$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/c9/40498e-d1c0-484c-abcb-61e7f40d5dd6/1/rr85Ti8bJRyI2YiocWEIRYB4bvU.mft File: rr85Ti8bJRyI2YiocWEIRYB4bvU.mft (raw, json) Hash identifier: v5Sq6NKlhw/9GmAxwblxxKx6I8LvpATzDwva/TqsfEE= Subject key identifier: 04:25:66:4F:C0:80:12:58:A8:92:95:37:78:8D:53:4A:86:D4:75:13 Authority key identifier: AE:BF:39:4E:2F:1B:25:1C:88:D9:88:A8:71:61:08:45:80:78:6E:F5 Certificate issuer: /CN=aebf394e2f1b251c88d988a87161084580786ef5 Certificate serial: 019A496060A36EEB4D93DB4583E480524C1F Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/rr85Ti8bJRyI2YiocWEIRYB4bvU.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/c9/40498e-d1c0-484c-abcb-61e7f40d5dd6/1/rr85Ti8bJRyI2YiocWEIRYB4bvU.mft Manifest number: 1722 Signing time: Mon 03 Nov 2025 11:00:44 +0000 Manifest this update: Mon 03 Nov 2025 11:00:44 +0000 Manifest next update: Tue 04 Nov 2025 11:00:44 +0000 Files and hashes: 1: 0M_CHtTZz2ksD2BrxQYB5GYr6Qs.roa (hash: pjePI9MMIzsxZCozr1MX0ua7tggMW3H280y5yB3P7S0=) 2: 1-_mCNfP9_HNiBcEsvWHOFnGkC9I.roa (hash: JsQNy89vRBMXhfgHBZLMyPK1KVQmDn747eH7PkqTbv4=) 3: 499vYtwuw8upiAA2ubHtry-MPMw.roa (hash: Z3mdQWlNWDCy7MpQvjVwxOFHXRgVUsKCd9CYyZydkdQ=) 4: BV9MkYw-noIEhqphKumJe_rAYPw.roa (hash: cTycQR7uMvIZ+ka9U/Z707XPur1pq5RdGRaj9s/WBEk=) 5: C9bq6HqiO8wvPt8Ohvw7Ya0CzfI.roa (hash: eBedAMyLvvyEc8yS2VDwWUUS44f1pIhLP9yn06vWvAA=) 6: L3ZGNHnhgVbtJA6v9_KfCLPdQu4.roa (hash: tRfv/CcITA5fhGSfuor8bEI1B/6QYSwrTAH88Vxz5+8=) 7: c_qSQSef9yQq7ko-zsOrz05POQI.roa (hash: FNYiHqlJ6193udyi9UzOaM0voKaXuvqgwAhp2rGz6i4=) 8: rq3_2EMmh0cv5ivlO8JPPUeogQc.roa (hash: 9kTdzZUfT/wSfRhG2PTu31/f9X4NTLfSEK/53blCYJ4=) 9: rr85Ti8bJRyI2YiocWEIRYB4bvU.crl (hash: lkDt4qRWM+ZdGUo3kjCWqWWrWfW/AJYwpWSWFxLf2QY=) 10: uFaCHWPgxrsotozK3-PvWIlEI14.roa (hash: E71w1Kj/9g7CI68LBGPMUUdmv1Dhxwi441Gs522xPmQ=) Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/c9/40498e-d1c0-484c-abcb-61e7f40d5dd6/1/rr85Ti8bJRyI2YiocWEIRYB4bvU.crl rsync://rpki.ripe.net/repository/DEFAULT/c9/40498e-d1c0-484c-abcb-61e7f40d5dd6/1/rr85Ti8bJRyI2YiocWEIRYB4bvU.mft rsync://rpki.ripe.net/repository/DEFAULT/rr85Ti8bJRyI2YiocWEIRYB4bvU.