$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/4a/768fdb-d1b5-4bef-bcbd-4924fa000b7c/1/pjvMbSX3R2-7PsM_bbw-nurZIhI.mft File: pjvMbSX3R2-7PsM_bbw-nurZIhI.mft (raw, json) Hash identifier: N1aib/xVoUipK8zKDU5GmrQb7GyH2FOTReifbSpX50c= Subject key identifier: 30:6A:BF:E9:5A:15:B3:80:24:C0:82:F6:E8:15:C7:01:3D:F8:38:44 Authority key identifier: A6:3B:CC:6D:25:F7:47:6F:BB:3E:C3:3F:6D:BC:3E:9E:EA:D9:22:12 Certificate issuer: /CN=a63bcc6d25f7476fbb3ec33f6dbc3e9eead92212 Certificate serial: 019A2D445C0AE3A758AFF6A81F1F1739D979 Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/pjvMbSX3R2-7PsM_bbw-nurZIhI.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/4a/768fdb-d1b5-4bef-bcbd-4924fa000b7c/1/pjvMbSX3R2-7PsM_bbw-nurZIhI.mft Manifest number: 0A60 Signing time: Wed 29 Oct 2025 00:00:45 +0000 Manifest this update: Wed 29 Oct 2025 00:00:45 +0000 Manifest next update: Thu 30 Oct 2025 00:00:45 +0000 Files and hashes: 1: 5NFcVQOlS2SfRA9_dseHho-9-mc.roa (hash: swfI8aXvx2sxn3YOzxRnlDU7qvwOILHJAwX26Y3ztqI=) 2: 719PZLmeHqbujtRsKmvo5771XIo.roa (hash: bsKRuhzJIveVWiHQvKvv+dLt6oNf3d66tNY6ht9/C3A=) 3: 8WUQrdzKsEZUNzZ9k3E9ajfkd5s.roa (hash: Ixz0hSpVqJJ/oAfsncTGxOv3fHWBSaH9gBGjqTv8vpQ=) 4: FHXWFrj4nreKJjXTfDKCc6Y16Is.roa (hash: PfuW04ELrwKUUeQD8qGy+/BFhBo8C5J05OWPOUMFx5w=) 5: Ho4pDAaaconFe5cZ7ygze1a44Xo.roa (hash: 1pC6hpICFpbgfqlZn7adq2AVfLKO5t0AC5KWofkjFSE=) 6: Kd5CFoG07kPDgqUGQpHj24zQka8.roa (hash: +2s4BraFjLJP4x9hMH6DgHfMWVkWCLxuz2cF8ghToGs=) 7: NYJYw1BTKJV56akoY5ZQRJna-MA.roa (hash: brwHoHz9mi1vg8NUkbqZqqePDdu1Ej44xmauCwQ9Qac=) 8: TLEdQvZiEPlpX35O8B6oknJfuyE.roa (hash: AdjCtV/JftiFEQtyk78ssQUWpqAhZBfMUWjoyo3BngI=) 9: fBfhsJw2d6Op2y70b533dv-T4j4.roa (hash: B8cZmEngTY2Ne9QwtzyJ6aeIrWSAdYH7Des5rTXKgP4=) 10: llDWmhOefXO8IEqWPWUkZ5i_24s.roa (hash: XeNUGBDk8VTp9kEpdKJIEwiFSWpypBSE1zJ9FDTFVes=) 11: pjvMbSX3R2-7PsM_bbw-nurZIhI.crl (hash: ZfHZncVwx45X72rhEQ5tS8C1ZQTukeuBeBc+GEI6YJI=) Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/4a/768fdb-d1b5-4bef-bcbd-4924fa000b7c/1/pjvMbSX3R2-7PsM_bbw-nurZIhI.crl rsync://rpki.ripe.net/repository/DEFAULT/4a/768fdb-d1b5-4bef-bcbd-4924fa000b7c/1/pjvMbSX3R2-7PsM_bbw-nurZIhI.mft rsync://rpki.ripe.net/repository/DEFAULT/pjvMbSX3R2-7PsM_bbw-nurZIhI.