$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/bb/b4b150-dbb8-465f-8155-e4419b64212e/1/8FIRKM9jSqavp-9S1THz_NVWKPk.mft File: 8FIRKM9jSqavp-9S1THz_NVWKPk.mft (raw, json) Hash identifier: o+wA8fFk6FUoQtBsN3jPsN6S14pAcImVt7kMnVt2otY= Subject key identifier: FA:84:35:7E:EC:3E:D3:08:84:17:D6:6E:6A:AF:8B:86:CF:B7:8D:50 Authority key identifier: F0:52:11:28:CF:63:4A:A6:AF:A7:EF:52:D5:31:F3:FC:D5:56:28:F9 Certificate issuer: /CN=f0521128cf634aa6afa7ef52d531f3fcd55628f9 Certificate serial: 019A228A2CCFC67EE11B778677DD1C34D35A Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/8FIRKM9jSqavp-9S1THz_NVWKPk.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/bb/b4b150-dbb8-465f-8155-e4419b64212e/1/8FIRKM9jSqavp-9S1THz_NVWKPk.mft Manifest number: 16FF Signing time: Sun 26 Oct 2025 22:01:11 +0000 Manifest this update: Sun 26 Oct 2025 22:01:11 +0000 Manifest next update: Mon 27 Oct 2025 22:01:11 +0000 Files and hashes: 1: 0vpioq7e7IBvU0f7txi-wExHAPw.roa (hash: lCvUWIuH8RdERCkztaN1NhfYOchJDmj9ywnhD1WG0qs=) 2: 1-t-clxlx4vHi76xBwGIh0Y5orug.roa (hash: WGphFqEzeHYQfivrVaHRtOvOzzhN/PDKxrZlm3FuIDA=) 3: 4CCEdgNV-fGWUC_aGHxQwbUsOKQ.roa (hash: zTRmkFZkHzwf+QYURy5/v5Sjyovq0HLSmOwtNQ48L/c=) 4: 8FIRKM9jSqavp-9S1THz_NVWKPk.crl (hash: 1M37PPh1mS7pEW9KNgVUKeO21Ffjz/+tU7Mbbs7q3Ww=) 5: 9oOMh0CjqydkdSKEbK66nXXsu4E.roa (hash: qQJNJWud5A2R6q9LElC5WdsYynVdzga12kQWDH61mWo=) 6: AoQYABlbiRY1s0Gu3McHV58zrpk.roa (hash: 9zDAXKdytFg/3YwoUton7cniFW2Ja9ArE5tJ2skkn+c=) 7: OdGF_e17lYBOCmXmsk6hkXdf7b4.roa (hash: mFKHbPekFFY75D3Eu+1fU9mzEnOZ9+rJaeHup24zW3Q=) 8: PFyByii-LGzRSy90jiJ5mw1207A.roa (hash: gIS/3e5ejAqBGpUPti4f7RxoNdrem0KAE6vwjMubh3s=) 9: Qkq_75MjyviWe2NqgT_-Mwn9gnM.roa (hash: wJb9fi2vDIIR6voDYxFFRDUWuFkEQa98zP1PFmkzpXs=) 10: ScwFXX2rYjT7naQciVMaotJ-UfM.roa (hash: X8Vp96ZEvVObF+OkcOx9P04g9HBNU6my6Pc/b9LR72Y=) 11: rh7_88ku0NVEacOTg4kYRNyhUIs.roa (hash: Uz863y1lKUf+O+OGV8gNQDxIpi4RBI83I9R9FXt5Xp4=) 12: u37q8oxj6d2YnoBLY1VE3CqS2g0.roa (hash: QV9HVDjMgl4TBfOFPjFKF+CTfrUEm6XmvkI/fobJGaM=) Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/bb/b4b150-dbb8-465f-8155-e4419b64212e/1/8FIRKM9jSqavp-9S1THz_NVWKPk.crl rsync://rpki.ripe.net/repository/DEFAULT/bb/b4b150-dbb8-465f-8155-e4419b64212e/1/8FIRKM9jSqavp-9S1THz_NVWKPk.mft rsync://rpki.ripe.net/repository/DEFAULT/8FIRKM9jSqavp-9S1THz_NVWKPk.