$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/22/dab420-0de3-4321-9c09-6b5f68522a7d/1/p-4YLZxDpc5waN_Zunqo7ZDl4Lo.mft File: p-4YLZxDpc5waN_Zunqo7ZDl4Lo.mft (raw, json) Hash identifier: J1qyRvdrifp7bOY8UZ62N1AyeWlNrjhIO/pQW8Y8ag0= Subject key identifier: B8:B3:04:9E:92:B9:B5:AB:D2:64:29:1F:D0:34:C9:FE:73:63:44:DE Authority key identifier: A7:EE:18:2D:9C:43:A5:CE:70:68:DF:D9:BA:7A:A8:ED:90:E5:E0:BA Certificate issuer: /CN=a7ee182d9c43a5ce7068dfd9ba7aa8ed90e5e0ba Certificate serial: 019A176120C2EA66AE5B337556B577029B33 Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/p-4YLZxDpc5waN_Zunqo7ZDl4Lo.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/22/dab420-0de3-4321-9c09-6b5f68522a7d/1/p-4YLZxDpc5waN_Zunqo7ZDl4Lo.mft Manifest number: 170A Signing time: Fri 24 Oct 2025 18:00:32 +0000 Manifest this update: Fri 24 Oct 2025 18:00:32 +0000 Manifest next update: Sat 25 Oct 2025 18:00:32 +0000 Files and hashes: 1: 6VFvznM1ivuDVDr2-zJ8Rc9HL4c.roa (hash: YFFcoS2pkj0ppsY1suyM7N1UBbz37UF87GS5rHAetLM=) 2: HG0sxwCI7w4fkh8VU0N2fcVMuLU.roa (hash: 1EixzIypMSg7Afd2h1TllH/pBszhQ8LEEsFtCe9BNAQ=) 3: SF9inl-Z2UBEp7L7rHoMTP2o47I.roa (hash: OJPpBVtZqLTjhkxtA0o0cIzlBYqPE/6vDiaXNk1Wf6s=) 4: YkO14vUX3HHLD5m73eeF94u-z9Y.roa (hash: myJ7UTUt7mcT9gjy0mgRP7jrD85IU3fMUws/RpMjTT4=) 5: ays9--_IW8JzhtfNk76o0BfVsHs.roa (hash: m+8N0lTDKN6USUkq7MoOzNst+iEzsskPzpKLc4PITjQ=) 6: bTtf1_C9R2Bt4xdvshIG3OCVSD0.roa (hash: Z47R6cDRJGZAaj0MeG+895zHqKHcV33MIM2W9d4hC9E=) 7: c-pova8C1uulibxroeJZUgkQnv8.roa (hash: OvhwnSV+pVkr5UA9RfkEZJQ3n/9Mm7Ihqgy3rKhknz8=) 8: cdiLy2n18Y-vOIkFViZGUd7RsKM.roa (hash: /+RvQbcmllMNKfEXhyM/QGFxvrK6kosbr0fHB6H8FyU=) 9: dVPbIRfsnF_eS0blJ9Y7zNoUs7k.roa (hash: ShygWBXCmOMXv5YpTJlMJ5UYglgVh9DDoGkuss6YEGo=) 10: obNE3NdMVlCy0XPf9mK-g4oa9eg.roa (hash: 7NjsanTWQOoFeSktyUJvcMuLG2S6+z5IgmOffiI6238=) 11: p-4YLZxDpc5waN_Zunqo7ZDl4Lo.crl (hash: K6IYag2NKgpJzcQMDFkKrIWlhlEk/g+xeA/od5I1InQ=) 12: un7p1oX6IuixEnJw52S1lgp4k0A.roa (hash: zhKv5DC0Mh83opPQLWP9MGfrzkdDgqEhOQ8/1xd2cZA=) 13: vXPdTshBqnn4ghgMByB7XXaLYRA.roa (hash: f07bhqR7ZOptfaHvf20BCw3ge0IxK37mw/76h6jHsI0=) Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/22/dab420-0de3-4321-9c09-6b5f68522a7d/1/p-4YLZxDpc5waN_Zunqo7ZDl4Lo.crl rsync://rpki.ripe.net/repository/DEFAULT/22/dab420-0de3-4321-9c09-6b5f68522a7d/1/p-4YLZxDpc5waN_Zunqo7ZDl4Lo.mft rsync://rpki.ripe.net/repository/DEFAULT/p-4YLZxDpc5waN_Zunqo7ZDl4Lo.