$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/47/bc7078-1ee4-42f1-bc34-1d21d1bce3fe/1/I0tUsRmns-_xUwhbcxVQfNhROg8.mft File: I0tUsRmns-_xUwhbcxVQfNhROg8.mft (raw, json) Hash identifier: xVn7gRTocd1huDsryDqqhQMnw8P2H48MfHI78AeC750= Subject key identifier: E7:05:96:8F:1F:8F:10:36:60:AA:90:FA:8D:25:A9:DF:89:06:5F:78 Authority key identifier: 23:4B:54:B1:19:A7:B3:EF:F1:53:08:5B:73:15:50:7C:D8:51:3A:0F Certificate issuer: /CN=234b54b119a7b3eff153085b7315507cd8513a0f Certificate serial: 019A1986AD31DEAB346969E7BEBD8F45D171 Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/I0tUsRmns-_xUwhbcxVQfNhROg8.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/47/bc7078-1ee4-42f1-bc34-1d21d1bce3fe/1/I0tUsRmns-_xUwhbcxVQfNhROg8.mft Manifest number: 0D32 Signing time: Sat 25 Oct 2025 04:00:47 +0000 Manifest this update: Sat 25 Oct 2025 04:00:47 +0000 Manifest next update: Sun 26 Oct 2025 04:00:47 +0000 Files and hashes: 1: 2tV1T5SBsSkKar1qXX5FYlQ_B9Q.roa (hash: mGLI3Jd52qgMG50087Vl0ag+Rgi85Yfd8348tK3nJlQ=) 2: 9CjEL92KVQbBIKjAH6PWgI9d9kA.roa (hash: CxlINazLO+svbCxijVW6/kRGdkNG420xQ9K3jp5I7bo=) 3: 9Q-K0yA0D9jdkGXn7ifhVh2hLe4.roa (hash: BhOE66QanPWqjjysyWqBU6hcSToV2kkgkpmWedK9Plo=) 4: BKpPZ6YhMA786wWelQvZ2FdIeg0.roa (hash: CY94cVx1ALq/cp1lEiwu3JzO7Vk53LXHozpiwU2ifHA=) 5: Gg5xBTPmG5wIfgvjDfofedqUN2I.roa (hash: 44BexOUoVzM2f1vahHLSGVHdqnL6HKMPG3ed5PmM4sw=) 6: I0tUsRmns-_xUwhbcxVQfNhROg8.crl (hash: ZnahUS8uLPENSElsQql6Hbo/3psUbEexK3rkeqdrYpw=) 7: KfWHlYFQnzVI2dPuoiLZqsly00A.roa (hash: hXW7e+AyYxT2PE5t8wRUT3atz/+WaH8gt4XQgdBp/mU=) 8: LtctFlc4GRCf3PIlxO5Sz70Upcc.roa (hash: 9oaNZGvrfQP+yRIBwwcg5U7jui8/sOP7Dz6ZLTuPIgM=) 9: LxwAd59gPAFiSwQsp6U5bWHTUIA.roa (hash: sV/jv6UM3eB6Fepo8zmoDeIxV8A3Cp94EBt2zbiu7+M=) 10: M73NPvrSZwGhIOTA9SbUvHl1x90.roa (hash: ijksxiMRPCxOAqaVav7odzv/IiE5tQUZQM4rRqWGT00=) 11: P4Ngmm4fscIJdjrtcZXwEWC6af0.roa (hash: Dgr4uE36WEf5Xw9kH8tw5qMQ+ewLeqeUvdPupgorbKg=) 12: gspg21PC-Bi6SGHc2DwZhP3SxPE.roa (hash: za152yl/mt+IWnj6LxRFIHIPMleLO2z2bWoNpUAX6js=) 13: nppvTips8XGcmj9VgC_a0xkLzT8.roa (hash: +FXbEH/4T1tplmkgWcOzmoIVkqvQhGApNb34NJo2CWU=) 14: urBSbMAYWiUVjS4RHFmzGqwvjpw.roa (hash: rG62D9ZHzopifBP96CZirceLJDCthMyab0aYX69q+Bo=) 15: y9rvtnyXZQSaHcISGufCbgd9oMg.roa (hash: YtKgQZ+a37E4WaxSPAYmpHW8Z8QKRoCD8fhZcaauCRA=) Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/47/bc7078-1ee4-42f1-bc34-1d21d1bce3fe/1/I0tUsRmns-_xUwhbcxVQfNhROg8.crl rsync://rpki.ripe.net/repository/DEFAULT/47/bc7078-1ee4-42f1-bc34-1d21d1bce3fe/1/I0tUsRmns-_xUwhbcxVQfNhROg8.mft rsync://rpki.ripe.net/repository/DEFAULT/I0tUsRmns-_xUwhbcxVQfNhROg8.