/fDACo45bvK11ogVeXn7doMv2OfF1yjwEFjt0E7a 5hIEktXJdTBWpj29uaZmkAZQ/jp4yndQH2zt/wjsexmvmZhQNKh48jrG6elrVD84 jO2ri33qMAAI8rTFgiZmJntF+1W5g0hu1njI8lXP6nxHP+r0nOkDaE2rHPe29tHT BgQhiLLx+emmz1SnDDaVNKXK3P0mX2CWjE0/1O7Z6SjB9OTv+2K113szg1cMb+kh eFEJm0xv0xNB4b9bMSx3Nx1z2Amg0tyZ34yS6cQwGb94f381xkU4PVKV3QIDAQAB o4ICIjCCAh4wHQYDVR0OBBYEFOiAeylfxHVUoBmZQ25IK/g80mO3MB8GA1UdIwQY MBaAFBLvnkn+zyUJ62dp7uLN1KUlO3HFMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvRXUtZVNmN1BKUW5yWjJudTRzM1VwU1U3Y2NVLmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC9mOS85YzI3YzItZmRiZS00ZTM5LWJhOTIt MWQ1ZDk0NWEwNWEzLzEvRXUtZVNmN1BKUW5yWjJudTRzM1VwU1U3Y2NVLm1mdDCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC9mOS85YzI3YzItZmRiZS00ZTM5LWJhOTItMWQ1ZDk0NWEwNWEz LzEvRXUtZVNmN1BKUW5yWjJudTRzM1VwU1U3Y2NVLmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAPfF9n6xj XnVgezQqtbn1WEKdcOyNFr+gNviqgcla0bNlK7Hi8EBNTp8ODZnaP4ZviyujGsvN HE86segbQwiP5CUissBWjDMfMVao9+O2ppkgPySvuiaiEBhZSVcayz+YNnYOO2rA c0T8iTyjfT6oyamWjVEwWfRmjeIzXBoL6Vi4oXd7Si5Ob7dsVCw5XcW4XzSLwSx1 zZO/x0WCyALIJtti78trq7tKmzG+M/ZOMAb7s8cqLfWEn6S8+Vm1Sr5Pw/PEvUUW bk1Aif0H48lbqbQYot6Tw3VtxwgsJRM3JwbdJfK9xhJOj9dFX68JO9htjrOEHIMM OqjZ8J6wiTQ3KQ== -----END CERTIFICATE-----Generated at Mon Oct 20 09:27:34 2025 by rpki-client