$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/fd/fda382-4257-41c3-8ec6-27fbc99ea3c6/1/T7K7e61Q8ZIYEKAo547dZfgfan0.mft File: T7K7e61Q8ZIYEKAo547dZfgfan0.mft (raw, json) Hash identifier: EDwFffo+uq/yAQnLT2mPByiqVyKW5oFF6j57LuhSoo8= Subject key identifier: FF:BB:CA:54:60:81:90:A2:57:B3:FA:B7:E3:02:42:45:53:1B:22:B5 Authority key identifier: 4F:B2:BB:7B:AD:50:F1:92:18:10:A0:28:E7:8E:DD:65:F8:1F:6A:7D Certificate issuer: /CN=4fb2bb7bad50f1921810a028e78edd65f81f6a7d Certificate serial: 0199FAD7F9180004AB2DDC805DA682F10284 Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/T7K7e61Q8ZIYEKAo547dZfgfan0.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/fd/fda382-4257-41c3-8ec6-27fbc99ea3c6/1/T7K7e61Q8ZIYEKAo547dZfgfan0.mft Manifest number: 16EB Signing time: Sun 19 Oct 2025 05:01:21 +0000 Manifest this update: Sun 19 Oct 2025 05:01:21 +0000 Manifest next update: Mon 20 Oct 2025 05:01:21 +0000 Files and hashes: 1: 0t9k3VKpg5XpD7MVkMNQX_l1tfc.roa (hash: BzUj07EejYyyMT4Im9XK7eLGF3C5NwrA/MzbT6j9keY=) 2: 1-Z-EbEbGe8yxK4SqLWDT6Ei8Xlk.roa (hash: bPXgwf4I2BdmZ9+4bAlYkkYHbKJWbKtWdjpO/HrVdSE=) 3: 94-CfRKJcsd-Ydd4FDNQKX0Zp3E.roa (hash: T/WAoLxo0PnxVr7nnlx3pomYG3O8lrRy6KTbycXayvo=) 4: B45XvbozhNWjXkQPI-m-mjKZzQY.roa (hash: De0OPO+1rvRKuUyNflE2BB3lX6yIPfgqlTtFfQgcSF4=) 5: JaozY1LC60yKHxdIxOB-E0iX1t0.roa (hash: OPF6jBQCfVWZLlLB/67BOOY2NpB3o7UOxfL3O5afl3M=) 6: L7IG9Ln6m_zfp5UQKVs9myh5Dc0.roa (hash: jvI7jkzEKQADjdVqEl4h9ucF4+e+Qcpdc9H60hR13Xg=) 7: OdvTtHevTUmaiwlyF527qNO0goI.roa (hash: gUCiyrPmcDrIhpr3CW3AI5xYss+1xZqhcT0JZQL6Dj0=) 8: OognzbRI52-tUVqPrupLJHIhUV4.roa (hash: yDdzqTQld2bKmh7pdXZ3qLlf4D/eksuK9uXSZZ/NG7o=) 9: OryNoX3UGMIcnoUd_MsLiDY7bng.roa (hash: o+SjC06El+Rv9wA0fL1qtJp9DJ4Kq5lIbfs8S2VVaKI=) 10: T7K7e61Q8ZIYEKAo547dZfgfan0.crl (hash: z8SUFZgAHGZg0F/MwlGgCtmX1Esy7NrBk0JO/vlg+70=) 11: TW9ksFbGISrm8bYlqs2ozzpmjos.roa (hash: 0ziWkPMeV4t+G/bAbhTQxZYd+oOXOylZPAVdkzMUOzI=) 12: f4d0pGSSiHub4rrjLgiCoVR8Lcs.roa (hash: B5KcDdQ8zEYWfUf5mVlUALm2ca+VbtrqnIaM9zvKgrI=) 13: oMpMmoQ50JBqv5gfULLlkVZ87kQ.roa (hash: ZaFy/IgwDL83LKh9KTxH1aabJGJHABexBAR3ZVnZnVk=) 14: qGk1e2SSj7a867DIFcXEQy9VRwk.roa (hash: FczogQCjHMZiK1Ux2uZ685nsTVBLAXheYXkPGrZoEcc=) 15: qKcCLtEG432D5WJB88yhMQT2crs.roa (hash: DjjEwdV67kxPopToL5gQtYQLfwXVH8iDrqBq6qd58Es=) Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/fd/fda382-4257-41c3-8ec6-27fbc99ea3c6/1/T7K7e61Q8ZIYEKAo547dZfgfan0.crl rsync://rpki.ripe.net/repository/DEFAULT/fd/fda382-4257-41c3-8ec6-27fbc99ea3c6/1/T7K7e61Q8ZIYEKAo547dZfgfan0.mft rsync://rpki.ripe.net/repository/DEFAULT/T7K7e61Q8ZIYEKAo547dZfgfan0.