$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/9e/aba502-d191-4fd7-a7cf-504f2766760f/1/snJh1xU0i_1zzp27ckiGVpk7ovE.mft File: snJh1xU0i_1zzp27ckiGVpk7ovE.mft (raw, json) Hash identifier: 50eXrX4/VoOsUJ8ZtX+7lyjCxUAgB0F9avZ6cmPF8E4= Subject key identifier: 7A:80:9E:7E:4C:AF:80:11:42:C0:7E:97:B0:22:16:0B:B1:DE:20:4B Authority key identifier: B2:72:61:D7:15:34:8B:FD:73:CE:9D:BB:72:48:86:56:99:3B:A2:F1 Certificate issuer: /CN=b27261d715348bfd73ce9dbb72488656993ba2f1 Certificate serial: 019A24AEA7215E81A57D96D1CF2B6E01F9EA Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/snJh1xU0i_1zzp27ckiGVpk7ovE.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/9e/aba502-d191-4fd7-a7cf-504f2766760f/1/snJh1xU0i_1zzp27ckiGVpk7ovE.mft Manifest number: 1224 Signing time: Mon 27 Oct 2025 08:00:17 +0000 Manifest this update: Mon 27 Oct 2025 08:00:17 +0000 Manifest next update: Tue 28 Oct 2025 08:00:17 +0000 Files and hashes: 1: 54iLRsUEYQSLlV8kHVTer9P4keA.roa (hash: Oib7LJlXh4bUMGiTPxF+59IQOdwF+fvCUOmQ1Sv5YqM=) 2: 83ZfI9Fyoy0-0Ed7XViCJUVWAUk.roa (hash: x5Erfp0LUGN9evcbs1ECyXblatyvnAhrnm8OrbCDB8k=) 3: DtWqKYrRCyGx6dsd9f2L7CKfIRc.roa (hash: O7NemdIlDZpd4quz6YecLMnjW1CyD/u06cKhcBOTRro=) 4: GrZCo-Pl-pKds5zmwg7ubalVFTA.roa (hash: XSM4rBpjvcsUyAb/r/u55Oo3ZCJqxZNIGwjYsJQ68bw=) 5: M80ufUXhkNHfa9K4zU6X6k_ofZQ.roa (hash: 4dQl+qST57nUFs67WwcEmlUV01oY2iEO29630JMqbwE=) 6: OcXOGlX2Gc26JEdm5iWVWnBYg58.roa (hash: /vGDKbgE4iZUS4BzIvVP16inipE2apdXrS0M45rcngw=) 7: QpucqboD9L8Uv9-I8wC2eqyytjM.roa (hash: QJ36JcAEae+tPmwoLHxsrKQ/qHkNlapv2iTQudy3nXg=) 8: VLrSYlONO7JZUvaeI6OzgjRksA0.roa (hash: LTkUIoLhvOTPKcASxWAtrGL8orynFjazuB3yg7c0ZYo=) 9: W95VCieFrYA-UWvQbNSL7N3Y2Cg.roa (hash: YvWvtJ9d+roXNfi60DzUNUYY7G9jfkQp1ZTCPAwbx+g=) 10: Yw4yz2qvg4rQujrK-dIx_KPixQM.roa (hash: rPOdhOXTd0LJkvjvgXHjpfcSX15w4WKfBaBl0s4PykM=) 11: mMdAkncXd62KSLEMH5-GZ2xifmI.roa (hash: BsiKxHj0OcEVg20ZYqrvGiqQgj+ynivI6054d313+QE=) 12: snJh1xU0i_1zzp27ckiGVpk7ovE.crl (hash: 1VqXGCTr9kqpv2xcbY1/XQXZjn+69MRYRO49u2/zEWc=) 13: tXmj_lk4J_cxjq5mg9Y-DnR4g68.roa (hash: FkJnyg1Nbp4kUP6A2c71ys6CgKIoTjWwYiDec6OD1BY=) 14: x93oIxwN7f9CnY5MK-gEMFA9RCs.roa (hash: iUrM+UkqfotbOBAOD6sNrVDAFzEQJnu2I0F39zCKGjM=) 15: x_9TAtatN7OaJxTBmrfHpUlXZDA.roa (hash: 2gG4s/omQ5P0Lbi33p1Th/x4L/bao6YkNKtuc6UmamA=) Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/9e/aba502-d191-4fd7-a7cf-504f2766760f/1/snJh1xU0i_1zzp27ckiGVpk7ovE.crl rsync://rpki.ripe.net/repository/DEFAULT/9e/aba502-d191-4fd7-a7cf-504f2766760f/1/snJh1xU0i_1zzp27ckiGVpk7ovE.mft rsync://rpki.ripe.net/repository/DEFAULT/snJh1xU0i_1zzp27ckiGVpk7ovE.