$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/b8/4f6985-b94a-47cc-a300-6f2cf4f03ceb/1/2x1uukY7dWSr-uk4tG7UcYfeDsA.mft File: 2x1uukY7dWSr-uk4tG7UcYfeDsA.mft (raw, json) Hash identifier: jYCj+YIg4rindDN5PSYYB25jjXB2Zc6sPj3ZWoOeG3o= Subject key identifier: 7D:28:F1:53:CA:BC:B6:20:2F:95:90:E5:98:F5:74:50:46:A5:3A:B0 Authority key identifier: DB:1D:6E:BA:46:3B:75:64:AB:FA:E9:38:B4:6E:D4:71:87:DE:0E:C0 Certificate issuer: /CN=db1d6eba463b7564abfae938b46ed47187de0ec0 Certificate serial: 019A05C892E280163403D0A4DF324DE5CF5A Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/2x1uukY7dWSr-uk4tG7UcYfeDsA.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/b8/4f6985-b94a-47cc-a300-6f2cf4f03ceb/1/2x1uukY7dWSr-uk4tG7UcYfeDsA.mft Manifest number: 0A08 Signing time: Tue 21 Oct 2025 08:00:22 +0000 Manifest this update: Tue 21 Oct 2025 08:00:22 +0000 Manifest next update: Wed 22 Oct 2025 08:00:22 +0000 Files and hashes: 1: 2x1uukY7dWSr-uk4tG7UcYfeDsA.crl (hash: vpXWelr+Ohc/x3yzWndwY0pbuPhDFLHMet76+z+kds8=) 2: 87iBXWDpSIwRDGkwc7K8UhWgGyI.roa (hash: GnB7PMQFypZjuArzdsmg92AtM/uSLFw3faYH5HVQkIw=) 3: GCvMpFjTox7n5FmOa5IgrXeN2Mo.roa (hash: Y53wvi3S7ITug5cC6QdZKUB+NY5xkHHiQyyYmB7inpo=) 4: GE8S6QweGIt3c85t_rnGab-IpQg.roa (hash: 6PBV94W3VYcFPHikrfHt83RqRfHZjAYrztUDVd5Z6y8=) 5: GxPqJ9WQ-DKd_9ctcg8-12jFGZ0.roa (hash: KATN8CFnbRX1tzVerM2G5h88BqUwwD5kvjL2DX0FIcw=) 6: MKXJ66CRttluCaD2As6acb3eAwI.roa (hash: A1bSrmMEPbiNQFfUVIkOSltYihJGIH6EUwYcLxbC5P4=) 7: cHT0qzGhhZWWUdosb7dz_r29LkI.roa (hash: LL8UCKvFFQoG00GXqpjxb1DBAQ64iWVLzPMwKvO00IA=) 8: djyQgKDBzjTtDqekGHCbyDvwrGE.roa (hash: cybcX12xZijqQUsvS6pf9buN4wQXxjv+dDk5QDV0/Ys=) 9: gr1d5o3sHGA3VWu-8KVK6b7UyM4.roa (hash: GHLuG9O5AVwW61aYh11UvqNMmcEewfjv/mRXgyvZ4yg=) 10: meKHpovGdB4bkHh1XXR1ExLPB-w.roa (hash: fUS6khGidxNfptHJmzXmdTQGgfqFk4mALBHny815Klg=) 11: nPeZE7NjK8v1X9W6OWWQV8CL9dk.roa (hash: i5DQUMA7TTXDg8w9uPAc9gbe3ID2PYonRIJFljEMgcM=) Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/b8/4f6985-b94a-47cc-a300-6f2cf4f03ceb/1/2x1uukY7dWSr-uk4tG7UcYfeDsA.crl rsync://rpki.ripe.net/repository/DEFAULT/b8/4f6985-b94a-47cc-a300-6f2cf4f03ceb/1/2x1uukY7dWSr-uk4tG7UcYfeDsA.mft rsync://rpki.ripe.net/repository/DEFAULT/2x1uukY7dWSr-uk4tG7UcYfeDsA.