$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/c8/5759f6-93e2-4029-a49f-35ba267ded3b/1/DnX7T1KoKdE24pqaAlxjbRmuMo4.mft File: DnX7T1KoKdE24pqaAlxjbRmuMo4.mft (raw, json) Hash identifier: bIgTy+rwgWxVC0Xe36xwNuZyy4XQ8NN7evU0EXdj4Ng= Subject key identifier: F2:EA:10:C1:7B:A2:45:06:93:F1:80:69:DF:BB:DB:66:1C:9B:B5:8D Authority key identifier: 0E:75:FB:4F:52:A8:29:D1:36:E2:9A:9A:02:5C:63:6D:19:AE:32:8E Certificate issuer: /CN=0e75fb4f52a829d136e29a9a025c636d19ae328e Certificate serial: 019A559B216F125B30C4D6442E30514B26A8 Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/DnX7T1KoKdE24pqaAlxjbRmuMo4.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/c8/5759f6-93e2-4029-a49f-35ba267ded3b/1/DnX7T1KoKdE24pqaAlxjbRmuMo4.mft Manifest number: 0A63 Signing time: Wed 05 Nov 2025 20:00:21 +0000 Manifest this update: Wed 05 Nov 2025 20:00:21 +0000 Manifest next update: Thu 06 Nov 2025 20:00:21 +0000 Files and hashes: 1: 2i2Vy05Tg_e1ak_1Uk12CnilxHg.roa (hash: NqduqZJuAkmB6MV5SKQihh3yDbwkeeFnfpDnTNMY130=) 2: 73x2Y8rtkrW56QrQQDyvuiFLG40.roa (hash: oxRcUfzeJXkoQZbB0gN4SvScUE5rLGzaBI9pXSTycUY=) 3: 9V0vcgO-bdJZakQILqcfcNUVDzs.roa (hash: rTVAfA+3goVyX4gfp8i16RQoEb4IWxA+yVUwUEUJp9c=) 4: 9wVDQpp0z04zwfoESc_S5u9etZ0.roa (hash: +x8r2JMNLKJOL0pGTh/MSwGY9V5+DOeggrdlCFNLMkg=) 5: DEEKMObjh2dv97ksxPHzfvJBIUE.roa (hash: g8hI8D0q/fLifbYomnOLeWF4o33+VutdXsr+kOmxBJU=) 6: DnX7T1KoKdE24pqaAlxjbRmuMo4.crl (hash: 2pqxb8HtFCCTymHFZ4bPLLsPV2dyrgSnVibXeV18zlI=) 7: GZgpng6Ot_FGRMQou9o62VcEekY.roa (hash: LX9b2Js5i118pOJ0Nzr+pm+rZAe5EZDelGHWiSHQOWA=) 8: KX36I7dSkLFi2aH0eqBcDdn1RlA.roa (hash: uMMjk83OkXZQb4cTo6pJ1weYcZ0/vJkq+xb1gidjyYA=) 9: OjaH7K6CfyojVS6c46fulaH1p-M.roa (hash: +oZE9RnQm2ybyt6c5+lMZS7HBhz+F/aKH1dTBent0OM=) 10: WggPonyi31b-yIkSaCuExsTR9U0.roa (hash: tkUrHPw54S3hnUlb390kJ2ECtbQXaVRTzWQhKus6rlQ=) 11: cJ1rW8VClyRweGHbeEMtWBhnXAQ.roa (hash: xDtfcFeuvoc7H53dx6XMFpyYCc4Qq+FPUImWBrlN+70=) 12: fkiMonxbwz3kZc8YkJyvn2qIywM.roa (hash: fqrrGCyxmQcRYifeeyyNsSENvJ1MUubmLT6QjBEi5nc=) 13: hirG0wCdPPp74UU2BJCRBx2I3xI.roa (hash: NoA4bfTe2eDgcbMz4bkkr7hReCXWcPMZ0ab/qV2+EuU=) 14: yQ91zssiLccRHA5nLDLCbHVrzwY.roa (hash: jHNMPrDscbkXMeLXgNIGaBErBrBnGqdgI+yTuRlxq7Q=) 15: yohJslaqJeqxG9ZdmhfVBivAGaE.roa (hash: SxCXBWVxQCB+hqHsFFhyla2B81f/O/PjbQmRobaYZP8=) Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/c8/5759f6-93e2-4029-a49f-35ba267ded3b/1/DnX7T1KoKdE24pqaAlxjbRmuMo4.crl rsync://rpki.ripe.net/repository/DEFAULT/c8/5759f6-93e2-4029-a49f-35ba267ded3b/1/DnX7T1KoKdE24pqaAlxjbRmuMo4.mft rsync://rpki.ripe.net/repository/DEFAULT/DnX7T1KoKdE24pqaAlxjbRmuMo4.