$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/fd/1ccf25-20de-4b2e-a0e1-de4acf447fae/1/eXmGPOqCrrjp3zhLOapRdvS8-mE.mft File: eXmGPOqCrrjp3zhLOapRdvS8-mE.mft (raw, json) Hash identifier: 2P9IfFzpYaT4KhnEgUPmo2KyVcq4qe1gd4YvV/c3y8I= Subject key identifier: C3:30:18:41:E4:91:6A:BE:C7:D0:37:B1:E9:B8:10:F4:E3:8E:D6:9A Authority key identifier: 79:79:86:3C:EA:82:AE:B8:E9:DF:38:4B:39:AA:51:76:F4:BC:FA:61 Certificate issuer: /CN=7979863cea82aeb8e9df384b39aa5176f4bcfa61 Certificate serial: 0199FBEADDA131A8FD048D2A54BEEC5F3A79 Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/eXmGPOqCrrjp3zhLOapRdvS8-mE.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/fd/1ccf25-20de-4b2e-a0e1-de4acf447fae/1/eXmGPOqCrrjp3zhLOapRdvS8-mE.mft Manifest number: 1705 Signing time: Sun 19 Oct 2025 10:01:37 +0000 Manifest this update: Sun 19 Oct 2025 10:01:37 +0000 Manifest next update: Mon 20 Oct 2025 10:01:37 +0000 Files and hashes: 1: 31B5K7vkAfS9R2wkGuV5dcAnL2Y.roa (hash: O89Ry4yQ6lrE+ydQl9ey5gr4XCsYEJZz/2ZEEVTUklM=) 2: 8rBNukWPHPmFUpvlkGmzTz1-HwA.roa (hash: tMcco5dxWlTIQfy3zxbp0EQ9rOWiTqcDWIU/jeQq+bM=) 3: AuIXsACFZFXiRbUNGuqesbMnYNk.roa (hash: AtCFXdHEG1WMWeYjbN29zoI3CDK+hXSx8POzE7WNroc=) 4: DrV2xA7Yd-hZFiq3pO9rygl2qg0.roa (hash: TVf6eSJU2syGlD0lzcyv3W0pP95vSrCKIhPdX0AUyh0=) 5: GGh-0xxwn6ceElDQMHRGmEsQE-s.roa (hash: P3CSh7y+NvPz/ZjtWmpED7vAzzUGfZNIvd2EgvFxP9s=) 6: NmG_HXr74xhss_g6667RcEUKRLI.roa (hash: w4iJzBXqF4+nBtbBp9H18XsHRW5050KpbO/LhdFePIo=) 7: OeWAQhxz5E883h7RJjR3cmkBM6o.roa (hash: SpK+6FCkO+sEnLY+zrox32fWgUHKX5y3hElZSDHvkaU=) 8: ZVJfIWSCZIVSTo9PXiEHKhrJCaM.roa (hash: REntsWwwRsVHSdpCDEerInchIORTXEiS2eQnOBf/kfw=) 9: eXmGPOqCrrjp3zhLOapRdvS8-mE.crl (hash: 6qfoOJAXddPUJu4rkj2zD7Nm3jz5Jm/lMjMdRAz1r88=) 10: jRyIBgdtXReJ9oHBVuw4FaEWM-0.roa (hash: ZszsBIs7CJREdsDcllx0N3t5IqBzFvq0JJZ2fLMu8PY=) 11: pGXlBe8mvqpUo_lCHeYFkShv2K8.roa (hash: rjd6cps92Ja94+46vbe5lft5y/2s10gUp3FV0e699LY=) 12: zIH5sPlMx70fyP1Az3Csaj7WyTI.roa (hash: 2aeoW9K+GdEGc7tRsUNmCwR+CPzyrfG3s/F0EGb6/Pk=) Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/fd/1ccf25-20de-4b2e-a0e1-de4acf447fae/1/eXmGPOqCrrjp3zhLOapRdvS8-mE.crl rsync://rpki.ripe.net/repository/DEFAULT/fd/1ccf25-20de-4b2e-a0e1-de4acf447fae/1/eXmGPOqCrrjp3zhLOapRdvS8-mE.mft rsync://rpki.ripe.net/repository/DEFAULT/eXmGPOqCrrjp3zhLOapRdvS8-mE.