$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/fa/a0e01a-9bbc-44ee-98a3-597b6e2492ab/1/u6Nc-KtvPqoq663Z4jc97AiTYl4.mft File: u6Nc-KtvPqoq663Z4jc97AiTYl4.mft (raw, json) Hash identifier: AhJhaL37PUXotaJh8lq5AbaIWEdhNejzxtyyTs7Ls30= Subject key identifier: 34:CA:26:46:96:B6:BC:F5:4A:DB:26:03:39:28:8F:41:0E:A8:D1:50 Authority key identifier: BB:A3:5C:F8:AB:6F:3E:AA:2A:EB:AD:D9:E2:37:3D:EC:08:93:62:5E Certificate issuer: /CN=bba35cf8ab6f3eaa2aebadd9e2373dec0893625e Certificate serial: 0199FD34464FDDBA084B8A37E3CD63D716F6 Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/u6Nc-KtvPqoq663Z4jc97AiTYl4.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/fa/a0e01a-9bbc-44ee-98a3-597b6e2492ab/1/u6Nc-KtvPqoq663Z4jc97AiTYl4.mft Manifest number: 14B1 Signing time: Sun 19 Oct 2025 16:01:25 +0000 Manifest this update: Sun 19 Oct 2025 16:01:25 +0000 Manifest next update: Mon 20 Oct 2025 16:01:25 +0000 Files and hashes: 1: BrzMotRwWum6-plh7okwXahkOEw.roa (hash: KNrByvrRESfQLIHd88NCHYJK86NO5i3vBaQCBV7EA7E=) 2: GtppMOhe-qj4-qKPQwYM7Bndra0.roa (hash: DZ7bcQ1MagW/CKYzAoT3tgdmQpZud4AtQbSCkk/MCKU=) 3: IICQjXJW2EEkB1v0o8BM6izDgbM.roa (hash: 7Xb1rw7YXZ8yAd+5aXbmrrlzp2Uxli0xSynXq48MEYc=) 4: PZNxNz45jwhU2f2Vk-rUkU1xuZQ.roa (hash: F+PZJf4GxvF8kf0ckwm9Pxo9WyYXyL9ytkInNQ2bSTY=) 5: _8UTREX8Q0a63ua_dGhbhojBdUA.roa (hash: DL1eDSZaMbokl5Ydp9t7oF5cl2AwIO6gEepk09/TZDc=) 6: _kZUir8n1AqIU0qtCf0tRxbZpds.roa (hash: i0Gwqdkr5/j/wsvWbuGrhf4MKjNKMEm96rfhCoH477Y=) 7: bLyBa-YU5CTUEUfCcyjMqyKWtCo.roa (hash: +pvmNAe4DVU0G8NksRdtjc76cKcR1QvaqfbXLphvYek=) 8: c7nY0rggG6raEqDRkehzGz_VYtA.roa (hash: EhNdOxX4vcohdV7gKrHWK7+fsvt8pGFZe0311VfzJ1M=) 9: clWD5iSFcHwGMTWctP6MgbhffFI.roa (hash: XeY9jpVy1coomoksHYwsuAsFdSJEnTf0ShOjmRYUnB0=) 10: hEnYun4dBmY4NXRm3bASEYEJDP0.roa (hash: 9ED8ExgB7hEhZTw92vukURu1ltjtyM6wWC7Qc0GRBP4=) 11: tTkbfZxula834alUiiKULvFUhEY.roa (hash: 53gfHOJtFDupMS3Pl17R4clQixHqHEmtoBj+F2KX9dc=) 12: u6Nc-KtvPqoq663Z4jc97AiTYl4.crl (hash: /n/Gdtt1jI3RmpUQwV94KoqX2IH3+bAKbDt2+VuYR7o=) Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/fa/a0e01a-9bbc-44ee-98a3-597b6e2492ab/1/u6Nc-KtvPqoq663Z4jc97AiTYl4.crl rsync://rpki.ripe.net/repository/DEFAULT/fa/a0e01a-9bbc-44ee-98a3-597b6e2492ab/1/u6Nc-KtvPqoq663Z4jc97AiTYl4.mft rsync://rpki.ripe.net/repository/DEFAULT/u6Nc-KtvPqoq663Z4jc97AiTYl4.