$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/71/914d39-3020-4b79-ad26-d87affb8bc61/1/S0BcqrNLv95rjuZsYAhgxs6W8ys.mft File: S0BcqrNLv95rjuZsYAhgxs6W8ys.mft (raw, json) Hash identifier: dH4WqnKAHg63mLA05dmnFl6VDbDO5iHj97ojg6viR+o= Subject key identifier: 34:19:81:FE:B9:8C:E3:F4:C0:6E:CA:F3:E0:77:70:06:99:48:5F:3B Authority key identifier: 4B:40:5C:AA:B3:4B:BF:DE:6B:8E:E6:6C:60:08:60:C6:CE:96:F3:2B Certificate issuer: /CN=4b405caab34bbfde6b8ee66c600860c6ce96f32b Certificate serial: 019A232EA397C606656FD99759B37F19E7A3 Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/S0BcqrNLv95rjuZsYAhgxs6W8ys.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/71/914d39-3020-4b79-ad26-d87affb8bc61/1/S0BcqrNLv95rjuZsYAhgxs6W8ys.mft Manifest number: 16FD Signing time: Mon 27 Oct 2025 01:00:50 +0000 Manifest this update: Mon 27 Oct 2025 01:00:50 +0000 Manifest next update: Tue 28 Oct 2025 01:00:50 +0000 Files and hashes: 1: 11HD7yYKcpDp91MDnZ2qx4f7DA4.roa (hash: I82O47jamEqwRmGn3/G2hhZ8d3EhBnYIg9JLsYyDdcE=) 2: EVFSBas9Aq_MdNVwUd8bGuaA3Ws.roa (hash: BhtgRPsHAejHOiiDvH3HRPbC4SYTxdKvHTv4FGSpdUs=) 3: EwIzZdJ1IhMaFw8VKQftgylzjgE.roa (hash: TssNiQ/Zpv1pzvYDHFFLNu5wfEVQ4u0fKOIDHY91aqk=) 4: LVgdGGp1BXM3wqsV9OwWixTAngw.roa (hash: yASeozzYpGQSF5fg0wPLHaGxwKLjvcatKKCkqykA4I8=) 5: MJIbLhSmNC8a874fA2nbq57HEtg.roa (hash: WaRYM9CvEVYhUP+ZoiflR5McAGOB5Og+0p9cf3/LEak=) 6: P1A1BXCqCADzQosrk4MwUKPYxTk.roa (hash: LXH4t2ODNhUtfiB03lL7Y51z/AGbNaW0Y11NO+KNqsc=) 7: QHWMs-MZjDSwChSISEL6Gl0q8mw.roa (hash: MTwg/6CPgLRHHoER9F5LK/UDna9Vp7Lok94EKexAIUI=) 8: S0BcqrNLv95rjuZsYAhgxs6W8ys.crl (hash: 54cOUzIFLqQUALmdPxXdrhSTbScWanGZOBIg80uKy8s=) 9: Xdvj43KnSMHPF5yK-nfEWq4KZoY.roa (hash: 0KUoHz1/LcxNxADlsv04gqLb680zAS0Z8MaiKDomgYY=) 10: foffFzsX_C0XZVackxzc9TT3Ql0.roa (hash: v5tw1DCZvp0dZORs+mozhjde3hmTpwW0Pvc0v2NmjrU=) Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/71/914d39-3020-4b79-ad26-d87affb8bc61/1/S0BcqrNLv95rjuZsYAhgxs6W8ys.crl rsync://rpki.ripe.net/repository/DEFAULT/71/914d39-3020-4b79-ad26-d87affb8bc61/1/S0BcqrNLv95rjuZsYAhgxs6W8ys.mft rsync://rpki.ripe.net/repository/DEFAULT/S0BcqrNLv95rjuZsYAhgxs6W8ys.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Mon 27 Oct 2025 19:48:03 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9a:23:2e:a3:97:c6:06:65:6f:d9:97:59:b3:7f:19:e7:a3 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=4b405caab34bbfde6b8ee66c600860c6ce96f32b Validity Not Before: Oct 27 01:00:50 2025 GMT Not After : Oct 28 01:00:50 2025 GMT Subject: CN=341981feb98ce3f4c06ecaf3e077700699485f3b Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:df:73:e5:17:08:6e:51:ee:8d:85:99:ba:a4:fa: 32:e2:33:42:6c:91:4f:80:ea:f7:de:1e:10:b5:94: b8:7b:0c:a9:3a:14:64:75:7a:49:0b:b3:14:47:87: 12:29:a1:28:45:80:23:7e:de:56:69:6b:cb:00:1b: eb:89:31:53:30:0e:c1:b3:51:d2:39:91:b7:a2:cc: 25:9b:d4:6b:0a:24:3b:10:26:08:e4:60:ae:97:b9: 9e:d3:2d:9d:ce:6c:60:f9:d7:a7:12:e8:e5:ee:86: 29:35:f3:44:52:76:7e:4f:eb:7b:80:26:de:ed:fc: 57:39:85:66:9f:39:12:4d:7f:b4:d2:bd:61:ca:a1: 26:c8:20:4a:33:7b:77:a8:96:b3:24:60:a9:55:4f: cf:e1:ca:e9:d7:dc:9d:c2:53:ad:eb:e9:6b:c0:94: a5:80:3f:d9:e4:ab:f1:7a:f9:8f:aa:86:9c:97:fc: 2e:7a:63:d2:09:5f:a8:da:99:58:80:12:18:59:24: a7:49:4e:d5:cb:d8:af:9d:39:c8:87:a6:39:98:34: a5:1c:76:60:6c:43:d3:3a:c0:ed:42:03:4b:ef:b1: 9a:40:dc:ce:d5:93:62:00:03:e5:29:29:ac:b2:f9: 50:73:c5:9b:6e:04:63:93:02:6c:d5:50:a9:e5:5c: 49:81 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 34:19:81:FE:B9:8C:E3:F4:C0:6E:CA:F3:E0:77:70:06:99:48:5F:3B X509v3 Authority Key Identifier: keyid:4B:40:5C:AA:B3:4B:BF:DE:6B:8E:E6:6C:60:08:60:C6:CE:96:F3:2B X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/S0BcqrNLv95rjuZsYAhgxs6W8ys.