$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/51/db26ba-754d-4118-be31-4b6c1cf9fe4f/1/3FxTLzzV4R4Z_rGWVdTxmSbwICA.mft File: 3FxTLzzV4R4Z_rGWVdTxmSbwICA.mft (raw, json) Hash identifier: +TlMCoQ+Fyc9yCIJhh+FNvDIl1Y+HSgnmg0wBjqdIUA= Subject key identifier: FF:83:4B:04:0B:57:58:9E:EB:7D:E7:29:29:93:5E:5A:77:16:20:E4 Authority key identifier: DC:5C:53:2F:3C:D5:E1:1E:19:FE:B1:96:55:D4:F1:99:26:F0:20:20 Certificate issuer: /CN=dc5c532f3cd5e11e19feb19655d4f19926f02020 Certificate serial: 019A725CCD8780C0E7A102EBE7D98C6DE6A1 Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/3FxTLzzV4R4Z_rGWVdTxmSbwICA.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/51/db26ba-754d-4118-be31-4b6c1cf9fe4f/1/3FxTLzzV4R4Z_rGWVdTxmSbwICA.mft Manifest number: 054A Signing time: Tue 11 Nov 2025 10:01:15 +0000 Manifest this update: Tue 11 Nov 2025 10:01:15 +0000 Manifest next update: Wed 12 Nov 2025 10:01:15 +0000 Files and hashes: 1: 1-WZZnjR8DlZqLUibcRUcYzm0QDU.roa (hash: /lrkBjM9dGMr6D7JGPVc5syjsFBtCzanEGLfhb4dKM0=) 2: 3FxTLzzV4R4Z_rGWVdTxmSbwICA.crl (hash: g7+9UrIvkGbZ6K9owdu6TF9MMBYNy1zGozboo/UnWfU=) 3: 3jZyUpaNiuxwzYQ21tChGVq7yOY.roa (hash: rlRJ/UNIhVQKGyw4Wr/cDFs+VO81jRk6SUephZD3g4o=) 4: 5khyx2A9d0Q0e3huYGosj5KCOlo.roa (hash: m/iIxHfeWDlWWpGAIqzgFb7iOcTekZb0i9Y2aBX+dy4=) 5: 7cUCY2EysYK09Y_F1tsMsp_B8MU.roa (hash: el4sZWuoJZOOcj14KO5Yq16IPPIz+c0KckgEteIx4YM=) 6: ILbeank0F3xhLsgBl0NZfpBZFig.roa (hash: 8RlSwtQK5lhGbhOtyX4cacpgfYuG3exGirW2aa5+FLI=) 7: KBQWtgPCMeq_IbONzoF64FnlzwE.roa (hash: EZ3seNeYjAQFpAfGwhXlV+Wya2vQO7lfYcVB84EkqA4=) 8: PBiom43THD1F1SBGVmDFN9WwnMo.roa (hash: EVRLL8Mxobz8XRwc26H2JAHWkuwMiYakvll8d/79CJQ=) 9: TnqWiZSrJP5FZLgDlXk-iaFi5k8.roa (hash: 8gjKeaSL9Im1mKl/CKczQDSLzI2OEBo3YD5qQoY5RT0=) 10: VXGu7cRy3TUPyfgbIf2vopAF1Lc.roa (hash: 40vRMPsPFPCFnDUP/ikEgH9v+gi1iVOQkLoxtLSkOqE=) 11: ZaSQVTZm2f4ebc71HIkhrpqqsuk.roa (hash: X8/L0T6q0bM6s++7u2MQIu4RlHWQNdJcKAvE7bH3VP4=) 12: jldP_NkgEKrLmFaYQtB6TuhGzRs.roa (hash: Cz3xmiLxKccg4wAv608JqhvYxIHIutFBcyhT8Ond0Zs=) 13: oQk2rT9-TmTMiTawX34MBI0QTrc.roa (hash: 6J7fvMBzz5wnq8Q655iOLvmHY5jKT0LznvTL3IrQ8Xw=) 14: unsmmkYBpbXrCubGO7XS6N7I7QM.roa (hash: /TaQOoUPP+hWic0pvVLJBHflkZLzIc8T4AFkDEL7yKk=) 15: w9Z-5nLehvUlBeOI2h5dSoEBLSw.roa (hash: dyC69X2s5yoLrmCLq7pBQHExLj0vbp1A/uwW5wlqEug=) Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/51/db26ba-754d-4118-be31-4b6c1cf9fe4f/1/3FxTLzzV4R4Z_rGWVdTxmSbwICA.crl rsync://rpki.ripe.net/repository/DEFAULT/51/db26ba-754d-4118-be31-4b6c1cf9fe4f/1/3FxTLzzV4R4Z_rGWVdTxmSbwICA.mft rsync://rpki.ripe.net/repository/DEFAULT/3FxTLzzV4R4Z_rGWVdTxmSbwICA.