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Tue 04 Nov 2025 11:00:44 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9a:49:60:60:a3:6e:eb:4d:93:db:45:83:e4:80:52:4c:1f Signature Algorithm: sha256WithRSAEncryption Issuer: CN=aebf394e2f1b251c88d988a87161084580786ef5 Validity Not Before: Nov 3 11:00:44 2025 GMT Not After : Nov 4 11:00:44 2025 GMT Subject: CN=0425664fc0801258a8929537788d534a86d47513 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:d2:82:11:80:16:6a:88:ae:f6:a9:14:0e:20:02: 0d:4e:79:7d:27:0e:b1:62:e6:78:c2:f1:13:dc:dd: 14:d2:7a:67:ac:e9:95:74:f0:29:1b:5f:3f:65:5a: 28:db:11:12:43:b8:6f:81:fb:07:36:3d:4f:83:5e: 9d:ea:32:70:70:4e:1a:b3:8d:cb:ef:6a:9a:9e:dd: 87:79:c5:f3:38:d9:d4:bf:f8:55:47:ab:96:6f:48: 05:8b:6a:e3:84:e3:bb:09:ff:dd:97:fb:0e:53:5d: 2d:5d:8d:64:df:35:b1:65:7f:c1:4a:8c:bf:a7:80: 2b:94:10:3e:cc:1c:41:fb:38:69:8e:b4:08:0a:1d: c6:9c:ec:81:ea:06:6b:e4:21:53:30:cc:d1:27:fa: 2f:02:84:ad:54:29:b0:2e:da:6e:71:61:da:04:a7: 40:09:f4:ce:85:96:12:39:f3:d8:58:2c:fb:d6:23: 74:ac:d4:c8:c2:92:12:f1:96:4d:6a:1f:24:61:34: 07:f4:b8:5c:60:7a:8f:55:0e:b2:72:65:db:5a:e8: 89:4a:12:42:6e:c7:c3:c8:11:2e:fa:6b:78:27:9e: 72:84:8b:c3:e8:28:53:48:0a:35:b6:ec:d3:ff:0b: f7:46:fc:8f:63:2c:ab:22:54:c5:19:99:7f:b9:17: 0a:ff Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 04:25:66:4F:C0:80:12:58:A8:92:95:37:78:8D:53:4A:86:D4:75:13 X509v3 Authority Key Identifier: keyid:AE:BF:39:4E:2F:1B:25:1C:88:D9:88:A8:71:61:08:45:80:78:6E:F5 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/rr85Ti8bJRyI2YiocWEIRYB4bvU.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/c9/40498e-d1c0-484c-abcb-61e7f40d5dd6/1/rr85Ti8bJRyI2YiocWEIRYB4bvU.mft X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/c9/40498e-d1c0-484c-abcb-61e7f40d5dd6/1/rr85Ti8bJRyI2YiocWEIRYB4bvU.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 25:b5:52:ae:29:fc:c1:24:b2:b7:dc:46:9e:47:f2:e2:b5:73: 0a:54:95:61:25:33:ab:16:23:a0:d5:19:d1:51:2a:91:0f:d1: a1:1b:69:40:f8:33:ac:08:e5:8c:9d:d3:e5:02:d4:f5:3c:9c: bc:85:c7:4c:98:e2:18:7f:e3:37:e0:20:56:d8:94:39:50:52: 12:5a:9f:47:68:ad:cc:f2:a6:c9:fa:df:2f:dc:75:57:76:43: 01:d8:b1:e6:84:8f:41:bb:e0:bf:da:d2:a6:81:48:2d:b0:5a: 