$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/28/ebbac9-fee7-4f3b-8cd5-7a41254eaaca/1/tyWIwA7vcVgJ61_dbWcXzCjA36w.mft File: tyWIwA7vcVgJ61_dbWcXzCjA36w.mft (raw, json) Hash identifier: 5H6673wIdsDIQ8Aq0v5gVijGx+hlfvmISh23n2Wrzu0= Subject key identifier: 7E:94:16:B6:19:CA:9F:32:DD:DB:3D:B0:A3:DD:4C:5A:CF:5F:8E:2F Authority key identifier: B7:25:88:C0:0E:EF:71:58:09:EB:5F:DD:6D:67:17:CC:28:C0:DF:AC Certificate issuer: /CN=b72588c00eef715809eb5fdd6d6717cc28c0dfac Certificate serial: 019A1F8889BF1A3CDD14DF32F657ADF1B655 Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/tyWIwA7vcVgJ61_dbWcXzCjA36w.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/28/ebbac9-fee7-4f3b-8cd5-7a41254eaaca/1/tyWIwA7vcVgJ61_dbWcXzCjA36w.mft Manifest number: 1707 Signing time: Sun 26 Oct 2025 08:00:33 +0000 Manifest this update: Sun 26 Oct 2025 08:00:33 +0000 Manifest next update: Mon 27 Oct 2025 08:00:33 +0000 Files and hashes: 1: 30BxK6_jpie3YrLCVwh_L1trwzk.roa (hash: X9FbkEMlA2QphV+O7rBHZ0meCsmOLXe9r7nPMvJuQcE=) 2: Dbj9xuGjig4FQD4z5CtOr-cvTeI.roa (hash: Kh8CzaShn4hw0xJ/eT2H0TnUMB7Vdu0F94Rtfvnict8=) 3: EuktsmR6HvXm2m5YsC5Wyo5ecw4.roa (hash: JZi+DlaPt3ZWFPrgsMEzdF/6HYunSwsq7ugQUzVGcAU=) 4: F-P_HvBB3WeH7KniyH81o28KKbo.roa (hash: 8sYaDjHEHJUFW2fXpmzCzQDMt9L045SyDdjIlOEUNco=) 5: Il7zmHjI6jj-0rEtM_yBLvYuye4.roa (hash: de+WYdahLIsSTArl8Hy+qPN/PBIbGPDv82xXs+xKdZY=) 6: WBOYQCAoKRyLsa6JAYAHwgmZIqI.roa (hash: lyZfLnKwP7kxcM63676+jKHGePevi3n5oMgldGNu5qA=) 7: WR7z7m7JZCweB81LV8VsoLwZDDI.roa (hash: n+zNUpOUwgPN3iy+Ul6bCia4Bw0P9Lb0d3EbTWyw+/I=) 8: eNRtwGVQ1VdkNKBRZ8o9uf4Ec24.roa (hash: syspd0kan424RvhNNvOMRktLryIova5s5SuLnxOMs4I=) 9: inKVgfg6tkDW3-Ko2Fj1q9U9rjM.roa (hash: m3IZ4E9iTFBEvHgMwMmb/F3F5jQFINfkwm1zng7j3wE=) 10: jmu-RUwAGlfdjyuIX4pdgwp2S_c.roa (hash: 0w/XwzNScEN/vprJx5SJRgxW5WArgctvQM2YSDSFtog=) 11: tLlGubJJap72E2l8gRh9Uuu4S8A.roa (hash: jBh5pu7FnbvAeJHH3DMpIfaMMsMyb9LyPf0qd9sE/90=) 12: tyWIwA7vcVgJ61_dbWcXzCjA36w.crl (hash: nDOs2v6IlK0NNiUA9HQjBxRP7nS9LhoXH8D6qLAnFNs=) Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/28/ebbac9-fee7-4f3b-8cd5-7a41254eaaca/1/tyWIwA7vcVgJ61_dbWcXzCjA36w.crl rsync://rpki.ripe.net/repository/DEFAULT/28/ebbac9-fee7-4f3b-8cd5-7a41254eaaca/1/tyWIwA7vcVgJ61_dbWcXzCjA36w.mft rsync://rpki.ripe.net/repository/DEFAULT/tyWIwA7vcVgJ61_dbWcXzCjA36w.