$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/28/972db6-770f-4462-9fc7-ee9b9517f2ec/1/dXzv42s_zGikLAr_gdFEmA8yd38.mft File: dXzv42s_zGikLAr_gdFEmA8yd38.mft (raw, json) Hash identifier: kHDHccjdyygV0h2KHN/subfHLbHNE+orvT78/njL8Lo= Subject key identifier: D3:70:DF:44:0A:85:CA:0C:B7:FC:E5:4E:5B:40:73:57:B0:98:94:8C Authority key identifier: 75:7C:EF:E3:6B:3F:CC:68:A4:2C:0A:FF:81:D1:44:98:0F:32:77:7F Certificate issuer: /CN=757cefe36b3fcc68a42c0aff81d144980f32777f Certificate serial: 019A0B941782E80E00692CA6AB4D2257C7AA Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/dXzv42s_zGikLAr_gdFEmA8yd38.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/28/972db6-770f-4462-9fc7-ee9b9517f2ec/1/dXzv42s_zGikLAr_gdFEmA8yd38.mft Manifest number: 0E3E Signing time: Wed 22 Oct 2025 11:00:45 +0000 Manifest this update: Wed 22 Oct 2025 11:00:45 +0000 Manifest next update: Thu 23 Oct 2025 11:00:45 +0000 Files and hashes: 1: 2MnJb6c5YnNQ1zVgyuJ_IZ3n2QI.roa (hash: k/m6yvyjLdB8+4uEbTkqM+WRV4cgI1Ugl2bD6WkY+xM=) 2: 4Yl_3VM-kdroRBsz7nPcb_MfTYo.roa (hash: 2xScy0N/ISEI1qEUmAbHyPZ6hI9GPPFsgivLJsiPGzo=) 3: AsZ4lIlUC0d5mfRed_ShT3RnpBQ.roa (hash: W7NsqtDHS3yDz7/Se2vS6CdoOqQMP8fqf009dcbuclU=) 4: LPKpfkMJen9TUH4ZfxgOzxqHkNU.roa (hash: ING4rNZCefT1Q8B8npudHtyqQQUdosJKFpOv34aIHJk=) 5: MUsQigUUD2skKaCxyUsENnVfQc0.roa (hash: jiSuFC22L+bIpKGlJw58reJLq1BBaex8I+CdJw/e78g=) 6: N1rTidaACgh8Wl5J2g45GZumvQs.roa (hash: btCaFx/Jws6uzlXHydN6cLSWM9L6FDcS4ymcYrWP048=) 7: STH4-y1aq1LhW-baf9HKwXtIHJQ.roa (hash: yaIK76KSwbSajy8q/yoNwGsAyGyY8gBGn7TqV9f/vug=) 8: UVAz1jDT3iVOFvSm2qO2EdM6DgI.roa (hash: BgGgY29/jzHM3rW+5X9NXDmgQhNrFZgHRGbC0+SNOiA=) 9: V-OJS7n-tClzLYoutvszAGhYUO4.roa (hash: plyDzUE+bTSt121p7JpTI11birjcMFkAQUHN+FtPtRU=) 10: dXzv42s_zGikLAr_gdFEmA8yd38.crl (hash: 0mYfOY7mE4QYVUWLzIQcOkLoiUUC2Te/3ia9BXn9LPA=) 11: h4SH4jbcO_QrPdA2Gh6nPhcu90k.roa (hash: i2GmF/BWsi8T4gmbicuCkuelb7temf0e4pvjoHHSntA=) 12: omApJ8ZKR4XFaIu8UV0AdkcF3F4.roa (hash: xZcc8vbsQpepsoA3jDnIWvOKGnfbdef1RwrZnZhSI2M=) 13: rYyq3Q7PDVta3OkGbh_Yn-1vetI.roa (hash: /hQXYhPHacv6Dm6bhyBoBz8UGk0yrWTnmBDLjgQ6kZQ=) 14: ugpSKfU4cI4BHNBN_7iW8XaPfSI.roa (hash: db0tkxspHpe7xqGkGEEw5zEcWk0GCNRtkvpsh9z8Yis=) Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/28/972db6-770f-4462-9fc7-ee9b9517f2ec/1/dXzv42s_zGikLAr_gdFEmA8yd38.crl rsync://rpki.ripe.net/repository/DEFAULT/28/972db6-770f-4462-9fc7-ee9b9517f2ec/1/dXzv42s_zGikLAr_gdFEmA8yd38.mft rsync://rpki.ripe.net/repository/DEFAULT/dXzv42s_zGikLAr_gdFEmA8yd38.