$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/5b/5e5c30-8aa4-47e8-bd8f-fbe1a0d0aa98/1/VXsKwQuGQqJ909dO1ste4EXme5c.mft File: VXsKwQuGQqJ909dO1ste4EXme5c.mft (raw, json) Hash identifier: r0PiFkfVoO/IKoBYUcHhadPjkyrU0pz5C6kM7jENvk8= Subject key identifier: 83:92:E1:57:27:8D:1C:9C:B9:A6:CA:14:86:9C:6B:E1:1B:6C:08:6A Authority key identifier: 55:7B:0A:C1:0B:86:42:A2:7D:D3:D7:4E:D6:CB:5E:E0:45:E6:7B:97 Certificate issuer: /CN=557b0ac10b8642a27dd3d74ed6cb5ee045e67b97 Certificate serial: 019A6C23DC25C839C5778451183B23AA6088 Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/VXsKwQuGQqJ909dO1ste4EXme5c.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/5b/5e5c30-8aa4-47e8-bd8f-fbe1a0d0aa98/1/VXsKwQuGQqJ909dO1ste4EXme5c.mft Manifest number: 0B73 Signing time: Mon 10 Nov 2025 05:01:20 +0000 Manifest this update: Mon 10 Nov 2025 05:01:20 +0000 Manifest next update: Tue 11 Nov 2025 05:01:20 +0000 Files and hashes: 1: 21k07trihuOq_p0d1xoi4bxuPZA.roa (hash: 7OFU6XWsgxZjBgc5/9Z26TjwR0mC8/oQG4kPqRbf13g=) 2: 4iaJi_OBKAE3o8h175iBu_IZyfI.roa (hash: lDCEAMXE0clsOMjNyholsrUDxhoIrjK4k3xcCfxPkUY=) 3: 5BopT6zWN2-PdGYdxH2aUB0jmhg.roa (hash: /mHqZKMlZJCdgH7Kawl3aGGRgWwqt/sVMAcpLcw5mXU=) 4: Geel9OdOaQ9FlrEzFHKlpiWE30U.roa (hash: mEBGWZVn+mmpTlkiNI5Af3AFG/t42zkx+akYj/Nw/0M=) 5: JWpMTh79Cpipv8z2TiqFetsx4Z0.roa (hash: EeuLpYtgLdl6hvIb6vNrTtAuFpAgpCnIwfpYkuwZmkQ=) 6: ORkWSvHyz7xVlACj3J643SMA1t4.roa (hash: 9HyAWLxiFAOsSF7hRfVc73gtPaqofO7sI7vq8SdYSfA=) 7: Tg1n5Fp1pJd7zBO6W_NcYtcUcjs.roa (hash: 2JSaIkit5yVDVUZV0/gM1VkpGy+fdm5Z9IWeQFjGnCA=) 8: VXsKwQuGQqJ909dO1ste4EXme5c.crl (hash: wKWfyQKi2Oh+rbe4lZi/iSOhV4L7/7LmapxmOUT4gKk=) 9: eEIU-7XZaVcC-f6y_l8FbyGXkYs.roa (hash: ccjF0pRALTvlsj4nghUXMFhD4eJgmm2vuAU1GU9bybw=) 10: gk0o9JIYrdgKiCEVnFxYDFCmm6g.roa (hash: U5lgDtUaYRY5Jq/t8D2zh/ImkX7ABdChH50k3iWkRSA=) 11: isVEUZfOAYWgwQz8Wasb0pXP9-c.roa (hash: KMpoK0MvGBO62nHjsAV0aozmo8+TgCC0xqPegTe+AGU=) 12: plBE2K-1jhmKq6eM8fW4KaXWZeQ.roa (hash: Fhmhnyiel4/Ua1E2ksX/40TvHfAVYkZD+dMm3wF8AAw=) 13: q5iwhkLWHaHzrsMDMRUmBmBn11k.roa (hash: 2neeMv5dtKfWXLBDuxY5lIZ8bbDinZSWs3Ol+x9qe8Y=) 14: qGHwRT5XaADoYIFvBSiB_qBc8VI.roa (hash: 1jerdKXo29tvZCLipnWCYRKXmzqu+SKDN+L+wjo2w8c=) 15: qSnacK2T8IuqCW3tI5c1Sj5K99M.roa (hash: WK1c1s6zKzUYTVUxjbT3jBDMbmv6j/g+GMi3AvdtgQY=) 16: rCp1o_nOqwsF2hOj4c5kBCN-sNQ.roa (hash: hkXBdU7Mx+s+1UvYnZlcv2/hPwhLGz/FrQNM7+jLYxI=) 17: uNvKhwe5KEaAzLU0ACWU9sZ7Bm4.roa (hash: jacfmgDqnbUtNbN3r/NGjMzBlVkGGEbKEgbjHG7ah6U=) Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/5b/5e5c30-8aa4-47e8-bd8f-fbe1a0d0aa98/1/VXsKwQuGQqJ909dO1ste4EXme5c.crl rsync://rpki.ripe.net/repository/DEFAULT/5b/5e5c30-8aa4-47e8-bd8f-fbe1a0d0aa98/1/VXsKwQuGQqJ909dO1ste4EXme5c.mft rsync://rpki.ripe.net/repository/DEFAULT/VXsKwQuGQqJ909dO1ste4EXme5c.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Tue 11 Nov 2025 05:01:20 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9a:6c:23:dc:25:c8:39:c5:77:84:51:18:3b:23:aa:60:88 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=557b0ac10b8642a27dd3d74ed6cb5ee045e67b97 Validity Not Before: Nov 10 05:01:20 2025 GMT Not After : Nov 11 05:01:20 2025 GMT Subject: CN=8392e157278d1c9cb9a6ca14869c6be11b6c086a Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:bd:2b:27:5e:43:96:52:2d:0e:e1:64:dc:87:c2: dd:5d:3a:2c:77:97:f2:7a:fb:03:78:11:ae:5c:b5: 90:db:04:c1:a7:fa:2e:89:99:cb:35:9a:f5:6b:b4: f7:5d:e6:5f:a9:6a:89:e6:fe:6a:81:95:6e:77:55: 33:ee:38:0c:60:fb:1f:96:32:80:91:3f:44:51:89: 56:0f:de:9c:96:09:bc:4e:7a:83:5e:a2:09:2b:3c: 62:f3:2e:2b:22:70:f8:59:70:df:4f:4c:15:3a:de: 5e:be:62:6d:d5:3a:ee:e3:9d:8d:e9:7a:0e:82:d6: 3c:d2:8e:6f:3a:8b:ce:b7:39:31:68:0b:94:f9:b1: 26:f9:b3:14:d0:1b:1b:df:ee:d6:eb:8e:1f:de:5e: 50:c2:64:b8:52:1b:5e:b6:eb:f5:78:c0:c2:6a:69: 84:d1:7a:3b:91:7c:ec:54:2b:f9:94:10:69:00:b2: c9:e5:e9:0f:da:a6:09:ef:3e:87:18:f6:c5:88:0d: 1a:ad:1d:b0:f6:0b:1e:3e:f9:5c:b5:14:83:b4:03: a9:5f:f1:10:ca:85:c0:74:70:9a:4b:a8:b9:4b:3f: 65:20:f8:ad:33:d7:31:1d:6a:fc:30:7a:f4:d8:52: 03:75:ff:04:44:ea:e6:d3:2c:24:6a:be:a2:d1:c7: e4:f5 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 83:92:E1:57:27:8D:1C:9C:B9:A6:CA:14:86:9C:6B:E1:1B:6C:08:6A X509v3 Authority Key Identifier: keyid:55:7B:0A:C1:0B:86:42:A2:7D:D3:D7:4E:D6:CB:5E:E0:45:E6:7B:97 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/VXsKwQuGQqJ909dO1ste4EXme5c.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/5b/5e5c30-8aa4-47e8-bd8f-fbe1a0d0aa98/1/VXsKwQuGQqJ909dO1ste4EXme5c.mft X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/5b/5e5c30-8aa4-47e8-bd8f-fbe1a0d0aa98/1/VXsKwQuGQqJ909dO1ste4EXme5c.