$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/3a/abe134-0093-4652-9057-4f4c9b343e90/1/0d4STg-K2059lXbOrjJfZo3SJLE.mft File: 0d4STg-K2059lXbOrjJfZo3SJLE.mft (raw, json) Hash identifier: ZGudOZw9pB91vNsunMceB7au3vdOfdnYRJv5VbXofiM= Subject key identifier: 6A:F0:EC:0A:7F:63:6C:F9:81:3A:72:88:81:5D:13:F5:D2:8D:9F:7C Authority key identifier: D1:DE:12:4E:0F:8A:DB:4E:7D:95:76:CE:AE:32:5F:66:8D:D2:24:B1 Certificate issuer: /CN=d1de124e0f8adb4e7d9576ceae325f668dd224b1 Certificate serial: 019A89894B4A7250816769CBD6028F754D19 Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/0d4STg-K2059lXbOrjJfZo3SJLE.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/3a/abe134-0093-4652-9057-4f4c9b343e90/1/0d4STg-K2059lXbOrjJfZo3SJLE.mft Manifest number: 124E Signing time: Sat 15 Nov 2025 22:01:07 +0000 Manifest this update: Sat 15 Nov 2025 22:01:07 +0000 Manifest next update: Sun 16 Nov 2025 22:01:07 +0000 Files and hashes: 1: 0d4STg-K2059lXbOrjJfZo3SJLE.crl (hash: xKzDg8B5Q1uzWw+RsqhIslBKb3XCh1Lf10U5h1y2bJU=) 2: 6caVUV-TGB9bU55p1ya71OWBwvg.roa (hash: c0tRExOUVeBF8+Pq6PhYarD4KHj6+N7f0p/w2jdUK80=) 3: GE6nRoMuniMWGyv11YMLRPKemVU.roa (hash: RaYbPvfO1sHreb2/JnG9Opl+09YsllUwocY3Ihxf+gE=) 4: LFAtM68_QsypB1yZseRwlLJq2u4.roa (hash: /957wLIuErUNU/cVyq1KNPpSgWYbgRzlgVLc/r/yFdE=) 5: NAlGVYpV8OEmdD2nIMiqn334k0M.roa (hash: XrkbVPgrR7sOnmYGzDR8m+MZN8NJUZRQwjZqOHkM5b8=) 6: dNqRqY6tmtgccI8cx_uJ4tWqiZA.roa (hash: g+K2hBhsL/swaozLRy4ek/JzzpG8kCplNhlD1lsyOeY=) 7: g8zmfO2HPSEN8YUDrAkY2r7Nlqw.roa (hash: uAg57JMTD8oD+ghOOtfACvdQoLeAHc5YjQ/CuCFoViY=) 8: ghLUfufgx1VoBmbU1sZuk7NLdck.roa (hash: KlUf0BqZgjwHYa7TQ0G1F7PJPcSLF10z1HCqYwcsEU0=) 9: hacEV-MoLT8z9KwMPWss3cGE7Ak.roa (hash: /ljDI2bMRna9vPYEiWkrDiOeR+IfW8BnSxXE9Vp7xXE=) 10: xiZp6eivWb7x_d9W-WC8kwhVWsI.roa (hash: GvxU73beqXLMBxGmaGGngexgQ65uQMfsvmeuizGIl8o=) 11: yv08EH90nRPgnJ4aLVioWHP74iI.roa (hash: wfa+cbtIfXj/VcabZ84otkiskAuSmrS6+55fqOkIL+o=) Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/3a/abe134-0093-4652-9057-4f4c9b343e90/1/0d4STg-K2059lXbOrjJfZo3SJLE.crl rsync://rpki.ripe.net/repository/DEFAULT/3a/abe134-0093-4652-9057-4f4c9b343e90/1/0d4STg-K2059lXbOrjJfZo3SJLE.mft rsync://rpki.ripe.net/repository/DEFAULT/0d4STg-K2059lXbOrjJfZo3SJLE.