$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/7f/790cee-d54e-4598-8bc1-2170c5c1d3ed/1/Tds9zfXmvuCYJcN787i98otvtZM.mft File: Tds9zfXmvuCYJcN787i98otvtZM.mft (raw, json) Hash identifier: qQnFtqn50baL0rbiiD/tsADkwAECeMXKYyJl/l6wuys= Subject key identifier: FE:38:3B:9B:1A:0C:F6:51:0A:47:20:D9:4D:75:64:0F:24:E3:89:5F Authority key identifier: 4D:DB:3D:CD:F5:E6:BE:E0:98:25:C3:7B:F3:B8:BD:F2:8B:6F:B5:93 Certificate issuer: /CN=4ddb3dcdf5e6bee09825c37bf3b8bdf28b6fb593 Certificate serial: 019A134D4CB22781A821B070C59A9E62E993 Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/Tds9zfXmvuCYJcN787i98otvtZM.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/7f/790cee-d54e-4598-8bc1-2170c5c1d3ed/1/Tds9zfXmvuCYJcN787i98otvtZM.mft Manifest number: 1701 Signing time: Thu 23 Oct 2025 23:00:24 +0000 Manifest this update: Thu 23 Oct 2025 23:00:24 +0000 Manifest next update: Fri 24 Oct 2025 23:00:24 +0000 Files and hashes: 1: 3wToZwYlYJhmj7mm8PpwNtnWHVk.roa (hash: O8XdzrDLKhZRvl13MXXTR1JiyTE2ZlieoyWEJ7nOUTA=) 2: 46uAO_7C_hVEQvZIAiRuYmh3QSo.roa (hash: MFUM6s6M1weGqv2Xn6LhhIWodXnFo4p8KwKjPUo7OXo=) 3: 4imq6_MMpyIjPy7JyGjrhcoftH4.roa (hash: htblR8fOEERQI20b0BNRdDO8FoijKodXH42ZRIpJlTM=) 4: BhB4QRUPoERbo_tuXIOvKFT5tus.roa (hash: asfvJzhTCTkNeMXKQv12QThiuP/0k3pLDDHOuHxC3r4=) 5: FFPDMHJ-Jqx3kk-gvkD1qDp-v9k.roa (hash: Ymsup5BEwzDp7E2mJg5hRNMRIrzKpWGEglwuk0pdV74=) 6: Tds9zfXmvuCYJcN787i98otvtZM.crl (hash: 7r/S+FkjUqv0Symv0nhYU38ZADEnjPQFlEP/QD79Rm0=) 7: Tw0TTktdyzp0HyCOraKp8Ikm9Zw.roa (hash: z4UO2288Zpke2+cJIS0jIR44dlwwS+r5fy09OgwTYzs=) 8: Y7zkYH7Aw7PVsj10RPb-MkdugUk.roa (hash: o+fhjuQlK8kmiCnbZvXdSlpO05Hoo31DLBlRx7EaZLM=) 9: b7oMoNLEeexBq7MIfZdfTx6xx-k.roa (hash: OSaZRd3wcs3q/SzG2reGUiR0uNvDtIWlv9sr3p7/FyU=) 10: h90uqc_De15c5RcLX88cwk7dD8c.roa (hash: o2sSFjPuw1OAEBfBb9Dp1k2BsAtNCgsonI20CxguO14=) Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/7f/790cee-d54e-4598-8bc1-2170c5c1d3ed/1/Tds9zfXmvuCYJcN787i98otvtZM.crl rsync://rpki.ripe.net/repository/DEFAULT/7f/790cee-d54e-4598-8bc1-2170c5c1d3ed/1/Tds9zfXmvuCYJcN787i98otvtZM.mft rsync://rpki.ripe.net/repository/DEFAULT/Tds9zfXmvuCYJcN787i98otvtZM.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Fri 24 Oct 2025 23:00:03 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9a:13:4d:4c:b2:27:81:a8:21:b0:70:c5:9a:9e:62:e9:93 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=4ddb3dcdf5e6bee09825c37bf3b8bdf28b6fb593 Validity Not Before: Oct 23 23:00:24 2025 GMT Not After : Oct 24 23:00:24 2025 GMT Subject: CN=fe383b9b1a0cf6510a4720d94d75640f24e3895f Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:b6:6e:b5:e1:29:8a:a4:11:82:87:61:ca:ea:a9: 1d:77:12:36:0c:fa:01:78:55:b5:8c:b1:db:f4:f2: 1f:7e:1b:68:43:b6:2d:df:49:7f:43:6b:08:9b:68: e9:d4:64:b4:03:13:4c:98:ae:be:14:a9:7e:dc:27: df:e4:87:89:bf:94:8f:f4:1d:d4:2b:8a:8a:83:1d: 86:48:e6:6a:75:31:ff:20:6d:53:5c:6e:43:12:a8: 2c:e5:36:aa:67:11:a3:8a:9e:75:1b:8e:a2:73:d7: ca:27:1d:87:b3:f5:fb:12:57:28:cc:9e:32:31:8f: 4d:97:6c:8c:78:ba:d8:59:6a:0b:69:17:35:2b:ed: 0b:a7:95:35:1c:12:ed:47:8e:80:39:cf:3c:e9:10: a8:9b:08:bb:27:11:ff:f4:03:da:eb:ac:d9:aa:a4: f1:7d:21:13:ab:9c:ee:0d:50:e6:12:ab:a1:b7:fa: 36:b8:d7:4a:92:ee:63:a3:65:16:67:80:35:a6:ee: de:4f:aa:7d:b1:ca:9a:00:56:82:77:e8:58:07:52: 78:66:f1:1c:f5:29:7c:8d:3e:67:3f:bb:1e:cc:5d: de:c5:f6:ff:b1:38:15:5a:91:09:0a:ec:98:27:f6: 3e:71:8f:11:3c:f7:c8:01:19:78:fd:2f:37:b5:c5: 8b:b1 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: FE:38:3B:9B:1A:0C:F6:51:0A:47:20:D9:4D:75:64:0F:24:E3:89:5F X509v3 Authority Key Identifier: keyid:4D:DB:3D:CD:F5:E6:BE:E0:98:25:C3:7B:F3:B8:BD:F2:8B:6F:B5:93 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/Tds9zfXmvuCYJcN787i98otvtZM.