$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/24/b51a85-f99f-423f-9fae-dd294c378f6c/1/2MYKDS1wqTN9C9pW0a1ZasH2nNo.mft File: 2MYKDS1wqTN9C9pW0a1ZasH2nNo.mft (raw, json) Hash identifier: HUHwqiKiQYIxJNQ9UwLWA3AKSV71ar0dLdpPmyolNyc= Subject key identifier: D5:F1:CD:F3:38:32:E0:C7:57:BD:8B:DC:89:31:42:D3:CD:8D:CE:A9 Authority key identifier: D8:C6:0A:0D:2D:70:A9:33:7D:0B:DA:56:D1:AD:59:6A:C1:F6:9C:DA Certificate issuer: /CN=d8c60a0d2d70a9337d0bda56d1ad596ac1f69cda Certificate serial: 019A06A49D6527F5F55658C8BCA221568707 Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/2MYKDS1wqTN9C9pW0a1ZasH2nNo.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/24/b51a85-f99f-423f-9fae-dd294c378f6c/1/2MYKDS1wqTN9C9pW0a1ZasH2nNo.mft Manifest number: 10F4 Signing time: Tue 21 Oct 2025 12:00:42 +0000 Manifest this update: Tue 21 Oct 2025 12:00:42 +0000 Manifest next update: Wed 22 Oct 2025 12:00:42 +0000 Files and hashes: 1: 1sKE36lDWeWUjMSloo6n26lQvxE.roa (hash: 0YFmLsRRla2daPn9GavHfi/iWCjcjVBR51fAM/YzUPA=) 2: 2MYKDS1wqTN9C9pW0a1ZasH2nNo.crl (hash: 7RK7CCfuMQzbIcMEMvLwuLOq+l/tbTHX8H0EzVln4X8=) 3: 7KfLp6tWihAhdW_ZCJGaxH-KxhA.roa (hash: TNNFwSmMyWVi4jN+jvMQ3wmmO3p3q2BXU7y9CZpeBFo=) 4: 8GeGNNzjzZvJIEAAhJi9tW2bbrA.roa (hash: Eto9TySCaxnkkdyIGeX6PMXh8s89OGTNecNbv02FHmY=) 5: BinZKeyg5gKkO8gwYJ0Ze8CeRxs.roa (hash: y9nENbUlBNsJYj+Cw11EQBzVD35m8OwMSWBUyRfdWao=) 6: CWwZKtjic8hgoUqW8Q2C2AbAOcg.roa (hash: kwrireSUCM8B5X7b/jFwe6owVISrGhqj47+KxFuhlXE=) 7: JS3mwrKoM_bu1YlMg44SqBJyzi4.roa (hash: FctYPf15GQv8egu27KZUZZfAkIishBp5/PDkotJF9Wg=) 8: ZH0QvaHOPvJPYEbUbSGF-chYfuI.roa (hash: GNpLUKAR49JusHGuTxHkn0FssgkY3qDBV+p8eW6v2dA=) 9: biowetcg3ehch8_ZT-Bjgdr3xVQ.roa (hash: +3UkGpMA2we3DWKym0QAg124Kd/FTF+tUn4YLgIyHpE=) 10: gmGmlBXuT4XMadwFIMM_Ru7A8rY.roa (hash: C02/amx+lTSpWSc0IFfRlXGRMUsC7V5LK9TrUNGhpXk=) 11: j0duG-Ijddau9Fj9XQZGhj9d5E0.roa (hash: jAtA5pws2q4wQ+M2hNZZyClsEg5rjHmu2VOiOpDAE88=) 12: mP8Qz54E01SquciLEGB10XN2R-M.roa (hash: TdXFl7ZveLTgT4OrOlqkJ84pFNT0T+LUDZ5933YP0mE=) 13: suXcRzS6-_4AE_w0ZJlYPW8wMRM.roa (hash: +PBYO+10etR0ZMMQ1FwMVF/GjPtirIZFSfWGb9cD2rU=) 14: yRlATHfw4VPtk07WpZ6YJCL0ujk.roa (hash: qFhl3+M+zqPL0w/p5+UX5EFi+fLod6eaZpO9ZGTbXcw=) 15: yVFu2BG-2jPO42o54RBasvcduFQ.roa (hash: 6xPh274P2CTFpVhbpm7wdZ5x4IvYPBNr1EUV4XIfsgM=) Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/24/b51a85-f99f-423f-9fae-dd294c378f6c/1/2MYKDS1wqTN9C9pW0a1ZasH2nNo.crl rsync://rpki.ripe.net/repository/DEFAULT/24/b51a85-f99f-423f-9fae-dd294c378f6c/1/2MYKDS1wqTN9C9pW0a1ZasH2nNo.mft rsync://rpki.ripe.net/repository/DEFAULT/2MYKDS1wqTN9C9pW0a1ZasH2nNo.