$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/4b/f8a5d1-260a-46a4-a8e4-283fe54a6f2f/1/pM6WQKPvL-oZN0rY-Z9CPXqnx2s.mft File: pM6WQKPvL-oZN0rY-Z9CPXqnx2s.mft (raw, json) Hash identifier: PIeR81prU3M4gyRjcr+zbkwbu4O/jplgs4a/hK+IPeU= Subject key identifier: C7:A7:D2:FA:33:EC:2D:A9:58:F8:D8:70:B2:A6:E4:0D:7B:DF:FA:03 Authority key identifier: A4:CE:96:40:A3:EF:2F:EA:19:37:4A:D8:F9:9F:42:3D:7A:A7:C7:6B Certificate issuer: /CN=a4ce9640a3ef2fea19374ad8f99f423d7aa7c76b Certificate serial: 019A0DB90E08E0EE1D3680B82975D13FAE81 Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/pM6WQKPvL-oZN0rY-Z9CPXqnx2s.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/4b/f8a5d1-260a-46a4-a8e4-283fe54a6f2f/1/pM6WQKPvL-oZN0rY-Z9CPXqnx2s.mft Manifest number: 13C5 Signing time: Wed 22 Oct 2025 21:00:22 +0000 Manifest this update: Wed 22 Oct 2025 21:00:22 +0000 Manifest next update: Thu 23 Oct 2025 21:00:22 +0000 Files and hashes: 1: 3MQ1Zm2jB8qgOjCAc_a0v-3nM_o.roa (hash: T4pVm2mU2N5el1g2HcnlglhN57e23NLVS7ny7NzSBL0=) 2: 4SEUaFHVUAL3abRJwnhpLcw21dk.roa (hash: Nz767QGxnFH79p/BW/8MOsNM3RviNN1Kvy4GgZgMyGs=) 3: FCFfx3p7hHCFHlKPZobVJyLJ5MI.roa (hash: 6JV0xEEqdwivRbZdMI4zo4Wpa9PWQK4gKoasAD6odWU=) 4: IYmUJK1vApyWT119wps-ukf2n9E.roa (hash: w1dWdBHD/FLi3tR98pk3iJlbhc1nR22X1Pwn/kqhO/0=) 5: KcuMI0SBvL5BPuYJm6BH3vJKAQ0.roa (hash: s0e2eWUrZQW14pJCqfjgMZ+ViTFNuU9345bizVg0sKY=) 6: MSrSUIwYGP5OzMFaA9dwr3mO4jY.roa (hash: OHzV5kP6uhO1eFoIB7t+WKfJjHs90j+a/iXQqOXuv30=) 7: N7C2a3H5ML3ydyNI5IDIoJ6m-6U.roa (hash: FJm0Nzs6ME/1+LojcQZMLdUu/cBqlxKE16Bs75fFFLw=) 8: Nf1rHETWcCnhWhR_uM_9B2P3jb8.roa (hash: pBdKIUwSvvQqLJChVbTbSEDRXa+Ll262+ax9ivbZD0o=) 9: OFTgwkdKspRJ_TvSv6vgx_ckdLQ.roa (hash: b7UPAbBCKcuRworqLaxy25e9Gx9nfc4PaZocWvp2h84=) 10: P7ti_IIQ8gSBeG-YTlNJsuFqQ_I.roa (hash: KrffniQ2i0hPMizjKFAUVE1GuQq0ig8NP7gMfdrW5so=) 11: RzvDJbgMFFQ3RXZZowAtkGpvaYQ.roa (hash: pXgfU5zLGpdaPENK8y9IOVL5xtiIt9Fk8RRzx12JQUw=) 12: WToItz8al9Sw1IRtEOUm1ku1TzY.roa (hash: cD3Nf3okXGtPiYuFOkPnzfMJHgIYmW52aVmaOwxOEN0=) 13: dcAEUZ_ghRVpaUYo3WWA9zUPe9U.roa (hash: AsvsdGamYH2cSArWOQT5cvLOD/2t8gp5MEnt/aWjLII=) 14: mIeBpS2n4kCr0BZmoszWNjvAQck.roa (hash: sgSJy89RWLefTDlUw+TWGE3cezazErlzXNR2nAjs6uU=) 15: pM6WQKPvL-oZN0rY-Z9CPXqnx2s.crl (hash: xJZwAmDfj9iO3KxFP5hAH2Ob4mFZGeTCexB0fCpnJMQ=) 16: sVCQlL9zy4ci5k4im_qh1UgQSao.roa (hash: tXiv/i4AXQDYnVQqrjLO82vwz0zcYS5lORUFrc1ytqg=) Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/4b/f8a5d1-260a-46a4-a8e4-283fe54a6f2f/1/pM6WQKPvL-oZN0rY-Z9CPXqnx2s.crl rsync://rpki.ripe.net/repository/DEFAULT/4b/f8a5d1-260a-46a4-a8e4-283fe54a6f2f/1/pM6WQKPvL-oZN0rY-Z9CPXqnx2s.mft rsync://rpki.ripe.net/repository/DEFAULT/pM6WQKPvL-oZN0rY-Z9CPXqnx2s.