$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/b2/6c203d-6221-460a-af49-c12218765154/1/MlCPt4HKbb2CIfLC-VSjp0RrK0I.mft File: MlCPt4HKbb2CIfLC-VSjp0RrK0I.mft (raw, json) Hash identifier: g4hS08iAXK0SPnnbGhBS8STu1wWu/fNYf02f5hndXSo= Subject key identifier: F8:0C:F7:82:79:AC:86:CF:AE:24:D9:67:C0:44:9D:8D:18:7B:23:B9 Authority key identifier: 32:50:8F:B7:81:CA:6D:BD:82:21:F2:C2:F9:54:A3:A7:44:6B:2B:42 Certificate issuer: /CN=32508fb781ca6dbd8221f2c2f954a3a7446b2b42 Certificate serial: 019A04ED4C2BBCB547BB25C265735831CDE5 Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/MlCPt4HKbb2CIfLC-VSjp0RrK0I.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/b2/6c203d-6221-460a-af49-c12218765154/1/MlCPt4HKbb2CIfLC-VSjp0RrK0I.mft Manifest number: 16F3 Signing time: Tue 21 Oct 2025 04:00:51 +0000 Manifest this update: Tue 21 Oct 2025 04:00:51 +0000 Manifest next update: Wed 22 Oct 2025 04:00:51 +0000 Files and hashes: 1: 7sUlQFo2i2sGz_Vst269K_D-c-U.roa (hash: awgZwYT2+l2C5RaRZHXtrmJNbZfubWqB+2+301bBQBU=) 2: MlCPt4HKbb2CIfLC-VSjp0RrK0I.crl (hash: Ts4utfKrMNdj/n5bXzFX/eTVwwP5UVemKUNOMZNTzGI=) 3: N6977Tm3BxtAWxQMZFqlxhSXVqI.roa (hash: avNpgfUO6xrr8rilL4FRK/J7Wxu+LI2r4IfOPlXIeJI=) 4: OqobHIZLFLbZk0OR9E-PF1zk1Lw.roa (hash: Op02L+M19/z5j79qbmcRNqPT6icOYzM0VJzQXj5mmv8=) 5: TEsKuOI8Wr3xLM61BToTHvaxLG0.roa (hash: rGoXl2FfQwurIyUgTu1Dn9mUe7pNqUYv/AJnXAkg28U=) 6: i7jWP6E6hcB7Kvbk4mThF2buTs8.roa (hash: OqH0B+K5eYlDv/BpS97jLxNiwQggexBzkbjaho23mP4=) 7: nqc-9YDKd79YsE90D6bPl2BpKgE.roa (hash: VLqSIZaMWc7sFSdSIdfn5EqqZNs2ezp2l6diOyM4sNY=) 8: rgeIy49dLmNJww9sp8JRWKXD-n8.roa (hash: L8MUX4zAy84NplfwfzJB7WI9HcrmosjCL1UuxDQCssQ=) 9: xZ2vcM-Bgt-peFWCq0zItN8_N0c.roa (hash: IJSnWW805B1m7rlymmTJG2w628sB6dalr9ieL5l/bMk=) 10: zZigjvCd6NcudatYLyfpsyOboFA.roa (hash: vGtEfaZy/GpSD6Vra1IvWRrERF5jpy55majvnW9xdMY=) Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/b2/6c203d-6221-460a-af49-c12218765154/1/MlCPt4HKbb2CIfLC-VSjp0RrK0I.crl rsync://rpki.ripe.net/repository/DEFAULT/b2/6c203d-6221-460a-af49-c12218765154/1/MlCPt4HKbb2CIfLC-VSjp0RrK0I.mft rsync://rpki.ripe.net/repository/DEFAULT/MlCPt4HKbb2CIfLC-VSjp0RrK0I.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Tue 21 Oct 2025 22:00:03 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9a:04:ed:4c:2b:bc:b5:47:bb:25:c2:65:73:58:31:cd:e5 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=32508fb781ca6dbd8221f2c2f954a3a7446b2b42 Validity Not Before: Oct 21 04:00:51 2025 GMT Not After : Oct 22 04:00:51 2025 GMT Subject: CN=f80cf78279ac86cfae24d967c0449d8d187b23b9 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:be:ed:20:13:e1:5b:53:77:e5:1c:62:c3:86:bb: f8:d0:c2:44:e7:37:c1:bb:21:7a:24:82:7c:43:0d: 59:2b:fd:0f:05:8c:04:ad:9f:3e:41:27:1e:e6:01: 3f:a6:00:da:7b:3b:4f:71:91:04:a3:ea:35:db:5b: 23:d5:b0:29:1f:fd:ea:97:9b:92:ad:fb:31:48:9e: f3:b8:53:f7:0a:6e:6a:5c:77:eb:b4:b9:e1:f8:02: d1:e4:0a:5c:5a:63:36:e7:23:bb:3e:c8:ad:51:36: 63:40:cf:b2:c8:87:d9:17:76:1d:1e:a4:1f:9e:3c: 50:77:b4:ee:b5:c5:63:b1:e9:b0:35:aa:b1:34:bb: c8:b8:be:c0:4c:7d:28:55:ad:d4:94:b2:e6:36:6e: 29:30:f6:64:7c:1c:8c:11:8f:7b:4b:56:2d:3f:49: 9c:ea:a0:c2:2e:57:cc:3f:6f:fd:80:44:8c:1c:66: 06:43:4f:dc:96:0d:8d:ec:42:7f:bf:39:7d:fb:f6: 05:0f:b5:7a:e3:5f:39:39:8a:74:43:ab:74:40:de: de:fb:91:16:c2:65:73:20:75:0a:c0:61:5c:2c:6b: cf:2c:a5:0a:64:f9:34:12:18:66:4a:f8:7f:35:ce: 9e:75:59:1b:be:24:7a:cd:ab:14:a9:7a:67:ac:a8: 0a:83 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: F8:0C:F7:82:79:AC:86:CF:AE:24:D9:67:C0:44:9D:8D:18:7B:23:B9 X509v3 Authority Key Identifier: keyid:32:50:8F:B7:81:CA:6D:BD:82:21:F2:C2:F9:54:A3:A7:44:6B:2B:42 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/MlCPt4HKbb2CIfLC-VSjp0RrK0I.