$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/4f/53a947-fd03-4014-9827-c5d8950818ec/1/_0TbrKVtrDGUAfaKUNkX9UJGEa0.mft File: _0TbrKVtrDGUAfaKUNkX9UJGEa0.mft (raw, json) Hash identifier: CMAJL51PRTxsBj9HQ6W6QyIkxlZYjQYAl8Gycd0DDOM= Subject key identifier: 51:C9:8C:37:87:2B:55:F2:7F:E5:A7:D0:43:BC:C5:C3:3F:3C:A9:09 Authority key identifier: FF:44:DB:AC:A5:6D:AC:31:94:01:F6:8A:50:D9:17:F5:42:46:11:AD Certificate issuer: /CN=ff44dbaca56dac319401f68a50d917f5424611ad Certificate serial: 019A1384E88CEA5CA8C99E3201A7D07DFDD4 Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/_0TbrKVtrDGUAfaKUNkX9UJGEa0.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/4f/53a947-fd03-4014-9827-c5d8950818ec/1/_0TbrKVtrDGUAfaKUNkX9UJGEa0.mft Manifest number: 0F01 Signing time: Fri 24 Oct 2025 00:01:08 +0000 Manifest this update: Fri 24 Oct 2025 00:01:08 +0000 Manifest next update: Sat 25 Oct 2025 00:01:08 +0000 Files and hashes: 1: 1-cpyjHU8WHBS-JnYyweRG_JlxsQ.roa (hash: Bc2YUgBN1eHG7yUrAAjgkxLZbgg1NrbTbKbM93kzdXo=) 2: 23cjywgox101LeW5GrrQWi4IHG0.roa (hash: uYyFedbey5ChPUlaasPp5Y63DNZ1EjHPXUKggcmyWcA=) 3: 2nquZxIjKuCQeOgojOXW1X_s_QM.roa (hash: jFRO0lP11v/Hnir4mOKoo6txSwXFruzZ7RBet4hmmmk=) 4: 7-RqEu_RBz9mfOLDtCp7Hvp-HNA.roa (hash: VgV4hIvu8+OJHYszRf2pjeepXfzTOT8zOwDWfq2EnHU=) 5: QQQnQcpvGBf2C-BzCpjUlxD_kV0.roa (hash: 3oCmUMut8zjGqT5v8Ibyl5GG5ZNBsCX2Q1FPnCYPFwc=) 6: _0TbrKVtrDGUAfaKUNkX9UJGEa0.crl (hash: Ijt4rVFcTjeWWwCVDii8xFzESxM6RRaaK6RuxafLH18=) 7: gIx-NvwmPwDjbwzrImEaevKFMi8.roa (hash: qVqkRd3AaQOFICZgsJ5zunJ8w7waJ2c1Sms4AJtjCl4=) 8: qWecP1fjBHk_xiZL6w3FMxqmMFs.roa (hash: H6nLoMO+CEX9wLJPNIjsGgGm6hrsOhinY+8mLTIndRM=) 9: wvlIJaBXdAerQ4c5dRBxRunJgjQ.roa (hash: JyQWbotgOXPXDAJ2gTdNj+PiW7DZmyYe59ktU38Qs6o=) 10: zwQeVe6KjT7mK7CzDjhb-oUfUeY.roa (hash: RDrcDVJwzADiTPiX9sXWISoKDjj7Zx0CdydUNeF8j6Q=) Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/4f/53a947-fd03-4014-9827-c5d8950818ec/1/_0TbrKVtrDGUAfaKUNkX9UJGEa0.crl rsync://rpki.ripe.net/repository/DEFAULT/4f/53a947-fd03-4014-9827-c5d8950818ec/1/_0TbrKVtrDGUAfaKUNkX9UJGEa0.mft rsync://rpki.ripe.net/repository/DEFAULT/_0TbrKVtrDGUAfaKUNkX9UJGEa0.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Sat 25 Oct 2025 00:01:08 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9a:13:84:e8:8c:ea:5c:a8:c9:9e:32:01:a7:d0:7d:fd:d4 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=ff44dbaca56dac319401f68a50d917f5424611ad Validity Not Before: Oct 24 00:01:08 2025 GMT Not After : Oct 25 00:01:08 2025 GMT Subject: CN=51c98c37872b55f27fe5a7d043bcc5c33f3ca909 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:be:94:6f:7f:dc:47:0c:17:2b:79:b5:ec:a5:93: 93:4d:e7:47:a5:02:70:f1:0a:d4:5f:a8:00:4a:03: b1:c4:6c:6d:ea:a0:8e:37:04:a4:43:20:27:0a:b3: a6:ec:43:04:d3:72:2f:b6:43:e4:9f:8e:27:6d:73: fb:4e:69:fa:07:81:1f:cd:9a:3a:96:39:ff:85:27: 5b:a1:7d:09:ac:39:79:20:f5:ca:22:5b:d0:d5:e5: 24:1b:0d:5f:00:84:4e:44:be:53:16:2a:e5:f6:6a: 4d:f0:87:3e:95:a0:ae:dc:59:8f:e9:b3:0b:8e:63: 5d:1c:ad:f8:48:80:00:30:fd:db:56:39:1a:8a:b8: 4f:f8:0a:b3:43:75:ac:6c:18:1f:03:9a:17:e9:0e: cf:11:c8:c4:39:93:f7:83:c9:da:ac:da:8d:90:72: ff:c3:b2:06:86:b9:e4:74:6b:5b:20:db:4c:b5:62: 05:62:1e:0e:7a:1d:bd:58:12:15:83:19:15:1a:6a: c9:1d:52:4f:eb:3a:e3:5c:12:a2:d2:8d:e4:f6:34: 7b:74:54:53:27:8d:e3:b6:44:36:50:55:48:77:8c: 18:ff:31:8a:a9:e6:be:d7:80:5d:31:20:97:04:d8: 57:37:93:6e:b7:a5:16:60:18:41:ec:bd:09:de:84: 63:db Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 51:C9:8C:37:87:2B:55:F2:7F:E5:A7:D0:43:BC:C5:C3:3F:3C:A9:09 X509v3 Authority Key Identifier: keyid:FF:44:DB:AC:A5:6D:AC:31:94:01:F6:8A:50:D9:17:F5:42:46:11:AD X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/_0TbrKVtrDGUAfaKUNkX9UJGEa0.