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Thu 23 Oct 2025 21:00:22 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9a:0d:b9:0e:08:e0:ee:1d:36:80:b8:29:75:d1:3f:ae:81 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=a4ce9640a3ef2fea19374ad8f99f423d7aa7c76b Validity Not Before: Oct 22 21:00:22 2025 GMT Not After : Oct 23 21:00:22 2025 GMT Subject: CN=c7a7d2fa33ec2da958f8d870b2a6e40d7bdffa03 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:be:51:f2:fd:b7:b4:da:7d:23:5c:40:91:35:30: 31:7d:aa:9f:f7:6c:6e:f2:35:88:41:a0:5c:0f:02: a2:46:5b:05:d0:0a:bd:f6:97:f2:e8:05:d0:00:bb: 74:62:d9:6d:ee:fe:18:76:88:eb:50:5b:54:27:d6: 01:f5:1a:3a:fb:5f:ea:45:17:09:f0:5d:72:f8:dc: 7c:e5:d2:ed:1b:9e:d4:75:00:3c:80:e2:58:96:39: 71:3e:af:52:0a:7f:c5:a8:ad:2b:b8:9c:ff:b3:eb: 08:16:69:6c:6e:69:ab:d0:63:6f:77:54:b4:70:fd: 55:39:5e:58:59:cf:b5:db:2b:a3:0f:db:84:3a:2f: 97:5d:a4:db:6b:a3:3f:21:82:45:09:e8:b2:dd:25: aa:02:0c:1f:cb:46:9c:d1:03:0f:c5:0c:81:24:02: d3:74:2a:af:a2:e8:4d:ab:76:b7:69:0d:f7:66:ed: 0a:b9:24:30:4a:35:cd:be:45:fe:71:d0:45:5b:31: 96:20:cf:aa:30:4c:19:11:54:7c:1a:f0:3f:0a:94: 62:12:80:8d:ba:f1:ad:63:37:50:21:e5:ff:16:ac: 8c:77:c4:b8:26:da:7f:94:e2:8a:7a:b0:c4:59:31: 07:38:e0:5b:d3:85:98:07:1e:67:47:cf:86:eb:b3: b7:3f Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: C7:A7:D2:FA:33:EC:2D:A9:58:F8:D8:70:B2:A6:E4:0D:7B:DF:FA:03 X509v3 Authority Key Identifier: keyid:A4:CE:96:40:A3:EF:2F:EA:19:37:4A:D8:F9:9F:42:3D:7A:A7:C7:6B X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/pM6WQKPvL-oZN0rY-Z9CPXqnx2s.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/4b/f8a5d1-260a-46a4-a8e4-283fe54a6f2f/1/pM6WQKPvL-oZN0rY-Z9CPXqnx2s.mft X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/4b/f8a5d1-260a-46a4-a8e4-283fe54a6f2f/1/pM6WQKPvL-oZN0rY-Z9CPXqnx2s.