$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/b1/4f211e-79d7-4504-9ead-871f9ed708e0/1/G6UaC8Dwr-u_bV2Sf-H5gW9SNS0.mft File: G6UaC8Dwr-u_bV2Sf-H5gW9SNS0.mft (raw, json) Hash identifier: fqP8gUJBmY4toIJ2xmBNEyqRM8cJAqCELHh5dqhIx5I= Subject key identifier: E9:1D:64:79:96:5F:C6:E5:29:79:A4:E3:80:EB:90:41:7C:88:26:83 Authority key identifier: 1B:A5:1A:0B:C0:F0:AF:EB:BF:6D:5D:92:7F:E1:F9:81:6F:52:35:2D Certificate issuer: /CN=1ba51a0bc0f0afebbf6d5d927fe1f9816f52352d Certificate serial: 019A1A623A33F219AD98637358F0067212E3 Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/G6UaC8Dwr-u_bV2Sf-H5gW9SNS0.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/b1/4f211e-79d7-4504-9ead-871f9ed708e0/1/G6UaC8Dwr-u_bV2Sf-H5gW9SNS0.mft Manifest number: 12CC Signing time: Sat 25 Oct 2025 08:00:36 +0000 Manifest this update: Sat 25 Oct 2025 08:00:36 +0000 Manifest next update: Sun 26 Oct 2025 08:00:36 +0000 Files and hashes: 1: 53SCy-BS6BPWUPWLo6Zwo7zYj7U.roa (hash: hcmIxv0Tq4ILIXkoyytgzjVrkSlA1EbanTY+o8bnAF0=) 2: DBze0gTqh5SDOw7x6hoGuoE8yr4.roa (hash: ZLoARLtI2IGjjdgEEhL+2Ku7l0nsKThYXfmPapH0dJU=) 3: G6UaC8Dwr-u_bV2Sf-H5gW9SNS0.crl (hash: 2v1dHxLp9QZNLrHEgtpXKQDL8xQ+29ocM3XdA0OHNCc=) 4: JEDgkveNrJ65vuQX11mg8UnyJUY.roa (hash: q6FNEl8CDSP0PRckpcDIVuz5w5t1HfMs8z/qUPyjC5I=) 5: KjkD8Cm8Nvn5kLoxMWRB37y0yGg.roa (hash: HwYwsaGRIKEpmjSBA+wSKugW77viLOfzOy52g+ZRvys=) 6: NcbkyJf0XrQlWSuaG_6rLIv8CEA.roa (hash: t1bpX5VtlqYKcE80al52Eab7HsC+sX2g/k7XldXhhvc=) 7: SAifF78qmhwobbNifv-ncSGKlCQ.roa (hash: /saAmnnB/hN9KICwUzdIN9J64c5nmcrdQQhBsyGdv1o=) 8: TpQ5Z-UdKferYkvwPdK8R7DUnj0.roa (hash: QghfP6CKI1HCADXXFPrgTYVwEH/4oteFqhbAKuXsWlY=) 9: il06Z06HBr4UubVDG3con6FSTJE.roa (hash: 6jxCobZPgi+fb0sp+gKSIVfeSMM4jnCmJ/PQ50Rwxgc=) 10: n3eGk4GZdLWL8rCKUegiOGKLLGE.roa (hash: T8Y25mtZcw8oW9dkDTGN7ilbRkb3BxSHEAwHzK4aavQ=) 11: wmru7gkbD0Q5jhTBil0o1n-XXZY.roa (hash: aLSYcM7LxiQjHNTeSZsVR17gcFojmK5wcKMA+W/GnL8=) Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/b1/4f211e-79d7-4504-9ead-871f9ed708e0/1/G6UaC8Dwr-u_bV2Sf-H5gW9SNS0.crl rsync://rpki.ripe.net/repository/DEFAULT/b1/4f211e-79d7-4504-9ead-871f9ed708e0/1/G6UaC8Dwr-u_bV2Sf-H5gW9SNS0.mft rsync://rpki.ripe.net/repository/DEFAULT/G6UaC8Dwr-u_bV2Sf-H5gW9SNS0.