$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/b8/6d5d75-4d1e-4697-b1d3-36e344abc9d3/1/437h7O0Z-KCjpjW_qiZCk-NDd5U.mft File: 437h7O0Z-KCjpjW_qiZCk-NDd5U.mft (raw, json) Hash identifier: 1Mb+EgRB9agPtiafEHaRozc2tmIz1XX/D5VcklmQAb0= Subject key identifier: D6:F9:E7:76:DE:EA:61:80:17:A6:3C:8B:B1:51:08:2D:90:92:78:56 Authority key identifier: E3:7E:E1:EC:ED:19:F8:A0:A3:A6:35:BF:AA:26:42:93:E3:43:77:95 Certificate issuer: /CN=e37ee1eced19f8a0a3a635bfaa264293e3437795 Certificate serial: 019A13162930567BEAD9EE587C2B55C9F28A Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/437h7O0Z-KCjpjW_qiZCk-NDd5U.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/b8/6d5d75-4d1e-4697-b1d3-36e344abc9d3/1/437h7O0Z-KCjpjW_qiZCk-NDd5U.mft Manifest number: 1717 Signing time: Thu 23 Oct 2025 22:00:10 +0000 Manifest this update: Thu 23 Oct 2025 22:00:10 +0000 Manifest next update: Fri 24 Oct 2025 22:00:10 +0000 Files and hashes: 1: 1-gMcB2tX1aJagc2aIqyie1JosUM.roa (hash: e/zYIsHTFYDxeTkK5hyPfn+knzLFEB1hZl3ZQmxyCc0=) 2: 437h7O0Z-KCjpjW_qiZCk-NDd5U.crl (hash: fn2CURvR6wMNk5Ian+cdsjIBpNcvwPfk9PRbG3/ZAvQ=) 3: 9eNXipbIkyVdZ3T8NqmEYXwSLqE.roa (hash: BrQPu/EjsIQipBfThN07mTNPYYMcHP60+6UvtDcOjIw=) 4: EFuxyCYga5KedfhIetzIM8Wqp3Y.roa (hash: O+IR1hZ8a8RGzU0SmSAJy1+brABxzqq2amGl3toGZFo=) 5: JS9UWtZttem3o1fXhyj6cDhffLI.roa (hash: 2i5hM4JyTJhdNStU0tEfjgguQh3ME+ydQZVTRw+h18A=) 6: RX5TjbcaEwYk1IhE69eAlXBXNyQ.roa (hash: c0wkjrnxIEHQj5HUBmajY9pyKvCItPr80kJiD5UVJ6c=) 7: TxnmQLTJ7RG9p8EWlmGMzoVFKYM.roa (hash: ya4Fhh2AAgBvWI3PefXXRZJhuG79XQoe+sEudA3lm48=) 8: Ug41i06gdv9Ukc46NZ5XcrOupdE.roa (hash: llRNNcmXFkFqLY4QgsxGuCXjBef7WAi2K7CKwj9Mkc8=) 9: ZYZn-5YwBHa46UGZ7YpzFXkXV2c.roa (hash: nysaKplSjq7+66zMvup13xDe5hG/XF/iaG+ccwRnc48=) 10: iTq1k1-n5HC3mDH6yOxsGqky0UI.roa (hash: AGbGIRgcWmrYfxQjlQUEIVcfb2QPCldn/oJ/TJ7MR/A=) 11: ijEqoAEZpU0XwucBGAsnbQDDdNw.roa (hash: JCAoDA+s8OPB6Om2MtNX+ndsLOblJSylnwNeZbS7ZEI=) 12: oUN6hm9XIH9hez7uSosGEeiTS64.roa (hash: O2lJOrBjeZAv4ECvJJ0xPhkbtSeFQ6Qb6tFoYeeLtF0=) 13: rHz8kaauSx9yjUtMHgkc7yNJ95o.roa (hash: PhKHXgs0bJsWkyri4OmHbJXKHUs8Dv3fw5JQFOIgfUI=) Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/b8/6d5d75-4d1e-4697-b1d3-36e344abc9d3/1/437h7O0Z-KCjpjW_qiZCk-NDd5U.crl rsync://rpki.ripe.net/repository/DEFAULT/b8/6d5d75-4d1e-4697-b1d3-36e344abc9d3/1/437h7O0Z-KCjpjW_qiZCk-NDd5U.mft rsync://rpki.ripe.net/repository/DEFAULT/437h7O0Z-KCjpjW_qiZCk-NDd5U.