$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/3e/01d411-d915-4277-8fe2-76b0dda2bf3e/1/1-tcQDnftkRnWbiMhu2cR1-dgmCs.mft File: 1-tcQDnftkRnWbiMhu2cR1-dgmCs.mft (raw, json) Hash identifier: gs0fzVL5QiejbAeK6N+eYLK1ocs5cLKevlYYUZmdS0c= Subject key identifier: BE:94:1A:83:A8:EF:A9:1C:80:60:E1:57:4D:3F:A2:85:46:83:87:68 Authority key identifier: FA:D7:10:0E:77:ED:91:19:D6:6E:23:21:BB:67:11:D7:E7:60:98:2B Certificate issuer: /CN=fad7100e77ed9119d66e2321bb6711d7e760982b Certificate serial: 0199C3EA3CD1018E6A784195E18033D34FD9 Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/1-tcQDnftkRnWbiMhu2cR1-dgmCs.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/3e/01d411-d915-4277-8fe2-76b0dda2bf3e/1/1-tcQDnftkRnWbiMhu2cR1-dgmCs.mft Manifest number: 16D3 Signing time: Wed 08 Oct 2025 13:02:12 +0000 Manifest this update: Wed 08 Oct 2025 13:02:12 +0000 Manifest next update: Thu 09 Oct 2025 13:02:12 +0000 Files and hashes: 1: 1-tcQDnftkRnWbiMhu2cR1-dgmCs.crl (hash: T0w+taMpgt7W3XA6h5UB9LBNmU1q1hJOFvnoNbu3l6I=) 2: 2FKZPhg0yZwll-7IKKrQiY_2JZg.roa (hash: gHgBdXS8XWNL7U3Ymd+KumYNoM9Ez64AQgUONNJnO6M=) 3: KAuOHWt-R6D_FxRYYs3gpwscXsg.roa (hash: Pgubb9gKDOdz0YwAQ2TL03c4sJTbMRlSOGCHZAx7niE=) 4: Ml6MKIuGs5X6FYCoibWIrDM8sZw.roa (hash: sr8ii208yixvZe4Nt1vf4FirRpNYMo5v1lAxQmPyK4E=) 5: NeK3VE5xIVumcURQvZORGSezPug.roa (hash: Kyuhso1DU/JY4Cd8KqltzS/UkVVtl7rIX1KuhxLgmkQ=) 6: SAShV7Cx-3cRFcPWPoHPU7seh9k.roa (hash: lzRGc/kfVkESt27Rk5Rm2MTThTLX4bNiPJvrX6OzG4s=) 7: TWLMxWYadUOjpfWSoRjdz4gkQVQ.roa (hash: eJJWCwgtvt1cLj2rlNHb1YuUwHOAuKtSsp+SGbWPUGI=) 8: U2YIuXAyUCZOsR4Cw5PSPdwaU0s.roa (hash: gWdVxjtR19wt31Bo3G5JO46Z63mY8LolhR8kTQQgD5Q=) 9: WvZhz4-xli7Jg3AjUEb09s8yIcg.roa (hash: nyDmjCwaWeBGV6O57JlcDsH1rd4TtVrk7nDHN+GYZDc=) 10: kSLVwGt_NyDYhkUM69fkyKqLKhE.roa (hash: 4uQpl4b7ipDKF9oMjr4f401/xIMAMkUuha8dHxAMb/k=) Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/3e/01d411-d915-4277-8fe2-76b0dda2bf3e/1/1-tcQDnftkRnWbiMhu2cR1-dgmCs.crl rsync://rpki.ripe.net/repository/DEFAULT/3e/01d411-d915-4277-8fe2-76b0dda2bf3e/1/1-tcQDnftkRnWbiMhu2cR1-dgmCs.mft rsync://rpki.ripe.net/repository/DEFAULT/1-tcQDnftkRnWbiMhu2cR1-dgmCs.