$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/5f/b4d75d-953a-4036-9839-57cd68d9cb4e/1/_2mO6y5J_LX5xlqZhXrynOBmQdk.mft File: _2mO6y5J_LX5xlqZhXrynOBmQdk.mft (raw, json) Hash identifier: yfu/NdGnXxI80Mq911xZDtDWZcnA1VXRyXDtHxbsX74= Subject key identifier: 9D:F4:42:DE:3E:6E:17:61:E0:4D:E4:28:7B:1A:7A:F5:A7:C2:60:71 Authority key identifier: FF:69:8E:EB:2E:49:FC:B5:F9:C6:5A:99:85:7A:F2:9C:E0:66:41:D9 Certificate issuer: /CN=ff698eeb2e49fcb5f9c65a99857af29ce06641d9 Certificate serial: 019A23651C1F8E06C014351513FB8B9F53FC Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/_2mO6y5J_LX5xlqZhXrynOBmQdk.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/5f/b4d75d-953a-4036-9839-57cd68d9cb4e/1/_2mO6y5J_LX5xlqZhXrynOBmQdk.mft Manifest number: 1701 Signing time: Mon 27 Oct 2025 02:00:20 +0000 Manifest this update: Mon 27 Oct 2025 02:00:20 +0000 Manifest next update: Tue 28 Oct 2025 02:00:20 +0000 Files and hashes: 1: 0nspkNZBD4AF3c6BuZHawbNEn4s.roa (hash: uIJdsMvT5D3zL8bAjl80cE2Pwz5BnxnpyFyZ11QSq50=) 2: 54-UEvGfxV4WPcy4WxLxIFxxE-U.roa (hash: ojna0RnGjI7OjDPWs+roB1Amf6WKyl5pMZi5IPEPWP8=) 3: 5Tf-mqxbzy7qofAM2dNl7l1t3mU.roa (hash: 6mVr252OaOJiHsmGk/+j0aXnhIUGcpjMKQ+02iLXgcA=) 4: HIpztZT__B_f9n2gN6auamR5pIU.roa (hash: rJY52okWB1TeezbKU/iuTbv7tjIWb1W5p6bbeWIcdzo=) 5: LuyH1oX8EXWypVZ7iAaDpvRYVVc.roa (hash: PwqXxZGK4PUOy9TXRGdRnGJ0Q9f2SZmolPNVfAk0WgM=) 6: NkdsfBqVz48X5H2Y1WQJSu8vlt4.roa (hash: tuiwHFcQQ4SB/tCeR0sJ8nBN9XREzDRoO1cXDj6kEqo=) 7: UjPxDMGW7lYqCuTCh7JHOA6hizY.roa (hash: ANkRdXMj6bkHEGkvb/XWLCpMoxX6nYg0dbetuBTbz8U=) 8: _2mO6y5J_LX5xlqZhXrynOBmQdk.crl (hash: h/sXR9IEVUfbA9r4lGiyCLKn10lWYPzvrWrTbckdRGI=) 9: jqfbqOe3Dnj2fXOhZ9LOHypCFAI.roa (hash: /x0Hcf4qFuhf8+J5QzDuB3C52+I2nDMc1dbR/JkR1Cw=) 10: meQ5SBMnqJBkFHe-JOcEGhCsKFY.roa (hash: TMc5toGudrJJLzHO6dJLOGc8MvIeTEaZ3Nzvom9Ftsw=) Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/5f/b4d75d-953a-4036-9839-57cd68d9cb4e/1/_2mO6y5J_LX5xlqZhXrynOBmQdk.crl rsync://rpki.ripe.net/repository/DEFAULT/5f/b4d75d-953a-4036-9839-57cd68d9cb4e/1/_2mO6y5J_LX5xlqZhXrynOBmQdk.mft rsync://rpki.ripe.net/repository/DEFAULT/_2mO6y5J_LX5xlqZhXrynOBmQdk.