$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/32/153788-14b7-4551-9ade-6aea9057c800/1/rrZuxejyQF9vjUhuc_uCuN4N7g8.mft File: rrZuxejyQF9vjUhuc_uCuN4N7g8.mft (raw, json) Hash identifier: dvKtBVwI9L6sg4w3gcKR1AQ5KY/iLpvAm9MWHWtTVyw= Subject key identifier: 93:3E:C8:9C:8C:87:B4:6C:EC:6B:F0:52:4A:A8:B1:A0:8C:8A:60:D2 Authority key identifier: AE:B6:6E:C5:E8:F2:40:5F:6F:8D:48:6E:73:FB:82:B8:DE:0D:EE:0F Certificate issuer: /CN=aeb66ec5e8f2405f6f8d486e73fb82b8de0dee0f Certificate serial: 019A5D5571A3189066695F70CD3C1C9CB223 Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/rrZuxejyQF9vjUhuc_uCuN4N7g8.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/32/153788-14b7-4551-9ade-6aea9057c800/1/rrZuxejyQF9vjUhuc_uCuN4N7g8.mft Manifest number: 1718 Signing time: Fri 07 Nov 2025 08:01:11 +0000 Manifest this update: Fri 07 Nov 2025 08:01:11 +0000 Manifest next update: Sat 08 Nov 2025 08:01:11 +0000 Files and hashes: 1: 0xAeo2a2iLttbU-9qLwxhP3W5ss.roa (hash: KCgM9KWWYMbjy0SQJWIlI1gevbRgwTSQjmHIQMhZOFo=) 2: 1GGtyTPgPlDy6MPQ5o0gS_2Q9UM.roa (hash: gOi5uzaamNISRfWC/jzX0CQnB58FX9BTQozvqpu683k=) 3: 1VO0RuZDCw_d3nrvSLXPJBFpELM.roa (hash: RVMlSLh90fckV0ULVrxGXrllRUKBMW1qpE2aUDAMp18=) 4: MHaB6YDK7hMFt-_1LMKEcRnolXY.roa (hash: HMU04XiVIqiavwZxk6eCzMS/VCWuh3NjcyT+luDuzS0=) 5: XFEEccbEsmiETxVTXsuQHob0Ig8.roa (hash: gNVdhv6luqDbEY/yZdldKTkFqgtu7cFYTeubRvuYlMs=) 6: XYvBe2DkMF52qzkhOJvtRBiIQio.roa (hash: vc4GpSOFPSWnmLVNnXKMqCyW7C32uripWcLl8WvCvmE=) 7: cgoioMwhBMFnR_o18uz7lh61zXU.roa (hash: muq8Pq9FVp8y13ZY1OD1P/qR19HpxP198AkqSx2L6EM=) 8: rrZuxejyQF9vjUhuc_uCuN4N7g8.crl (hash: jSZr5YIXGJ8WjqfhIvz4b44BvxNsOP95Zwyh5PcaCqs=) 9: s1oFGEPvL8IMjYASLXkMEl3bONc.roa (hash: ID8ZOvyObfK0KrvTgF7I419RUO3QA/UAdGzXegtjwU0=) 10: upooLs-mDkOyiBT2fNGHj5cQ7E4.roa (hash: cglav+FWNX7UNTqPwwJsYgYuI7r/rTbr7vfv4F0chKo=) 11: vVMu6Hcqt_WNniCkUUd49xRBXDg.roa (hash: PFqhmo3voRuIoBNZ1c/3YzTjWO4jWVlUC05kdiWQzXU=) 12: vzw_vkrK3T6hMf3CfVO_XMRDNQY.roa (hash: TyRzYsx0I5A5DgLqk0b56yUe558XEXu6adROBLfEbBY=) Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/32/153788-14b7-4551-9ade-6aea9057c800/1/rrZuxejyQF9vjUhuc_uCuN4N7g8.crl rsync://rpki.ripe.net/repository/DEFAULT/32/153788-14b7-4551-9ade-6aea9057c800/1/rrZuxejyQF9vjUhuc_uCuN4N7g8.mft rsync://rpki.ripe.net/repository/DEFAULT/rrZuxejyQF9vjUhuc_uCuN4N7g8.