$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/1a/4f336b-4a79-4425-9556-be45f0d2abbb/1/nLJc5VDk2b2gW9XUXItro3Qwu7o.mft File: nLJc5VDk2b2gW9XUXItro3Qwu7o.mft (raw, json) Hash identifier: BOCVzJBJBhdAbVhMwxWRAfkrLn+Mk7tNhbJLYJe9iFo= Subject key identifier: AE:B4:80:8D:8D:B5:FD:3F:A2:E8:1A:31:C7:46:25:C5:87:9B:EE:07 Authority key identifier: 9C:B2:5C:E5:50:E4:D9:BD:A0:5B:D5:D4:5C:8B:6B:A3:74:30:BB:BA Certificate issuer: /CN=9cb25ce550e4d9bda05bd5d45c8b6ba37430bbba Certificate serial: 019A01B5F4034F6AB5AA8836712339F60CC0 Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/nLJc5VDk2b2gW9XUXItro3Qwu7o.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/1a/4f336b-4a79-4425-9556-be45f0d2abbb/1/nLJc5VDk2b2gW9XUXItro3Qwu7o.mft Manifest number: 10B2 Signing time: Mon 20 Oct 2025 13:01:32 +0000 Manifest this update: Mon 20 Oct 2025 13:01:32 +0000 Manifest next update: Tue 21 Oct 2025 13:01:32 +0000 Files and hashes: 1: 5twkGWnpZ3caWcoF0F7nZ3MnxRQ.roa (hash: Hj9ctK8yUmftQlZpCOc5gcL4pBH+76rKw29EPYTV1fY=) 2: 6t_-rwl5vkceJUl9xfuErIgk5XQ.roa (hash: UgA7/ParQEm4RUB+nS1eICM0VcT/VJB2T/2XjYuyjiU=) 3: CcOTWwBfhnDK4i-Cl6vgTQ1Ne6Q.roa (hash: 0gfOeo67IeexaN6S4XXz6/wYaUsrA1sXsSwqEGJjGB8=) 4: Kkr4WQTbiLrBJjIFNHmfQjqdMFs.roa (hash: AX2E33mALAyiSH2uL+jaoucILuyqIMUcyM5PTXw0LYA=) 5: XDROFBDLzXZk58Wa7Gj_bxIFP24.roa (hash: oEZB4Wy5f3UZqEPOPaZ8r51Wy4lzW93yWdCW8EWeAw0=) 6: fsRjNoJDy9POHF18ZkBOzQiMl94.roa (hash: pTBEz/UhwNCD7057vDv5QDiSVRnDRK75JX++XfB+B70=) 7: iXL5qQtRrkVLG9gYfHh5fVQ7T3g.roa (hash: /S4PPFIysWBHzoFOGmeyMQ0/WpKIWbdNqRJ+yMWrBac=) 8: lIqtXZgZb6FK3xchEu_KzpPH9HY.roa (hash: EF/nDh6v7FHlrVK+Jno0NvRyT9dpjTxvni+KKTpPgho=) 9: nLJc5VDk2b2gW9XUXItro3Qwu7o.crl (hash: nAniGHL4ZcxA57VUHFZvWZeNNdEHj2wTtzy0wpw3R28=) 10: uHCer9bSYtAYzAW97IkYAtxT0oY.roa (hash: pEZrL5HUVwpESwP8P9Avj4b8s7dLWZdI+MAnQfTy42g=) 11: zLYfKKvwZksRC-Mec9uQxezCf-I.roa (hash: 7jSn1GJtzfCE3yqBQcJd/SMTsqwM51FfYe/cCLi5Z4A=) 12: zS2PBrD2vmlXLTrGFHERr-Tg3sM.roa (hash: ZKfnpYOgYarKcHUc2HZAGzDoCt3IGKzpVqNwP6NLT/8=) Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/1a/4f336b-4a79-4425-9556-be45f0d2abbb/1/nLJc5VDk2b2gW9XUXItro3Qwu7o.crl rsync://rpki.ripe.net/repository/DEFAULT/1a/4f336b-4a79-4425-9556-be45f0d2abbb/1/nLJc5VDk2b2gW9XUXItro3Qwu7o.mft rsync://rpki.ripe.net/repository/DEFAULT/nLJc5VDk2b2gW9XUXItro3Qwu7o.