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Sun 26 Oct 2025 02:00:03 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9a:19:86:ad:31:de:ab:34:69:69:e7:be:bd:8f:45:d1:71 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=234b54b119a7b3eff153085b7315507cd8513a0f Validity Not Before: Oct 25 04:00:47 2025 GMT Not After : Oct 26 04:00:47 2025 GMT Subject: CN=e705968f1f8f103660aa90fa8d25a9df89065f78 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:9a:89:2b:8a:9e:a3:92:34:f5:35:83:4d:33:4e: e6:02:72:4f:50:30:7c:77:2e:0b:44:49:45:37:6e: 89:83:d4:b2:96:7c:42:e4:9f:1d:df:24:85:b6:97: 5b:6f:5e:81:0c:1e:85:71:93:2d:d4:0b:8b:eb:b2: 17:29:69:dd:e5:6d:48:50:c5:c0:a3:49:62:3b:83: 0e:cf:ff:55:6d:f7:fd:35:0d:d8:02:f4:04:6e:ec: 58:5e:a3:02:35:82:2d:ab:87:f2:87:5f:ac:9b:62: ef:b6:2c:74:13:3d:55:9a:11:a5:80:eb:26:ff:e2: d2:9a:02:34:8c:da:b5:7a:9b:1d:d8:bf:73:dd:6e: ec:76:f9:8c:e0:73:ea:4d:e4:9c:12:d0:24:36:10: 58:8c:16:9f:4c:49:cb:f3:8a:ed:44:59:cb:3b:1d: f6:48:da:38:8b:16:f5:2c:38:e4:e5:df:58:0a:15: aa:c5:0d:2e:89:36:d6:00:76:52:ab:79:97:10:31: 7f:28:02:85:11:00:2b:a4:f4:dc:6f:bd:99:da:ba: cb:f5:0c:37:da:1d:cd:2d:b8:35:8d:b0:ad:6a:2e: da:b1:04:68:28:bc:de:39:ed:f1:72:19:fa:09:b1: 4a:fb:2f:70:8a:aa:f4:10:ff:be:80:ba:3f:d2:dc: 17:29 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: E7:05:96:8F:1F:8F:10:36:60:AA:90:FA:8D:25:A9:DF:89:06:5F:78 X509v3 Authority Key Identifier: keyid:23:4B:54:B1:19:A7:B3:EF:F1:53:08:5B:73:15:50:7C:D8:51:3A:0F X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/I0tUsRmns-_xUwhbcxVQfNhROg8.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/47/bc7078-1ee4-42f1-bc34-1d21d1bce3fe/1/I0tUsRmns-_xUwhbcxVQfNhROg8.mft X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/47/bc7078-1ee4-42f1-bc34-1d21d1bce3fe/1/I0tUsRmns-_xUwhbcxVQfNhROg8.