$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/4f/9437a2-07e6-4e6a-aa3f-965d6d603bfa/1/1-CVUqFakIrBhrmTFd2MPkdQIzUo.mft File: 1-CVUqFakIrBhrmTFd2MPkdQIzUo.mft (raw, json) Hash identifier: a16ziiBfxn34VmD1WGRYXOwL/WtfuU2/QYX5+h5FOGs= Subject key identifier: 7D:02:99:E3:90:69:7C:25:79:11:C4:3E:74:5A:86:6D:F4:2D:2D:B7 Authority key identifier: F8:25:54:A8:56:A4:22:B0:61:AE:64:C5:77:63:0F:91:D4:08:CD:4A Certificate issuer: /CN=f82554a856a422b061ae64c577630f91d408cd4a Certificate serial: 019A251C73A0A6E65434FD6B1A0556D701E1 Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/1-CVUqFakIrBhrmTFd2MPkdQIzUo.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/4f/9437a2-07e6-4e6a-aa3f-965d6d603bfa/1/1-CVUqFakIrBhrmTFd2MPkdQIzUo.mft Manifest number: 16FD Signing time: Mon 27 Oct 2025 10:00:12 +0000 Manifest this update: Mon 27 Oct 2025 10:00:12 +0000 Manifest next update: Tue 28 Oct 2025 10:00:12 +0000 Files and hashes: 1: 1-CVUqFakIrBhrmTFd2MPkdQIzUo.crl (hash: XxPsda3iD7udheXsTrtMV7gcZddyhXNNIeHz3c5VzUg=) 2: 8yyknMa8Qa7eji2_-25NgjHMwAs.roa (hash: 6EA1L4yNjiFkAAM6t2iZAA7ze8SV3lMCUhKNPg3vBUQ=) 3: 9QjCjG8fGXKK3KT9GGHW6MAVJzE.roa (hash: fSpz8n2jWyy0I2DDmxohRpaljlrP9nL5ZtLGzLKYuXU=) 4: H7En3yY1mH2yRYS167HpwA6AL5Q.roa (hash: FPJfC/52NavOyoGt4vZ9gio4MoEgpYKiZrTtURDieXE=) 5: K4UoliAJDnPT2oq72AyXanTYwdo.roa (hash: +5dNWwnlyTnn33FOhd8BsjDiWGBw/K7XK9sbIa7ROKQ=) 6: aWWA3-Hs7ng_GCTHIDmwQ5Rjbdg.roa (hash: isC8RltnKP3pjrz7ZvAls/aB0WZTll6Skvt9xKP3UkI=) 7: fPjaiW_RQVaw1K0jco_QmLpGo5s.roa (hash: agQGyFSnSoUI1Vx0MTRN/i+hHcE0hyBre8ShGUX7keA=) 8: lv4HmOqEkoJhmZ694ZcdnLwYlAM.roa (hash: jNXlLdUizmlPS7y4NkIFg6Z2F2lK4SSREn91C27cUCo=) 9: sERIvqHcZj2yU32m6o5QSyQReME.roa (hash: cfxbkVfwNX0hfImDTJjGC48Jbi/ZuYY11AKoePEqH8k=) 10: zTLxL4slk5kZQfWpH_PY-TD7nNM.roa (hash: tzDHOIgeKhCjAOTBNpSwMn6WduYNfsmvzrDJbeHe5/Y=) Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/4f/9437a2-07e6-4e6a-aa3f-965d6d603bfa/1/1-CVUqFakIrBhrmTFd2MPkdQIzUo.crl rsync://rpki.ripe.net/repository/DEFAULT/4f/9437a2-07e6-4e6a-aa3f-965d6d603bfa/1/1-CVUqFakIrBhrmTFd2MPkdQIzUo.mft rsync://rpki.ripe.net/repository/DEFAULT/1-CVUqFakIrBhrmTFd2MPkdQIzUo.