$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/30/c22dc9-c7ba-4156-a79c-15e90bf87fab/1/4N7hsGuiSmdiE_l2pLUMEp3LK3M.mft File: 4N7hsGuiSmdiE_l2pLUMEp3LK3M.mft (raw, json) Hash identifier: taCBFmDcXuqqevg2XfhubJ33nCd3YcSPKNcdQZLgbPs= Subject key identifier: B4:98:10:C9:A2:14:26:E5:2A:5C:46:42:FA:40:84:BA:07:E5:AF:B3 Authority key identifier: E0:DE:E1:B0:6B:A2:4A:67:62:13:F9:76:A4:B5:0C:12:9D:CB:2B:73 Certificate issuer: /CN=e0dee1b06ba24a676213f976a4b50c129dcb2b73 Certificate serial: 019A24E629955DCE3CC2ED25F85818996E57 Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/4N7hsGuiSmdiE_l2pLUMEp3LK3M.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/30/c22dc9-c7ba-4156-a79c-15e90bf87fab/1/4N7hsGuiSmdiE_l2pLUMEp3LK3M.mft Manifest number: 1727 Signing time: Mon 27 Oct 2025 09:00:54 +0000 Manifest this update: Mon 27 Oct 2025 09:00:54 +0000 Manifest next update: Tue 28 Oct 2025 09:00:54 +0000 Files and hashes: 1: 1-KQ3lCQc8t0kQtkE6-_iQqUbP9Q.roa (hash: gNrv97avvDkank7EdDvcD5kAcTLpL7MBGtGaNujTfjw=) 2: 1-ZowhWdJlnO1J6ckMiCzFpO4NqA.roa (hash: YFDJetm10wMx3y43nkOzbjWKZjU+niDmUY27/YG6EhM=) 3: 34IsY0jO75pV7BAMdtZC6Y7R63Q.roa (hash: iHXM2CyDHwFZsOpk2M0YYfJaVLusv8i1hjOCk9r9pn0=) 4: 4N7hsGuiSmdiE_l2pLUMEp3LK3M.crl (hash: wMC4709PmQ5u1cW4fdBfOZ+F02g4Xj+k/uuU0RbLsAA=) 5: P54Qz9AI09JDOlqysqt799AeQRI.roa (hash: nIDEtW0TBUZxo5dIDtHdP7iLVF2Wse6E2BuTqfPasv8=) 6: Y4y_3m4POfZlVUhwqm0uVd4P9vQ.roa (hash: dZrOM2p3noTvf6KyFY1PrTf2FDGKF1aorRCqRis2DzA=) 7: _dP89dJHE-YZKAUIAMAKH5hCybo.roa (hash: RwLTyGyMw54nCLsLFUIuCCv0sJSfUYZ8s2qq98bQOs0=) 8: eAV-d8BbWJ1sJQuFdRvhLNIzJUA.roa (hash: T3JT9dws49hGRBqX3Lqw/F5GMKuYnFZbEjUfdpuIhGs=) 9: erLKl2-7SPNGcOtJ86A0RSv3cdw.roa (hash: 1hNGg1BiH4BJWJitgxTwu0nBQpz2c5fg0q3Qy8a1iuo=) 10: paVOpGcb1H0GxwnvFjCm56xxVdc.roa (hash: 9QOqOZ/+HYoyFH3uyR9vue8YKnF7n4M307q1TSOtzck=) 11: r2_uEzNLhBHjD8nrsm_28O-I61I.roa (hash: MQGSyx9ipk0r/WYHwP9ZlzljWRWQN1rdWtX2fCTKqeI=) Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/30/c22dc9-c7ba-4156-a79c-15e90bf87fab/1/4N7hsGuiSmdiE_l2pLUMEp3LK3M.crl rsync://rpki.ripe.net/repository/DEFAULT/30/c22dc9-c7ba-4156-a79c-15e90bf87fab/1/4N7hsGuiSmdiE_l2pLUMEp3LK3M.mft rsync://rpki.ripe.net/repository/DEFAULT/4N7hsGuiSmdiE_l2pLUMEp3LK3M.