$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/fb/79e905-fb0d-4b8b-9390-50d2b70bcf31/1/8uKBD0mzb91kHDJr0d5OQtEosEY.mft File: 8uKBD0mzb91kHDJr0d5OQtEosEY.mft (raw, json) Hash identifier: D3pTrNZhuR2VhjbpkXRXHH1zGYR0O9SnmcPfXafVEPE= Subject key identifier: CB:57:63:E1:A8:79:F1:29:A2:A1:34:EC:19:2C:21:62:15:C9:AF:0C Authority key identifier: F2:E2:81:0F:49:B3:6F:DD:64:1C:32:6B:D1:DE:4E:42:D1:28:B0:46 Certificate issuer: /CN=f2e2810f49b36fdd641c326bd1de4e42d128b046 Certificate serial: 0199FC58B25BF06CC140DED76D11B3B75771 Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/8uKBD0mzb91kHDJr0d5OQtEosEY.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/fb/79e905-fb0d-4b8b-9390-50d2b70bcf31/1/8uKBD0mzb91kHDJr0d5OQtEosEY.mft Manifest number: 16F0 Signing time: Sun 19 Oct 2025 12:01:35 +0000 Manifest this update: Sun 19 Oct 2025 12:01:35 +0000 Manifest next update: Mon 20 Oct 2025 12:01:35 +0000 Files and hashes: 1: 1nLm5M5xfJ_suNGM5E1Zv1P9buc.roa (hash: 8x4G+E8iExmOXonfPhkgFAssRVwUmXgRDU/QwrPhfTc=) 2: 8uKBD0mzb91kHDJr0d5OQtEosEY.crl (hash: TsHgiIu/P46fo20ayF8JhQm3BTenKTFJXu+9y+/bT10=) 3: LRM9_QXJ86lLn_T4yr6pQZsd-6U.roa (hash: O97zVnycTINnlYntMUnMI33GyBSK5H4R2ai1eQR3zfs=) 4: Lfi2kFGwKCjTFh-UgGwG9fE3y28.roa (hash: vsaKPg/3Dci9H1drLTZRN5KQySI72yp3XcQ7k6Dlcjo=) 5: _rcbdTd7xszqNhgAb_FkQpQyFAU.roa (hash: tlTacIT/p2BLnUW4V7ZFwYt3E+NE62BrqrDQeWEcWEY=) 6: cSIsSraiS7nIkZaNHDPeLhmfWzw.roa (hash: 6RDnXeZI7Aggjdy420rt58R6tW8oEB+ao9gxbA9zhLY=) 7: cT2NBd6CzvlyjEEfvaGsHGPxIbc.roa (hash: 5qkGkFqB6MaSnnKFQR4ILKQDwkrOhYsEol0WfvvJ+hs=) 8: mgsVdxyrFBjubnGQwn9ZD0Aa8KQ.roa (hash: WUYiTP5VTCdXuJgIU+Sgp6znUUnvoPyUsuU1tYAduHA=) 9: qhtmZa0GBJu-LNeg5d5k1hem6bE.roa (hash: Uh/IbFG52qMt7jSUYgnpbLvKrotH1qlqQb6PDTI4TP4=) 10: wodM1-EUQJUVgPu2FeLNzhcjNAQ.roa (hash: oqpoLkjU7X7RENp32UMSCTEvk2YhpXGRDxHAfJ9Hiks=) Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/fb/79e905-fb0d-4b8b-9390-50d2b70bcf31/1/8uKBD0mzb91kHDJr0d5OQtEosEY.crl rsync://rpki.ripe.net/repository/DEFAULT/fb/79e905-fb0d-4b8b-9390-50d2b70bcf31/1/8uKBD0mzb91kHDJr0d5OQtEosEY.mft rsync://rpki.ripe.net/repository/DEFAULT/8uKBD0mzb91kHDJr0d5OQtEosEY.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Mon 20 Oct 2025 11:18:59 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:99:fc:58:b2:5b:f0:6c:c1:40:de:d7:6d:11:b3:b7:57:71 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=f2e2810f49b36fdd641c326bd1de4e42d128b046 Validity Not Before: Oct 19 12:01:35 2025 GMT Not After : Oct 20 12:01:35 2025 GMT Subject: CN=cb5763e1a879f129a2a134ec192c216215c9af0c Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:ec:5f:b5:94:42:53:84:87:c7:07:cb:a0:17:dc: 11:31:a1:04:42:84:fe:49:77:61:10:ff:dc:93:b4: 60:b9:fd:4f:e9:92:a5:ea:0d:49:13:dc:95:96:8a: ac:44:0f:1f:d2:77:c2:aa:63:9d:5d:4e:76:55:02: f9:22:cf:41:99:f1:71:65:e8:1a:52:d4:3e:32:54: 26:d4:eb:9b:32:90:46:bb:87:a0:03:22:83:5d:62: 62:28:49:1a:fa:d9:a9:eb:eb:86:2c:6c:f6:2f:b9: 6a:ab:f5:38:4c:8a:2d:82:01:ee:53:68:c6:92:c6: 08:03:f2:66:a8:fc:d0:e7:df:b7:b1:90:ed:68:a8: 4f:4e:2a:3f:96:f7:02:23:23:a3:e3:50:33:93:21: a0:a7:95:5d:a0:63:46:5c:e7:c6:ed:7d:00:0f:b0: 22:6e:5f:84:98:3a:4b:63:a1:79:11:ee:24:dc:e8: c7:a8:7c:2e:af:39:a4:d0:84:05:13:be:a5:89:0c: 20:18:b7:fd:0e:c5:2e:ab:3f:3b:6d:67:c4:91:27: 8f:5c:3f:0f:f5:09:0e:c4:04:39:cb:8a:47:51:d3: 48:95:20:2f:bc:0d:57:4b:d5:bd:b7:c6:ff:5c:eb: 4b:67:10:3f:98:cb:bd:27:4a:98:7d:6b:06:49:90: 1b:a9 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: CB:57:63:E1:A8:79:F1:29:A2:A1:34:EC:19:2C:21:62:15:C9:AF:0C X509v3 Authority Key Identifier: keyid:F2:E2:81:0F:49:B3:6F:DD:64:1C:32:6B:D1:DE:4E:42:D1:28:B0:46 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/8uKBD0mzb91kHDJr0d5OQtEosEY.