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Sun 16 Nov 2025 22:01:07 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9a:89:89:4b:4a:72:50:81:67:69:cb:d6:02:8f:75:4d:19 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=d1de124e0f8adb4e7d9576ceae325f668dd224b1 Validity Not Before: Nov 15 22:01:07 2025 GMT Not After : Nov 16 22:01:07 2025 GMT Subject: CN=6af0ec0a7f636cf9813a7288815d13f5d28d9f7c Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:bc:07:48:9a:1b:aa:5a:d7:98:31:62:56:02:6f: 37:28:6e:39:f5:21:ec:be:a0:e8:09:ef:8b:6b:67: 9a:f3:af:52:3c:5c:12:82:9d:9d:35:63:15:10:47: 71:26:40:94:eb:aa:55:c3:7b:85:63:c0:76:0a:61: 2c:f1:97:f0:cb:1d:00:f7:79:e6:0a:5e:4e:87:04: 2b:ba:54:c1:5e:72:8a:92:d3:61:18:eb:97:2a:3d: 05:77:73:2b:66:d7:53:2f:c0:d0:19:1b:42:bb:c8: 84:dd:c3:6b:00:b8:c9:b9:30:08:4a:a3:c0:22:8d: d2:45:66:7d:b7:97:0f:58:4f:e7:e8:23:4e:0c:4a: 13:5a:3d:02:6b:61:b7:18:3a:a3:b1:6b:35:c8:84: 6b:8f:57:13:44:bf:8a:ce:ac:89:bb:c3:07:1d:fe: 4a:bd:c9:3a:91:b1:f8:b2:27:16:d2:47:9a:fd:03: e4:92:cd:c3:b7:34:a2:73:cb:1b:41:ff:6c:d9:1c: 33:78:03:8c:be:83:36:80:75:b1:a3:a7:aa:67:c4: 47:dd:b0:a9:de:80:73:de:cf:36:c7:b5:7c:42:c6: 4a:8d:2e:c6:ab:f9:40:02:36:43:76:b5:c2:b0:e8: 6a:45:ef:16:48:37:cb:3a:67:0c:bb:b9:20:46:33: 2c:4d Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 6A:F0:EC:0A:7F:63:6C:F9:81:3A:72:88:81:5D:13:F5:D2:8D:9F:7C X509v3 Authority Key Identifier: keyid:D1:DE:12:4E:0F:8A:DB:4E:7D:95:76:CE:AE:32:5F:66:8D:D2:24:B1 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/0d4STg-K2059lXbOrjJfZo3SJLE.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/3a/abe134-0093-4652-9057-4f4c9b343e90/1/0d4STg-K2059lXbOrjJfZo3SJLE.mft X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/3a/abe134-0093-4652-9057-4f4c9b343e90/1/0d4STg-K2059lXbOrjJfZo3SJLE.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption c3:6b:08:21:75:aa:ea:5e:19:e3:9a:6b:e6:e3:4d:ab:59:f7: 92:84:f0:07:6d:29:02:d3:c5:65:63:2c:ae:2a:a0:62:e0:d6: f1:59:c3:c6:d9:bd:66:34:dd:21:18:8b:1b:ae:de:37:0f:d5: f1:72:13:4f:e6:a9:e4:cd:bf:c8:25:f0:f2:e6:75:34:2d:f0: 85:fe:97:c4:0a:71:6b:ab:94:1e:43:fd:5e:2f:a0:1b:2b:54: 