$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/82/7cb179-ad2c-4824-a1e5-ae07f32e4102/1/_EQpfpJxxu3wZJFfYYCuEmkN2os.mft File: _EQpfpJxxu3wZJFfYYCuEmkN2os.mft (raw, json) Hash identifier: R1lV8mvYZyzVR0N5fAwbminPV/VVPpj3BohZXlVP29A= Subject key identifier: 60:26:7B:DB:E1:9B:F5:28:0D:93:34:F4:E8:87:77:5E:45:43:EE:44 Authority key identifier: FC:44:29:7E:92:71:C6:ED:F0:64:91:5F:61:80:AE:12:69:0D:DA:8B Certificate issuer: /CN=fc44297e9271c6edf064915f6180ae12690dda8b Certificate serial: 019A21E4DECCA127DCC7125A67E28E0040B4 Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/_EQpfpJxxu3wZJFfYYCuEmkN2os.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/82/7cb179-ad2c-4824-a1e5-ae07f32e4102/1/_EQpfpJxxu3wZJFfYYCuEmkN2os.mft Manifest number: 170B Signing time: Sun 26 Oct 2025 19:00:38 +0000 Manifest this update: Sun 26 Oct 2025 19:00:38 +0000 Manifest next update: Mon 27 Oct 2025 19:00:38 +0000 Files and hashes: 1: 32yhRz_S8ITRiOsBYkmV4NnQCYc.roa (hash: dVgxRZDbIbYdq2fLtDV8WTt0Yh4BvCJtbiIWE/I7V9o=) 2: 3YfXMGxAROTBpSHK0nXhT4XXVLA.roa (hash: t9FN1AE/iUXMjLgMElEEh/Ci+Kik/9ynPh+dOX7Z5u8=) 3: 4CRh1_CvU86oKkepqeWz0p8Z20g.roa (hash: eECawWd/eK8DTrkxHmdqWQ83awsrOYEANzuH8VdAHYk=) 4: 4yVwhdNr1x7QWhuQZt7jnU3WVfU.roa (hash: Avv1mWPFCgDH8L+bShCZ3laRZSIOjbCtfz5vWH2fX7s=) 5: 7hrowrIyQ_yhCn7NqJyPwlbnjvU.roa (hash: jaDUXbK3NwGZnP8kMILOfU6k2MmyLuZSMbC+5y9ZUnQ=) 6: EC4-LQ6kidGJzuS4NcMwvpf6NbU.roa (hash: p11JEQANSGpxSsSCC9KDVq2xpHH5TNvaJmupLy6k704=) 7: He_wIqs9WbeGj8B22HW3VzQspCQ.roa (hash: tlw/MPCRV5MVLGPRtjnV6Ynl8QAazIvng9cpXGa9Jjc=) 8: HuL3gMV6_zC2v4RtUtbhqokAt3o.roa (hash: oOaz6NQBz4nDsaAkIEoLusftKpiuLlvRyaHsm/ZmfH4=) 9: QOp8bh5ZPSuznKCRrGZLlhCTgcs.roa (hash: 7hAuGp/9PxCmWRCRnl/vszI74VutrV1FkyouYG2D0Ok=) 10: VoBqKFmkzHKUMH66kT01ur4Okdk.roa (hash: wrQGRmCWA6MmV9E979fU5JGLxSuHzNsXWbXUIKZWDCY=) 11: ZWOY1CQejAaInI5dPiW91XYX-d8.roa (hash: 99cY9onRLW//cQHI0vGgH4e5SQS2hb6TJu75LNYg/pg=) 12: _EQpfpJxxu3wZJFfYYCuEmkN2os.crl (hash: Q1pKWBt1bDR22OhBN6832qYB6SoZX4pipxLKvXQ/nsE=) 13: bvGIb4I9tPNSFQAgMarPZLbQdco.roa (hash: z2ND/X4p7VMdJla0AX/t4QpyjiykeGek/GP7iei/AGM=) 14: tineMtUjOADbmljZnXO2AjKqXkc.roa (hash: 0BfJzskVZ3BO+kzng4r5uCUBjRTYeY/YcraQ9f9oslk=) Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/82/7cb179-ad2c-4824-a1e5-ae07f32e4102/1/_EQpfpJxxu3wZJFfYYCuEmkN2os.crl rsync://rpki.ripe.net/repository/DEFAULT/82/7cb179-ad2c-4824-a1e5-ae07f32e4102/1/_EQpfpJxxu3wZJFfYYCuEmkN2os.mft rsync://rpki.ripe.net/repository/DEFAULT/_EQpfpJxxu3wZJFfYYCuEmkN2os.