$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/48/bc66d7-57ab-475d-96ba-89b6c32315c2/1/f2vRprBGJcVx2DD4eLHAI4JHQIw.mft File: f2vRprBGJcVx2DD4eLHAI4JHQIw.mft (raw, json) Hash identifier: nleBH48Ux4VV6k0xVeLC44oH0RjXzBcMGUzlQkMP+Ts= Subject key identifier: FF:85:60:D5:B9:AA:69:DD:7B:C4:44:CA:21:B6:7C:B2:98:B0:67:C7 Authority key identifier: 7F:6B:D1:A6:B0:46:25:C5:71:D8:30:F8:78:B1:C0:23:82:47:40:8C Certificate issuer: /CN=7f6bd1a6b04625c571d830f878b1c0238247408c Certificate serial: 019A4B4E9A8CCFAEA102761860342E2E7E30 Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/f2vRprBGJcVx2DD4eLHAI4JHQIw.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/48/bc66d7-57ab-475d-96ba-89b6c32315c2/1/f2vRprBGJcVx2DD4eLHAI4JHQIw.mft Manifest number: 05AE Signing time: Mon 03 Nov 2025 20:00:33 +0000 Manifest this update: Mon 03 Nov 2025 20:00:33 +0000 Manifest next update: Tue 04 Nov 2025 20:00:33 +0000 Files and hashes: 1: 9RdZIw-S-FYoTEGCNtUVTMr1UI0.roa (hash: cuWu4zoZh39hHnMbQsbn1GavX5fkwgR9EpdjwPAYmFM=) 2: C36HYE9g7Segc4lKsITQsAPbk3A.roa (hash: xJXCT5dY3X53zr13t7CE1ukR4VVrDp6NvKtvl+FjEKs=) 3: J9sdBRndgWMXRbtrEj6DzAaduFM.roa (hash: 1mU1gIeMkOu38sOl5UhcF+y7DrqaJPBXlv7kx0JqTAw=) 4: K6r4JbxghClQGiOJgPHD3qM06uA.roa (hash: Z7BS3eMvEl2jFHcYWZaavqiGcVmavHPtMtk5iNM38S8=) 5: WLnNiHQkhlfgINfxpD2br98XvwA.roa (hash: meEdE8yNwOSarbCrMNr+5gmR/PbuI8v0hmQMO5QzIaA=) 6: f2vRprBGJcVx2DD4eLHAI4JHQIw.crl (hash: g+qdseyQJyqm8bdNAs/0amuJ6KCSChooi3oCd3vD3nQ=) 7: jrWoUX2I08t96DUAzMXpfrjbImw.roa (hash: 5fZxekpC+R8XTkzuMqL1WK63VlO9GSurjZzzW/k5L60=) 8: nWYHniVnDldwYunEGsc0VWWiVYU.roa (hash: VRa9zgOVZdpaRaM8P3APLwpP4Czcpn3M9s3Qb5fNEps=) 9: pF_pVy2TIwjzEOlTFDghAKXtbzQ.roa (hash: hczSlLK7qtHA0sxQPsDXkLAUtpEz88IsWfA1PqBcBfA=) 10: sZTa8Qa0TVk8uF_RHqCxSF_1GR0.roa (hash: u/AILdLiccMU6aDdQlKIvISGgDYDPhdz3YzBRcZY5lA=) Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/48/bc66d7-57ab-475d-96ba-89b6c32315c2/1/f2vRprBGJcVx2DD4eLHAI4JHQIw.crl rsync://rpki.ripe.net/repository/DEFAULT/48/bc66d7-57ab-475d-96ba-89b6c32315c2/1/f2vRprBGJcVx2DD4eLHAI4JHQIw.mft rsync://rpki.ripe.net/repository/DEFAULT/f2vRprBGJcVx2DD4eLHAI4JHQIw.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Tue 04 Nov 2025 15:12:03 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9a:4b:4e:9a:8c:cf:ae:a1:02:76:18:60:34:2e:2e:7e:30 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=7f6bd1a6b04625c571d830f878b1c0238247408c Validity Not Before: Nov 3 20:00:33 2025 GMT Not After : Nov 4 20:00:33 2025 GMT Subject: CN=ff8560d5b9aa69dd7bc444ca21b67cb298b067c7 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:af:15:25:34:c5:0e:ff:03:52:54:81:79:ba:b6: b5:bb:5c:ec:1b:e8:fd:6e:a6:7d:3d:e6:14:ac:6f: ca:b8:2d:49:ff:5c:3d:61:3d:c6:37:33:2c:1f:61: ce:17:77:ec:9c:ac:df:b8:ed:6b:d0:6c:fd:b4:5e: bc:6b:28:d4:17:c8:e8:fb:aa:17:68:6a:a1:9f:27: c8:f5:41:50:ba:57:77:c0:2c:b3:54:8b:26:a1:c8: bc:4c:fe:46:a5:5e:e2:2e:9a:3b:bc:0d:27:bd:8d: 91:65:62:4e:53:71:82:1a:87:64:ff:07:13:8a:2b: 5d:71:ea:8e:2c:ad:9e:78:38:07:fa:37:4b:0a:c9: 13:04:3b:08:4e:e4:f6:30:0f:ce:75:38:a6:5b:a9: 58:2f:b4:87:ea:9b:46:aa:26:ab:b0:bf:43:fb:33: 15:ae:a7:1c:64:28:d0:5d:9b:c5:06:7f:53:02:7e: d5:0e:c9:fa:5d:b9:64:9d:e9:3b:1c:a0:01:da:61: 4a:ec:23:5c:fe:49:92:5e:a5:ae:ec:7a:0a:13:de: 5f:e0:61:28:2d:f0:a6:fd:dd:1b:6c:5d:0a:b0:12: b6:59:15:2b:d4:ba:07:78:5e:0f:00:a8:00:df:ce: 0b:41:ec:f4:2b:72:a9:dd:70:26:7a:3c:03:9f:d5: c1:11 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: FF:85:60:D5:B9:AA:69:DD:7B:C4:44:CA:21:B6:7C:B2:98:B0:67:C7 X509v3 Authority Key Identifier: keyid:7F:6B:D1:A6:B0:46:25:C5:71:D8:30:F8:78:B1:C0:23:82:47:40:8C X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/f2vRprBGJcVx2DD4eLHAI4JHQIw.