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/4f/53a947-fd03-4014-9827-c5d8950818ec/1/_0TbrKVtrDGUAfaKUNkX9UJGEa0.mft X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/4f/53a947-fd03-4014-9827-c5d8950818ec/1/_0TbrKVtrDGUAfaKUNkX9UJGEa0.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 80:a6:6e:bd:62:de:9a:97:22:15:86:79:71:5a:d8:da:39:3a: 55:7b:18:fe:dc:69:6a:35:81:86:a1:3a:8f:23:77:3e:a0:c2: 6a:f0:3a:c2:89:9b:c0:30:74:1d:0c:e3:49:36:a8:67:4c:3d: e7:54:c8:b3:9b:d3:2b:3a:ad:dd:c6:05:40:e5:90:d9:fc:4a: e4:0a:f7:75:26:66:ed:54:15:d3:e6:71:d6:64:e5:ec:e7:98: 16:e4:ed:45:15:79:db:20:ab:bf:18:e6:dc:41:ec:95:e1:df: 9d:1a:82:c6:ad:a3:11:71:ec:e4:55:85:29:dc:1b:29:05:73: bb:e8:17:f7:6d:90:f4:88:8b:b5:25:fc:6d:3f:e1:18:72:15: a7:52:ef:c8:9a:22:b4:ef:ac:6f:77:e9:4b:4f:35:24:a5:8b: 70:42:69:3a:15:e9:31:a3:64:d8:5d:d5:63:7c:59:45:ea:e6: ee:5c:16:88:82:97:8f:a9:8e:17:6b:5e:20:1a:8f:99:71:50: e7:98:4c:5a:7f:a8:3b:40:f5:1b:b1:97:7a:0a:4e:be:f8:7a: 96:dc:1b:21:e0:fd:13:3d:fa:a6:f5:18:75:f5:c1:a1:cb:ae: 46:a1:8a:4f:5f:88:de:d3:7b:df:c0:7d:97:b0:53:09:3d:15: 15:75:f1:cf -----BEGIN CERTIFICATE----- MIIFFjCCA/6gAwIBAgISAZoThOiM6lyoyZ4yAafQff3UMA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKGZmNDRkYmFjYTU2ZGFjMzE5NDAxZjY4YTUwZDkxN2Y1NDI0 NjExYWQwHhcNMjUxMDI0MDAwMTA4WhcNMjUxMDI1MDAwMTA4WjAzMTEwLwYDVQQD Eyg1MWM5OGMzNzg3MmI1NWYyN2ZlNWE3ZDA0M2JjYzVjMzNmM2NhOTA5MIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAvpRvf9xHDBcrebXspZOTTedHpQJw 8QrUX6gASgOxxGxt6qCONwSkQyAnCrOm7EME03IvtkPkn44nbXP7Tmn6B4EfzZo6 ljn/hSdboX0JrDl5IPXKIlvQ1eUkGw1fAIRORL5TFirl9mpN8Ic+laCu3FmP6bML jmNdHK34SIAAMP3bVjkairhP+AqzQ3WsbBgfA5oX6Q7PEcjEOZP3g8narNqNkHL/ w7IGhrnkdGtbINtMtWIFYh4Oeh29WBIVgxkVGmrJHVJP6zrjXBKi0o3k9jR7dFRT J43jtkQ2UFVId4wY/zGKqea+14BdMSCXBNhXN5Nut6UWYBhB7L0J3oRj2wIDAQAB o4ICIjCCAh4wHQYDVR0OBBYEFFHJjDeHK1Xyf+Wn0EO8xcM/PKkJMB8GA1UdIwQY MBaAFP9E26ylbawxlAH2ilDZF/VCRhGtMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvXzBUYnJLVnRyREdVQWZhS1VOa1g5VUpHRWEwLmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC80Zi81M2E5NDctZmQwMy00MDE0LTk4Mjct YzVkODk1MDgxOGVjLzEvXzBUYnJLVnRyREdVQWZhS1VOa1g5VUpHRWEwLm1mdDCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC80Zi81M2E5NDctZmQwMy00MDE0LTk4MjctYzVkODk1MDgxOGVj LzEvXzBUYnJLVnRyREdVQWZhS1VOa1g5VUpHRWEwLmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAgKZuvWLe mpciFYZ5cVrY2jk6VXsY/txpajWBhqE6jyN3PqDCavA6wombwDB0HQzjSTaoZ0w9 51TIs5vTKzqt3cYFQOWQ2fxK5Ar3dSZm7VQV0+Zx1mTl7OeYFuTtRRV52yCrvxjm 3EHsleHfnRqCxq2jEXHs5FWFKdwbKQVzu+gX922Q9IiLtSX8bT/hGHIVp1LvyJoi tO+sb3fpS081JKWLcEJpOhXpMaNk2F3VY3xZRerm7lwWiIKXj6mOF2teIBqPmXFQ 55hMWn+oO0D1G7GXegpOvvh6ltwbIeD9Ez36pvUYdfXBocuuRqGKT1+I3tN738B9 l7BTCT0VFXXxzw== -----END CERTIFICATE-----Generated at Fri Oct 24 09:29:41 2025 by rpki-client