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Fri 24 Oct 2025 22:00:10 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9a:13:16:29:30:56:7b:ea:d9:ee:58:7c:2b:55:c9:f2:8a Signature Algorithm: sha256WithRSAEncryption Issuer: CN=e37ee1eced19f8a0a3a635bfaa264293e3437795 Validity Not Before: Oct 23 22:00:10 2025 GMT Not After : Oct 24 22:00:10 2025 GMT Subject: CN=d6f9e776deea618017a63c8bb151082d90927856 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:b1:4b:7e:fa:17:ea:c0:9c:90:1d:fd:3f:43:6a: d5:7e:08:c7:50:d9:52:c2:b0:d1:48:5e:87:1b:96: ec:c3:6f:6c:f4:24:fe:f5:40:f8:b4:4c:44:51:3c: a1:c9:21:91:3b:43:22:3f:7b:5f:8e:bd:aa:6f:2c: 2c:96:74:de:d8:21:9d:17:1f:aa:7e:b0:a5:93:40: 70:5c:f0:81:69:bc:10:e3:28:92:99:5a:81:34:a5: 60:1b:ed:8f:35:f6:2c:5f:f7:14:17:b6:48:28:5d: bb:56:2d:b3:24:97:67:83:2b:aa:7f:59:38:15:ea: f9:46:f0:b1:ea:f0:02:1b:02:30:85:8c:a7:59:4d: 46:a6:63:6d:76:b3:55:5f:d0:22:1d:39:5e:fc:16: 45:24:36:d3:db:7f:cf:93:f0:f6:85:c3:98:6a:c6: 0a:7a:b3:09:10:7c:7a:85:2f:ef:51:bb:8c:4e:9a: 91:ed:93:4f:f0:29:3a:42:8f:93:72:0b:18:ef:96: ae:4a:26:42:58:bd:13:50:ca:da:7b:82:c2:ea:b2: 4b:62:27:b9:2c:02:7b:58:2a:eb:69:89:7d:e5:ce: 70:84:0c:07:c9:a1:b5:d0:b2:76:cc:f0:a1:26:c3: 83:5b:87:9d:3f:4f:8a:9e:2e:f5:51:b2:40:6f:3d: 94:2d Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: D6:F9:E7:76:DE:EA:61:80:17:A6:3C:8B:B1:51:08:2D:90:92:78:56 X509v3 Authority Key Identifier: keyid:E3:7E:E1:EC:ED:19:F8:A0:A3:A6:35:BF:AA:26:42:93:E3:43:77:95 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/437h7O0Z-KCjpjW_qiZCk-NDd5U.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/b8/6d5d75-4d1e-4697-b1d3-36e344abc9d3/1/437h7O0Z-KCjpjW_qiZCk-NDd5U.mft X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/b8/6d5d75-4d1e-4697-b1d3-36e344abc9d3/1/437h7O0Z-KCjpjW_qiZCk-NDd5U.