$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/c0/e45e30-e7d8-4fb8-90ad-f71038e967a4/1/tIUv-6fVfFqK-7bqW-r33-wMFFo.mft File: tIUv-6fVfFqK-7bqW-r33-wMFFo.mft (raw, json) Hash identifier: C4mNUbn8rsd2LRMnvZDTYOIoRNeUBZ/eadaWkCjWDA0= Subject key identifier: 55:7C:61:EC:B0:31:AA:43:CC:72:45:34:F6:99:5D:30:BB:00:EF:79 Authority key identifier: B4:85:2F:FB:A7:D5:7C:5A:8A:FB:B6:EA:5B:EA:F7:DF:EC:0C:14:5A Certificate issuer: /CN=b4852ffba7d57c5a8afbb6ea5beaf7dfec0c145a Certificate serial: 019A17619DC0B19150E8A3EEA2B3DB72DF64 Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/tIUv-6fVfFqK-7bqW-r33-wMFFo.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/c0/e45e30-e7d8-4fb8-90ad-f71038e967a4/1/tIUv-6fVfFqK-7bqW-r33-wMFFo.mft Manifest number: 1705 Signing time: Fri 24 Oct 2025 18:01:04 +0000 Manifest this update: Fri 24 Oct 2025 18:01:04 +0000 Manifest next update: Sat 25 Oct 2025 18:01:04 +0000 Files and hashes: 1: 2zBG6wv0zKBe2XlbGkfLL9rOdtY.roa (hash: lxNpEB+wfb/SASGgTTjYX3zTxUdrCP8FyxAXU//G0JE=) 2: 60ZaPiBpi8SxBTjOjQUT9FiEU2Q.roa (hash: +EenJI8/Zu0itO/r18F94M+NWWU8CW03dUIDwunEbUc=) 3: EU2O-Gd0BV713EAdFoGJuGMnLgQ.roa (hash: DIGhFlsty46rXCRlbLUopCZPIy0Ap7bO0kln0jsUUZQ=) 4: O3sXFCWDkxRLQArJVgciZYJOH2k.roa (hash: wEiLpu8rEygqvBvHCRoBqicZ9xgf2J+eV7J8nj+KxjA=) 5: ZjHl0XpQM8CCJz6Om67G0wOmvS4.roa (hash: xCetPcOL8RFsZEGexQBgMW05eQfuM1TVnSNp6oyXZtQ=) 6: d8mFLNhZassFfsIT0V6Pg-FoNgA.roa (hash: G1lxk+WJgE19vtZBUhgAhwauP4CikNyKzPmcQ0hwXlc=) 7: dEvm44MVXindQlOEmPEQUDFIhOs.roa (hash: dVgBBC/Rmim2eB3c1PNCO34aKUguzhPQDH4vqUewLA0=) 8: l1wLvb6NKoGEYg4t8n0m6fJ0nkM.roa (hash: ql0IO639qJqy1cMjdHcoEEjUejhdun3XvEvt+WT91vI=) 9: nf_J-Be6PvK26ukKjJl6IQe1MJY.roa (hash: 0NfHfYZttT9eDOJu1RyDhX+/FDw371Nzr/BlGE9d+BA=) 10: tIUv-6fVfFqK-7bqW-r33-wMFFo.crl (hash: H+qlEcp5/81+OjJ/CxmKZsHEDb+PLCW98IGzrD763xE=) 11: w7JADU6oCGh6YbUdtkn1AWlz8C8.roa (hash: BeTxZ9eibtqN9brjaSZeCdnih1w74ddiTrBxnDrR2hk=) Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/c0/e45e30-e7d8-4fb8-90ad-f71038e967a4/1/tIUv-6fVfFqK-7bqW-r33-wMFFo.crl rsync://rpki.ripe.net/repository/DEFAULT/c0/e45e30-e7d8-4fb8-90ad-f71038e967a4/1/tIUv-6fVfFqK-7bqW-r33-wMFFo.mft rsync://rpki.ripe.net/repository/DEFAULT/tIUv-6fVfFqK-7bqW-r33-wMFFo.