$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/bd/c7ee9e-b5bf-4c2d-a983-dee3ed497aee/1/Ben8oKhYT-scEjGQcUIwYbCP5FY.mft File: Ben8oKhYT-scEjGQcUIwYbCP5FY.mft (raw, json) Hash identifier: AT2oDuAaXEOa8yaZPUpJ3SqI90WbIWEKluobocozqBs= Subject key identifier: E3:4E:BB:5D:F2:30:50:7C:EC:F6:1E:6F:9A:35:EB:F1:71:F2:B2:52 Authority key identifier: 05:E9:FC:A0:A8:58:4F:EB:1C:12:31:90:71:42:30:61:B0:8F:E4:56 Certificate issuer: /CN=05e9fca0a8584feb1c12319071423061b08fe456 Certificate serial: 019A08929904981721E039493F3D40F1D01B Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/Ben8oKhYT-scEjGQcUIwYbCP5FY.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/bd/c7ee9e-b5bf-4c2d-a983-dee3ed497aee/1/Ben8oKhYT-scEjGQcUIwYbCP5FY.mft Manifest number: 0EF7 Signing time: Tue 21 Oct 2025 21:00:16 +0000 Manifest this update: Tue 21 Oct 2025 21:00:16 +0000 Manifest next update: Wed 22 Oct 2025 21:00:16 +0000 Files and hashes: 1: 4JQtl6CjZI4Ed81VYmD8y3s93nc.roa (hash: DNWzfbgNl38BTmSJIdFxCJ7U9WCYuq21jLucbQaekUg=) 2: BL3LZfi-f3ywcf3FmAmJwnbzASI.roa (hash: DVAE75CLKTBw2pzOs2zlkLoQMMQUvF717xgboLC73+I=) 3: Ben8oKhYT-scEjGQcUIwYbCP5FY.crl (hash: ak3siUR0R+OP0yCfShjwpTiQXbFvXd3GE30Lw3I09Qk=) 4: DeACqwGcvIcEJ9pagEhHd4n2i_M.roa (hash: WPp0dLB9p4cnbOnLtVE+B38AXmBSQMpiDZZIvPoqViw=) 5: FMfF0PRqbPl1Xgf7uetPmo11RwY.roa (hash: Nmk2r9tNYQqNw9x7igBvoQ88flRwtwnRPqDYVBzi6Zk=) 6: Q146qaaxZ1xmkBzI32xjl700K7Q.roa (hash: Dmot/z3pbyFtlPpe5Va8TlDgzImhsPNQJ1rELTx4Aro=) 7: XNBwXrAiwZu96uMUjODQvvz_Bzw.roa (hash: mCW8/M59wIOxOS0wM2q/LR+3KGIdWjCxHtDVDd4aiCU=) 8: Z4WfPAHr0U4HuMsBXDWE11AR6SY.roa (hash: nIFqFX+PoOUUY+ho0HNN5VDHjMoLJi/JVpJHhVS9zMY=) 9: fETfH_XiNbseiVsjZA2HM6Af2jI.roa (hash: uyRqpIalZYJdXa3YW/3/Z8wVH+1oAHTZduFpskFWKhg=) 10: foM10PwLyaHwLhfbaJzkwnbAE_w.roa (hash: DIaKJkxL7f9BTL5/9GbSSi0rXtJN9gz1NV5M8HRodzE=) 11: phO7epvCoYFhkG0dTV5RtGTfFoE.roa (hash: jkhzkXF+DB42uMow0dB8LWjmxEVbOyoIZtbBsaP8XFo=) 12: rS554DqYgNK00lANZV007fZTVkM.roa (hash: 3SSYULxYvCw8XOXXkyZRjzf+FifSR5lE3jD5NyjPQ0I=) 13: uZ82HsSJfJMX-injZJkIBGdxGBY.roa (hash: mT1BefewYqT0QULFBWTWCpATALXi+6J6LGgvQIVpGhI=) 14: wacKSVeFcrTyL4jcOjnOwrcddYQ.roa (hash: n1rU/BStziAQk9f5pDE6L63EitmHb6FHEduDthm4TxU=) 15: ytwdpN2_MmIz-ujAGkeOSyxFnQQ.roa (hash: Q1K4a50MOqKpSRbaxfZO8lYsK/lxhMtlTC8aBU8fdHU=) Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/bd/c7ee9e-b5bf-4c2d-a983-dee3ed497aee/1/Ben8oKhYT-scEjGQcUIwYbCP5FY.crl rsync://rpki.ripe.net/repository/DEFAULT/bd/c7ee9e-b5bf-4c2d-a983-dee3ed497aee/1/Ben8oKhYT-scEjGQcUIwYbCP5FY.mft rsync://rpki.ripe.net/repository/DEFAULT/Ben8oKhYT-scEjGQcUIwYbCP5FY.