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 65:4a:73:88:62:cc:c4:e5:6e:d1:ca:9a:24:10:f9:47:25:22: 52:f8:62:4c:17:87:bc:41:09:59:f1:02:55:e1:23:66:bf:8d: eb:f7:08:3a:95:26:af:ca:6a:b2:19:28:7c:2e:2a:82:96:86: ad:d7:85:a3:db:25:d8:52:9a:ce:ae:1c:d6:5a:e7:5a:5f:5b: c0:b9:db:5c:8c:34:5a:13:4a:38:38:4c:5d:e7:a3:59:2a:32: 0a:8c:b8:b5:26:a8:54:d9:5c:be:7a:47:a5:5b:93:75:ae:54: b2:bc:72:5b:b9:6a:4b:fd:40:f2:61:22:32:12:0c:09:92:63: fb:5b:82:bd:f2:90:49:79:95:62:c0:b9:5e:cd:ec:2c:fb:51: 43:02:01:8e:56:fc:38:48:86:cc:9d:e1:9d:7d:78:68:19:6f: 55:d2:2d:ff:cb:e9:e7:f7:a6:ea:40:21:c9:1e:77:4c:47:1a: ea:3e:30:90:7e:c8:85:f3:f6:d3:ad:8e:19:e0:6e:d8:93:21: e1:cb:a3:26:56:12:9c:71:7e:cf:c1:6c:f4:d6:40:81:90:61: 9e:77:b0:c2:f5:71:ae:64:69:bf:d4:59:8d:e9:90:dc:68:cd: 71:5d:71:ae:5b:6a:ab:7b:54:13:31:b9:40:15:6f:25:f4:4e: 0a:78:57:2e -----BEGIN CERTIFICATE----- MIIFFjCCA/6gAwIBAgISAZpsI9wlyDnFd4RRGDsjqmCIMA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKDU1N2IwYWMxMGI4NjQyYTI3ZGQzZDc0ZWQ2Y2I1ZWUwNDVl NjdiOTcwHhcNMjUxMTEwMDUwMTIwWhcNMjUxMTExMDUwMTIwWjAzMTEwLwYDVQQD Eyg4MzkyZTE1NzI3OGQxYzljYjlhNmNhMTQ4NjljNmJlMTFiNmMwODZhMIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAvSsnXkOWUi0O4WTch8LdXTosd5fy evsDeBGuXLWQ2wTBp/ouiZnLNZr1a7T3XeZfqWqJ5v5qgZVud1Uz7jgMYPsfljKA kT9EUYlWD96clgm8TnqDXqIJKzxi8y4rInD4WXDfT0wVOt5evmJt1Tru452N6XoO gtY80o5vOovOtzkxaAuU+bEm+bMU0Bsb3+7W644f3l5QwmS4Uhtetuv1eMDCammE 0Xo7kXzsVCv5lBBpALLJ5ekP2qYJ7z6HGPbFiA0arR2w9gsePvlctRSDtAOpX/EQ yoXAdHCaS6i5Sz9lIPitM9cxHWr8MHr02FIDdf8EROrm0ywkar6i0cfk9QIDAQAB o4ICIjCCAh4wHQYDVR0OBBYEFIOS4VcnjRycuabKFIaca+EbbAhqMB8GA1UdIwQY MBaAFFV7CsELhkKifdPXTtbLXuBF5nuXMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvVlhzS3dRdUdRcUo5MDlkTzFzdGU0RVhtZTVjLmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC81Yi81ZTVjMzAtOGFhNC00N2U4LWJkOGYt ZmJlMWEwZDBhYTk4LzEvVlhzS3dRdUdRcUo5MDlkTzFzdGU0RVhtZTVjLm1mdDCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC81Yi81ZTVjMzAtOGFhNC00N2U4LWJkOGYtZmJlMWEwZDBhYTk4 LzEvVlhzS3dRdUdRcUo5MDlkTzFzdGU0RVhtZTVjLmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAZUpziGLM xOVu0cqaJBD5RyUiUvhiTBeHvEEJWfECVeEjZr+N6/cIOpUmr8pqshkofC4qgpaG rdeFo9sl2FKazq4c1lrnWl9bwLnbXIw0WhNKODhMXeejWSoyCoy4tSaoVNlcvnpH pVuTda5UsrxyW7lqS/1A8mEiMhIMCZJj+1uCvfKQSXmVYsC5Xs3sLPtRQwIBjlb8 OEiGzJ3hnX14aBlvVdIt/8vp5/em6kAhyR53TEca6j4wkH7IhfP2062OGeBu2JMh 4cujJlYSnHF+z8Fs9NZAgZBhnnewwvVxrmRpv9RZjemQ3GjNcV1xrltqq3tUEzG5 QBVvJfROCnhXLg== -----END CERTIFICATE-----Generated at Mon Nov 10 15:30:54 2025 by rpki-client