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Thu 06 Nov 2025 20:00:21 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9a:55:9b:21:6f:12:5b:30:c4:d6:44:2e:30:51:4b:26:a8 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=0e75fb4f52a829d136e29a9a025c636d19ae328e Validity Not Before: Nov 5 20:00:21 2025 GMT Not After : Nov 6 20:00:21 2025 GMT Subject: CN=f2ea10c17ba2450693f18069dfbbdb661c9bb58d Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:9b:e7:9f:20:39:36:ec:81:96:b0:11:a1:37:6f: d0:ea:ea:9c:d9:b1:88:0a:cf:88:b3:fd:3a:ac:ca: 71:20:8e:b2:3c:5c:32:95:23:30:83:44:f3:5a:5a: b3:61:46:fa:ed:85:9a:41:9e:fa:17:15:92:b3:1d: ed:73:84:3d:63:da:13:2e:8b:1c:62:cb:23:98:a6: 66:05:42:1d:4f:4f:28:6e:46:01:c0:e8:a6:23:28: e3:c6:68:a7:82:8f:ce:05:6b:ce:5c:11:b8:45:69: 05:98:c5:2f:aa:1f:75:70:2a:35:fe:18:b6:45:ca: 81:da:f8:08:e2:df:7f:42:8c:33:79:18:5c:82:2e: c3:18:2e:9c:74:48:03:ec:21:6a:12:c9:10:0a:05: ad:e8:26:22:27:1f:ca:b5:99:ea:d7:ed:3c:ad:14: 6f:31:46:7b:0c:0b:94:80:20:71:a4:74:03:90:f0: 96:b6:e8:ef:db:7c:7f:bf:66:3a:f9:4b:5c:51:36: 90:f2:4a:5c:18:b9:37:56:e9:b1:e2:bd:83:f9:ca: 83:12:15:fd:3d:be:d2:55:87:ac:1e:db:11:89:98: 1c:71:67:f4:ef:89:1d:8f:b5:3d:f1:aa:32:05:fd: 3c:f1:d4:79:a1:3f:12:d2:a0:39:ab:ae:fc:2b:24: 60:99 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: F2:EA:10:C1:7B:A2:45:06:93:F1:80:69:DF:BB:DB:66:1C:9B:B5:8D X509v3 Authority Key Identifier: keyid:0E:75:FB:4F:52:A8:29:D1:36:E2:9A:9A:02:5C:63:6D:19:AE:32:8E X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/DnX7T1KoKdE24pqaAlxjbRmuMo4.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/c8/5759f6-93e2-4029-a49f-35ba267ded3b/1/DnX7T1KoKdE24pqaAlxjbRmuMo4.mft X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/c8/5759f6-93e2-4029-a49f-35ba267ded3b/1/DnX7T1KoKdE24pqaAlxjbRmuMo4.