$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/57/3b51b8-10c6-438b-a120-15f13e3f7d85/1/2Cy0PKPAxXgWzuNgR40M-IIgf9I.mft File: 2Cy0PKPAxXgWzuNgR40M-IIgf9I.mft (raw, json) Hash identifier: 8hNQibq5D9fT1DJTT2lW+WKHP7Bjm2Cl8p7vRaLHdvI= Subject key identifier: 12:0B:3E:EF:62:74:E9:6D:72:49:73:E4:72:9C:64:ED:71:98:A6:40 Authority key identifier: D8:2C:B4:3C:A3:C0:C5:78:16:CE:E3:60:47:8D:0C:F8:82:20:7F:D2 Certificate issuer: /CN=d82cb43ca3c0c57816cee360478d0cf882207fd2 Certificate serial: 019A1FF6379C35471B36BE8B6F6F2310C454 Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/2Cy0PKPAxXgWzuNgR40M-IIgf9I.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/57/3b51b8-10c6-438b-a120-15f13e3f7d85/1/2Cy0PKPAxXgWzuNgR40M-IIgf9I.mft Manifest number: 05A7 Signing time: Sun 26 Oct 2025 10:00:21 +0000 Manifest this update: Sun 26 Oct 2025 10:00:21 +0000 Manifest next update: Mon 27 Oct 2025 10:00:21 +0000 Files and hashes: 1: 2Cy0PKPAxXgWzuNgR40M-IIgf9I.crl (hash: oTGD4c+VqCkuakQKelgPlxPI2LjKBgap849uEV2MGXw=) 2: 3NKK36OzbyCVvAW6QnBXCk0vC-E.roa (hash: gHjjORGkqgV1v9V5gvG+Gu8C2uJp9VohURGk9hhqXCY=) 3: 56KKt4BpkIwEHMFmq2QXksA-2io.roa (hash: 54GcazY6u68JnZUu56e7FZCBJWXeMImZQ8ihkRRuFTc=) 4: DWnysDNu_v7yNNJ1aIjDqps-5LM.roa (hash: JPD53SzaSyMUMEmsWnAbUrfvGclz72WlfPM6q3RIsCk=) 5: SOWcqaYhZ7YX4OOHhJe96In9itw.roa (hash: UaSEArJ4Ty/99oB9k6ZnmXrGKJLGr0L+yE1xo+K6dEg=) 6: X3vNtvsomO27Kd2vA5pm18uPmdU.roa (hash: qr4mzjHU/2+nlh+IYLU51D2SlEL1XSnDydpL/wjE4BM=) 7: f7lR2qdNzNhMHZctwhySnx52rh8.roa (hash: uc/3dtcmzwA7XSJMfP+6pPiS8XT6tGwBC3iJr2Zlmhg=) 8: kcbMP36K9zR3OAqVvtstfD6Qc1E.roa (hash: kKzo7D93m1wQVJ52FPItkIqrFxN6fMh/dyqt/5KaXWw=) 9: ksCUkPPXGRQEiQCKOl3Wp67HpYk.roa (hash: Fa0gD5gnN233i5uopk4/0YW9tKdVwYrJaJzPk4e1vT4=) 10: p8WEIwXo7Clnw_lkUVuyGNIeOvM.roa (hash: Ur1mz6OTaNWSYai5Ah9bPYej/Ck8pv/XZW+9ZEpR3q8=) 11: r9xTyNget5zcXlE9TLs7M3SNT04.roa (hash: AESrTW2Rp0Ova6EIN8mRWsiWri5RUSzYkj7e2h2UwnM=) 12: wBcaC1_PamN7lirmMN3fzCp6jH4.roa (hash: G/3j6WArnTAj7/DCB5dCgU40hqdUmgoP9O96RyuFd1M=) 13: wWRwvyrn-LAOgtkAhCo3MlchYWQ.roa (hash: Uba3h/vRuJ26W0MxcGsxkEurmXFyfeD+ONZVIUG7QEM=) 14: xQ1rwm6oO8jHA9kZhQvVDEfMToU.roa (hash: rR/azYUh2GUL8HTdYkb3GDWX8S5vRgxNHhornEovZ9o=) Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/57/3b51b8-10c6-438b-a120-15f13e3f7d85/1/2Cy0PKPAxXgWzuNgR40M-IIgf9I.crl rsync://rpki.ripe.net/repository/DEFAULT/57/3b51b8-10c6-438b-a120-15f13e3f7d85/1/2Cy0PKPAxXgWzuNgR40M-IIgf9I.mft rsync://rpki.ripe.net/repository/DEFAULT/2Cy0PKPAxXgWzuNgR40M-IIgf9I.