$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/b1/7703ef-2422-437c-b93d-595e0bf5c613/1/MmN4f9D5SzeBPu8WvIE3Qj7j_vM.mft File: MmN4f9D5SzeBPu8WvIE3Qj7j_vM.mft (raw, json) Hash identifier: k7fWqm/ehXEzwjtErTaJty5Mdud4pkVqu5ccJ2z5PFc= Subject key identifier: 33:29:4A:2B:DD:4B:C2:59:1F:08:BD:07:26:2A:9C:09:2B:6F:B9:77 Authority key identifier: 32:63:78:7F:D0:F9:4B:37:81:3E:EF:16:BC:81:37:42:3E:E3:FE:F3 Certificate issuer: /CN=3263787fd0f94b37813eef16bc8137423ee3fef3 Certificate serial: 019A706E251BEC2756249FCDC2757AFDC9F3 Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/MmN4f9D5SzeBPu8WvIE3Qj7j_vM.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/b1/7703ef-2422-437c-b93d-595e0bf5c613/1/MmN4f9D5SzeBPu8WvIE3Qj7j_vM.mft Manifest number: 175F Signing time: Tue 11 Nov 2025 01:00:57 +0000 Manifest this update: Tue 11 Nov 2025 01:00:57 +0000 Manifest next update: Wed 12 Nov 2025 01:00:57 +0000 Files and hashes: 1: 3NU_jczsTwLqoaX-lCYDIDK-xK4.roa (hash: 8Hfke+9D8re50lqI3eIcpPcn6OSj6q+EHma6Ds52QuY=) 2: 6EzBdLMFhAHXtGoqOgo2hhkKxsE.roa (hash: 6BZyqWO3dBV2T/D/HQLLEXL8wtnsNJxMwYYKl/DQzgM=) 3: 6ef47TXoBdfjKnlsNsow8DBixKo.roa (hash: CJVWo8/zfulxwmsfO0I8Hpt8eJudz4hqVHD23gptH10=) 4: GiScTXLFDlSkFEEGri5P1vz6Sho.roa (hash: uMhctxLibeY+IpaWynfmNEbttAIjD24+B1IvRH31TQ8=) 5: KbQ--oBtSgvSfZVrBwQ6M553Hwk.roa (hash: NJgK04btjY64hOecbKh54mIt3v+Yqupp2O5zCZPtgv0=) 6: MmN4f9D5SzeBPu8WvIE3Qj7j_vM.crl (hash: 2f/Yx6b7KOM0UcxqNHM+yJz7trq3MEogwZY1C503+II=) 7: NTZZF4vSmOFfwF5M5O7eO7oF9Vg.roa (hash: FRVNS4KDdnoHo7IUiUNOad62U9M1nGPEQFofB/xcUyw=) 8: Oi1LQnm4lsa7_1hR1J20jJ6vxNI.roa (hash: SY2CzV8LXx9B2pkUZksUiYNXDfeS5dNBeKSh1IfycAI=) 9: kwOAwgiCOUhVNtJRBCQb6ZiqnBQ.roa (hash: atWOmjTzujEHbunSba5esKgGqowchxKn3GSwQ9XKCbA=) 10: nb4wfQ7FzEgUQNDsTQT1rI6C1P0.roa (hash: XbtW2pGYp04EBEIcviRAYkU8I+ewGGN4xhpRClBs10Q=) 11: pZHCAjsk0quEKKapLoBOB8SLyYU.roa (hash: PkFYd+Uy2SwEBC/xRtpP2pJp1/vhJ01S2mfX0UJzqmk=) 12: zo7mxq2v2o0aNKJKvVs8XzMAoSo.roa (hash: hDK25txovgb427j58Xr748zftbcgjP77JZ1VaXHts3o=) Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/b1/7703ef-2422-437c-b93d-595e0bf5c613/1/MmN4f9D5SzeBPu8WvIE3Qj7j_vM.crl rsync://rpki.ripe.net/repository/DEFAULT/b1/7703ef-2422-437c-b93d-595e0bf5c613/1/MmN4f9D5SzeBPu8WvIE3Qj7j_vM.mft rsync://rpki.ripe.net/repository/DEFAULT/MmN4f9D5SzeBPu8WvIE3Qj7j_vM.