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Wed 22 Oct 2025 07:00:03 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9a:05:c8:92:e2:80:16:34:03:d0:a4:df:32:4d:e5:cf:5a Signature Algorithm: sha256WithRSAEncryption Issuer: CN=db1d6eba463b7564abfae938b46ed47187de0ec0 Validity Not Before: Oct 21 08:00:22 2025 GMT Not After : Oct 22 08:00:22 2025 GMT Subject: CN=7d28f153cabcb6202f9590e598f5745046a53ab0 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:b5:df:95:f0:e5:ac:17:50:c6:db:30:da:0e:af: 96:2c:e3:a1:36:c1:9c:51:36:74:c6:83:5c:31:e5: fd:4c:80:a6:ea:84:3f:98:fe:66:d9:63:36:1c:29: ce:39:59:9d:13:c7:61:d6:2b:ee:b2:d8:42:ae:86: 0f:ab:10:c2:4e:02:10:95:8e:6c:ce:c5:28:bc:17: 8e:33:9f:d8:1b:0e:55:f9:d4:1b:70:1e:18:71:4a: 1d:93:5b:9d:af:44:f1:cc:1e:26:03:c6:fd:bd:f9: 1c:0c:d1:c3:ed:20:44:35:8b:b9:3c:96:a1:48:28: e7:d3:bb:36:6b:cd:02:67:bd:88:4b:a3:f4:c3:0a: 2e:89:ca:09:80:4b:42:64:33:07:05:07:d1:6e:57: 91:1d:af:8b:76:4b:c1:16:2c:d8:05:f8:eb:31:51: 95:01:2e:41:31:f2:f7:ac:8b:8c:c4:5c:ff:6e:a0: 87:6b:ff:03:e1:cc:e8:83:55:b7:a1:d1:1f:eb:07: f0:24:25:96:27:47:9f:db:a0:db:f0:10:ab:87:63: d5:e9:66:27:4c:d3:d0:be:a7:9d:44:9b:bd:d3:4a: f2:32:ef:8c:1d:06:d5:45:4d:21:4c:9e:4b:6b:55: 01:e1:57:08:ff:17:80:68:41:d4:68:02:7c:a6:18: 3c:f1 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 7D:28:F1:53:CA:BC:B6:20:2F:95:90:E5:98:F5:74:50:46:A5:3A:B0 X509v3 Authority Key Identifier: keyid:DB:1D:6E:BA:46:3B:75:64:AB:FA:E9:38:B4:6E:D4:71:87:DE:0E:C0 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/2x1uukY7dWSr-uk4tG7UcYfeDsA.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/b8/4f6985-b94a-47cc-a300-6f2cf4f03ceb/1/2x1uukY7dWSr-uk4tG7UcYfeDsA.mft X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/b8/4f6985-b94a-47cc-a300-6f2cf4f03ceb/1/2x1uukY7dWSr-uk4tG7UcYfeDsA.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 4a:b5:00:10:91:5d:3c:ce:d9:fb:7a:c5:34:20:20:e4:c6:21: b3:2c:42:59:90:b7:65:11:54:16:01:90:3a:33:57:6c:8d:25: 46:8c:39:43:39:f7:ea:98:c1:e8:e5:9d:03:5e:3e:a1:68:fc: 94:d5:96:52:8a:26:0d:92:ff:97:92:18:08:6f:30:11:7d:66: 67:aa:dd:83:a3:82:15:01:c9:9f:35:85:5b:ab:2d:7e:a5:03: