$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/4a/8b1fac-5a21-4848-a66a-10bb4579d528/1/CnMngF3yD7XB1vTokHR0PK6ySvc.mft File: CnMngF3yD7XB1vTokHR0PK6ySvc.mft (raw, json) Hash identifier: Xu7ADfsLPykMS1WtJX3nvSRFXnotr4NBEbfNPJxIA4s= Subject key identifier: 11:DA:20:4F:33:CC:80:4A:93:9C:79:A4:BF:49:16:08:9C:66:71:08 Authority key identifier: 0A:73:27:80:5D:F2:0F:B5:C1:D6:F4:E8:90:74:74:3C:AE:B2:4A:F7 Certificate issuer: /CN=0a7327805df20fb5c1d6f4e89074743caeb24af7 Certificate serial: 019A24AEC301DDED04B1A3C68A2FC7C17CA7 Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/CnMngF3yD7XB1vTokHR0PK6ySvc.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/4a/8b1fac-5a21-4848-a66a-10bb4579d528/1/CnMngF3yD7XB1vTokHR0PK6ySvc.mft Manifest number: 170D Signing time: Mon 27 Oct 2025 08:00:24 +0000 Manifest this update: Mon 27 Oct 2025 08:00:24 +0000 Manifest next update: Tue 28 Oct 2025 08:00:24 +0000 Files and hashes: 1: 3xGVSc_p5dXZsjTjmDrPRPF-GQ4.roa (hash: 4UVd3ifNRlf9XqdwKXxRMAnZJE++WGkvCW0VWsS8y5s=) 2: AXI0xi2qyLNJTikoPIbIYoXGSqM.roa (hash: J6dTdi70cC+Xgn0MoRDsaTnvDGyEQm26GOPrxZ/rg18=) 3: CQxWaB1OicMMrqXCoQ0fopCoxdU.roa (hash: WjfHWnkqbfHKaqxUShNyRq++rhQwjg3tNVjy17YQNc4=) 4: CnMngF3yD7XB1vTokHR0PK6ySvc.crl (hash: +9f8OdOW90jy8KA7ShV6k+6EYCVfXJChXELooZ9gT5A=) 5: GopMrpyToOz7hTEn02tSlWTChNc.roa (hash: PWyNZm9NNDQb4vDrYexwTILfoeBvuqO0/ZesnD+rBMg=) 6: QY3FsKWsHL7VlMduaclRNJ3pt_U.roa (hash: H5vPCo3lKDFJhLJsXdyGxkbSr+CZKxnZxfEUf2naVGc=) 7: Zla6xxqlwjD5HGAN16Pzo29Tijg.roa (hash: XT7/Z4sfo6kElFtdLFq3BhRYhs4vxj89ZfDzgHu8Ge4=) 8: hnMtsx259zWb5DPTAskFt19vieA.roa (hash: IS/K0LmABWhq/hUi5ijfbnkS8QGQcUBWRW0f7gTisD4=) 9: rF2NbE_tOwpSRvuv6q5i4RA7Ges.roa (hash: eR6zET3xve1jmE2cHBmZXtrSF9DwLLOsmXQGl2pVTjo=) 10: ydOhopDpEgxJrzwZy5o2ywKpW8w.roa (hash: cGNA9jtDwM6OD4vlqV4K4uD26uy/JQnhTPG3oY/YMmA=) Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/4a/8b1fac-5a21-4848-a66a-10bb4579d528/1/CnMngF3yD7XB1vTokHR0PK6ySvc.crl rsync://rpki.ripe.net/repository/DEFAULT/4a/8b1fac-5a21-4848-a66a-10bb4579d528/1/CnMngF3yD7XB1vTokHR0PK6ySvc.mft rsync://rpki.ripe.net/repository/DEFAULT/CnMngF3yD7XB1vTokHR0PK6ySvc.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Tue 28 Oct 2025 08:00:02 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9a:24:ae:c3:01:dd:ed:04:b1:a3:c6:8a:2f:c7:c1:7c:a7 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=0a7327805df20fb5c1d6f4e89074743caeb24af7 Validity Not Before: Oct 27 08:00:24 2025 GMT Not After : Oct 28 08:00:24 2025 GMT Subject: CN=11da204f33cc804a939c79a4bf4916089c667108 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:95:53:2a:33:71:9d:db:ea:28:7e:ea:c7:3d:20: d6:30:c0:a3:5f:30:a0:4f:7f:a3:2b:f7:b3:50:73: 66:c8:3b:a0:d8:bc:95:c6:d4:59:9f:12:97:b8:25: 88:c8:28:99:3d:f4:54:a7:9c:dd:8d:c4:6a:48:5e: 6a:b3:ca:09:80:8d:81:94:ee:ab:83:a1:a3:69:52: 78:17:95:1f:ff:5d:07:47:ff:3f:54:7b:a5:2a:08: ce:55:51:65:51:05:4e:8c:9d:f5:31:cb:03:9c:52: 8c:1c:ae:55:cc:cb:b8:f6:a0:c6:e6:1b:d2:a7:6d: e7:fa:5b:a7:1b:9e:a6:d0:45:fe:ea:56:77:9e:35: fa:71:3f:36:7c:3b:13:6d:4a:0d:53:61:a3:df:49: 60:47:e5:f9:4f:06:3e:a1:ba:27:80:83:c2:db:eb: c7:8c:06:5e:8b:97:20:da:51:ee:8c:c6:b2:51:46: 94:00:10:b1:d5:c0:4e:b6:33:b5:44:f5:34:65:2b: 32:93:30:5c:65:72:21:5f:d5:91:c1:da:78:25:34: c4:62:f5:b8:fe:31:e7:b8:3a:92:79:71:34:da:30: 29:45:51:20:de:62:24:c9:a8:cd:f2:91:f7:57:86: 01:47:5c:a3:94:27:6b:93:30:49:ea:e4:cc:38:20: 46:99 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 11:DA:20:4F:33:CC:80:4A:93:9C:79:A4:BF:49:16:08:9C:66:71:08 X509v3 Authority Key Identifier: keyid:0A:73:27:80:5D:F2:0F:B5:C1:D6:F4:E8:90:74:74:3C:AE:B2:4A:F7 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/CnMngF3yD7XB1vTokHR0PK6ySvc.