$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/b0/742370-e10f-4541-aa6c-61afb66d1e8c/1/Ge5fFvwUSsuYl3RJ-qCrd94b3Mk.mft File: Ge5fFvwUSsuYl3RJ-qCrd94b3Mk.mft (raw, json) Hash identifier: sxIpfmoKcCJYFP0M9o+ytYTl2QktXGgptZGvfBan5c4= Subject key identifier: 25:68:85:AE:E5:2E:3A:53:F3:69:A7:96:9B:37:83:BA:28:23:A3:D4 Authority key identifier: 19:EE:5F:16:FC:14:4A:CB:98:97:74:49:FA:A0:AB:77:DE:1B:DC:C9 Certificate issuer: /CN=19ee5f16fc144acb98977449faa0ab77de1bdcc9 Certificate serial: 019A4DE1CC04106B2DEE21BF98FF510CBB9A Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/Ge5fFvwUSsuYl3RJ-qCrd94b3Mk.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/b0/742370-e10f-4541-aa6c-61afb66d1e8c/1/Ge5fFvwUSsuYl3RJ-qCrd94b3Mk.mft Manifest number: 0B27 Signing time: Tue 04 Nov 2025 08:00:34 +0000 Manifest this update: Tue 04 Nov 2025 08:00:34 +0000 Manifest next update: Wed 05 Nov 2025 08:00:34 +0000 Files and hashes: 1: 1zxqTZu6SRyYv_Ffy0lFoBPOEm4.roa (hash: ThozvqbE39I99NwlKLMA8FultirTXMcz2Kd4yrw2ZKw=) 2: 2JQiF-KuxisBuWKzCCYjlMYezbU.roa (hash: SXSN+jTHRj/1XPCNhGNyMfhXX6aenkr84XXZn44oBus=) 3: 2wuDk6nFqqGYiaSC6iucrRXcbQk.roa (hash: 79MFBQJOifCFih1gwOm9utzcHryDlN0MlgfAlM0KB/E=) 4: 64__ti8-v70UmOgEukqaYVnNiPA.roa (hash: VerqmgWX+ipN/DN9t0GnBufDYhut1qzOjx4DnJxcXoE=) 5: 8VGto6-m3ZhEtMlMk4okhMSijsU.roa (hash: SKlBiSxKydLy7D3Ilb/NXQqcAfFABqE3nA6lfv3eM7w=) 6: ABJisPvnQcjHBVgXGi4ydoloSZE.roa (hash: RVwFroWgpI+Qhh+kSCs8kXZIQCp91O1HkIX07p2fRcU=) 7: Dd0lNs2hky54dQAv3vPisZjCFp4.roa (hash: NVL0LmaHqGXfi7RWJ5Z26iREn6xhTna8KN7jsCj7oR4=) 8: Ge5fFvwUSsuYl3RJ-qCrd94b3Mk.crl (hash: 3Ihz/yn6i4i5p8FHF8BMtDoSkgU6APtrrROPm+wYueQ=) 9: MtXcqoleDqMSyVWGFxd3850uGF8.roa (hash: 5zTGwHssmIeS5Ukj/HGoA7Wxq1gUaItGj34ri17+IlA=) 10: Q6bkyyQLjY5spQCrn9goEf71pPU.roa (hash: 9lviglTOByJ8RQWmZ8UPa2cM7z/LltLd8urB8JmBNnE=) 11: U93bZjAVh1P1joBT40YtFgkj33U.roa (hash: zo9QHI0N0+rtiU9CTdPl68EA0JwhDa16Oocr2Zm0PWg=) 12: Uaif5mluHcrJUGbfFQOQv5aGmqo.roa (hash: 4GcANOdK85GtkfgKCJ6D/Bc//mwXx0P/TVTNMp8rznY=) 13: diYtHkbWhD5oCZMkqf9gfGkO_S0.roa (hash: mAM70Fu/V+UYJ6UW5MauFuojQwzYrrWiK8CdKSQ5gBA=) 14: jyDBS4SlMdZTmgBvwq4TdZHy1_k.roa (hash: LeAOH2iyHYZi5p/Iq7kAMVJlSvm2ZJXwY56cgcvgz+I=) 15: wQmIukKER1i2VgSfKkNt8Tv2TII.roa (hash: DpzLTx/qXAbnfH+ej2Fwp80KfukeDoQIFE/iVUll7ck=) Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/b0/742370-e10f-4541-aa6c-61afb66d1e8c/1/Ge5fFvwUSsuYl3RJ-qCrd94b3Mk.crl rsync://rpki.ripe.net/repository/DEFAULT/b0/742370-e10f-4541-aa6c-61afb66d1e8c/1/Ge5fFvwUSsuYl3RJ-qCrd94b3Mk.mft rsync://rpki.ripe.net/repository/DEFAULT/Ge5fFvwUSsuYl3RJ-qCrd94b3Mk.