$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/34/db1b48-1cc5-4833-93d9-b9464718ba37/1/c_IQ8SmaHgrucdwdeeX7EgktMKk.mft File: c_IQ8SmaHgrucdwdeeX7EgktMKk.mft (raw, json) Hash identifier: HRPxlYy6kbk4ioTQ0AFp7G4LuXFHGMupDrVxxdQqM0c= Subject key identifier: 3C:96:4E:11:8B:EE:07:F3:21:27:78:91:9F:19:81:C5:94:74:A2:15 Authority key identifier: 73:F2:10:F1:29:9A:1E:0A:EE:71:DC:1D:79:E5:FB:12:09:2D:30:A9 Certificate issuer: /CN=73f210f1299a1e0aee71dc1d79e5fb12092d30a9 Certificate serial: 019A0BCB033000DA37D52EADDFB53604FEC4 Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/c_IQ8SmaHgrucdwdeeX7EgktMKk.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/34/db1b48-1cc5-4833-93d9-b9464718ba37/1/c_IQ8SmaHgrucdwdeeX7EgktMKk.mft Manifest number: 1711 Signing time: Wed 22 Oct 2025 12:00:45 +0000 Manifest this update: Wed 22 Oct 2025 12:00:45 +0000 Manifest next update: Thu 23 Oct 2025 12:00:45 +0000 Files and hashes: 1: 7v-L1KuWY_QeDJxKFVyRkWnFePQ.roa (hash: bVQczQ08ozX20fYuXzWGYS1jimxc5e2Qx5nVzF/4kuk=) 2: H74wGZKnnU6XEP7nVKoqw4XaEjE.roa (hash: zhm555s3zw/KlbcjZuumbYd6+z6n6717Q/inEo++9C0=) 3: KFKPGq8CDIQff00UekrfFEmWWU4.roa (hash: pndCMKJbI0Ffrf6VYH3lHviYtYItndyotazCLP7aZyE=) 4: TLCOp8VQQYT-sDLZMkb_dNE0wJI.roa (hash: 8TF1RbnrjzrAYcRglOW5PIK7TmKRhUoFu7HvQr3ZHoA=) 5: XfGBei_fvFP0LcnT4xlGOunfSHY.roa (hash: ApG5cEMi+MNJR6ahm8kTy/uN64zS0fv0zRdzd/i6biA=) 6: ZLCgOlPZ-adZViTKhsMv3BABRVQ.roa (hash: y37YnkCGLdmrEa4m8cGkKpYMZJFVaIJVqpcOQKXrYQA=) 7: ZrwHnbp0cmRv-8Aq-3dTrUs96b8.roa (hash: laG521bBX3KOp9w13a5/N7g1SD2gsHS2KdTqelNAv1g=) 8: c_IQ8SmaHgrucdwdeeX7EgktMKk.crl (hash: s4u1uvtCJSWYA37z+SkF23Ua2O2vVwCLfiDPjcdmQlI=) 9: fUiU9NND6NDkXeCCtG2FpkvLAtQ.roa (hash: BipzZjfv9NJLde/5SLk/7HBxUjct/iO+maQqs2utFTw=) 10: mJUNw4dhsVDBnFTg7x4G5Co4xf0.roa (hash: uA/rqJShT3FbqgkbYlEQFRj/7911uoTUqkA+K2PLe1c=) 11: nT9Kl7qa4avyYi6PobndNFEx2JI.roa (hash: 4NhOocRVxQsq48Sjltw5zBhFh6NiUij1mxelAtmoUp0=) Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/34/db1b48-1cc5-4833-93d9-b9464718ba37/1/c_IQ8SmaHgrucdwdeeX7EgktMKk.crl rsync://rpki.ripe.net/repository/DEFAULT/34/db1b48-1cc5-4833-93d9-b9464718ba37/1/c_IQ8SmaHgrucdwdeeX7EgktMKk.mft rsync://rpki.ripe.net/repository/DEFAULT/c_IQ8SmaHgrucdwdeeX7EgktMKk.