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Tue 28 Oct 2025 08:00:17 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9a:24:ae:a7:21:5e:81:a5:7d:96:d1:cf:2b:6e:01:f9:ea Signature Algorithm: sha256WithRSAEncryption Issuer: CN=b27261d715348bfd73ce9dbb72488656993ba2f1 Validity Not Before: Oct 27 08:00:17 2025 GMT Not After : Oct 28 08:00:17 2025 GMT Subject: CN=7a809e7e4caf801142c07e97b022160bb1de204b Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:b7:fc:83:90:3f:48:cb:2b:a8:e5:d9:c1:08:be: 36:18:a8:b2:b2:78:b5:ee:ec:22:be:40:85:cd:18: 0e:5b:65:ff:18:67:7f:60:29:59:d4:76:5e:94:50: 95:be:f7:7d:3c:61:c9:40:c9:e6:4b:c4:fa:38:e1: 75:90:1e:14:e2:d4:43:44:67:e8:09:2f:ee:c3:b9: 65:f8:53:fc:64:09:54:0c:77:e9:5f:7d:2d:a2:1a: 59:11:13:78:32:26:f1:6d:22:62:57:00:ff:f6:83: 32:db:59:cc:3e:26:be:8e:67:bf:33:f8:5a:ca:34: ec:5c:0a:e9:af:ad:6d:13:d9:48:09:e9:06:a8:a4: 01:e4:cf:bb:7d:e7:59:fa:20:6b:2e:19:7a:f4:6e: 4d:94:45:54:81:f0:30:31:14:7e:2d:dc:32:e2:c4: 85:d8:57:82:90:a4:28:88:25:df:3e:db:d7:d8:71: 63:03:3a:53:74:65:c0:0c:d3:5a:f6:99:37:3c:af: 5e:58:16:4a:ab:1e:a9:75:79:5e:c2:4c:7f:cb:f8: 6a:2d:35:bb:e9:dd:3f:07:29:e0:b9:62:ca:36:2a: 16:fe:9d:b3:1c:8c:ef:b3:52:fb:ab:06:aa:5d:2e: d6:8e:eb:2c:19:88:08:d7:8a:31:d7:e0:84:48:fb: 90:e9 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 7A:80:9E:7E:4C:AF:80:11:42:C0:7E:97:B0:22:16:0B:B1:DE:20:4B X509v3 Authority Key Identifier: keyid:B2:72:61:D7:15:34:8B:FD:73:CE:9D:BB:72:48:86:56:99:3B:A2:F1 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/snJh1xU0i_1zzp27ckiGVpk7ovE.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/9e/aba502-d191-4fd7-a7cf-504f2766760f/1/snJh1xU0i_1zzp27ckiGVpk7ovE.mft X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/9e/aba502-d191-4fd7-a7cf-504f2766760f/1/snJh1xU0i_1zzp27ckiGVpk7ovE.