$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/75/a1ae70-7996-4687-a0d7-5e0f4ab809bb/1/dD5EftuKXg4bHX9c3Ch8NkpfsLU.mft File: dD5EftuKXg4bHX9c3Ch8NkpfsLU.mft (raw, json) Hash identifier: fRDy5sjWAy5cK4NBZaZ3cIOhutOtPN5m4HgEAR0o0es= Subject key identifier: 13:06:93:0A:67:F6:03:A4:9A:08:EA:31:62:5E:37:B0:F3:0D:05:F5 Authority key identifier: 74:3E:44:7E:DB:8A:5E:0E:1B:1D:7F:5C:DC:28:7C:36:4A:5F:B0:B5 Certificate issuer: /CN=743e447edb8a5e0e1b1d7f5cdc287c364a5fb0b5 Certificate serial: 019A085C4288BAAD48281F050E6A7CF2A82D Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/dD5EftuKXg4bHX9c3Ch8NkpfsLU.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/75/a1ae70-7996-4687-a0d7-5e0f4ab809bb/1/dD5EftuKXg4bHX9c3Ch8NkpfsLU.mft Manifest number: 1457 Signing time: Tue 21 Oct 2025 20:00:55 +0000 Manifest this update: Tue 21 Oct 2025 20:00:55 +0000 Manifest next update: Wed 22 Oct 2025 20:00:55 +0000 Files and hashes: 1: 3CaVGaLlRCBtJGBXfSGA7zW-rCs.roa (hash: /HyApflaldYM3wui8EYCuzUIG18+LCBycHK+Nr4v5s8=) 2: DK3tbQCBnJzEUSphxlbPexSxuSc.roa (hash: oy+VYg7xPVfsl+GWes1fmQYw3lo7t6n2do65fz6s9kA=) 3: F3KiiuTmtSL0XadHjHoQhTxAjH4.roa (hash: DWttmKkJnsIWb4tK0mLgOer/tZtQK2/fxxZHdJXXFak=) 4: M8l7pbK1m9EtbYQB0XFpZb7IbwY.roa (hash: eslpNhlfUyI1j7Yq81Ny5UVDGoF4QOI7V1IgSfchCsk=) 5: MgiKwN-5ay_SX7gBV14IpwObPpc.roa (hash: ZZYOOJcwsP5G4b73NL4Ryq/ZDk5dWzEXKQetkfj+MUE=) 6: _urUnPm3dxe0dhHO4I67DMxNM8w.roa (hash: peMugiexGfIHSWdQB0rJ+olLWcWf0//IWy/3iCQCuZI=) 7: dD5EftuKXg4bHX9c3Ch8NkpfsLU.crl (hash: CpffGh5NaYKzHU5Py/Czr+fsCaPmlt/g45Ev/sniM9c=) 8: hQB2r9gTIbHW15huYRlUIXpesE0.roa (hash: csnzwT6/c2mdObYLNEDgkBjX2FKvNM2ZYq0WnVUdcOk=) 9: kSpuRGxO_iNcJfkapdieZEQ9Gzw.roa (hash: 91LnZ3BDnBwvzNsiz95IDFu3DO+o+HcnWci0jcIsOmg=) 10: mOjdcIu2BlDS20XDZ7cdmtuYdO0.roa (hash: KiJxzqYwZVngrheebaPLTly7mDpF6/pmTDX4Y/LyHCY=) 11: mvjla0bo-b4smMyT4MbECv-Xg3g.roa (hash: Vqa7w/SLiL/4k4HQ/RKtBsHmvexhX5wGtbX9qiUFZ2c=) 12: qBT7a5CpMfyvurJ2SX8QUT0oraU.roa (hash: hc2fg3T7W+eYu2lwU1oNlfPn3yPiUOsKzcmNvDQBw90=) Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/75/a1ae70-7996-4687-a0d7-5e0f4ab809bb/1/dD5EftuKXg4bHX9c3Ch8NkpfsLU.crl rsync://rpki.ripe.net/repository/DEFAULT/75/a1ae70-7996-4687-a0d7-5e0f4ab809bb/1/dD5EftuKXg4bHX9c3Ch8NkpfsLU.mft rsync://rpki.ripe.net/repository/DEFAULT/dD5EftuKXg4bHX9c3Ch8NkpfsLU.