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Thu 23 Oct 2025 12:00:45 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9a:0b:cb:03:30:00:da:37:d5:2e:ad:df:b5:36:04:fe:c4 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=73f210f1299a1e0aee71dc1d79e5fb12092d30a9 Validity Not Before: Oct 22 12:00:45 2025 GMT Not After : Oct 23 12:00:45 2025 GMT Subject: CN=3c964e118bee07f3212778919f1981c59474a215 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:ba:e1:f0:30:ac:0c:c7:0e:4d:ce:00:0f:14:39: d9:df:ba:88:17:4d:f5:2b:10:3c:4e:09:c1:d8:b3: f4:51:66:e8:86:a9:05:a4:69:23:44:34:33:61:14: b5:51:55:75:bd:1c:13:dc:28:44:d0:d0:bb:6d:15: 20:5a:38:a1:24:bf:55:37:1f:62:b0:07:1c:70:73: 82:a4:ba:cf:c7:9b:46:32:b0:9b:9f:26:a1:60:96: fe:f2:20:38:69:69:92:13:5f:9e:fd:28:46:fb:3b: c8:0b:6d:69:69:f2:a6:8b:f4:73:fb:8e:70:04:39: 4d:87:25:bd:9d:5a:a8:b0:79:dc:39:9c:6a:c7:1a: a2:aa:53:5a:cd:54:0c:cd:f8:ef:b0:22:1e:99:b2: fa:43:12:e1:9e:13:f4:b8:13:ae:30:25:f5:52:1e: 67:59:72:24:65:2c:1a:4e:9c:c2:df:a5:bd:31:c6: c9:61:6a:d6:56:22:19:8d:d6:ef:ca:68:67:ec:9d: db:32:9e:b6:c6:fe:58:91:e1:ea:41:62:c7:7b:2e: d2:e1:65:58:44:93:7a:1c:2f:60:36:61:9c:81:77: 5b:1a:43:b6:8f:ad:a3:d9:a2:1c:ee:02:da:8c:5d: c0:6c:a3:c7:29:42:2b:96:f6:1d:81:81:55:b7:65: 77:db Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 3C:96:4E:11:8B:EE:07:F3:21:27:78:91:9F:19:81:C5:94:74:A2:15 X509v3 Authority Key Identifier: keyid:73:F2:10:F1:29:9A:1E:0A:EE:71:DC:1D:79:E5:FB:12:09:2D:30:A9 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/c_IQ8SmaHgrucdwdeeX7EgktMKk.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/34/db1b48-1cc5-4833-93d9-b9464718ba37/1/c_IQ8SmaHgrucdwdeeX7EgktMKk.mft X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/34/db1b48-1cc5-4833-93d9-b9464718ba37/1/c_IQ8SmaHgrucdwdeeX7EgktMKk.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 55:29:ce:d9:8d:24:a2:2b:f3:9a:01:09:8c:8d:4d:23:ce:03: cd:8b:d7:00:8a:aa:71:62:09:33:fb:9c:c0:90:10:a4:ff:ab: 9e:ad:07:9b:ff:75:45:ea:52:ae:41:a8:0e:a9:bf:f5:0f:6c: 19:f6:69:6d:3e:4e:c7:3b:73:b6:31:20:c9:af:3c:ef:19:1c: f6:5f:7c:d0:e9:d1:3c:1b:e4:37:d0:fe:35:7b:2a:d0:4a:90: cf:01:62:2a:a7:eb:68:f0:60:cc:31:79:24:43:5e:4d:3e:94: f9:4d:d0:0b:7e:d7:4e:96:30:1e:cc:ed:dd:e7:14:26:b3:8a: bc:19:b4:8b:66:12:f1:29:b3:06:90:5f:02:67:d1:1d:77:ae: dc:ae:ee:ee:32:fd:24:33:fa:98:72:cb:34:d5:7e:f7:67:4e: a9:ab:e9:d9:03:54:38:63:4e:14:b4:0f:79:ed:8c:3f:a6:6c: ac:01:30:a7:fa:1e:ec:8e:fc:8d:da:c3:85:5b:36:7b:17:b7: 35:87:eb:02:a4:c8:13:75:91:75:96:e0:47:4e:72:9f:e8:9d: d7:36:ad:5d:7a:43:44:a7:f8:b8:c4:d6:0f:1e:5f:ae:31:ce: a1:56:40:8c:ba:1a:c5:11:f6:9e:0c:a6:1f:c4:62:e5:e3:39: 01:47:55:ad -----BEGIN CERTIFICATE----- MIIFFjCCA/6gAwIBAgISAZoLywMwANo31S6t37U2BP7EMA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKDczZjIxMGYxMjk5YTFlMGFlZTcxZGMxZDc5ZTVmYjEyMDky ZDMwYTkwHhcNMjUxMDIyMTIwMDQ1WhcNMjUxMDIzMTIwMDQ1WjAzMTEwLwYDVQQD EygzYzk2NGUxMThiZWUwN2YzMjEyNzc4OTE5ZjE5ODFjNTk0NzRhMjE1MIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAuuHwMKwMxw5NzgAPFDnZ37qIF031 KxA8TgnB2LP0UWbohqkFpGkjRDQzYRS1UVV1vRwT3ChE0NC7bRUgWjihJL9VNx9i sAcccHOCpLrPx5tGMrCbnyahYJb+8iA4aWmSE1+e/ShG+zvIC21pafKmi/Rz+45w BDlNhyW9nVqosHncOZxqxxqiqlNazVQMzfjvsCIembL6QxLhnhP0uBOuMCX1Uh5n WXIkZSwaTpzC36W9McbJYWrWViIZjdbvymhn7J3bMp62xv5YkeHqQWLHey7S4WVY RJN6HC9gNmGcgXdbGkO2j62j2aIc7gLajF3AbKPHKUIrlvYdgYFVt2V32wIDAQAB o4ICIjCCAh4wHQYDVR0OBBYEFDyWThGL7gfzISd4kZ8ZgcWUdKIVMB8GA1UdIwQY MBaAFHPyEPEpmh4K7nHcHXnl+xIJLTCpMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvY19JUThTbWFIZ3J1Y2R3ZGVlWDdFZ2t0TUtrLmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC8zNC9kYjFiNDgtMWNjNS00ODMzLTkzZDkt Yjk0NjQ3MThiYTM3LzEvY19JUThTbWFIZ3J1Y2R3ZGVlWDdFZ2t0TUtrLm1mdDCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC8zNC9kYjFiNDgtMWNjNS00ODMzLTkzZDktYjk0NjQ3MThiYTM3 LzEvY19JUThTbWFIZ3J1Y2R3ZGVlWDdFZ2t0TUtrLmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAVSnO2Y0k oivzmgEJjI1NI84DzYvXAIqqcWIJM/ucwJAQpP+rnq0Hm/91RepSrkGoDqm/9Q9s GfZpbT5OxztztjEgya887xkc9l980OnRPBvkN9D+NXsq0EqQzwFiKqfraPBgzDF5 JENeTT6U+U3QC37XTpYwHszt3ecUJrOKvBm0i2YS8SmzBpBfAmfRHXeu3K7u7jL9 JDP6mHLLNNV+92dOqavp2QNUOGNOFLQPee2MP6ZsrAEwp/oe7I78jdrDhVs2exe3 NYfrAqTIE3WRdZbgR05yn+id1zatXXpDRKf4uMTWDx5frjHOoVZAjLoaxRH2ngym H8Ri5eM5AUdVrQ== -----END CERTIFICATE-----Generated at Wed Oct 22 17:41:28 2025 by rpki-client