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Thu 23 Oct 2025 11:00:45 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9a:0b:94:17:82:e8:0e:00:69:2c:a6:ab:4d:22:57:c7:aa Signature Algorithm: sha256WithRSAEncryption Issuer: CN=757cefe36b3fcc68a42c0aff81d144980f32777f Validity Not Before: Oct 22 11:00:45 2025 GMT Not After : Oct 23 11:00:45 2025 GMT Subject: CN=d370df440a85ca0cb7fce54e5b407357b098948c Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:97:56:30:c8:e7:aa:f3:e4:bd:34:6d:a9:6e:4b: 9a:eb:9b:ea:2c:ca:78:c2:8b:d6:ad:32:dc:2b:48: 4c:a0:cf:8c:ed:22:99:6c:c3:87:50:8a:96:07:a1: fb:bb:ca:cc:25:94:17:75:b9:42:5a:79:18:37:c8: db:ed:0f:ee:b0:48:be:e7:29:8a:b1:a6:63:4d:af: 8e:a7:59:04:cc:dc:61:47:a2:64:37:36:9b:06:8a: 4e:e0:c1:74:28:03:a6:d6:c1:59:46:df:43:9f:bd: e7:0f:65:e8:ea:9d:b7:05:60:92:73:d3:d6:bb:2d: ff:eb:54:a4:6c:07:79:0d:62:93:80:1e:8f:f4:07: bf:f3:f7:00:6a:a7:a6:0e:9e:e8:5e:62:93:bd:41: 2c:0f:07:7d:aa:e2:f9:b9:14:01:53:a8:71:df:81: be:a7:33:25:5f:10:4d:3d:7d:0a:b3:55:ae:07:ba: e5:8b:34:0f:2f:b2:65:ee:ea:64:4b:4a:eb:6d:b5: e6:43:23:9d:8a:b5:0c:cf:06:48:cf:1a:e6:97:f4: 91:59:1c:18:07:1e:af:d4:c4:3b:7d:59:2c:58:90: 0f:89:a9:ef:07:1c:45:45:06:a0:54:b1:0d:a4:73: 82:09:50:d0:3f:07:2d:15:b7:cf:92:60:77:38:b0: 48:37 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: D3:70:DF:44:0A:85:CA:0C:B7:FC:E5:4E:5B:40:73:57:B0:98:94:8C X509v3 Authority Key Identifier: keyid:75:7C:EF:E3:6B:3F:CC:68:A4:2C:0A:FF:81:D1:44:98:0F:32:77:7F X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/dXzv42s_zGikLAr_gdFEmA8yd38.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/28/972db6-770f-4462-9fc7-ee9b9517f2ec/1/dXzv42s_zGikLAr_gdFEmA8yd38.mft X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/28/972db6-770f-4462-9fc7-ee9b9517f2ec/1/dXzv42s_zGikLAr_gdFEmA8yd38.