$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/17/cffff8-3530-4e5b-a5e2-c77905fbba7b/1/RbvSGTZCUwoBf08cvlYuIXCz370.mft File: RbvSGTZCUwoBf08cvlYuIXCz370.mft (raw, json) Hash identifier: oysOtACjVAOnVT+wUjFNU77UMC59kIMK96bdzFkDlnU= Subject key identifier: 1E:9E:F8:A9:37:2D:2E:FB:00:02:06:EF:9C:D3:AD:9F:C8:00:2C:8A Authority key identifier: 45:BB:D2:19:36:42:53:0A:01:7F:4F:1C:BE:56:2E:21:70:B3:DF:BD Certificate issuer: /CN=45bbd2193642530a017f4f1cbe562e2170b3dfbd Certificate serial: 019A41388E39EEB0AC5008F235F2352B1B88 Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/RbvSGTZCUwoBf08cvlYuIXCz370.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/17/cffff8-3530-4e5b-a5e2-c77905fbba7b/1/RbvSGTZCUwoBf08cvlYuIXCz370.mft Manifest number: 0F01 Signing time: Sat 01 Nov 2025 21:00:16 +0000 Manifest this update: Sat 01 Nov 2025 21:00:16 +0000 Manifest next update: Sun 02 Nov 2025 21:00:16 +0000 Files and hashes: 1: 6ZnfS565qYdUchLZCkFU7aS7slQ.roa (hash: 4t6UU9aRgFRSLJBVwUMaRIV03s5+6yeuigVjxM6Ktp4=) 2: 7d-V0wk7_LwQmv-CS7561oFEwSc.roa (hash: u5Et4u+PPH6ChiKIaXCULpF5f++8aJtXhJxY+hqA1C0=) 3: RbvSGTZCUwoBf08cvlYuIXCz370.crl (hash: TFOUCpkOCSQqK+n15tt9iVepsgtvuxTJ+23Gr3GWBpY=) 4: TApodEY8028DyJXWycbZvpKO2JY.roa (hash: U9oKSIIosuWZsZ0CYqCvqcMf8wzWuI0iOJauh9nwcac=) 5: U99JCnG6IDDb3fPb5RJU5lmsye0.roa (hash: X/Q6Sj4Oee6V3+wleBrfWWmYoSOrW6XOkN6eZj48NGo=) 6: UHhBspaFN4Wz4SsUMP7fb9tfT4w.roa (hash: 50TOVRcOrToHPoin6f4jkSxKeLPlDyklnbx1BFOMka4=) 7: _VXztWjIE0ZPwEUQdhYZ-DOYwQo.roa (hash: 185UhIin1qWAIQbRLAq/SfnBaaaHig76ZL9WselXS2I=) 8: bVG91rh6vJ7orCrWLltzoEytWu0.roa (hash: 6UY0Ua8DXjS9JwbhBNdYqbLcTNFaiJVgT0ORPNoYM64=) 9: d4dd63YvMop2w-g3LON2FgQkXGs.roa (hash: wFE27Pfyu6wjdlPpwECWgbJf/SI7T3ch1qMqz+WQODE=) 10: r5ZgGaHKIkFsDW5OTwwhK4tgAsQ.roa (hash: jLmSUGri8N356kUEE/tygoNrVgGIX4EqiZgEZdk/J6k=) Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/17/cffff8-3530-4e5b-a5e2-c77905fbba7b/1/RbvSGTZCUwoBf08cvlYuIXCz370.crl rsync://rpki.ripe.net/repository/DEFAULT/17/cffff8-3530-4e5b-a5e2-c77905fbba7b/1/RbvSGTZCUwoBf08cvlYuIXCz370.mft rsync://rpki.ripe.net/repository/DEFAULT/RbvSGTZCUwoBf08cvlYuIXCz370.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Sun 02 Nov 2025 21:00:02 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9a:41:38:8e:39:ee:b0:ac:50:08:f2:35:f2:35:2b:1b:88 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=45bbd2193642530a017f4f1cbe562e2170b3dfbd Validity Not Before: Nov 1 21:00:16 2025 GMT Not After : Nov 2 21:00:16 2025 GMT Subject: CN=1e9ef8a9372d2efb000206ef9cd3ad9fc8002c8a Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:e7:ba:b0:76:be:d3:7c:56:c6:39:44:05:29:61: 26:9d:83:68:5e:b9:e9:d1:bb:e5:b1:89:b8:e9:44: 3f:8d:90:55:0e:4a:8d:e6:42:a8:24:0c:a5:82:38: 7f:40:99:88:42:2a:5f:c6:e5:2b:87:f5:28:19:92: 6f:75:0c:89:3b:2f:5b:5c:90:ec:30:8f:3e:de:93: f1:38:2c:d9:6b:c6:a7:0a:aa:61:20:ea:10:ef:50: 8a:19:34:82:23:47:0e:c4:7c:54:78:a9:f0:63:b3: 89:63:2e:7e:85:c2:7e:d8:e9:f5:11:13:88:3d:ce: 21:2e:58:fd:83:80:be:46:8f:2a:fd:13:d5:f1:a4: f3:92:d7:9f:8e:cf:a4:57:43:0a:a1:8a:e7:8e:a1: ba:8a:01:88:52:b6:2e:cd:88:b1:25:36:ac:f5:3f: dd:5f:b8:95:83:ad:cc:57:3c:62:f6:4b:47:51:0a: 91:86:c7:4c:38:a1:f7:2f:d2:a3:ad:d6:d6:a8:05: 10:67:d6:63:78:4f:df:d1:09:99:3f:45:f5:b2:ba: 63:aa:2f:7b:a1:ba:82:1a:48:e0:3b:09:8f:42:11: 85:9d:ad:0e:bc:52:bf:4d:58:c1:89:a6:eb:00:5a: 21:01:b1:77:70:29:61:ad:a1:1a:41:24:91:b8:85: fe:ab Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 1E:9E:F8:A9:37:2D:2E:FB:00:02:06:EF:9C:D3:AD:9F:C8:00:2C:8A X509v3 Authority Key Identifier: keyid:45:BB:D2:19:36:42:53:0A:01:7F:4F:1C:BE:56:2E:21:70:B3:DF:BD X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/RbvSGTZCUwoBf08cvlYuIXCz370.