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Thu 09 Oct 2025 13:02:12 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:99:c3:ea:3c:d1:01:8e:6a:78:41:95:e1:80:33:d3:4f:d9 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=fad7100e77ed9119d66e2321bb6711d7e760982b Validity Not Before: Oct 8 13:02:12 2025 GMT Not After : Oct 9 13:02:12 2025 GMT Subject: CN=be941a83a8efa91c8060e1574d3fa28546838768 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:d0:61:a9:f7:be:a9:5d:31:a7:7a:7c:67:a0:a9: c5:a9:d6:61:3e:4e:ef:e6:25:02:d1:f6:82:c5:32: f4:e8:34:7d:40:a5:35:97:f3:f9:30:4a:ab:07:41: 4a:d2:9e:1f:bc:6f:d1:eb:f0:71:11:18:05:c1:2b: e5:3b:11:5a:91:f7:55:b6:19:ff:1b:fd:45:86:04: c4:53:b9:0b:bd:8e:64:eb:ee:40:3d:73:f3:87:9c: 00:2c:19:e6:ea:01:e9:9b:83:70:54:27:ba:9c:79: d1:42:bc:6e:4f:43:71:94:8f:2e:6a:11:40:54:3a: 35:b7:a8:1a:bc:0e:7c:b9:7f:d7:d0:39:af:b5:01: 28:24:36:6d:c4:71:d4:90:c5:3e:7f:17:dd:6a:61: aa:87:7f:1a:40:1f:3b:0a:36:5e:97:8c:d4:4b:d4: d4:1d:4d:fb:f9:99:c3:49:a7:28:28:73:f8:96:be: 43:33:f9:c3:8c:99:09:3b:c5:b2:8b:88:fa:2f:ca: 97:12:31:74:f4:27:f0:03:d8:14:d6:51:ad:48:aa: 47:fc:19:5e:5b:24:d4:5b:c1:84:ad:95:e7:d2:3b: ba:0f:a7:54:47:66:db:37:27:60:73:78:b5:13:4c: 57:51:ab:ca:18:0f:ce:23:af:14:73:00:e9:0f:f7: c1:35 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: BE:94:1A:83:A8:EF:A9:1C:80:60:E1:57:4D:3F:A2:85:46:83:87:68 X509v3 Authority Key Identifier: keyid:FA:D7:10:0E:77:ED:91:19:D6:6E:23:21:BB:67:11:D7:E7:60:98:2B X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/1-tcQDnftkRnWbiMhu2cR1-dgmCs.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/3e/01d411-d915-4277-8fe2-76b0dda2bf3e/1/1-tcQDnftkRnWbiMhu2cR1-dgmCs.mft X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/3e/01d411-d915-4277-8fe2-76b0dda2bf3e/1/1-tcQDnftkRnWbiMhu2cR1-dgmCs.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 85:c7:79:6c:f5:34:2c:90:68:fc:95:46:21:f4:f2:f1:f0:53: 29:eb:b9:af:58:b4:47:09:4a:c8:0c:e1:88:22:52:b8:ab:cb: e1:2a:f4:a1:6b:90:ea:43:8b:14:11:17:e6:c5:bd:d2:18:2e: 1f:95:8d:0f:3e:e5:90:a0:71:e8:8e:86:1e:bd:21:3b:f5:f2: 96:3a:cf:db:8e:a4:0f:d2:b1:9d:a6:b4:e5:34:f1:57:a0:d5: 95:43:64:0c:e8:4e:6d:ae:f7:f8:61:cb:24:50:b0:a3:95:f2: 3f:92:f9:ea:47:b7:69:cf:e4:4f:0e:67:54:cf:0f:13:69:75: 48:4c:10:b1:d4:40:3f:35:70:bf:e5:52:0f:01:08:8e:80:69: 