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Mon 27 Oct 2025 03:42:03 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9a:1f:88:89:bf:1a:3c:dd:14:df:32:f6:57:ad:f1:b6:55 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=b72588c00eef715809eb5fdd6d6717cc28c0dfac Validity Not Before: Oct 26 08:00:33 2025 GMT Not After : Oct 27 08:00:33 2025 GMT Subject: CN=7e9416b619ca9f32dddb3db0a3dd4c5acf5f8e2f Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:94:1d:47:72:19:57:a5:02:ae:8d:58:8d:06:2e: f2:5a:06:24:be:e8:c5:ed:e9:af:71:73:b0:90:24: d7:f2:b7:41:9f:61:dc:cc:2a:67:c7:8e:07:65:09: 3d:bd:98:12:78:d4:f3:e4:f0:5d:ac:ee:cc:b3:30: 96:a6:bd:d3:96:b5:60:74:18:b9:1c:99:b5:8b:a6: ae:0b:f5:58:ec:63:bc:0d:bb:09:b0:61:8a:67:8b: b9:09:70:2b:01:4e:f8:6c:b2:79:f6:7f:92:43:77: fd:ec:6c:7d:2e:8c:6e:69:94:80:bc:9e:24:d3:2b: 60:df:ed:5d:c5:b3:88:ac:1b:5e:45:b1:b2:9a:2e: 2c:e9:ba:f9:00:1c:a7:a6:eb:ae:7e:f6:84:94:0d: 16:59:63:b4:9b:5c:53:00:34:d9:47:d4:38:4e:1e: ec:0b:6f:d4:ec:d9:df:ba:fd:c9:7f:70:84:17:66: b1:24:fb:0f:d4:52:49:3a:66:45:8f:a2:13:fa:0d: 5a:92:6d:5e:ff:5f:21:d9:5a:7a:1b:01:52:81:aa: 10:8c:39:ce:d4:28:6b:4f:bf:17:71:01:7d:dd:d6: 7c:4d:16:1d:b7:cd:ac:c9:f0:97:d9:8c:d8:90:63: 23:a1:1c:05:cd:d2:9d:89:a3:4a:26:6d:8c:51:9f: 22:7d Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 7E:94:16:B6:19:CA:9F:32:DD:DB:3D:B0:A3:DD:4C:5A:CF:5F:8E:2F X509v3 Authority Key Identifier: keyid:B7:25:88:C0:0E:EF:71:58:09:EB:5F:DD:6D:67:17:CC:28:C0:DF:AC X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/tyWIwA7vcVgJ61_dbWcXzCjA36w.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/28/ebbac9-fee7-4f3b-8cd5-7a41254eaaca/1/tyWIwA7vcVgJ61_dbWcXzCjA36w.mft X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/28/ebbac9-fee7-4f3b-8cd5-7a41254eaaca/1/tyWIwA7vcVgJ61_dbWcXzCjA36w.