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 97:ea:e1:60:ca:1f:9d:29:98:59:00:b6:ea:97:34:73:25:7a: f0:78:58:2f:0f:6d:1b:ca:83:36:c4:ee:53:b9:6b:d7:fb:e4: e9:a9:85:a9:77:02:f4:d0:33:7a:8d:69:d7:b8:ac:ac:ef:6c: 28:0a:d1:8d:ea:d0:5b:25:20:a9:58:bb:9f:ab:89:29:17:d8: 1a:a7:f8:8e:94:07:66:14:09:69:16:95:9d:a0:94:61:fd:96: 84:10:19:81:82:a4:b4:2f:c4:c2:dd:e0:07:0f:ee:81:30:9f: a3:6a:d2:05:53:4f:8a:59:75:3c:e6:2d:12:8f:a1:0f:16:da: 8a:83:c4:67:30:b1:d3:6b:12:7e:d9:f9:9b:c3:8a:f2:6d:2b: e6:84:97:54:3d:ad:37:b9:81:71:1c:1c:56:c4:a8:71:40:c1: 43:1e:37:12:dd:e3:f1:c4:5c:b3:3e:1d:da:63:07:4d:1f:fc: 2b:19:0c:32:11:f4:db:b8:d9:12:ae:fb:d1:9c:46:c3:7b:75: 5b:34:45:79:0e:c2:fe:79:51:f4:19:a0:32:37:77:58:48:b5: d2:de:b4:b2:3b:5a:46:7a:60:2a:21:80:42:e9:68:26:7c:fa: 81:8e:98:d6:a0:ab:36:65:7e:4b:72:dd:c5:ad:9c:32:2d:a8: 07:20:38:65 -----BEGIN CERTIFICATE----- MIIFFjCCA/6gAwIBAgISAZoNuQ4I4O4dNoC4KXXRP66BMA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKGE0Y2U5NjQwYTNlZjJmZWExOTM3NGFkOGY5OWY0MjNkN2Fh N2M3NmIwHhcNMjUxMDIyMjEwMDIyWhcNMjUxMDIzMjEwMDIyWjAzMTEwLwYDVQQD EyhjN2E3ZDJmYTMzZWMyZGE5NThmOGQ4NzBiMmE2ZTQwZDdiZGZmYTAzMIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAvlHy/be02n0jXECRNTAxfaqf92xu 8jWIQaBcDwKiRlsF0Aq99pfy6AXQALt0Ytlt7v4YdojrUFtUJ9YB9Ro6+1/qRRcJ 8F1y+Nx85dLtG57UdQA8gOJYljlxPq9SCn/FqK0ruJz/s+sIFmlsbmmr0GNvd1S0 cP1VOV5YWc+12yujD9uEOi+XXaTba6M/IYJFCeiy3SWqAgwfy0ac0QMPxQyBJALT dCqvouhNq3a3aQ33Zu0KuSQwSjXNvkX+cdBFWzGWIM+qMEwZEVR8GvA/CpRiEoCN uvGtYzdQIeX/FqyMd8S4Jtp/lOKKerDEWTEHOOBb04WYBx5nR8+G67O3PwIDAQAB o4ICIjCCAh4wHQYDVR0OBBYEFMen0voz7C2pWPjYcLKm5A173/oDMB8GA1UdIwQY MBaAFKTOlkCj7y/qGTdK2PmfQj16p8drMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvcE02V1FLUHZMLW9aTjByWS1aOUNQWHFueDJzLmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC80Yi9mOGE1ZDEtMjYwYS00NmE0LWE4ZTQt MjgzZmU1NGE2ZjJmLzEvcE02V1FLUHZMLW9aTjByWS1aOUNQWHFueDJzLm1mdDCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC80Yi9mOGE1ZDEtMjYwYS00NmE0LWE4ZTQtMjgzZmU1NGE2ZjJm LzEvcE02V1FLUHZMLW9aTjByWS1aOUNQWHFueDJzLmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAl+rhYMof nSmYWQC26pc0cyV68HhYLw9tG8qDNsTuU7lr1/vk6amFqXcC9NAzeo1p17isrO9s KArRjerQWyUgqVi7n6uJKRfYGqf4jpQHZhQJaRaVnaCUYf2WhBAZgYKktC/Ewt3g Bw/ugTCfo2rSBVNPill1POYtEo+hDxbaioPEZzCx02sSftn5m8OK8m0r5oSXVD2t N7mBcRwcVsSocUDBQx43Et3j8cRcsz4d2mMHTR/8KxkMMhH027jZEq770ZxGw3t1 WzRFeQ7C/nlR9BmgMjd3WEi10t60sjtaRnpgKiGAQuloJnz6gY6Y1qCrNmV+S3Ld xa2cMi2oByA4ZQ== -----END CERTIFICATE-----Generated at Thu Oct 23 06:53:21 2025 by rpki-client