$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/c1/82e2ba-442c-42b0-9315-bc0dba932b35/1/ROiIp26ZhRsB-4bOxTfU2OYQ3hY.mft File: ROiIp26ZhRsB-4bOxTfU2OYQ3hY.mft (raw, json) Hash identifier: TkBMFT6Kn9m6zlc3DUOLAb0LTmlb9a1yid75fC74sKc= Subject key identifier: 22:BA:44:AD:2F:05:87:1B:B3:CA:25:9B:16:BA:56:2B:47:C7:7B:CB Authority key identifier: 44:E8:88:A7:6E:99:85:1B:01:FB:86:CE:C5:37:D4:D8:E6:10:DE:16 Certificate issuer: /CN=44e888a76e99851b01fb86cec537d4d8e610de16 Certificate serial: 019A2109033A8255FE864681715A5C233DFE Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/ROiIp26ZhRsB-4bOxTfU2OYQ3hY.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/c1/82e2ba-442c-42b0-9315-bc0dba932b35/1/ROiIp26ZhRsB-4bOxTfU2OYQ3hY.mft Manifest number: 1700 Signing time: Sun 26 Oct 2025 15:00:30 +0000 Manifest this update: Sun 26 Oct 2025 15:00:30 +0000 Manifest next update: Mon 27 Oct 2025 15:00:30 +0000 Files and hashes: 1: 0HtxlG1tnNzIep81031kd9p-fBw.roa (hash: OXzBPa2feSryqGHpXn/FEvG/w29ffxoaGIUchPvm3mk=) 2: 15E544iqbijbzQkYAdS47aYrD9A.roa (hash: UqW9jr3a9GHG7Uy8FuE2NGM92ysT2U6k57t/AfdIbps=) 3: 4e59DVO4NkPnw3RUdXinXYgZKhI.roa (hash: Xsz+QLo3ua4qkoV0U1mBEVAYiGazJCq/50LjJfTfImQ=) 4: HLg6VWsPMYDiVDNc71bln7BtlmI.roa (hash: zOH/eTKTLW5itJCzaK8r7su+5axAuuxkhBxsE0F25B8=) 5: QeYOzxISXgl6M7OixDgTpfZERu4.roa (hash: s4UEY+I5WghrV5P9V2zo2Pa66DhiVa+5TyKkmVvFOc4=) 6: ROiIp26ZhRsB-4bOxTfU2OYQ3hY.crl (hash: wqWcGJkqDFYMgRfEcNbHAp3/dvlZa0mkTb7jRVEL/Ls=) 7: mb6SEFuusb8ccfPkUgnr1G-16Gg.roa (hash: Cbmq4R34rOxE+s++uid9OxtsaiHFlr2Tu54+IMtMuXI=) 8: oD5ktIApamXxgwjGSpDfwIhQqYQ.roa (hash: yFFoY0qvHYFgL03wlalkQiMq33WT4afE35wQSaZE/qI=) 9: s_zMcXxflRh9gHR1FIZttGtTjGE.roa (hash: g61ySbj8E0IaX2KE/SgM0wXcbhaZ44LqHEYTKp0t9w0=) 10: xHPbbeon1SNsE_0gmuT8lFya0kY.roa (hash: m7FtBUaCPAlNvC/LFbXZEFv5bG9Pb/Vc9bKRiuxNTq8=) Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/c1/82e2ba-442c-42b0-9315-bc0dba932b35/1/ROiIp26ZhRsB-4bOxTfU2OYQ3hY.crl rsync://rpki.ripe.net/repository/DEFAULT/c1/82e2ba-442c-42b0-9315-bc0dba932b35/1/ROiIp26ZhRsB-4bOxTfU2OYQ3hY.mft rsync://rpki.ripe.net/repository/DEFAULT/ROiIp26ZhRsB-4bOxTfU2OYQ3hY.