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Wed 05 Nov 2025 08:00:34 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9a:4d:e1:cc:04:10:6b:2d:ee:21:bf:98:ff:51:0c:bb:9a Signature Algorithm: sha256WithRSAEncryption Issuer: CN=19ee5f16fc144acb98977449faa0ab77de1bdcc9 Validity Not Before: Nov 4 08:00:34 2025 GMT Not After : Nov 5 08:00:34 2025 GMT Subject: CN=256885aee52e3a53f369a7969b3783ba2823a3d4 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:ed:36:de:af:c2:8f:07:c2:d3:99:b1:f0:c1:d4: 22:cf:ae:d5:41:e2:a0:ec:2c:16:81:6f:bf:65:d5: aa:3c:e4:ba:52:39:0d:61:aa:22:92:81:8d:c2:cc: 36:90:9e:bb:e0:e2:63:0b:ed:3c:32:5a:35:4e:d5: 81:1f:7f:b1:a3:05:da:7b:b5:1d:44:fe:fa:0f:31: cb:d9:77:92:1c:e1:cc:05:a1:76:ee:a8:ab:11:cb: 3b:f1:f2:5d:1c:86:ce:41:b1:4e:32:e9:77:e8:7b: 2e:03:23:90:c5:f6:1b:fb:93:c2:44:c6:bb:bd:79: 0d:26:d3:95:52:e4:99:36:35:f6:6f:1e:c0:7d:4d: fa:b7:6d:ee:94:ac:22:f9:da:8c:09:11:ea:14:b5: 0e:16:97:a8:e9:56:db:58:c4:9e:bc:d9:93:60:07: 2d:f1:13:15:e3:a3:9b:f4:10:8a:00:c2:c9:fa:e9: c4:ce:0b:02:e7:a9:6a:6f:78:23:24:8e:75:58:fb: 2b:79:fe:79:cc:9b:a5:c0:2b:98:d5:01:3f:ac:a1: 79:b9:fc:13:c9:20:4d:97:d7:a4:cf:0d:73:40:5a: 8c:6e:06:ec:24:49:d6:cc:eb:fa:28:c5:a6:ef:51: 8f:b2:41:b1:3d:43:34:0b:68:51:7d:29:24:c3:50: 66:87 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 25:68:85:AE:E5:2E:3A:53:F3:69:A7:96:9B:37:83:BA:28:23:A3:D4 X509v3 Authority Key Identifier: keyid:19:EE:5F:16:FC:14:4A:CB:98:97:74:49:FA:A0:AB:77:DE:1B:DC:C9 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/Ge5fFvwUSsuYl3RJ-qCrd94b3Mk.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/b0/742370-e10f-4541-aa6c-61afb66d1e8c/1/Ge5fFvwUSsuYl3RJ-qCrd94b3Mk.mft X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/b0/742370-e10f-4541-aa6c-61afb66d1e8c/1/Ge5fFvwUSsuYl3RJ-qCrd94b3Mk.