$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/81/a596e2-29d2-48c6-9bab-5cbd1f3ff39a/1/Eipka-1MQXprSAX5PXenpGXjS5M.mft File: Eipka-1MQXprSAX5PXenpGXjS5M.mft (raw, json) Hash identifier: 9KocLOERYUlAdJyfM0/778h0N6BdVTJf2ST+tSeNMuE= Subject key identifier: A7:D3:7D:A6:71:B1:11:EC:30:E4:DD:E9:2A:07:71:C6:1B:12:BC:AE Authority key identifier: 12:2A:64:6B:ED:4C:41:7A:6B:48:05:F9:3D:77:A7:A4:65:E3:4B:93 Certificate issuer: /CN=122a646bed4c417a6b4805f93d77a7a465e34b93 Certificate serial: 019A2365C157F4CF139878EE3A039E2F698D Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/Eipka-1MQXprSAX5PXenpGXjS5M.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/81/a596e2-29d2-48c6-9bab-5cbd1f3ff39a/1/Eipka-1MQXprSAX5PXenpGXjS5M.mft Manifest number: 16F8 Signing time: Mon 27 Oct 2025 02:01:02 +0000 Manifest this update: Mon 27 Oct 2025 02:01:02 +0000 Manifest next update: Tue 28 Oct 2025 02:01:02 +0000 Files and hashes: 1: 4YzbiOUc55i_-wnN2lE8VcFHTjM.roa (hash: EJ1xacTTePUHCKfjWzR41VZNC5bwx1ceCyx+D2VuM0k=) 2: Eipka-1MQXprSAX5PXenpGXjS5M.crl (hash: QbPNfrD0FY2d7J1qgBffQHbBjTtewEYUCXi/yaswQsg=) 3: HZDIjKjXqWPf-ee37Nhj9_hhLmU.roa (hash: HSOaEhMUsdBzgZ8yvnvkhm7cbQn7PS/dlSIORdNMvnw=) 4: LSDiDkGHf8ktuSvpLiCF4QxxoHA.roa (hash: 1aHlaSEVJU/CBfEh/B+hUORROVZbrb1jBZXbNMg5cy4=) 5: N3Y7O0SBisZukLRMHy8_setuvFI.roa (hash: mKagmk6f++epGFCdum5PDcyniZIRDa8iTpQ+v2TwpbA=) 6: OO3HInjQE4V4nLX5G6Vefr6iPdA.roa (hash: mSjEnkNAFz3QeKqAoiXZ5g2rlJocA3yHCPraXIzbyWs=) 7: OmskgLTfs_yHaV8sxyBdNIbaPY0.roa (hash: +YVWkhb4gyvwjOmlRZNIrwJ0F1cssnxh9edgyxYPzgA=) 8: SLekjmBf2tyIMOB3CJb0Z47uJtk.roa (hash: dyK450H8i+alS9mWM0crx5H3Vwy79u+jha7k1eN+nzM=) 9: VUcsIi_9-b8RzEwnDD6jGVaTQ0M.roa (hash: FrKooKPN8B42nu5wk7iHVN6k1WQH71cGopIkNxiN9ZM=) 10: lNRs0BmJg2zqQMNQc_ixIHE9WsQ.roa (hash: 7Ls+3IQ8Q9VQV+f9v4gnxgD+wykLzcCXGexomxswIGQ=) 11: pK-j5yshh0oWZpvGt4P0ScMumdE.roa (hash: mnyHWgzU3xisUAQNhTt84VgPqHifggdlwwma4Rga83M=) Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/81/a596e2-29d2-48c6-9bab-5cbd1f3ff39a/1/Eipka-1MQXprSAX5PXenpGXjS5M.crl rsync://rpki.ripe.net/repository/DEFAULT/81/a596e2-29d2-48c6-9bab-5cbd1f3ff39a/1/Eipka-1MQXprSAX5PXenpGXjS5M.mft rsync://rpki.ripe.net/repository/DEFAULT/Eipka-1MQXprSAX5PXenpGXjS5M.