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Mon 27 Oct 2025 19:00:38 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9a:21:e4:de:cc:a1:27:dc:c7:12:5a:67:e2:8e:00:40:b4 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=fc44297e9271c6edf064915f6180ae12690dda8b Validity Not Before: Oct 26 19:00:38 2025 GMT Not After : Oct 27 19:00:38 2025 GMT Subject: CN=60267bdbe19bf5280d9334f4e887775e4543ee44 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:ca:48:59:b0:67:d3:a8:90:c0:0e:1a:e9:50:93: 25:1b:4d:f7:15:54:05:ef:47:11:95:18:bb:8d:3f: f3:4d:c0:c7:25:6a:4b:2e:48:30:0c:84:c7:c9:f7: 7b:90:6b:38:16:b3:7d:9a:de:e3:bd:f7:13:c8:52: 74:53:40:e0:05:45:26:31:ca:e5:d0:60:9a:e2:2f: f0:5c:5e:5f:fb:79:11:c8:ad:12:3a:bd:0b:fb:56: b3:eb:ba:b3:d2:20:18:1f:0c:fd:26:bd:d8:59:68: 8f:48:57:4d:9a:db:7f:d8:f2:a2:07:16:42:de:8d: ad:d1:2d:ba:60:2e:bf:74:f9:55:88:5d:9c:da:17: 7b:fd:29:0e:67:59:51:41:bd:3e:6e:bd:24:d8:3b: 75:e5:ef:a2:cf:b9:9f:db:7b:67:1b:32:f4:6d:26: 09:ad:2f:81:d6:31:74:b8:6c:5b:9e:8d:aa:b4:50: 7b:c1:5b:68:1f:0a:96:d7:24:e6:ea:d2:42:cd:8f: 84:51:48:da:b6:41:ce:e5:d0:e8:09:eb:5d:12:26: e5:d3:57:b6:e5:e9:ad:8a:c3:ef:02:6c:7c:a8:5d: 70:08:3d:04:fd:fd:bd:d3:c0:24:85:c3:09:dd:4e: 1a:33:cc:7f:75:ae:f7:be:a2:a3:d3:2b:a7:60:15: 93:33 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 60:26:7B:DB:E1:9B:F5:28:0D:93:34:F4:E8:87:77:5E:45:43:EE:44 X509v3 Authority Key Identifier: keyid:FC:44:29:7E:92:71:C6:ED:F0:64:91:5F:61:80:AE:12:69:0D:DA:8B X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/_EQpfpJxxu3wZJFfYYCuEmkN2os.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/82/7cb179-ad2c-4824-a1e5-ae07f32e4102/1/_EQpfpJxxu3wZJFfYYCuEmkN2os.mft X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/82/7cb179-ad2c-4824-a1e5-ae07f32e4102/1/_EQpfpJxxu3wZJFfYYCuEmkN2os.