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Sun 26 Oct 2025 08:00:36 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9a:1a:62:3a:33:f2:19:ad:98:63:73:58:f0:06:72:12:e3 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=1ba51a0bc0f0afebbf6d5d927fe1f9816f52352d Validity Not Before: Oct 25 08:00:36 2025 GMT Not After : Oct 26 08:00:36 2025 GMT Subject: CN=e91d6479965fc6e52979a4e380eb90417c882683 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:cd:e9:72:57:df:cd:3e:aa:4b:e6:8f:ea:57:57: f7:2a:5e:e9:bc:89:8a:04:cc:52:ad:8e:f4:bc:42: 85:ff:cf:f2:ce:0e:18:e9:ae:23:3a:df:be:da:d4: b2:14:74:00:d2:19:9e:fc:4e:13:dd:64:cc:5c:49: 97:66:18:47:2c:db:40:1d:af:3a:d5:4d:77:2c:d5: 15:93:16:62:12:cc:17:f0:a3:27:0e:90:3c:b9:d2: b5:c8:9b:db:af:53:95:ac:2c:65:73:e8:97:86:4e: d9:e9:b6:56:01:42:bf:92:d4:29:b7:64:55:81:96: ba:27:ea:7e:17:22:a1:5f:5d:6c:db:24:78:d8:d8: ac:3e:97:63:37:34:a4:aa:b4:0b:43:b4:bf:de:f6: e3:a2:17:4a:5f:e3:96:ad:c4:7b:76:d9:b5:d4:7a: 74:5b:4a:c3:77:79:af:fb:b8:f8:c8:e8:ba:b7:c4: 43:53:7d:a9:bb:e8:e5:30:ca:c5:56:e1:84:00:7f: 9e:c0:c2:df:b0:65:b5:51:79:4e:dd:f4:84:f8:0f: 89:00:61:65:bc:c8:8a:f1:2b:01:58:ac:4a:c6:18: 38:db:8d:07:b9:a0:20:9c:55:d1:34:2e:73:55:40: da:4a:62:19:48:8a:5f:f4:6d:62:2d:01:90:cb:3b: 8c:89 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: E9:1D:64:79:96:5F:C6:E5:29:79:A4:E3:80:EB:90:41:7C:88:26:83 X509v3 Authority Key Identifier: keyid:1B:A5:1A:0B:C0:F0:AF:EB:BF:6D:5D:92:7F:E1:F9:81:6F:52:35:2D X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/G6UaC8Dwr-u_bV2Sf-H5gW9SNS0.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/b1/4f211e-79d7-4504-9ead-871f9ed708e0/1/G6UaC8Dwr-u_bV2Sf-H5gW9SNS0.mft X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/b1/4f211e-79d7-4504-9ead-871f9ed708e0/1/G6UaC8Dwr-u_bV2Sf-H5gW9SNS0.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 9e:32:e4:97:4b:76:dc:dd:93:1b:b9:63:18:47:71:2e:2d:fe: 18:b7:43:39:e3:9d:0a:0c:48:b9:26:92:16:64:7d:60:87:32: 96:27:87:09:04:da:49:3b:7e:a4:e8:88:9f:c0:3a:9b:ce:37: e0:cf:d7:a7:b6:99:3d:9a:85:06:a8:ea:3e:46:92:fb:77:b2: 83:92:25:0f:3e:51:33:48:52:18:f8:06:ac:ff:54:88:34:a9: 