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Sat 08 Nov 2025 08:00:37 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9a:5d:55:71:a3:18:90:66:69:5f:70:cd:3c:1c:9c:b2:23 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=aeb66ec5e8f2405f6f8d486e73fb82b8de0dee0f Validity Not Before: Nov 7 08:01:11 2025 GMT Not After : Nov 8 08:01:11 2025 GMT Subject: CN=933ec89c8c87b46cec6bf0524aa8b1a08c8a60d2 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:b3:66:d2:69:ff:65:40:da:ff:52:68:10:01:c2: 57:16:4c:90:26:3c:2d:cc:52:30:9e:07:71:32:cd: 88:ad:c0:45:79:eb:00:a4:43:60:db:b7:95:11:c6: ad:c7:80:e8:9a:f2:e5:9f:53:b2:4e:e0:2d:a1:f9: e8:4d:30:f6:8e:14:97:31:b3:23:29:8a:ad:9e:6d: 73:13:9b:2f:8d:c0:f7:a1:68:74:c2:88:ab:7b:bc: 17:5f:c9:63:8b:05:08:b8:52:dc:46:df:73:22:e4: 4d:90:a5:3e:a0:3c:76:88:08:c8:5c:a2:e1:c7:37: ef:2e:dd:42:09:36:53:d8:23:cf:35:c5:bb:02:71: c2:79:72:a3:ac:2a:f2:70:d5:aa:65:02:14:bb:ae: e4:b7:0b:1b:7e:54:cc:22:6c:31:99:78:09:df:83: a5:21:8e:63:01:23:63:33:4e:3b:a7:b0:54:25:cd: 87:8c:fb:0a:b8:30:1a:98:9b:4c:c8:c6:da:ff:77: ae:23:3c:41:fa:71:e1:39:ce:c2:2a:e3:f3:3f:dc: 64:6a:88:d2:e3:dd:23:69:10:a1:d3:71:2c:38:d0: f2:ed:28:77:3c:c5:bc:bc:0a:2e:b9:5a:37:28:e0: 5b:6d:b9:56:fc:e2:52:49:bf:a2:8d:76:7b:27:2c: 85:c9 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 93:3E:C8:9C:8C:87:B4:6C:EC:6B:F0:52:4A:A8:B1:A0:8C:8A:60:D2 X509v3 Authority Key Identifier: keyid:AE:B6:6E:C5:E8:F2:40:5F:6F:8D:48:6E:73:FB:82:B8:DE:0D:EE:0F X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/rrZuxejyQF9vjUhuc_uCuN4N7g8.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/32/153788-14b7-4551-9ade-6aea9057c800/1/rrZuxejyQF9vjUhuc_uCuN4N7g8.mft X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/32/153788-14b7-4551-9ade-6aea9057c800/1/rrZuxejyQF9vjUhuc_uCuN4N7g8.