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/7f/790cee-d54e-4598-8bc1-2170c5c1d3ed/1/Tds9zfXmvuCYJcN787i98otvtZM.mft X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/7f/790cee-d54e-4598-8bc1-2170c5c1d3ed/1/Tds9zfXmvuCYJcN787i98otvtZM.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption ad:da:a9:9e:37:dd:01:63:08:a2:48:3a:4e:aa:06:48:01:04: d0:ed:0c:95:15:30:f4:05:dc:e0:ac:1a:ba:83:3a:ab:65:70: 94:0c:b4:6a:a5:27:56:6d:58:4f:6e:77:4e:20:2d:7a:09:d3: dd:6d:62:c6:a8:2d:f6:aa:c1:0b:59:b4:26:a8:b6:63:b8:df: 6f:98:40:46:57:21:28:3a:a6:06:9b:56:05:47:65:b1:ce:6d: 04:0b:bc:83:95:b1:79:fd:56:f3:9b:ef:30:0d:9f:15:ce:75: 9f:84:42:11:68:68:3d:8c:26:2a:60:a7:68:43:80:94:dd:48: 53:1d:53:8b:70:f7:7b:6f:97:bc:8c:1e:e2:78:c0:69:73:70: 25:3e:68:30:2d:bb:15:33:4d:90:3b:01:b0:a4:58:73:45:1a: 92:d2:4e:c2:f0:ba:60:f2:d5:9d:e4:aa:3d:ba:1d:d8:1c:fe: 14:07:8f:d2:05:b4:78:01:0a:c8:99:4b:28:8a:55:80:6c:a8: 86:cf:6a:c2:07:2f:59:dc:16:fa:e8:17:6e:ae:a4:b3:67:11: 0c:fc:a7:cf:45:b8:58:16:58:93:76:c2:a8:78:3b:30:14:77: 27:20:c8:99:b5:5c:e2:e3:4f:62:de:b0:a4:7f:a3:6a:19:45: 23:b9:de:9e -----BEGIN CERTIFICATE----- MIIFFjCCA/6gAwIBAgISAZoTTUyyJ4GoIbBwxZqeYumTMA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKDRkZGIzZGNkZjVlNmJlZTA5ODI1YzM3YmYzYjhiZGYyOGI2 ZmI1OTMwHhcNMjUxMDIzMjMwMDI0WhcNMjUxMDI0MjMwMDI0WjAzMTEwLwYDVQQD EyhmZTM4M2I5YjFhMGNmNjUxMGE0NzIwZDk0ZDc1NjQwZjI0ZTM4OTVmMIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAtm614SmKpBGCh2HK6qkddxI2DPoB eFW1jLHb9PIffhtoQ7Yt30l/Q2sIm2jp1GS0AxNMmK6+FKl+3Cff5IeJv5SP9B3U K4qKgx2GSOZqdTH/IG1TXG5DEqgs5TaqZxGjip51G46ic9fKJx2Hs/X7ElcozJ4y MY9Nl2yMeLrYWWoLaRc1K+0Lp5U1HBLtR46AOc886RComwi7JxH/9APa66zZqqTx fSETq5zuDVDmEquht/o2uNdKku5jo2UWZ4A1pu7eT6p9scqaAFaCd+hYB1J4ZvEc 9Sl8jT5nP7sezF3exfb/sTgVWpEJCuyYJ/Y+cY8RPPfIARl4/S83tcWLsQIDAQAB o4ICIjCCAh4wHQYDVR0OBBYEFP44O5saDPZRCkcg2U11ZA8k44lfMB8GA1UdIwQY MBaAFE3bPc315r7gmCXDe/O4vfKLb7WTMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvVGRzOXpmWG12dUNZSmNONzg3aTk4b3R2dFpNLmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC83Zi83OTBjZWUtZDU0ZS00NTk4LThiYzEt MjE3MGM1YzFkM2VkLzEvVGRzOXpmWG12dUNZSmNONzg3aTk4b3R2dFpNLm1mdDCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC83Zi83OTBjZWUtZDU0ZS00NTk4LThiYzEtMjE3MGM1YzFkM2Vk LzEvVGRzOXpmWG12dUNZSmNONzg3aTk4b3R2dFpNLmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEArdqpnjfd AWMIokg6TqoGSAEE0O0MlRUw9AXc4KwauoM6q2VwlAy0aqUnVm1YT253TiAtegnT 3W1ixqgt9qrBC1m0Jqi2Y7jfb5hARlchKDqmBptWBUdlsc5tBAu8g5Wxef1W85vv MA2fFc51n4RCEWhoPYwmKmCnaEOAlN1IUx1Ti3D3e2+XvIwe4njAaXNwJT5oMC27 FTNNkDsBsKRYc0UaktJOwvC6YPLVneSqPbod2Bz+FAeP0gW0eAEKyJlLKIpVgGyo hs9qwgcvWdwW+ugXbq6ks2cRDPynz0W4WBZYk3bCqHg7MBR3JyDImbVc4uNPYt6w pH+jahlFI7neng== -----END CERTIFICATE-----Generated at Fri Oct 24 09:09:55 2025 by rpki-client