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Tue 21 Oct 2025 13:01:32 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9a:01:b5:f4:03:4f:6a:b5:aa:88:36:71:23:39:f6:0c:c0 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=9cb25ce550e4d9bda05bd5d45c8b6ba37430bbba Validity Not Before: Oct 20 13:01:32 2025 GMT Not After : Oct 21 13:01:32 2025 GMT Subject: CN=aeb4808d8db5fd3fa2e81a31c74625c5879bee07 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:cd:8a:79:1e:6a:10:c6:73:a2:26:48:92:81:5d: a9:59:0e:c7:9b:15:f7:94:b7:e4:6c:00:87:de:e7: e6:fb:d8:c2:46:dc:31:52:32:b4:3e:53:10:3f:71: ec:97:27:33:8f:13:80:56:f5:ea:4e:7f:69:ad:57: 88:df:74:f2:5f:49:54:f4:c1:5c:02:c4:7f:2e:d0: 81:d7:19:ce:a4:15:9b:97:dc:93:ed:01:48:b3:4e: 95:4e:23:43:66:21:60:8a:27:3e:99:b2:9b:c3:ea: 10:3f:19:91:42:1d:93:11:a5:e2:2a:31:98:c1:73: f7:2c:0c:da:95:2b:b8:12:ab:8e:b3:aa:a8:26:67: 0c:70:43:7b:50:a7:b4:22:93:83:a4:a4:55:53:2e: 23:85:c8:c8:d6:26:36:88:7f:33:96:32:4a:63:b0: a5:7e:1e:1f:da:c7:ce:6a:b0:f2:f7:4a:76:ab:f6: 0c:e6:40:95:a4:d3:a0:34:6c:2d:1c:ed:b6:10:d0: 53:aa:d4:4f:ca:f2:cb:fb:00:9b:6d:57:11:e0:5c: 29:7d:a0:7b:1f:d4:d5:18:e5:5e:01:20:7d:33:99: 19:fb:fc:38:82:9b:2e:14:66:fe:2f:f8:d8:89:58: 83:f9:9c:79:3e:66:03:c9:00:2c:83:b9:22:01:5e: 9e:01 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: AE:B4:80:8D:8D:B5:FD:3F:A2:E8:1A:31:C7:46:25:C5:87:9B:EE:07 X509v3 Authority Key Identifier: keyid:9C:B2:5C:E5:50:E4:D9:BD:A0:5B:D5:D4:5C:8B:6B:A3:74:30:BB:BA X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/nLJc5VDk2b2gW9XUXItro3Qwu7o.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/1a/4f336b-4a79-4425-9556-be45f0d2abbb/1/nLJc5VDk2b2gW9XUXItro3Qwu7o.mft X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/1a/4f336b-4a79-4425-9556-be45f0d2abbb/1/nLJc5VDk2b2gW9XUXItro3Qwu7o.