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 50:16:3f:63:1f:db:27:d3:18:6e:6e:cd:85:3e:f9:62:0f:f1: 6c:03:ba:85:b1:e0:f7:de:e5:9e:64:81:5d:fb:54:16:da:f1: c8:3f:b1:40:b7:ad:6c:75:e9:90:ff:f1:c4:cd:a8:2d:e4:03: df:cc:6d:f7:4f:35:f7:a4:ff:b3:2f:d2:38:2c:ef:90:fc:f1: 76:05:37:f4:1c:1a:5b:14:17:d5:0a:59:40:11:d7:e8:0c:7a: 3c:90:29:be:d9:4f:1e:68:93:62:66:88:9a:8c:1f:69:2c:4a: 47:22:5f:65:0e:81:22:fc:1d:7e:7c:a3:44:bc:90:b2:c9:6a: a9:6c:db:32:50:c3:5b:33:72:e5:fe:03:dd:32:a8:bb:3c:d0: fa:47:52:39:e5:4a:c2:17:0b:40:28:2a:e7:13:80:a3:c3:41: be:f7:9a:eb:0a:f6:93:82:c8:2b:35:ff:24:34:ad:25:16:90: 33:1f:aa:ad:ee:31:7b:69:3c:99:a7:b6:0e:8e:b8:ac:0e:fd: 08:38:f9:db:88:f4:0e:c5:8e:ce:f5:4c:8b:f7:5a:4e:4a:bc: 4e:fd:e7:bf:f6:08:4f:c8:86:d7:ce:de:1c:d1:f5:78:a1:3b: 78:18:08:0d:84:f4:5e:e4:91:98:aa:d4:73:d4:aa:6a:75:d2: 75:eb:cc:3f -----BEGIN CERTIFICATE----- MIIFFjCCA/6gAwIBAgISAZofiIm/GjzdFN8y9let8bZVMA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKGI3MjU4OGMwMGVlZjcxNTgwOWViNWZkZDZkNjcxN2NjMjhj MGRmYWMwHhcNMjUxMDI2MDgwMDMzWhcNMjUxMDI3MDgwMDMzWjAzMTEwLwYDVQQD Eyg3ZTk0MTZiNjE5Y2E5ZjMyZGRkYjNkYjBhM2RkNGM1YWNmNWY4ZTJmMIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAlB1HchlXpQKujViNBi7yWgYkvujF 7emvcXOwkCTX8rdBn2HczCpnx44HZQk9vZgSeNTz5PBdrO7MszCWpr3TlrVgdBi5 HJm1i6auC/VY7GO8DbsJsGGKZ4u5CXArAU74bLJ59n+SQ3f97Gx9LoxuaZSAvJ4k 0ytg3+1dxbOIrBteRbGymi4s6br5ABynpuuufvaElA0WWWO0m1xTADTZR9Q4Th7s C2/U7Nnfuv3Jf3CEF2axJPsP1FJJOmZFj6IT+g1akm1e/18h2Vp6GwFSgaoQjDnO 1ChrT78XcQF93dZ8TRYdt82syfCX2YzYkGMjoRwFzdKdiaNKJm2MUZ8ifQIDAQAB o4ICIjCCAh4wHQYDVR0OBBYEFH6UFrYZyp8y3ds9sKPdTFrPX44vMB8GA1UdIwQY MBaAFLcliMAO73FYCetf3W1nF8wowN+sMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvdHlXSXdBN3ZjVmdKNjFfZGJXY1h6Q2pBMzZ3LmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC8yOC9lYmJhYzktZmVlNy00ZjNiLThjZDUt N2E0MTI1NGVhYWNhLzEvdHlXSXdBN3ZjVmdKNjFfZGJXY1h6Q2pBMzZ3Lm1mdDCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC8yOC9lYmJhYzktZmVlNy00ZjNiLThjZDUtN2E0MTI1NGVhYWNh LzEvdHlXSXdBN3ZjVmdKNjFfZGJXY1h6Q2pBMzZ3LmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAUBY/Yx/b J9MYbm7NhT75Yg/xbAO6hbHg997lnmSBXftUFtrxyD+xQLetbHXpkP/xxM2oLeQD 38xt908196T/sy/SOCzvkPzxdgU39BwaWxQX1QpZQBHX6Ax6PJApvtlPHmiTYmaI mowfaSxKRyJfZQ6BIvwdfnyjRLyQsslqqWzbMlDDWzNy5f4D3TKouzzQ+kdSOeVK whcLQCgq5xOAo8NBvvea6wr2k4LIKzX/JDStJRaQMx+qre4xe2k8mae2Do64rA79 CDj524j0DsWOzvVMi/daTkq8Tv3nv/YIT8iG187eHNH1eKE7eBgIDYT0XuSRmKrU c9SqanXSdevMPw== -----END CERTIFICATE-----Generated at Sun Oct 26 11:38:35 2025 by rpki-client