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 56:33:57:fb:9b:b6:8b:97:51:d7:43:3c:be:3b:f7:f8:2d:4d: 35:8c:af:74:79:b0:9c:d9:7b:74:f7:78:41:6b:b1:40:4c:a9: f6:d2:00:e8:a2:fc:b2:c8:dd:eb:b6:48:dd:61:ef:57:29:ab: b0:bf:ca:5b:db:e8:fd:49:93:5d:d0:10:eb:db:5a:47:66:74: 8d:66:74:c3:a1:2e:ed:74:fa:9b:83:ff:8d:52:90:28:93:fa: 65:78:c2:ca:3b:67:af:7e:12:82:85:8a:bb:b0:8e:ea:1c:95: 7b:72:14:7b:d3:e0:df:76:2f:06:4c:24:6e:cd:33:26:bc:cf: dc:ea:f1:5a:aa:d6:37:2b:c6:f8:57:be:c8:66:de:e3:9c:5f: e1:9a:3d:1c:54:84:09:cf:b9:af:5c:1d:1a:4d:d7:4a:19:50: 7e:39:bc:05:df:40:19:1d:8e:39:93:fa:fd:03:59:47:7d:d9: 25:a4:46:75:05:8c:4a:38:0a:27:4a:9e:aa:59:cc:1c:93:26: 9c:97:6b:27:91:96:c7:4d:55:c7:c6:58:74:5e:1b:5d:40:aa: fb:82:15:59:8c:3d:ab:2b:89:ac:3d:ad:ef:db:f0:76:b6:e6: 9f:59:9d:3d:f4:1a:e7:38:20:37:90:73:51:d8:e9:20:93:7e: a4:ec:20:1f -----BEGIN CERTIFICATE----- MIIFFjCCA/6gAwIBAgISAZoTFikwVnvq2e5YfCtVyfKKMA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKGUzN2VlMWVjZWQxOWY4YTBhM2E2MzViZmFhMjY0MjkzZTM0 Mzc3OTUwHhcNMjUxMDIzMjIwMDEwWhcNMjUxMDI0MjIwMDEwWjAzMTEwLwYDVQQD EyhkNmY5ZTc3NmRlZWE2MTgwMTdhNjNjOGJiMTUxMDgyZDkwOTI3ODU2MIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAsUt++hfqwJyQHf0/Q2rVfgjHUNlS wrDRSF6HG5bsw29s9CT+9UD4tExEUTyhySGRO0MiP3tfjr2qbywslnTe2CGdFx+q frClk0BwXPCBabwQ4yiSmVqBNKVgG+2PNfYsX/cUF7ZIKF27Vi2zJJdngyuqf1k4 Fer5RvCx6vACGwIwhYynWU1GpmNtdrNVX9AiHTle/BZFJDbT23/Pk/D2hcOYasYK erMJEHx6hS/vUbuMTpqR7ZNP8Ck6Qo+TcgsY75auSiZCWL0TUMrae4LC6rJLYie5 LAJ7WCrraYl95c5whAwHyaG10LJ2zPChJsODW4edP0+Kni71UbJAbz2ULQIDAQAB o4ICIjCCAh4wHQYDVR0OBBYEFNb553be6mGAF6Y8i7FRCC2QknhWMB8GA1UdIwQY MBaAFON+4eztGfigo6Y1v6omQpPjQ3eVMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvNDM3aDdPMFotS0NqcGpXX3FpWkNrLU5EZDVVLmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC9iOC82ZDVkNzUtNGQxZS00Njk3LWIxZDMt MzZlMzQ0YWJjOWQzLzEvNDM3aDdPMFotS0NqcGpXX3FpWkNrLU5EZDVVLm1mdDCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC9iOC82ZDVkNzUtNGQxZS00Njk3LWIxZDMtMzZlMzQ0YWJjOWQz LzEvNDM3aDdPMFotS0NqcGpXX3FpWkNrLU5EZDVVLmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAVjNX+5u2 i5dR10M8vjv3+C1NNYyvdHmwnNl7dPd4QWuxQEyp9tIA6KL8ssjd67ZI3WHvVymr sL/KW9vo/UmTXdAQ69taR2Z0jWZ0w6Eu7XT6m4P/jVKQKJP6ZXjCyjtnr34SgoWK u7CO6hyVe3IUe9Pg33YvBkwkbs0zJrzP3OrxWqrWNyvG+Fe+yGbe45xf4Zo9HFSE Cc+5r1wdGk3XShlQfjm8Bd9AGR2OOZP6/QNZR33ZJaRGdQWMSjgKJ0qeqlnMHJMm nJdrJ5GWx01Vx8ZYdF4bXUCq+4IVWYw9qyuJrD2t79vwdrbmn1mdPfQa5zggN5Bz UdjpIJN+pOwgHw== -----END CERTIFICATE-----Generated at Fri Oct 24 08:20:53 2025 by rpki-client