$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/cc/051fa2-c580-4a02-a186-e69f7a5d2d90/1/8P8sYimvdjqZ9TSaMlEN9KRSYUM.mft File: 8P8sYimvdjqZ9TSaMlEN9KRSYUM.mft (raw, json) Hash identifier: DTFLNWz3kU74mnnFR+1v5a8Py/eQ9gV7rv8/yCOtqms= Subject key identifier: 66:9B:D4:03:8A:89:AB:CB:FC:C7:6B:BA:7E:1F:96:F7:BC:37:79:FA Authority key identifier: F0:FF:2C:62:29:AF:76:3A:99:F5:34:9A:32:51:0D:F4:A4:52:61:43 Certificate issuer: /CN=f0ff2c6229af763a99f5349a32510df4a4526143 Certificate serial: 019A1C5047FC9ECEA04F69DD33DA23C437C3 Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/8P8sYimvdjqZ9TSaMlEN9KRSYUM.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/cc/051fa2-c580-4a02-a186-e69f7a5d2d90/1/8P8sYimvdjqZ9TSaMlEN9KRSYUM.mft Manifest number: 16F7 Signing time: Sat 25 Oct 2025 17:00:14 +0000 Manifest this update: Sat 25 Oct 2025 17:00:14 +0000 Manifest next update: Sun 26 Oct 2025 17:00:14 +0000 Files and hashes: 1: 00x2a7vYcUP_RgzqZlJDShLq9Do.roa (hash: cq08qt5t6pt7+g4zB6xtHZuctjeJqy9pw/L/lk8TYFo=) 2: 8P8sYimvdjqZ9TSaMlEN9KRSYUM.crl (hash: Z9bXir4SCgUvJGyxgRBavigFCm2piDGLGl0F5Y1eDD8=) 3: KVMzJG-tiBiXKGfDbX7s-fqSUcs.roa (hash: izdiO/l04uY0Tl9GP7xbaa4HsWMYkrOgbs0SiG0a1K8=) 4: OBC2jp5FIHT7G9c2m1xsJUD2ivs.roa (hash: DrwuyysosoB70lBjSllnHo3rVU0U0NusilzO8tRi9Q0=) 5: OxF-ngX6YGUArZrbAYmh9hpGzkU.roa (hash: zhEaR7GNPbf+2lOaH8uFUPJFKzbpuLS5x4CvU7dkxPs=) 6: Q2Pg2GNHELVKyFoNgxOuT8YFvLY.roa (hash: DsyRU7FSw+3XDKbBM9HrtgkzYSVPnqWwqknbD6CWVSU=) 7: RO-InVXPYoHaB1ZpM-19yr94dQs.roa (hash: 8Y6VcUcgO4alufdIJ4djN2KAnB4AyYetp1VZzDDuyNk=) 8: TbcAJ-7kgZbLEMeBArn-aI2s0Oc.roa (hash: ebCgIhbDpPxtlRtDjitUarjC0W1nxe0ujpocy11Koxs=) 9: _gM5SG_4QQqKocZtcQPCR80SAmI.roa (hash: ee8TJS3VrEj5YXrt15hISXpN3dVXM3P5ROyjlVEMHSs=) 10: fG6If6WZh4pXAVRu1gEQ7wbPbEs.roa (hash: OIBSpF8oXZotrR8RVX6KacBPnJZCoNiFLIZ7aWyayQU=) 11: gfQeyx6Q7sjS4Xpny9IUQ8tQxLY.roa (hash: zrq/geD7ajZHxMLm7OvFbnGGXeIS14GfMNfAscurlR8=) Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/cc/051fa2-c580-4a02-a186-e69f7a5d2d90/1/8P8sYimvdjqZ9TSaMlEN9KRSYUM.crl rsync://rpki.ripe.net/repository/DEFAULT/cc/051fa2-c580-4a02-a186-e69f7a5d2d90/1/8P8sYimvdjqZ9TSaMlEN9KRSYUM.mft rsync://rpki.ripe.net/repository/DEFAULT/8P8sYimvdjqZ9TSaMlEN9KRSYUM.