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Wed 29 Oct 2025 23:00:03 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9a:2d:44:5c:0a:e3:a7:58:af:f6:a8:1f:1f:17:39:d9:79 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=a63bcc6d25f7476fbb3ec33f6dbc3e9eead92212 Validity Not Before: Oct 29 00:00:45 2025 GMT Not After : Oct 30 00:00:45 2025 GMT Subject: CN=306abfe95a15b38024c082f6e815c7013df83844 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:cf:8f:ba:2c:b5:e4:9d:82:bb:49:fa:d7:4b:77: e4:89:52:bd:03:42:33:22:2c:b7:6a:f2:fa:ee:26: e5:64:fc:ae:ee:65:e8:1b:67:6c:a7:07:1e:25:fd: 68:2c:e8:54:7f:2d:db:51:22:ea:ec:81:ab:08:45: 75:07:ab:6f:87:3c:ae:37:c7:d5:d4:be:82:e5:6b: f5:7a:50:b1:ac:5c:bd:60:ed:1f:7e:24:61:b2:04: b5:73:a1:1b:54:ea:65:42:72:1f:38:39:12:6e:0c: ff:70:4b:36:42:67:ea:1c:73:7c:73:fd:f7:8a:ef: a0:19:b3:d5:5d:da:82:22:90:14:d9:b0:6a:1f:bb: 67:7f:03:8e:9a:6c:e0:01:d8:60:72:83:31:72:b5: 32:65:eb:5a:85:b0:a4:89:59:9c:e9:5f:de:5e:35: 87:b2:32:45:46:80:1c:55:fc:5e:05:f1:28:0b:7b: c7:f8:03:a4:97:ca:98:77:b7:6c:34:be:26:45:50: cc:fd:74:ce:22:44:f1:47:de:4c:24:95:96:68:0c: 1c:a9:63:73:84:19:22:3b:3b:76:1f:ef:6a:5d:89: ac:98:15:84:ef:4d:51:e0:6c:48:2c:1a:37:5e:69: ba:cb:88:21:b8:da:cd:6b:b3:1e:17:3b:ff:7e:83: 8e:ad Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 30:6A:BF:E9:5A:15:B3:80:24:C0:82:F6:E8:15:C7:01:3D:F8:38:44 X509v3 Authority Key Identifier: keyid:A6:3B:CC:6D:25:F7:47:6F:BB:3E:C3:3F:6D:BC:3E:9E:EA:D9:22:12 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/pjvMbSX3R2-7PsM_bbw-nurZIhI.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/4a/768fdb-d1b5-4bef-bcbd-4924fa000b7c/1/pjvMbSX3R2-7PsM_bbw-nurZIhI.mft X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/4a/768fdb-d1b5-4bef-bcbd-4924fa000b7c/1/pjvMbSX3R2-7PsM_bbw-nurZIhI.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 30:f3:d0:1e:e2:01:48:14:ac:b6:d2:36:26:e4:43:da:6c:ed: 11:02:2c:1b:88:66:c6:50:a2:e2:c8:37:77:83:e0:84:bf:bc: 54:84:57:19:46:7e:ae:ad:df:83:3a:07:c8:39:45:a8:86:40: 88:3d:d9:d0:ac:5b:11:13:c4:83:ec:e9:60:9b:fd:88:6c:87: d6:6b:9b:bb:35:b2:d5:8b:fd:66:33:69:5b:8d:13:42:fc:5b: 