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Sat 25 Oct 2025 15:30:03 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9a:17:61:20:c2:ea:66:ae:5b:33:75:56:b5:77:02:9b:33 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=a7ee182d9c43a5ce7068dfd9ba7aa8ed90e5e0ba Validity Not Before: Oct 24 18:00:32 2025 GMT Not After : Oct 25 18:00:32 2025 GMT Subject: CN=b8b3049e92b9b5abd264291fd034c9fe736344de Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:b0:14:23:3e:15:3d:d7:48:42:fb:6d:eb:34:7f: 47:56:66:25:fa:2d:89:0b:a2:b5:60:1c:a1:b1:7c: a7:35:23:26:e2:4a:28:79:54:45:96:94:dd:9d:a2: 82:73:9d:c6:72:21:64:44:18:06:7f:f1:97:de:59: 10:15:81:9b:bc:14:b4:73:bb:af:14:f6:84:be:e3: 02:55:e7:d6:6d:b5:44:4b:1a:9d:df:54:bc:c9:f5: 21:37:0f:6f:f1:99:28:b4:0d:c6:85:c1:7f:3d:0e: b5:07:a8:7f:8f:d3:41:18:ec:82:3d:3a:bc:f4:30: c1:24:c6:b9:03:98:27:e7:ae:62:d1:4a:93:bc:2d: 8c:03:29:aa:30:c7:d5:5d:5b:2e:3b:04:cd:ff:1c: 05:4b:74:0d:6c:eb:f8:23:cb:8d:8e:ad:38:13:82: 20:9c:b5:53:7e:6d:12:5b:4e:bc:06:4f:e8:c5:99: 98:a2:df:dc:ce:04:fa:9f:9d:ba:7a:27:6d:b0:5d: e5:58:ed:d1:fb:1e:fb:8c:ef:2a:35:b4:dd:72:33: 6b:c5:98:bd:82:ae:6c:e9:0c:2f:b2:91:44:e4:58: 0d:a8:cf:b1:e5:8b:b8:74:4f:19:2d:5d:a0:2b:71: 18:c8:ea:4a:83:73:07:74:3a:46:f6:9d:8a:99:3e: 32:db Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: B8:B3:04:9E:92:B9:B5:AB:D2:64:29:1F:D0:34:C9:FE:73:63:44:DE X509v3 Authority Key Identifier: keyid:A7:EE:18:2D:9C:43:A5:CE:70:68:DF:D9:BA:7A:A8:ED:90:E5:E0:BA X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/p-4YLZxDpc5waN_Zunqo7ZDl4Lo.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/22/dab420-0de3-4321-9c09-6b5f68522a7d/1/p-4YLZxDpc5waN_Zunqo7ZDl4Lo.mft X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/22/dab420-0de3-4321-9c09-6b5f68522a7d/1/p-4YLZxDpc5waN_Zunqo7ZDl4Lo.