$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/78/210fbb-aa6e-49c9-918b-5558a8b53e3d/1/TahNJHzjfNzPBuFXHSJqK4Vne80.mft File: TahNJHzjfNzPBuFXHSJqK4Vne80.mft (raw, json) Hash identifier: hc2/RhcOneUwytPC4accsTRKogh82AuucA0UpWo8G1I= Subject key identifier: 24:5D:02:3E:92:12:9E:06:49:67:D4:F3:AE:A2:60:9A:30:13:21:D4 Authority key identifier: 4D:A8:4D:24:7C:E3:7C:DC:CF:06:E1:57:1D:22:6A:2B:85:67:7B:CD Certificate issuer: /CN=4da84d247ce37cdccf06e1571d226a2b85677bcd Certificate serial: 019A0CA1853181100B43EBB5BA5520F3557B Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/TahNJHzjfNzPBuFXHSJqK4Vne80.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/78/210fbb-aa6e-49c9-918b-5558a8b53e3d/1/TahNJHzjfNzPBuFXHSJqK4Vne80.mft Manifest number: 170C Signing time: Wed 22 Oct 2025 15:55:03 +0000 Manifest this update: Wed 22 Oct 2025 15:55:03 +0000 Manifest next update: Thu 23 Oct 2025 15:55:03 +0000 Files and hashes: 1: Fg0uKp3KzK9Z6JH5UhH7WuwVnZU.roa (hash: V2gXPJdj6ekMjp/tE7s1qlDZ8F6P9cafMgL/dwyxEt8=) 2: HOv1nncZc-pz3AlCtaOxZY_9ySg.roa (hash: BfS/uTbVy58x9l8iF/wkLVEhdKf178ib7yupva8UZZQ=) 3: IhsNkpEObyOhrdScw0XLGeqSfjU.roa (hash: cYBkSPS8A7jki3ADlXunYLfb3jaAdvC2BeR0D6SyyQw=) 4: NGPkgc-gMBPWvfnpR_WESooqffM.roa (hash: h7f13JmtNSfs0kxRIebuhHcsUGxQLBWtTWJQue5vIeg=) 5: RLeyW7lqx5hu9s9VIH-LZ4c9FSQ.roa (hash: 8qkFZX4fO9IGCK+/hjULowdb/hcL+0qKwz4xQec6iUE=) 6: TU33qpntXatxMyZAJzYvLxL-xSg.roa (hash: QEU287pJAOh9dnfs31+B3kKhDHduu0hsu7IXggVDvWQ=) 7: TahNJHzjfNzPBuFXHSJqK4Vne80.crl (hash: vv30yWznJU3ykKmVwtz1WEoyItMYTHpVXl142tCuo68=) 8: goaehW6miRu49OgNqpgG3rbQsXI.roa (hash: ONFsgrV+lwe2PVqjFxq7Gt+JlrAemij5QB6wyp+3m1Y=) 9: iYrh6kgklmXt3OMm1j72TOtV99Q.roa (hash: G93OEfB6NAVCu9uU8ghRcqmmsrUeCTXAMsgU4oLPza4=) 10: pmDvMLO2RE0O4Ex_JrEkUC8Orjc.roa (hash: EobRSKgdMhfP9qw1zU6ZKGGyelmEJlJ7Zo4kdI4/8FI=) 11: qkm-dGrO1KB7zPSYZkfbAOZu2Jk.roa (hash: 4nzLJ3+1Nxzwd/rO/ckXGrhnSOi7MDSoWC6fmMd5N2o=) 12: sTgj5gtBXlZvbQkuD303wv14ZJM.roa (hash: 2lGTVGTpWSlL4AKzK4tCKidrFOFRYmSZ+Qh+p4OiuBc=) 13: u-uXh8WZWOS9uWtRFI-rTtX1S9A.roa (hash: kDD2Qmq25WjJ3/Vhs1pz7/0NseMdnFHogi9MbnP9L+s=) Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/78/210fbb-aa6e-49c9-918b-5558a8b53e3d/1/TahNJHzjfNzPBuFXHSJqK4Vne80.crl rsync://rpki.ripe.net/repository/DEFAULT/78/210fbb-aa6e-49c9-918b-5558a8b53e3d/1/TahNJHzjfNzPBuFXHSJqK4Vne80.mft rsync://rpki.ripe.net/repository/DEFAULT/TahNJHzjfNzPBuFXHSJqK4Vne80.