$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/c3/1b4105-3471-4592-bf07-73fd3bc19aa7/1/_zFJJHOnjG_p9Tn5-n0iUlYKK34.mft File: _zFJJHOnjG_p9Tn5-n0iUlYKK34.mft (raw, json) Hash identifier: csDSdyaf71Embb+Nmg3IWMxSt6GOtcXcnEUwVxmNOT4= Subject key identifier: 7E:28:77:5B:CB:D0:E5:2E:73:C1:AD:C6:AA:D9:19:99:00:EC:0F:06 Authority key identifier: FF:31:49:24:73:A7:8C:6F:E9:F5:39:F9:FA:7D:22:52:56:0A:2B:7E Certificate issuer: /CN=ff31492473a78c6fe9f539f9fa7d2252560a2b7e Certificate serial: 019A221B7F2AFFB31B4693CF17AE1193EF55 Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/_zFJJHOnjG_p9Tn5-n0iUlYKK34.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/c3/1b4105-3471-4592-bf07-73fd3bc19aa7/1/_zFJJHOnjG_p9Tn5-n0iUlYKK34.mft Manifest number: 16BD Signing time: Sun 26 Oct 2025 20:00:18 +0000 Manifest this update: Sun 26 Oct 2025 20:00:18 +0000 Manifest next update: Mon 27 Oct 2025 20:00:18 +0000 Files and hashes: 1: F_cRK7_FuJ1SOPF-eStGPWamodQ.roa (hash: bwgPCaYQdCUVOLDgCvOHRKGxaq7IRtIbjKPrwDwOiGI=) 2: Itnfb5cOidqPHmrm9ItGmwZzqpE.roa (hash: iss4kvemyRAUGLNEu7CN/erlN+DUp3hzgmc3aCXZAfU=) 3: JaFKfYKslg0WUVhBG8hHu6LqTvw.roa (hash: 4GgDdTVxQxqewTP0EOz1RIPWIQ2EEWazgc1qxopxzyA=) 4: NiD2SDjoMC5kCqhJ0LqUs7rzMnw.roa (hash: 9+KHXzf6QQ6hX/XBCMhmaRntprEYELpBh7Oa+Qw01T4=) 5: ShXwELNENSFmGBdjnWGg5NqouYI.roa (hash: CvtdGpDGnIEThk2qtR3nRVqJ7XKDlnHvbjdMw3b5GEg=) 6: U6O4fPn6akIpWmgc4yJT0O6kLpo.roa (hash: yofA2VyhfSO3CESlgcLfFamVAKarRdUA7fzOcVSh6T0=) 7: _zFJJHOnjG_p9Tn5-n0iUlYKK34.crl (hash: pPbvt9tWtpCnIfVsWv9ivvx0I0ovEZWLC8/pxTHgW5Y=) 8: ccs7nyLFaW5A18K4O1qhpOVnDF0.roa (hash: kVq8Rt+cDTCddUdzX9poi4CfmBkJSUYFh1PJxqkXE8A=) 9: u3VJR1_M7JzYx842qLGTM0en5V0.roa (hash: qbP/xDwKS1NUr1YSZhW1L+ZrVrT39XIk/W4+EAm8kOI=) 10: y4Nw6VYuIuUZOv6I685fKqZhbWQ.roa (hash: JM0RAslsFdrhEKUBmY+ywDM/Jo6q24Igd7pWLFOkC9Q=) 11: zIstcjB0l5dXMsxLJF-PmySyWoY.roa (hash: sZKTonBPo728p5sx2a7KurcsOwIi7QOOMBd8o6TZnS4=) Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/c3/1b4105-3471-4592-bf07-73fd3bc19aa7/1/_zFJJHOnjG_p9Tn5-n0iUlYKK34.crl rsync://rpki.ripe.net/repository/DEFAULT/c3/1b4105-3471-4592-bf07-73fd3bc19aa7/1/_zFJJHOnjG_p9Tn5-n0iUlYKK34.mft rsync://rpki.ripe.net/repository/DEFAULT/_zFJJHOnjG_p9Tn5-n0iUlYKK34.