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Mon 27 Oct 2025 19:48:03 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9a:23:65:1c:1f:8e:06:c0:14:35:15:13:fb:8b:9f:53:fc Signature Algorithm: sha256WithRSAEncryption Issuer: CN=ff698eeb2e49fcb5f9c65a99857af29ce06641d9 Validity Not Before: Oct 27 02:00:20 2025 GMT Not After : Oct 28 02:00:20 2025 GMT Subject: CN=9df442de3e6e1761e04de4287b1a7af5a7c26071 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:8e:42:b9:88:72:01:97:09:d1:c4:ca:8b:0f:83: a5:73:0a:13:0d:53:4f:ab:58:07:d0:31:03:2c:9a: 8b:fe:9b:db:b4:9e:ae:00:43:88:01:83:e8:f4:ce: f4:84:f5:3f:67:8a:5e:1a:ba:84:1a:30:7c:9b:b3: 21:d5:a6:0e:ba:cc:d7:ae:fe:af:d5:87:a2:e7:e4: c8:ea:93:b4:63:d6:13:59:4b:c4:d9:ba:04:63:6e: 8b:de:ae:64:10:0e:48:ba:89:11:68:8d:9d:54:42: ec:12:ad:c4:d1:51:b1:aa:66:03:6e:8f:1a:a2:ec: 30:16:5d:b7:4e:fa:38:c1:1e:49:0a:5c:21:5d:fd: c9:e9:f7:7b:73:e5:6b:66:74:9f:35:d6:5f:a5:4e: 91:fe:e2:8e:38:90:b9:82:5b:4a:68:b0:c4:5e:92: af:dc:f4:84:15:40:9b:f0:b0:6a:67:9b:0a:cc:d5: 0f:ef:b0:b1:9d:9c:3e:27:8d:bd:61:d8:ca:c7:56: 26:ad:41:65:a2:8a:09:eb:9f:9e:3b:79:4e:46:e0: 9b:74:4e:33:17:b4:af:28:2f:38:db:33:ed:8c:52: 90:a3:1a:3d:c2:4c:ee:4a:02:3d:d7:29:d9:54:69: 89:23:ce:43:15:8d:71:82:74:43:70:df:a1:1e:1d: d0:cf Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 9D:F4:42:DE:3E:6E:17:61:E0:4D:E4:28:7B:1A:7A:F5:A7:C2:60:71 X509v3 Authority Key Identifier: keyid:FF:69:8E:EB:2E:49:FC:B5:F9:C6:5A:99:85:7A:F2:9C:E0:66:41:D9 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/_2mO6y5J_LX5xlqZhXrynOBmQdk.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/5f/b4d75d-953a-4036-9839-57cd68d9cb4e/1/_2mO6y5J_LX5xlqZhXrynOBmQdk.mft X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/5f/b4d75d-953a-4036-9839-57cd68d9cb4e/1/_2mO6y5J_LX5xlqZhXrynOBmQdk.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 5a:f0:f1:35:e1:5e:65:e9:68:ff:a8:14:98:49:54:65:3b:88: 3b:fa:b9:fa:2d:f4:8f:ab:8b:e9:10:a7:5b:47:1c:43:78:32: 1f:c3:6b:48:ab:37:8b:84:59:28:2d:10:6a:d4:2a:5d:b8:b4: 88:60:fa:9c:c8:a6:b2:b1:7e:bd:0f:78:1c:90:d9:ac:ec:40: ca:26:1c:2e:34:b7:04:b5:70:2b:5c:2e:d0:33:3b:b8:ca:da: b3:ec:39:0f:f7:c6:1c:88:f2:ac:06:54:d8:67:39:e6:75:a2: c2:c9:6d:ac:6b:15:eb:4b:ce:d9:34:7a:2b:b5:91:46:5b:aa: c8:b0:97:71:bd:f3:4e:7f:3c:fc:40:6f:f4:68:8e:63:a2:23: 57:cd:8e:a9:65:51:1a:62:d1:6f:85:0d:02:46:2c:7d:90:84: 5e:42:97:1d:00:f9:49:30:b2:4a:22:d7:78:90:46:85:34:6e: 29:bf:a9:d4:0c:2e:8f:18:f7:f8:e2:2e:9c:e3:c4:40:9b:47: 57:19:97:94:91:49:be:56:2c:24:e3:b6:79:17:94:9c:bf:5e: 8c:01:1b:3e:87:85:fd:38:d7:fb:c5:dc:45:aa:cf:7a:a8:0f: c9:c9:f2:ed:3f:51:27:30:39:65:7d:95:14:91:b5:a4:d6:25: 15:30:16:02 -----BEGIN CERTIFICATE----- MIIFFjCCA/6gAwIBAgISAZojZRwfjgbAFDUVE/uLn1P8MA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKGZmNjk4ZWViMmU0OWZjYjVmOWM2NWE5OTg1N2FmMjljZTA2 NjQxZDkwHhcNMjUxMDI3MDIwMDIwWhcNMjUxMDI4MDIwMDIwWjAzMTEwLwYDVQQD Eyg5ZGY0NDJkZTNlNmUxNzYxZTA0ZGU0Mjg3YjFhN2FmNWE3YzI2MDcxMIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAjkK5iHIBlwnRxMqLD4OlcwoTDVNP q1gH0DEDLJqL/pvbtJ6uAEOIAYPo9M70hPU/Z4peGrqEGjB8m7Mh1aYOuszXrv6v 1Yei5+TI6pO0Y9YTWUvE2boEY26L3q5kEA5IuokRaI2dVELsEq3E0VGxqmYDbo8a ouwwFl23Tvo4wR5JClwhXf3J6fd7c+VrZnSfNdZfpU6R/uKOOJC5gltKaLDEXpKv 3PSEFUCb8LBqZ5sKzNUP77CxnZw+J429YdjKx1YmrUFloooJ65+eO3lORuCbdE4z F7SvKC842zPtjFKQoxo9wkzuSgI91ynZVGmJI85DFY1xgnRDcN+hHh3QzwIDAQAB o4ICIjCCAh4wHQYDVR0OBBYEFJ30Qt4+bhdh4E3kKHsaevWnwmBxMB8GA1UdIwQY MBaAFP9pjusuSfy1+cZamYV68pzgZkHZMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvXzJtTzZ5NUpfTFg1eGxxWmhYcnluT0JtUWRrLmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC81Zi9iNGQ3NWQtOTUzYS00MDM2LTk4Mzkt NTdjZDY4ZDljYjRlLzEvXzJtTzZ5NUpfTFg1eGxxWmhYcnluT0JtUWRrLm1mdDCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC81Zi9iNGQ3NWQtOTUzYS00MDM2LTk4MzktNTdjZDY4ZDljYjRl LzEvXzJtTzZ5NUpfTFg1eGxxWmhYcnluT0JtUWRrLmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAWvDxNeFe Zelo/6gUmElUZTuIO/q5+i30j6uL6RCnW0ccQ3gyH8NrSKs3i4RZKC0QatQqXbi0 iGD6nMimsrF+vQ94HJDZrOxAyiYcLjS3BLVwK1wu0DM7uMras+w5D/fGHIjyrAZU 2Gc55nWiwsltrGsV60vO2TR6K7WRRluqyLCXcb3zTn88/EBv9GiOY6IjV82OqWVR GmLRb4UNAkYsfZCEXkKXHQD5STCySiLXeJBGhTRuKb+p1Awujxj3+OIunOPEQJtH VxmXlJFJvlYsJOO2eReUnL9ejAEbPoeF/TjX+8XcRarPeqgPycny7T9RJzA5ZX2V FJG1pNYlFTAWAg== -----END CERTIFICATE-----Generated at Mon Oct 27 04:25:19 2025 by rpki-client