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/17/cffff8-3530-4e5b-a5e2-c77905fbba7b/1/RbvSGTZCUwoBf08cvlYuIXCz370.mft X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/17/cffff8-3530-4e5b-a5e2-c77905fbba7b/1/RbvSGTZCUwoBf08cvlYuIXCz370.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption a6:75:49:ee:e8:76:75:b5:9e:8b:cb:c1:87:c4:33:46:29:9f: 16:55:c5:c4:9e:6a:bf:d3:0e:fd:e5:87:2d:a7:c6:c1:93:75: bb:e8:94:cb:5e:95:ac:03:48:cd:35:c7:d8:c2:2d:10:fc:b5: 69:d0:f6:e9:0a:80:64:3d:90:40:46:1b:2b:7f:04:8c:29:5d: 72:14:99:0e:16:62:4d:2e:90:f3:b3:82:68:0e:0f:ea:26:83: d5:50:80:31:d1:30:dd:89:a5:d4:92:4e:42:50:29:d2:ff:f1: ce:f8:c8:5e:1e:bd:5b:39:f0:6a:b1:b1:03:c1:b2:11:fe:d5: ce:d4:79:c7:fd:c7:8d:4b:50:38:77:4b:98:cb:f2:4b:1d:e0: d9:27:74:2b:aa:d6:2f:06:4a:27:1b:5f:72:fc:01:46:b2:49: a2:5c:e2:86:f5:54:1c:27:e4:07:8e:be:e1:91:10:00:68:45: 80:6c:8d:64:84:0d:f8:b7:1a:c2:16:06:31:ae:fd:98:b9:06: e9:db:f9:5a:3d:25:0e:3f:ee:00:fc:53:07:da:30:be:eb:d9: 31:b7:e9:b9:0c:6f:b3:5d:b3:9e:73:d7:cf:c4:7b:8d:ea:35: 09:0b:c6:0b:d2:ef:a6:d2:00:5a:8a:77:09:0c:bf:25:fd:65: 0b:21:cc:ce -----BEGIN CERTIFICATE----- MIIFFjCCA/6gAwIBAgISAZpBOI457rCsUAjyNfI1KxuIMA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKDQ1YmJkMjE5MzY0MjUzMGEwMTdmNGYxY2JlNTYyZTIxNzBi M2RmYmQwHhcNMjUxMTAxMjEwMDE2WhcNMjUxMTAyMjEwMDE2WjAzMTEwLwYDVQQD EygxZTllZjhhOTM3MmQyZWZiMDAwMjA2ZWY5Y2QzYWQ5ZmM4MDAyYzhhMIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEA57qwdr7TfFbGOUQFKWEmnYNoXrnp 0bvlsYm46UQ/jZBVDkqN5kKoJAylgjh/QJmIQipfxuUrh/UoGZJvdQyJOy9bXJDs MI8+3pPxOCzZa8anCqphIOoQ71CKGTSCI0cOxHxUeKnwY7OJYy5+hcJ+2On1EROI Pc4hLlj9g4C+Ro8q/RPV8aTzktefjs+kV0MKoYrnjqG6igGIUrYuzYixJTas9T/d X7iVg63MVzxi9ktHUQqRhsdMOKH3L9KjrdbWqAUQZ9ZjeE/f0QmZP0X1srpjqi97 obqCGkjgOwmPQhGFna0OvFK/TVjBiabrAFohAbF3cClhraEaQSSRuIX+qwIDAQAB o4ICIjCCAh4wHQYDVR0OBBYEFB6e+Kk3LS77AAIG75zTrZ/IACyKMB8GA1UdIwQY MBaAFEW70hk2QlMKAX9PHL5WLiFws9+9MA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvUmJ2U0dUWkNVd29CZjA4Y3ZsWXVJWEN6MzcwLmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC8xNy9jZmZmZjgtMzUzMC00ZTViLWE1ZTIt Yzc3OTA1ZmJiYTdiLzEvUmJ2U0dUWkNVd29CZjA4Y3ZsWXVJWEN6MzcwLm1mdDCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC8xNy9jZmZmZjgtMzUzMC00ZTViLWE1ZTItYzc3OTA1ZmJiYTdi LzEvUmJ2U0dUWkNVd29CZjA4Y3ZsWXVJWEN6MzcwLmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEApnVJ7uh2 dbWei8vBh8QzRimfFlXFxJ5qv9MO/eWHLafGwZN1u+iUy16VrANIzTXH2MItEPy1 adD26QqAZD2QQEYbK38EjCldchSZDhZiTS6Q87OCaA4P6iaD1VCAMdEw3Yml1JJO QlAp0v/xzvjIXh69WznwarGxA8GyEf7VztR5x/3HjUtQOHdLmMvySx3g2Sd0K6rW LwZKJxtfcvwBRrJJolzihvVUHCfkB46+4ZEQAGhFgGyNZIQN+LcawhYGMa79mLkG 6dv5Wj0lDj/uAPxTB9owvuvZMbfpuQxvs12znnPXz8R7jeo1CQvGC9LvptIAWop3 CQy/Jf1lCyHMzg== -----END CERTIFICATE-----Generated at Sun Nov 2 05:31:49 2025 by rpki-client