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Mon 27 Oct 2025 19:48:03 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9a:22:1b:7f:2a:ff:b3:1b:46:93:cf:17:ae:11:93:ef:55 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=ff31492473a78c6fe9f539f9fa7d2252560a2b7e Validity Not Before: Oct 26 20:00:18 2025 GMT Not After : Oct 27 20:00:18 2025 GMT Subject: CN=7e28775bcbd0e52e73c1adc6aad9199900ec0f06 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:96:03:d3:61:9b:86:fd:43:dd:8f:b1:7e:2d:06: a0:a1:84:85:c4:15:f6:e4:c2:2c:55:aa:5a:a4:69: 4b:2e:6f:a7:25:0e:e9:d0:46:51:c8:d3:c9:68:88: fb:b9:01:bf:44:2c:de:13:b2:36:5e:ec:4c:cd:15: 40:3a:39:08:01:c5:5c:59:09:06:0e:38:4a:65:57: dc:a0:c5:c9:06:78:82:fb:ef:c4:d3:ad:ec:94:d0: 89:d5:98:e2:31:65:dd:2e:20:87:fd:42:1a:f6:75: c8:48:16:41:13:95:04:2e:13:ff:60:41:a7:6a:91: 2f:dc:8e:12:4c:36:31:d7:d9:de:03:ff:5a:e5:b4: 37:b9:48:85:2c:de:5b:cd:c5:83:1e:fd:37:19:5b: 77:f5:55:53:1a:02:63:ec:e2:c0:23:a3:35:fe:f3: 08:cd:9c:9e:e3:a6:9c:c5:c0:b1:90:60:e1:df:25: ff:c0:e8:7c:57:0f:b6:ae:fc:64:22:32:6e:82:e8: d5:8d:9e:44:be:81:9c:14:5a:16:33:56:d8:da:00: 14:ec:77:43:22:b0:c1:2c:51:8d:70:0c:3b:f0:d0: e4:75:f2:5a:8f:f9:46:b7:5a:4f:14:f5:76:87:f2: b8:58:66:15:fb:f6:c7:e7:1c:3c:b7:de:85:11:7d: ad:19 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 7E:28:77:5B:CB:D0:E5:2E:73:C1:AD:C6:AA:D9:19:99:00:EC:0F:06 X509v3 Authority Key Identifier: keyid:FF:31:49:24:73:A7:8C:6F:E9:F5:39:F9:FA:7D:22:52:56:0A:2B:7E X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/_zFJJHOnjG_p9Tn5-n0iUlYKK34.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/c3/1b4105-3471-4592-bf07-73fd3bc19aa7/1/_zFJJHOnjG_p9Tn5-n0iUlYKK34.mft X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/c3/1b4105-3471-4592-bf07-73fd3bc19aa7/1/_zFJJHOnjG_p9Tn5-n0iUlYKK34.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption a1:c8:1b:a2:06:62:fb:d2:5e:26:ed:c0:fb:f1:81:51:2e:44: b5:be:0f:44:35:30:6f:59:25:7f:00:2b:03:6d:83:cf:b0:18: 6e:68:8a:72:5d:eb:7a:6b:dd:09:17:47:d5:ad:8b:ed:9a:2c: 9d:ae:11:72:b2:bb:52:f3:6a:4f:98:e2:a7:0a:89:83:7d:02: a0:95:88:a5:b6:90:d2:61:9e:e1:5e:3a:c6:c9:5f:ef:d8:a8: 