$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/0f/ba0bd3-b365-4461-8ffa-1f5431e2a5af/1/1M4r8AAc1DDpJ3-wDtGr5RwLXHw.mft File: 1M4r8AAc1DDpJ3-wDtGr5RwLXHw.mft (raw, json) Hash identifier: EhJABlaH/qppRbYBg8lhclktRTgexYheNvMdbOLD+dE= Subject key identifier: D8:26:33:99:97:A4:BB:3B:ED:10:E9:FD:74:9C:59:EC:C1:2E:DB:8A Authority key identifier: D4:CE:2B:F0:00:1C:D4:30:E9:27:7F:B0:0E:D1:AB:E5:1C:0B:5C:7C Certificate issuer: /CN=d4ce2bf0001cd430e9277fb00ed1abe51c0b5c7c Certificate serial: 019A183C9804DCD1E60E8DBE5DBDAB9F1AC9 Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/1M4r8AAc1DDpJ3-wDtGr5RwLXHw.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/0f/ba0bd3-b365-4461-8ffa-1f5431e2a5af/1/1M4r8AAc1DDpJ3-wDtGr5RwLXHw.mft Manifest number: 038B Signing time: Fri 24 Oct 2025 22:00:15 +0000 Manifest this update: Fri 24 Oct 2025 22:00:15 +0000 Manifest next update: Sat 25 Oct 2025 22:00:15 +0000 Files and hashes: 1: 1M4r8AAc1DDpJ3-wDtGr5RwLXHw.crl (hash: MDHhVWNEjCDVMOKlJPT9R76GfrfDXDLgyVJ5ZuCinSA=) 2: 3GUm_HsThPUJjf5Xl65FHt13AV8.roa (hash: Lhftb+taQ8v4bYwk3pVYGnzP3vZQbnGHWFTFTRUD1PM=) 3: 65uCTGHnj2d-ZMz37cNEU4MDVwU.roa (hash: YIZDFvb3SYhRXBIcle+tVLHY9SC8i/bp1JBNwsY9//E=) 4: B0NZnOPP2h8oD-RNqJ-Ta2yq_Fc.roa (hash: hPfH3C1Uf5sAxbquvsid9TZ9qowMzn90bG/96XgZCYg=) 5: Ft-8xYXFXF_pxWdqchjDObURQAQ.roa (hash: Bbe7isVG2thClqzLz0laVwUWwhKyZ8mXmscJ7ADBYEc=) 6: SO2aAnB4S5yHRruYM18XroAhS7s.roa (hash: Pz0dkuO54GBo11/DomEvI/BTZKCMV4IWlZC7klvn2ps=) 7: S_UvXYrcwi02mD9XS72xM5GP0XM.roa (hash: tDWixxPYWWKm64Sflrs16Hs5q2OnmoXj3QlJNoGIgAE=) 8: UF3Vre6C-2uWPd901r4ODYt5AHA.roa (hash: eNmvyxetTd0QVI6G0VkpJaSR8G25jRhf1MP+bDcaMic=) 9: oZWWF5zyx5ocTW76AkaqmRcZRbc.roa (hash: Md76ioroY7UyB9QPN3x3zrcMAb6sqenqdiEF83Lxjww=) 10: tBHwHHkIoWoPQB4e4ej-oFl2fGE.roa (hash: UbNA7/yGLRJmQHVEHqPxSSssDaT1D3EY/oLFfEqwR8s=) 11: wG4o-qI2-SFDukKFY7nO5neU430.roa (hash: yujHQG+kbMes0VhHuaufvfh3r/oBAVTjRJJ1+dXsMPA=) 12: zNBrt8b_ORyqQSO4aCrRbgzOM0k.roa (hash: JPrR5Q/6R3hbokDk+J7WmGsUILsQwl4oN4sTvCmroWc=) Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/0f/ba0bd3-b365-4461-8ffa-1f5431e2a5af/1/1M4r8AAc1DDpJ3-wDtGr5RwLXHw.crl rsync://rpki.ripe.net/repository/DEFAULT/0f/ba0bd3-b365-4461-8ffa-1f5431e2a5af/1/1M4r8AAc1DDpJ3-wDtGr5RwLXHw.mft rsync://rpki.ripe.net/repository/DEFAULT/1M4r8AAc1DDpJ3-wDtGr5RwLXHw.