$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/3f/2b2878-5b79-40f7-b4b5-356c4d7bb452/1/9sPgJ9LRwtNtfJVIZyJsg7ZetW8.mft File: 9sPgJ9LRwtNtfJVIZyJsg7ZetW8.mft (raw, json) Hash identifier: ypwRSRNUJ5woqdSHeLz9VcTq8B29lqA4S0J7G7+J8/0= Subject key identifier: F0:47:22:E5:74:9E:6A:D8:48:A4:87:79:FE:7D:52:A5:69:CB:3D:9C Authority key identifier: F6:C3:E0:27:D2:D1:C2:D3:6D:7C:95:48:67:22:6C:83:B6:5E:B5:6F Certificate issuer: /CN=f6c3e027d2d1c2d36d7c954867226c83b65eb56f Certificate serial: 019A07810A42001FA4C2E3534ED0CED4FEC8 Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/9sPgJ9LRwtNtfJVIZyJsg7ZetW8.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/3f/2b2878-5b79-40f7-b4b5-356c4d7bb452/1/9sPgJ9LRwtNtfJVIZyJsg7ZetW8.mft Manifest number: 0F02 Signing time: Tue 21 Oct 2025 16:01:28 +0000 Manifest this update: Tue 21 Oct 2025 16:01:28 +0000 Manifest next update: Wed 22 Oct 2025 16:01:28 +0000 Files and hashes: 1: 1-FnvQqT9mIqxipsRqFjYsNQSlBM.roa (hash: +uFY0K06aPvv+IH1erLogXQwEEO2k+DY8eNZLIXFHV4=) 2: 3gHc2sELy-q8GzBNb0pGNEAUeSU.roa (hash: +uoA4jjzPF6dggZHTrB3SBkyhtONGCYmRKaDkDvy7ys=) 3: 9sPgJ9LRwtNtfJVIZyJsg7ZetW8.crl (hash: C2qgUOsnxg/bl2Yf0Yx7LNf/NhrxJ3y9NmptDmtz4mI=) 4: EpH20P4xP3V2g4vErHJO-EvTAVU.roa (hash: jeooPDRiBjDAUPoIXhITPTt2zTmHZ7KLWf5fCQG5sIo=) 5: RMDB6gMXfrtTmWIrc-eFyDWvjA8.roa (hash: GVzUypSd1fZNP3R7rqeVrhxf+B3I3xeeeYXchU/dNhc=) 6: SI90qQvScrNKS-02paw66Vtte1g.roa (hash: CoRUrg+WB47FS25HKQ2HVa4e+itGukiRC6ZwlYviHec=) 7: VunL007YcgdB0SQwEVqZksZS8Fs.roa (hash: 216WPQB/uK03AqzN7nO6bEUvYIaYzP3vD9//CYpZtZI=) 8: mvmUvaM2JRysTq3IiKyyysU6GY8.roa (hash: dMiGawP2eEnw55fXqAakbpr7IIQ2Da7zAMRfk+xhjuE=) 9: xfkDaLGtqI9S0koDwH1ibKq86PQ.roa (hash: 9SMgRbgNtClui+eod+bviRGqIN366+5FDeHZRxM9wm0=) 10: yIehYePK6tLNgPSevPZc6yI-hyM.roa (hash: b4yVl+3Ck0JmNj4X3LbJqBzo9dAh1Vn8oWFOm89Ahv4=) Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/3f/2b2878-5b79-40f7-b4b5-356c4d7bb452/1/9sPgJ9LRwtNtfJVIZyJsg7ZetW8.crl rsync://rpki.ripe.net/repository/DEFAULT/3f/2b2878-5b79-40f7-b4b5-356c4d7bb452/1/9sPgJ9LRwtNtfJVIZyJsg7ZetW8.mft rsync://rpki.ripe.net/repository/DEFAULT/9sPgJ9LRwtNtfJVIZyJsg7ZetW8.