74:6f:26:a6:6c:ed:da:53:24:f3:58:56:60:77:6e:af:e4:1b: 1f:f6:62:9f:91:99:87:c1:f1:61:39:6c:8e:f4:23:bf:22:25: 42:c3:7c:b4:2f:e3:7a:67:fb:fd:3e:a7:cc:1a:32:10:2c:06: 71:51:82:fa:2a:51:4a:07:fb:77:c8:12:aa:a7:47:c6:22:e7: b5:09:d3:2b:03:e3:f6:4f:49:ee:8d:95:ce:bf:62:f8:7a:b3: cd:52:4e:c9:e3:7f:86:cb:a1:c2:6f:b7:66:ad:90:07:d8:c1: e8:8d:3d:6c:51:d8:77:b1:44:3d:ef:c7:9b:25:f7:b7:df:92: 11:91:d5:15:44:11:bd:4c:3a:06:78:15:07:ac:a2:ef:d7:8f: e1:1a:d3:27:b0:4c:d9:15:30:97:7b:86:55:6b:62:16:49:5e: 93:07:c6:f6 -----BEGIN CERTIFICATE----- MIIFFjCCA/6gAwIBAgISAZoaYjoz8hmtmGNzWPAGchLjMA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKDFiYTUxYTBiYzBmMGFmZWJiZjZkNWQ5MjdmZTFmOTgxNmY1 MjM1MmQwHhcNMjUxMDI1MDgwMDM2WhcNMjUxMDI2MDgwMDM2WjAzMTEwLwYDVQQD EyhlOTFkNjQ3OTk2NWZjNmU1Mjk3OWE0ZTM4MGViOTA0MTdjODgyNjgzMIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAzelyV9/NPqpL5o/qV1f3Kl7pvImK BMxSrY70vEKF/8/yzg4Y6a4jOt++2tSyFHQA0hme/E4T3WTMXEmXZhhHLNtAHa86 1U13LNUVkxZiEswX8KMnDpA8udK1yJvbr1OVrCxlc+iXhk7Z6bZWAUK/ktQpt2RV gZa6J+p+FyKhX11s2yR42NisPpdjNzSkqrQLQ7S/3vbjohdKX+OWrcR7dtm11Hp0 W0rDd3mv+7j4yOi6t8RDU32pu+jlMMrFVuGEAH+ewMLfsGW1UXlO3fSE+A+JAGFl vMiK8SsBWKxKxhg4240HuaAgnFXRNC5zVUDaSmIZSIpf9G1iLQGQyzuMiQIDAQAB o4ICIjCCAh4wHQYDVR0OBBYEFOkdZHmWX8blKXmk44DrkEF8iCaDMB8GA1UdIwQY MBaAFBulGgvA8K/rv21dkn/h+YFvUjUtMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvRzZVYUM4RHdyLXVfYlYyU2YtSDVnVzlTTlMwLmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC9iMS80ZjIxMWUtNzlkNy00NTA0LTllYWQt ODcxZjllZDcwOGUwLzEvRzZVYUM4RHdyLXVfYlYyU2YtSDVnVzlTTlMwLm1mdDCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC9iMS80ZjIxMWUtNzlkNy00NTA0LTllYWQtODcxZjllZDcwOGUw LzEvRzZVYUM4RHdyLXVfYlYyU2YtSDVnVzlTTlMwLmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAnjLkl0t2 3N2TG7ljGEdxLi3+GLdDOeOdCgxIuSaSFmR9YIcylieHCQTaSTt+pOiIn8A6m843 4M/Xp7aZPZqFBqjqPkaS+3eyg5IlDz5RM0hSGPgGrP9UiDSpdG8mpmzt2lMk81hW YHdur+QbH/Zin5GZh8HxYTlsjvQjvyIlQsN8tC/jemf7/T6nzBoyECwGcVGC+ipR Sgf7d8gSqqdHxiLntQnTKwPj9k9J7o2Vzr9i+HqzzVJOyeN/hsuhwm+3Zq2QB9jB 6I09bFHYd7FEPe/HmyX3t9+SEZHVFUQRvUw6BngVB6yi79eP4RrTJ7BM2RUwl3uG VWtiFklekwfG9g== -----END CERTIFICATE-----Generated at Sat Oct 25 14:26:31 2025 by rpki-client