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Mon 20 Oct 2025 10:01:37 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:99:fb:ea:dd:a1:31:a8:fd:04:8d:2a:54:be:ec:5f:3a:79 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=7979863cea82aeb8e9df384b39aa5176f4bcfa61 Validity Not Before: Oct 19 10:01:37 2025 GMT Not After : Oct 20 10:01:37 2025 GMT Subject: CN=c3301841e4916abec7d037b1e9b810f4e38ed69a Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:a0:b2:b7:36:c7:cc:cf:91:8f:31:1c:c8:7c:6e: a8:2f:5f:b9:2b:11:fc:79:aa:e4:28:44:e4:4f:0c: c3:6d:13:a3:1d:f1:27:77:b6:4a:28:c4:c1:98:b8: 1b:2d:37:f4:a3:50:b2:a7:11:06:1f:2a:ff:98:33: 9e:b2:55:c8:9f:d7:e0:d2:30:31:97:4f:7e:97:c2: d7:68:2c:58:7d:f3:7b:d3:fc:37:7c:91:23:cc:7b: 0e:3c:5f:c3:af:a0:23:75:7e:97:96:d8:e0:18:72: ea:d5:43:a7:5b:05:4d:58:11:ab:e7:e8:08:87:bb: 90:15:17:9e:d9:17:eb:06:cf:fe:99:43:95:dc:38: 17:5f:03:d8:53:41:94:10:73:02:8d:fb:73:be:d3: dc:8c:a8:10:93:a6:7c:f0:35:d9:de:78:70:c7:43: cf:21:b8:85:62:c6:07:45:47:9e:9a:cc:70:59:c3: 0a:cc:98:38:ee:d8:eb:4b:0a:48:d7:73:dd:18:e4: 9e:e0:21:bf:81:83:da:c7:2a:10:ec:e7:6f:88:bc: 9a:4b:b8:ce:11:fe:2e:ee:de:8d:4d:be:0e:2f:52: a9:c7:4a:f5:2c:d2:7e:ec:51:3b:f6:58:6d:ff:79: 4f:86:63:ab:6c:e8:38:c8:25:3a:36:ad:91:3b:90: 89:8d Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: C3:30:18:41:E4:91:6A:BE:C7:D0:37:B1:E9:B8:10:F4:E3:8E:D6:9A X509v3 Authority Key Identifier: keyid:79:79:86:3C:EA:82:AE:B8:E9:DF:38:4B:39:AA:51:76:F4:BC:FA:61 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/eXmGPOqCrrjp3zhLOapRdvS8-mE.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/fd/1ccf25-20de-4b2e-a0e1-de4acf447fae/1/eXmGPOqCrrjp3zhLOapRdvS8-mE.mft X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/fd/1ccf25-20de-4b2e-a0e1-de4acf447fae/1/eXmGPOqCrrjp3zhLOapRdvS8-mE.