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/b2/6c203d-6221-460a-af49-c12218765154/1/MlCPt4HKbb2CIfLC-VSjp0RrK0I.mft X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/b2/6c203d-6221-460a-af49-c12218765154/1/MlCPt4HKbb2CIfLC-VSjp0RrK0I.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 4d:88:fd:e3:8c:6d:4f:9b:f2:3a:da:6c:9d:71:4e:f1:4c:06: f5:26:e8:20:f0:f5:16:ba:65:0b:26:f6:c0:a2:65:47:f3:f4: bd:b4:8a:4b:1a:18:3d:bf:75:c3:cc:9b:de:bb:26:9a:ae:c8: f4:02:b3:cc:38:2c:f0:c0:98:a2:ba:02:91:5d:fe:6b:1e:8d: 63:b1:af:d5:c1:a8:2c:50:7a:b5:55:49:07:fe:04:e1:31:34: c7:e2:33:30:88:01:f2:1d:d5:4b:e6:ff:47:64:77:b7:9c:80: 96:a3:34:56:e3:04:44:85:9c:41:3c:23:cc:bd:24:a7:47:31: 62:75:61:8f:2b:b2:5e:81:a4:db:6b:f2:13:5f:a1:09:6d:56: 0f:0a:65:c8:49:f7:d5:b5:e7:e6:2d:14:de:8d:58:7a:2b:76: 8a:6e:49:d4:f5:ce:b5:0b:26:c8:53:03:31:1f:3e:20:56:de: a3:89:f1:15:30:bb:e6:b2:f8:83:35:51:f9:10:a9:87:9d:ea: 0d:a0:3a:22:15:bf:93:fd:27:0b:ef:e6:d9:ac:4b:a4:32:ea: ab:f0:40:c0:a7:ff:56:41:06:91:b5:58:8d:ad:fd:c5:a1:a9: 7a:4a:65:8f:8f:11:f2:48:76:49:30:f3:1d:62:6d:e1:34:05: 7c:92:14:de -----BEGIN CERTIFICATE----- MIIFFjCCA/6gAwIBAgISAZoE7UwrvLVHuyXCZXNYMc3lMA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKDMyNTA4ZmI3ODFjYTZkYmQ4MjIxZjJjMmY5NTRhM2E3NDQ2 YjJiNDIwHhcNMjUxMDIxMDQwMDUxWhcNMjUxMDIyMDQwMDUxWjAzMTEwLwYDVQQD EyhmODBjZjc4Mjc5YWM4NmNmYWUyNGQ5NjdjMDQ0OWQ4ZDE4N2IyM2I5MIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAvu0gE+FbU3flHGLDhrv40MJE5zfB uyF6JIJ8Qw1ZK/0PBYwErZ8+QSce5gE/pgDaeztPcZEEo+o121sj1bApH/3ql5uS rfsxSJ7zuFP3Cm5qXHfrtLnh+ALR5ApcWmM25yO7PsitUTZjQM+yyIfZF3YdHqQf njxQd7TutcVjsemwNaqxNLvIuL7ATH0oVa3UlLLmNm4pMPZkfByMEY97S1YtP0mc 6qDCLlfMP2/9gESMHGYGQ0/clg2N7EJ/vzl9+/YFD7V64185OYp0Q6t0QN7e+5EW wmVzIHUKwGFcLGvPLKUKZPk0EhhmSvh/Nc6edVkbviR6zasUqXpnrKgKgwIDAQAB o4ICIjCCAh4wHQYDVR0OBBYEFPgM94J5rIbPriTZZ8BEnY0YeyO5MB8GA1UdIwQY MBaAFDJQj7eBym29giHywvlUo6dEaytCMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvTWxDUHQ0SEtiYjJDSWZMQy1WU2pwMFJySzBJLmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC9iMi82YzIwM2QtNjIyMS00NjBhLWFmNDkt YzEyMjE4NzY1MTU0LzEvTWxDUHQ0SEtiYjJDSWZMQy1WU2pwMFJySzBJLm1mdDCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC9iMi82YzIwM2QtNjIyMS00NjBhLWFmNDktYzEyMjE4NzY1MTU0 LzEvTWxDUHQ0SEtiYjJDSWZMQy1WU2pwMFJySzBJLmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEATYj944xt T5vyOtpsnXFO8UwG9SboIPD1FrplCyb2wKJlR/P0vbSKSxoYPb91w8yb3rsmmq7I 9AKzzDgs8MCYoroCkV3+ax6NY7Gv1cGoLFB6tVVJB/4E4TE0x+IzMIgB8h3VS+b/ R2R3t5yAlqM0VuMERIWcQTwjzL0kp0cxYnVhjyuyXoGk22vyE1+hCW1WDwplyEn3 1bXn5i0U3o1Yeit2im5J1PXOtQsmyFMDMR8+IFbeo4nxFTC75rL4gzVR+RCph53q DaA6IhW/k/0nC+/m2axLpDLqq/BAwKf/VkEGkbVYja39xaGpekplj48R8kh2STDz HWJt4TQFfJIU3g== -----END CERTIFICATE-----Generated at Tue Oct 21 07:52:33 2025 by rpki-client