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Mon 27 Oct 2025 12:00:03 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9a:21:09:03:3a:82:55:fe:86:46:81:71:5a:5c:23:3d:fe Signature Algorithm: sha256WithRSAEncryption Issuer: CN=44e888a76e99851b01fb86cec537d4d8e610de16 Validity Not Before: Oct 26 15:00:30 2025 GMT Not After : Oct 27 15:00:30 2025 GMT Subject: CN=22ba44ad2f05871bb3ca259b16ba562b47c77bcb Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:e4:29:bc:34:ec:91:3b:e1:70:84:a5:e2:50:76: 70:43:1f:e3:08:bb:08:fe:1b:ae:cd:81:1a:af:59: 87:55:40:c0:31:6d:b5:10:e1:b3:3d:a5:df:9a:c6: 22:a5:9b:b6:0f:65:35:6e:a8:42:a1:f9:32:38:a8: ee:4c:a4:ee:38:e4:eb:6e:fe:14:d2:e3:48:bd:c9: 9f:ef:a8:0e:2a:83:e9:0b:37:e9:3a:29:30:85:be: 24:57:94:ac:86:24:97:ec:16:0c:95:e6:1a:11:ed: 8b:99:17:4b:f7:0c:7b:91:07:0f:df:b2:64:b8:38: cf:67:bc:b6:a4:35:fd:f2:e5:06:64:cd:cb:73:18: 0f:74:76:a6:44:b6:50:55:67:8a:38:22:7f:8b:db: 83:a7:5a:d4:25:a2:0a:ed:77:2f:06:28:dd:28:63: 3a:10:2b:e3:91:f9:64:d2:b5:f8:e7:c2:84:fa:8e: 02:88:a6:e3:ee:4c:d9:16:97:39:8b:7e:e1:74:36: 50:ad:3c:a3:18:81:10:f6:6c:f0:f0:c1:a9:37:ab: 14:97:df:41:f2:1a:a6:99:27:17:36:d4:1d:2f:42: 54:80:ef:cc:92:4c:e3:71:5c:c9:ef:28:12:6b:d1: 5b:63:45:40:8f:39:05:30:89:d1:ec:6e:2a:c7:e4: a0:1d Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 22:BA:44:AD:2F:05:87:1B:B3:CA:25:9B:16:BA:56:2B:47:C7:7B:CB X509v3 Authority Key Identifier: keyid:44:E8:88:A7:6E:99:85:1B:01:FB:86:CE:C5:37:D4:D8:E6:10:DE:16 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/ROiIp26ZhRsB-4bOxTfU2OYQ3hY.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/c1/82e2ba-442c-42b0-9315-bc0dba932b35/1/ROiIp26ZhRsB-4bOxTfU2OYQ3hY.mft X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/c1/82e2ba-442c-42b0-9315-bc0dba932b35/1/ROiIp26ZhRsB-4bOxTfU2OYQ3hY.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 04:61:a5:51:96:3c:79:49:e5:09:4f:0f:94:6b:27:ff:09:3c: df:59:e5:2f:45:23:19:ce:c7:ef:7d:42:fd:81:81:87:c1:76: f2:4b:c7:18:4a:3a:0f:17:cf:15:25:13:61:37:19:fc:68:c8: 6d:f9:f7:c5:f2:31:43:79:85:73:3c:98:2a:cd:4f:03:0b:9b: 02:e4:b2:ca:ca:ec:d6:fd:e4:66:9d:d3:f6:6f:86:e8:99:0c: 88:ed:9a:d3:7e:e0:74:a3:a5:e4:3e:e7:8b:c9:e1:ba:c1:b2: d8:7a:bf:b8:0d:e8:7b:c2:00:17:19:44:6a:4a:b2:c0:70:d7: b6:fc:b2:20:c6:46:e1:30:5c:b1:64:d8:f2:ee:b1:f9:b6:c7: 23:12:87:1f:46:14:d5:02:e2:ec:9d:d7:60:fa:65:f9:3e:b5: cf:d4:c4:66:0b:5c:5d:2b:05:97:00:2b:1e:1c:b3:6d:a5:09: 16:c9:4f:5f:06:7d:28:b5:18:34:ae:3c:83:6e:8d:75:be:e7: 6b:d0:af:e1:1d:33:d0:55:61:dd:84:aa:f6:6a:3d:d8:f0:74: 96:5b:e9:29:0e:de:4c:5c:5e:ab:1b:ba:18:b4:08:bb:b6:58: 7d:f7:b0:56:81:13:d0:18:93:03:ad:0a:a2:73:b9:9f:a8:d4: 76:5a:44:f6 -----BEGIN CERTIFICATE----- MIIFFjCCA/6gAwIBAgISAZohCQM6glX+hkaBcVpcIz3+MA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKDQ0ZTg4OGE3NmU5OTg1MWIwMWZiODZjZWM1MzdkNGQ4ZTYx MGRlMTYwHhcNMjUxMDI2MTUwMDMwWhcNMjUxMDI3MTUwMDMwWjAzMTEwLwYDVQQD EygyMmJhNDRhZDJmMDU4NzFiYjNjYTI1OWIxNmJhNTYyYjQ3Yzc3YmNiMIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEA5Cm8NOyRO+FwhKXiUHZwQx/jCLsI /huuzYEar1mHVUDAMW21EOGzPaXfmsYipZu2D2U1bqhCofkyOKjuTKTuOOTrbv4U 0uNIvcmf76gOKoPpCzfpOikwhb4kV5SshiSX7BYMleYaEe2LmRdL9wx7kQcP37Jk uDjPZ7y2pDX98uUGZM3LcxgPdHamRLZQVWeKOCJ/i9uDp1rUJaIK7XcvBijdKGM6 ECvjkflk0rX458KE+o4CiKbj7kzZFpc5i37hdDZQrTyjGIEQ9mzw8MGpN6sUl99B 8hqmmScXNtQdL0JUgO/MkkzjcVzJ7ygSa9FbY0VAjzkFMInR7G4qx+SgHQIDAQAB o4ICIjCCAh4wHQYDVR0OBBYEFCK6RK0vBYcbs8olmxa6VitHx3vLMB8GA1UdIwQY MBaAFEToiKdumYUbAfuGzsU31NjmEN4WMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvUk9pSXAyNlpoUnNCLTRiT3hUZlUyT1lRM2hZLmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC9jMS84MmUyYmEtNDQyYy00MmIwLTkzMTUt YmMwZGJhOTMyYjM1LzEvUk9pSXAyNlpoUnNCLTRiT3hUZlUyT1lRM2hZLm1mdDCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC9jMS84MmUyYmEtNDQyYy00MmIwLTkzMTUtYmMwZGJhOTMyYjM1 LzEvUk9pSXAyNlpoUnNCLTRiT3hUZlUyT1lRM2hZLmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEABGGlUZY8 eUnlCU8PlGsn/wk831nlL0UjGc7H731C/YGBh8F28kvHGEo6DxfPFSUTYTcZ/GjI bfn3xfIxQ3mFczyYKs1PAwubAuSyysrs1v3kZp3T9m+G6JkMiO2a037gdKOl5D7n i8nhusGy2Hq/uA3oe8IAFxlEakqywHDXtvyyIMZG4TBcsWTY8u6x+bbHIxKHH0YU 1QLi7J3XYPpl+T61z9TEZgtcXSsFlwArHhyzbaUJFslPXwZ9KLUYNK48g26Ndb7n a9Cv4R0z0FVh3YSq9mo92PB0llvpKQ7eTFxeqxu6GLQIu7ZYffewVoET0BiTA60K onO5n6jUdlpE9g== -----END CERTIFICATE-----Generated at Sun Oct 26 20:28:54 2025 by rpki-client