03:7e:3c:8b:a9:02:4a:66:ca:a2:73:a5:50:80:43:81:36:d3: 81:50:cf:7b:04:43:0e:ae:d6:72:77:e6:71:c3:c3:2a:3b:41: 70:50:68:43:c4:cf:59:1d:56:3c:14:d8:16:6e:f7:c9:b6:83: 04:29:4a:90:6b:5d:3f:0c:09:9e:a2:7a:e5:11:76:a2:55:98: b8:c2:1b:2b:a2:73:9f:1a:7b:c1:0e:16:03:75:79:73:04:1e: f1:2d:9f:27:4d:9f:35:51:2b:ca:ab:c8:6c:f5:5b:66:ea:23: 15:cc:43:70:5c:22:ab:a8:17:ad:ff:3d:7d:01:e9:5e:55:8c: 18:3b:94:ee:3b:6e:2e:47:ca:1a:89:a9:3f:d3:d5:9b:83:26: ad:55:a3:04:36:36:e2:e2:a0:48:28:77:c2:4d:0a:ed:15:81: 09:58:ce:a4 -----BEGIN CERTIFICATE----- MIIFFjCCA/6gAwIBAgISAZotRFwK46dYr/aoHx8XOdl5MA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKGE2M2JjYzZkMjVmNzQ3NmZiYjNlYzMzZjZkYmMzZTllZWFk OTIyMTIwHhcNMjUxMDI5MDAwMDQ1WhcNMjUxMDMwMDAwMDQ1WjAzMTEwLwYDVQQD EygzMDZhYmZlOTVhMTViMzgwMjRjMDgyZjZlODE1YzcwMTNkZjgzODQ0MIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAz4+6LLXknYK7SfrXS3fkiVK9A0Iz Iiy3avL67iblZPyu7mXoG2dspwceJf1oLOhUfy3bUSLq7IGrCEV1B6tvhzyuN8fV 1L6C5Wv1elCxrFy9YO0ffiRhsgS1c6EbVOplQnIfODkSbgz/cEs2QmfqHHN8c/33 iu+gGbPVXdqCIpAU2bBqH7tnfwOOmmzgAdhgcoMxcrUyZetahbCkiVmc6V/eXjWH sjJFRoAcVfxeBfEoC3vH+AOkl8qYd7dsNL4mRVDM/XTOIkTxR95MJJWWaAwcqWNz hBkiOzt2H+9qXYmsmBWE701R4GxILBo3Xmm6y4ghuNrNa7MeFzv/foOOrQIDAQAB o4ICIjCCAh4wHQYDVR0OBBYEFDBqv+laFbOAJMCC9ugVxwE9+DhEMB8GA1UdIwQY MBaAFKY7zG0l90dvuz7DP228Pp7q2SISMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvcGp2TWJTWDNSMi03UHNNX2Jidy1udXJaSWhJLmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC80YS83NjhmZGItZDFiNS00YmVmLWJjYmQt NDkyNGZhMDAwYjdjLzEvcGp2TWJTWDNSMi03UHNNX2Jidy1udXJaSWhJLm1mdDCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC80YS83NjhmZGItZDFiNS00YmVmLWJjYmQtNDkyNGZhMDAwYjdj LzEvcGp2TWJTWDNSMi03UHNNX2Jidy1udXJaSWhJLmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAMPPQHuIB SBSsttI2JuRD2mztEQIsG4hmxlCi4sg3d4PghL+8VIRXGUZ+rq3fgzoHyDlFqIZA iD3Z0KxbERPEg+zpYJv9iGyH1mubuzWy1Yv9ZjNpW40TQvxbA348i6kCSmbKonOl UIBDgTbTgVDPewRDDq7WcnfmccPDKjtBcFBoQ8TPWR1WPBTYFm73ybaDBClKkGtd PwwJnqJ65RF2olWYuMIbK6Jznxp7wQ4WA3V5cwQe8S2fJ02fNVEryqvIbPVbZuoj FcxDcFwiq6gXrf89fQHpXlWMGDuU7jtuLkfKGompP9PVm4MmrVWjBDY24uKgSCh3 wk0K7RWBCVjOpA== -----END CERTIFICATE-----Generated at Wed Oct 29 09:10:46 2025 by rpki-client