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Wed 22 Oct 2025 12:00:42 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9a:06:a4:9d:65:27:f5:f5:56:58:c8:bc:a2:21:56:87:07 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=d8c60a0d2d70a9337d0bda56d1ad596ac1f69cda Validity Not Before: Oct 21 12:00:42 2025 GMT Not After : Oct 22 12:00:42 2025 GMT Subject: CN=d5f1cdf33832e0c757bd8bdc893142d3cd8dcea9 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:b3:aa:47:27:cd:97:15:ca:be:03:15:eb:73:a3: a0:b2:8d:a8:64:b3:11:2f:8f:2a:4c:48:84:23:b5: ad:65:bf:4a:81:c0:50:07:11:0a:85:f3:a6:1b:f6: 14:1b:bd:a8:fe:3f:ad:f9:68:e8:2e:4b:47:3a:44: 33:2b:1c:89:6e:33:59:f9:05:fa:b5:2e:ed:b7:f5: 9a:76:f9:0b:dd:94:e9:82:81:cd:71:d6:cc:d9:8a: 4d:fe:f5:54:db:80:d1:a1:c6:78:3a:d5:e0:7a:8c: 28:e6:74:58:20:ae:88:a5:3c:67:70:bc:f5:89:aa: dc:da:7a:4c:f5:ac:49:11:d2:07:71:f0:a3:16:5b: 59:eb:a2:c1:d4:f3:9d:a4:21:0f:56:f9:5f:72:d7: 49:3c:83:8c:2b:1d:48:f9:7e:8f:9f:89:6a:e9:79: a2:8a:72:4c:0e:cc:30:f3:a7:aa:a9:52:47:3a:f7: 52:63:7f:6c:12:69:0a:c5:4f:4a:a2:9d:d4:5c:2a: fb:3b:03:35:65:ac:d4:5a:e4:b1:8e:f7:6e:4f:1a: fe:2f:f7:47:16:b8:4c:dc:4d:1b:ba:51:59:7e:65: 63:6e:0f:83:3e:73:be:cc:c9:9b:7c:a7:59:b1:3f: 75:5c:08:5d:69:e0:ac:98:13:fe:33:af:37:83:ef: 59:a7 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: D5:F1:CD:F3:38:32:E0:C7:57:BD:8B:DC:89:31:42:D3:CD:8D:CE:A9 X509v3 Authority Key Identifier: keyid:D8:C6:0A:0D:2D:70:A9:33:7D:0B:DA:56:D1:AD:59:6A:C1:F6:9C:DA X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/2MYKDS1wqTN9C9pW0a1ZasH2nNo.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/24/b51a85-f99f-423f-9fae-dd294c378f6c/1/2MYKDS1wqTN9C9pW0a1ZasH2nNo.mft X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/24/b51a85-f99f-423f-9fae-dd294c378f6c/1/2MYKDS1wqTN9C9pW0a1ZasH2nNo.