$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/58/952230-c262-41cc-b956-cfc46a76ec78/1/N04nKbFzaYkKFRL2Q80I5Lov9BQ.mft File: N04nKbFzaYkKFRL2Q80I5Lov9BQ.mft (raw, json) Hash identifier: v2snjgyJCvJIeIsVRgacb+1wVwb8qH2c6+76hBWjUTE= Subject key identifier: 06:A1:6C:0D:74:18:83:98:C7:61:38:C9:90:21:62:E8:E2:75:8D:DC Authority key identifier: 37:4E:27:29:B1:73:69:89:0A:15:12:F6:43:CD:08:E4:BA:2F:F4:14 Certificate issuer: /CN=374e2729b17369890a1512f643cd08e4ba2ff414 Certificate serial: 0199CFED72D05261CD52CB9986D1F38A7184 Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/N04nKbFzaYkKFRL2Q80I5Lov9BQ.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/58/952230-c262-41cc-b956-cfc46a76ec78/1/N04nKbFzaYkKFRL2Q80I5Lov9BQ.mft Manifest number: 0F40 Signing time: Fri 10 Oct 2025 21:01:09 +0000 Manifest this update: Fri 10 Oct 2025 21:01:09 +0000 Manifest next update: Sat 11 Oct 2025 21:01:09 +0000 Files and hashes: 1: 1-KKzJUCNPPXvfs50dce1cbfiWMY.roa (hash: jVGyXLe98f2aA3WGzwFHo9btWoP5lEFJLj3g4uMkn5w=) 2: 3520iAwmR0BvV2MPg7TBl3ALKj4.roa (hash: w6lShDZfgepO7x4Np/TeK1Ek0txjQUSZQ5viOdvUQa4=) 3: B61tQVa6NJ0bpDCTZZdDA-JxPNs.roa (hash: ZKlioiMsbmVox1tDp8lKCvDKm6sseRUmvR0/0NjHIaA=) 4: GRA3t_KyWFYxg2CQJHBaXlViSP8.roa (hash: N4cHeR4tmiAj9zbtfRvcPi/r/p86jgb0tb1toEi1byE=) 5: N04nKbFzaYkKFRL2Q80I5Lov9BQ.crl (hash: iJG4GHnY9Mtrvx7RhE4sFt6BhGM3fxl+kQypn/F1Yyw=) 6: gpxmpBKSRlxJbhTXj2ljKLoLY98.roa (hash: ZoAsNs3QEg3YCXPSplhPm5vvHec86X8GlWAXHSj/DDE=) 7: mVQLg2vFtKhXYkiJgy9EzEclH78.roa (hash: 8XlUZL+eJtMSbbcbuZH2lnnnxy7c34P4HzZYP3Ogx2U=) 8: mtEhXVsq4tQu2Q9mIDoxxW8IYZw.roa (hash: AojxXVHH/gbQ3MPiJY/87qknZA5A4RNwVQYYZL9bDe8=) 9: sVAaC1BBBoytcdwHWkooZRIR8-s.roa (hash: 36HHVgLaL2pXQjYCKOW8rL/zYREdNh/lyntTzD4auF8=) 10: wg9s7DQX6eW3dDdaARTAPpRTzqc.roa (hash: BT19Mg+zBya+5K3DArKvF9emtWlSQhaPjSW20vhvIVk=) Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/58/952230-c262-41cc-b956-cfc46a76ec78/1/N04nKbFzaYkKFRL2Q80I5Lov9BQ.crl rsync://rpki.ripe.net/repository/DEFAULT/58/952230-c262-41cc-b956-cfc46a76ec78/1/N04nKbFzaYkKFRL2Q80I5Lov9BQ.mft rsync://rpki.ripe.net/repository/DEFAULT/N04nKbFzaYkKFRL2Q80I5Lov9BQ.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Sat 11 Oct 2025 21:01:09 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:99:cf:ed:72:d0:52:61:cd:52:cb:99:86:d1:f3:8a:71:84 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=374e2729b17369890a1512f643cd08e4ba2ff414 Validity Not Before: Oct 10 21:01:09 2025 GMT Not After : Oct 11 21:01:09 2025 GMT Subject: CN=06a16c0d74188398c76138c9902162e8e2758ddc Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:87:44:f6:49:05:64:7c:ac:9c:d7:75:29:04:77: 6d:01:d9:d4:b5:45:fa:b1:b2:9d:82:b7:9f:39:9b: fd:ed:26:a1:9c:b5:68:8d:78:9e:2b:82:19:4d:bb: 09:17:bc:3d:72:55:f5:98:1a:78:59:8b:b6:a6:93: d9:9b:db:3c:59:c2:30:c8:70:ea:81:17:f4:1f:e3: 59:38:e3:16:9d:8a:3b:56:6a:d2:1a:1c:52:39:e5: fb:9d:29:ef:e3:de:eb:c4:76:b5:d6:36:77:7c:ac: 0e:64:7b:49:5d:3e:16:51:18:b4:f3:47:0f:55:a6: be:28:03:28:f3:02:a0:e6:c4:5c:70:c0:f5:71:4a: 9a:46:62:41:12:b8:d3:5b:05:22:bd:7c:83:7f:1b: 7d:4a:1a:57:99:1a:9c:d9:4e:41:4f:6d:08:60:ef: c7:c8:3b:6a:ca:d3:3e:4e:cd:dc:31:f6:98:e5:b9: 2a:fe:53:a9:b2:e0:e6:4d:69:f5:5d:5e:78:76:63: ac:6f:50:b1:f7:f8:b1:5c:37:14:79:07:c1:b2:67: e2:ef:1f:21:b5:ee:0b:00:8c:2a:1a:32:c0:56:95: fc:db:f3:08:c0:f5:38:aa:d0:8b:9a:06:d1:cd:dd: af:5d:71:b5:4a:9c:38:07:ca:d6:c4:98:dd:b2:1f: 04:e7 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 06:A1:6C:0D:74:18:83:98:C7:61:38:C9:90:21:62:E8:E2:75:8D:DC X509v3 Authority Key Identifier: keyid:37:4E:27:29:B1:73:69:89:0A:15:12:F6:43:CD:08:E4:BA:2F:F4:14 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/N04nKbFzaYkKFRL2Q80I5Lov9BQ.