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Wed 12 Nov 2025 00:00:37 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9a:70:6e:25:1b:ec:27:56:24:9f:cd:c2:75:7a:fd:c9:f3 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=3263787fd0f94b37813eef16bc8137423ee3fef3 Validity Not Before: Nov 11 01:00:57 2025 GMT Not After : Nov 12 01:00:57 2025 GMT Subject: CN=33294a2bdd4bc2591f08bd07262a9c092b6fb977 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:d3:e5:59:79:c5:6d:59:7a:7f:88:0e:e0:83:9d: e6:4c:94:a9:a8:33:e8:87:33:d3:8d:3f:d8:75:a4: ae:36:7d:9a:53:76:c6:37:0e:69:32:fd:48:34:7d: 3b:36:8d:ce:0e:be:0c:41:eb:85:c5:5e:01:c6:b1: 90:95:d5:90:dc:91:0e:f6:2a:e9:d5:94:44:09:13: a4:e4:81:59:54:5f:ac:a7:00:5f:90:4a:40:20:5b: 81:3b:fa:9a:a6:06:a1:77:cb:c6:ce:1c:31:7a:7e: 58:35:a1:5b:c9:fb:55:f2:b2:cb:49:a2:d8:b0:2a: da:0b:3c:40:ea:4a:49:8e:2a:f0:33:96:17:88:c5: 79:a2:26:c7:87:e0:79:9c:f6:1d:49:12:5e:a9:20: 8b:f6:33:9a:7e:16:4d:c2:c7:5f:52:d0:b9:a6:96: a1:2c:e0:28:b6:26:6a:56:36:d2:93:f7:11:f7:64: 80:0f:a9:00:78:bc:a5:3b:0e:a0:e1:2d:71:10:15: ee:31:fd:dc:48:a7:3e:68:66:d8:be:a4:34:72:e6: 81:f6:eb:ff:e7:05:e6:c3:ae:8e:b8:51:43:19:46: 82:fd:70:62:09:9d:72:1f:f3:00:5d:54:06:5d:05: 72:c6:4f:ad:4b:10:db:59:d6:4c:64:d9:9d:e9:02: 8e:83 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 33:29:4A:2B:DD:4B:C2:59:1F:08:BD:07:26:2A:9C:09:2B:6F:B9:77 X509v3 Authority Key Identifier: keyid:32:63:78:7F:D0:F9:4B:37:81:3E:EF:16:BC:81:37:42:3E:E3:FE:F3 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/MmN4f9D5SzeBPu8WvIE3Qj7j_vM.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/b1/7703ef-2422-437c-b93d-595e0bf5c613/1/MmN4f9D5SzeBPu8WvIE3Qj7j_vM.mft X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/b1/7703ef-2422-437c-b93d-595e0bf5c613/1/MmN4f9D5SzeBPu8WvIE3Qj7j_vM.