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 6c:12:76:fc:8b:41:6d:69:65:99:34:b2:cc:a8:c2:02:ff:9b: ac:b0:19:10:c9:46:ae:36:87:43:5a:ae:68:8c:32:d8:55:58: f1:c1:bc:c6:0a:04:02:04:76:c1:00:c6:65:d1:95:bf:e5:19: f7:60:cf:66:ba:74:e2:b8:da:8e:01:4f:37:98:9e:be:ed:19: fb:2b:83:c5:80:bd:74:8d:b4:28:cf:74:52:70:ea:83:47:9c: fd:28:bb:bf:03:d2:4d:38:90:0d:ef:2e:eb:5d:0b:ef:c5:31: dc:68:cd:f0:bc:ab:a2:4f:1d:d0:7f:06:66:65:57:7a:e5:ea: d3:32:d9:a7:52:ad:28:5b:2f:a5:8f:f2:0c:07:bf:86:3a:38: ff:4f:9b:b3:af:cf:e7:48:21:dc:00:72:8b:b7:0b:50:bd:dc: 16:46:65:00:62:51:de:36:e7:ba:6a:04:ef:57:34:07:83:aa: be:6f:31:7b:8f:fb:48:98:af:17:9d:ec:35:1c:c9:6e:93:6b: 1d:88:a0:4f:78:8e:8c:9c:70:85:a3:53:0f:d7:da:a3:d6:a0: fa:6c:0a:e4:cd:25:28:21:bf:66:bc:88:0e:e1:99:d1:f6:8d: fc:47:4b:59:98:fe:4c:63:03:90:9c:eb:a0:ea:1a:12:7b:6a: 8e:c5:85:6b -----BEGIN CERTIFICATE----- MIIFFjCCA/6gAwIBAgISAZoGpJ1lJ/X1VljIvKIhVocHMA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKGQ4YzYwYTBkMmQ3MGE5MzM3ZDBiZGE1NmQxYWQ1OTZhYzFm NjljZGEwHhcNMjUxMDIxMTIwMDQyWhcNMjUxMDIyMTIwMDQyWjAzMTEwLwYDVQQD EyhkNWYxY2RmMzM4MzJlMGM3NTdiZDhiZGM4OTMxNDJkM2NkOGRjZWE5MIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAs6pHJ82XFcq+AxXrc6Ogso2oZLMR L48qTEiEI7WtZb9KgcBQBxEKhfOmG/YUG72o/j+t+WjoLktHOkQzKxyJbjNZ+QX6 tS7tt/WadvkL3ZTpgoHNcdbM2YpN/vVU24DRocZ4OtXgeowo5nRYIK6IpTxncLz1 iarc2npM9axJEdIHcfCjFltZ66LB1POdpCEPVvlfctdJPIOMKx1I+X6Pn4lq6Xmi inJMDsww86eqqVJHOvdSY39sEmkKxU9Kop3UXCr7OwM1ZazUWuSxjvduTxr+L/dH FrhM3E0bulFZfmVjbg+DPnO+zMmbfKdZsT91XAhdaeCsmBP+M683g+9ZpwIDAQAB o4ICIjCCAh4wHQYDVR0OBBYEFNXxzfM4MuDHV72L3IkxQtPNjc6pMB8GA1UdIwQY MBaAFNjGCg0tcKkzfQvaVtGtWWrB9pzaMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvMk1ZS0RTMXdxVE45QzlwVzBhMVphc0gybk5vLmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC8yNC9iNTFhODUtZjk5Zi00MjNmLTlmYWUt ZGQyOTRjMzc4ZjZjLzEvMk1ZS0RTMXdxVE45QzlwVzBhMVphc0gybk5vLm1mdDCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC8yNC9iNTFhODUtZjk5Zi00MjNmLTlmYWUtZGQyOTRjMzc4ZjZj LzEvMk1ZS0RTMXdxVE45QzlwVzBhMVphc0gybk5vLmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAbBJ2/ItB bWllmTSyzKjCAv+brLAZEMlGrjaHQ1quaIwy2FVY8cG8xgoEAgR2wQDGZdGVv+UZ 92DPZrp04rjajgFPN5ievu0Z+yuDxYC9dI20KM90UnDqg0ec/Si7vwPSTTiQDe8u 610L78Ux3GjN8Lyrok8d0H8GZmVXeuXq0zLZp1KtKFsvpY/yDAe/hjo4/0+bs6/P 50gh3AByi7cLUL3cFkZlAGJR3jbnumoE71c0B4Oqvm8xe4/7SJivF53sNRzJbpNr HYigT3iOjJxwhaNTD9fao9ag+mwK5M0lKCG/ZryIDuGZ0faN/EdLWZj+TGMDkJzr oOoaEntqjsWFaw== -----END CERTIFICATE-----Generated at Tue Oct 21 22:42:41 2025 by rpki-client