$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/c5/9ab42a-df92-4e42-9e33-5c5892afa487/1/8E6yBPNYAEeIIk4vsY5NXnS-v40.mft File: 8E6yBPNYAEeIIk4vsY5NXnS-v40.mft (raw, json) Hash identifier: lOgn+3/rFIJvfasjD74k6BG/oOHhbGSnrkfN2HUYaoM= Subject key identifier: 82:BC:D8:08:8E:5F:92:AF:C2:0F:46:07:E4:4A:85:27:A3:65:4B:FE Authority key identifier: F0:4E:B2:04:F3:58:00:47:88:22:4E:2F:B1:8E:4D:5E:74:BE:BF:8D Certificate issuer: /CN=f04eb204f358004788224e2fb18e4d5e74bebf8d Certificate serial: 019A194FCBD85A86485635EAB277E9ADEE96 Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/8E6yBPNYAEeIIk4vsY5NXnS-v40.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/c5/9ab42a-df92-4e42-9e33-5c5892afa487/1/8E6yBPNYAEeIIk4vsY5NXnS-v40.mft Manifest number: 1115 Signing time: Sat 25 Oct 2025 03:00:51 +0000 Manifest this update: Sat 25 Oct 2025 03:00:51 +0000 Manifest next update: Sun 26 Oct 2025 03:00:51 +0000 Files and hashes: 1: 1gtsCJyHdZ_mz1Vmc6aYSOZRTug.roa (hash: i5FmepCDxpYMWJtIWumi8I2WhRPEkV925D+zrSFUKqc=) 2: 8E6yBPNYAEeIIk4vsY5NXnS-v40.crl (hash: xNqyFEbUZ4/eHLUjF4n15y39ViICN4dDFH49rOVw9Rs=) 3: AFN8OqvwZcsViNN-78O6BvKElME.roa (hash: gpOsJUC88/6LJdG6QKOWEGeO9P8/YN9o1I8OET+li9E=) 4: HzrOiNg5IGbvxaY6EJtaFTiPwJc.roa (hash: YVHrJ9qFMIVBjiboinqQXWeAb+UlfN0QhYG5EqTl3JU=) 5: KuzmOknbrD4Lg71OoDCO-y0GoDQ.roa (hash: L4TpWALjC8fwxZDKVNiQiJm1WAVC/DpX7t4BNMww1vk=) 6: N-Bn6UoZzfA4_e9vqjwupkidrwM.roa (hash: P0ucGjyfHx1AsSd/Hp9hPmA5fgW6WVVitbxsp2xrVOM=) 7: Xw6d5Q0Ua1XRZl5MjugABbqCL-g.roa (hash: 7lcJjOAWe6HvAJ8ku7/K4ZXcDrrbdwoOF4w1DXALzIA=) 8: hFAl1HVJl_9l3iGKDXy7Q3YLL-4.roa (hash: t3lebss2cDykApymCPDX/VFxLKKQQSAwSa+9uLLWAvg=) 9: ij6-YE2XVidboU68JMPVKequ6tg.roa (hash: YEMop9i5KBqo0Emc5LLaJ2ZkaUOlrtnZjcsi8p8jPuQ=) 10: lmLPjrfNDPS9XohB9eEXKDTvTVw.roa (hash: YUDeNZCjz7C+nv1yj/KNPiCOaWxteb6jP1PE6tH/qfc=) 11: vir9lXd95VlX33FtFKeYsF-pV7c.roa (hash: qWwJG4kSEBMq0oRm7MvhT+tJgjjEqP9pDam2i3CMe+g=) 12: vwnatcxNwSZQjN_EAgtCA6gLjGQ.roa (hash: is+QjkNRgmAAQFm1WLdb+VI9EY3XXeS9tjv/htKBkks=) 13: wOKO5BfevHhq6oErWALub8pu8xU.roa (hash: JFoG8SyIRYLSlAyJTBoEWjYzWkPzFQdNMJLWFlUmxRU=) Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/c5/9ab42a-df92-4e42-9e33-5c5892afa487/1/8E6yBPNYAEeIIk4vsY5NXnS-v40.crl rsync://rpki.ripe.net/repository/DEFAULT/c5/9ab42a-df92-4e42-9e33-5c5892afa487/1/8E6yBPNYAEeIIk4vsY5NXnS-v40.mft rsync://rpki.ripe.net/repository/DEFAULT/8E6yBPNYAEeIIk4vsY5NXnS-v40.