$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/3a/7cecc7-f63d-43fc-b219-3955959eaf81/1/RY0S8JUFPDWHa4i0doXWQ1Qh_PI.mft File: RY0S8JUFPDWHa4i0doXWQ1Qh_PI.mft (raw, json) Hash identifier: 2wnQjFWC7VETuV95elg58WCukQmDQ3ou+mEqu/q70Ac= Subject key identifier: 76:D2:CC:F7:ED:47:16:D6:27:6D:6B:D2:C7:2A:A1:08:DF:6D:42:4C Authority key identifier: 45:8D:12:F0:95:05:3C:35:87:6B:88:B4:76:85:D6:43:54:21:FC:F2 Certificate issuer: /CN=458d12f095053c35876b88b47685d6435421fcf2 Certificate serial: 019A0E950D586C681EECD395A0EF99B87890 Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/RY0S8JUFPDWHa4i0doXWQ1Qh_PI.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/3a/7cecc7-f63d-43fc-b219-3955959eaf81/1/RY0S8JUFPDWHa4i0doXWQ1Qh_PI.mft Manifest number: 16F9 Signing time: Thu 23 Oct 2025 01:00:40 +0000 Manifest this update: Thu 23 Oct 2025 01:00:40 +0000 Manifest next update: Fri 24 Oct 2025 01:00:40 +0000 Files and hashes: 1: 0bSG1GbQSr3JP2M9BW2A6zWEmWQ.roa (hash: m8/KEzPrRo4PqG3DFfILeyvmSqlK6Zrphut5P8ccG8c=) 2: 9lwL98-HDVBrZzYLRCpSdOAFXpo.roa (hash: Za/9eX9VNb3FiSxJk6MAE/CpFGWxRO5mjghE1elRivc=) 3: B0iUIhkwv2ZZdyXRyu9yUh7Z61o.roa (hash: F6O6OkDRyyyGqFimHsLztSYsh0AUNFPNkRW3jSPwvEw=) 4: I1EoUAseUd3MHO-sI_txqICBiwc.roa (hash: khM+HdjIw9WozXCqEk/wtCOtMrpNfxWXErjSXn8BT5M=) 5: KQ7nGqqdl8DwDw35UdDbOJPZhfY.roa (hash: 8pIf1gsysAeCO62ayw5k2bU+b1g8t0mrR6+zNCtTibQ=) 6: LS_oKjOyENRZwn9y786G7x_fDEc.roa (hash: qwrjawF9Z67WE+ivjm8mPIl3xqaLReHxca9+SNnwKPE=) 7: Pvub5ztTS47f0XG6tBZE9ngX8Rw.roa (hash: euQ5dqT6xwCfoTsPu9P7kfQ9UGdbPzkkEJWSyFwCBTw=) 8: RY0S8JUFPDWHa4i0doXWQ1Qh_PI.crl (hash: GEIkE02i/DehPYq3jXoN/RFMcaJXDb/bqXlfblvOEpY=) 9: lqxGizsVmZbvi7xpd3yzs2I4ILw.roa (hash: aTi4SECMvkjegR9/FyzL9HTmeGkM0AsiVgyipWCsYrY=) 10: sFnlwbiQ75y8_114DKwn3kP_iWc.roa (hash: dkHr9wKemXLLSQfaJK2+kCvWwELtA6u+nMBynz2rXgQ=) Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/3a/7cecc7-f63d-43fc-b219-3955959eaf81/1/RY0S8JUFPDWHa4i0doXWQ1Qh_PI.crl rsync://rpki.ripe.net/repository/DEFAULT/3a/7cecc7-f63d-43fc-b219-3955959eaf81/1/RY0S8JUFPDWHa4i0doXWQ1Qh_PI.mft rsync://rpki.ripe.net/repository/DEFAULT/RY0S8JUFPDWHa4i0doXWQ1Qh_PI.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Thu 23 Oct 2025 22:00:03 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9a:0e:95:0d:58:6c:68:1e:ec:d3:95:a0:ef:99:b8:78:90 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=458d12f095053c35876b88b47685d6435421fcf2 Validity Not Before: Oct 23 01:00:40 2025 GMT Not After : Oct 24 01:00:40 2025 GMT Subject: CN=76d2ccf7ed4716d6276d6bd2c72aa108df6d424c Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:b0:95:36:01:38:32:9d:d4:c4:80:db:02:34:4a: 36:84:e4:48:db:dd:98:2d:82:25:66:43:83:86:78: 88:80:f6:04:97:a2:eb:f6:36:79:b7:18:92:2c:1e: e0:02:84:c7:05:02:c2:28:e5:b1:10:28:86:be:8a: a4:ae:9d:3f:83:2e:e1:0a:14:15:27:e8:b7:c3:58: 09:9f:31:23:88:ef:13:28:a9:1a:02:18:6c:63:c9: 7b:53:cc:c0:e0:cd:8f:47:c7:44:16:61:ff:bd:cd: cd:47:04:c2:0d:bd:80:39:b2:ba:04:a7:88:89:df: c3:23:af:3c:73:e8:e3:ec:de:51:9e:0b:ac:81:04: 13:e2:00:0e:7d:0a:f8:7d:8f:09:89:ef:02:dd:18: 30:48:9c:0d:45:0a:f0:17:9d:4f:fc:c7:03:eb:e2: 98:fc:54:b8:55:0f:68:d6:7b:ca:2b:b3:2b:fe:95: 30:95:1f:17:24:d1:ce:6a:98:af:72:50:50:94:bb: 73:a1:f1:c2:cf:87:84:2d:30:67:3b:a4:c6:64:d0: 81:f4:39:6b:ab:ab:90:16:8b:1a:f5:6c:5c:47:8b: fe:80:bf:86:43:48:13:ae:93:56:b6:d6:b1:b8:41: 6c:25:35:98:93:b4:a9:be:ae:9b:e0:ab:9c:4e:e0: d7:af Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 76:D2:CC:F7:ED:47:16:D6:27:6D:6B:D2:C7:2A:A1:08:DF:6D:42:4C X509v3 Authority Key Identifier: keyid:45:8D:12:F0:95:05:3C:35:87:6B:88:B4:76:85:D6:43:54:21:FC:F2 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/RY0S8JUFPDWHa4i0doXWQ1Qh_PI.