$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/53/e8cb44-a954-4672-b9a4-a49e5c6633bd/1/1-sy7cqqYhKW_jQ51dAShfl4jMiw.mft File: 1-sy7cqqYhKW_jQ51dAShfl4jMiw.mft (raw, json) Hash identifier: xXDk0/JiPHI76h+XJKqudBEsTSA5M1byA/DvH3ptNjw= Subject key identifier: 67:7E:C6:23:77:29:7D:49:5D:A3:A8:BD:5E:5C:B5:02:B5:98:9F:4A Authority key identifier: FA:CC:BB:72:AA:98:84:A5:BF:8D:0E:75:74:04:A1:7E:5E:23:32:2C Certificate issuer: /CN=faccbb72aa9884a5bf8d0e757404a17e5e23322c Certificate serial: 019A25C1E1F83AF1B1B8F356959FBAA931AA Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/1-sy7cqqYhKW_jQ51dAShfl4jMiw.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/53/e8cb44-a954-4672-b9a4-a49e5c6633bd/1/1-sy7cqqYhKW_jQ51dAShfl4jMiw.mft Manifest number: 1711 Signing time: Mon 27 Oct 2025 13:00:54 +0000 Manifest this update: Mon 27 Oct 2025 13:00:54 +0000 Manifest next update: Tue 28 Oct 2025 13:00:54 +0000 Files and hashes: 1: 0OeAqS6vX3gO6vvCqqj93y9hg-0.roa (hash: 4e6GVSZZmDnDLgJOl3djtnEbqT5lDhaJq4dAZ/qU/lk=) 2: 1-sy7cqqYhKW_jQ51dAShfl4jMiw.crl (hash: SFYC2fRpwGTtLSQEhnTufQCdfddSde7fQAgC67CN3aE=) 3: 3ezvkbNYlAAPTTtiMpMfAXi1MZc.roa (hash: vAEGRwBdpnrHv/YkIQBOy6F594hqpTCRBhtvpnyCndE=) 4: B9T2tEPkzR3I7bfjqMLpjqVmqX0.roa (hash: jvG6Kma4d2VGMYtzkdxrMtFkS2r5Ue1ZSeSqhiErA3k=) 5: IHhv8_mZDx6A2j-F31Pdu0k8CrY.roa (hash: STtIVy8Sw+YzG++4aOUBuN18lGWUI/cMQ7xzdEE/ceE=) 6: NBa1UmmcofJztBL8pTAUTjZFH0k.roa (hash: 86hIGHbzSCBjbpNQmq5AwTHYQV5MFxXejgndiQ6r1LA=) 7: VO1QZo2vfxheLbeFL1rejYxNYBI.roa (hash: FCnZcb/OtfouViKRapPfAgcT5IF02/4Osl8N+1EzEnE=) 8: Wc2-UHBTfF-XHLzgQS0SwCmvlB0.roa (hash: 7aSWc04NFLdsEACjlaycXN0TGgVCRx18P8RZa+kCQIU=) 9: cUk9gF1NAvXhh8uQPdgOvohfLq4.roa (hash: kUG38NhhNKk78iTPsGRqnyUiXKkoTEwb6ImAUIs7EvU=) 10: doz6pIZLFsQi2mYQNJFMwi6P3-w.roa (hash: cmXkx2OZFz2XattOJlW1YfABpPcx3f/r/UMGYZNOMGI=) 11: ioa7P1e1SCYd3BcfFxtI-9P6P2k.roa (hash: 1p7OVkFIK8eU+7iB9pcEKKjlG4sNNxXEXZnDzToZ8Ac=) 12: pCc_cSWUTGqBPQv4cw6oAWrJ3Dw.roa (hash: 592DXKAG5uM8BEJZmdLRa+vW+5yO7qDryAvPgg1YlKU=) 13: pVMgUdSHj0nlaCG6yBmxCGoOV48.roa (hash: iYu6/b1RnNkG7/TqQe3ysX2HEttIbsgucDRlivFMstY=) 14: udVjWjtCw8-mpprcmzafPsXqAEg.roa (hash: 4jYyql/ul3ChaZUGCo2qkL0DtI4tuS2kYKNXsqMrYh4=) Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/53/e8cb44-a954-4672-b9a4-a49e5c6633bd/1/1-sy7cqqYhKW_jQ51dAShfl4jMiw.crl rsync://rpki.ripe.net/repository/DEFAULT/53/e8cb44-a954-4672-b9a4-a49e5c6633bd/1/1-sy7cqqYhKW_jQ51dAShfl4jMiw.mft rsync://rpki.ripe.net/repository/DEFAULT/1-sy7cqqYhKW_jQ51dAShfl4jMiw.