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Mon 20 Oct 2025 11:18:59 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:99:fd:34:46:4f:dd:ba:08:4b:8a:37:e3:cd:63:d7:16:f6 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=bba35cf8ab6f3eaa2aebadd9e2373dec0893625e Validity Not Before: Oct 19 16:01:25 2025 GMT Not After : Oct 20 16:01:25 2025 GMT Subject: CN=34ca264696b6bcf54adb260339288f410ea8d150 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:a2:fb:67:5e:1b:92:18:66:72:75:23:74:4b:b4: 58:fb:16:35:e0:68:9d:67:18:65:e0:d7:0c:d7:a3: 64:91:28:65:05:42:93:fa:cb:8c:0c:26:bd:31:fc: e4:34:1b:45:ae:56:6e:c2:b4:fa:60:6f:9b:be:b4: e9:1d:39:7c:8d:61:aa:34:e8:75:ce:cb:f7:46:a5: cd:c1:b4:8b:bf:ab:b2:bd:d1:90:79:7e:d3:06:c8: 90:ba:b4:24:ba:09:e4:a8:ba:e5:ab:14:54:58:04: f9:6f:41:88:d2:ab:09:17:5f:46:4e:7b:8e:04:9b: de:f3:24:4b:d6:94:02:7a:bf:e9:57:db:51:87:d1: 03:ea:f4:0c:1e:42:f8:b3:c9:4e:00:bf:df:8e:20: 49:d4:b9:1d:1f:64:64:c9:64:eb:76:4b:7e:a0:8e: cb:de:a8:7d:d5:76:f2:d7:06:4b:9e:57:e3:f4:fc: 44:4c:08:ad:4f:00:96:91:20:c8:82:6e:27:a1:dd: 72:5c:9a:88:f1:fb:9f:d0:5b:29:e0:d4:8a:a2:e1: 6d:74:5e:7f:6e:f8:1b:02:98:7c:0e:5f:fb:b4:8d: 47:a9:46:b2:89:1c:c4:99:55:3f:ae:fc:68:4a:45: 29:28:a1:10:55:5c:1d:d4:c6:50:a6:d5:b0:99:cd: 71:91 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 34:CA:26:46:96:B6:BC:F5:4A:DB:26:03:39:28:8F:41:0E:A8:D1:50 X509v3 Authority Key Identifier: keyid:BB:A3:5C:F8:AB:6F:3E:AA:2A:EB:AD:D9:E2:37:3D:EC:08:93:62:5E X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/u6Nc-KtvPqoq663Z4jc97AiTYl4.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/fa/a0e01a-9bbc-44ee-98a3-597b6e2492ab/1/u6Nc-KtvPqoq663Z4jc97AiTYl4.mft X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/fa/a0e01a-9bbc-44ee-98a3-597b6e2492ab/1/u6Nc-KtvPqoq663Z4jc97AiTYl4.