$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/3a/abe134-0093-4652-9057-4f4c9b343e90/1/0d4STg-K2059lXbOrjJfZo3SJLE.mft File: 0d4STg-K2059lXbOrjJfZo3SJLE.mft (raw, json) Hash identifier: d197ifHzkiTGz9IiUiMzgoc7BPvcVdZ7ZBpisWdmoSY= Subject key identifier: E1:F0:29:B3:7D:86:3B:B3:2C:3B:DC:B2:B7:28:91:D7:A8:2A:BB:20 Authority key identifier: D1:DE:12:4E:0F:8A:DB:4E:7D:95:76:CE:AE:32:5F:66:8D:D2:24:B1 Certificate issuer: /CN=d1de124e0f8adb4e7d9576ceae325f668dd224b1 Certificate serial: 019A08252360AC53CDA3D462A5A5F6CB7D49 Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/0d4STg-K2059lXbOrjJfZo3SJLE.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/3a/abe134-0093-4652-9057-4f4c9b343e90/1/0d4STg-K2059lXbOrjJfZo3SJLE.mft Manifest number: 120B Signing time: Tue 21 Oct 2025 19:00:42 +0000 Manifest this update: Tue 21 Oct 2025 19:00:42 +0000 Manifest next update: Wed 22 Oct 2025 19:00:42 +0000 Files and hashes: 1: 0d4STg-K2059lXbOrjJfZo3SJLE.crl (hash: QTi3FELy+1Kwjut0jJR3vuyxF1u7570Gm3srx5ulwRM=) 2: 6caVUV-TGB9bU55p1ya71OWBwvg.roa (hash: c0tRExOUVeBF8+Pq6PhYarD4KHj6+N7f0p/w2jdUK80=) 3: GE6nRoMuniMWGyv11YMLRPKemVU.roa (hash: RaYbPvfO1sHreb2/JnG9Opl+09YsllUwocY3Ihxf+gE=) 4: LFAtM68_QsypB1yZseRwlLJq2u4.roa (hash: /957wLIuErUNU/cVyq1KNPpSgWYbgRzlgVLc/r/yFdE=) 5: NAlGVYpV8OEmdD2nIMiqn334k0M.roa (hash: XrkbVPgrR7sOnmYGzDR8m+MZN8NJUZRQwjZqOHkM5b8=) 6: dNqRqY6tmtgccI8cx_uJ4tWqiZA.roa (hash: g+K2hBhsL/swaozLRy4ek/JzzpG8kCplNhlD1lsyOeY=) 7: g8zmfO2HPSEN8YUDrAkY2r7Nlqw.roa (hash: uAg57JMTD8oD+ghOOtfACvdQoLeAHc5YjQ/CuCFoViY=) 8: ghLUfufgx1VoBmbU1sZuk7NLdck.roa (hash: KlUf0BqZgjwHYa7TQ0G1F7PJPcSLF10z1HCqYwcsEU0=) 9: hacEV-MoLT8z9KwMPWss3cGE7Ak.roa (hash: /ljDI2bMRna9vPYEiWkrDiOeR+IfW8BnSxXE9Vp7xXE=) 10: xiZp6eivWb7x_d9W-WC8kwhVWsI.roa (hash: GvxU73beqXLMBxGmaGGngexgQ65uQMfsvmeuizGIl8o=) 11: yv08EH90nRPgnJ4aLVioWHP74iI.roa (hash: wfa+cbtIfXj/VcabZ84otkiskAuSmrS6+55fqOkIL+o=) Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/3a/abe134-0093-4652-9057-4f4c9b343e90/1/0d4STg-K2059lXbOrjJfZo3SJLE.crl rsync://rpki.ripe.net/repository/DEFAULT/3a/abe134-0093-4652-9057-4f4c9b343e90/1/0d4STg-K2059lXbOrjJfZo3SJLE.mft rsync://rpki.ripe.net/repository/DEFAULT/0d4STg-K2059lXbOrjJfZo3SJLE.