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 53:a4:ff:05:ef:ae:10:77:61:da:3d:dd:d2:2c:0a:74:a2:99: dc:6d:83:35:3f:72:15:99:66:80:83:b7:ca:35:9e:7c:23:21: eb:ab:c2:86:92:6a:76:d5:46:c8:37:15:6c:19:93:c5:15:80: fa:c5:48:03:8e:75:00:2c:39:58:44:77:c8:8a:61:35:76:9b: 6a:95:12:13:18:4b:72:52:12:7c:23:80:80:40:be:cb:02:12: eb:ca:90:01:c7:d7:df:f4:c8:a6:4f:9c:bf:ed:71:5e:65:26: 8a:18:bd:78:28:8e:c9:77:ab:6e:d7:7d:9e:e0:d7:29:63:43: 8c:e7:c8:bc:e5:62:ac:73:85:af:60:2a:ff:45:00:98:22:e8: c5:5d:4b:b0:fd:1d:30:82:c9:9a:24:5c:2a:8a:25:e8:e2:d4: 0a:ee:38:53:88:c9:c1:b8:c8:a9:a3:e7:cb:f4:6d:fb:87:5d: 37:89:40:cc:ae:a9:7c:c4:a6:4f:7a:09:01:e6:6e:2d:f5:e1: 1c:04:49:45:98:c2:67:fc:f6:5f:5d:a8:35:8e:51:36:7a:8f: 32:c4:7f:ed:82:38:c5:2c:62:2f:08:96:1c:74:ee:3e:86:4c: 4b:a3:aa:72:74:7d:61:0d:ed:ba:87:22:c7:ca:0b:51:30:b5: 55:56:5f:a4 -----BEGIN CERTIFICATE----- MIIFFjCCA/6gAwIBAgISAZoLlBeC6A4AaSymq00iV8eqMA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKDc1N2NlZmUzNmIzZmNjNjhhNDJjMGFmZjgxZDE0NDk4MGYz Mjc3N2YwHhcNMjUxMDIyMTEwMDQ1WhcNMjUxMDIzMTEwMDQ1WjAzMTEwLwYDVQQD EyhkMzcwZGY0NDBhODVjYTBjYjdmY2U1NGU1YjQwNzM1N2IwOTg5NDhjMIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAl1YwyOeq8+S9NG2pbkua65vqLMp4 wovWrTLcK0hMoM+M7SKZbMOHUIqWB6H7u8rMJZQXdblCWnkYN8jb7Q/usEi+5ymK saZjTa+Op1kEzNxhR6JkNzabBopO4MF0KAOm1sFZRt9Dn73nD2Xo6p23BWCSc9PW uy3/61SkbAd5DWKTgB6P9Ae/8/cAaqemDp7oXmKTvUEsDwd9quL5uRQBU6hx34G+ pzMlXxBNPX0Ks1WuB7rlizQPL7Jl7upkS0rrbbXmQyOdirUMzwZIzxrml/SRWRwY Bx6v1MQ7fVksWJAPianvBxxFRQagVLENpHOCCVDQPwctFbfPkmB3OLBINwIDAQAB o4ICIjCCAh4wHQYDVR0OBBYEFNNw30QKhcoMt/zlTltAc1ewmJSMMB8GA1UdIwQY MBaAFHV87+NrP8xopCwK/4HRRJgPMnd/MA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvZFh6djQyc196R2lrTEFyX2dkRkVtQTh5ZDM4LmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC8yOC85NzJkYjYtNzcwZi00NDYyLTlmYzct ZWU5Yjk1MTdmMmVjLzEvZFh6djQyc196R2lrTEFyX2dkRkVtQTh5ZDM4Lm1mdDCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC8yOC85NzJkYjYtNzcwZi00NDYyLTlmYzctZWU5Yjk1MTdmMmVj LzEvZFh6djQyc196R2lrTEFyX2dkRkVtQTh5ZDM4LmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAU6T/Be+u EHdh2j3d0iwKdKKZ3G2DNT9yFZlmgIO3yjWefCMh66vChpJqdtVGyDcVbBmTxRWA +sVIA451ACw5WER3yIphNXabapUSExhLclISfCOAgEC+ywIS68qQAcfX3/TIpk+c v+1xXmUmihi9eCiOyXerbtd9nuDXKWNDjOfIvOVirHOFr2Aq/0UAmCLoxV1LsP0d MILJmiRcKool6OLUCu44U4jJwbjIqaPny/Rt+4ddN4lAzK6pfMSmT3oJAeZuLfXh HARJRZjCZ/z2X12oNY5RNnqPMsR/7YI4xSxiLwiWHHTuPoZMS6OqcnR9YQ3tuoci x8oLUTC1VVZfpA== -----END CERTIFICATE-----Generated at Wed Oct 22 20:28:33 2025 by rpki-client