$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/a7/9151c0-3326-4801-9363-c7d19930d66d/1/tOgroXFdaurlsBAnJf_gyDRzXX0.mft File: tOgroXFdaurlsBAnJf_gyDRzXX0.mft (raw, json) Hash identifier: GTguAtzAuBWSHqa+AOpAEKf1P963iFtC9qh/ELOvfvU= Subject key identifier: DB:00:E1:DE:DD:2D:18:C9:B9:78:F4:D6:F3:E6:55:4B:3F:DF:1D:70 Authority key identifier: B4:E8:2B:A1:71:5D:6A:EA:E5:B0:10:27:25:FF:E0:C8:34:73:5D:7D Certificate issuer: /CN=b4e82ba1715d6aeae5b0102725ffe0c834735d7d Certificate serial: 019A1DD108D28FE2BE838F22B53545A2ECBC Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/tOgroXFdaurlsBAnJf_gyDRzXX0.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/a7/9151c0-3326-4801-9363-c7d19930d66d/1/tOgroXFdaurlsBAnJf_gyDRzXX0.mft Manifest number: 0EEB Signing time: Sun 26 Oct 2025 00:00:29 +0000 Manifest this update: Sun 26 Oct 2025 00:00:29 +0000 Manifest next update: Mon 27 Oct 2025 00:00:29 +0000 Files and hashes: 1: 52GXxgdg7vWygkQsHwnq_P3gjJA.roa (hash: i/4OVKKicHKNXCwirS/rOH1bcQmeEUg5ZtGhz1sY85I=) 2: 69jsCPkwXK1lmTxeQTyCID9PpjA.roa (hash: h/Q47E5oO3l5JxeekNZr7l4rqZH5SyA0969VUEHNB8w=) 3: 9MVV1yAh59mTgEP_W258bMa49_o.roa (hash: iCN3glju44EdxjBrGRw+NZhFmqg56yUA7pS6/PNweyY=) 4: AjV2rlIwTElr058YXLjGHHrdXf0.roa (hash: LTFD7RWDdMyUwIhuINghYkedTIuVGScYQK467Diulf0=) 5: Dgr2wvOQnRz5hgawqSG0QB7Wpf8.roa (hash: qz1bNfdEE/9TcJfQDqdc+8FtR45UoCnUkyfUGSABkmQ=) 6: ObtlGayrPGhbC0NJB3cANhdfN9g.roa (hash: IXODRFBoDBQAcQ/y7+mqgK85yVkykmHrcIsLk/+rl+k=) 7: UdUz-kT-b500-FTrkpKhOG9_Lzg.roa (hash: 0R7mO9NcYxR+lIBqqxDSdOzb7Oi6PF6Gf+MJjbPBZOg=) 8: VifVBKjqmDhUgid5BLElJTuQJo4.roa (hash: WI5+mxqhucetVt6cCUvKQ5QuoJnG/kLcpHeXlC1Yb5Y=) 9: lKCL8VeF7spgo1KPqTl3MnMrJFU.roa (hash: G5kvKqbW+q0BKre+iGyFYRJgxgTgTCaLSiQqwrZLbuM=) 10: tOgroXFdaurlsBAnJf_gyDRzXX0.crl (hash: P+FxgLhD0m5Nxvnpbw0tPdzIGGJfNFKgE6hFY0LtN7c=) Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/a7/9151c0-3326-4801-9363-c7d19930d66d/1/tOgroXFdaurlsBAnJf_gyDRzXX0.crl rsync://rpki.ripe.net/repository/DEFAULT/a7/9151c0-3326-4801-9363-c7d19930d66d/1/tOgroXFdaurlsBAnJf_gyDRzXX0.mft rsync://rpki.ripe.net/repository/DEFAULT/tOgroXFdaurlsBAnJf_gyDRzXX0.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Sun 26 Oct 2025 20:00:03 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9a:1d:d1:08:d2:8f:e2:be:83:8f:22:b5:35:45:a2:ec:bc Signature Algorithm: sha256WithRSAEncryption Issuer: CN=b4e82ba1715d6aeae5b0102725ffe0c834735d7d Validity Not Before: Oct 26 00:00:29 2025 GMT Not After : Oct 27 00:00:29 2025 GMT Subject: CN=db00e1dedd2d18c9b978f4d6f3e6554b3fdf1d70 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:90:d7:de:c4:25:c2:2b:28:bc:f7:ec:24:7c:b6: 77:95:be:06:9c:88:22:ff:2a:5f:94:67:d2:54:89: 73:d8:78:91:fb:cb:9d:b9:8e:2e:06:22:4c:7d:b5: dd:c2:0a:41:98:e9:8f:8e:f9:b9:32:68:d2:35:60: c0:73:c6:54:5c:4f:2a:76:f5:32:94:b9:63:cd:51: 07:21:4e:08:67:95:37:dc:47:6b:93:75:06:dd:cc: f9:81:d8:18:8f:0c:22:09:0c:33:83:7c:9e:32:15: bd:fe:ae:68:84:63:f9:72:84:bb:48:ac:df:51:13: 3d:1c:0c:da:88:cc:99:8e:b0:81:55:9b:14:f9:bd: 40:3d:51:c9:c4:55:d3:e3:27:21:b6:a6:b9:90:d7: 0d:35:3d:f1:59:57:33:f6:57:93:0f:34:45:ba:13: 52:ee:91:c4:0b:be:82:97:6a:65:09:df:33:e9:f9: 27:df:a6:e8:67:23:90:0c:4a:fd:e1:aa:a5:e2:b1: c7:4b:dd:aa:38:2b:80:c5:1c:0d:a7:f7:98:98:81: 63:0f:aa:29:16:a0:31:d0:9c:13:3d:58:2a:4a:e6: cf:c2:c1:01:f9:c7:08:c9:5c:7e:07:01:6d:14:6f: 24:c5:26:a7:51:3d:72:c4:a6:40:fa:12:76:60:6e: b8:9b Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: DB:00:E1:DE:DD:2D:18:C9:B9:78:F4:D6:F3:E6:55:4B:3F:DF:1D:70 X509v3 Authority Key Identifier: keyid:B4:E8:2B:A1:71:5D:6A:EA:E5:B0:10:27:25:FF:E0:C8:34:73:5D:7D X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/tOgroXFdaurlsBAnJf_gyDRzXX0.