15:c4:34:6b:94:88:c6:78:1f:c9:54:82:c8:82:7b:65:f9:85: 54:00:a7:05:2a:03:82:06:af:55:c7:9b:8b:59:c7:08:de:8a: d8:ae:bc:00:af:3d:06:38:39:3e:56:8d:25:d4:97:4c:8a:46: 4c:a2:1e:9c:03:97:ab:c5:eb:4e:c4:88:44:3d:1b:77:81:49: e7:b1:99:87:e4:c9:bc:f3:33:ea:ae:31:67:1e:16:61:e2:9c: 61:42:47:b8:58:44:99:35:8a:8b:a5:12:91:fe:43:6f:7f:7a: 7a:af:42:3b:56:ec:84:30:b8:09:55:55:2f:8f:b4:c0:3e:fa: 5a:87:38:e4:00:f5:6f:90:fa:e6:b7:87:ea:89:5b:ab:e2:7f: 04:ee:fc:7b:6f:67:78:44:74:30:64:b9:76:43:d9:4e:82:ed: 4e:d9:93:5b -----BEGIN CERTIFICATE----- MIIFFjCCA/6gAwIBAgISAZqJiUtKclCBZ2nL1gKPdU0ZMA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKGQxZGUxMjRlMGY4YWRiNGU3ZDk1NzZjZWFlMzI1ZjY2OGRk MjI0YjEwHhcNMjUxMTE1MjIwMTA3WhcNMjUxMTE2MjIwMTA3WjAzMTEwLwYDVQQD Eyg2YWYwZWMwYTdmNjM2Y2Y5ODEzYTcyODg4MTVkMTNmNWQyOGQ5ZjdjMIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAvAdImhuqWteYMWJWAm83KG459SHs vqDoCe+La2ea869SPFwSgp2dNWMVEEdxJkCU66pVw3uFY8B2CmEs8Zfwyx0A93nm Cl5OhwQrulTBXnKKktNhGOuXKj0Fd3MrZtdTL8DQGRtCu8iE3cNrALjJuTAISqPA Io3SRWZ9t5cPWE/n6CNODEoTWj0Ca2G3GDqjsWs1yIRrj1cTRL+KzqyJu8MHHf5K vck6kbH4sicW0kea/QPkks3DtzSic8sbQf9s2RwzeAOMvoM2gHWxo6eqZ8RH3bCp 3oBz3s82x7V8QsZKjS7Gq/lAAjZDdrXCsOhqRe8WSDfLOmcMu7kgRjMsTQIDAQAB o4ICIjCCAh4wHQYDVR0OBBYEFGrw7Ap/Y2z5gTpyiIFdE/XSjZ98MB8GA1UdIwQY MBaAFNHeEk4PittOfZV2zq4yX2aN0iSxMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvMGQ0U1RnLUsyMDU5bFhiT3JqSmZabzNTSkxFLmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC8zYS9hYmUxMzQtMDA5My00NjUyLTkwNTct NGY0YzliMzQzZTkwLzEvMGQ0U1RnLUsyMDU5bFhiT3JqSmZabzNTSkxFLm1mdDCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC8zYS9hYmUxMzQtMDA5My00NjUyLTkwNTctNGY0YzliMzQzZTkw LzEvMGQ0U1RnLUsyMDU5bFhiT3JqSmZabzNTSkxFLmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAw2sIIXWq 6l4Z45pr5uNNq1n3koTwB20pAtPFZWMsriqgYuDW8VnDxtm9ZjTdIRiLG67eNw/V 8XITT+ap5M2/yCXw8uZ1NC3whf6XxApxa6uUHkP9Xi+gGytUFcQ0a5SIxngfyVSC yIJ7ZfmFVACnBSoDggavVcebi1nHCN6K2K68AK89Bjg5PlaNJdSXTIpGTKIenAOX q8XrTsSIRD0bd4FJ57GZh+TJvPMz6q4xZx4WYeKcYUJHuFhEmTWKi6USkf5Db396 eq9CO1bshDC4CVVVL4+0wD76Woc45AD1b5D65reH6olbq+J/BO78e29neER0MGS5 dkPZToLtTtmTWw== -----END CERTIFICATE-----Generated at Sun Nov 16 07:13:12 2025 by rpki-client