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 54:c3:43:3f:d4:c2:c6:b3:17:64:45:b1:a9:59:30:a0:f1:72: 5a:a4:7f:c9:64:7d:f9:83:aa:03:aa:13:cf:a4:96:0b:99:e1: 28:f9:1e:7e:62:7a:52:32:e4:ea:80:61:c7:2a:63:20:19:0e: d9:66:02:08:9b:ff:39:65:f4:2c:a0:a5:11:d3:dd:19:91:0c: 44:04:94:67:7c:3e:0f:ff:79:cd:38:bb:03:27:87:07:4b:b5: 22:e4:9c:ce:92:df:3f:c8:ee:0b:e1:e6:91:bc:c7:9e:fb:b1: 87:3c:a4:eb:48:57:84:d6:49:20:2f:b9:75:76:c0:4c:e5:61: 16:42:1d:38:7c:82:e9:f2:e6:c4:18:56:35:6f:65:8f:53:6b: 63:80:95:6b:47:93:39:4d:97:26:6b:82:b7:87:53:d8:3c:29: 3c:be:07:4b:52:37:8b:48:26:94:36:d6:10:4a:62:85:01:b7: 46:38:30:b1:c7:85:ae:14:00:23:e7:8d:b5:57:54:00:6e:c9: c1:3a:44:58:b7:4a:b4:50:e4:2e:aa:1f:44:28:65:98:ae:4a: c4:0c:96:03:02:0a:f9:08:4a:ea:87:97:b8:d3:d1:75:fd:2e: ab:7b:0c:51:5c:16:70:11:dc:59:ad:32:96:d3:13:7b:0a:2d: 46:40:f5:30 -----BEGIN CERTIFICATE----- MIIFFjCCA/6gAwIBAgISAZpN4cwEEGst7iG/mP9RDLuaMA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKDE5ZWU1ZjE2ZmMxNDRhY2I5ODk3NzQ0OWZhYTBhYjc3ZGUx YmRjYzkwHhcNMjUxMTA0MDgwMDM0WhcNMjUxMTA1MDgwMDM0WjAzMTEwLwYDVQQD EygyNTY4ODVhZWU1MmUzYTUzZjM2OWE3OTY5YjM3ODNiYTI4MjNhM2Q0MIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEA7Tber8KPB8LTmbHwwdQiz67VQeKg 7CwWgW+/ZdWqPOS6UjkNYaoikoGNwsw2kJ674OJjC+08Mlo1TtWBH3+xowXae7Ud RP76DzHL2XeSHOHMBaF27qirEcs78fJdHIbOQbFOMul36HsuAyOQxfYb+5PCRMa7 vXkNJtOVUuSZNjX2bx7AfU36t23ulKwi+dqMCRHqFLUOFpeo6VbbWMSevNmTYAct 8RMV46Ob9BCKAMLJ+unEzgsC56lqb3gjJI51WPsref55zJulwCuY1QE/rKF5ufwT ySBNl9ekzw1zQFqMbgbsJEnWzOv6KMWm71GPskGxPUM0C2hRfSkkw1BmhwIDAQAB o4ICIjCCAh4wHQYDVR0OBBYEFCVoha7lLjpT82mnlps3g7ooI6PUMB8GA1UdIwQY MBaAFBnuXxb8FErLmJd0Sfqgq3feG9zJMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvR2U1ZkZ2d1VTc3VZbDNSSi1xQ3JkOTRiM01rLmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC9iMC83NDIzNzAtZTEwZi00NTQxLWFhNmMt NjFhZmI2NmQxZThjLzEvR2U1ZkZ2d1VTc3VZbDNSSi1xQ3JkOTRiM01rLm1mdDCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC9iMC83NDIzNzAtZTEwZi00NTQxLWFhNmMtNjFhZmI2NmQxZThj LzEvR2U1ZkZ2d1VTc3VZbDNSSi1xQ3JkOTRiM01rLmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAVMNDP9TC xrMXZEWxqVkwoPFyWqR/yWR9+YOqA6oTz6SWC5nhKPkefmJ6UjLk6oBhxypjIBkO 2WYCCJv/OWX0LKClEdPdGZEMRASUZ3w+D/95zTi7AyeHB0u1IuSczpLfP8juC+Hm kbzHnvuxhzyk60hXhNZJIC+5dXbATOVhFkIdOHyC6fLmxBhWNW9lj1NrY4CVa0eT OU2XJmuCt4dT2DwpPL4HS1I3i0gmlDbWEEpihQG3RjgwsceFrhQAI+eNtVdUAG7J wTpEWLdKtFDkLqofRChlmK5KxAyWAwIK+QhK6oeXuNPRdf0uq3sMUVwWcBHcWa0y ltMTewotRkD1MA== -----END CERTIFICATE-----Generated at Tue Nov 4 14:25:56 2025 by rpki-client