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 61:bb:76:f4:5e:35:2e:12:66:0f:32:5a:dd:22:89:71:fc:52: 27:e1:23:ed:11:74:75:d5:09:2d:37:92:ed:5e:f7:5e:34:32: 1a:6d:fc:ed:d4:43:c4:27:ca:8d:72:4d:ff:93:5d:d4:ee:d3: ad:96:d3:99:eb:e5:58:46:59:de:26:f8:30:3e:35:f7:05:83: 9f:4b:54:59:72:7e:f2:53:b4:35:d6:cf:5b:30:5d:9f:35:d1: dc:cd:f6:65:d5:15:ed:e3:e2:ad:09:3b:17:7b:f7:13:a7:04: 49:b0:df:e1:7a:37:81:13:52:60:93:12:5d:22:5f:48:5c:9c: a0:11:75:bc:54:e2:e8:d3:cc:06:69:e8:ba:70:b6:ce:d6:1a: bc:bb:7d:de:58:37:b3:46:6e:12:23:91:fd:2a:de:3d:b5:17: c6:4e:a0:a1:9c:55:26:05:cc:23:9e:fb:48:52:31:7b:71:ff: 1d:1d:57:b8:75:0c:66:e4:39:d2:7e:a5:62:53:94:92:69:e7: 65:48:24:6c:ef:f6:e0:1c:85:99:5d:07:a8:f0:c3:16:f1:c7: 5e:a8:b6:30:5c:51:de:c1:9a:4b:39:ce:2c:74:a0:20:eb:20: 87:ba:88:76:22:7c:37:24:07:b4:4a:e7:67:81:bd:c2:5b:92: 4c:bd:21:f6 -----BEGIN CERTIFICATE----- MIIFFjCCA/6gAwIBAgISAZpwbiUb7CdWJJ/NwnV6/cnzMA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKDMyNjM3ODdmZDBmOTRiMzc4MTNlZWYxNmJjODEzNzQyM2Vl M2ZlZjMwHhcNMjUxMTExMDEwMDU3WhcNMjUxMTEyMDEwMDU3WjAzMTEwLwYDVQQD EygzMzI5NGEyYmRkNGJjMjU5MWYwOGJkMDcyNjJhOWMwOTJiNmZiOTc3MIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEA0+VZecVtWXp/iA7gg53mTJSpqDPo hzPTjT/YdaSuNn2aU3bGNw5pMv1INH07No3ODr4MQeuFxV4BxrGQldWQ3JEO9irp 1ZRECROk5IFZVF+spwBfkEpAIFuBO/qapgahd8vGzhwxen5YNaFbyftV8rLLSaLY sCraCzxA6kpJjirwM5YXiMV5oibHh+B5nPYdSRJeqSCL9jOafhZNwsdfUtC5ppah LOAotiZqVjbSk/cR92SAD6kAeLylOw6g4S1xEBXuMf3cSKc+aGbYvqQ0cuaB9uv/ 5wXmw66OuFFDGUaC/XBiCZ1yH/MAXVQGXQVyxk+tSxDbWdZMZNmd6QKOgwIDAQAB o4ICIjCCAh4wHQYDVR0OBBYEFDMpSivdS8JZHwi9ByYqnAkrb7l3MB8GA1UdIwQY MBaAFDJjeH/Q+Us3gT7vFryBN0I+4/7zMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvTW1ONGY5RDVTemVCUHU4V3ZJRTNRajdqX3ZNLmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC9iMS83NzAzZWYtMjQyMi00MzdjLWI5M2Qt NTk1ZTBiZjVjNjEzLzEvTW1ONGY5RDVTemVCUHU4V3ZJRTNRajdqX3ZNLm1mdDCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC9iMS83NzAzZWYtMjQyMi00MzdjLWI5M2QtNTk1ZTBiZjVjNjEz LzEvTW1ONGY5RDVTemVCUHU4V3ZJRTNRajdqX3ZNLmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAYbt29F41 LhJmDzJa3SKJcfxSJ+Ej7RF0ddUJLTeS7V73XjQyGm387dRDxCfKjXJN/5Nd1O7T rZbTmevlWEZZ3ib4MD419wWDn0tUWXJ+8lO0NdbPWzBdnzXR3M32ZdUV7ePirQk7 F3v3E6cESbDf4Xo3gRNSYJMSXSJfSFycoBF1vFTi6NPMBmnounC2ztYavLt93lg3 s0ZuEiOR/SrePbUXxk6goZxVJgXMI577SFIxe3H/HR1XuHUMZuQ50n6lYlOUkmnn ZUgkbO/24ByFmV0HqPDDFvHHXqi2MFxR3sGaSznOLHSgIOsgh7qIdiJ8NyQHtErn Z4G9wluSTL0h9g== -----END CERTIFICATE-----Generated at Tue Nov 11 08:14:57 2025 by rpki-client