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Mon 27 Oct 2025 19:48:03 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9a:23:65:c1:57:f4:cf:13:98:78:ee:3a:03:9e:2f:69:8d Signature Algorithm: sha256WithRSAEncryption Issuer: CN=122a646bed4c417a6b4805f93d77a7a465e34b93 Validity Not Before: Oct 27 02:01:02 2025 GMT Not After : Oct 28 02:01:02 2025 GMT Subject: CN=a7d37da671b111ec30e4dde92a0771c61b12bcae Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:ca:ef:51:ac:cd:87:08:f5:d9:f7:86:4a:01:58: e7:64:7e:30:0c:69:92:2b:c5:95:21:cf:90:9b:cd: 75:a9:3b:19:4f:fb:f6:cb:0c:43:6c:74:67:03:ac: da:14:78:25:b1:e9:ba:e5:f5:a6:06:05:d0:fe:ff: 32:66:ba:06:4b:d0:c7:9c:a2:a5:73:ab:9e:05:d1: a4:61:44:62:09:bd:4a:cf:91:e3:bd:57:dd:c7:44: a8:a9:da:ce:c5:be:d6:00:a1:a5:fe:c5:1e:94:80: 62:72:95:9f:d4:ce:8d:1c:bb:ed:ee:70:04:06:7d: 7c:98:7a:e3:dc:5b:da:e4:3d:54:4e:3c:4b:0a:f9: 95:9e:75:d4:ba:08:1f:1e:86:0c:0b:42:11:b8:02: 6f:4f:73:f5:5a:a6:3a:27:0c:ae:aa:d6:34:2c:9f: bb:4c:21:cc:8c:73:be:ff:cc:e5:11:a9:c5:07:de: 35:02:5b:a7:7d:11:e0:bf:14:1c:11:97:8a:bf:53: 70:77:96:3c:d1:70:f8:d9:68:a5:e8:10:26:83:3d: be:95:47:4e:e5:5c:12:84:59:ab:d2:9a:ba:83:ed: 9a:2c:bc:66:ae:d8:89:f6:89:14:79:32:9a:99:bb: 65:ab:33:a2:4f:7d:b1:20:52:e7:02:35:65:72:21: 07:03 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: A7:D3:7D:A6:71:B1:11:EC:30:E4:DD:E9:2A:07:71:C6:1B:12:BC:AE X509v3 Authority Key Identifier: keyid:12:2A:64:6B:ED:4C:41:7A:6B:48:05:F9:3D:77:A7:A4:65:E3:4B:93 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/Eipka-1MQXprSAX5PXenpGXjS5M.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/81/a596e2-29d2-48c6-9bab-5cbd1f3ff39a/1/Eipka-1MQXprSAX5PXenpGXjS5M.mft X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/81/a596e2-29d2-48c6-9bab-5cbd1f3ff39a/1/Eipka-1MQXprSAX5PXenpGXjS5M.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 26:62:fc:b0:c7:a3:b7:f0:11:a2:a6:5d:c6:c6:a8:06:b3:ba: 4d:7a:c3:7a:09:e7:79:50:5f:5f:2c:b0:6b:d1:aa:fb:a4:79: fb:55:00:47:b0:f0:4e:23:05:ca:87:93:12:2c:18:21:94:a4: 5b:da:08:5d:57:a3:c4:09:90:e5:77:50:74:a2:d0:63:32:fe: 23:ee:d3:dd:2d:48:fa:3b:b7:08:28:f3:ad:c9:e4:b8:11:2c: f4:49:78:09:97:00:74:cb:4b:6e:a1:ac:91:cc:a7:0f:23:75: 0e:5d:07:ba:3e:f9:35:e8:df:c9:82:80:d1:f4:ef:ed:55:12: ea:3f:ed:7a:62:1b:9c:3e:e4:51:51:76:6d:ed:b9:d5:6e:0c: 9a:f0:74:6e:52:39:21:19:79:68:77:aa:94:10:3f:84:ba:ef: fe:18:40:48:9b:56:a9:f3:fe:8b:e9:3b:cd:d7:86:b2:29:f3: 80:b6:d3:f5:bd:c2:0d:37:f1:7b:f7:19:3e:6e:04:03:d2:ae: d8:fe:8b:41:77:45:e3:5e:eb:69:9a:f4:3f:8a:f9:2b:b5:fe: c3:a7:4e:64:f2:41:81:f5:51:7b:19:ec:72:77:63:af:d6:b0: 81:21:37:73:14:d3:7f:21:1b:a6:f7:36:0b:77:d3:11:56:e6: 1a:c1:8b:3d -----BEGIN CERTIFICATE----- MIIFFjCCA/6gAwIBAgISAZojZcFX9M8TmHjuOgOeL2mNMA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKDEyMmE2NDZiZWQ0YzQxN2E2YjQ4MDVmOTNkNzdhN2E0NjVl MzRiOTMwHhcNMjUxMDI3MDIwMTAyWhcNMjUxMDI4MDIwMTAyWjAzMTEwLwYDVQQD EyhhN2QzN2RhNjcxYjExMWVjMzBlNGRkZTkyYTA3NzFjNjFiMTJiY2FlMIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAyu9RrM2HCPXZ94ZKAVjnZH4wDGmS K8WVIc+Qm811qTsZT/v2ywxDbHRnA6zaFHglsem65fWmBgXQ/v8yZroGS9DHnKKl c6ueBdGkYURiCb1Kz5HjvVfdx0SoqdrOxb7WAKGl/sUelIBicpWf1M6NHLvt7nAE Bn18mHrj3Fva5D1UTjxLCvmVnnXUuggfHoYMC0IRuAJvT3P1WqY6JwyuqtY0LJ+7 TCHMjHO+/8zlEanFB941AlunfRHgvxQcEZeKv1Nwd5Y80XD42Wil6BAmgz2+lUdO 5VwShFmr0pq6g+2aLLxmrtiJ9okUeTKambtlqzOiT32xIFLnAjVlciEHAwIDAQAB o4ICIjCCAh4wHQYDVR0OBBYEFKfTfaZxsRHsMOTd6SoHccYbEryuMB8GA1UdIwQY MBaAFBIqZGvtTEF6a0gF+T13p6Rl40uTMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvRWlwa2EtMU1RWHByU0FYNVBYZW5wR1hqUzVNLmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC84MS9hNTk2ZTItMjlkMi00OGM2LTliYWIt NWNiZDFmM2ZmMzlhLzEvRWlwa2EtMU1RWHByU0FYNVBYZW5wR1hqUzVNLm1mdDCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC84MS9hNTk2ZTItMjlkMi00OGM2LTliYWItNWNiZDFmM2ZmMzlh LzEvRWlwa2EtMU1RWHByU0FYNVBYZW5wR1hqUzVNLmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAJmL8sMej t/ARoqZdxsaoBrO6TXrDegnneVBfXyywa9Gq+6R5+1UAR7DwTiMFyoeTEiwYIZSk W9oIXVejxAmQ5XdQdKLQYzL+I+7T3S1I+ju3CCjzrcnkuBEs9El4CZcAdMtLbqGs kcynDyN1Dl0Huj75NejfyYKA0fTv7VUS6j/temIbnD7kUVF2be251W4MmvB0blI5 IRl5aHeqlBA/hLrv/hhASJtWqfP+i+k7zdeGsinzgLbT9b3CDTfxe/cZPm4EA9Ku 2P6LQXdF417raZr0P4r5K7X+w6dOZPJBgfVRexnscndjr9awgSE3cxTTfyEbpvc2 C3fTEVbmGsGLPQ== -----END CERTIFICATE-----Generated at Mon Oct 27 03:57:28 2025 by rpki-client