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Sun 26 Oct 2025 02:00:03 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9a:19:4f:cb:d8:5a:86:48:56:35:ea:b2:77:e9:ad:ee:96 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=f04eb204f358004788224e2fb18e4d5e74bebf8d Validity Not Before: Oct 25 03:00:51 2025 GMT Not After : Oct 26 03:00:51 2025 GMT Subject: CN=82bcd8088e5f92afc20f4607e44a8527a3654bfe Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:94:10:d1:2b:42:17:28:2e:f7:49:5e:30:55:f2: 5d:d1:be:62:d1:d1:e3:68:66:88:0b:99:39:f9:08: 4c:79:54:77:da:d5:31:cf:a6:74:0b:99:96:ab:ec: 89:5c:62:c7:12:85:ca:9c:da:1e:1c:1f:c9:bb:ff: 1b:32:d8:69:df:da:bf:be:82:ef:c8:8b:92:6c:e3: cf:ce:ff:81:43:b7:cf:89:ae:99:c1:30:80:37:ae: 35:a6:47:34:6b:26:0c:fb:fa:59:f2:5b:b3:3d:ab: 8b:b3:a6:18:7e:22:fc:6b:79:5c:96:a8:c2:9e:09: b2:8c:62:93:bb:03:30:ba:a7:7f:18:96:e2:ac:07: 4b:5d:6a:fb:0f:2d:05:9b:68:8a:52:21:95:8d:9d: 3d:ec:26:3d:d1:16:77:3f:6d:4d:9e:0f:37:80:e8: 8c:de:7d:c1:2d:79:6e:cb:b4:b6:53:f5:01:73:28: d2:70:5e:5e:39:b4:30:b5:d2:98:1b:46:cc:6e:d9: fc:73:7a:0a:92:6e:50:52:e3:3d:bb:9b:f9:bf:2f: 17:fb:88:b2:b8:17:7e:bd:03:67:52:f5:06:53:9b: ff:9f:43:e9:2a:3d:27:7a:47:10:dc:9e:92:55:8c: 85:d2:e8:e3:12:ad:e4:2c:1e:ac:43:b5:ad:a9:39: 5b:49 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 82:BC:D8:08:8E:5F:92:AF:C2:0F:46:07:E4:4A:85:27:A3:65:4B:FE X509v3 Authority Key Identifier: keyid:F0:4E:B2:04:F3:58:00:47:88:22:4E:2F:B1:8E:4D:5E:74:BE:BF:8D X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/8E6yBPNYAEeIIk4vsY5NXnS-v40.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/c5/9ab42a-df92-4e42-9e33-5c5892afa487/1/8E6yBPNYAEeIIk4vsY5NXnS-v40.mft X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/c5/9ab42a-df92-4e42-9e33-5c5892afa487/1/8E6yBPNYAEeIIk4vsY5NXnS-v40.