$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/5f/b9884b-6fc5-4b3e-b1e8-e01e94124674/1/2o8F44Q1F88JccK_nN3d1icX5Sw.mft File: 2o8F44Q1F88JccK_nN3d1icX5Sw.mft (raw, json) Hash identifier: KP4uzspBzIPJL2xUdw6hOTjOWlFFVlQpBLC3rZty2lY= Subject key identifier: AE:C6:B3:34:D5:9E:84:AF:B4:FA:D1:C9:5E:23:5A:2A:20:86:D2:5F Authority key identifier: DA:8F:05:E3:84:35:17:CF:09:71:C2:BF:9C:DD:DD:D6:27:17:E5:2C Certificate issuer: /CN=da8f05e3843517cf0971c2bf9cddddd62717e52c Certificate serial: 019A0748E282AD16E3D0E789100F2C14D4D0 Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/2o8F44Q1F88JccK_nN3d1icX5Sw.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/5f/b9884b-6fc5-4b3e-b1e8-e01e94124674/1/2o8F44Q1F88JccK_nN3d1icX5Sw.mft Manifest number: 09C7 Signing time: Tue 21 Oct 2025 15:00:08 +0000 Manifest this update: Tue 21 Oct 2025 15:00:08 +0000 Manifest next update: Wed 22 Oct 2025 15:00:08 +0000 Files and hashes: 1: 0uOd6pkbVcZjPk-Kbr-5tFBqZCU.roa (hash: xqBleUY4Z9zq7UyMqOMWy7ryf9KoBj1PjfY1uJWx7sk=) 2: 2o8F44Q1F88JccK_nN3d1icX5Sw.crl (hash: SKds1G0PxjXauXj5saWq7UA4i/8UrT7IWh19sMpSgX0=) 3: 6fo87MmGE1UjtxclnRa9qrk6UGM.roa (hash: pci8N0GbpCHAxgqqnFxgDiIt1lIp8+ssI2b4Yf5Rg+E=) 4: 8qpcVnGYsLxwTiVc5wTV5dRFK4k.roa (hash: RbWUZtrPDR/A3Nx2zGfdIax0nOuzV8AAA7cnBdypxWc=) 5: Hax2CM_u8tv_Y_4IhciZMhkDl3c.roa (hash: e9PckbluSyyzMKimJgtpYDPOMt/2roevlfetav7K+BQ=) 6: KvD4Pa3lfXKcjfgVEMsuUlxyqpQ.roa (hash: BVkdPRLTcswZV+vMxoNSYxQYWyflcpgaedXCE6/uDRk=) 7: RR9CZyYi6n9Q08SG7w4DsIQSJqE.roa (hash: N5pZ5HpdV+sU2XpEoXlts+Mklu638CuRARvFwE/FmiI=) 8: nx5Oe8_eex0Lfmh8SN1I5-K_L0c.roa (hash: aN95mG0hj7PK2XyXWR+TAHvEHR+mZTfAc87764WjQ2c=) 9: qOO5dT9W5xkoHAQL601E08xwv24.roa (hash: 1FhIPAsVstrUOOgTU9C0JI4gYu/byZYWA//QylDnCnw=) 10: sUb0Zw8pjJl8ScoJeLuqD9laegA.roa (hash: pDiLmEvZRUyivCYPJwe74TSCfaSqIBI4xYENdV2R1wk=) 11: zKcHHqm6nAgqTE-C4TiY0X7SueI.roa (hash: iZfl8ZghJZguA4a9LNsQfxENOVNQqLvAQQCUSQMWqeU=) Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/5f/b9884b-6fc5-4b3e-b1e8-e01e94124674/1/2o8F44Q1F88JccK_nN3d1icX5Sw.crl rsync://rpki.ripe.net/repository/DEFAULT/5f/b9884b-6fc5-4b3e-b1e8-e01e94124674/1/2o8F44Q1F88JccK_nN3d1icX5Sw.mft rsync://rpki.ripe.net/repository/DEFAULT/2o8F44Q1F88JccK_nN3d1icX5Sw.