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/4a/8b1fac-5a21-4848-a66a-10bb4579d528/1/CnMngF3yD7XB1vTokHR0PK6ySvc.mft X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/4a/8b1fac-5a21-4848-a66a-10bb4579d528/1/CnMngF3yD7XB1vTokHR0PK6ySvc.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption b0:43:2f:36:6a:b9:b3:4c:41:24:fa:d3:6f:b7:a4:d3:10:18: c7:47:11:2d:e5:43:09:40:7b:31:c3:4a:1a:71:77:12:74:0f: a3:8c:9c:5f:51:c7:8b:47:db:34:e7:b2:03:19:7d:35:80:ac: 1f:af:07:e0:62:be:4c:79:20:83:04:78:bc:eb:f1:02:93:2b: 64:06:2d:06:0c:86:fe:28:7f:08:50:9c:23:e2:8b:a9:2d:fe: 03:dc:d7:e9:6e:16:49:42:e7:74:6a:88:dd:d6:b8:12:3e:d3: aa:9d:83:8f:af:f3:fd:0e:96:37:44:55:89:ac:b5:e1:1f:db: 6e:cc:01:28:e1:f4:3c:73:9f:ba:df:42:fa:50:d0:66:a3:4d: 5f:7f:b9:73:3d:49:18:a3:34:54:81:b5:56:47:55:97:4f:05: 4d:83:26:8f:87:35:03:50:00:3a:ff:bd:70:ad:2f:b9:ad:d9: 6c:f9:c0:13:15:91:22:dd:e8:c0:be:7f:4e:c2:0a:5d:67:e7: 61:6f:99:50:59:d8:82:84:46:7d:26:18:2e:0b:a6:36:1e:45: ce:94:78:43:cd:ba:2b:df:b5:3c:d4:cf:c9:71:5b:f1:b5:4b: 3e:4a:38:e0:b3:a2:8d:e0:dc:2d:88:fe:6c:38:00:60:ab:e7: 3c:ef:fc:e8 -----BEGIN CERTIFICATE----- MIIFFjCCA/6gAwIBAgISAZokrsMB3e0EsaPGii/HwXynMA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKDBhNzMyNzgwNWRmMjBmYjVjMWQ2ZjRlODkwNzQ3NDNjYWVi MjRhZjcwHhcNMjUxMDI3MDgwMDI0WhcNMjUxMDI4MDgwMDI0WjAzMTEwLwYDVQQD EygxMWRhMjA0ZjMzY2M4MDRhOTM5Yzc5YTRiZjQ5MTYwODljNjY3MTA4MIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAlVMqM3Gd2+oofurHPSDWMMCjXzCg T3+jK/ezUHNmyDug2LyVxtRZnxKXuCWIyCiZPfRUp5zdjcRqSF5qs8oJgI2BlO6r g6GjaVJ4F5Uf/10HR/8/VHulKgjOVVFlUQVOjJ31McsDnFKMHK5VzMu49qDG5hvS p23n+lunG56m0EX+6lZ3njX6cT82fDsTbUoNU2Gj30lgR+X5TwY+obongIPC2+vH jAZei5cg2lHujMayUUaUABCx1cBOtjO1RPU0ZSsykzBcZXIhX9WRwdp4JTTEYvW4 /jHnuDqSeXE02jApRVEg3mIkyajN8pH3V4YBR1yjlCdrkzBJ6uTMOCBGmQIDAQAB o4ICIjCCAh4wHQYDVR0OBBYEFBHaIE8zzIBKk5x5pL9JFgicZnEIMB8GA1UdIwQY MBaAFApzJ4Bd8g+1wdb06JB0dDyuskr3MA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvQ25NbmdGM3lEN1hCMXZUb2tIUjBQSzZ5U3ZjLmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC80YS84YjFmYWMtNWEyMS00ODQ4LWE2NmEt MTBiYjQ1NzlkNTI4LzEvQ25NbmdGM3lEN1hCMXZUb2tIUjBQSzZ5U3ZjLm1mdDCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC80YS84YjFmYWMtNWEyMS00ODQ4LWE2NmEtMTBiYjQ1NzlkNTI4 LzEvQ25NbmdGM3lEN1hCMXZUb2tIUjBQSzZ5U3ZjLmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAsEMvNmq5 s0xBJPrTb7ek0xAYx0cRLeVDCUB7McNKGnF3EnQPo4ycX1HHi0fbNOeyAxl9NYCs H68H4GK+THkggwR4vOvxApMrZAYtBgyG/ih/CFCcI+KLqS3+A9zX6W4WSULndGqI 3da4Ej7Tqp2Dj6/z/Q6WN0RViay14R/bbswBKOH0PHOfut9C+lDQZqNNX3+5cz1J GKM0VIG1VkdVl08FTYMmj4c1A1AAOv+9cK0vua3ZbPnAExWRIt3owL5/TsIKXWfn YW+ZUFnYgoRGfSYYLgumNh5FzpR4Q826K9+1PNTPyXFb8bVLPko44LOijeDcLYj+ bDgAYKvnPO/86A== -----END CERTIFICATE-----Generated at Mon Oct 27 12:01:45 2025 by rpki-client