04:42:42:33:c5:24:69:5c:ff:89:49:81:03:66:bb:15:36:8c: 46:98:5f:ad:ff:fe:64:40:ae:ff:cb:18:43:39:03:eb:1f:09: a8:0b:7d:d8:90:2b:e6:48:ac:70:8b:f5:a1:9d:8a:38:30:0c: c0:42:6b:a0:f5:d9:fb:52:eb:d1:c2:b5:31:e1:7c:28:57:53: 11:89:ab:6a:2c:69:4d:ec:3e:b6:3e:b9:61:8e:05:99:89:0b: 82:2d:fe:81:17:cb:4b:9c:6d:4d:e8:9e:69:f9:90:7d:5f:39: ad:42:d0:01:5d:50:92:a5:52:c1:08:64:1d:9c:6f:b1:16:ef: d7:ec:0c:b9:b4:9e:28:a7:eb:9e:6d:32:6f:5b:d4:44:a1:60: ca:9d:ca:bd -----BEGIN CERTIFICATE----- MIIFFjCCA/6gAwIBAgISAZpJYGCjbutNk9tFg+SAUkwfMA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKGFlYmYzOTRlMmYxYjI1MWM4OGQ5ODhhODcxNjEwODQ1ODA3 ODZlZjUwHhcNMjUxMTAzMTEwMDQ0WhcNMjUxMTA0MTEwMDQ0WjAzMTEwLwYDVQQD EygwNDI1NjY0ZmMwODAxMjU4YTg5Mjk1Mzc3ODhkNTM0YTg2ZDQ3NTEzMIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEA0oIRgBZqiK72qRQOIAINTnl9Jw6x YuZ4wvET3N0U0npnrOmVdPApG18/ZVoo2xESQ7hvgfsHNj1Pg16d6jJwcE4as43L 72qant2HecXzONnUv/hVR6uWb0gFi2rjhOO7Cf/dl/sOU10tXY1k3zWxZX/BSoy/ p4ArlBA+zBxB+zhpjrQICh3GnOyB6gZr5CFTMMzRJ/ovAoStVCmwLtpucWHaBKdA CfTOhZYSOfPYWCz71iN0rNTIwpIS8ZZNah8kYTQH9LhcYHqPVQ6ycmXbWuiJShJC bsfDyBEu+mt4J55yhIvD6ChTSAo1tuzT/wv3RvyPYyyrIlTFGZl/uRcK/wIDAQAB o4ICIjCCAh4wHQYDVR0OBBYEFAQlZk/AgBJYqJKVN3iNU0qG1HUTMB8GA1UdIwQY MBaAFK6/OU4vGyUciNmIqHFhCEWAeG71MA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvcnI4NVRpOGJKUnlJMllpb2NXRUlSWUI0YnZVLmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC9jOS80MDQ5OGUtZDFjMC00ODRjLWFiY2It NjFlN2Y0MGQ1ZGQ2LzEvcnI4NVRpOGJKUnlJMllpb2NXRUlSWUI0YnZVLm1mdDCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC9jOS80MDQ5OGUtZDFjMC00ODRjLWFiY2ItNjFlN2Y0MGQ1ZGQ2 LzEvcnI4NVRpOGJKUnlJMllpb2NXRUlSWUI0YnZVLmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAJbVSrin8 wSSyt9xGnkfy4rVzClSVYSUzqxYjoNUZ0VEqkQ/RoRtpQPgzrAjljJ3T5QLU9Tyc vIXHTJjiGH/jN+AgVtiUOVBSElqfR2itzPKmyfrfL9x1V3ZDAdix5oSPQbvgv9rS poFILbBaBEJCM8UkaVz/iUmBA2a7FTaMRphfrf/+ZECu/8sYQzkD6x8JqAt92JAr 5kiscIv1oZ2KODAMwEJroPXZ+1Lr0cK1MeF8KFdTEYmraixpTew+tj65YY4FmYkL gi3+gRfLS5xtTeieafmQfV85rULQAV1QkqVSwQhkHZxvsRbv1+wMubSeKKfrnm0y b1vURKFgyp3KvQ== -----END CERTIFICATE-----Generated at Mon Nov 3 20:24:25 2025 by rpki-client