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Wed 22 Oct 2025 14:12:02 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9a:07:48:e2:82:ad:16:e3:d0:e7:89:10:0f:2c:14:d4:d0 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=da8f05e3843517cf0971c2bf9cddddd62717e52c Validity Not Before: Oct 21 15:00:08 2025 GMT Not After : Oct 22 15:00:08 2025 GMT Subject: CN=aec6b334d59e84afb4fad1c95e235a2a2086d25f Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:be:82:4d:eb:a3:2c:d1:37:b5:9a:d9:da:3c:56: dd:64:4e:21:17:83:0f:f5:51:84:ed:ec:26:61:e8: 5c:5a:37:32:4b:2f:06:f0:6f:d5:8e:12:3d:aa:3f: 6e:86:dd:39:d1:fe:93:7d:ce:62:c5:7a:17:eb:19: 20:c2:8b:56:a0:f4:df:cc:0a:f6:b1:b1:a7:e3:56: 47:0a:c2:6b:6d:48:87:06:06:1a:c6:f9:b5:32:23: 2f:4c:5c:91:3c:10:38:e8:5b:40:81:6e:63:f6:4a: 22:48:5c:65:ba:00:9d:75:15:75:b3:bf:11:e8:04: 5d:cf:29:ef:84:fb:2d:fd:63:2a:62:5f:76:4c:71: 3e:5f:17:6f:33:fe:26:3c:f6:15:cc:40:7b:72:37: 42:cc:e8:73:f8:59:14:68:79:17:13:c4:4e:08:f7: f7:28:d4:cc:49:7c:fc:b9:64:a0:ca:5e:28:01:78: bb:88:10:4f:18:aa:14:e7:e7:95:32:af:a2:45:b9: 99:87:27:8b:3e:cb:c1:08:df:a3:2b:12:8a:bf:26: fc:f6:2b:eb:ff:e9:ab:99:f2:67:83:14:da:54:9d: 3b:43:5c:02:94:07:14:4f:67:7f:d4:4e:ef:26:3d: eb:a3:f5:91:d6:c2:1b:2a:29:ea:21:ed:17:80:05: 09:2f Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: AE:C6:B3:34:D5:9E:84:AF:B4:FA:D1:C9:5E:23:5A:2A:20:86:D2:5F X509v3 Authority Key Identifier: keyid:DA:8F:05:E3:84:35:17:CF:09:71:C2:BF:9C:DD:DD:D6:27:17:E5:2C X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/2o8F44Q1F88JccK_nN3d1icX5Sw.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/5f/b9884b-6fc5-4b3e-b1e8-e01e94124674/1/2o8F44Q1F88JccK_nN3d1icX5Sw.mft X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/5f/b9884b-6fc5-4b3e-b1e8-e01e94124674/1/2o8F44Q1F88JccK_nN3d1icX5Sw.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 5e:76:7e:78:9b:82:4f:d0:64:61:1d:15:53:79:79:e4:34:ca: e8:3e:c0:a4:cc:87:e3:c0:9c:80:8f:9d:e7:c2:a9:31:a4:c3: a8:22:8c:dc:3a:ad:a6:d0:25:a2:63:29:ab:2b:3a:04:ac:16: bc:73:ca:34:07:3b:ba:46:85:22:9a:9e:0e:44:77:08:a0:aa: 60:73:2a:05:c6:e8:fd:b2:7a:b2:dd:56:1a:6a:72:a0:39:aa: 