$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/29/cc8f4a-4c02-404b-8d93-2cde65f3112a/1/h74JMJcJfERX_1qj5Yk8jBVDJhI.mft File: h74JMJcJfERX_1qj5Yk8jBVDJhI.mft (raw, json) Hash identifier: GV2bGXJx7VphkJZsUMf5jZJkCangGYVpxdK2yFLL76Q= Subject key identifier: 05:CC:B3:5B:12:74:E4:37:13:2A:27:AD:14:2D:5B:14:2A:20:C6:02 Authority key identifier: 87:BE:09:30:97:09:7C:44:57:FF:5A:A3:E5:89:3C:8C:15:43:26:12 Certificate issuer: /CN=87be093097097c4457ff5aa3e5893c8c15432612 Certificate serial: 019A4B85948C83EBA206AD32FA7BF5406FFC Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/h74JMJcJfERX_1qj5Yk8jBVDJhI.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/29/cc8f4a-4c02-404b-8d93-2cde65f3112a/1/h74JMJcJfERX_1qj5Yk8jBVDJhI.mft Manifest number: 139B Signing time: Mon 03 Nov 2025 21:00:36 +0000 Manifest this update: Mon 03 Nov 2025 21:00:36 +0000 Manifest next update: Tue 04 Nov 2025 21:00:36 +0000 Files and hashes: 1: 58EBygRjdS7517jE8ijFSPfVOH4.roa (hash: 7YP7WUOPsrK23qXejFg0a6c2K8s3GbzwWCeuhRLXrr4=) 2: 6gQb_YrXJIkOy1ffV5AywwaDFKA.roa (hash: YBUcx/W2YYWfTW+ZfLh5vpIiC6jkcxCKGBt0nojo2Ok=) 3: CjTW9-CUmuY1lxZ8OqndS2FXSrY.roa (hash: 9DQ0LnRbHYpMYq+dl7Z0Jfv0Jx2DrmotGXluT5sxbiI=) 4: UYD_ol6L79u8glgaI6wKUZit3aI.roa (hash: Gf9BtC+mpY9FQr0OFj9WV8BSFzyS8ChMq/mXIibBTC4=) 5: YxuPih3fAlXVoEE31gDs9iD2i1w.roa (hash: x8butTOJLg1TuADmdhNJfjqeOtty4tQbuYOKyeZNAJI=) 6: cgfWhp9nnNlIFwxwBmM9ufcXLT8.roa (hash: d9o/0tEnmxkRdMrExtvCAvZnhgV08vpjue2h9xSnd5M=) 7: h74JMJcJfERX_1qj5Yk8jBVDJhI.crl (hash: +kyC5JOcJCsUPj+Qyr8kQopBsVt5IGkUyTAiKiskMqk=) 8: jS9AN5oD9gr_onzGTzL8xf4_tCg.roa (hash: L5WRngdm8hXH1GtO9dblNyDW24uvtXBx7hO8Cv9i3R8=) 9: l73XbGk7c4j4MjyLCnCZ2AhSa5g.roa (hash: zN4KADzvP9RDaA1coLbTnlm7K8otMtISf3HRhyFdP4I=) 10: zDYhvUbelcRpqpslUbRSgUjh_fg.roa (hash: oMqhUHMRnzSTRY98vl61orkGgfrk9poSjKlRD++vvbQ=) Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/29/cc8f4a-4c02-404b-8d93-2cde65f3112a/1/h74JMJcJfERX_1qj5Yk8jBVDJhI.crl rsync://rpki.ripe.net/repository/DEFAULT/29/cc8f4a-4c02-404b-8d93-2cde65f3112a/1/h74JMJcJfERX_1qj5Yk8jBVDJhI.mft rsync://rpki.ripe.net/repository/DEFAULT/h74JMJcJfERX_1qj5Yk8jBVDJhI.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Tue 04 Nov 2025 20:30:03 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9a:4b:85:94:8c:83:eb:a2:06:ad:32:fa:7b:f5:40:6f:fc Signature Algorithm: sha256WithRSAEncryption Issuer: CN=87be093097097c4457ff5aa3e5893c8c15432612 Validity Not Before: Nov 3 21:00:36 2025 GMT Not After : Nov 4 21:00:36 2025 GMT Subject: CN=05ccb35b1274e437132a27ad142d5b142a20c602 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:d0:a8:26:43:e4:5d:b3:2e:84:8d:90:ce:88:f8: 0c:57:b6:ac:54:de:de:10:88:82:5a:79:7c:b8:11: e3:e9:14:1e:b1:ee:48:72:f8:46:47:ae:e4:41:ca: ea:5f:61:03:f9:72:bb:1b:6d:5e:03:29:64:12:da: c0:3e:1a:49:e6:5f:63:cf:9f:a5:a4:61:8c:65:f5: 6e:b6:e6:dd:cc:78:07:26:36:70:3e:39:c8:ec:c0: 6c:89:0f:b5:fb:4d:c9:4d:83:0c:2b:3b:37:28:d6: 1b:f5:d0:3a:34:39:d1:3a:02:72:20:30:b6:4f:20: b1:ed:b0:bc:ec:ac:f3:ed:86:64:41:97:4b:63:ce: 34:36:02:06:06:4d:76:28:9b:3e:b8:03:ca:f6:47: ca:de:08:0b:ae:c0:e7:12:6b:59:67:4e:d4:ab:13: c3:91:4e:77:f5:cf:5e:a1:72:b6:84:c0:f8:fd:b6: 39:62:78:7c:10:eb:14:98:1d:43:c0:b7:17:b5:67: da:f3:1b:74:b0:69:41:3a:e0:c2:de:f7:7c:61:27: 57:76:7c:8c:98:75:aa:47:bf:85:52:5b:59:70:1f: 66:0e:5c:d1:5d:06:e8:ea:82:1a:be:65:49:83:03: 52:07:7f:35:b3:74:17:a8:d4:bc:29:92:2d:ff:cb: 25:e1 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 05:CC:B3:5B:12:74:E4:37:13:2A:27:AD:14:2D:5B:14:2A:20:C6:02 X509v3 Authority Key Identifier: keyid:87:BE:09:30:97:09:7C:44:57:FF:5A:A3:E5:89:3C:8C:15:43:26:12 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/h74JMJcJfERX_1qj5Yk8jBVDJhI.