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 52:97:3a:58:cd:1e:23:cc:4a:24:56:fa:6a:44:a1:ef:e6:f6: a8:56:8d:87:51:d2:46:76:b5:48:3f:10:d5:fb:a5:f8:3a:64: f4:bd:76:0a:0c:08:82:5b:01:4c:88:c5:4d:7d:35:c9:db:56: 0c:ff:d5:c7:52:d4:86:c2:f1:b0:07:c8:cf:91:95:e6:ea:81: 85:95:25:b5:8b:9c:f4:ad:35:88:16:eb:f6:fc:d4:cb:50:b7: e7:ac:a5:bd:52:29:71:07:54:40:e9:1f:09:a8:5f:a9:d8:db: 05:27:82:40:00:d1:e8:b9:9d:04:8c:02:56:c3:41:89:26:8b: 24:90:2f:e3:3b:13:23:20:87:55:90:5e:12:5d:e7:ba:ff:8e: ad:bb:4d:5d:3e:20:7e:ea:eb:81:7c:19:2e:0e:c3:31:d0:64: 46:6d:36:6b:4e:5e:18:22:8d:7b:f2:0a:d1:0d:54:f6:a5:e2: 7b:6b:d7:02:c0:7f:75:34:3e:93:eb:8a:b6:84:61:ba:fe:92: cd:14:87:ff:e1:ff:af:88:cf:d5:93:11:af:53:60:76:d2:b1: e8:27:7b:f4:ef:fa:7b:eb:a1:e3:64:25:50:13:33:9b:52:7f: 41:96:4f:e0:f1:db:61:7f:64:b1:7e:96:07:34:97:dc:d0:8b: da:81:29:8e -----BEGIN CERTIFICATE----- MIIFFjCCA/6gAwIBAgISAZoZhq0x3qs0aWnnvr2PRdFxMA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKDIzNGI1NGIxMTlhN2IzZWZmMTUzMDg1YjczMTU1MDdjZDg1 MTNhMGYwHhcNMjUxMDI1MDQwMDQ3WhcNMjUxMDI2MDQwMDQ3WjAzMTEwLwYDVQQD EyhlNzA1OTY4ZjFmOGYxMDM2NjBhYTkwZmE4ZDI1YTlkZjg5MDY1Zjc4MIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAmokrip6jkjT1NYNNM07mAnJPUDB8 dy4LRElFN26Jg9SylnxC5J8d3ySFtpdbb16BDB6FcZMt1AuL67IXKWnd5W1IUMXA o0liO4MOz/9Vbff9NQ3YAvQEbuxYXqMCNYItq4fyh1+sm2Lvtix0Ez1VmhGlgOsm /+LSmgI0jNq1epsd2L9z3W7sdvmM4HPqTeScEtAkNhBYjBafTEnL84rtRFnLOx32 SNo4ixb1LDjk5d9YChWqxQ0uiTbWAHZSq3mXEDF/KAKFEQArpPTcb72Z2rrL9Qw3 2h3NLbg1jbCtai7asQRoKLzeOe3xchn6CbFK+y9wiqr0EP++gLo/0twXKQIDAQAB o4ICIjCCAh4wHQYDVR0OBBYEFOcFlo8fjxA2YKqQ+o0lqd+JBl94MB8GA1UdIwQY MBaAFCNLVLEZp7Pv8VMIW3MVUHzYUToPMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvSTB0VXNSbW5zLV94VXdoYmN4VlFmTmhST2c4LmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC80Ny9iYzcwNzgtMWVlNC00MmYxLWJjMzQt MWQyMWQxYmNlM2ZlLzEvSTB0VXNSbW5zLV94VXdoYmN4VlFmTmhST2c4Lm1mdDCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC80Ny9iYzcwNzgtMWVlNC00MmYxLWJjMzQtMWQyMWQxYmNlM2Zl LzEvSTB0VXNSbW5zLV94VXdoYmN4VlFmTmhST2c4LmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAUpc6WM0e I8xKJFb6akSh7+b2qFaNh1HSRna1SD8Q1ful+Dpk9L12CgwIglsBTIjFTX01ydtW DP/Vx1LUhsLxsAfIz5GV5uqBhZUltYuc9K01iBbr9vzUy1C356ylvVIpcQdUQOkf CahfqdjbBSeCQADR6LmdBIwCVsNBiSaLJJAv4zsTIyCHVZBeEl3nuv+OrbtNXT4g furrgXwZLg7DMdBkRm02a05eGCKNe/IK0Q1U9qXie2vXAsB/dTQ+k+uKtoRhuv6S zRSH/+H/r4jP1ZMRr1NgdtKx6Cd79O/6e+uh42QlUBMzm1J/QZZP4PHbYX9ksX6W BzSX3NCL2oEpjg== -----END CERTIFICATE-----Generated at Sat Oct 25 10:42:07 2025 by rpki-client