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 90:95:e7:a7:d2:23:de:3c:28:ec:90:8e:33:8d:1a:a7:97:eb: d0:7b:d0:7a:05:7f:20:6b:43:39:98:43:e3:b0:11:64:3a:55: d8:3f:57:2f:63:2c:6e:8e:35:98:c0:51:90:96:32:89:7f:6e: c6:b1:e2:0d:99:06:5a:9b:26:73:4a:b3:7e:8d:5d:09:fb:5a: 6d:c5:40:1e:fd:e0:31:87:5d:40:07:df:ab:c3:0c:53:62:d0: 84:bc:ed:2e:b3:95:91:5c:81:6e:73:f0:a2:f4:59:67:df:e8: c6:0b:03:b2:5a:23:42:07:db:01:96:e2:07:5d:86:13:8a:f3: 3a:36:a1:0f:a8:92:53:3f:7e:e5:fa:e0:74:8a:50:43:7f:f0: da:f6:76:a0:45:f9:61:dc:9d:ad:21:42:9d:e8:b1:6e:bc:d7: 2d:c4:13:86:f0:fa:36:73:7c:8c:dc:77:6e:54:f5:a6:80:7f: 2d:c7:1e:bb:24:36:c7:5b:b9:34:20:1c:45:12:a9:49:fe:52: 1c:9a:63:ac:2b:28:81:ab:2d:57:22:07:4d:da:67:92:0c:05: 9d:07:66:20:12:c7:7f:cd:10:83:dc:9d:31:db:4d:1e:1f:1f: 11:8a:ef:a0:84:11:59:de:ab:18:14:33:3e:3d:97:bc:30:bf: 8a:78:f0:9e -----BEGIN CERTIFICATE----- MIIFFjCCA/6gAwIBAgISAZn9NEZP3boIS4o3481j1xb2MA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKGJiYTM1Y2Y4YWI2ZjNlYWEyYWViYWRkOWUyMzczZGVjMDg5 MzYyNWUwHhcNMjUxMDE5MTYwMTI1WhcNMjUxMDIwMTYwMTI1WjAzMTEwLwYDVQQD EygzNGNhMjY0Njk2YjZiY2Y1NGFkYjI2MDMzOTI4OGY0MTBlYThkMTUwMIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAovtnXhuSGGZydSN0S7RY+xY14Gid Zxhl4NcM16NkkShlBUKT+suMDCa9MfzkNBtFrlZuwrT6YG+bvrTpHTl8jWGqNOh1 zsv3RqXNwbSLv6uyvdGQeX7TBsiQurQkugnkqLrlqxRUWAT5b0GI0qsJF19GTnuO BJve8yRL1pQCer/pV9tRh9ED6vQMHkL4s8lOAL/fjiBJ1LkdH2RkyWTrdkt+oI7L 3qh91Xby1wZLnlfj9PxETAitTwCWkSDIgm4nod1yXJqI8fuf0Fsp4NSKouFtdF5/ bvgbAph8Dl/7tI1HqUayiRzEmVU/rvxoSkUpKKEQVVwd1MZQptWwmc1xkQIDAQAB o4ICIjCCAh4wHQYDVR0OBBYEFDTKJkaWtrz1StsmAzkoj0EOqNFQMB8GA1UdIwQY MBaAFLujXPirbz6qKuut2eI3PewIk2JeMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvdTZOYy1LdHZQcW9xNjYzWjRqYzk3QWlUWWw0LmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC9mYS9hMGUwMWEtOWJiYy00NGVlLTk4YTMt NTk3YjZlMjQ5MmFiLzEvdTZOYy1LdHZQcW9xNjYzWjRqYzk3QWlUWWw0Lm1mdDCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC9mYS9hMGUwMWEtOWJiYy00NGVlLTk4YTMtNTk3YjZlMjQ5MmFi LzEvdTZOYy1LdHZQcW9xNjYzWjRqYzk3QWlUWWw0LmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAkJXnp9Ij 3jwo7JCOM40ap5fr0HvQegV/IGtDOZhD47ARZDpV2D9XL2Msbo41mMBRkJYyiX9u xrHiDZkGWpsmc0qzfo1dCftabcVAHv3gMYddQAffq8MMU2LQhLztLrOVkVyBbnPw ovRZZ9/oxgsDslojQgfbAZbiB12GE4rzOjahD6iSUz9+5frgdIpQQ3/w2vZ2oEX5 YdydrSFCneixbrzXLcQThvD6NnN8jNx3blT1poB/LcceuyQ2x1u5NCAcRRKpSf5S HJpjrCsogastVyIHTdpnkgwFnQdmIBLHf80Qg9ydMdtNHh8fEYrvoIQRWd6rGBQz Pj2XvDC/injwng== -----END CERTIFICATE-----Generated at Sun Oct 19 20:59:39 2025 by rpki-client