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Sat 25 Oct 2025 17:00:03 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9a:17:61:9d:c0:b1:91:50:e8:a3:ee:a2:b3:db:72:df:64 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=b4852ffba7d57c5a8afbb6ea5beaf7dfec0c145a Validity Not Before: Oct 24 18:01:04 2025 GMT Not After : Oct 25 18:01:04 2025 GMT Subject: CN=557c61ecb031aa43cc724534f6995d30bb00ef79 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:f2:be:c6:a5:9c:8e:c0:52:99:38:37:04:cf:e0: 94:fe:4e:f0:75:e5:10:24:6a:aa:26:21:15:3f:85: d7:69:72:50:3e:76:89:fa:b4:b7:2b:d9:4b:d3:0a: 30:03:dd:2f:82:49:67:cd:55:40:d2:e0:fc:32:1f: b1:d0:dc:31:1c:fb:2d:a5:d4:c4:6f:a3:ac:79:45: b1:fa:dc:ee:b3:cc:33:bd:bf:dc:3e:65:45:16:8b: 94:a4:8a:bb:c7:a1:7a:67:7d:8d:74:30:80:6f:7e: a4:26:d9:7d:83:4c:48:fa:c9:97:56:1a:55:91:54: 23:c6:7c:ff:47:00:f2:00:5b:a2:ed:98:c2:70:43: 3e:51:85:20:3d:80:8d:6e:04:41:8f:32:ed:a3:46: 1a:6a:ab:9d:0e:68:68:95:bb:3f:74:a2:78:df:c5: 9c:5d:4d:b4:6c:8a:f3:7e:e1:71:dc:10:5b:67:20: 86:bd:03:37:eb:cc:2f:5e:ce:5f:a1:ff:ea:3d:11: bc:1c:27:1a:ea:15:5f:ed:d6:67:d8:05:b7:ad:a2: 92:27:09:bd:fa:bc:e3:99:a3:e1:fd:2b:b6:b4:31: aa:56:ec:e9:18:60:98:e0:f8:88:d3:cb:f0:d4:c4: eb:87:1a:71:83:5b:33:83:d1:33:64:60:fd:08:24: 65:d3 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 55:7C:61:EC:B0:31:AA:43:CC:72:45:34:F6:99:5D:30:BB:00:EF:79 X509v3 Authority Key Identifier: keyid:B4:85:2F:FB:A7:D5:7C:5A:8A:FB:B6:EA:5B:EA:F7:DF:EC:0C:14:5A X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/tIUv-6fVfFqK-7bqW-r33-wMFFo.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/c0/e45e30-e7d8-4fb8-90ad-f71038e967a4/1/tIUv-6fVfFqK-7bqW-r33-wMFFo.mft X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/c0/e45e30-e7d8-4fb8-90ad-f71038e967a4/1/tIUv-6fVfFqK-7bqW-r33-wMFFo.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 8e:4e:33:19:a1:ae:f6:30:ce:cb:d8:d8:53:64:69:be:89:7a: 58:1d:2b:46:df:7a:b1:4b:fe:ae:4b:a9:40:2b:0e:59:88:3c: 9e:bc:dc:c0:4f:8a:a6:1a:ed:ae:4e:ae:67:f3:07:3d:bd:a0: 38:ad:41:16:b6:aa:97:95:5c:49:1d:0e:c9:72:ba:5f:54:f6: 67:2b:76:7f:6e:8e:fc:bc:be:d1:b0:55:75:27:dc:ca:cb:f7: bc:ff:4a:bb:5f:5a:a5:b9:61:8b:82:9b:84:70:05:a7:63:d0: 07:91:d2:02:a6:40:b9:7e:96:0d:f0:94:d5:8e:9a:e9:12:b1: af:ed:53:7e:5e:fb:80:69:c5:6a:7b:38:cb:55:a3:18:5f:25: 53:c7:4c:69:1b:fb:50:b2:73:9a:c8:13:11:10:e4:14:cc:38: 30:11:74:57:46:6b:41:f8:4d:a2:f9:ba:3a:5b:ac:ce:2d:0d: 84:0e:70:15:1b:1f:70:b9:d0:a8:8f:af:55:39:4a:31:b8:05: a2:71:c8:76:dc:e0:ba:d1:c4:aa:de:23:a3:82:db:2f:55:a2: d4:54:51:fe:da:e8:94:a6:9a:8d:fc:f1:9d:d7:46:52:01:5f: bf:1e:6f:01:f2:0f:1f:ca:94:21:5f:56:92:d1:03:25:f7:1e: 03:dc:f8:dd -----BEGIN CERTIFICATE----- MIIFFjCCA/6gAwIBAgISAZoXYZ3AsZFQ6KPuorPbct9kMA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKGI0ODUyZmZiYTdkNTdjNWE4YWZiYjZlYTViZWFmN2RmZWMw YzE0NWEwHhcNMjUxMDI0MTgwMTA0WhcNMjUxMDI1MTgwMTA0WjAzMTEwLwYDVQQD Eyg1NTdjNjFlY2IwMzFhYTQzY2M3MjQ1MzRmNjk5NWQzMGJiMDBlZjc5MIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEA8r7GpZyOwFKZODcEz+CU/k7wdeUQ JGqqJiEVP4XXaXJQPnaJ+rS3K9lL0wowA90vgklnzVVA0uD8Mh+x0NwxHPstpdTE b6OseUWx+tzus8wzvb/cPmVFFouUpIq7x6F6Z32NdDCAb36kJtl9g0xI+smXVhpV kVQjxnz/RwDyAFui7ZjCcEM+UYUgPYCNbgRBjzLto0YaaqudDmholbs/dKJ438Wc XU20bIrzfuFx3BBbZyCGvQM368wvXs5fof/qPRG8HCca6hVf7dZn2AW3raKSJwm9 +rzjmaPh/Su2tDGqVuzpGGCY4PiI08vw1MTrhxpxg1szg9EzZGD9CCRl0wIDAQAB o4ICIjCCAh4wHQYDVR0OBBYEFFV8YeywMapDzHJFNPaZXTC7AO95MB8GA1UdIwQY MBaAFLSFL/un1Xxaivu26lvq99/sDBRaMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvdElVdi02ZlZmRnFLLTdicVctcjMzLXdNRkZvLmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC9jMC9lNDVlMzAtZTdkOC00ZmI4LTkwYWQt ZjcxMDM4ZTk2N2E0LzEvdElVdi02ZlZmRnFLLTdicVctcjMzLXdNRkZvLm1mdDCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC9jMC9lNDVlMzAtZTdkOC00ZmI4LTkwYWQtZjcxMDM4ZTk2N2E0 LzEvdElVdi02ZlZmRnFLLTdicVctcjMzLXdNRkZvLmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAjk4zGaGu 9jDOy9jYU2Rpvol6WB0rRt96sUv+rkupQCsOWYg8nrzcwE+Kphrtrk6uZ/MHPb2g OK1BFraql5VcSR0OyXK6X1T2Zyt2f26O/Ly+0bBVdSfcysv3vP9Ku19apblhi4Kb hHAFp2PQB5HSAqZAuX6WDfCU1Y6a6RKxr+1Tfl77gGnFans4y1WjGF8lU8dMaRv7 ULJzmsgTERDkFMw4MBF0V0ZrQfhNovm6Oluszi0NhA5wFRsfcLnQqI+vVTlKMbgF onHIdtzgutHEqt4jo4LbL1Wi1FRR/trolKaajfzxnddGUgFfvx5vAfIPH8qUIV9W ktEDJfceA9z43Q== -----END CERTIFICATE-----Generated at Sat Oct 25 02:00:51 2025 by rpki-client