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 51:ab:85:2f:3e:06:74:db:50:3b:17:bf:a2:95:81:f5:c7:48: 87:a3:b0:ca:c3:51:43:0a:95:18:93:28:1e:c7:4d:e8:27:74: 15:b2:31:f7:e5:97:92:15:bc:b2:28:4f:6a:e4:2f:72:5c:fa: f4:49:c7:68:4a:9e:e0:1f:2e:c2:01:07:51:ce:13:76:5f:3b: 37:cc:49:92:45:a9:fb:40:18:9b:e2:37:3d:23:8a:65:24:2c: 4a:fb:ca:b2:78:67:55:a4:3f:49:4a:49:ed:a3:9d:e6:0d:36: f8:c8:ce:dc:96:af:a5:4e:4d:0f:06:f1:52:2c:67:4d:39:0f: f1:ff:1e:b5:8b:6b:54:d6:b3:42:86:44:03:2b:15:66:2c:69: e9:c1:c9:d4:75:78:d0:44:b4:f9:ef:14:d1:d0:41:08:16:d2: 93:86:71:74:7a:ad:cc:97:9f:69:ee:0d:24:1f:62:51:7c:43: d7:78:aa:ac:2a:bf:6f:23:b9:9d:3d:6b:42:66:24:7f:e1:fe: dc:c9:86:c5:69:db:65:aa:25:25:8f:0b:66:66:df:d6:5e:4e: 42:ec:93:2d:ea:93:3b:84:60:de:78:39:d1:73:be:70:39:09: 10:f9:d2:c4:12:55:ca:5c:77:63:0f:75:76:62:1b:89:37:88: 95:5b:32:af -----BEGIN CERTIFICATE----- MIIFFjCCA/6gAwIBAgISAZokrqchXoGlfZbRzytuAfnqMA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKGIyNzI2MWQ3MTUzNDhiZmQ3M2NlOWRiYjcyNDg4NjU2OTkz YmEyZjEwHhcNMjUxMDI3MDgwMDE3WhcNMjUxMDI4MDgwMDE3WjAzMTEwLwYDVQQD Eyg3YTgwOWU3ZTRjYWY4MDExNDJjMDdlOTdiMDIyMTYwYmIxZGUyMDRiMIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAt/yDkD9Iyyuo5dnBCL42GKiysni1 7uwivkCFzRgOW2X/GGd/YClZ1HZelFCVvvd9PGHJQMnmS8T6OOF1kB4U4tRDRGfo CS/uw7ll+FP8ZAlUDHfpX30tohpZERN4MibxbSJiVwD/9oMy21nMPia+jme/M/ha yjTsXArpr61tE9lICekGqKQB5M+7fedZ+iBrLhl69G5NlEVUgfAwMRR+Ldwy4sSF 2FeCkKQoiCXfPtvX2HFjAzpTdGXADNNa9pk3PK9eWBZKqx6pdXlewkx/y/hqLTW7 6d0/BynguWLKNioW/p2zHIzvs1L7qwaqXS7WjussGYgI14ox1+CESPuQ6QIDAQAB o4ICIjCCAh4wHQYDVR0OBBYEFHqAnn5Mr4ARQsB+l7AiFgux3iBLMB8GA1UdIwQY MBaAFLJyYdcVNIv9c86du3JIhlaZO6LxMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvc25KaDF4VTBpXzF6enAyN2NraUdWcGs3b3ZFLmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC85ZS9hYmE1MDItZDE5MS00ZmQ3LWE3Y2Yt NTA0ZjI3NjY3NjBmLzEvc25KaDF4VTBpXzF6enAyN2NraUdWcGs3b3ZFLm1mdDCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC85ZS9hYmE1MDItZDE5MS00ZmQ3LWE3Y2YtNTA0ZjI3NjY3NjBm LzEvc25KaDF4VTBpXzF6enAyN2NraUdWcGs3b3ZFLmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAUauFLz4G dNtQOxe/opWB9cdIh6OwysNRQwqVGJMoHsdN6Cd0FbIx9+WXkhW8sihPauQvclz6 9EnHaEqe4B8uwgEHUc4Tdl87N8xJkkWp+0AYm+I3PSOKZSQsSvvKsnhnVaQ/SUpJ 7aOd5g02+MjO3JavpU5NDwbxUixnTTkP8f8etYtrVNazQoZEAysVZixp6cHJ1HV4 0ES0+e8U0dBBCBbSk4ZxdHqtzJefae4NJB9iUXxD13iqrCq/byO5nT1rQmYkf+H+ 3MmGxWnbZaolJY8LZmbf1l5OQuyTLeqTO4Rg3ng50XO+cDkJEPnSxBJVylx3Yw91 dmIbiTeIlVsyrw== -----END CERTIFICATE-----Generated at Mon Oct 27 18:00:45 2025 by rpki-client