$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/1c/b20d83-612c-4b62-97a3-1a5e5f191bfa/1/MH2IfALgfJ5HTR-OIQScqmzj-9M.mft File: MH2IfALgfJ5HTR-OIQScqmzj-9M.mft (raw, json) Hash identifier: 9BtGjUFooWPrPHKPUhHb+soo5D3RQvR3US13XfPiPW4= Subject key identifier: 94:4F:79:D2:AA:12:8A:83:5C:E5:33:70:A0:82:D8:E4:50:E9:AE:64 Authority key identifier: 30:7D:88:7C:02:E0:7C:9E:47:4D:1F:8E:21:04:9C:AA:6C:E3:FB:D3 Certificate issuer: /CN=307d887c02e07c9e474d1f8e21049caa6ce3fbd3 Certificate serial: 019A4A0498825449063B5AA25256529A6625 Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/MH2IfALgfJ5HTR-OIQScqmzj-9M.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/1c/b20d83-612c-4b62-97a3-1a5e5f191bfa/1/MH2IfALgfJ5HTR-OIQScqmzj-9M.mft Manifest number: 170E Signing time: Mon 03 Nov 2025 14:00:05 +0000 Manifest this update: Mon 03 Nov 2025 14:00:05 +0000 Manifest next update: Tue 04 Nov 2025 14:00:05 +0000 Files and hashes: 1: Go3D60IftVT7kBobBk8HTq_r6wY.roa (hash: /aH1VuqUtHMC947Kt5tr1ajHSrdHN60XTYZiPes2dOU=) 2: JKKr0NwqKrBRfO9-TNMA6fKjebU.roa (hash: +prVLn/SSNSb/SQ4BmX9heAxTyq0XNrqnNVcVb/zNYQ=) 3: MH2IfALgfJ5HTR-OIQScqmzj-9M.crl (hash: hr7fAKZjzUaljOivHWibR3AvJcoLs0sFU7yMpmhR3ik=) 4: OrdWNePRO-azuf-x7WJ0gNqkZc8.roa (hash: ehZsJBwER/Ak+kPEJiQOXw5pziTKWHwzzGUWq4oZM/c=) 5: Q3_mv-tF2Z1EHDZHaZk8mJMN1bk.roa (hash: oXSPeYLnMI9gMBulzyR8eDJwfmPdLhgYhc4vqS0U/tE=) 6: S2TXSI-3n25IfgGnM4uuJwml268.roa (hash: DAgFF4qJxC/k8JOz+sB1Q1cvXx4PDaouIru4SXZXgbU=) 7: UJuJe34B0guqTgOl--QOCgSYvZE.roa (hash: c2O3pbkk6z+NjOLR47vzvdpTF+ZJKIik+rzOAO3mk2Y=) 8: bR8kj_c2TPqFFFMT255K3OTqBTI.roa (hash: mIG3JTVdQTlKmcdrQlCtE5KtfNee8F1irJglkfAd6/0=) 9: e_JO57HIUgxnL2zZw_SZRKtvz2k.roa (hash: kYzJL9upOKUtQTqnQ+rXijBf3P483K+T+FEi6SAaLE0=) 10: qkn09gGw9_pYS22v_SrDemeIoJI.roa (hash: OSIoNd4NerHm/MUfEqmcXlQFZ/K6gwLw7wnqNHc3YTQ=) Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/1c/b20d83-612c-4b62-97a3-1a5e5f191bfa/1/MH2IfALgfJ5HTR-OIQScqmzj-9M.crl rsync://rpki.ripe.net/repository/DEFAULT/1c/b20d83-612c-4b62-97a3-1a5e5f191bfa/1/MH2IfALgfJ5HTR-OIQScqmzj-9M.mft rsync://rpki.ripe.net/repository/DEFAULT/MH2IfALgfJ5HTR-OIQScqmzj-9M.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Tue 04 Nov 2025 14:00:05 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9a:4a:04:98:82:54:49:06:3b:5a:a2:52:56:52:9a:66:25 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=307d887c02e07c9e474d1f8e21049caa6ce3fbd3 Validity Not Before: Nov 3 14:00:05 2025 GMT Not After : Nov 4 14:00:05 2025 GMT Subject: CN=944f79d2aa128a835ce53370a082d8e450e9ae64 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:90:31:42:3e:4c:a4:97:3f:26:76:51:b0:7c:db: 71:28:e5:74:8a:78:48:d4:04:06:57:56:48:a2:f4: e1:07:6b:e9:9f:55:e4:50:e4:bc:9d:a6:14:a1:eb: 03:86:26:63:7c:35:00:72:68:3d:91:24:db:01:7a: 59:a3:14:a4:c9:91:52:f9:60:7e:37:a4:2d:17:79: cd:22:e5:c9:84:5a:62:54:84:27:4e:06:48:94:57: dc:6d:cc:6e:b6:a3:d9:3d:eb:a8:20:fc:22:b7:e4: 69:d1:7f:67:63:81:c4:99:20:ea:14:fa:7c:65:37: 48:08:18:c8:0d:da:a0:24:9b:97:b3:41:19:b8:69: 4c:64:34:12:06:58:d6:e2:d8:03:bd:86:b7:30:58: 23:23:9a:bd:16:33:31:b1:54:94:a9:c3:6c:99:d5: 9c:5b:d2:80:0b:49:ff:17:60:08:85:85:52:4e:e2: 3d:18:d0:ad:ad:2c:e0:c0:54:cf:75:35:75:7d:73: 2b:ea:b0:73:84:da:88:dd:92:60:b9:7d:df:ae:80: a0:64:ce:0f:ce:7a:f1:4c:20:fc:5f:36:74:69:dd: 15:fc:0f:f3:ac:32:11:fa:c8:af:85:4e:60:07:77: 2e:89:8c:3b:cd:7f:ff:ff:84:1b:18:3c:57:e6:13: 89:cb Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 94:4F:79:D2:AA:12:8A:83:5C:E5:33:70:A0:82:D8:E4:50:E9:AE:64 X509v3 Authority Key Identifier: keyid:30:7D:88:7C:02:E0:7C:9E:47:4D:1F:8E:21:04:9C:AA:6C:E3:FB:D3 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/MH2IfALgfJ5HTR-OIQScqmzj-9M.