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/48/bc66d7-57ab-475d-96ba-89b6c32315c2/1/f2vRprBGJcVx2DD4eLHAI4JHQIw.mft X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/48/bc66d7-57ab-475d-96ba-89b6c32315c2/1/f2vRprBGJcVx2DD4eLHAI4JHQIw.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 96:7d:f9:85:ee:05:08:f3:f6:31:39:11:48:1b:fe:3f:35:98: f3:12:46:ce:fd:c6:75:49:8b:4b:d1:dc:55:18:5b:6f:a0:33: 97:2b:a7:73:7d:b6:45:95:0e:4b:ec:ae:bb:ac:3a:07:8a:21: 58:8d:82:f7:43:c2:64:cf:59:70:67:af:5e:82:7a:e6:f2:f7: 9d:28:0a:05:5e:e5:a0:f8:cb:3e:77:96:88:19:7f:fe:66:73: e7:0a:ab:4b:21:a7:45:a2:05:a1:bd:21:c3:06:e3:69:4d:22: 1a:e4:20:a6:69:2a:b3:13:af:bf:b6:a3:7b:7f:d3:00:f2:f5: 62:45:86:fe:f8:32:ef:bc:39:c9:77:a5:37:c9:6c:41:16:42: 0a:8d:1f:4c:d0:e5:f5:69:31:55:d9:03:0b:26:38:78:d3:21: 8f:46:89:a6:25:8c:5a:78:ad:fc:be:b9:a2:a0:9d:2e:a9:97: 9f:de:72:13:0a:8a:48:b1:ad:48:f3:4d:de:45:98:36:0b:9e: 1c:fd:0b:55:44:e1:22:ef:4a:fc:40:7b:1a:22:5c:81:ed:e7: a4:b2:41:04:0e:10:d0:77:2b:9a:c7:5b:84:fd:8d:8b:a6:60: 27:3e:1a:e2:38:37:fa:04:72:98:67:ec:71:e8:65:f1:9c:81: 14:49:9e:20 -----BEGIN CERTIFICATE----- MIIFFjCCA/6gAwIBAgISAZpLTpqMz66hAnYYYDQuLn4wMA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKDdmNmJkMWE2YjA0NjI1YzU3MWQ4MzBmODc4YjFjMDIzODI0 NzQwOGMwHhcNMjUxMTAzMjAwMDMzWhcNMjUxMTA0MjAwMDMzWjAzMTEwLwYDVQQD EyhmZjg1NjBkNWI5YWE2OWRkN2JjNDQ0Y2EyMWI2N2NiMjk4YjA2N2M3MIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEArxUlNMUO/wNSVIF5ura1u1zsG+j9 bqZ9PeYUrG/KuC1J/1w9YT3GNzMsH2HOF3fsnKzfuO1r0Gz9tF68ayjUF8jo+6oX aGqhnyfI9UFQuld3wCyzVIsmoci8TP5GpV7iLpo7vA0nvY2RZWJOU3GCGodk/wcT iitdceqOLK2eeDgH+jdLCskTBDsITuT2MA/OdTimW6lYL7SH6ptGqiarsL9D+zMV rqccZCjQXZvFBn9TAn7VDsn6Xblknek7HKAB2mFK7CNc/kmSXqWu7HoKE95f4GEo LfCm/d0bbF0KsBK2WRUr1LoHeF4PAKgA384LQez0K3Kp3XAmejwDn9XBEQIDAQAB o4ICIjCCAh4wHQYDVR0OBBYEFP+FYNW5qmnde8REyiG2fLKYsGfHMB8GA1UdIwQY MBaAFH9r0aawRiXFcdgw+HixwCOCR0CMMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvZjJ2UnByQkdKY1Z4MkRENGVMSEFJNEpIUUl3LmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC80OC9iYzY2ZDctNTdhYi00NzVkLTk2YmEt ODliNmMzMjMxNWMyLzEvZjJ2UnByQkdKY1Z4MkRENGVMSEFJNEpIUUl3Lm1mdDCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC80OC9iYzY2ZDctNTdhYi00NzVkLTk2YmEtODliNmMzMjMxNWMy LzEvZjJ2UnByQkdKY1Z4MkRENGVMSEFJNEpIUUl3LmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAln35he4F CPP2MTkRSBv+PzWY8xJGzv3GdUmLS9HcVRhbb6Azlyunc322RZUOS+yuu6w6B4oh WI2C90PCZM9ZcGevXoJ65vL3nSgKBV7loPjLPneWiBl//mZz5wqrSyGnRaIFob0h wwbjaU0iGuQgpmkqsxOvv7aje3/TAPL1YkWG/vgy77w5yXelN8lsQRZCCo0fTNDl 9WkxVdkDCyY4eNMhj0aJpiWMWnit/L65oqCdLqmXn95yEwqKSLGtSPNN3kWYNgue HP0LVUThIu9K/EB7GiJcge3npLJBBA4Q0HcrmsdbhP2Ni6ZgJz4a4jg3+gRymGfs cehl8ZyBFEmeIA== -----END CERTIFICATE-----Generated at Tue Nov 4 00:37:43 2025 by rpki-client