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/29/cc8f4a-4c02-404b-8d93-2cde65f3112a/1/h74JMJcJfERX_1qj5Yk8jBVDJhI.mft X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/29/cc8f4a-4c02-404b-8d93-2cde65f3112a/1/h74JMJcJfERX_1qj5Yk8jBVDJhI.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 95:3c:95:58:e6:b8:64:f8:73:15:e9:cb:91:8e:c9:ca:91:c7: c3:64:b6:c0:be:ef:0b:3d:79:a9:38:44:47:02:b2:d0:3b:40: f7:34:62:42:d5:cb:6c:1d:5c:17:8c:ff:38:3f:81:8a:7c:c4: 6e:da:56:8c:f8:bd:21:b7:65:5b:7f:2b:1b:75:82:fc:74:1d: b9:48:93:d4:f2:81:1b:33:23:3d:0a:55:36:4d:88:ea:93:ce: 7e:56:4b:7e:9a:c4:8a:fe:ae:58:f0:e5:1e:1e:62:61:55:b9: d0:66:94:ff:cf:e2:03:d6:67:38:5b:d5:b7:30:78:39:e1:c5: 32:60:1c:c1:0d:31:24:56:50:17:d0:c0:2c:a8:04:ca:2f:4f: 1f:d5:10:91:2e:7a:dc:b3:bb:20:2f:18:2e:db:8d:69:81:3d: 55:84:0a:51:53:3b:19:34:15:de:97:11:77:b0:3c:87:bc:9f: 14:e6:aa:e4:8c:9c:46:aa:35:4b:a9:92:93:a4:8b:89:06:ac: c5:66:a7:d4:a6:4d:db:52:4b:42:84:16:b2:84:63:a7:2a:e1: 2e:1b:2e:33:1f:89:a5:55:32:72:88:dd:62:64:4d:57:79:6f: 4d:4e:7c:46:48:6d:fe:19:4a:95:b5:e4:2f:6d:fa:da:e2:8e: 8f:8e:17:c6 -----BEGIN CERTIFICATE----- MIIFFjCCA/6gAwIBAgISAZpLhZSMg+uiBq0y+nv1QG/8MA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKDg3YmUwOTMwOTcwOTdjNDQ1N2ZmNWFhM2U1ODkzYzhjMTU0 MzI2MTIwHhcNMjUxMTAzMjEwMDM2WhcNMjUxMTA0MjEwMDM2WjAzMTEwLwYDVQQD EygwNWNjYjM1YjEyNzRlNDM3MTMyYTI3YWQxNDJkNWIxNDJhMjBjNjAyMIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEA0KgmQ+Rdsy6EjZDOiPgMV7asVN7e EIiCWnl8uBHj6RQese5IcvhGR67kQcrqX2ED+XK7G21eAylkEtrAPhpJ5l9jz5+l pGGMZfVutubdzHgHJjZwPjnI7MBsiQ+1+03JTYMMKzs3KNYb9dA6NDnROgJyIDC2 TyCx7bC87Kzz7YZkQZdLY840NgIGBk12KJs+uAPK9kfK3ggLrsDnEmtZZ07UqxPD kU539c9eoXK2hMD4/bY5Ynh8EOsUmB1DwLcXtWfa8xt0sGlBOuDC3vd8YSdXdnyM mHWqR7+FUltZcB9mDlzRXQbo6oIavmVJgwNSB381s3QXqNS8KZIt/8sl4QIDAQAB o4ICIjCCAh4wHQYDVR0OBBYEFAXMs1sSdOQ3EyonrRQtWxQqIMYCMB8GA1UdIwQY MBaAFIe+CTCXCXxEV/9ao+WJPIwVQyYSMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvaDc0Sk1KY0pmRVJYXzFxajVZazhqQlZESmhJLmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC8yOS9jYzhmNGEtNGMwMi00MDRiLThkOTMt MmNkZTY1ZjMxMTJhLzEvaDc0Sk1KY0pmRVJYXzFxajVZazhqQlZESmhJLm1mdDCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC8yOS9jYzhmNGEtNGMwMi00MDRiLThkOTMtMmNkZTY1ZjMxMTJh LzEvaDc0Sk1KY0pmRVJYXzFxajVZazhqQlZESmhJLmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAlTyVWOa4 ZPhzFenLkY7JypHHw2S2wL7vCz15qThERwKy0DtA9zRiQtXLbB1cF4z/OD+BinzE btpWjPi9IbdlW38rG3WC/HQduUiT1PKBGzMjPQpVNk2I6pPOflZLfprEiv6uWPDl Hh5iYVW50GaU/8/iA9ZnOFvVtzB4OeHFMmAcwQ0xJFZQF9DALKgEyi9PH9UQkS56 3LO7IC8YLtuNaYE9VYQKUVM7GTQV3pcRd7A8h7yfFOaq5IycRqo1S6mSk6SLiQas xWan1KZN21JLQoQWsoRjpyrhLhsuMx+JpVUycojdYmRNV3lvTU58Rkht/hlKlbXk L2362uKOj44Xxg== -----END CERTIFICATE-----Generated at Tue Nov 4 05:47:42 2025 by rpki-client