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/1c/b20d83-612c-4b62-97a3-1a5e5f191bfa/1/MH2IfALgfJ5HTR-OIQScqmzj-9M.mft X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/1c/b20d83-612c-4b62-97a3-1a5e5f191bfa/1/MH2IfALgfJ5HTR-OIQScqmzj-9M.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 0a:8e:a7:d1:5a:96:7f:1d:45:ce:f4:9e:00:0a:db:01:f5:bd: 95:16:6a:13:ee:ea:df:3f:10:72:b1:97:14:aa:8d:67:9c:46: 3c:23:7e:73:c9:29:43:c9:67:9b:86:9c:92:75:a7:b3:70:e7: b9:e9:07:6d:8f:ca:4d:f2:5b:57:b6:4a:9e:f4:97:ea:51:54: 01:95:9c:54:5c:c6:af:7c:5e:82:ec:bb:c1:02:6f:57:b5:53: 20:ab:c6:7e:08:d6:8d:90:c9:40:cc:85:6d:3a:df:95:5f:30: 4b:e7:3f:e5:bf:df:9a:7b:2c:52:96:f9:00:0b:6e:93:7a:c5: 70:e0:1c:c2:ee:67:5a:e6:ce:7c:33:da:7a:98:43:19:79:0d: b0:e5:79:85:f5:49:d4:06:b2:86:52:d4:88:fa:d6:7e:a5:fa: 1e:24:d7:74:db:cd:e2:b8:3b:69:f0:82:20:ab:8a:7b:7c:2d: 51:96:58:d0:e8:a6:1e:ca:f4:b8:1a:01:cb:39:d5:de:0f:39: 0f:1c:f0:3e:1f:e2:1f:8b:07:fc:b9:87:fc:72:6f:30:97:21: 8d:5e:df:19:80:e4:bb:b0:74:ea:db:1a:1e:71:fa:0b:a0:5d: f0:54:45:11:0e:ba:48:af:4a:4a:c1:4c:f4:03:85:76:41:4f: 75:ed:a6:51 -----BEGIN CERTIFICATE----- MIIFFjCCA/6gAwIBAgISAZpKBJiCVEkGO1qiUlZSmmYlMA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKDMwN2Q4ODdjMDJlMDdjOWU0NzRkMWY4ZTIxMDQ5Y2FhNmNl M2ZiZDMwHhcNMjUxMTAzMTQwMDA1WhcNMjUxMTA0MTQwMDA1WjAzMTEwLwYDVQQD Eyg5NDRmNzlkMmFhMTI4YTgzNWNlNTMzNzBhMDgyZDhlNDUwZTlhZTY0MIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAkDFCPkyklz8mdlGwfNtxKOV0inhI 1AQGV1ZIovThB2vpn1XkUOS8naYUoesDhiZjfDUAcmg9kSTbAXpZoxSkyZFS+WB+ N6QtF3nNIuXJhFpiVIQnTgZIlFfcbcxutqPZPeuoIPwit+Rp0X9nY4HEmSDqFPp8 ZTdICBjIDdqgJJuXs0EZuGlMZDQSBljW4tgDvYa3MFgjI5q9FjMxsVSUqcNsmdWc W9KAC0n/F2AIhYVSTuI9GNCtrSzgwFTPdTV1fXMr6rBzhNqI3ZJguX3froCgZM4P znrxTCD8XzZ0ad0V/A/zrDIR+sivhU5gB3cuiYw7zX///4QbGDxX5hOJywIDAQAB o4ICIjCCAh4wHQYDVR0OBBYEFJRPedKqEoqDXOUzcKCC2ORQ6a5kMB8GA1UdIwQY MBaAFDB9iHwC4HyeR00fjiEEnKps4/vTMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvTUgySWZBTGdmSjVIVFItT0lRU2NxbXpqLTlNLmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC8xYy9iMjBkODMtNjEyYy00YjYyLTk3YTMt MWE1ZTVmMTkxYmZhLzEvTUgySWZBTGdmSjVIVFItT0lRU2NxbXpqLTlNLm1mdDCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC8xYy9iMjBkODMtNjEyYy00YjYyLTk3YTMtMWE1ZTVmMTkxYmZh LzEvTUgySWZBTGdmSjVIVFItT0lRU2NxbXpqLTlNLmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEACo6n0VqW fx1FzvSeAArbAfW9lRZqE+7q3z8QcrGXFKqNZ5xGPCN+c8kpQ8lnm4acknWns3Dn uekHbY/KTfJbV7ZKnvSX6lFUAZWcVFzGr3xeguy7wQJvV7VTIKvGfgjWjZDJQMyF bTrflV8wS+c/5b/fmnssUpb5AAtuk3rFcOAcwu5nWubOfDPaephDGXkNsOV5hfVJ 1AayhlLUiPrWfqX6HiTXdNvN4rg7afCCIKuKe3wtUZZY0OimHsr0uBoByznV3g85 DxzwPh/iH4sH/LmH/HJvMJchjV7fGYDku7B06tsaHnH6C6Bd8FRFEQ66SK9KSsFM 9AOFdkFPde2mUQ== -----END CERTIFICATE-----Generated at Mon Nov 3 20:37:43 2025 by rpki-client