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Wed 12 Nov 2025 09:00:37 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9a:72:5c:cd:87:80:c0:e7:a1:02:eb:e7:d9:8c:6d:e6:a1 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=dc5c532f3cd5e11e19feb19655d4f19926f02020 Validity Not Before: Nov 11 10:01:15 2025 GMT Not After : Nov 12 10:01:15 2025 GMT Subject: CN=ff834b040b57589eeb7de72929935e5a771620e4 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:a6:c6:a6:37:c9:b6:bc:d0:27:0f:dc:3f:be:b2: bb:e4:8d:6f:d9:02:78:56:0a:5d:78:03:50:39:72: e4:b3:cc:19:85:4b:9e:bb:8c:9a:0d:59:cd:4f:8d: f9:b3:e3:78:1c:3e:b8:22:f3:fd:73:c2:cb:1e:e9: 25:2c:ed:92:b0:93:b3:38:73:9e:20:0a:b9:21:10: a8:e2:ce:25:94:64:29:0b:9e:37:9e:99:8e:77:cf: 6b:de:6f:a7:79:72:1a:90:b0:52:96:1d:5d:4c:f3: f7:e1:95:3b:f6:e1:ed:25:b1:0f:1e:a4:19:50:cb: 18:8b:91:3d:4e:2d:5f:fe:b8:63:06:fd:7a:63:ee: 84:b3:42:d0:d2:0f:d0:66:50:d9:27:d7:66:d1:c4: 10:ea:29:1c:d3:01:48:05:69:23:c5:23:02:ca:51: 9a:3a:64:7f:5e:ce:7c:53:73:06:17:89:3e:73:48: 1e:2f:8d:4d:45:be:88:03:a2:85:5a:50:63:10:21: cd:85:11:53:6a:c3:63:f2:72:01:26:d6:89:85:1f: 10:c0:a4:6b:39:04:d7:c2:cc:ec:0c:72:45:85:97: 76:29:39:28:81:43:a5:28:1f:62:60:7d:11:a4:b4: aa:de:cc:b2:a7:2e:b8:57:83:b4:71:42:a7:77:86: f9:ed Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: FF:83:4B:04:0B:57:58:9E:EB:7D:E7:29:29:93:5E:5A:77:16:20:E4 X509v3 Authority Key Identifier: keyid:DC:5C:53:2F:3C:D5:E1:1E:19:FE:B1:96:55:D4:F1:99:26:F0:20:20 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/3FxTLzzV4R4Z_rGWVdTxmSbwICA.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/51/db26ba-754d-4118-be31-4b6c1cf9fe4f/1/3FxTLzzV4R4Z_rGWVdTxmSbwICA.mft X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/51/db26ba-754d-4118-be31-4b6c1cf9fe4f/1/3FxTLzzV4R4Z_rGWVdTxmSbwICA.