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/71/914d39-3020-4b79-ad26-d87affb8bc61/1/S0BcqrNLv95rjuZsYAhgxs6W8ys.mft X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/71/914d39-3020-4b79-ad26-d87affb8bc61/1/S0BcqrNLv95rjuZsYAhgxs6W8ys.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 46:32:43:c6:79:38:c3:5a:22:95:b3:d2:23:4e:3e:c9:63:27: 64:fa:2d:70:12:c9:3f:02:1a:61:25:61:f5:18:84:91:b1:19: 1c:96:d4:53:c2:59:3e:ae:ce:d9:66:ed:e3:93:20:95:1b:9c: b7:b9:ec:aa:b8:72:b7:04:92:75:00:0d:ce:9b:cb:29:67:b3: aa:cf:8e:4c:5c:7b:84:84:a7:f5:c8:4d:ed:7e:5b:ac:e2:72: 99:67:b4:8c:c9:24:a9:cc:b8:ce:59:b2:4c:34:71:0f:bb:fc: 3e:e8:de:a5:84:ba:29:78:22:a7:59:8d:0c:26:e4:f6:28:15: 4e:d9:0a:95:15:74:2c:30:0d:5d:34:b0:ac:eb:1e:bb:a2:f9: dc:e8:d7:75:f8:8d:d3:2a:13:dd:ac:17:91:4a:e8:2d:11:7f: 75:48:3f:19:b5:d0:b7:bb:3d:f7:b2:41:e4:1a:f3:23:36:79: 6f:7a:ec:73:16:43:2f:73:0d:7d:d9:0b:16:f3:e5:a1:7f:7d: 1c:f1:42:ba:48:f1:96:45:e2:b7:94:3a:7f:72:c3:1d:3e:92: a1:f0:61:18:91:3e:56:b0:81:44:72:5c:1d:01:83:e0:4d:fc: 24:42:da:e6:41:51:98:2f:43:d0:0b:d6:3e:91:f5:b4:22:54: d9:f7:67:da -----BEGIN CERTIFICATE----- MIIFFjCCA/6gAwIBAgISAZojLqOXxgZlb9mXWbN/GeejMA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKDRiNDA1Y2FhYjM0YmJmZGU2YjhlZTY2YzYwMDg2MGM2Y2U5 NmYzMmIwHhcNMjUxMDI3MDEwMDUwWhcNMjUxMDI4MDEwMDUwWjAzMTEwLwYDVQQD EygzNDE5ODFmZWI5OGNlM2Y0YzA2ZWNhZjNlMDc3NzAwNjk5NDg1ZjNiMIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEA33PlFwhuUe6NhZm6pPoy4jNCbJFP gOr33h4QtZS4ewypOhRkdXpJC7MUR4cSKaEoRYAjft5WaWvLABvriTFTMA7Bs1HS OZG3oswlm9RrCiQ7ECYI5GCul7me0y2dzmxg+denEujl7oYpNfNEUnZ+T+t7gCbe 7fxXOYVmnzkSTX+00r1hyqEmyCBKM3t3qJazJGCpVU/P4crp19ydwlOt6+lrwJSl gD/Z5KvxevmPqoacl/wuemPSCV+o2plYgBIYWSSnSU7Vy9ivnTnIh6Y5mDSlHHZg bEPTOsDtQgNL77GaQNzO1ZNiAAPlKSmssvlQc8WbbgRjkwJs1VCp5VxJgQIDAQAB o4ICIjCCAh4wHQYDVR0OBBYEFDQZgf65jOP0wG7K8+B3cAaZSF87MB8GA1UdIwQY MBaAFEtAXKqzS7/ea47mbGAIYMbOlvMrMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvUzBCY3FyTkx2OTVyanVac1lBaGd4czZXOHlzLmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC83MS85MTRkMzktMzAyMC00Yjc5LWFkMjYt ZDg3YWZmYjhiYzYxLzEvUzBCY3FyTkx2OTVyanVac1lBaGd4czZXOHlzLm1mdDCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC83MS85MTRkMzktMzAyMC00Yjc5LWFkMjYtZDg3YWZmYjhiYzYx LzEvUzBCY3FyTkx2OTVyanVac1lBaGd4czZXOHlzLmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEARjJDxnk4 w1oilbPSI04+yWMnZPotcBLJPwIaYSVh9RiEkbEZHJbUU8JZPq7O2Wbt45MglRuc t7nsqrhytwSSdQANzpvLKWezqs+OTFx7hISn9chN7X5brOJymWe0jMkkqcy4zlmy TDRxD7v8PujepYS6KXgip1mNDCbk9igVTtkKlRV0LDANXTSwrOseu6L53OjXdfiN 0yoT3awXkUroLRF/dUg/GbXQt7s997JB5BrzIzZ5b3rscxZDL3MNfdkLFvPloX99 HPFCukjxlkXit5Q6f3LDHT6SofBhGJE+VrCBRHJcHQGD4E38JELa5kFRmC9D0AvW PpH1tCJU2fdn2g== -----END CERTIFICATE-----Generated at Mon Oct 27 04:02:11 2025 by rpki-client