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Wed 22 Oct 2025 14:12:02 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9a:07:81:0a:42:00:1f:a4:c2:e3:53:4e:d0:ce:d4:fe:c8 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=f6c3e027d2d1c2d36d7c954867226c83b65eb56f Validity Not Before: Oct 21 16:01:28 2025 GMT Not After : Oct 22 16:01:28 2025 GMT Subject: CN=f04722e5749e6ad848a48779fe7d52a569cb3d9c Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:be:fd:53:8c:f9:d7:d8:ac:55:28:cc:d3:46:50: 05:3d:72:58:be:ed:ff:e1:e2:dd:5c:b9:58:be:53: 90:2d:f0:0b:4f:07:33:b5:2a:13:28:cf:0e:56:fb: b5:d5:cd:02:e3:b4:44:f0:02:19:9d:5e:62:9c:52: 77:93:d6:69:d0:de:bf:53:50:c9:77:03:90:bf:ed: 3c:ee:25:71:f7:f9:47:a9:5c:86:73:e0:8d:13:06: 12:05:37:cc:ff:31:d0:00:95:c5:d1:3a:b8:27:21: 55:18:87:01:37:e4:0b:30:68:b2:fb:9c:c7:db:0d: 99:b5:48:f1:35:9d:8e:3b:74:80:56:d3:b9:98:40: ed:1e:f4:1d:4f:fa:97:f4:ea:99:67:ee:83:53:ec: 6a:1c:cd:a3:7f:50:6b:b4:3a:66:74:a0:a4:ea:e2: e2:46:76:5b:2a:28:09:15:2c:60:a1:70:bc:ca:bb: a2:bd:55:02:90:1c:8d:75:c6:15:b2:ca:ea:fb:11: 84:1f:33:2a:ea:78:2e:a7:f3:3b:59:88:8a:20:83: f9:f0:40:a4:a7:49:fb:f9:b4:4c:9c:87:9d:b3:0a: c9:00:e8:ce:9d:f6:75:8f:a3:91:a8:fc:85:11:db: 3d:36:d9:50:b6:20:df:28:0c:97:db:cf:ab:7d:78: e6:9b Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: F0:47:22:E5:74:9E:6A:D8:48:A4:87:79:FE:7D:52:A5:69:CB:3D:9C X509v3 Authority Key Identifier: keyid:F6:C3:E0:27:D2:D1:C2:D3:6D:7C:95:48:67:22:6C:83:B6:5E:B5:6F X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/9sPgJ9LRwtNtfJVIZyJsg7ZetW8.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/3f/2b2878-5b79-40f7-b4b5-356c4d7bb452/1/9sPgJ9LRwtNtfJVIZyJsg7ZetW8.mft X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/3f/2b2878-5b79-40f7-b4b5-356c4d7bb452/1/9sPgJ9LRwtNtfJVIZyJsg7ZetW8.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption ce:52:38:d8:c0:f8:19:e0:85:14:b4:a4:3f:b4:0d:36:8c:20: 15:4d:e1:78:f3:8f:a3:80:1c:04:a7:d6:b8:be:fb:c2:00:63: 9a:4f:7d:e4:e4:8b:2d:ae:87:ee:0d:ee:55:a7:54:0a:1f:12: 42:8e:dd:59:9e:f1:8e:2a:f4:2c:ae:70:bc:a0:91:55:26:67: ac:54:a1:f3:b9:99:1b:0e:55:cf:3a:3e:c8:b9:fc:6f:dd:74: ed:6e:29:b0:ab:45:b4:9d:63:07:04:2f:77:6f:fd:1f:d5:3e: 