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Thu 23 Oct 2025 13:42:03 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9a:0c:a1:85:31:81:10:0b:43:eb:b5:ba:55:20:f3:55:7b Signature Algorithm: sha256WithRSAEncryption Issuer: CN=4da84d247ce37cdccf06e1571d226a2b85677bcd Validity Not Before: Oct 22 15:55:03 2025 GMT Not After : Oct 23 15:55:03 2025 GMT Subject: CN=245d023e92129e064967d4f3aea2609a301321d4 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:dc:46:ed:6f:14:b9:ee:89:30:8e:d7:f1:3f:1a: e0:1a:9e:67:06:24:46:b4:fd:ec:2a:8a:c0:6e:ba: 5c:9c:02:60:3e:f5:75:33:ba:89:c3:9b:bb:e5:54: d4:ea:83:bf:6f:89:7f:24:22:00:e3:d5:87:bf:0a: c4:d0:9c:88:95:70:a6:b0:8f:a3:ba:d2:0f:22:ef: a7:6b:58:a7:03:bb:99:4c:de:c6:87:bd:25:2d:89: e6:40:0f:d0:f3:b5:3e:31:b9:c4:ac:a8:e2:0a:2c: b4:9f:ea:f6:50:19:2b:8a:21:d5:01:db:34:50:0d: 28:64:fe:ac:09:c4:73:7c:87:54:96:e9:ad:73:88: 4c:e5:bb:22:2d:43:d9:6d:19:74:31:2a:53:20:78: ee:6b:a7:24:d4:b0:66:c2:36:01:64:38:9d:4c:ad: d9:e2:40:49:fe:c3:87:88:bd:8a:37:a4:56:55:3c: 48:ad:fb:bb:50:ed:35:29:72:fe:aa:d6:61:30:aa: 40:71:e0:e1:bf:b6:47:4c:8f:d8:4e:e2:2e:51:26: ae:89:74:6f:f9:03:f6:1d:31:92:1d:9e:e5:83:50: d0:15:da:31:6d:0e:7b:e7:55:28:7b:b9:68:65:cb: 7e:60:38:84:32:61:d5:1c:3a:40:61:27:4f:65:3a: ed:43 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 24:5D:02:3E:92:12:9E:06:49:67:D4:F3:AE:A2:60:9A:30:13:21:D4 X509v3 Authority Key Identifier: keyid:4D:A8:4D:24:7C:E3:7C:DC:CF:06:E1:57:1D:22:6A:2B:85:67:7B:CD X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/TahNJHzjfNzPBuFXHSJqK4Vne80.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/78/210fbb-aa6e-49c9-918b-5558a8b53e3d/1/TahNJHzjfNzPBuFXHSJqK4Vne80.mft X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/78/210fbb-aa6e-49c9-918b-5558a8b53e3d/1/TahNJHzjfNzPBuFXHSJqK4Vne80.