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 33:41:69:bc:ea:67:72:37:6b:e2:68:e7:32:2e:4b:3c:d9:0e: 44:26:34:ba:af:1c:7f:0e:cc:ff:e5:c6:6c:ab:6b:9c:a1:37: 91:7e:06:e9:ba:f3:dc:e7:0b:f3:80:f9:68:5f:07:f8:c0:15: d1:9d:63:bf:df:01:59:d6:b8:a4:f7:ae:e6:73:77:d7:7e:e9: f9:6f:aa:75:fd:fb:14:89:6e:02:ae:ef:64:a7:3e:3d:af:59: 08:18:d6:05:e2:f0:34:74:63:45:db:d9:d7:2e:90:cd:9a:c6: e8:6d:94:d2:ca:ef:99:49:98:ff:e4:09:05:c9:dc:fa:50:44: dd:06:bd:d4:49:c2:18:17:0b:95:ad:93:e8:63:d4:81:f2:9a: 67:e8:8b:75:6d:0a:fd:0e:3b:15:3a:09:91:be:85:f5:b9:6b: be:f8:7c:8e:c5:f0:3c:8a:04:37:d5:16:ac:35:26:3a:27:3f: d3:8b:ad:13:5d:c5:d6:6d:3a:e2:69:36:2c:1e:c9:4d:8e:0a: 41:23:53:74:cc:63:b0:fe:07:00:10:21:66:44:07:ea:55:ba: ee:04:25:9e:ed:05:41:3e:7d:81:ae:c9:ae:6a:6f:5b:a4:24: 3b:53:4e:03:8c:89:d7:09:a0:5f:eb:5b:70:f0:55:03:b2:02: e2:45:a3:5b -----BEGIN CERTIFICATE----- MIIFFjCCA/6gAwIBAgISAZpdVXGjGJBmaV9wzTwcnLIjMA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKGFlYjY2ZWM1ZThmMjQwNWY2ZjhkNDg2ZTczZmI4MmI4ZGUw ZGVlMGYwHhcNMjUxMTA3MDgwMTExWhcNMjUxMTA4MDgwMTExWjAzMTEwLwYDVQQD Eyg5MzNlYzg5YzhjODdiNDZjZWM2YmYwNTI0YWE4YjFhMDhjOGE2MGQyMIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAs2bSaf9lQNr/UmgQAcJXFkyQJjwt zFIwngdxMs2IrcBFeesApENg27eVEcatx4DomvLln1OyTuAtofnoTTD2jhSXMbMj KYqtnm1zE5svjcD3oWh0woire7wXX8ljiwUIuFLcRt9zIuRNkKU+oDx2iAjIXKLh xzfvLt1CCTZT2CPPNcW7AnHCeXKjrCrycNWqZQIUu67ktwsbflTMImwxmXgJ34Ol IY5jASNjM047p7BUJc2HjPsKuDAamJtMyMba/3euIzxB+nHhOc7CKuPzP9xkaojS 490jaRCh03EsONDy7Sh3PMW8vAouuVo3KOBbbblW/OJSSb+ijXZ7JyyFyQIDAQAB o4ICIjCCAh4wHQYDVR0OBBYEFJM+yJyMh7Rs7GvwUkqosaCMimDSMB8GA1UdIwQY MBaAFK62bsXo8kBfb41IbnP7grjeDe4PMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvcnJadXhlanlRRjl2alVodWNfdUN1TjRON2c4LmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC8zMi8xNTM3ODgtMTRiNy00NTUxLTlhZGUt NmFlYTkwNTdjODAwLzEvcnJadXhlanlRRjl2alVodWNfdUN1TjRON2c4Lm1mdDCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC8zMi8xNTM3ODgtMTRiNy00NTUxLTlhZGUtNmFlYTkwNTdjODAw LzEvcnJadXhlanlRRjl2alVodWNfdUN1TjRON2c4LmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAM0FpvOpn cjdr4mjnMi5LPNkORCY0uq8cfw7M/+XGbKtrnKE3kX4G6brz3OcL84D5aF8H+MAV 0Z1jv98BWda4pPeu5nN3137p+W+qdf37FIluAq7vZKc+Pa9ZCBjWBeLwNHRjRdvZ 1y6QzZrG6G2U0srvmUmY/+QJBcnc+lBE3Qa91EnCGBcLla2T6GPUgfKaZ+iLdW0K /Q47FToJkb6F9blrvvh8jsXwPIoEN9UWrDUmOic/04utE13F1m064mk2LB7JTY4K QSNTdMxjsP4HABAhZkQH6lW67gQlnu0FQT59ga7JrmpvW6QkO1NOA4yJ1wmgX+tb cPBVA7IC4kWjWw== -----END CERTIFICATE-----Generated at Fri Nov 7 16:57:17 2025 by rpki-client