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/fb/79e905-fb0d-4b8b-9390-50d2b70bcf31/1/8uKBD0mzb91kHDJr0d5OQtEosEY.mft X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/fb/79e905-fb0d-4b8b-9390-50d2b70bcf31/1/8uKBD0mzb91kHDJr0d5OQtEosEY.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 96:67:7b:b8:48:a2:4c:1f:ce:57:22:d3:c5:b8:0f:2a:1a:a7: 75:7c:3b:22:df:56:1d:4b:c0:11:37:3d:ac:9d:32:05:ce:ec: 42:b1:cf:37:68:97:11:83:ba:1f:28:f7:05:15:dc:cc:53:7a: b1:a0:3b:7e:0c:16:12:22:c0:cd:c2:c3:5d:23:57:9b:82:cf: 83:b5:b2:8f:28:7a:cd:80:20:b7:22:85:f2:82:a1:11:22:a8: 22:cc:04:ae:25:5d:f6:78:93:a5:1a:6b:2d:ad:89:ab:34:94: fb:f3:39:19:1a:bb:07:db:88:96:56:88:e9:0b:cc:06:e2:77: 30:ad:ae:6c:8d:fa:6a:ed:ab:ff:12:21:8a:ee:4f:e3:ba:e0: ed:d5:2a:fa:37:b1:f7:73:24:c2:80:22:de:7e:30:70:0f:be: d0:19:bd:b2:bf:71:7d:b2:51:60:6a:4d:ef:27:c6:51:20:17: 09:64:59:5f:27:49:5e:37:ec:d7:53:72:a5:12:30:bc:02:cc: 1d:9b:c6:e4:f3:96:6e:40:92:d7:69:d8:21:6b:0b:a2:30:64: dc:f7:0a:35:3e:3e:e9:95:4b:e7:5b:9b:5c:19:22:53:2a:fe: 00:b6:72:c3:b2:b4:b0:2d:f9:26:be:07:a1:44:6f:c5:f5:95: 3b:d2:1e:f1 -----BEGIN CERTIFICATE----- MIIFFjCCA/6gAwIBAgISAZn8WLJb8GzBQN7XbRGzt1dxMA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKGYyZTI4MTBmNDliMzZmZGQ2NDFjMzI2YmQxZGU0ZTQyZDEy OGIwNDYwHhcNMjUxMDE5MTIwMTM1WhcNMjUxMDIwMTIwMTM1WjAzMTEwLwYDVQQD EyhjYjU3NjNlMWE4NzlmMTI5YTJhMTM0ZWMxOTJjMjE2MjE1YzlhZjBjMIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEA7F+1lEJThIfHB8ugF9wRMaEEQoT+ SXdhEP/ck7Rguf1P6ZKl6g1JE9yVloqsRA8f0nfCqmOdXU52VQL5Is9BmfFxZega UtQ+MlQm1OubMpBGu4egAyKDXWJiKEka+tmp6+uGLGz2L7lqq/U4TIotggHuU2jG ksYIA/JmqPzQ59+3sZDtaKhPTio/lvcCIyOj41AzkyGgp5VdoGNGXOfG7X0AD7Ai bl+EmDpLY6F5Ee4k3OjHqHwurzmk0IQFE76liQwgGLf9DsUuqz87bWfEkSePXD8P 9QkOxAQ5y4pHUdNIlSAvvA1XS9W9t8b/XOtLZxA/mMu9J0qYfWsGSZAbqQIDAQAB o4ICIjCCAh4wHQYDVR0OBBYEFMtXY+GoefEpoqE07BksIWIVya8MMB8GA1UdIwQY MBaAFPLigQ9Js2/dZBwya9HeTkLRKLBGMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvOHVLQkQwbXpiOTFrSERKcjBkNU9RdEVvc0VZLmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC9mYi83OWU5MDUtZmIwZC00YjhiLTkzOTAt NTBkMmI3MGJjZjMxLzEvOHVLQkQwbXpiOTFrSERKcjBkNU9RdEVvc0VZLm1mdDCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC9mYi83OWU5MDUtZmIwZC00YjhiLTkzOTAtNTBkMmI3MGJjZjMx LzEvOHVLQkQwbXpiOTFrSERKcjBkNU9RdEVvc0VZLmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAlmd7uEii TB/OVyLTxbgPKhqndXw7It9WHUvAETc9rJ0yBc7sQrHPN2iXEYO6Hyj3BRXczFN6 saA7fgwWEiLAzcLDXSNXm4LPg7Wyjyh6zYAgtyKF8oKhESKoIswEriVd9niTpRpr La2JqzSU+/M5GRq7B9uIllaI6QvMBuJ3MK2ubI36au2r/xIhiu5P47rg7dUq+jex 93MkwoAi3n4wcA++0Bm9sr9xfbJRYGpN7yfGUSAXCWRZXydJXjfs11NypRIwvALM HZvG5POWbkCS12nYIWsLojBk3PcKNT4+6ZVL51ubXBkiUyr+ALZyw7K0sC35Jr4H oURvxfWVO9Ie8Q== -----END CERTIFICATE-----Generated at Sun Oct 19 18:03:05 2025 by rpki-client