$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/c4/11e5b3-43aa-4279-9441-7e8c6d4d9bef/1/_97EpGpubk-aktC6Lgs6tWWL4b0.mft File: _97EpGpubk-aktC6Lgs6tWWL4b0.mft (raw, json) Hash identifier: Xm71P8XXqVkTwLdABtrbJsRAZzsqJlN/uhLlIEtlvc0= Subject key identifier: 18:86:DF:E1:A7:A1:24:04:31:6A:9B:D1:10:A0:1D:4A:30:54:FE:80 Authority key identifier: FF:DE:C4:A4:6A:6E:6E:4F:9A:92:D0:BA:2E:0B:3A:B5:65:8B:E1:BD Certificate issuer: /CN=ffdec4a46a6e6e4f9a92d0ba2e0b3ab5658be1bd Certificate serial: 019A1C871E7435CE147B684BEE9B89950EA5 Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/_97EpGpubk-aktC6Lgs6tWWL4b0.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/c4/11e5b3-43aa-4279-9441-7e8c6d4d9bef/1/_97EpGpubk-aktC6Lgs6tWWL4b0.mft Manifest number: 1710 Signing time: Sat 25 Oct 2025 18:00:08 +0000 Manifest this update: Sat 25 Oct 2025 18:00:08 +0000 Manifest next update: Sun 26 Oct 2025 18:00:08 +0000 Files and hashes: 1: 9LGSNE38RZCTyouOtHVx3qVP6lw.roa (hash: ugV2YTVWDidN8y0vBVq2PfGkhQx7PuXVEwNoZCBbGX8=) 2: OsAkT1Bjc6Bx57ink5LVscASSVM.roa (hash: Me3jYRS4jKNnlOdyWwLlCaXNsCc57NzdmZ5lT79t3Rw=) 3: RmwlFKm2A6wCOU2tiPLTSzuhAA8.roa (hash: NB+w6tJSmFPHFd2FMxkqFpCOapIk+qQqzfmt3QzOsMk=) 4: UobB1JoTOzUGFpCCZFbxasjgqAA.roa (hash: ms0cbPIRl6WuE78I/a1I+geJkM+CYYhZiVIqQ6+fwVY=) 5: VHd5a_VapfxG7J2dY8XaTIvUAnI.roa (hash: qmUiIRsWjUguSkm/l6NKSA85XaSwk7dvLg/NHHYCogc=) 6: VuROyrWs92eKXOizp2Q-0fnpLR0.roa (hash: fMjWZ/dM7054cYWsnjZNa6zVf7FPSoCGvOyM76Sl6Mc=) 7: VxRGHdP__z9RHajqH60awAUqQgg.roa (hash: tIdE9ZmAuCmbV7t2it8DIWQnm6yvOgpE7cprrHK2On0=) 8: _97EpGpubk-aktC6Lgs6tWWL4b0.crl (hash: irZrGRH/O1djkFZsddggVCR/Bi5FHGmAMz7sjIyPAK0=) 9: iB5O2Dv_O9SgoFmPn7K4puMBzos.roa (hash: K+etiy0pRWQK1jSmyGFXzRfY6HxDEmZPOQqgSoVB5WI=) 10: pJnO9Ba6alCVKMIllyGL5_n-nHo.roa (hash: cF7/LpWh8txlnJKiWf+FQfbAzOZvclLDIIzD8uyNUD0=) 11: vWqmka3oaZQE1cXhvhKJIPN3ikY.roa (hash: wwmYNtR3Cqpxb6sHd4D0z140EddAwpyxzJ7dHxOqth4=) 12: zwTIjW4kVksFhIqqz0Hm86Td_eI.roa (hash: 4Gmw/YEt79d2ifSjcQjjCNUl4cViPsDbJFWDQ996oV4=) Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/c4/11e5b3-43aa-4279-9441-7e8c6d4d9bef/1/_97EpGpubk-aktC6Lgs6tWWL4b0.crl rsync://rpki.ripe.net/repository/DEFAULT/c4/11e5b3-43aa-4279-9441-7e8c6d4d9bef/1/_97EpGpubk-aktC6Lgs6tWWL4b0.mft rsync://rpki.ripe.net/repository/DEFAULT/_97EpGpubk-aktC6Lgs6tWWL4b0.