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Tue 28 Oct 2025 08:00:02 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9a:24:e6:29:95:5d:ce:3c:c2:ed:25:f8:58:18:99:6e:57 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=e0dee1b06ba24a676213f976a4b50c129dcb2b73 Validity Not Before: Oct 27 09:00:54 2025 GMT Not After : Oct 28 09:00:54 2025 GMT Subject: CN=b49810c9a21426e52a5c4642fa4084ba07e5afb3 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:b4:f9:dd:ba:d1:b7:07:1b:11:41:c4:a7:49:bc: 8b:45:80:18:90:9d:0c:91:af:83:df:09:df:6e:96: 38:7a:e9:56:3e:76:a4:0d:08:f4:51:7b:6a:ca:c9: 39:05:48:f2:f5:08:d4:c5:06:22:e7:8e:97:a0:6b: 0c:8e:99:3f:41:31:eb:09:7f:ef:dd:cf:80:85:d6: af:09:75:fe:a4:1c:7b:32:05:ff:70:25:99:ff:5b: 3e:0a:09:5e:a9:8e:40:0a:ef:40:9c:ba:18:74:af: 3a:e5:0b:52:cb:85:24:b9:fb:fb:77:de:e8:15:8d: c5:2c:a5:ab:cb:12:eb:30:b9:7f:a8:1e:51:16:3e: 0b:bc:d7:5b:95:86:e6:7a:14:80:27:f2:c4:8e:20: 14:57:d1:56:b5:1a:68:de:3a:e4:cd:37:75:91:94: df:ce:b0:15:1b:05:10:60:4d:86:c7:27:7c:41:7a: f1:ab:c5:31:ff:5d:f7:08:a0:38:da:d1:06:02:98: d2:a4:fe:57:af:30:c8:29:0d:7e:87:b3:5e:b8:3d: 2a:cd:b0:94:f9:f7:66:10:87:d5:b3:b1:3a:21:24: 7a:ce:84:d4:51:65:d7:ce:3a:c8:50:20:e2:04:4e: ed:0a:cb:1c:1e:02:a6:c9:89:b4:67:bb:9e:8c:eb: 7f:c3 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: B4:98:10:C9:A2:14:26:E5:2A:5C:46:42:FA:40:84:BA:07:E5:AF:B3 X509v3 Authority Key Identifier: keyid:E0:DE:E1:B0:6B:A2:4A:67:62:13:F9:76:A4:B5:0C:12:9D:CB:2B:73 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/4N7hsGuiSmdiE_l2pLUMEp3LK3M.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/30/c22dc9-c7ba-4156-a79c-15e90bf87fab/1/4N7hsGuiSmdiE_l2pLUMEp3LK3M.mft X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/30/c22dc9-c7ba-4156-a79c-15e90bf87fab/1/4N7hsGuiSmdiE_l2pLUMEp3LK3M.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 30:8c:42:97:8a:ee:3e:48:eb:ea:06:92:00:7b:3d:9c:14:62: c9:59:6c:d9:3a:99:ad:3f:94:e4:5b:87:b5:44:3b:4b:18:cd: e0:e0:1b:c7:93:eb:f9:0b:b5:47:2a:6d:38:d2:20:b4:90:98: 32:c7:5a:fa:70:37:7d:00:75:a6:08:d0:b8:90:80:20:54:40: 43:2f:17:e1:46:fb:36:63:93:00:78:c1:1a:6a:99:ac:40:c6: aa:e5:9e:02:ce:aa:3d:32:59:65:8b:aa:e6:f4:10:7a:55:af: 55:31:24:50:f3:bb:77:d3:1d:76:be:49:0f:ce:38:b9:00:6b: a5:fc:d8:c0:75:d6:e6:3e:3d:a7:cd:20:49:5b:b1:46:e1:15: 86:d8:da:b7:40:74:76:c4:4c:e4:ff:1a:26:ad:8c:44:bf:d8: 75:f1:33:81:75:9a:7f:30:26:56:31:db:64:1e:68:62:8e:b8: d4:b7:05:a1:8d:6d:ac:4f:a2:50:46:a4:81:4b:19:8d:5e:a9: 95:bc:41:7f:e1:cd:df:86:c4:fb:0e:91:0c:3a:bf:47:7f:b7: 9c:1d:de:b7:86:ed:ce:a0:4a:a3:c4:c7:b3:87:89:df:12:ff: 80:ca:1e:12:52:08:c3:3e:86:f5:60:3c:b9:6c:d4:cc:aa:71: 56:3e:44:c9 -----BEGIN CERTIFICATE----- MIIFFjCCA/6gAwIBAgISAZok5imVXc48wu0l+FgYmW5XMA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKGUwZGVlMWIwNmJhMjRhNjc2MjEzZjk3NmE0YjUwYzEyOWRj YjJiNzMwHhcNMjUxMDI3MDkwMDU0WhcNMjUxMDI4MDkwMDU0WjAzMTEwLwYDVQQD EyhiNDk4MTBjOWEyMTQyNmU1MmE1YzQ2NDJmYTQwODRiYTA3ZTVhZmIzMIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAtPndutG3BxsRQcSnSbyLRYAYkJ0M ka+D3wnfbpY4eulWPnakDQj0UXtqysk5BUjy9QjUxQYi546XoGsMjpk/QTHrCX/v 3c+AhdavCXX+pBx7MgX/cCWZ/1s+CgleqY5ACu9AnLoYdK865QtSy4Ukufv7d97o FY3FLKWryxLrMLl/qB5RFj4LvNdblYbmehSAJ/LEjiAUV9FWtRpo3jrkzTd1kZTf zrAVGwUQYE2Gxyd8QXrxq8Ux/133CKA42tEGApjSpP5XrzDIKQ1+h7NeuD0qzbCU +fdmEIfVs7E6ISR6zoTUUWXXzjrIUCDiBE7tCsscHgKmyYm0Z7uejOt/wwIDAQAB o4ICIjCCAh4wHQYDVR0OBBYEFLSYEMmiFCblKlxGQvpAhLoH5a+zMB8GA1UdIwQY MBaAFODe4bBrokpnYhP5dqS1DBKdyytzMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvNE43aHNHdWlTbWRpRV9sMnBMVU1FcDNMSzNNLmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC8zMC9jMjJkYzktYzdiYS00MTU2LWE3OWMt MTVlOTBiZjg3ZmFiLzEvNE43aHNHdWlTbWRpRV9sMnBMVU1FcDNMSzNNLm1mdDCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC8zMC9jMjJkYzktYzdiYS00MTU2LWE3OWMtMTVlOTBiZjg3ZmFi LzEvNE43aHNHdWlTbWRpRV9sMnBMVU1FcDNMSzNNLmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAMIxCl4ru Pkjr6gaSAHs9nBRiyVls2TqZrT+U5FuHtUQ7SxjN4OAbx5Pr+Qu1RyptONIgtJCY Msda+nA3fQB1pgjQuJCAIFRAQy8X4Ub7NmOTAHjBGmqZrEDGquWeAs6qPTJZZYuq 5vQQelWvVTEkUPO7d9Mddr5JD844uQBrpfzYwHXW5j49p80gSVuxRuEVhtjat0B0 dsRM5P8aJq2MRL/YdfEzgXWafzAmVjHbZB5oYo641LcFoY1trE+iUEakgUsZjV6p lbxBf+HN34bE+w6RDDq/R3+3nB3et4btzqBKo8THs4eJ3xL/gMoeElIIwz6G9WA8 uWzUzKpxVj5EyQ== -----END CERTIFICATE-----Generated at Mon Oct 27 12:24:02 2025 by rpki-client