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 07:af:cc:a9:db:fc:a6:c2:f2:8d:72:b6:8b:58:8e:be:ad:b2: 0e:96:7d:b7:76:eb:74:16:b2:a7:59:ce:70:70:2b:de:0d:e9: 44:59:e0:c3:55:24:bc:e1:9c:0b:37:60:46:7a:1a:89:21:05: 42:46:85:98:11:e1:09:23:4b:64:7b:2d:be:0a:a4:e8:03:c8: 59:ce:9d:ae:ba:1c:d3:8c:17:8e:80:02:95:75:ea:54:22:7e: da:1a:7c:db:57:fb:3e:2b:0d:4e:39:d5:06:03:51:c2:ff:37: e2:a8:f6:e2:f1:70:5c:88:06:e4:f3:27:0c:65:8c:70:ff:e9: 27:bd:e9:60:57:ef:51:66:07:da:30:c2:8e:14:1f:26:8f:b3: 8e:96:97:2b:94:19:4b:5e:4c:7e:96:72:9f:25:35:0a:cb:5e: 91:6b:bd:05:44:2e:f1:84:6d:40:1c:f1:71:9f:f5:f8:40:48: 45:ec:50:dd:b7:bb:66:f0:09:4b:66:35:0d:6d:fb:c5:19:0f: 7e:4c:50:1f:28:2e:8b:47:0e:9c:dc:8e:e8:53:6d:2e:27:37: aa:c2:e6:cc:94:fb:d2:81:eb:d0:89:b9:00:de:23:f9:af:ed: 46:a9:44:e3:5a:9c:ed:9e:54:96:69:24:1d:4a:23:97:78:06: 82:b4:45:86 -----BEGIN CERTIFICATE----- MIIFFjCCA/6gAwIBAgISAZpyXM2HgMDnoQLr59mMbeahMA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKGRjNWM1MzJmM2NkNWUxMWUxOWZlYjE5NjU1ZDRmMTk5MjZm MDIwMjAwHhcNMjUxMTExMTAwMTE1WhcNMjUxMTEyMTAwMTE1WjAzMTEwLwYDVQQD EyhmZjgzNGIwNDBiNTc1ODllZWI3ZGU3MjkyOTkzNWU1YTc3MTYyMGU0MIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEApsamN8m2vNAnD9w/vrK75I1v2QJ4 VgpdeANQOXLks8wZhUueu4yaDVnNT435s+N4HD64IvP9c8LLHuklLO2SsJOzOHOe IAq5IRCo4s4llGQpC543npmOd89r3m+neXIakLBSlh1dTPP34ZU79uHtJbEPHqQZ UMsYi5E9Ti1f/rhjBv16Y+6Es0LQ0g/QZlDZJ9dm0cQQ6ikc0wFIBWkjxSMCylGa OmR/Xs58U3MGF4k+c0geL41NRb6IA6KFWlBjECHNhRFTasNj8nIBJtaJhR8QwKRr OQTXwszsDHJFhZd2KTkogUOlKB9iYH0RpLSq3syypy64V4O0cUKnd4b57QIDAQAB o4ICIjCCAh4wHQYDVR0OBBYEFP+DSwQLV1ie633nKSmTXlp3FiDkMB8GA1UdIwQY MBaAFNxcUy881eEeGf6xllXU8Zkm8CAgMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvM0Z4VEx6elY0UjRaX3JHV1ZkVHhtU2J3SUNBLmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC81MS9kYjI2YmEtNzU0ZC00MTE4LWJlMzEt NGI2YzFjZjlmZTRmLzEvM0Z4VEx6elY0UjRaX3JHV1ZkVHhtU2J3SUNBLm1mdDCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC81MS9kYjI2YmEtNzU0ZC00MTE4LWJlMzEtNGI2YzFjZjlmZTRm LzEvM0Z4VEx6elY0UjRaX3JHV1ZkVHhtU2J3SUNBLmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAB6/Mqdv8 psLyjXK2i1iOvq2yDpZ9t3brdBayp1nOcHAr3g3pRFngw1UkvOGcCzdgRnoaiSEF QkaFmBHhCSNLZHstvgqk6APIWc6drroc04wXjoAClXXqVCJ+2hp821f7PisNTjnV BgNRwv834qj24vFwXIgG5PMnDGWMcP/pJ73pYFfvUWYH2jDCjhQfJo+zjpaXK5QZ S15MfpZynyU1CstekWu9BUQu8YRtQBzxcZ/1+EBIRexQ3be7ZvAJS2Y1DW37xRkP fkxQHygui0cOnNyO6FNtLic3qsLmzJT70oHr0Im5AN4j+a/tRqlE41qc7Z5Ulmkk HUojl3gGgrRFhg== -----END CERTIFICATE-----Generated at Tue Nov 11 15:35:46 2025 by rpki-client