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Sun 26 Oct 2025 11:00:03 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9a:1c:87:1e:74:35:ce:14:7b:68:4b:ee:9b:89:95:0e:a5 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=ffdec4a46a6e6e4f9a92d0ba2e0b3ab5658be1bd Validity Not Before: Oct 25 18:00:08 2025 GMT Not After : Oct 26 18:00:08 2025 GMT Subject: CN=1886dfe1a7a12404316a9bd110a01d4a3054fe80 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:b9:b3:80:98:0e:05:e1:95:25:64:bc:de:0d:60: 24:1e:b6:ba:e2:a9:54:62:32:11:d9:1d:86:5a:84: 9f:39:9e:81:24:58:83:a9:46:86:f1:9d:9c:f7:26: 9e:3a:42:76:2c:27:60:c4:34:c6:d4:1f:5d:85:79: 5c:75:ac:67:d8:58:6e:70:f6:1b:58:7f:b3:b1:2c: 20:6b:de:3c:0a:81:b7:5d:7a:18:ed:79:09:21:4c: 54:f3:fe:a6:a6:c4:be:69:16:9e:88:5c:56:55:b4: 11:00:6e:7a:99:95:bd:5c:a9:f7:4a:37:21:1b:b4: 26:63:63:61:3b:08:f8:03:e6:80:5d:5c:49:d4:55: 52:a7:98:58:6c:a4:bd:0f:2a:cc:d6:fd:94:09:7a: b9:56:f4:07:cf:4f:ff:60:37:32:d1:34:42:3d:25: 07:b3:78:20:43:f1:d8:d6:76:d6:24:9b:0a:df:25: f5:09:85:7c:da:f5:7d:7d:e5:dc:71:6c:83:27:7a: 02:7d:e1:0c:33:05:9b:b6:f2:bc:92:01:e0:05:1a: c1:06:9c:4b:e2:3f:4a:e1:67:16:d2:75:03:42:5a: e5:60:52:dd:84:2a:36:b3:c0:26:1f:c2:f1:c8:6a: 64:28:49:bb:88:2a:fd:c5:39:f8:f2:80:ef:ec:92: 59:8b Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 18:86:DF:E1:A7:A1:24:04:31:6A:9B:D1:10:A0:1D:4A:30:54:FE:80 X509v3 Authority Key Identifier: keyid:FF:DE:C4:A4:6A:6E:6E:4F:9A:92:D0:BA:2E:0B:3A:B5:65:8B:E1:BD X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/_97EpGpubk-aktC6Lgs6tWWL4b0.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/c4/11e5b3-43aa-4279-9441-7e8c6d4d9bef/1/_97EpGpubk-aktC6Lgs6tWWL4b0.mft X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/c4/11e5b3-43aa-4279-9441-7e8c6d4d9bef/1/_97EpGpubk-aktC6Lgs6tWWL4b0.