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 70:87:04:d7:46:17:7f:c3:e6:c3:c1:95:fd:27:cb:71:9a:01: d6:44:56:1b:77:ed:1b:4b:95:b6:56:9b:6c:1c:35:66:6a:23: e5:ec:7e:21:bd:6a:f0:98:e0:59:da:a9:9b:2d:c6:d7:4c:b9: 4d:66:e0:d7:b8:b1:38:94:fb:8b:16:40:fb:e1:76:52:72:ad: 08:95:c9:ab:19:db:15:f2:fd:80:bf:32:5b:38:94:45:8d:d1: f4:60:84:00:c6:dd:29:53:49:fa:87:b8:ff:4a:ed:7c:44:a7: e5:02:6e:09:fc:f0:ee:a4:11:88:b5:a5:cc:86:0d:cd:a0:ee: 0c:08:a0:65:c4:bf:86:a0:8e:e4:04:34:85:20:02:39:24:9f: d5:56:eb:f0:07:fd:95:84:f4:b7:c2:07:cb:ee:85:bd:66:2c: db:13:ec:fc:9b:83:f0:a9:df:68:56:ca:ff:59:e3:fa:47:a6: 28:17:a8:53:77:de:4c:c3:34:f2:80:fd:78:b3:29:0b:77:bc: b3:c2:dd:41:39:77:24:26:d4:78:bf:04:ab:65:de:8a:6b:40: e5:fc:a1:a4:78:b6:41:8f:88:5b:e2:77:55:f9:a4:cb:4a:c7: a6:5a:67:d4:78:e0:19:3e:f1:da:a9:84:31:f2:7d:10:71:26: 3e:9f:75:15 -----BEGIN CERTIFICATE----- MIIFFjCCA/6gAwIBAgISAZpVmyFvElswxNZELjBRSyaoMA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKDBlNzVmYjRmNTJhODI5ZDEzNmUyOWE5YTAyNWM2MzZkMTlh ZTMyOGUwHhcNMjUxMTA1MjAwMDIxWhcNMjUxMTA2MjAwMDIxWjAzMTEwLwYDVQQD EyhmMmVhMTBjMTdiYTI0NTA2OTNmMTgwNjlkZmJiZGI2NjFjOWJiNThkMIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAm+efIDk27IGWsBGhN2/Q6uqc2bGI Cs+Is/06rMpxII6yPFwylSMwg0TzWlqzYUb67YWaQZ76FxWSsx3tc4Q9Y9oTLosc YssjmKZmBUIdT08obkYBwOimIyjjxmingo/OBWvOXBG4RWkFmMUvqh91cCo1/hi2 RcqB2vgI4t9/QowzeRhcgi7DGC6cdEgD7CFqEskQCgWt6CYiJx/KtZnq1+08rRRv MUZ7DAuUgCBxpHQDkPCWtujv23x/v2Y6+UtcUTaQ8kpcGLk3Vumx4r2D+cqDEhX9 Pb7SVYesHtsRiZgccWf074kdj7U98aoyBf088dR5oT8S0qA5q678KyRgmQIDAQAB o4ICIjCCAh4wHQYDVR0OBBYEFPLqEMF7okUGk/GAad+722Ycm7WNMB8GA1UdIwQY MBaAFA51+09SqCnRNuKamgJcY20ZrjKOMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvRG5YN1QxS29LZEUyNHBxYUFseGpiUm11TW80LmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC9jOC81NzU5ZjYtOTNlMi00MDI5LWE0OWYt MzViYTI2N2RlZDNiLzEvRG5YN1QxS29LZEUyNHBxYUFseGpiUm11TW80Lm1mdDCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC9jOC81NzU5ZjYtOTNlMi00MDI5LWE0OWYtMzViYTI2N2RlZDNi LzEvRG5YN1QxS29LZEUyNHBxYUFseGpiUm11TW80LmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAcIcE10YX f8Pmw8GV/SfLcZoB1kRWG3ftG0uVtlabbBw1Zmoj5ex+Ib1q8JjgWdqpmy3G10y5 TWbg17ixOJT7ixZA++F2UnKtCJXJqxnbFfL9gL8yWziURY3R9GCEAMbdKVNJ+oe4 /0rtfESn5QJuCfzw7qQRiLWlzIYNzaDuDAigZcS/hqCO5AQ0hSACOSSf1Vbr8Af9 lYT0t8IHy+6FvWYs2xPs/JuD8KnfaFbK/1nj+kemKBeoU3feTMM08oD9eLMpC3e8 s8LdQTl3JCbUeL8Eq2XeimtA5fyhpHi2QY+IW+J3Vfmky0rHplpn1HjgGT7x2qmE MfJ9EHEmPp91FQ== -----END CERTIFICATE-----Generated at Thu Nov 6 04:23:06 2025 by rpki-client