6b:2f:f8:23:76:e9:b7:94:03:1e:6b:59:b1:23:e0:2f:84:69: d5:fd:7c:de:5f:95:e7:ea:1b:d1:bc:1e:9c:75:70:10:ae:4a: 98:bd:0d:45:dc:2c:c4:91:3f:a7:f1:87:80:12:c8:e5:01:08: e4:e1:a7:17:8f:f1:a9:62:55:2e:ec:f7:31:98:cd:25:68:a1: af:10:f7:01:0f:ee:9f:c2:42:a9:ef:2e:b2:bb:10:20:f5:06: ac:c5:e1:b9:4d:c5:99:41:96:5a:f7:91:42:9b:cf:40:f0:61: 1e:8a:b7:52:09:c9:ff:d0:cc:e8:19:3d:fb:c8:c1:cd:12:c2: 7b:84:35:f0:8c:cc:b3:c8:10:47:df:ed:dd:cc:00:f2:af:62: ce:d5:db:f6:da:95:72:59:41:d3:cd:ea:e9:2c:62:9b:28:5d: 90:a5:30:e6 -----BEGIN CERTIFICATE----- MIIFFjCCA/6gAwIBAgISAZoiG38q/7MbRpPPF64Rk+9VMA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKGZmMzE0OTI0NzNhNzhjNmZlOWY1MzlmOWZhN2QyMjUyNTYw YTJiN2UwHhcNMjUxMDI2MjAwMDE4WhcNMjUxMDI3MjAwMDE4WjAzMTEwLwYDVQQD Eyg3ZTI4Nzc1YmNiZDBlNTJlNzNjMWFkYzZhYWQ5MTk5OTAwZWMwZjA2MIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAlgPTYZuG/UPdj7F+LQagoYSFxBX2 5MIsVapapGlLLm+nJQ7p0EZRyNPJaIj7uQG/RCzeE7I2XuxMzRVAOjkIAcVcWQkG DjhKZVfcoMXJBniC++/E063slNCJ1ZjiMWXdLiCH/UIa9nXISBZBE5UELhP/YEGn apEv3I4STDYx19neA/9a5bQ3uUiFLN5bzcWDHv03GVt39VVTGgJj7OLAI6M1/vMI zZye46acxcCxkGDh3yX/wOh8Vw+2rvxkIjJugujVjZ5EvoGcFFoWM1bY2gAU7HdD IrDBLFGNcAw78NDkdfJaj/lGt1pPFPV2h/K4WGYV+/bH5xw8t96FEX2tGQIDAQAB o4ICIjCCAh4wHQYDVR0OBBYEFH4od1vL0OUuc8GtxqrZGZkA7A8GMB8GA1UdIwQY MBaAFP8xSSRzp4xv6fU5+fp9IlJWCit+MA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvX3pGSkpIT25qR19wOVRuNS1uMGlVbFlLSzM0LmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC9jMy8xYjQxMDUtMzQ3MS00NTkyLWJmMDct NzNmZDNiYzE5YWE3LzEvX3pGSkpIT25qR19wOVRuNS1uMGlVbFlLSzM0Lm1mdDCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC9jMy8xYjQxMDUtMzQ3MS00NTkyLWJmMDctNzNmZDNiYzE5YWE3 LzEvX3pGSkpIT25qR19wOVRuNS1uMGlVbFlLSzM0LmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAocgbogZi +9JeJu3A+/GBUS5Etb4PRDUwb1klfwArA22Dz7AYbmiKcl3remvdCRdH1a2L7Zos na4RcrK7UvNqT5jipwqJg30CoJWIpbaQ0mGe4V46xslf79ioay/4I3bpt5QDHmtZ sSPgL4Rp1f183l+V5+ob0bwenHVwEK5KmL0NRdwsxJE/p/GHgBLI5QEI5OGnF4/x qWJVLuz3MZjNJWihrxD3AQ/un8JCqe8usrsQIPUGrMXhuU3FmUGWWveRQpvPQPBh Hoq3UgnJ/9DM6Bk9+8jBzRLCe4Q18IzMs8gQR9/t3cwA8q9iztXb9tqVcllB083q 6SximyhdkKUw5g== -----END CERTIFICATE-----Generated at Mon Oct 27 01:37:38 2025 by rpki-client