63:8c:d8:32:94:a6:fd:3f:7a:c7:30:95:73:e5:3a:f1:3c:3c: d1:22:02:cc:55:4d:1a:87:77:87:79:5b:03:89:5f:e6:30:05: 62:68:ca:54:fc:ac:7f:05:e9:95:55:95:e6:18:18:67:b0:5b: 9b:07:0f:d7:57:39:49:a7:7d:8e:db:24:2f:f6:e2:8e:fa:ca: 48:9c:e4:48:7e:13:12:d7:61:c3:89:71:14:99:01:11:e4:e0: 3b:12:ac:17:e0:f0:f5:85:95:84:eb:3c:21:8b:4c:b4:f6:f8: 55:a4:2a:69 -----BEGIN CERTIFICATE----- MIIFGTCCBAGgAwIBAgISAZnD6jzRAY5qeEGV4YAz00/ZMA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKGZhZDcxMDBlNzdlZDkxMTlkNjZlMjMyMWJiNjcxMWQ3ZTc2 MDk4MmIwHhcNMjUxMDA4MTMwMjEyWhcNMjUxMDA5MTMwMjEyWjAzMTEwLwYDVQQD EyhiZTk0MWE4M2E4ZWZhOTFjODA2MGUxNTc0ZDNmYTI4NTQ2ODM4NzY4MIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEA0GGp976pXTGnenxnoKnFqdZhPk7v 5iUC0faCxTL06DR9QKU1l/P5MEqrB0FK0p4fvG/R6/BxERgFwSvlOxFakfdVthn/ G/1FhgTEU7kLvY5k6+5APXPzh5wALBnm6gHpm4NwVCe6nHnRQrxuT0NxlI8uahFA VDo1t6gavA58uX/X0DmvtQEoJDZtxHHUkMU+fxfdamGqh38aQB87CjZel4zUS9TU HU37+ZnDSacoKHP4lr5DM/nDjJkJO8Wyi4j6L8qXEjF09CfwA9gU1lGtSKpH/Ble WyTUW8GErZXn0ju6D6dUR2bbNydgc3i1E0xXUavKGA/OI68UcwDpD/fBNQIDAQAB o4ICJTCCAiEwHQYDVR0OBBYEFL6UGoOo76kcgGDhV00/ooVGg4doMB8GA1UdIwQY MBaAFPrXEA537ZEZ1m4jIbtnEdfnYJgrMA4GA1UdDwEB/wQEAwIHgDBlBggrBgEF BQcBAQRZMFcwVQYIKwYBBQUHMAKGSXJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvMS10Y1FEbmZ0a1JuV2JpTWh1MmNSMS1kZ21Dcy5jZXIw gY4GCCsGAQUFBwELBIGBMH8wfQYIKwYBBQUHMAuGcXJzeW5jOi8vcnBraS5yaXBl Lm5ldC9yZXBvc2l0b3J5L0RFRkFVTFQvM2UvMDFkNDExLWQ5MTUtNDI3Ny04ZmUy LTc2YjBkZGEyYmYzZS8xLzEtdGNRRG5mdGtSbldiaU1odTJjUjEtZGdtQ3MubWZ0 MIGCBgNVHR8EezB5MHegdaBzhnFyc3luYzovL3Jwa2kucmlwZS5uZXQvcmVwb3Np dG9yeS9ERUZBVUxULzNlLzAxZDQxMS1kOTE1LTQyNzctOGZlMi03NmIwZGRhMmJm M2UvMS8xLXRjUURuZnRrUm5XYmlNaHUyY1IxLWRnbUNzLmNybDAYBgNVHSABAf8E DjAMMAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgAC BQAwFQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAhcd5 bPU0LJBo/JVGIfTy8fBTKeu5r1i0RwlKyAzhiCJSuKvL4Sr0oWuQ6kOLFBEX5sW9 0hguH5WNDz7lkKBx6I6GHr0hO/XyljrP246kD9Kxnaa05TTxV6DVlUNkDOhOba73 +GHLJFCwo5XyP5L56ke3ac/kTw5nVM8PE2l1SEwQsdRAPzVwv+VSDwEIjoBpY4zY MpSm/T96xzCVc+U68Tw80SICzFVNGod3h3lbA4lf5jAFYmjKVPysfwXplVWV5hgY Z7BbmwcP11c5Sad9jtskL/bijvrKSJzkSH4TEtdhw4lxFJkBEeTgOxKsF+Dw9YWV hOs8IYtMtPb4VaQqaQ== -----END CERTIFICATE-----Generated at Wed Oct 8 15:48:23 2025 by rpki-client