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Mon 20 Oct 2025 05:01:21 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:99:fa:d7:f9:18:00:04:ab:2d:dc:80:5d:a6:82:f1:02:84 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=4fb2bb7bad50f1921810a028e78edd65f81f6a7d Validity Not Before: Oct 19 05:01:21 2025 GMT Not After : Oct 20 05:01:21 2025 GMT Subject: CN=ffbbca54608190a257b3fab7e3024245531b22b5 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:a9:45:44:32:a6:bc:12:0f:e3:39:7f:06:ff:cb: f4:25:73:00:48:2e:7b:e1:39:a4:fe:39:b2:73:3c: 57:13:69:c5:45:ff:9d:3a:f8:f5:7c:ad:49:41:49: ae:6e:9c:a0:10:7a:9c:be:8b:0a:08:44:35:ad:f4: f1:16:1c:7b:ab:17:8b:52:09:f0:16:3b:34:9c:92: d1:45:53:53:16:cb:02:1e:42:f2:77:79:98:4f:cd: 0b:40:cb:ff:43:64:44:39:3f:f3:c5:6d:2c:30:fb: e5:4c:6c:57:5f:4b:3d:2a:67:92:26:74:58:32:9a: 39:50:4c:10:09:79:d5:db:ea:42:96:42:fa:0e:6f: a2:6d:e8:5c:7f:96:3b:47:57:88:c1:5d:c8:1c:76: 07:8e:7a:c1:f1:52:b0:ef:45:64:7b:06:87:0f:2b: d1:06:28:2f:3d:95:23:ae:a9:37:7c:ad:c5:b9:02: 86:d9:a6:5e:3a:31:74:f2:7d:fa:5d:18:3b:3c:65: 84:5a:e8:e8:99:8b:91:dd:78:a7:54:a1:f2:61:2d: fd:0f:18:54:6e:07:81:73:e0:00:33:ce:58:9e:a2: 6c:32:35:93:c5:b9:9b:d5:6f:a0:49:8f:26:28:3b: bc:10:e6:08:64:75:6e:1f:5b:6c:b1:a5:ae:2a:67: 64:a9 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: FF:BB:CA:54:60:81:90:A2:57:B3:FA:B7:E3:02:42:45:53:1B:22:B5 X509v3 Authority Key Identifier: keyid:4F:B2:BB:7B:AD:50:F1:92:18:10:A0:28:E7:8E:DD:65:F8:1F:6A:7D X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/T7K7e61Q8ZIYEKAo547dZfgfan0.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/fd/fda382-4257-41c3-8ec6-27fbc99ea3c6/1/T7K7e61Q8ZIYEKAo547dZfgfan0.mft X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/fd/fda382-4257-41c3-8ec6-27fbc99ea3c6/1/T7K7e61Q8ZIYEKAo547dZfgfan0.