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 99:f5:9f:17:a0:b4:2d:57:64:37:5d:f5:4c:77:92:a9:32:3b: ac:a3:71:33:6c:27:96:8f:3b:3a:5b:d9:b5:36:9d:63:6a:a2: 2e:92:64:6a:c5:a1:4f:8c:56:6f:cd:d8:d0:36:06:72:c1:db: 51:1e:e5:19:d7:a9:db:96:9e:12:34:00:49:44:d1:3f:d1:98: 7d:85:89:f5:b9:1e:7c:82:b8:5a:29:e6:31:7b:c2:ac:eb:e4: 65:53:f5:20:fb:67:f1:10:a2:da:94:5b:c2:8f:13:21:85:30: c1:10:ae:63:d1:6e:45:28:cb:ab:2e:59:2a:4c:6e:62:22:65: 58:56:d5:73:49:f7:13:2c:4e:58:c5:f6:57:24:3e:34:e1:b9: df:49:17:c5:03:58:d5:73:d7:98:29:b6:74:84:83:62:62:57: f3:cf:14:db:37:d6:f1:65:dd:41:a9:fe:64:88:38:94:1d:3e: e9:15:cc:57:99:45:4c:1b:e3:46:1a:75:e9:21:54:4f:0b:4e: 0f:8a:52:c8:d2:d4:49:68:c5:fc:7d:84:cf:ed:ae:b4:7c:7f: 0f:a7:64:62:98:f3:70:3a:ea:8f:32:16:04:22:0a:11:63:2b: 7c:4c:13:c7:e0:f9:ca:34:2e:a7:e2:7f:b6:d6:20:e5:8d:98: fa:87:e2:6a -----BEGIN CERTIFICATE----- MIIFFjCCA/6gAwIBAgISAZn76t2hMaj9BI0qVL7sXzp5MA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKDc5Nzk4NjNjZWE4MmFlYjhlOWRmMzg0YjM5YWE1MTc2ZjRi Y2ZhNjEwHhcNMjUxMDE5MTAwMTM3WhcNMjUxMDIwMTAwMTM3WjAzMTEwLwYDVQQD EyhjMzMwMTg0MWU0OTE2YWJlYzdkMDM3YjFlOWI4MTBmNGUzOGVkNjlhMIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAoLK3NsfMz5GPMRzIfG6oL1+5KxH8 earkKETkTwzDbROjHfEnd7ZKKMTBmLgbLTf0o1CypxEGHyr/mDOeslXIn9fg0jAx l09+l8LXaCxYffN70/w3fJEjzHsOPF/Dr6AjdX6XltjgGHLq1UOnWwVNWBGr5+gI h7uQFRee2RfrBs/+mUOV3DgXXwPYU0GUEHMCjftzvtPcjKgQk6Z88DXZ3nhwx0PP IbiFYsYHRUeemsxwWcMKzJg47tjrSwpI13PdGOSe4CG/gYPaxyoQ7OdviLyaS7jO Ef4u7t6NTb4OL1Kpx0r1LNJ+7FE79lht/3lPhmOrbOg4yCU6Nq2RO5CJjQIDAQAB o4ICIjCCAh4wHQYDVR0OBBYEFMMwGEHkkWq+x9A3sem4EPTjjtaaMB8GA1UdIwQY MBaAFHl5hjzqgq646d84SzmqUXb0vPphMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvZVhtR1BPcUNycmpwM3poTE9hcFJkdlM4LW1FLmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC9mZC8xY2NmMjUtMjBkZS00YjJlLWEwZTEt ZGU0YWNmNDQ3ZmFlLzEvZVhtR1BPcUNycmpwM3poTE9hcFJkdlM4LW1FLm1mdDCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC9mZC8xY2NmMjUtMjBkZS00YjJlLWEwZTEtZGU0YWNmNDQ3ZmFl LzEvZVhtR1BPcUNycmpwM3poTE9hcFJkdlM4LW1FLmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAmfWfF6C0 LVdkN131THeSqTI7rKNxM2wnlo87OlvZtTadY2qiLpJkasWhT4xWb83Y0DYGcsHb UR7lGdep25aeEjQASUTRP9GYfYWJ9bkefIK4WinmMXvCrOvkZVP1IPtn8RCi2pRb wo8TIYUwwRCuY9FuRSjLqy5ZKkxuYiJlWFbVc0n3EyxOWMX2VyQ+NOG530kXxQNY 1XPXmCm2dISDYmJX888U2zfW8WXdQan+ZIg4lB0+6RXMV5lFTBvjRhp16SFUTwtO D4pSyNLUSWjF/H2Ez+2utHx/D6dkYpjzcDrqjzIWBCIKEWMrfEwTx+D5yjQup+J/ ttYg5Y2Y+ofiag== -----END CERTIFICATE-----Generated at Sun Oct 19 18:07:00 2025 by rpki-client