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Wed 22 Oct 2025 19:12:03 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9a:08:92:99:04:98:17:21:e0:39:49:3f:3d:40:f1:d0:1b Signature Algorithm: sha256WithRSAEncryption Issuer: CN=05e9fca0a8584feb1c12319071423061b08fe456 Validity Not Before: Oct 21 21:00:16 2025 GMT Not After : Oct 22 21:00:16 2025 GMT Subject: CN=e34ebb5df230507cecf61e6f9a35ebf171f2b252 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:e7:08:54:de:2e:af:26:5f:ae:02:68:fc:6d:36: a3:e1:a7:af:f9:ef:b4:a7:cf:f9:9a:bb:5c:93:6f: c5:9b:91:7b:60:e7:d1:ab:ff:b2:47:aa:cc:0f:9d: d4:43:f0:7b:03:b7:ca:56:78:a1:ee:12:89:8d:87: 91:36:a7:8c:db:30:91:da:48:22:0c:a5:cc:7c:ae: 76:bc:28:84:22:ae:00:6c:1f:93:cf:b8:b7:53:ab: 3e:35:a6:d5:5f:dd:5a:17:fd:6f:4e:b0:b1:f1:3e: 47:03:1a:16:04:66:c8:13:c3:ad:ca:60:d3:9c:59: b7:6d:59:4f:34:9c:36:2b:5f:f0:83:8c:8f:22:77: e2:af:8c:8c:d3:72:6b:e5:be:87:94:12:10:2f:35: b7:72:0e:2d:51:9e:1b:f5:46:a8:cf:7e:0c:7b:1e: 50:c0:a0:46:96:e4:ff:7f:c3:a6:4f:37:25:65:90: 2f:c8:59:30:6c:9a:8a:1f:6d:b4:ad:dc:fa:04:b1: 82:ff:6e:d3:b4:03:18:a1:e8:57:68:a0:74:36:ae: a8:1f:27:08:81:f5:bc:10:30:98:2f:93:34:b1:ec: d5:0e:e7:16:f1:dd:d6:57:a3:2c:4b:e6:e0:07:57: e7:dd:e3:7f:32:27:7c:f6:13:4e:96:b3:37:56:77: 0b:63 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: E3:4E:BB:5D:F2:30:50:7C:EC:F6:1E:6F:9A:35:EB:F1:71:F2:B2:52 X509v3 Authority Key Identifier: keyid:05:E9:FC:A0:A8:58:4F:EB:1C:12:31:90:71:42:30:61:B0:8F:E4:56 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/Ben8oKhYT-scEjGQcUIwYbCP5FY.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/bd/c7ee9e-b5bf-4c2d-a983-dee3ed497aee/1/Ben8oKhYT-scEjGQcUIwYbCP5FY.mft X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/bd/c7ee9e-b5bf-4c2d-a983-dee3ed497aee/1/Ben8oKhYT-scEjGQcUIwYbCP5FY.