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/a7/9151c0-3326-4801-9363-c7d19930d66d/1/tOgroXFdaurlsBAnJf_gyDRzXX0.mft X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/a7/9151c0-3326-4801-9363-c7d19930d66d/1/tOgroXFdaurlsBAnJf_gyDRzXX0.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 9c:a9:80:fa:31:ae:0a:2e:69:57:7b:cf:ad:e1:b0:53:3f:1e: 79:ff:e3:61:fa:8d:3a:32:3e:39:21:89:4b:5e:45:9c:17:e0: a8:d8:45:e2:7c:2b:20:09:57:ac:41:6a:a8:89:c2:d4:b7:75: 93:d0:07:ab:fd:59:ae:df:5b:7c:71:11:4f:f3:13:2b:53:36: 66:27:cf:84:cc:89:b8:15:af:d2:a4:a6:08:28:2c:e5:83:a8: 84:85:dc:41:25:77:8e:18:27:33:17:e8:3c:df:18:40:9a:58: 30:92:65:e3:1f:a7:25:46:6c:55:9d:6d:cc:ec:b7:01:39:a5: f0:08:45:00:22:f8:ce:92:da:48:02:0c:5a:cc:fe:20:86:9a: 22:76:fa:00:bc:1b:a3:d8:2d:fe:43:0a:51:9e:1c:15:09:74: f9:eb:18:58:f0:92:9c:bc:c4:c3:ba:80:1b:22:bb:38:7f:78: 09:cc:2a:1c:84:8b:19:f7:50:8a:82:c7:53:2b:01:08:02:69: f0:40:38:f4:20:c5:27:36:38:5a:b6:d4:d1:fc:01:cb:02:dd: 8a:78:2e:2c:96:1f:72:6c:2f:fb:21:bc:4c:36:1d:a9:59:34: 12:59:10:fa:3d:b7:3f:d3:b4:97:48:d8:6b:27:5c:42:c1:9b: 05:4d:bc:fc -----BEGIN CERTIFICATE----- MIIFFjCCA/6gAwIBAgISAZod0QjSj+K+g48itTVFouy8MA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKGI0ZTgyYmExNzE1ZDZhZWFlNWIwMTAyNzI1ZmZlMGM4MzQ3 MzVkN2QwHhcNMjUxMDI2MDAwMDI5WhcNMjUxMDI3MDAwMDI5WjAzMTEwLwYDVQQD EyhkYjAwZTFkZWRkMmQxOGM5Yjk3OGY0ZDZmM2U2NTU0YjNmZGYxZDcwMIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAkNfexCXCKyi89+wkfLZ3lb4GnIgi /ypflGfSVIlz2HiR+8uduY4uBiJMfbXdwgpBmOmPjvm5MmjSNWDAc8ZUXE8qdvUy lLljzVEHIU4IZ5U33Edrk3UG3cz5gdgYjwwiCQwzg3yeMhW9/q5ohGP5coS7SKzf URM9HAzaiMyZjrCBVZsU+b1APVHJxFXT4ychtqa5kNcNNT3xWVcz9leTDzRFuhNS 7pHEC76Cl2plCd8z6fkn36boZyOQDEr94aql4rHHS92qOCuAxRwNp/eYmIFjD6op FqAx0JwTPVgqSubPwsEB+ccIyVx+BwFtFG8kxSanUT1yxKZA+hJ2YG64mwIDAQAB o4ICIjCCAh4wHQYDVR0OBBYEFNsA4d7dLRjJuXj01vPmVUs/3x1wMB8GA1UdIwQY MBaAFLToK6FxXWrq5bAQJyX/4Mg0c119MA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvdE9ncm9YRmRhdXJsc0JBbkpmX2d5RFJ6WFgwLmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC9hNy85MTUxYzAtMzMyNi00ODAxLTkzNjMt YzdkMTk5MzBkNjZkLzEvdE9ncm9YRmRhdXJsc0JBbkpmX2d5RFJ6WFgwLm1mdDCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC9hNy85MTUxYzAtMzMyNi00ODAxLTkzNjMtYzdkMTk5MzBkNjZk LzEvdE9ncm9YRmRhdXJsc0JBbkpmX2d5RFJ6WFgwLmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAnKmA+jGu Ci5pV3vPreGwUz8eef/jYfqNOjI+OSGJS15FnBfgqNhF4nwrIAlXrEFqqInC1Ld1 k9AHq/1Zrt9bfHERT/MTK1M2ZifPhMyJuBWv0qSmCCgs5YOohIXcQSV3jhgnMxfo PN8YQJpYMJJl4x+nJUZsVZ1tzOy3ATml8AhFACL4zpLaSAIMWsz+IIaaInb6ALwb o9gt/kMKUZ4cFQl0+esYWPCSnLzEw7qAGyK7OH94CcwqHISLGfdQioLHUysBCAJp 8EA49CDFJzY4WrbU0fwBywLdinguLJYfcmwv+yG8TDYdqVk0ElkQ+j23P9O0l0jY aydcQsGbBU28/A== -----END CERTIFICATE-----Generated at Sun Oct 26 04:55:30 2025 by rpki-client