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Sun 26 Oct 2025 17:00:14 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9a:1c:50:47:fc:9e:ce:a0:4f:69:dd:33:da:23:c4:37:c3 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=f0ff2c6229af763a99f5349a32510df4a4526143 Validity Not Before: Oct 25 17:00:14 2025 GMT Not After : Oct 26 17:00:14 2025 GMT Subject: CN=669bd4038a89abcbfcc76bba7e1f96f7bc3779fa Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:a4:7c:3b:55:00:70:57:26:60:a2:84:13:e4:c6: b7:ed:84:93:fa:29:ea:37:e7:2a:91:69:42:b3:14: 3c:71:68:95:c4:87:00:36:82:af:0e:7e:65:ab:f8: 3f:4d:67:b3:e2:4d:bf:cb:a6:67:9d:28:90:6d:70: 8f:75:4f:00:e9:fe:e5:88:fb:dc:a3:9c:32:54:6a: 46:9d:7c:a6:8b:8a:2a:13:b6:df:66:d9:0b:5a:09: 8a:bf:33:03:80:ef:01:65:eb:eb:07:e9:b0:bc:fb: 4e:28:bb:0a:d7:b5:30:8f:f5:91:f9:16:db:93:4a: 14:d7:02:63:ce:a4:16:0c:3b:0e:60:27:2c:01:9d: 59:3c:0d:b4:e7:89:c2:48:27:78:e3:43:bd:44:d5: ef:1d:91:ce:c5:41:06:a7:d9:ac:af:3d:00:cc:a8: a5:34:d3:d9:5e:c8:4e:d1:60:f3:03:0b:4b:2a:0b: b2:2c:2e:f6:fe:db:c6:7b:4e:b8:42:58:6d:81:81: 1e:aa:36:98:88:6c:b3:03:84:0c:e2:56:8e:6b:f5: 9d:5e:77:0a:f5:40:ca:48:26:22:57:07:02:f8:10: 4c:5d:5e:a3:7a:48:9b:90:8b:87:64:1c:6a:89:c6: 34:d8:5f:f1:75:b2:40:ed:f7:10:98:24:ad:be:ee: ad:0f Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 66:9B:D4:03:8A:89:AB:CB:FC:C7:6B:BA:7E:1F:96:F7:BC:37:79:FA X509v3 Authority Key Identifier: keyid:F0:FF:2C:62:29:AF:76:3A:99:F5:34:9A:32:51:0D:F4:A4:52:61:43 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/8P8sYimvdjqZ9TSaMlEN9KRSYUM.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/cc/051fa2-c580-4a02-a186-e69f7a5d2d90/1/8P8sYimvdjqZ9TSaMlEN9KRSYUM.mft X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/cc/051fa2-c580-4a02-a186-e69f7a5d2d90/1/8P8sYimvdjqZ9TSaMlEN9KRSYUM.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 77:95:69:2b:03:0f:57:e7:4a:52:b5:8b:34:fb:3f:a6:c5:33: c5:0b:09:8a:63:5c:e5:e0:cc:5b:21:57:08:f4:90:14:1b:58: 76:0a:d0:34:1b:92:c9:76:3b:38:f4:76:a8:25:8b:64:ad:f8: 8c:84:be:07:8a:15:d5:14:a0:fd:46:2e:3e:2d:e6:45:63:fe: 09:fe:a7:f0:25:5c:cf:17:a5:04:06:3f:95:e0:2a:0a:60:02: ea:12:d2:66:e7:06:ad:c2:cf:c7:69:8b:6e:d9:48:f0:1a:ef: eb:99:51:5a:6a:6d:f1:f3:e6:2a:3b:45:79:ae:71:3d:88:0e: 5d:80:d9:3e:95:06:9a:db:82:5b:87:30:d0:23:74:82:83:ad: 56:f9:4c:2c:38:bd:c4:f3:2b:66:58:6e:c8:dc:f0:44:40:ab: 50:75:23:4c:24:2f:08:01:31:9c:2d:83:7a:86:6c:2b:53:9b: 07:cb:aa:61:c1:a7:8b:8e:b0:16:20:81:c8:99:a3:e0:c0:e8: ff:0b:53:ef:e4:82:b8:a8:66:b9:37:3b:d0:ea:e9:97:79:c8: 70:4d:ff:8d:45:d0:6b:41:34:10:61:63:fe:b4:c9:ed:2a:b3: b2:2a:02:88:93:3e:24:04:40:14:7c:ba:62:47:0a:be:98:0f: 4f:c7:3c:4c -----BEGIN CERTIFICATE----- MIIFFjCCA/6gAwIBAgISAZocUEf8ns6gT2ndM9ojxDfDMA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKGYwZmYyYzYyMjlhZjc2M2E5OWY1MzQ5YTMyNTEwZGY0YTQ1 MjYxNDMwHhcNMjUxMDI1MTcwMDE0WhcNMjUxMDI2MTcwMDE0WjAzMTEwLwYDVQQD Eyg2NjliZDQwMzhhODlhYmNiZmNjNzZiYmE3ZTFmOTZmN2JjMzc3OWZhMIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEApHw7VQBwVyZgooQT5Ma37YST+inq N+cqkWlCsxQ8cWiVxIcANoKvDn5lq/g/TWez4k2/y6ZnnSiQbXCPdU8A6f7liPvc o5wyVGpGnXymi4oqE7bfZtkLWgmKvzMDgO8BZevrB+mwvPtOKLsK17Uwj/WR+Rbb k0oU1wJjzqQWDDsOYCcsAZ1ZPA2054nCSCd440O9RNXvHZHOxUEGp9msrz0AzKil NNPZXshO0WDzAwtLKguyLC72/tvGe064QlhtgYEeqjaYiGyzA4QM4laOa/WdXncK 9UDKSCYiVwcC+BBMXV6jekibkIuHZBxqicY02F/xdbJA7fcQmCStvu6tDwIDAQAB o4ICIjCCAh4wHQYDVR0OBBYEFGab1AOKiavL/Mdrun4flve8N3n6MB8GA1UdIwQY MBaAFPD/LGIpr3Y6mfU0mjJRDfSkUmFDMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvOFA4c1lpbXZkanFaOVRTYU1sRU45S1JTWVVNLmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC9jYy8wNTFmYTItYzU4MC00YTAyLWExODYt ZTY5ZjdhNWQyZDkwLzEvOFA4c1lpbXZkanFaOVRTYU1sRU45S1JTWVVNLm1mdDCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC9jYy8wNTFmYTItYzU4MC00YTAyLWExODYtZTY5ZjdhNWQyZDkw LzEvOFA4c1lpbXZkanFaOVRTYU1sRU45S1JTWVVNLmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAd5VpKwMP V+dKUrWLNPs/psUzxQsJimNc5eDMWyFXCPSQFBtYdgrQNBuSyXY7OPR2qCWLZK34 jIS+B4oV1RSg/UYuPi3mRWP+Cf6n8CVczxelBAY/leAqCmAC6hLSZucGrcLPx2mL btlI8Brv65lRWmpt8fPmKjtFea5xPYgOXYDZPpUGmtuCW4cw0CN0goOtVvlMLDi9 xPMrZlhuyNzwRECrUHUjTCQvCAExnC2DeoZsK1ObB8uqYcGni46wFiCByJmj4MDo /wtT7+SCuKhmuTc70Orpl3nIcE3/jUXQa0E0EGFj/rTJ7SqzsioCiJM+JARAFHy6 YkcKvpgPT8c8TA== -----END CERTIFICATE-----Generated at Sun Oct 26 03:15:02 2025 by rpki-client