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 85:f8:6c:56:87:1d:35:49:c7:5b:b9:b7:4a:a5:16:58:6b:f7: 89:0a:86:e1:3f:32:6b:e8:5c:39:fb:89:90:13:a8:df:4a:bd: 39:ad:b7:b0:35:df:29:b1:a3:4d:99:86:21:3a:fd:47:ab:4a: 97:6e:66:e7:f6:cf:4c:be:7e:84:05:8d:47:37:a6:52:a5:3c: 21:ab:91:4c:7d:6c:51:78:42:06:a5:c4:ad:75:bb:e2:fd:d3: 2d:23:c0:8e:98:65:46:49:2b:95:27:3b:2d:4f:8d:e5:85:23: f6:12:34:86:be:29:33:11:b3:44:b5:f2:66:87:e9:91:74:ae: 0b:b0:e7:11:2c:f3:44:7e:c8:69:da:9d:55:b0:0b:09:af:99: 83:41:18:e4:2b:8f:2b:ca:7a:66:d7:61:2d:be:6f:af:89:6f: 10:77:a3:c6:f8:50:b5:5a:81:70:bf:06:15:88:39:5a:5d:83: d7:73:ed:eb:44:d2:72:59:07:14:4f:45:63:db:1f:20:8a:81: 83:ca:11:42:3b:57:69:eb:92:a6:20:2d:46:3d:36:18:67:ef: 23:19:87:82:1c:86:0c:c9:a3:0e:b9:db:3b:96:ad:86:d7:07: 41:b2:2e:7b:99:64:27:39:10:db:d5:af:2e:09:22:91:95:a7: 29:f5:48:29 -----BEGIN CERTIFICATE----- MIIFFjCCA/6gAwIBAgISAZoIkpkEmBch4DlJPz1A8dAbMA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKDA1ZTlmY2EwYTg1ODRmZWIxYzEyMzE5MDcxNDIzMDYxYjA4 ZmU0NTYwHhcNMjUxMDIxMjEwMDE2WhcNMjUxMDIyMjEwMDE2WjAzMTEwLwYDVQQD EyhlMzRlYmI1ZGYyMzA1MDdjZWNmNjFlNmY5YTM1ZWJmMTcxZjJiMjUyMIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEA5whU3i6vJl+uAmj8bTaj4aev+e+0 p8/5mrtck2/Fm5F7YOfRq/+yR6rMD53UQ/B7A7fKVnih7hKJjYeRNqeM2zCR2kgi DKXMfK52vCiEIq4AbB+Tz7i3U6s+NabVX91aF/1vTrCx8T5HAxoWBGbIE8OtymDT nFm3bVlPNJw2K1/wg4yPInfir4yM03Jr5b6HlBIQLzW3cg4tUZ4b9Uaoz34Mex5Q wKBGluT/f8OmTzclZZAvyFkwbJqKH220rdz6BLGC/27TtAMYoehXaKB0Nq6oHycI gfW8EDCYL5M0sezVDucW8d3WV6MsS+bgB1fn3eN/Mid89hNOlrM3VncLYwIDAQAB o4ICIjCCAh4wHQYDVR0OBBYEFONOu13yMFB87PYeb5o16/Fx8rJSMB8GA1UdIwQY MBaAFAXp/KCoWE/rHBIxkHFCMGGwj+RWMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvQmVuOG9LaFlULXNjRWpHUWNVSXdZYkNQNUZZLmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC9iZC9jN2VlOWUtYjViZi00YzJkLWE5ODMt ZGVlM2VkNDk3YWVlLzEvQmVuOG9LaFlULXNjRWpHUWNVSXdZYkNQNUZZLm1mdDCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC9iZC9jN2VlOWUtYjViZi00YzJkLWE5ODMtZGVlM2VkNDk3YWVl LzEvQmVuOG9LaFlULXNjRWpHUWNVSXdZYkNQNUZZLmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAhfhsVocd NUnHW7m3SqUWWGv3iQqG4T8ya+hcOfuJkBOo30q9Oa23sDXfKbGjTZmGITr9R6tK l25m5/bPTL5+hAWNRzemUqU8IauRTH1sUXhCBqXErXW74v3TLSPAjphlRkkrlSc7 LU+N5YUj9hI0hr4pMxGzRLXyZofpkXSuC7DnESzzRH7IadqdVbALCa+Zg0EY5CuP K8p6ZtdhLb5vr4lvEHejxvhQtVqBcL8GFYg5Wl2D13Pt60TSclkHFE9FY9sfIIqB g8oRQjtXaeuSpiAtRj02GGfvIxmHghyGDMmjDrnbO5athtcHQbIue5lkJzkQ29Wv LgkikZWnKfVIKQ== -----END CERTIFICATE-----Generated at Wed Oct 22 01:46:23 2025 by rpki-client