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Wed 22 Oct 2025 14:12:02 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9a:08:25:23:60:ac:53:cd:a3:d4:62:a5:a5:f6:cb:7d:49 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=d1de124e0f8adb4e7d9576ceae325f668dd224b1 Validity Not Before: Oct 21 19:00:42 2025 GMT Not After : Oct 22 19:00:42 2025 GMT Subject: CN=e1f029b37d863bb32c3bdcb2b72891d7a82abb20 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:dc:7a:13:4e:33:35:82:67:94:aa:6e:8e:43:27: a5:31:f7:79:b6:a7:11:3d:29:4e:76:4b:8b:cc:2d: 7f:32:5a:50:d3:1a:0e:1b:cb:10:50:46:d0:e5:ab: cc:76:ed:49:e5:7e:df:54:d8:33:d3:e0:6f:fe:45: 01:69:d0:10:1e:03:62:b7:48:2d:27:18:4c:58:ba: 47:91:3f:1a:7d:66:50:a1:2f:83:80:68:90:6e:e9: e2:93:56:b9:4c:81:8e:38:32:fe:6e:5f:d0:9e:ef: 91:e3:21:c3:f3:e1:4c:88:af:38:20:81:8e:fa:57: f6:06:70:90:ca:75:9c:2a:6d:b7:a4:00:b3:2d:a6: 27:1a:23:6a:1d:65:ea:31:0f:1b:c6:e7:31:bb:b0: ff:f0:f1:36:80:6b:55:82:20:ef:6b:6c:aa:dc:f4: a3:16:ff:19:0a:32:18:6d:c3:58:01:42:a8:1f:c5: 5f:31:47:2b:fe:ae:3f:98:34:fd:87:5e:1a:c9:55: 7b:cb:d7:52:8c:4a:3c:85:17:77:5e:9c:76:8e:97: f4:07:0a:3f:03:78:d5:43:1b:31:0e:38:f4:cc:01: 25:e5:df:05:21:49:d7:00:a0:92:b6:a8:09:e8:c1: 02:24:de:96:e7:61:50:90:de:75:ca:22:64:34:57: cc:eb Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: E1:F0:29:B3:7D:86:3B:B3:2C:3B:DC:B2:B7:28:91:D7:A8:2A:BB:20 X509v3 Authority Key Identifier: keyid:D1:DE:12:4E:0F:8A:DB:4E:7D:95:76:CE:AE:32:5F:66:8D:D2:24:B1 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/0d4STg-K2059lXbOrjJfZo3SJLE.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/3a/abe134-0093-4652-9057-4f4c9b343e90/1/0d4STg-K2059lXbOrjJfZo3SJLE.mft X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/3a/abe134-0093-4652-9057-4f4c9b343e90/1/0d4STg-K2059lXbOrjJfZo3SJLE.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption c8:a8:72:fb:f7:f8:03:78:11:29:c7:f5:b1:b8:43:d6:3b:f1: 63:f7:ef:0d:92:bc:22:cf:17:94:e8:07:c4:a9:89:70:20:e8: 5e:95:69:e0:c2:6b:bc:68:69:2f:3b:72:5b:7d:4a:8b:0f:34: 61:c7:4d:45:2b:82:3b:7e:3c:2c:46:7a:62:62:fd:77:74:ff: 8b:bd:7e:f4:df:f3:fb:8c:2a:7d:99:92:fc:69:dd:61:34:9f: 