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Tue 28 Oct 2025 13:00:54 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9a:25:c1:e1:f8:3a:f1:b1:b8:f3:56:95:9f:ba:a9:31:aa Signature Algorithm: sha256WithRSAEncryption Issuer: CN=faccbb72aa9884a5bf8d0e757404a17e5e23322c Validity Not Before: Oct 27 13:00:54 2025 GMT Not After : Oct 28 13:00:54 2025 GMT Subject: CN=677ec62377297d495da3a8bd5e5cb502b5989f4a Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:d6:33:2e:11:51:76:8d:67:c3:01:a0:ab:8d:b6: 18:ba:e8:18:d8:c7:53:ce:70:7a:6f:bb:2c:22:21: ec:d4:1a:b4:89:ae:af:c8:8b:b2:cb:bd:00:c6:ef: 5d:cb:90:d5:92:df:4e:00:3f:53:6a:8d:34:be:16: 45:14:eb:98:95:3d:f5:e7:19:ad:3e:d5:0e:f5:78: 61:59:60:60:d5:ae:1a:98:c7:a6:be:87:c9:22:08: c1:b2:ef:b4:f6:52:3a:86:76:27:d5:08:67:7f:d7: 85:3c:f6:60:66:24:9c:c2:ef:58:32:31:40:79:f5: 6d:7f:18:d3:34:29:2e:80:9f:d7:0e:d4:e1:ca:2e: db:45:17:ab:44:1f:4f:c6:c5:46:58:bc:ad:e7:1e: 55:0a:b2:7a:ac:93:86:5d:e6:89:28:bb:24:1c:0c: ab:40:21:18:10:11:f1:b6:d2:15:be:15:3b:60:56: 26:01:a0:46:b8:bd:00:47:ee:8e:13:4f:49:cf:63: 94:47:e9:81:14:05:5b:23:b0:de:4d:bf:c0:9c:4d: 4f:5a:f4:23:a1:a8:dc:53:d2:9c:aa:48:a7:e4:c5: 1f:24:bc:1f:0a:28:57:c6:8e:95:46:2b:78:71:81: f8:e3:91:57:13:99:b1:7d:59:3a:59:58:3e:a0:3d: 9f:2d Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 67:7E:C6:23:77:29:7D:49:5D:A3:A8:BD:5E:5C:B5:02:B5:98:9F:4A X509v3 Authority Key Identifier: keyid:FA:CC:BB:72:AA:98:84:A5:BF:8D:0E:75:74:04:A1:7E:5E:23:32:2C X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/1-sy7cqqYhKW_jQ51dAShfl4jMiw.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/53/e8cb44-a954-4672-b9a4-a49e5c6633bd/1/1-sy7cqqYhKW_jQ51dAShfl4jMiw.mft X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/53/e8cb44-a954-4672-b9a4-a49e5c6633bd/1/1-sy7cqqYhKW_jQ51dAShfl4jMiw.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 45:5a:2f:63:49:5b:3f:56:91:6b:0b:7d:cb:47:80:56:0a:00: e4:02:7c:c7:55:bd:9f:c0:d4:dd:24:39:12:71:88:44:e7:fc: 14:f0:a9:4e:0c:62:45:8c:d9:4b:e8:87:60:98:0e:76:8b:69: 33:eb:0c:58:e2:83:f9:ae:fb:11:4d:18:78:4e:fd:6f:2d:0e: 46:3b:1a:3a:e1:0b:96:50:39:50:bc:cc:57:63:12:a6:c4:df: 89:e4:bc:a7:9c:97:79:af:14:91:20:38:49:90:96:39:bc:76: c0:1c:69:d2:4b:1c:de:ba:ba:83:00:5e:22:53:41:13:94:e0: 23:9b:4c:7a:99:10:07:34:ee:9e:6b:42:62:c5:fa:29:6b:66: 8e:33:ed:21:aa:40:6d:0f:cf:6d:62:0f:fd:e4:81:6e:12:34: d4:96:44:73:a4:f6:44:69:3a:fa:1d:0a:18:99:d2:13:11:30: 6d:f9:b8:67:f5:a0:be:31:25:b5:86:39:3e:52:67:ef:c7:71: b3:ac:ba:68:17:df:75:80:a1:9e:0a:e9:df:3e:af:f8:dc:ce: 50:55:67:8f:df:1f:ee:1b:73:ab:ba:af:3c:15:bd:0f:46:30: 80:07:48:e3:85:b3:cf:f9:cc:33:98:fb:3c:2f:59:6d:ab:3d: c7:8a:1e:84 -----BEGIN CERTIFICATE----- MIIFGTCCBAGgAwIBAgISAZolweH4OvGxuPNWlZ+6qTGqMA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKGZhY2NiYjcyYWE5ODg0YTViZjhkMGU3NTc0MDRhMTdlNWUy MzMyMmMwHhcNMjUxMDI3MTMwMDU0WhcNMjUxMDI4MTMwMDU0WjAzMTEwLwYDVQQD Eyg2NzdlYzYyMzc3Mjk3ZDQ5NWRhM2E4YmQ1ZTVjYjUwMmI1OTg5ZjRhMIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEA1jMuEVF2jWfDAaCrjbYYuugY2MdT znB6b7ssIiHs1Bq0ia6vyIuyy70Axu9dy5DVkt9OAD9Tao00vhZFFOuYlT315xmt PtUO9XhhWWBg1a4amMemvofJIgjBsu+09lI6hnYn1Qhnf9eFPPZgZiScwu9YMjFA efVtfxjTNCkugJ/XDtThyi7bRRerRB9PxsVGWLyt5x5VCrJ6rJOGXeaJKLskHAyr QCEYEBHxttIVvhU7YFYmAaBGuL0AR+6OE09Jz2OUR+mBFAVbI7DeTb/AnE1PWvQj oajcU9Kcqkin5MUfJLwfCihXxo6VRit4cYH445FXE5mxfVk6WVg+oD2fLQIDAQAB o4ICJTCCAiEwHQYDVR0OBBYEFGd+xiN3KX1JXaOovV5ctQK1mJ9KMB8GA1UdIwQY MBaAFPrMu3KqmISlv40OdXQEoX5eIzIsMA4GA1UdDwEB/wQEAwIHgDBlBggrBgEF BQcBAQRZMFcwVQYIKwYBBQUHMAKGSXJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvMS1zeTdjcXFZaEtXX2pRNTFkQVNoZmw0ak1pdy5jZXIw gY4GCCsGAQUFBwELBIGBMH8wfQYIKwYBBQUHMAuGcXJzeW5jOi8vcnBraS5yaXBl Lm5ldC9yZXBvc2l0b3J5L0RFRkFVTFQvNTMvZThjYjQ0LWE5NTQtNDY3Mi1iOWE0 LWE0OWU1YzY2MzNiZC8xLzEtc3k3Y3FxWWhLV19qUTUxZEFTaGZsNGpNaXcubWZ0 MIGCBgNVHR8EezB5MHegdaBzhnFyc3luYzovL3Jwa2kucmlwZS5uZXQvcmVwb3Np dG9yeS9ERUZBVUxULzUzL2U4Y2I0NC1hOTU0LTQ2NzItYjlhNC1hNDllNWM2NjMz YmQvMS8xLXN5N2NxcVloS1dfalE1MWRBU2hmbDRqTWl3LmNybDAYBgNVHSABAf8E DjAMMAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgAC BQAwFQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEARVov Y0lbP1aRawt9y0eAVgoA5AJ8x1W9n8DU3SQ5EnGIROf8FPCpTgxiRYzZS+iHYJgO dotpM+sMWOKD+a77EU0YeE79by0ORjsaOuELllA5ULzMV2MSpsTfieS8p5yXea8U kSA4SZCWObx2wBxp0ksc3rq6gwBeIlNBE5TgI5tMepkQBzTunmtCYsX6KWtmjjPt IapAbQ/PbWIP/eSBbhI01JZEc6T2RGk6+h0KGJnSExEwbfm4Z/WgvjEltYY5PlJn 78dxs6y6aBffdYChngrp3z6v+NzOUFVnj98f7htzq7qvPBW9D0YwgAdI44Wzz/nM M5j7PC9Zbas9x4oehA== -----END CERTIFICATE-----Generated at Mon Oct 27 20:59:17 2025 by rpki-client