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 70:49:63:ee:83:3d:68:8c:87:48:02:1d:3b:89:5b:56:4b:fc: 61:ef:ad:31:35:d3:0b:4c:ae:c5:5f:5e:45:c5:f6:0e:84:ef: 8f:8e:5c:74:2a:e3:2a:45:1d:6e:e6:1d:38:56:6a:9a:5b:ec: b2:b2:7d:f6:06:f4:54:ac:27:2d:43:53:b0:54:0a:dd:07:a3: 74:fb:6d:ac:95:17:65:c9:68:4c:a7:16:dc:d4:00:ce:04:d2: 4a:c4:38:e4:55:cd:b1:19:c4:79:5d:22:58:11:26:0c:f2:4e: 0b:ef:2a:de:fe:39:67:fb:15:d9:b3:4d:59:d6:29:7c:68:f4: 0f:6e:ee:fb:b7:89:9b:10:9e:e6:33:bd:42:4c:3d:61:ef:84: fe:da:30:01:14:d6:de:b5:bd:f3:79:ca:f4:af:55:40:ed:2c: 0d:48:6e:94:f0:d1:47:3a:35:9e:07:99:d8:4a:2b:e9:ed:fb: 57:eb:88:3c:90:40:44:13:86:ec:8d:8f:fb:81:b8:84:2b:fb: 78:8a:49:00:f6:a5:30:77:63:59:99:75:18:63:20:b4:2e:55: e5:4d:5c:28:6c:96:38:fe:9c:66:22:36:7a:a8:d4:aa:47:0c: 0e:46:1c:aa:f5:71:c5:07:79:c0:21:88:d1:18:ab:87:c5:ae: a7:a9:ff:6a -----BEGIN CERTIFICATE----- MIIFFjCCA/6gAwIBAgISAZoXYSDC6mauWzN1VrV3ApszMA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKGE3ZWUxODJkOWM0M2E1Y2U3MDY4ZGZkOWJhN2FhOGVkOTBl NWUwYmEwHhcNMjUxMDI0MTgwMDMyWhcNMjUxMDI1MTgwMDMyWjAzMTEwLwYDVQQD EyhiOGIzMDQ5ZTkyYjliNWFiZDI2NDI5MWZkMDM0YzlmZTczNjM0NGRlMIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAsBQjPhU910hC+23rNH9HVmYl+i2J C6K1YByhsXynNSMm4kooeVRFlpTdnaKCc53GciFkRBgGf/GX3lkQFYGbvBS0c7uv FPaEvuMCVefWbbVESxqd31S8yfUhNw9v8ZkotA3GhcF/PQ61B6h/j9NBGOyCPTq8 9DDBJMa5A5gn565i0UqTvC2MAymqMMfVXVsuOwTN/xwFS3QNbOv4I8uNjq04E4Ig nLVTfm0SW068Bk/oxZmYot/czgT6n526eidtsF3lWO3R+x77jO8qNbTdcjNrxZi9 gq5s6QwvspFE5FgNqM+x5Yu4dE8ZLV2gK3EYyOpKg3MHdDpG9p2KmT4y2wIDAQAB o4ICIjCCAh4wHQYDVR0OBBYEFLizBJ6SubWr0mQpH9A0yf5zY0TeMB8GA1UdIwQY MBaAFKfuGC2cQ6XOcGjf2bp6qO2Q5eC6MA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvcC00WUxaeERwYzV3YU5fWnVucW83WkRsNExvLmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC8yMi9kYWI0MjAtMGRlMy00MzIxLTljMDkt NmI1ZjY4NTIyYTdkLzEvcC00WUxaeERwYzV3YU5fWnVucW83WkRsNExvLm1mdDCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC8yMi9kYWI0MjAtMGRlMy00MzIxLTljMDktNmI1ZjY4NTIyYTdk LzEvcC00WUxaeERwYzV3YU5fWnVucW83WkRsNExvLmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAcElj7oM9 aIyHSAIdO4lbVkv8Ye+tMTXTC0yuxV9eRcX2DoTvj45cdCrjKkUdbuYdOFZqmlvs srJ99gb0VKwnLUNTsFQK3QejdPttrJUXZcloTKcW3NQAzgTSSsQ45FXNsRnEeV0i WBEmDPJOC+8q3v45Z/sV2bNNWdYpfGj0D27u+7eJmxCe5jO9Qkw9Ye+E/towARTW 3rW983nK9K9VQO0sDUhulPDRRzo1ngeZ2Eor6e37V+uIPJBARBOG7I2P+4G4hCv7 eIpJAPalMHdjWZl1GGMgtC5V5U1cKGyWOP6cZiI2eqjUqkcMDkYcqvVxxQd5wCGI 0Rirh8Wup6n/ag== -----END CERTIFICATE-----Generated at Fri Oct 24 23:31:27 2025 by rpki-client