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 47:a4:85:e7:44:33:f0:38:5c:c0:19:32:1c:ef:fc:41:af:ea: be:eb:d8:af:83:fc:5d:b2:5c:5f:41:47:33:78:0e:48:5d:e7: 57:78:58:db:a7:e0:70:28:60:83:9c:f8:c3:a9:fd:40:8a:28: 42:ca:bb:8a:2b:83:47:95:4d:65:55:40:33:ce:3e:58:b9:f7: 2d:ab:02:45:68:b5:cd:f6:59:8a:01:4c:e5:e7:6f:8e:8e:92: 95:6f:d4:4d:52:15:4f:8f:7d:09:8b:3c:15:e9:a2:99:69:04: 30:d2:45:f0:1b:bc:b0:94:04:dc:0b:7e:cd:97:6f:40:03:12: f1:98:bc:dd:ec:f6:78:78:25:90:3f:db:44:45:41:7d:f3:b3: 69:ad:66:ed:9b:39:ad:13:bc:7d:d3:57:92:aa:5d:61:98:36: 73:96:b1:68:a1:55:c6:ed:ac:22:7d:6b:3d:43:95:3c:27:47: 6b:d0:c1:d3:2d:2d:6e:cd:63:0f:40:0c:d5:dd:4b:71:09:b1: ef:39:97:1f:00:47:ec:9a:ab:2f:b9:29:c9:96:5a:5a:f3:1b: 2c:b4:65:ba:12:bd:d7:4b:eb:ff:2c:1d:ac:76:6f:da:08:fa: 94:19:ab:e0:b0:3e:25:8f:4b:b4:9f:a0:82:fd:af:62:94:9a: 52:03:9a:80 -----BEGIN CERTIFICATE----- MIIFFjCCA/6gAwIBAgISAZoBtfQDT2q1qog2cSM59gzAMA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKDljYjI1Y2U1NTBlNGQ5YmRhMDViZDVkNDVjOGI2YmEzNzQz MGJiYmEwHhcNMjUxMDIwMTMwMTMyWhcNMjUxMDIxMTMwMTMyWjAzMTEwLwYDVQQD EyhhZWI0ODA4ZDhkYjVmZDNmYTJlODFhMzFjNzQ2MjVjNTg3OWJlZTA3MIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAzYp5HmoQxnOiJkiSgV2pWQ7HmxX3 lLfkbACH3ufm+9jCRtwxUjK0PlMQP3HslyczjxOAVvXqTn9prVeI33TyX0lU9MFc AsR/LtCB1xnOpBWbl9yT7QFIs06VTiNDZiFgiic+mbKbw+oQPxmRQh2TEaXiKjGY wXP3LAzalSu4EquOs6qoJmcMcEN7UKe0IpODpKRVUy4jhcjI1iY2iH8zljJKY7Cl fh4f2sfOarDy90p2q/YM5kCVpNOgNGwtHO22ENBTqtRPyvLL+wCbbVcR4FwpfaB7 H9TVGOVeASB9M5kZ+/w4gpsuFGb+L/jYiViD+Zx5PmYDyQAsg7kiAV6eAQIDAQAB o4ICIjCCAh4wHQYDVR0OBBYEFK60gI2Ntf0/ougaMcdGJcWHm+4HMB8GA1UdIwQY MBaAFJyyXOVQ5Nm9oFvV1FyLa6N0MLu6MA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvbkxKYzVWRGsyYjJnVzlYVVhJdHJvM1F3dTdvLmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC8xYS80ZjMzNmItNGE3OS00NDI1LTk1NTYt YmU0NWYwZDJhYmJiLzEvbkxKYzVWRGsyYjJnVzlYVVhJdHJvM1F3dTdvLm1mdDCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC8xYS80ZjMzNmItNGE3OS00NDI1LTk1NTYtYmU0NWYwZDJhYmJi LzEvbkxKYzVWRGsyYjJnVzlYVVhJdHJvM1F3dTdvLmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAR6SF50Qz 8DhcwBkyHO/8Qa/qvuvYr4P8XbJcX0FHM3gOSF3nV3hY26fgcChgg5z4w6n9QIoo Qsq7iiuDR5VNZVVAM84+WLn3LasCRWi1zfZZigFM5edvjo6SlW/UTVIVT499CYs8 FemimWkEMNJF8Bu8sJQE3At+zZdvQAMS8Zi83ez2eHglkD/bREVBffOzaa1m7Zs5 rRO8fdNXkqpdYZg2c5axaKFVxu2sIn1rPUOVPCdHa9DB0y0tbs1jD0AM1d1LcQmx 7zmXHwBH7JqrL7kpyZZaWvMbLLRluhK910vr/ywdrHZv2gj6lBmr4LA+JY9LtJ+g gv2vYpSaUgOagA== -----END CERTIFICATE-----Generated at Mon Oct 20 16:59:54 2025 by rpki-client