cb:37:c2:8c:bd:e9:ed:05:04:9d:17:c9:87:ec:2c:34:4f:a7: df:5d:cd:9f:52:1b:7f:77:95:a7:2b:cd:e6:ce:dc:ee:8f:67: 9b:2b:69:93:5f:23:cd:03:be:e2:d7:88:e2:84:d2:49:41:9f: 33:3c:08:ef:67:68:f7:c0:de:96:03:15:70:21:43:b1:6b:31: 96:2e:ea:1b:1d:25:00:a2:2f:65:9c:3d:96:24:28:6f:de:f7: 9e:83:a4:9f:62:16:98:72:59:85:3f:3c:72:f3:f6:ab:2f:6b: 1c:71:5d:d4:ec:e8:68:c7:bd:f4:73:4a:43:15:ae:13:5e:e6: ae:93:b2:7b:b5:ab:69:b2:ba:d0:d0:53:31:ad:a1:40:41:c2: 86:17:4f:51:6e:8b:08:57:43:5c:29:84:a7:a6:75:60:4c:d0: 30:84:30:e3 -----BEGIN CERTIFICATE----- MIIFFjCCA/6gAwIBAgISAZoFyJLigBY0A9Ck3zJN5c9aMA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKGRiMWQ2ZWJhNDYzYjc1NjRhYmZhZTkzOGI0NmVkNDcxODdk ZTBlYzAwHhcNMjUxMDIxMDgwMDIyWhcNMjUxMDIyMDgwMDIyWjAzMTEwLwYDVQQD Eyg3ZDI4ZjE1M2NhYmNiNjIwMmY5NTkwZTU5OGY1NzQ1MDQ2YTUzYWIwMIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAtd+V8OWsF1DG2zDaDq+WLOOhNsGc UTZ0xoNcMeX9TICm6oQ/mP5m2WM2HCnOOVmdE8dh1ivusthCroYPqxDCTgIQlY5s zsUovBeOM5/YGw5V+dQbcB4YcUodk1udr0TxzB4mA8b9vfkcDNHD7SBENYu5PJah SCjn07s2a80CZ72IS6P0wwouicoJgEtCZDMHBQfRbleRHa+LdkvBFizYBfjrMVGV AS5BMfL3rIuMxFz/bqCHa/8D4czog1W3odEf6wfwJCWWJ0ef26Db8BCrh2PV6WYn TNPQvqedRJu900ryMu+MHQbVRU0hTJ5La1UB4VcI/xeAaEHUaAJ8phg88QIDAQAB o4ICIjCCAh4wHQYDVR0OBBYEFH0o8VPKvLYgL5WQ5Zj1dFBGpTqwMB8GA1UdIwQY MBaAFNsdbrpGO3Vkq/rpOLRu1HGH3g7AMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvMngxdXVrWTdkV1NyLXVrNHRHN1VjWWZlRHNBLmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC9iOC80ZjY5ODUtYjk0YS00N2NjLWEzMDAt NmYyY2Y0ZjAzY2ViLzEvMngxdXVrWTdkV1NyLXVrNHRHN1VjWWZlRHNBLm1mdDCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC9iOC80ZjY5ODUtYjk0YS00N2NjLWEzMDAtNmYyY2Y0ZjAzY2Vi LzEvMngxdXVrWTdkV1NyLXVrNHRHN1VjWWZlRHNBLmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEASrUAEJFd PM7Z+3rFNCAg5MYhsyxCWZC3ZRFUFgGQOjNXbI0lRow5Qzn36pjB6OWdA14+oWj8 lNWWUoomDZL/l5IYCG8wEX1mZ6rdg6OCFQHJnzWFW6stfqUDyzfCjL3p7QUEnRfJ h+wsNE+n313Nn1Ibf3eVpyvN5s7c7o9nmytpk18jzQO+4teI4oTSSUGfMzwI72do 98DelgMVcCFDsWsxli7qGx0lAKIvZZw9liQob973noOkn2IWmHJZhT88cvP2qy9r HHFd1OzoaMe99HNKQxWuE17mrpOye7WrabK60NBTMa2hQEHChhdPUW6LCFdDXCmE p6Z1YEzQMIQw4w== -----END CERTIFICATE-----Generated at Tue Oct 21 13:57:02 2025 by rpki-client