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Mon 27 Oct 2025 10:00:21 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9a:1f:f6:37:9c:35:47:1b:36:be:8b:6f:6f:23:10:c4:54 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=d82cb43ca3c0c57816cee360478d0cf882207fd2 Validity Not Before: Oct 26 10:00:21 2025 GMT Not After : Oct 27 10:00:21 2025 GMT Subject: CN=120b3eef6274e96d724973e4729c64ed7198a640 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:f1:24:1d:df:24:15:ae:67:b2:bf:d6:5e:07:a2: 8b:23:95:b1:ca:45:2b:eb:f7:9a:c6:03:c9:a3:f2: af:f1:70:8e:2b:ac:27:2e:72:0b:22:cb:30:16:09: 2b:35:62:da:31:d0:35:6d:a8:00:01:a1:bb:97:44: ab:ec:ae:ad:2e:90:01:90:f0:02:00:33:8b:a7:41: 56:fc:3d:0c:07:bb:4b:b0:77:b9:49:01:4c:4e:8a: 46:44:32:cb:a3:ce:5a:09:6e:15:a9:21:1c:82:26: 9a:ef:f9:c1:4e:b6:14:77:9f:e3:a5:97:d4:b4:30: c0:6d:55:ac:7c:a3:b5:ac:e3:9f:ed:0c:ba:f4:d2: c1:8e:e5:b8:a5:d4:27:c1:0d:85:ad:1d:77:d4:45: 29:64:a3:f1:56:b5:3f:38:cc:cd:58:e8:26:f4:6f: d4:63:56:16:c2:d9:0f:3b:b1:f7:54:81:90:d1:2d: 71:d6:ea:54:4c:e4:7c:08:d1:55:0b:e8:f0:c9:6d: 9b:52:e5:a3:e4:c7:b7:ce:74:f9:b0:23:a2:6c:02: 96:c4:87:3c:83:14:88:37:ac:f8:72:c2:51:84:96: 6c:4d:eb:85:31:7c:57:af:1b:af:f4:6c:de:41:03: 2b:19:0a:52:d2:da:9a:67:51:bd:e1:0b:33:9c:7e: 51:b3 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 12:0B:3E:EF:62:74:E9:6D:72:49:73:E4:72:9C:64:ED:71:98:A6:40 X509v3 Authority Key Identifier: keyid:D8:2C:B4:3C:A3:C0:C5:78:16:CE:E3:60:47:8D:0C:F8:82:20:7F:D2 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/2Cy0PKPAxXgWzuNgR40M-IIgf9I.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/57/3b51b8-10c6-438b-a120-15f13e3f7d85/1/2Cy0PKPAxXgWzuNgR40M-IIgf9I.mft X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/57/3b51b8-10c6-438b-a120-15f13e3f7d85/1/2Cy0PKPAxXgWzuNgR40M-IIgf9I.