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Mon 27 Oct 2025 19:48:03 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9a:22:8a:2c:cf:c6:7e:e1:1b:77:86:77:dd:1c:34:d3:5a Signature Algorithm: sha256WithRSAEncryption Issuer: CN=f0521128cf634aa6afa7ef52d531f3fcd55628f9 Validity Not Before: Oct 26 22:01:11 2025 GMT Not After : Oct 27 22:01:11 2025 GMT Subject: CN=fa84357eec3ed3088417d66e6aaf8b86cfb78d50 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:ac:ab:c1:da:23:8e:3b:91:68:4e:6a:1d:dc:6d: 3a:a8:80:8a:4c:f2:3e:0d:fe:52:24:36:f8:d4:68: 62:ee:64:59:58:74:ff:ea:4a:ed:b6:c3:d8:91:c6: 30:b0:75:12:89:02:f6:64:cd:3f:f8:74:43:68:33: 2c:ad:38:be:24:bc:d4:f2:13:e7:24:75:08:57:90: f8:36:9e:e4:6b:14:90:9d:9f:50:1d:e9:52:8e:d3: d3:c7:a5:61:74:81:dd:98:bc:59:3a:83:db:04:0b: 15:70:c1:df:c8:85:d8:86:6c:f4:49:47:bc:bd:73: db:eb:50:2a:d1:70:a1:d6:3d:94:98:ec:c1:b8:6c: 70:78:1a:7a:4b:15:3a:09:2f:f5:59:e3:53:2d:d0: 44:e2:01:eb:0c:5a:10:3a:9d:f6:fe:0c:fe:f9:ca: 9f:8c:3d:c9:fd:26:b3:8e:ea:d0:ab:d7:49:34:2d: 04:03:e0:4e:18:c8:b6:03:79:4c:6b:30:31:7a:9c: be:63:ce:b0:e1:70:ea:47:68:54:dd:2a:5f:c4:02: 6b:ec:64:99:77:61:77:0e:6f:88:47:e0:53:70:77: 4d:be:6b:e8:78:43:49:ff:33:6f:e8:2c:cc:a9:5b: 57:a8:4d:46:06:c0:6d:32:6f:62:d3:68:18:f6:b5: 06:5d Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: FA:84:35:7E:EC:3E:D3:08:84:17:D6:6E:6A:AF:8B:86:CF:B7:8D:50 X509v3 Authority Key Identifier: keyid:F0:52:11:28:CF:63:4A:A6:AF:A7:EF:52:D5:31:F3:FC:D5:56:28:F9 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/8FIRKM9jSqavp-9S1THz_NVWKPk.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/bb/b4b150-dbb8-465f-8155-e4419b64212e/1/8FIRKM9jSqavp-9S1THz_NVWKPk.mft X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/bb/b4b150-dbb8-465f-8155-e4419b64212e/1/8FIRKM9jSqavp-9S1THz_NVWKPk.