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/58/952230-c262-41cc-b956-cfc46a76ec78/1/N04nKbFzaYkKFRL2Q80I5Lov9BQ.mft X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/58/952230-c262-41cc-b956-cfc46a76ec78/1/N04nKbFzaYkKFRL2Q80I5Lov9BQ.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 56:24:b0:f3:60:c7:8b:2a:a1:00:6f:be:d7:27:a3:4a:33:99: 17:ed:62:e1:df:96:0b:67:ca:4a:c1:33:ab:70:46:c0:a6:0b: 23:60:a0:82:95:da:0d:fa:a1:ce:6b:17:3f:16:9f:43:00:74: 31:29:6b:48:d2:47:22:1f:af:ab:51:c7:7d:53:ec:81:5f:b2: 6d:95:8f:e7:8b:64:4e:87:29:55:3e:f5:3e:e7:72:6f:35:55: e0:93:3c:9d:02:9f:43:16:8e:d0:4f:0c:2a:ac:0c:e5:cf:66: 78:e6:a0:26:6c:fb:6c:92:0c:de:0e:80:86:67:91:fd:90:de: 92:73:0b:8a:ab:47:74:dc:de:44:23:cc:ea:40:fe:15:8b:97: 55:e1:00:24:4d:33:70:9e:17:96:7c:77:c0:2f:ed:fc:90:fa: 8d:1e:cc:25:9b:7b:ee:59:cb:6c:24:75:5f:09:48:de:18:c5: 2e:f1:b5:0f:4f:be:92:d2:6e:91:06:23:f8:d3:75:6b:47:dc: 89:01:18:d5:66:3b:a9:81:2f:03:8e:0f:68:8d:64:18:17:71: c9:e7:1a:ad:07:1b:08:75:93:75:42:93:ab:8e:0b:17:8d:d2: 45:6c:2a:ea:2f:f2:0b:83:eb:04:54:84:90:7f:2f:a9:1a:79: 55:d0:19:05 -----BEGIN CERTIFICATE----- MIIFFjCCA/6gAwIBAgISAZnP7XLQUmHNUsuZhtHzinGEMA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKDM3NGUyNzI5YjE3MzY5ODkwYTE1MTJmNjQzY2QwOGU0YmEy ZmY0MTQwHhcNMjUxMDEwMjEwMTA5WhcNMjUxMDExMjEwMTA5WjAzMTEwLwYDVQQD EygwNmExNmMwZDc0MTg4Mzk4Yzc2MTM4Yzk5MDIxNjJlOGUyNzU4ZGRjMIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAh0T2SQVkfKyc13UpBHdtAdnUtUX6 sbKdgrefOZv97SahnLVojXieK4IZTbsJF7w9clX1mBp4WYu2ppPZm9s8WcIwyHDq gRf0H+NZOOMWnYo7VmrSGhxSOeX7nSnv497rxHa11jZ3fKwOZHtJXT4WURi080cP Vaa+KAMo8wKg5sRccMD1cUqaRmJBErjTWwUivXyDfxt9ShpXmRqc2U5BT20IYO/H yDtqytM+Ts3cMfaY5bkq/lOpsuDmTWn1XV54dmOsb1Cx9/ixXDcUeQfBsmfi7x8h te4LAIwqGjLAVpX82/MIwPU4qtCLmgbRzd2vXXG1Spw4B8rWxJjdsh8E5wIDAQAB o4ICIjCCAh4wHQYDVR0OBBYEFAahbA10GIOYx2E4yZAhYujidY3cMB8GA1UdIwQY MBaAFDdOJymxc2mJChUS9kPNCOS6L/QUMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvTjA0bktiRnphWWtLRlJMMlE4MEk1TG92OUJRLmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC81OC85NTIyMzAtYzI2Mi00MWNjLWI5NTYt Y2ZjNDZhNzZlYzc4LzEvTjA0bktiRnphWWtLRlJMMlE4MEk1TG92OUJRLm1mdDCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC81OC85NTIyMzAtYzI2Mi00MWNjLWI5NTYtY2ZjNDZhNzZlYzc4 LzEvTjA0bktiRnphWWtLRlJMMlE4MEk1TG92OUJRLmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAViSw82DH iyqhAG++1yejSjOZF+1i4d+WC2fKSsEzq3BGwKYLI2CggpXaDfqhzmsXPxafQwB0 MSlrSNJHIh+vq1HHfVPsgV+ybZWP54tkTocpVT71PudybzVV4JM8nQKfQxaO0E8M KqwM5c9meOagJmz7bJIM3g6AhmeR/ZDeknMLiqtHdNzeRCPM6kD+FYuXVeEAJE0z cJ4Xlnx3wC/t/JD6jR7MJZt77lnLbCR1XwlI3hjFLvG1D0++ktJukQYj+NN1a0fc iQEY1WY7qYEvA44PaI1kGBdxyecarQcbCHWTdUKTq44LF43SRWwq6i/yC4PrBFSE kH8vqRp5VdAZBQ== -----END CERTIFICATE-----Generated at Sat Oct 11 06:35:03 2025 by rpki-client