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Sat 25 Oct 2025 22:00:15 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9a:18:3c:98:04:dc:d1:e6:0e:8d:be:5d:bd:ab:9f:1a:c9 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=d4ce2bf0001cd430e9277fb00ed1abe51c0b5c7c Validity Not Before: Oct 24 22:00:15 2025 GMT Not After : Oct 25 22:00:15 2025 GMT Subject: CN=d826339997a4bb3bed10e9fd749c59ecc12edb8a Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:b9:a2:e4:94:bb:6b:64:57:77:cf:62:b1:f3:82: e8:34:5c:da:9e:14:de:16:13:ad:79:12:b6:f0:2b: 51:08:2e:5c:e6:2d:77:de:a3:9f:88:a6:1f:fa:e5: ee:09:bc:7b:34:42:dd:9d:42:e3:06:38:5d:f4:83: 6a:3f:72:94:87:c9:59:6a:80:a4:51:0c:2e:9f:e1: 93:b8:70:d6:b4:d1:c6:2e:1b:f4:ff:8e:0d:7c:a4: f9:24:0f:de:2d:5a:ce:a0:51:33:db:42:65:40:d3: a8:38:1f:b7:98:df:03:6c:ec:81:83:14:d7:a7:3f: 23:6d:9f:a1:89:b4:91:9a:f5:f7:8a:f4:4e:9b:88: e5:ae:ef:d8:3b:12:da:32:34:a7:8d:27:a5:f5:6b: c7:06:bd:e5:d1:35:b3:f4:c8:ab:67:d5:9f:7a:e5: 3d:a2:ae:8b:0d:e6:40:70:3e:dd:e8:26:d0:9f:2a: 7b:b9:d6:d8:4b:17:09:4b:ec:a0:2b:6a:f9:bc:5a: ed:f6:fc:df:62:7a:dd:aa:17:65:4a:54:c9:42:b6: ca:c3:ed:53:9d:3b:60:d7:df:59:bd:38:bd:cf:5b: 8b:ba:a9:1b:0c:8d:a1:80:6f:41:94:d1:95:87:75: 0a:e8:ae:f9:d6:f0:0b:cd:9b:bf:88:57:bb:87:6b: 77:39 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: D8:26:33:99:97:A4:BB:3B:ED:10:E9:FD:74:9C:59:EC:C1:2E:DB:8A X509v3 Authority Key Identifier: keyid:D4:CE:2B:F0:00:1C:D4:30:E9:27:7F:B0:0E:D1:AB:E5:1C:0B:5C:7C X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/1M4r8AAc1DDpJ3-wDtGr5RwLXHw.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/0f/ba0bd3-b365-4461-8ffa-1f5431e2a5af/1/1M4r8AAc1DDpJ3-wDtGr5RwLXHw.mft X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/0f/ba0bd3-b365-4461-8ffa-1f5431e2a5af/1/1M4r8AAc1DDpJ3-wDtGr5RwLXHw.