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 27:6a:84:d1:6d:6f:e2:c2:52:10:8d:d1:8d:6e:4f:fc:04:c6: ac:be:9d:3d:17:49:e9:4e:7b:b1:2a:ad:92:1e:e2:5e:67:b0: 91:74:46:19:de:a3:8a:70:2a:af:38:52:91:00:c2:05:cf:0a: bc:14:2d:8c:2b:81:fc:00:a3:ab:cd:80:36:ea:32:85:90:79: d1:bd:6a:bb:a3:48:48:d1:01:13:8b:ba:3e:e9:d9:d7:cd:e5: e9:ec:77:c1:59:af:33:4d:30:e6:14:72:da:c9:da:b0:b2:90: 00:21:be:0a:69:88:89:55:c0:d9:36:0b:33:d5:32:4d:25:c6: 59:c0:6a:71:a4:73:a0:57:7f:dc:ab:f0:39:07:67:28:84:cc: ba:c7:1c:5f:8c:c1:09:73:c4:5a:67:00:dc:d9:6b:23:a5:2a: 65:b1:2b:89:79:24:ac:03:4a:7c:7a:93:e7:8b:ea:d1:1e:8c: a8:b0:83:11:38:01:3b:77:54:fb:65:14:25:78:1b:e9:8b:2c: 09:b5:33:99:97:3b:b9:5d:9f:dd:61:ac:5a:9b:4b:b2:2b:8b: b1:72:f7:ac:78:bd:2d:2d:57:f1:a2:ed:e3:db:b4:e0:13:95: ea:f6:7d:9d:97:b7:9c:12:79:34:08:d3:7a:13:28:72:78:94: c2:ba:99:bd -----BEGIN CERTIFICATE----- MIIFFjCCA/6gAwIBAgISAZoh5N7MoSfcxxJaZ+KOAEC0MA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKGZjNDQyOTdlOTI3MWM2ZWRmMDY0OTE1ZjYxODBhZTEyNjkw ZGRhOGIwHhcNMjUxMDI2MTkwMDM4WhcNMjUxMDI3MTkwMDM4WjAzMTEwLwYDVQQD Eyg2MDI2N2JkYmUxOWJmNTI4MGQ5MzM0ZjRlODg3Nzc1ZTQ1NDNlZTQ0MIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAykhZsGfTqJDADhrpUJMlG033FVQF 70cRlRi7jT/zTcDHJWpLLkgwDITHyfd7kGs4FrN9mt7jvfcTyFJ0U0DgBUUmMcrl 0GCa4i/wXF5f+3kRyK0SOr0L+1az67qz0iAYHwz9Jr3YWWiPSFdNmtt/2PKiBxZC 3o2t0S26YC6/dPlViF2c2hd7/SkOZ1lRQb0+br0k2Dt15e+iz7mf23tnGzL0bSYJ rS+B1jF0uGxbno2qtFB7wVtoHwqW1yTm6tJCzY+EUUjatkHO5dDoCetdEibl01e2 5emtisPvAmx8qF1wCD0E/f2908AkhcMJ3U4aM8x/da73vqKj0yunYBWTMwIDAQAB o4ICIjCCAh4wHQYDVR0OBBYEFGAme9vhm/UoDZM09OiHd15FQ+5EMB8GA1UdIwQY MBaAFPxEKX6Sccbt8GSRX2GArhJpDdqLMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvX0VRcGZwSnh4dTN3WkpGZllZQ3VFbWtOMm9zLmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC84Mi83Y2IxNzktYWQyYy00ODI0LWExZTUt YWUwN2YzMmU0MTAyLzEvX0VRcGZwSnh4dTN3WkpGZllZQ3VFbWtOMm9zLm1mdDCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC84Mi83Y2IxNzktYWQyYy00ODI0LWExZTUtYWUwN2YzMmU0MTAy LzEvX0VRcGZwSnh4dTN3WkpGZllZQ3VFbWtOMm9zLmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAJ2qE0W1v 4sJSEI3RjW5P/ATGrL6dPRdJ6U57sSqtkh7iXmewkXRGGd6jinAqrzhSkQDCBc8K vBQtjCuB/ACjq82ANuoyhZB50b1qu6NISNEBE4u6PunZ183l6ex3wVmvM00w5hRy 2snasLKQACG+CmmIiVXA2TYLM9UyTSXGWcBqcaRzoFd/3KvwOQdnKITMusccX4zB CXPEWmcA3NlrI6UqZbEriXkkrANKfHqT54vq0R6MqLCDETgBO3dU+2UUJXgb6Yss CbUzmZc7uV2f3WGsWptLsiuLsXL3rHi9LS1X8aLt49u04BOV6vZ9nZe3nBJ5NAjT ehMocniUwrqZvQ== -----END CERTIFICATE-----Generated at Mon Oct 27 01:39:19 2025 by rpki-client