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/3a/7cecc7-f63d-43fc-b219-3955959eaf81/1/RY0S8JUFPDWHa4i0doXWQ1Qh_PI.mft X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/3a/7cecc7-f63d-43fc-b219-3955959eaf81/1/RY0S8JUFPDWHa4i0doXWQ1Qh_PI.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 0f:94:28:78:05:71:eb:fe:ea:f4:fc:68:25:a0:9a:62:c8:45: 42:e8:14:49:2a:d7:7b:12:2f:e8:58:00:f0:c6:a0:c4:ca:56: 49:7d:52:3c:5a:c8:3a:13:c1:d0:7d:1b:9c:af:e5:67:8b:3f: 1f:6a:90:84:43:c4:e5:3a:0f:bf:d2:9e:ea:61:2d:cb:06:f6: fa:8c:41:26:4d:6f:5c:3b:a4:92:dd:3d:c3:22:f6:e2:f0:0d: 1f:64:7d:28:8a:88:33:76:9b:71:c8:28:33:3b:dd:70:07:ac: b0:70:64:25:94:7c:5f:7a:5d:86:83:d6:aa:ba:24:d0:e0:c9: 39:99:10:c5:60:04:fe:1a:43:a4:10:fe:9d:1a:b5:43:30:43: 9b:9b:d4:33:b3:e9:47:71:88:c3:79:87:ac:ac:0f:20:16:18: 43:98:23:92:a7:70:aa:a0:13:df:49:ec:be:2b:38:52:93:4f: 43:44:fb:b5:52:f8:1f:88:df:87:4a:0b:03:b3:b5:00:74:d8: 90:69:0a:b3:d3:59:61:47:3c:2a:62:bc:08:0d:45:ab:f0:8c: d3:5e:cc:a0:7d:27:26:07:1d:e7:ed:20:38:ab:26:d1:a6:8f: 6a:44:13:2b:6b:6b:45:7a:f8:a3:f1:ff:4a:b2:d0:82:67:f5: ea:8c:df:79 -----BEGIN CERTIFICATE----- MIIFFjCCA/6gAwIBAgISAZoOlQ1YbGge7NOVoO+ZuHiQMA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKDQ1OGQxMmYwOTUwNTNjMzU4NzZiODhiNDc2ODVkNjQzNTQy MWZjZjIwHhcNMjUxMDIzMDEwMDQwWhcNMjUxMDI0MDEwMDQwWjAzMTEwLwYDVQQD Eyg3NmQyY2NmN2VkNDcxNmQ2Mjc2ZDZiZDJjNzJhYTEwOGRmNmQ0MjRjMIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAsJU2ATgyndTEgNsCNEo2hORI292Y LYIlZkODhniIgPYEl6Lr9jZ5txiSLB7gAoTHBQLCKOWxECiGvoqkrp0/gy7hChQV J+i3w1gJnzEjiO8TKKkaAhhsY8l7U8zA4M2PR8dEFmH/vc3NRwTCDb2AObK6BKeI id/DI688c+jj7N5RngusgQQT4gAOfQr4fY8Jie8C3RgwSJwNRQrwF51P/McD6+KY /FS4VQ9o1nvKK7Mr/pUwlR8XJNHOapivclBQlLtzofHCz4eELTBnO6TGZNCB9Dlr q6uQFosa9WxcR4v+gL+GQ0gTrpNWttaxuEFsJTWYk7Spvq6b4KucTuDXrwIDAQAB o4ICIjCCAh4wHQYDVR0OBBYEFHbSzPftRxbWJ21r0scqoQjfbUJMMB8GA1UdIwQY MBaAFEWNEvCVBTw1h2uItHaF1kNUIfzyMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvUlkwUzhKVUZQRFdIYTRpMGRvWFdRMVFoX1BJLmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC8zYS83Y2VjYzctZjYzZC00M2ZjLWIyMTkt Mzk1NTk1OWVhZjgxLzEvUlkwUzhKVUZQRFdIYTRpMGRvWFdRMVFoX1BJLm1mdDCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC8zYS83Y2VjYzctZjYzZC00M2ZjLWIyMTktMzk1NTk1OWVhZjgx LzEvUlkwUzhKVUZQRFdIYTRpMGRvWFdRMVFoX1BJLmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAD5QoeAVx 6/7q9PxoJaCaYshFQugUSSrXexIv6FgA8MagxMpWSX1SPFrIOhPB0H0bnK/lZ4s/ H2qQhEPE5ToPv9Ke6mEtywb2+oxBJk1vXDukkt09wyL24vANH2R9KIqIM3abccgo MzvdcAessHBkJZR8X3pdhoPWqrok0ODJOZkQxWAE/hpDpBD+nRq1QzBDm5vUM7Pp R3GIw3mHrKwPIBYYQ5gjkqdwqqAT30nsvis4UpNPQ0T7tVL4H4jfh0oLA7O1AHTY kGkKs9NZYUc8KmK8CA1Fq/CM017MoH0nJgcd5+0gOKsm0aaPakQTK2trRXr4o/H/ SrLQgmf16ozfeQ== -----END CERTIFICATE-----Generated at Thu Oct 23 02:45:48 2025 by rpki-client