9b:db:5e:32:b3:23:a8:74:37:af:55:d0:7d:66:27:f7:99:3b: 0e:2d:3e:02:cd:45:ce:69:8a:2f:1e:bf:8d:90:1d:0c:02:0a: df:73:f0:b0:8d:68:93:1d:72:ad:e0:52:b9:b0:26:ed:ea:43: b6:d2:5f:9c:d7:19:1a:96:1b:ab:14:a3:95:f5:bd:23:7c:0c: e8:a3:70:be:2c:65:c9:11:60:f8:5f:70:32:69:93:28:f5:9b: e3:93:47:fc:82:2a:b5:cd:c4:b8:f2:10:c3:9a:98:50:01:63: ea:4f:1d:f6:5d:96:bc:55:b8:06:9a:8c:17:e1:65:01:12:66: 8b:1d:fe:4b:5d:95:26:9d:66:91:2a:dc:3c:00:dc:66:f7:da: 19:8a:36:84:7e:b7:e1:4b:c2:1c:55:8a:97:72:70:52:29:2a: 68:f7:03:d9 -----BEGIN CERTIFICATE----- MIIFFjCCA/6gAwIBAgISAZoHSOKCrRbj0OeJEA8sFNTQMA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKGRhOGYwNWUzODQzNTE3Y2YwOTcxYzJiZjljZGRkZGQ2Mjcx N2U1MmMwHhcNMjUxMDIxMTUwMDA4WhcNMjUxMDIyMTUwMDA4WjAzMTEwLwYDVQQD EyhhZWM2YjMzNGQ1OWU4NGFmYjRmYWQxYzk1ZTIzNWEyYTIwODZkMjVmMIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAvoJN66Ms0Te1mtnaPFbdZE4hF4MP 9VGE7ewmYehcWjcySy8G8G/VjhI9qj9uht050f6Tfc5ixXoX6xkgwotWoPTfzAr2 sbGn41ZHCsJrbUiHBgYaxvm1MiMvTFyRPBA46FtAgW5j9koiSFxlugCddRV1s78R 6ARdzynvhPst/WMqYl92THE+XxdvM/4mPPYVzEB7cjdCzOhz+FkUaHkXE8ROCPf3 KNTMSXz8uWSgyl4oAXi7iBBPGKoU5+eVMq+iRbmZhyeLPsvBCN+jKxKKvyb89ivr /+mrmfJngxTaVJ07Q1wClAcUT2d/1E7vJj3ro/WR1sIbKinqIe0XgAUJLwIDAQAB o4ICIjCCAh4wHQYDVR0OBBYEFK7GszTVnoSvtPrRyV4jWioghtJfMB8GA1UdIwQY MBaAFNqPBeOENRfPCXHCv5zd3dYnF+UsMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvMm84RjQ0UTFGODhKY2NLX25OM2QxaWNYNVN3LmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC81Zi9iOTg4NGItNmZjNS00YjNlLWIxZTgt ZTAxZTk0MTI0Njc0LzEvMm84RjQ0UTFGODhKY2NLX25OM2QxaWNYNVN3Lm1mdDCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC81Zi9iOTg4NGItNmZjNS00YjNlLWIxZTgtZTAxZTk0MTI0Njc0 LzEvMm84RjQ0UTFGODhKY2NLX25OM2QxaWNYNVN3LmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAXnZ+eJuC T9BkYR0VU3l55DTK6D7ApMyH48CcgI+d58KpMaTDqCKM3DqtptAlomMpqys6BKwW vHPKNAc7ukaFIpqeDkR3CKCqYHMqBcbo/bJ6st1WGmpyoDmqm9teMrMjqHQ3r1XQ fWYn95k7Di0+As1FzmmKLx6/jZAdDAIK33PwsI1okx1yreBSubAm7epDttJfnNcZ GpYbqxSjlfW9I3wM6KNwvixlyRFg+F9wMmmTKPWb45NH/IIqtc3EuPIQw5qYUAFj 6k8d9l2WvFW4BpqMF+FlARJmix3+S12VJp1mkSrcPADcZvfaGYo2hH634UvCHFWK l3JwUikqaPcD2Q== -----END CERTIFICATE-----Generated at Tue Oct 21 23:25:37 2025 by rpki-client