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption ac:4b:e3:96:62:e2:be:6e:cc:a7:70:ac:51:59:90:f6:83:28: 7d:21:16:48:6a:66:a4:aa:08:19:bd:24:a2:5a:82:b8:59:f8: a6:37:e2:8e:9b:55:75:0d:a3:81:8d:c6:09:38:57:96:f0:0f: 92:3e:3a:fc:45:a2:78:27:06:fc:b7:de:6b:d1:c8:28:8c:b5: 10:63:f8:60:5e:69:3d:c5:e3:79:ff:11:99:3e:90:b9:97:c6: a6:96:99:09:a8:ab:eb:2c:ef:40:5e:90:6d:f0:7c:9a:30:12: 9f:d4:a9:45:d2:de:c4:cd:8f:e0:13:4f:d9:71:d5:d8:3b:5e: 0c:8d:bc:af:e5:4b:36:e2:d9:51:d1:91:a7:88:6c:aa:bf:76: 6a:78:e0:1e:25:2e:91:b4:7f:6f:e5:b3:d1:49:68:31:52:de: cb:cf:14:c2:32:ad:03:59:5e:33:42:e7:f0:2b:69:09:2a:b8: d1:79:5a:b6:1d:3f:a6:03:fa:24:90:f8:3b:85:2d:1e:32:50: a9:1b:65:08:a8:8c:e7:c3:54:0e:6f:34:c4:f2:53:c4:03:dd: 82:3f:cb:ac:6c:5d:11:77:13:a9:a0:c8:49:8a:f7:37:2d:e6: 56:42:3e:95:2d:d4:6e:b1:d5:6a:39:3e:32:2f:a7:ff:76:0e: 0a:88:9d:ff -----BEGIN CERTIFICATE----- MIIFFjCCA/6gAwIBAgISAZochx50Nc4Ue2hL7puJlQ6lMA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKGZmZGVjNGE0NmE2ZTZlNGY5YTkyZDBiYTJlMGIzYWI1NjU4 YmUxYmQwHhcNMjUxMDI1MTgwMDA4WhcNMjUxMDI2MTgwMDA4WjAzMTEwLwYDVQQD EygxODg2ZGZlMWE3YTEyNDA0MzE2YTliZDExMGEwMWQ0YTMwNTRmZTgwMIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAubOAmA4F4ZUlZLzeDWAkHra64qlU YjIR2R2GWoSfOZ6BJFiDqUaG8Z2c9yaeOkJ2LCdgxDTG1B9dhXlcdaxn2FhucPYb WH+zsSwga948CoG3XXoY7XkJIUxU8/6mpsS+aRaeiFxWVbQRAG56mZW9XKn3Sjch G7QmY2NhOwj4A+aAXVxJ1FVSp5hYbKS9DyrM1v2UCXq5VvQHz0//YDcy0TRCPSUH s3ggQ/HY1nbWJJsK3yX1CYV82vV9feXccWyDJ3oCfeEMMwWbtvK8kgHgBRrBBpxL 4j9K4WcW0nUDQlrlYFLdhCo2s8AmH8LxyGpkKEm7iCr9xTn48oDv7JJZiwIDAQAB o4ICIjCCAh4wHQYDVR0OBBYEFBiG3+GnoSQEMWqb0RCgHUowVP6AMB8GA1UdIwQY MBaAFP/exKRqbm5PmpLQui4LOrVli+G9MA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvXzk3RXBHcHViay1ha3RDNkxnczZ0V1dMNGIwLmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC9jNC8xMWU1YjMtNDNhYS00Mjc5LTk0NDEt N2U4YzZkNGQ5YmVmLzEvXzk3RXBHcHViay1ha3RDNkxnczZ0V1dMNGIwLm1mdDCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC9jNC8xMWU1YjMtNDNhYS00Mjc5LTk0NDEtN2U4YzZkNGQ5YmVm LzEvXzk3RXBHcHViay1ha3RDNkxnczZ0V1dMNGIwLmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEArEvjlmLi vm7Mp3CsUVmQ9oMofSEWSGpmpKoIGb0kolqCuFn4pjfijptVdQ2jgY3GCThXlvAP kj46/EWieCcG/Lfea9HIKIy1EGP4YF5pPcXjef8RmT6QuZfGppaZCair6yzvQF6Q bfB8mjASn9SpRdLexM2P4BNP2XHV2DteDI28r+VLNuLZUdGRp4hsqr92anjgHiUu kbR/b+Wz0UloMVLey88UwjKtA1leM0Ln8CtpCSq40Xlath0/pgP6JJD4O4UtHjJQ qRtlCKiM58NUDm80xPJTxAPdgj/LrGxdEXcTqaDISYr3Ny3mVkI+lS3UbrHVajk+ Mi+n/3YOCoid/w== -----END CERTIFICATE-----Generated at Sat Oct 25 20:12:11 2025 by rpki-client