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 5b:f9:99:74:e0:1e:c7:bc:ba:a0:8f:1b:5d:4f:24:15:54:cc: a2:01:ef:e5:25:a4:95:3b:b1:18:17:9b:6c:d0:0f:f3:16:5b: 6b:97:fb:f1:b3:58:86:c3:04:24:75:3d:d5:b0:34:99:f8:50: 07:0f:22:b7:16:90:1c:4c:38:80:7c:10:0e:27:51:46:ab:45: 05:26:00:e6:c8:7d:b2:7d:14:1b:86:34:23:91:cf:53:7f:6d: 71:a7:3d:f1:4e:2f:7b:4a:79:fe:73:c2:b6:c2:81:dd:7d:0d: f0:98:03:86:b2:bb:3f:a7:a8:79:a3:c8:c8:69:72:8b:68:e2: a4:55:6d:7c:00:75:50:a7:01:7e:2a:ac:1f:a2:7a:6d:a3:8b: 4d:60:03:93:34:1c:e7:55:81:fb:b0:d8:1b:7f:b4:52:3c:df: 92:57:ec:dc:da:3d:8e:f1:a3:af:2f:10:85:28:8f:60:c4:a4: 64:c1:0e:2f:0c:e7:ad:91:a9:b3:9e:ea:7e:a9:e5:6e:d1:90: c7:a9:1a:27:0f:b1:75:99:05:a7:6a:e2:1a:5a:dc:d9:9e:6f: bb:87:db:bb:d1:4e:62:cb:1e:01:88:f3:af:e0:e0:93:dd:1e: 0e:38:a5:26:4e:a6:50:16:6d:9b:6b:6d:f0:6d:48:a4:90:54: 10:2b:3f:b3 -----BEGIN CERTIFICATE----- MIIFFjCCA/6gAwIBAgISAZoiiizPxn7hG3eGd90cNNNaMA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKGYwNTIxMTI4Y2Y2MzRhYTZhZmE3ZWY1MmQ1MzFmM2ZjZDU1 NjI4ZjkwHhcNMjUxMDI2MjIwMTExWhcNMjUxMDI3MjIwMTExWjAzMTEwLwYDVQQD EyhmYTg0MzU3ZWVjM2VkMzA4ODQxN2Q2NmU2YWFmOGI4NmNmYjc4ZDUwMIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEArKvB2iOOO5FoTmod3G06qICKTPI+ Df5SJDb41Ghi7mRZWHT/6krttsPYkcYwsHUSiQL2ZM0/+HRDaDMsrTi+JLzU8hPn JHUIV5D4Np7kaxSQnZ9QHelSjtPTx6VhdIHdmLxZOoPbBAsVcMHfyIXYhmz0SUe8 vXPb61Aq0XCh1j2UmOzBuGxweBp6SxU6CS/1WeNTLdBE4gHrDFoQOp32/gz++cqf jD3J/SazjurQq9dJNC0EA+BOGMi2A3lMazAxepy+Y86w4XDqR2hU3SpfxAJr7GSZ d2F3Dm+IR+BTcHdNvmvoeENJ/zNv6CzMqVtXqE1GBsBtMm9i02gY9rUGXQIDAQAB o4ICIjCCAh4wHQYDVR0OBBYEFPqENX7sPtMIhBfWbmqvi4bPt41QMB8GA1UdIwQY MBaAFPBSESjPY0qmr6fvUtUx8/zVVij5MA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvOEZJUktNOWpTcWF2cC05UzFUSHpfTlZXS1BrLmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC9iYi9iNGIxNTAtZGJiOC00NjVmLTgxNTUt ZTQ0MTliNjQyMTJlLzEvOEZJUktNOWpTcWF2cC05UzFUSHpfTlZXS1BrLm1mdDCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC9iYi9iNGIxNTAtZGJiOC00NjVmLTgxNTUtZTQ0MTliNjQyMTJl LzEvOEZJUktNOWpTcWF2cC05UzFUSHpfTlZXS1BrLmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAW/mZdOAe x7y6oI8bXU8kFVTMogHv5SWklTuxGBebbNAP8xZba5f78bNYhsMEJHU91bA0mfhQ Bw8itxaQHEw4gHwQDidRRqtFBSYA5sh9sn0UG4Y0I5HPU39tcac98U4ve0p5/nPC tsKB3X0N8JgDhrK7P6eoeaPIyGlyi2jipFVtfAB1UKcBfiqsH6J6baOLTWADkzQc 51WB+7DYG3+0Ujzfklfs3No9jvGjry8QhSiPYMSkZMEOLwznrZGps57qfqnlbtGQ x6kaJw+xdZkFp2riGlrc2Z5vu4fbu9FOYsseAYjzr+Dgk90eDjilJk6mUBZtm2tt 8G1IpJBUECs/sw== -----END CERTIFICATE-----Generated at Mon Oct 27 03:57:23 2025 by rpki-client