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 55:ef:e9:88:39:0b:60:84:02:71:74:2f:15:bf:bf:90:6a:9e: 4a:7b:72:fd:13:5f:44:73:f8:c1:f2:8b:77:ad:db:15:81:4e: e2:a9:ef:98:8b:df:d0:22:b7:b8:2d:9a:30:02:28:c9:55:6d: 11:82:d3:3d:3e:82:c2:2d:17:3d:95:4d:4f:5d:70:5b:32:7d: 93:d7:eb:f7:11:82:d0:30:9c:cf:6a:3e:f7:5a:30:c5:eb:30: d6:55:75:fc:32:be:1c:96:be:f4:55:07:c6:50:eb:fd:cb:94: 20:0e:f1:a6:4c:ba:98:c1:98:bf:d1:c6:30:a7:82:1b:a4:df: 76:19:fe:35:96:19:4f:c5:fe:63:e8:ab:78:c4:9c:d9:fd:bb: f0:4f:8a:e9:d8:e9:1b:88:34:32:8d:b3:ee:d2:89:75:d7:31: ae:47:47:34:ed:62:94:13:36:2e:7e:c0:6e:e2:bc:b9:c4:c1: 7f:05:5f:aa:19:1b:d1:0b:fb:58:ec:6b:5d:31:03:d9:ea:5f: d6:f2:c1:4f:08:4b:49:88:d8:b9:1b:45:70:4b:25:5d:eb:5f: 19:ae:44:24:bb:3a:1c:3b:bb:8f:55:c0:27:f8:3b:1e:70:e5: 14:da:94:ca:a4:00:63:c4:68:b2:a0:ae:f5:d0:26:28:c1:3d: a7:b2:dc:64 -----BEGIN CERTIFICATE----- MIIFFjCCA/6gAwIBAgISAZof9jecNUcbNr6Lb28jEMRUMA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKGQ4MmNiNDNjYTNjMGM1NzgxNmNlZTM2MDQ3OGQwY2Y4ODIy MDdmZDIwHhcNMjUxMDI2MTAwMDIxWhcNMjUxMDI3MTAwMDIxWjAzMTEwLwYDVQQD EygxMjBiM2VlZjYyNzRlOTZkNzI0OTczZTQ3MjljNjRlZDcxOThhNjQwMIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEA8SQd3yQVrmeyv9ZeB6KLI5WxykUr 6/eaxgPJo/Kv8XCOK6wnLnILIsswFgkrNWLaMdA1bagAAaG7l0Sr7K6tLpABkPAC ADOLp0FW/D0MB7tLsHe5SQFMTopGRDLLo85aCW4VqSEcgiaa7/nBTrYUd5/jpZfU tDDAbVWsfKO1rOOf7Qy69NLBjuW4pdQnwQ2FrR131EUpZKPxVrU/OMzNWOgm9G/U Y1YWwtkPO7H3VIGQ0S1x1upUTOR8CNFVC+jwyW2bUuWj5Me3znT5sCOibAKWxIc8 gxSIN6z4csJRhJZsTeuFMXxXrxuv9GzeQQMrGQpS0tqaZ1G94QsznH5RswIDAQAB o4ICIjCCAh4wHQYDVR0OBBYEFBILPu9idOltcklz5HKcZO1xmKZAMB8GA1UdIwQY MBaAFNgstDyjwMV4Fs7jYEeNDPiCIH/SMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvMkN5MFBLUEF4WGdXenVOZ1I0ME0tSUlnZjlJLmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC81Ny8zYjUxYjgtMTBjNi00MzhiLWExMjAt MTVmMTNlM2Y3ZDg1LzEvMkN5MFBLUEF4WGdXenVOZ1I0ME0tSUlnZjlJLm1mdDCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC81Ny8zYjUxYjgtMTBjNi00MzhiLWExMjAtMTVmMTNlM2Y3ZDg1 LzEvMkN5MFBLUEF4WGdXenVOZ1I0ME0tSUlnZjlJLmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAVe/piDkL YIQCcXQvFb+/kGqeSnty/RNfRHP4wfKLd63bFYFO4qnvmIvf0CK3uC2aMAIoyVVt EYLTPT6Cwi0XPZVNT11wWzJ9k9fr9xGC0DCcz2o+91owxesw1lV1/DK+HJa+9FUH xlDr/cuUIA7xpky6mMGYv9HGMKeCG6Tfdhn+NZYZT8X+Y+ireMSc2f278E+K6djp G4g0Mo2z7tKJddcxrkdHNO1ilBM2Ln7AbuK8ucTBfwVfqhkb0Qv7WOxrXTED2epf 1vLBTwhLSYjYuRtFcEslXetfGa5EJLs6HDu7j1XAJ/g7HnDlFNqUyqQAY8RosqCu 9dAmKME9p7LcZA== -----END CERTIFICATE-----Generated at Sun Oct 26 17:34:23 2025 by rpki-client