68:7c:8f:75:2f:18:ff:c0:47:a7:46:e9:6c:7a:a4:45:db:df: b4:4c:83:9b:a8:50:6f:53:8e:2a:3e:1b:eb:4f:32:05:e4:9d: 9c:93:85:77:14:86:31:d4:a1:80:d5:61:fa:cb:d2:1c:5e:0c: 6f:20:be:06:f0:33:dc:86:dd:6e:c0:08:2e:6c:d4:00:7b:59: 69:ee:3d:46:8e:20:aa:ec:50:7d:24:f2:73:51:26:b8:dd:0c: 15:9d:c5:52:bf:50:e4:5a:b4:d9:38:45:28:fb:9c:0a:ba:b6: 6d:46:d9:85:d8:85:4c:4c:26:de:5e:c3:dc:03:cf:43:1c:96: 54:cb:1a:3d:0a:b5:c0:c8:a4:33:13:7d:21:c1:01:14:2b:9f: 91:bf:d6:83:aa:be:83:3d:25:dd:9b:f6:5d:c6:fb:ad:65:33: dd:2c:70:40 -----BEGIN CERTIFICATE----- MIIFFjCCA/6gAwIBAgISAZoIJSNgrFPNo9RipaX2y31JMA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKGQxZGUxMjRlMGY4YWRiNGU3ZDk1NzZjZWFlMzI1ZjY2OGRk MjI0YjEwHhcNMjUxMDIxMTkwMDQyWhcNMjUxMDIyMTkwMDQyWjAzMTEwLwYDVQQD EyhlMWYwMjliMzdkODYzYmIzMmMzYmRjYjJiNzI4OTFkN2E4MmFiYjIwMIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEA3HoTTjM1gmeUqm6OQyelMfd5tqcR PSlOdkuLzC1/MlpQ0xoOG8sQUEbQ5avMdu1J5X7fVNgz0+Bv/kUBadAQHgNit0gt JxhMWLpHkT8afWZQoS+DgGiQbunik1a5TIGOODL+bl/Qnu+R4yHD8+FMiK84IIGO +lf2BnCQynWcKm23pACzLaYnGiNqHWXqMQ8bxucxu7D/8PE2gGtVgiDva2yq3PSj Fv8ZCjIYbcNYAUKoH8VfMUcr/q4/mDT9h14ayVV7y9dSjEo8hRd3Xpx2jpf0Bwo/ A3jVQxsxDjj0zAEl5d8FIUnXAKCStqgJ6MECJN6W52FQkN51yiJkNFfM6wIDAQAB o4ICIjCCAh4wHQYDVR0OBBYEFOHwKbN9hjuzLDvcsrcokdeoKrsgMB8GA1UdIwQY MBaAFNHeEk4PittOfZV2zq4yX2aN0iSxMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvMGQ0U1RnLUsyMDU5bFhiT3JqSmZabzNTSkxFLmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC8zYS9hYmUxMzQtMDA5My00NjUyLTkwNTct NGY0YzliMzQzZTkwLzEvMGQ0U1RnLUsyMDU5bFhiT3JqSmZabzNTSkxFLm1mdDCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC8zYS9hYmUxMzQtMDA5My00NjUyLTkwNTctNGY0YzliMzQzZTkw LzEvMGQ0U1RnLUsyMDU5bFhiT3JqSmZabzNTSkxFLmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAyKhy+/f4 A3gRKcf1sbhD1jvxY/fvDZK8Is8XlOgHxKmJcCDoXpVp4MJrvGhpLztyW31Kiw80 YcdNRSuCO348LEZ6YmL9d3T/i71+9N/z+4wqfZmS/GndYTSfaHyPdS8Y/8BHp0bp bHqkRdvftEyDm6hQb1OOKj4b608yBeSdnJOFdxSGMdShgNVh+svSHF4MbyC+BvAz 3IbdbsAILmzUAHtZae49Ro4gquxQfSTyc1EmuN0MFZ3FUr9Q5Fq02ThFKPucCrq2 bUbZhdiFTEwm3l7D3APPQxyWVMsaPQq1wMikMxN9IcEBFCufkb/Wg6q+gz0l3Zv2 Xcb7rWUz3SxwQA== -----END CERTIFICATE-----Generated at Tue Oct 21 22:56:48 2025 by rpki-client