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 79:cd:83:44:ed:69:78:2d:d8:cb:6c:62:bc:10:59:b5:47:32: d7:2b:65:6c:d3:46:ed:bb:29:55:eb:65:a6:ec:54:99:88:e5: f5:b1:76:07:5e:93:77:7e:bb:2c:87:10:96:b9:d3:fb:35:57: 52:05:e7:c6:70:9d:d9:18:f3:2c:23:70:b1:16:72:ea:84:da: 2c:43:e2:a6:7d:1a:20:fe:a5:07:64:5a:8d:27:1c:f6:de:93: 7d:e3:a3:25:fb:70:33:18:ee:0a:15:86:81:45:a5:2b:cd:48: 53:94:f7:4f:c0:22:c2:95:81:1f:97:cf:7c:41:f9:7d:14:e6: e9:6b:42:7a:95:4a:c8:a9:15:99:ab:36:0c:d1:53:88:e6:ee: b7:2d:46:d7:6e:f6:21:7f:ba:82:06:04:f5:c3:9d:c9:2b:d8: 79:15:0f:ae:94:81:69:cf:c5:1e:a0:8d:a1:c1:0c:ee:93:26: 4d:6b:37:4c:be:de:ab:3b:56:c6:3c:8a:cf:d2:f7:1b:a1:f2: 7e:a3:32:12:49:14:bf:76:5a:19:b4:74:5b:85:57:c8:23:72: 64:c5:74:b7:d7:b9:16:6c:2f:95:6c:0b:46:47:93:40:48:f9: 68:6b:07:c0:c2:05:b9:08:35:2a:66:c1:ee:cc:bc:f1:ee:53: ef:0c:96:27 -----BEGIN CERTIFICATE----- MIIFFjCCA/6gAwIBAgISAZoYPJgE3NHmDo2+Xb2rnxrJMA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKGQ0Y2UyYmYwMDAxY2Q0MzBlOTI3N2ZiMDBlZDFhYmU1MWMw YjVjN2MwHhcNMjUxMDI0MjIwMDE1WhcNMjUxMDI1MjIwMDE1WjAzMTEwLwYDVQQD EyhkODI2MzM5OTk3YTRiYjNiZWQxMGU5ZmQ3NDljNTllY2MxMmVkYjhhMIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAuaLklLtrZFd3z2Kx84LoNFzanhTe FhOteRK28CtRCC5c5i133qOfiKYf+uXuCbx7NELdnULjBjhd9INqP3KUh8lZaoCk UQwun+GTuHDWtNHGLhv0/44NfKT5JA/eLVrOoFEz20JlQNOoOB+3mN8DbOyBgxTX pz8jbZ+hibSRmvX3ivROm4jlru/YOxLaMjSnjSel9WvHBr3l0TWz9MirZ9WfeuU9 oq6LDeZAcD7d6CbQnyp7udbYSxcJS+ygK2r5vFrt9vzfYnrdqhdlSlTJQrbKw+1T nTtg199ZvTi9z1uLuqkbDI2hgG9BlNGVh3UK6K751vALzZu/iFe7h2t3OQIDAQAB o4ICIjCCAh4wHQYDVR0OBBYEFNgmM5mXpLs77RDp/XScWezBLtuKMB8GA1UdIwQY MBaAFNTOK/AAHNQw6Sd/sA7Rq+UcC1x8MA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvMU00cjhBQWMxRERwSjMtd0R0R3I1UndMWEh3LmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC8wZi9iYTBiZDMtYjM2NS00NDYxLThmZmEt MWY1NDMxZTJhNWFmLzEvMU00cjhBQWMxRERwSjMtd0R0R3I1UndMWEh3Lm1mdDCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC8wZi9iYTBiZDMtYjM2NS00NDYxLThmZmEtMWY1NDMxZTJhNWFm LzEvMU00cjhBQWMxRERwSjMtd0R0R3I1UndMWEh3LmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAec2DRO1p eC3Yy2xivBBZtUcy1ytlbNNG7bspVetlpuxUmYjl9bF2B16Td367LIcQlrnT+zVX UgXnxnCd2RjzLCNwsRZy6oTaLEPipn0aIP6lB2RajScc9t6TfeOjJftwMxjuChWG gUWlK81IU5T3T8AiwpWBH5fPfEH5fRTm6WtCepVKyKkVmas2DNFTiObuty1G1272 IX+6ggYE9cOdySvYeRUPrpSBac/FHqCNocEM7pMmTWs3TL7eqztWxjyKz9L3G6Hy fqMyEkkUv3ZaGbR0W4VXyCNyZMV0t9e5FmwvlWwLRkeTQEj5aGsHwMIFuQg1KmbB 7sy88e5T7wyWJw== -----END CERTIFICATE-----Generated at Sat Oct 25 08:55:24 2025 by rpki-client