$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/89/b4e503-574b-4565-9217-c511a3e912b6/1/5Mhto_SDJGUY02gDS8hhE5BqVaM.mft File: 5Mhto_SDJGUY02gDS8hhE5BqVaM.mft (raw, json) Hash identifier: rCazD95nxWMHezjckOkBURMe2KG4tZqVOyDKYfS+hwY= Subject key identifier: 73:A8:17:D0:1C:C6:C0:10:30:79:49:40:3F:80:3E:55:FB:19:BE:62 Authority key identifier: E4:C8:6D:A3:F4:83:24:65:18:D3:68:03:4B:C8:61:13:90:6A:55:A3 Certificate issuer: /CN=e4c86da3f483246518d368034bc86113906a55a3 Certificate serial: 019A06DB0657DED32F36967DE7A1D55DC58C Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/5Mhto_SDJGUY02gDS8hhE5BqVaM.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/89/b4e503-574b-4565-9217-c511a3e912b6/1/5Mhto_SDJGUY02gDS8hhE5BqVaM.mft Manifest number: 1703 Signing time: Tue 21 Oct 2025 13:00:08 +0000 Manifest this update: Tue 21 Oct 2025 13:00:08 +0000 Manifest next update: Wed 22 Oct 2025 13:00:08 +0000 Files and hashes: 1: 1-jFYDqV5WrpeNsOHp1PKwlz6vK4.roa (hash: EQ/MDCmgP9HHmI8iGVKEHtzDiwjBn6MBBAbffCHgFus=) 2: 17zq4O9ZOaslRNUTl0uAqqE-5Tc.roa (hash: RTTwh+9/JIL63yGwIwupKoi9TOp9B7nI78MQqZ3Mkrw=) 3: 5Mhto_SDJGUY02gDS8hhE5BqVaM.crl (hash: 8FoaP5VMmiZkA0PX9SKo/WfwGFxV4nRvKBwJgpc9h78=) 4: 9p-IzvmGjhkwx_53U1cp4ca1edc.roa (hash: JvpWSXkuArwSHg+MuvCHLJG25RIozJ6/xQa40mNhYHs=) 5: F3QlTHWWE9WSlkZMiQKc9st1Ou0.roa (hash: jTF2cakx1EB5lTOXhh5DpRR8jEQ1THUMX2LOgGpYREA=) 6: GSndTXoc8xWBynRYSOSImTWizWI.roa (hash: m9YHTlxhLFxSnEdQXQV56My1RhJzuPVGWH107hhpQxQ=) 7: HIkRjfiBhPQsBq4nmHslEaUbXqU.roa (hash: +cuBUldhMURKr2hQ6hWWWuuFWPU1bf85bijBHZak/qc=) 8: X1X7ZkF1pBeBlChTftAa-gl-dqU.roa (hash: Gtx9uFZigYKIeTJhv0iE8fOk8wT5aB+bybyaVuFnzWU=) 9: qG5K341kb3h2E7rZoTDgHUpgRn0.roa (hash: sSAY774ANoBJ8I/YSkHzgUMD3dk/efHXAZH71Rv6miI=) 10: vTdkc2WjRZI77wKyTBFTapZQVng.roa (hash: eGfs9oYTpFW6sbSe0FWlo+6uWtvtpVaDkVPiueIt1K8=) Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/89/b4e503-574b-4565-9217-c511a3e912b6/1/5Mhto_SDJGUY02gDS8hhE5BqVaM.crl rsync://rpki.ripe.net/repository/DEFAULT/89/b4e503-574b-4565-9217-c511a3e912b6/1/5Mhto_SDJGUY02gDS8hhE5BqVaM.mft rsync://rpki.ripe.net/repository/DEFAULT/5Mhto_SDJGUY02gDS8hhE5BqVaM.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Wed 22 Oct 2025 13:00:08 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9a:06:db:06:57:de:d3:2f:36:96:7d:e7:a1:d5:5d:c5:8c Signature Algorithm: sha256WithRSAEncryption Issuer: CN=e4c86da3f483246518d368034bc86113906a55a3 Validity Not Before: Oct 21 13:00:08 2025 GMT Not After : Oct 22 13:00:08 2025 GMT Subject: CN=73a817d01cc6c010307949403f803e55fb19be62 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:b0:88:2e:fe:31:8a:97:46:9c:0a:27:2b:9f:65: a8:87:c0:59:8c:95:ce:c1:30:1d:c9:29:23:3c:b7: 4b:59:43:78:c4:a8:6a:f6:f1:e1:e3:f8:21:e8:36: 2e:5f:b3:ba:8b:0b:07:db:66:e7:ab:bc:82:3e:94: 21:ac:fa:17:d2:e0:f6:de:74:7b:59:5d:74:da:4f: 43:23:06:95:18:0b:4b:2a:5f:a1:9c:33:50:8b:f0: 6f:e6:58:88:b5:74:91:05:87:40:31:72:23:06:2b: f8:a2:65:0e:6e:bd:0d:16:be:81:23:fe:fd:0b:46: 36:02:d1:bd:f0:6f:1a:0a:50:01:5a:ce:2c:30:7b: af:58:8e:d9:0b:23:b4:16:92:54:51:a8:d1:03:c5: b6:a0:7a:3f:14:49:27:bf:98:a8:ea:82:cc:f3:d6: 29:47:68:70:40:2c:e6:4f:7d:91:ba:c0:71:cb:72: c3:76:bc:f9:21:52:1b:a6:68:de:f5:9c:ce:76:45: 11:0a:ed:13:8b:7d:2f:f8:16:ad:bb:e3:04:41:8b: c0:63:04:cf:ae:ed:40:1d:45:2e:94:a1:d2:93:a7: cc:16:4e:63:e8:09:ae:48:c5:d9:1f:b0:ad:30:1a: 3c:c7:80:17:c6:09:67:ed:20:14:63:8a:e4:e5:2d: 39:e3 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 73:A8:17:D0:1C:C6:C0:10:30:79:49:40:3F:80:3E:55:FB:19:BE:62 X509v3 Authority Key Identifier: keyid:E4:C8:6D:A3:F4:83:24:65:18:D3:68:03:4B:C8:61:13:90:6A:55:A3 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/5Mhto_SDJGUY02gDS8hhE5BqVaM.