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Tue 28 Oct 2025 08:00:02 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9a:25:1c:73:a0:a6:e6:54:34:fd:6b:1a:05:56:d7:01:e1 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=f82554a856a422b061ae64c577630f91d408cd4a Validity Not Before: Oct 27 10:00:12 2025 GMT Not After : Oct 28 10:00:12 2025 GMT Subject: CN=7d0299e390697c257911c43e745a866df42d2db7 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:b3:12:c4:c8:8e:26:e5:04:5f:df:9f:21:b3:50: 35:0d:0f:ef:c5:9c:d1:97:40:81:c7:70:f6:62:09: 6c:2e:03:65:a3:18:0c:ac:74:02:1a:df:4b:bb:5c: 73:e0:3c:e9:7b:04:c7:d7:dc:eb:1a:08:ae:0c:28: 9d:7c:e9:fe:e7:86:3e:48:06:07:54:e0:5c:57:c6: ae:c3:95:d8:35:d2:34:2b:ac:ea:30:89:4f:b8:79: 28:d5:f9:84:5e:f6:3c:a9:90:48:54:e0:be:31:32: b8:41:dc:20:0f:39:6f:3f:3d:e5:42:1c:2d:e5:2a: 3f:c8:1e:f0:d7:9f:78:41:85:db:a8:7c:80:65:27: 15:1e:ba:dc:eb:f5:ff:fb:97:10:47:a5:b6:85:3c: b7:30:6a:4d:97:99:da:53:16:92:4e:e4:e6:82:db: ae:71:30:b9:d8:18:44:cf:47:49:a2:1c:e3:1c:c7: f7:cd:15:86:be:bb:e3:ce:54:53:87:c3:ee:bd:83: d9:d7:8e:d9:68:47:2e:83:a2:73:41:e2:f3:52:ef: b4:1d:a3:f4:aa:c8:19:38:a6:1e:cf:1f:05:de:54: 80:93:ba:84:c5:47:eb:29:d8:48:37:cd:16:78:b0: 02:85:76:48:3f:16:de:1c:c7:f2:94:b9:c6:6e:d7: d0:f9 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 7D:02:99:E3:90:69:7C:25:79:11:C4:3E:74:5A:86:6D:F4:2D:2D:B7 X509v3 Authority Key Identifier: keyid:F8:25:54:A8:56:A4:22:B0:61:AE:64:C5:77:63:0F:91:D4:08:CD:4A X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/1-CVUqFakIrBhrmTFd2MPkdQIzUo.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/4f/9437a2-07e6-4e6a-aa3f-965d6d603bfa/1/1-CVUqFakIrBhrmTFd2MPkdQIzUo.mft X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/4f/9437a2-07e6-4e6a-aa3f-965d6d603bfa/1/1-CVUqFakIrBhrmTFd2MPkdQIzUo.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 11:74:47:50:53:2d:fe:93:f3:fa:19:68:3f:b5:88:60:94:0c: 39:3c:86:88:41:46:2a:d2:85:57:de:79:f3:ee:e3:26:1a:06: d3:52:18:29:97:37:05:56:c1:f1:b9:8b:ec:0c:f6:f1:09:39: 53:24:29:a6:26:61:bd:64:d4:e3:7c:98:31:72:2d:c8:ef:b5: a5:9e:a9:48:56:b7:09:2c:ec:cf:d3:26:da:e5:18:8e:54:c1: aa:3c:e8:79:0b:ee:89:6e:e0:65:1f:b0:4b:f3:79:27:2c:6f: 9a:49:98:b4:2a:ea:d3:60:7d:3a:81:8e:70:45:04:69:de:0f: c1:82:ae:7a:4f:6f:17:96:a8:5e:2d:af:cb:a5:39:a7:ff:9d: c6:ab:54:9d:8b:45:53:3c:dc:67:c6:fe:a5:3c:30:29:bb:19: c2:10:0f:a1:15:76:fd:46:a4:1d:b7:1b:10:72:92:c8:7c:0e: 03:cc:38:02:9c:72:40:17:c1:86:aa:1e:c6:01:eb:f2:92:70: 6c:8c:7f:3b:e6:e6:68:c9:0b:32:7c:5a:2e:9c:fc:05:08:b7: 21:da:e1:2e:d1:66:99:9a:16:f7:4e:6a:27:51:dd:88:e6:bb: ce:06:fd:d7:d9:c0:f1:84:6e:15:e8:6c:21:5b:f0:d8:1e:cb: 76:7e:3c:07 -----BEGIN CERTIFICATE----- MIIFGTCCBAGgAwIBAgISAZolHHOgpuZUNP1rGgVW1wHhMA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKGY4MjU1NGE4NTZhNDIyYjA2MWFlNjRjNTc3NjMwZjkxZDQw OGNkNGEwHhcNMjUxMDI3MTAwMDEyWhcNMjUxMDI4MTAwMDEyWjAzMTEwLwYDVQQD Eyg3ZDAyOTllMzkwNjk3YzI1NzkxMWM0M2U3NDVhODY2ZGY0MmQyZGI3MIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAsxLEyI4m5QRf358hs1A1DQ/vxZzR l0CBx3D2YglsLgNloxgMrHQCGt9Lu1xz4DzpewTH19zrGgiuDCidfOn+54Y+SAYH VOBcV8auw5XYNdI0K6zqMIlPuHko1fmEXvY8qZBIVOC+MTK4QdwgDzlvPz3lQhwt 5So/yB7w1594QYXbqHyAZScVHrrc6/X/+5cQR6W2hTy3MGpNl5naUxaSTuTmgtuu cTC52BhEz0dJohzjHMf3zRWGvrvjzlRTh8PuvYPZ147ZaEcug6JzQeLzUu+0HaP0 qsgZOKYezx8F3lSAk7qExUfrKdhIN80WeLAChXZIPxbeHMfylLnGbtfQ+QIDAQAB o4ICJTCCAiEwHQYDVR0OBBYEFH0CmeOQaXwleRHEPnRahm30LS23MB8GA1UdIwQY MBaAFPglVKhWpCKwYa5kxXdjD5HUCM1KMA4GA1UdDwEB/wQEAwIHgDBlBggrBgEF BQcBAQRZMFcwVQYIKwYBBQUHMAKGSXJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvMS1DVlVxRmFrSXJCaHJtVEZkMk1Qa2RRSXpVby5jZXIw gY4GCCsGAQUFBwELBIGBMH8wfQYIKwYBBQUHMAuGcXJzeW5jOi8vcnBraS5yaXBl Lm5ldC9yZXBvc2l0b3J5L0RFRkFVTFQvNGYvOTQzN2EyLTA3ZTYtNGU2YS1hYTNm LTk2NWQ2ZDYwM2JmYS8xLzEtQ1ZVcUZha0lyQmhybVRGZDJNUGtkUUl6VW8ubWZ0 MIGCBgNVHR8EezB5MHegdaBzhnFyc3luYzovL3Jwa2kucmlwZS5uZXQvcmVwb3Np dG9yeS9ERUZBVUxULzRmLzk0MzdhMi0wN2U2LTRlNmEtYWEzZi05NjVkNmQ2MDNi ZmEvMS8xLUNWVXFGYWtJckJocm1URmQyTVBrZFFJelVvLmNybDAYBgNVHSABAf8E DjAMMAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgAC BQAwFQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAEXRH UFMt/pPz+hloP7WIYJQMOTyGiEFGKtKFV9558+7jJhoG01IYKZc3BVbB8bmL7Az2 8Qk5UyQppiZhvWTU43yYMXItyO+1pZ6pSFa3CSzsz9Mm2uUYjlTBqjzoeQvuiW7g ZR+wS/N5JyxvmkmYtCrq02B9OoGOcEUEad4PwYKuek9vF5aoXi2vy6U5p/+dxqtU nYtFUzzcZ8b+pTwwKbsZwhAPoRV2/UakHbcbEHKSyHwOA8w4ApxyQBfBhqoexgHr 8pJwbIx/O+bmaMkLMnxaLpz8BQi3IdrhLtFmmZoW905qJ1HdiOa7zgb919nA8YRu FehsIVvw2B7Ldn48Bw== -----END CERTIFICATE-----Generated at Mon Oct 27 12:31:38 2025 by rpki-client