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 99:50:02:06:cc:a8:da:ae:44:bb:89:3a:7c:4f:88:54:6a:37: d1:bf:75:2b:fa:f2:e2:eb:e1:12:a5:fd:21:82:86:ba:ea:bc: 7c:d1:40:75:d5:fe:5b:0f:29:df:40:d3:4a:61:c7:18:b5:86: ce:66:80:d3:e4:dd:47:de:c2:56:da:06:c1:29:3f:88:97:02: 31:1b:86:dc:99:d7:3c:a8:94:28:39:44:0f:8a:e1:12:1d:9d: ab:7c:f6:bd:df:5d:2f:c6:cf:79:3c:d7:37:40:d5:68:c8:f8: 5f:35:da:a6:2a:5f:8a:96:e4:a9:98:cf:7a:e0:16:6b:8f:b0: 72:84:0b:8c:74:87:85:0b:76:66:76:f7:ec:68:3a:0c:aa:ae: a0:f7:3b:70:fe:6a:6e:69:56:46:e3:a0:3b:b2:be:9e:e3:18: 1a:76:b6:64:81:48:f1:f7:f2:b3:d6:73:13:24:64:57:41:16: b4:0b:31:76:9d:9c:0c:9e:ae:52:ba:b4:07:54:7b:06:e6:c7: 97:99:d9:8c:ef:11:f8:6d:7b:4e:d6:be:da:20:f7:29:3a:16: 77:bf:db:b5:d0:08:ff:33:67:42:4e:d9:a6:cf:98:30:0c:6d: 9c:f7:88:4a:be:8d:05:2b:57:7b:a9:e9:97:fa:8e:60:ee:bb: 77:2b:72:88 -----BEGIN CERTIFICATE----- MIIFFjCCA/6gAwIBAgISAZoZT8vYWoZIVjXqsnfpre6WMA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKGYwNGViMjA0ZjM1ODAwNDc4ODIyNGUyZmIxOGU0ZDVlNzRi ZWJmOGQwHhcNMjUxMDI1MDMwMDUxWhcNMjUxMDI2MDMwMDUxWjAzMTEwLwYDVQQD Eyg4MmJjZDgwODhlNWY5MmFmYzIwZjQ2MDdlNDRhODUyN2EzNjU0YmZlMIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAlBDRK0IXKC73SV4wVfJd0b5i0dHj aGaIC5k5+QhMeVR32tUxz6Z0C5mWq+yJXGLHEoXKnNoeHB/Ju/8bMthp39q/voLv yIuSbOPPzv+BQ7fPia6ZwTCAN641pkc0ayYM+/pZ8luzPauLs6YYfiL8a3lclqjC ngmyjGKTuwMwuqd/GJbirAdLXWr7Dy0Fm2iKUiGVjZ097CY90RZ3P21Nng83gOiM 3n3BLXluy7S2U/UBcyjScF5eObQwtdKYG0bMbtn8c3oKkm5QUuM9u5v5vy8X+4iy uBd+vQNnUvUGU5v/n0PpKj0nekcQ3J6SVYyF0ujjEq3kLB6sQ7WtqTlbSQIDAQAB o4ICIjCCAh4wHQYDVR0OBBYEFIK82AiOX5Kvwg9GB+RKhSejZUv+MB8GA1UdIwQY MBaAFPBOsgTzWABHiCJOL7GOTV50vr+NMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvOEU2eUJQTllBRWVJSWs0dnNZNU5YblMtdjQwLmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC9jNS85YWI0MmEtZGY5Mi00ZTQyLTllMzMt NWM1ODkyYWZhNDg3LzEvOEU2eUJQTllBRWVJSWs0dnNZNU5YblMtdjQwLm1mdDCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC9jNS85YWI0MmEtZGY5Mi00ZTQyLTllMzMtNWM1ODkyYWZhNDg3 LzEvOEU2eUJQTllBRWVJSWs0dnNZNU5YblMtdjQwLmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAmVACBsyo 2q5Eu4k6fE+IVGo30b91K/ry4uvhEqX9IYKGuuq8fNFAddX+Ww8p30DTSmHHGLWG zmaA0+TdR97CVtoGwSk/iJcCMRuG3JnXPKiUKDlED4rhEh2dq3z2vd9dL8bPeTzX N0DVaMj4XzXapipfipbkqZjPeuAWa4+wcoQLjHSHhQt2Znb37Gg6DKquoPc7cP5q bmlWRuOgO7K+nuMYGna2ZIFI8ffys9ZzEyRkV0EWtAsxdp2cDJ6uUrq0B1R7BubH l5nZjO8R+G17Tta+2iD3KToWd7/btdAI/zNnQk7Zps+YMAxtnPeISr6NBStXe6np l/qOYO67dytyiA== -----END CERTIFICATE-----Generated at Sat Oct 25 11:34:33 2025 by rpki-client