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Wed 22 Oct 2025 14:12:02 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9a:08:5c:42:88:ba:ad:48:28:1f:05:0e:6a:7c:f2:a8:2d Signature Algorithm: sha256WithRSAEncryption Issuer: CN=743e447edb8a5e0e1b1d7f5cdc287c364a5fb0b5 Validity Not Before: Oct 21 20:00:55 2025 GMT Not After : Oct 22 20:00:55 2025 GMT Subject: CN=1306930a67f603a49a08ea31625e37b0f30d05f5 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:b0:35:67:2a:46:30:99:3e:2d:5e:d7:8b:96:4c: 3f:ee:81:d4:a7:e4:54:62:c0:5e:85:12:89:0c:25: f6:41:bb:d2:3b:18:94:9e:fb:51:cd:ca:cc:34:34: be:77:1b:eb:54:6d:71:7d:95:d3:fa:66:61:e5:c5: 31:a4:86:08:dc:9d:13:10:d2:df:b7:fd:56:8e:67: 56:7b:5c:83:79:0d:19:2f:5b:6a:d8:75:68:93:9b: 8e:3a:23:a1:95:48:4d:8a:cc:69:8b:01:19:db:30: 1c:ad:40:35:87:1a:a3:35:37:e9:1c:df:4e:5b:d1: 4e:67:08:df:a7:ee:95:e4:81:49:85:91:35:11:1d: 5d:06:64:b3:87:3f:5f:cf:32:29:35:77:ed:fb:85: 7a:56:09:e7:1c:54:1d:23:d6:c0:18:4f:b8:ae:9c: cb:1c:3c:56:a8:af:3a:1f:2f:62:5f:71:0d:4f:7a: e4:7e:9e:96:05:a7:e4:da:6d:31:42:0f:d4:69:ad: a3:36:0d:3c:47:e0:1d:4f:f1:83:aa:1b:01:06:57: e0:0c:66:66:43:40:42:45:7a:1a:98:71:1a:a7:71: 83:2f:47:c1:2c:b2:74:f2:a2:09:79:02:57:37:7e: 34:ae:93:53:c8:62:44:f2:e7:17:cf:c1:a5:fe:f0: 19:eb Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 13:06:93:0A:67:F6:03:A4:9A:08:EA:31:62:5E:37:B0:F3:0D:05:F5 X509v3 Authority Key Identifier: keyid:74:3E:44:7E:DB:8A:5E:0E:1B:1D:7F:5C:DC:28:7C:36:4A:5F:B0:B5 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/dD5EftuKXg4bHX9c3Ch8NkpfsLU.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/75/a1ae70-7996-4687-a0d7-5e0f4ab809bb/1/dD5EftuKXg4bHX9c3Ch8NkpfsLU.mft X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/75/a1ae70-7996-4687-a0d7-5e0f4ab809bb/1/dD5EftuKXg4bHX9c3Ch8NkpfsLU.