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/89/b4e503-574b-4565-9217-c511a3e912b6/1/5Mhto_SDJGUY02gDS8hhE5BqVaM.mft X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/89/b4e503-574b-4565-9217-c511a3e912b6/1/5Mhto_SDJGUY02gDS8hhE5BqVaM.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 2e:9a:78:e5:a9:47:0f:84:4e:5f:bb:ca:5a:0f:73:f4:e0:60: b3:b8:dc:5f:6b:84:02:3e:38:9e:40:4c:61:9a:59:d6:ce:8f: 55:2d:ee:cb:36:19:67:f6:30:b2:4b:ab:a8:53:2c:cb:b4:62: fe:f8:cb:f4:61:0d:73:5c:81:59:de:20:12:33:d6:1d:cb:e3: 09:4b:1e:eb:8e:69:29:63:1a:0e:30:92:39:16:d4:aa:34:4f: 88:d5:12:55:fe:87:77:6d:c8:6d:9e:7e:be:0e:68:a7:f3:64: 5c:08:ef:51:ef:0e:00:0e:32:b1:40:37:28:64:e7:5b:95:92: 17:00:90:5b:35:40:2f:e2:b4:4b:b1:f8:f4:03:1f:03:be:94: 76:d0:80:96:90:6d:df:49:92:b0:df:ca:8d:a1:ae:ac:61:72: 4a:87:7b:7b:0f:7a:56:b6:12:83:a4:c0:96:b8:6c:ca:b7:52: c8:cb:1e:f0:53:ac:c3:8d:6c:bf:35:f3:b3:f9:24:46:c5:b9: 45:a8:96:59:17:6d:91:78:73:9a:31:76:b2:89:69:0c:96:ec: cd:96:03:1f:99:16:b9:6b:b7:63:48:c5:ab:f0:00:3f:7c:f4: ef:b5:21:6d:44:43:fa:1d:e8:ce:d8:00:03:77:f3:f2:23:49: 11:0a:4e:8a -----BEGIN CERTIFICATE----- MIIFFjCCA/6gAwIBAgISAZoG2wZX3tMvNpZ956HVXcWMMA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKGU0Yzg2ZGEzZjQ4MzI0NjUxOGQzNjgwMzRiYzg2MTEzOTA2 YTU1YTMwHhcNMjUxMDIxMTMwMDA4WhcNMjUxMDIyMTMwMDA4WjAzMTEwLwYDVQQD Eyg3M2E4MTdkMDFjYzZjMDEwMzA3OTQ5NDAzZjgwM2U1NWZiMTliZTYyMIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAsIgu/jGKl0acCicrn2Woh8BZjJXO wTAdySkjPLdLWUN4xKhq9vHh4/gh6DYuX7O6iwsH22bnq7yCPpQhrPoX0uD23nR7 WV102k9DIwaVGAtLKl+hnDNQi/Bv5liItXSRBYdAMXIjBiv4omUObr0NFr6BI/79 C0Y2AtG98G8aClABWs4sMHuvWI7ZCyO0FpJUUajRA8W2oHo/FEknv5io6oLM89Yp R2hwQCzmT32RusBxy3LDdrz5IVIbpmje9ZzOdkURCu0Ti30v+Batu+MEQYvAYwTP ru1AHUUulKHSk6fMFk5j6AmuSMXZH7CtMBo8x4AXxgln7SAUY4rk5S054wIDAQAB o4ICIjCCAh4wHQYDVR0OBBYEFHOoF9AcxsAQMHlJQD+APlX7Gb5iMB8GA1UdIwQY MBaAFOTIbaP0gyRlGNNoA0vIYROQalWjMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvNU1odG9fU0RKR1VZMDJnRFM4aGhFNUJxVmFNLmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC84OS9iNGU1MDMtNTc0Yi00NTY1LTkyMTct YzUxMWEzZTkxMmI2LzEvNU1odG9fU0RKR1VZMDJnRFM4aGhFNUJxVmFNLm1mdDCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC84OS9iNGU1MDMtNTc0Yi00NTY1LTkyMTctYzUxMWEzZTkxMmI2 LzEvNU1odG9fU0RKR1VZMDJnRFM4aGhFNUJxVmFNLmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEALpp45alH D4ROX7vKWg9z9OBgs7jcX2uEAj44nkBMYZpZ1s6PVS3uyzYZZ/YwskurqFMsy7Ri /vjL9GENc1yBWd4gEjPWHcvjCUse645pKWMaDjCSORbUqjRPiNUSVf6Hd23IbZ5+ vg5op/NkXAjvUe8OAA4ysUA3KGTnW5WSFwCQWzVAL+K0S7H49AMfA76UdtCAlpBt 30mSsN/KjaGurGFySod7ew96VrYSg6TAlrhsyrdSyMse8FOsw41svzXzs/kkRsW5 RaiWWRdtkXhzmjF2solpDJbszZYDH5kWuWu3Y0jFq/AAP3z077UhbURD+h3oztgA A3fz8iNJEQpOig== -----END CERTIFICATE-----Generated at Tue Oct 21 21:17:36 2025 by rpki-client