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 47:54:d6:12:da:28:1c:cb:ed:3c:40:a7:12:97:52:76:3c:f0: fb:52:d3:bb:fe:08:98:7b:6a:88:72:ab:7d:be:6c:35:30:a6: 79:81:96:ef:3e:b3:5f:93:cc:10:df:a4:71:a3:42:b0:0e:e5: 88:36:63:0a:5c:0e:e8:05:9b:cb:5e:af:b1:f0:2f:15:02:7a: 3f:74:b4:4b:19:99:0e:b9:7c:55:5c:50:01:42:bf:6b:d0:39: cc:4a:9d:fd:26:b5:28:90:9e:d5:fe:04:8e:10:d0:2e:9f:64: 3e:b1:90:a9:e7:15:ff:fa:25:33:cd:4f:02:82:b1:19:36:93: 66:cd:d9:6f:14:e9:15:80:27:91:85:19:a5:2c:50:b3:33:9d: 6c:59:91:02:18:54:11:1e:5c:1f:40:19:1f:94:0c:ba:15:76: c8:33:68:8f:55:5e:6c:49:fe:1b:67:d2:d8:96:8f:44:4b:69: 34:7f:eb:49:23:2f:46:7e:3a:0e:cc:0c:82:93:1b:9f:c8:b2: 80:1b:c3:61:b2:78:f7:a0:7f:9d:ac:37:83:69:b6:b9:6c:6c: d7:ea:c0:d4:d0:0a:c5:7f:a6:0e:fd:e6:c3:e9:5b:10:54:f8: 45:65:d1:72:59:a1:45:49:5a:e8:0a:34:1b:66:68:65:7b:a2: 7d:ab:9e:f6 -----BEGIN CERTIFICATE----- MIIFFjCCA/6gAwIBAgISAZoMoYUxgRALQ+u1ulUg81V7MA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKDRkYTg0ZDI0N2NlMzdjZGNjZjA2ZTE1NzFkMjI2YTJiODU2 NzdiY2QwHhcNMjUxMDIyMTU1NTAzWhcNMjUxMDIzMTU1NTAzWjAzMTEwLwYDVQQD EygyNDVkMDIzZTkyMTI5ZTA2NDk2N2Q0ZjNhZWEyNjA5YTMwMTMyMWQ0MIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEA3EbtbxS57okwjtfxPxrgGp5nBiRG tP3sKorAbrpcnAJgPvV1M7qJw5u75VTU6oO/b4l/JCIA49WHvwrE0JyIlXCmsI+j utIPIu+na1inA7uZTN7Gh70lLYnmQA/Q87U+MbnErKjiCiy0n+r2UBkriiHVAds0 UA0oZP6sCcRzfIdUlumtc4hM5bsiLUPZbRl0MSpTIHjua6ck1LBmwjYBZDidTK3Z 4kBJ/sOHiL2KN6RWVTxIrfu7UO01KXL+qtZhMKpAceDhv7ZHTI/YTuIuUSauiXRv +QP2HTGSHZ7lg1DQFdoxbQ5751Uoe7loZct+YDiEMmHVHDpAYSdPZTrtQwIDAQAB o4ICIjCCAh4wHQYDVR0OBBYEFCRdAj6SEp4GSWfU866iYJowEyHUMB8GA1UdIwQY MBaAFE2oTSR843zczwbhVx0iaiuFZ3vNMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvVGFoTkpIempmTnpQQnVGWEhTSnFLNFZuZTgwLmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC83OC8yMTBmYmItYWE2ZS00OWM5LTkxOGIt NTU1OGE4YjUzZTNkLzEvVGFoTkpIempmTnpQQnVGWEhTSnFLNFZuZTgwLm1mdDCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC83OC8yMTBmYmItYWE2ZS00OWM5LTkxOGItNTU1OGE4YjUzZTNk LzEvVGFoTkpIempmTnpQQnVGWEhTSnFLNFZuZTgwLmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAR1TWEtoo HMvtPECnEpdSdjzw+1LTu/4ImHtqiHKrfb5sNTCmeYGW7z6zX5PMEN+kcaNCsA7l iDZjClwO6AWby16vsfAvFQJ6P3S0SxmZDrl8VVxQAUK/a9A5zEqd/Sa1KJCe1f4E jhDQLp9kPrGQqecV//olM81PAoKxGTaTZs3ZbxTpFYAnkYUZpSxQszOdbFmRAhhU ER5cH0AZH5QMuhV2yDNoj1VebEn+G2fS2JaPREtpNH/rSSMvRn46DswMgpMbn8iy gBvDYbJ496B/naw3g2m2uWxs1+rA1NAKxX+mDv3mw+lbEFT4RWXRclmhRUla6Ao0 G2ZoZXuifaue9g== -----END CERTIFICATE-----Generated at Wed Oct 22 22:42:59 2025 by rpki-client