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption ad:32:43:0d:78:88:ed:c8:d6:f3:1b:73:c3:c6:e0:07:98:82: 48:52:4c:77:87:3e:06:18:03:d2:e2:a9:8e:12:41:95:ef:0c: 46:4f:dc:80:38:96:23:04:01:d0:3b:f4:cc:e7:80:63:d6:a9: f4:d6:57:a9:20:81:75:ad:38:83:f9:20:d0:7c:b1:1a:3e:3c: f5:57:97:c9:a5:18:7f:ef:a2:5f:fa:37:41:ef:52:8b:82:9e: 62:b9:d5:08:16:a2:94:68:5b:af:8d:9c:8c:3d:0a:02:66:0b: cb:14:b3:aa:5c:37:23:83:d5:f3:77:0c:d3:47:1b:b9:6a:f7: f9:c9:de:44:67:63:fa:39:47:62:6f:44:80:a2:3c:c5:2d:3a: b4:7c:11:b1:2f:21:03:7d:c9:74:3a:af:7c:6b:06:cd:d6:8e: 95:07:5c:d1:52:e5:16:31:ba:43:6e:11:56:20:95:80:01:10: 31:64:6a:26:20:d7:32:ef:85:5f:b4:cb:aa:dd:31:46:a9:b4: a2:60:5b:97:79:ef:b3:12:87:11:7f:cc:92:bb:9a:62:d7:ac: 04:10:da:fb:b9:a7:e4:02:65:50:01:3c:33:fa:c0:ec:80:98: db:cd:03:06:ce:9f:20:41:1e:b9:cf:27:9a:a0:58:90:c1:59: f0:19:ed:6c -----BEGIN CERTIFICATE----- MIIFFjCCA/6gAwIBAgISAZoIXEKIuq1IKB8FDmp88qgtMA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKDc0M2U0NDdlZGI4YTVlMGUxYjFkN2Y1Y2RjMjg3YzM2NGE1 ZmIwYjUwHhcNMjUxMDIxMjAwMDU1WhcNMjUxMDIyMjAwMDU1WjAzMTEwLwYDVQQD EygxMzA2OTMwYTY3ZjYwM2E0OWEwOGVhMzE2MjVlMzdiMGYzMGQwNWY1MIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAsDVnKkYwmT4tXteLlkw/7oHUp+RU YsBehRKJDCX2QbvSOxiUnvtRzcrMNDS+dxvrVG1xfZXT+mZh5cUxpIYI3J0TENLf t/1WjmdWe1yDeQ0ZL1tq2HVok5uOOiOhlUhNisxpiwEZ2zAcrUA1hxqjNTfpHN9O W9FOZwjfp+6V5IFJhZE1ER1dBmSzhz9fzzIpNXft+4V6VgnnHFQdI9bAGE+4rpzL HDxWqK86Hy9iX3ENT3rkfp6WBafk2m0xQg/Uaa2jNg08R+AdT/GDqhsBBlfgDGZm Q0BCRXoamHEap3GDL0fBLLJ08qIJeQJXN340rpNTyGJE8ucXz8Gl/vAZ6wIDAQAB o4ICIjCCAh4wHQYDVR0OBBYEFBMGkwpn9gOkmgjqMWJeN7DzDQX1MB8GA1UdIwQY MBaAFHQ+RH7bil4OGx1/XNwofDZKX7C1MA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvZEQ1RWZ0dUtYZzRiSFg5YzNDaDhOa3Bmc0xVLmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC83NS9hMWFlNzAtNzk5Ni00Njg3LWEwZDct NWUwZjRhYjgwOWJiLzEvZEQ1RWZ0dUtYZzRiSFg5YzNDaDhOa3Bmc0xVLm1mdDCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC83NS9hMWFlNzAtNzk5Ni00Njg3LWEwZDctNWUwZjRhYjgwOWJi LzEvZEQ1RWZ0dUtYZzRiSFg5YzNDaDhOa3Bmc0xVLmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEArTJDDXiI 7cjW8xtzw8bgB5iCSFJMd4c+BhgD0uKpjhJBle8MRk/cgDiWIwQB0Dv0zOeAY9ap 9NZXqSCBda04g/kg0HyxGj489VeXyaUYf++iX/o3Qe9Si4KeYrnVCBailGhbr42c jD0KAmYLyxSzqlw3I4PV83cM00cbuWr3+cneRGdj+jlHYm9EgKI8xS06tHwRsS8h A33JdDqvfGsGzdaOlQdc0VLlFjG6Q24RViCVgAEQMWRqJiDXMu+FX7TLqt0xRqm0 omBbl3nvsxKHEX/MkruaYtesBBDa+7mn5AJlUAE8M/rA7ICY280DBs6fIEEeuc8n mqBYkMFZ8BntbA== -----END CERTIFICATE-----Generated at Tue Oct 21 23:41:23 2025 by rpki-client