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 68:25:4e:22:8a:9b:21:18:87:e9:3e:ac:36:20:52:26:67:92: b3:94:4b:0f:1b:bc:b6:45:d6:ce:cb:c2:59:45:66:fe:a4:79: 72:3d:2f:ca:8f:ab:5a:23:a5:13:c1:86:7f:19:41:01:64:3a: e8:a7:b4:fe:80:fc:09:61:6a:6e:4c:58:78:fa:4c:ec:04:71: 93:d7:95:02:7c:25:ca:c4:78:25:70:ea:4a:c6:72:c0:0c:2c: 91:7c:d5:fe:31:8b:b8:76:c4:ac:19:a9:18:88:63:04:a4:4e: 77:c8:a2:1a:86:20:5a:4d:79:df:b3:ed:0f:27:89:86:f6:21: e8:d8:c0:ce:eb:d5:25:09:07:7f:de:a3:8e:fe:0d:76:14:51: 24:f1:4b:40:52:91:a3:d2:1a:56:c9:64:ee:22:b3:06:bb:99: eb:cc:72:21:e1:df:ec:c2:2a:f0:8b:38:15:3d:86:12:92:7c: 03:5e:23:5e:70:33:b1:f4:d0:79:fa:e2:19:d4:e3:de:9a:9d: e6:a3:98:3a:ef:cf:d5:74:fe:9b:25:f8:71:18:77:f5:60:e9: 63:4c:32:db:fa:a5:39:66:4b:30:43:29:61:30:46:28:c0:c9: 30:62:8d:0b:1d:88:31:f4:8d:1a:04:7f:38:de:39:0b:54:46: c3:8a:dc:e4 -----BEGIN CERTIFICATE----- MIIFFjCCA/6gAwIBAgISAZn61/kYAASrLdyAXaaC8QKEMA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKDRmYjJiYjdiYWQ1MGYxOTIxODEwYTAyOGU3OGVkZDY1Zjgx ZjZhN2QwHhcNMjUxMDE5MDUwMTIxWhcNMjUxMDIwMDUwMTIxWjAzMTEwLwYDVQQD EyhmZmJiY2E1NDYwODE5MGEyNTdiM2ZhYjdlMzAyNDI0NTUzMWIyMmI1MIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAqUVEMqa8Eg/jOX8G/8v0JXMASC57 4Tmk/jmyczxXE2nFRf+dOvj1fK1JQUmubpygEHqcvosKCEQ1rfTxFhx7qxeLUgnw Fjs0nJLRRVNTFssCHkLyd3mYT80LQMv/Q2REOT/zxW0sMPvlTGxXX0s9KmeSJnRY Mpo5UEwQCXnV2+pClkL6Dm+ibehcf5Y7R1eIwV3IHHYHjnrB8VKw70VkewaHDyvR BigvPZUjrqk3fK3FuQKG2aZeOjF08n36XRg7PGWEWujomYuR3XinVKHyYS39DxhU bgeBc+AAM85YnqJsMjWTxbmb1W+gSY8mKDu8EOYIZHVuH1tssaWuKmdkqQIDAQAB o4ICIjCCAh4wHQYDVR0OBBYEFP+7ylRggZCiV7P6t+MCQkVTGyK1MB8GA1UdIwQY MBaAFE+yu3utUPGSGBCgKOeO3WX4H2p9MA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvVDdLN2U2MVE4WklZRUtBbzU0N2RaZmdmYW4wLmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC9mZC9mZGEzODItNDI1Ny00MWMzLThlYzYt MjdmYmM5OWVhM2M2LzEvVDdLN2U2MVE4WklZRUtBbzU0N2RaZmdmYW4wLm1mdDCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC9mZC9mZGEzODItNDI1Ny00MWMzLThlYzYtMjdmYmM5OWVhM2M2 LzEvVDdLN2U2MVE4WklZRUtBbzU0N2RaZmdmYW4wLmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAaCVOIoqb IRiH6T6sNiBSJmeSs5RLDxu8tkXWzsvCWUVm/qR5cj0vyo+rWiOlE8GGfxlBAWQ6 6Ke0/oD8CWFqbkxYePpM7ARxk9eVAnwlysR4JXDqSsZywAwskXzV/jGLuHbErBmp GIhjBKROd8iiGoYgWk1537PtDyeJhvYh6NjAzuvVJQkHf96jjv4NdhRRJPFLQFKR o9IaVslk7iKzBruZ68xyIeHf7MIq8Is4FT2GEpJ8A14jXnAzsfTQefriGdTj3pqd 5qOYOu/P1XT+myX4cRh39WDpY0wy2/qlOWZLMEMpYTBGKMDJMGKNCx2IMfSNGgR/ ON45C1RGw4rc5A== -----END CERTIFICATE-----Generated at Sun Oct 19 15:06:30 2025 by rpki-client