1a:5e:9f:b2:e8:4c:9b:84:07:8d:28:55:3f:a2:b0:a7:96:9d: 1b:75:47:8f:ae:74:4e:dc:41:37:b8:97:ca:e4:7a:be:5b:81: c0:5b:03:c9:46:f5:14:92:41:fc:f4:ad:d4:ec:0c:05:85:0d: 75:fc:6e:84:19:62:b7:8c:8e:fc:36:22:f8:2e:03:9a:ad:79: b8:b4:94:90:12:54:d4:d3:38:08:da:22:bd:bf:92:24:51:7f: 9c:ac:b8:54:f0:22:b6:d3:67:15:d3:ef:a8:37:dd:01:9f:0b: 44:bc:3d:be:ba:a8:3c:e8:5f:bd:49:d4:9d:19:35:2d:21:9c: 02:15:db:46:59:a1:7e:95:d7:4b:37:25:ac:3f:e8:8e:da:86: b6:ca:25:6b -----BEGIN CERTIFICATE----- MIIFFjCCA/6gAwIBAgISAZoHgQpCAB+kwuNTTtDO1P7IMA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKGY2YzNlMDI3ZDJkMWMyZDM2ZDdjOTU0ODY3MjI2YzgzYjY1 ZWI1NmYwHhcNMjUxMDIxMTYwMTI4WhcNMjUxMDIyMTYwMTI4WjAzMTEwLwYDVQQD EyhmMDQ3MjJlNTc0OWU2YWQ4NDhhNDg3NzlmZTdkNTJhNTY5Y2IzZDljMIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAvv1TjPnX2KxVKMzTRlAFPXJYvu3/ 4eLdXLlYvlOQLfALTwcztSoTKM8OVvu11c0C47RE8AIZnV5inFJ3k9Zp0N6/U1DJ dwOQv+087iVx9/lHqVyGc+CNEwYSBTfM/zHQAJXF0Tq4JyFVGIcBN+QLMGiy+5zH 2w2ZtUjxNZ2OO3SAVtO5mEDtHvQdT/qX9OqZZ+6DU+xqHM2jf1BrtDpmdKCk6uLi RnZbKigJFSxgoXC8yruivVUCkByNdcYVssrq+xGEHzMq6ngup/M7WYiKIIP58ECk p0n7+bRMnIedswrJAOjOnfZ1j6ORqPyFEds9NtlQtiDfKAyX28+rfXjmmwIDAQAB o4ICIjCCAh4wHQYDVR0OBBYEFPBHIuV0nmrYSKSHef59UqVpyz2cMB8GA1UdIwQY MBaAFPbD4CfS0cLTbXyVSGcibIO2XrVvMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvOXNQZ0o5TFJ3dE50ZkpWSVp5SnNnN1pldFc4LmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC8zZi8yYjI4NzgtNWI3OS00MGY3LWI0YjUt MzU2YzRkN2JiNDUyLzEvOXNQZ0o5TFJ3dE50ZkpWSVp5SnNnN1pldFc4Lm1mdDCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC8zZi8yYjI4NzgtNWI3OS00MGY3LWI0YjUtMzU2YzRkN2JiNDUy LzEvOXNQZ0o5TFJ3dE50ZkpWSVp5SnNnN1pldFc4LmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAzlI42MD4 GeCFFLSkP7QNNowgFU3hePOPo4AcBKfWuL77wgBjmk995OSLLa6H7g3uVadUCh8S Qo7dWZ7xjir0LK5wvKCRVSZnrFSh87mZGw5Vzzo+yLn8b9107W4psKtFtJ1jBwQv d2/9H9U+Gl6fsuhMm4QHjShVP6Kwp5adG3VHj650TtxBN7iXyuR6vluBwFsDyUb1 FJJB/PSt1OwMBYUNdfxuhBlit4yO/DYi+C4Dmq15uLSUkBJU1NM4CNoivb+SJFF/ nKy4VPAittNnFdPvqDfdAZ8LRLw9vrqoPOhfvUnUnRk1LSGcAhXbRlmhfpXXSzcl rD/ojtqGtsolaw== -----END CERTIFICATE-----Generated at Tue Oct 21 22:52:10 2025 by rpki-client