$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/d0/1e04b8-1031-43f9-9667-8e6f878db5f4/1/71fC2dk6x8-bLxfKp4WbaYWzm50.mft File: 71fC2dk6x8-bLxfKp4WbaYWzm50.mft (raw, json) Hash identifier: n+KDNhl5LebLUbhYrDSy0mJLjfIRfgynnZPTd88wKHA= Subject key identifier: 08:16:E4:7E:E9:B7:C6:24:2B:59:23:BE:51:0B:14:A3:58:0B:84:D8 Authority key identifier: EF:57:C2:D9:D9:3A:C7:CF:9B:2F:17:CA:A7:85:9B:69:85:B3:9B:9D Certificate issuer: /CN=ef57c2d9d93ac7cf9b2f17caa7859b6985b39b9d Certificate serial: 019A04B630E662A94E8ACCCA9F9E3020ABD7 Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/71fC2dk6x8-bLxfKp4WbaYWzm50.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/d0/1e04b8-1031-43f9-9667-8e6f878db5f4/1/71fC2dk6x8-bLxfKp4WbaYWzm50.mft Manifest number: 132C Signing time: Tue 21 Oct 2025 03:00:40 +0000 Manifest this update: Tue 21 Oct 2025 03:00:40 +0000 Manifest next update: Wed 22 Oct 2025 03:00:40 +0000 Files and hashes: 1: 0SnEDSu2fch50mXfNCrgepjBXHI.roa (hash: An4Aho4+/IQv1xSA0visBRO6r1aot3IcatgSZ0mIirs=) 2: 1-C-0JGDbp3Otc_z0iBBVBpQZuq4.roa (hash: YGNYUtklrL1awHGcBtsuKJFxwbJZ7yDvoZ7r6abN1Jo=) 3: 4cYZBaSCfKx4xdTyV36QiAtkYH8.roa (hash: 4TbdTxLmlk8EX546dkAWoaHsA8UX5a3+NdKi5edH1kY=) 4: 71fC2dk6x8-bLxfKp4WbaYWzm50.crl (hash: yiXgMzcz0PqOyDThxtVxtJqnNZfPQeyC3GLqBH+U8UI=) 5: CFEprGG9zI2SPXEkfveiqcGkxys.roa (hash: zwoMXpp3WPmfn1e+WeBEAccAThpouC8C+SBbtldgA/c=) 6: OKnFbF9P91_ZXtKJ3LL2trYGZZA.roa (hash: REsU/w11Yq/eW46cSLfnRZY+9FwY7bx6z/QbRrdcMvw=) 7: RLjWAiBDW7OGzF_VcCkKg-SuzTE.roa (hash: DCBINTtLxKJQkC6BRMLb3TMqWlrNb5ZnwJro+/q+QhU=) 8: Xd2QaW60upMnqwQIBHXXIoPXPzs.roa (hash: +i6BQOs/QyU2pk+3pSoh+wtk4Cf+VFJXifr7WtqVoY4=) 9: XoElMCWSXeZbJRYtXiEJ_Emiz2A.roa (hash: LbkB9E2yx3Leo0MqKyox9NLbqbqscRyng+tbBGiff/4=) 10: aQ3kSZGYrFWGAxsW5cMfgI6PR2k.roa (hash: WV200zuYmYOFQxibHNHmLysdFj/S1kHqxW3IuzyrxUs=) 11: d3w3nqB5Kl-FSC0jSCG-gsD4dlY.roa (hash: 33QNQ+kF6mFEetO5Rno9ayPExXyzerB4sZWFH0Ulruk=) 12: kaXih0ftxLoxKevElyyNGY3Am90.roa (hash: VV+Kmbg3++xVZSuR6z9QplDGDyuGw9lzxK6+uDRXc2k=) 13: mMAwso5PyMiUkBDuP91mCU2ukBI.roa (hash: 8lAOzf9Ul80EHkivmkCJNmV8WShjC87n8hXocC2Jg4o=) 14: rL6AzulHQOLcRfhqRrPdMX43AzM.roa (hash: /p4sN3vL44k5lwQiWwAvoayVUuPAubPMAhf99ERn0+c=) 15: uMNtY7j6z6AKDi4NCpmKU3y2WZI.roa (hash: DlfYC3q2Yb6qbTE9YAPELWXUrj/i/KCW+dkXJEGCxlI=) 16: xE9QBs_-I-okZvOErWXLkoKDqmk.roa (hash: PCh0aczn6Bj3Hiz+iIpjZK10Xg+FpiTDJMX+WibJh2o=) 17: yedI6EpedZ28jyB60XNo0uK6oF8.roa (hash: hWsq9urJIZSeMGg4SgxXz+gEuiBCoRbdm4v/CAFQ2CU=) Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/d0/1e04b8-1031-43f9-9667-8e6f878db5f4/1/71fC2dk6x8-bLxfKp4WbaYWzm50.crl rsync://rpki.ripe.net/repository/DEFAULT/d0/1e04b8-1031-43f9-9667-8e6f878db5f4/1/71fC2dk6x8-bLxfKp4WbaYWzm50.mft rsync://rpki.ripe.net/repository/DEFAULT/71fC2dk6x8-bLxfKp4WbaYWzm50.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Tue 21 Oct 2025 22:00:03 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9a:04:b6:30:e6:62:a9:4e:8a:cc:ca:9f:9e:30:20:ab:d7 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=ef57c2d9d93ac7cf9b2f17caa7859b6985b39b9d Validity Not Before: Oct 21 03:00:40 2025 GMT Not After : Oct 22 03:00:40 2025 GMT Subject: CN=0816e47ee9b7c6242b5923be510b14a3580b84d8 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:c1:28:d3:0f:fa:be:80:1d:4e:ec:ef:d1:77:0d: cd:d7:66:97:6b:8e:7c:e4:d5:2f:21:c6:6b:cd:ed: ab:10:aa:8e:49:4c:03:3c:63:f5:1d:90:63:51:96: ca:14:6e:db:27:c8:fe:a0:70:6e:0f:ab:e1:02:b4: 76:e7:17:2d:a9:99:28:6a:d0:20:54:60:37:0d:b5: 69:1f:8a:ec:8d:08:2a:90:27:66:70:db:74:10:fe: 7f:c9:93:56:40:e4:e0:06:b5:eb:e6:f7:21:77:5c: 48:48:66:cd:be:47:64:d2:97:9f:85:1c:4d:35:10: 88:a6:0b:4f:0f:06:47:fa:6d:d3:f2:6b:ab:fc:77: 0e:d6:21:d2:3d:b9:6f:71:fc:19:ca:2d:53:56:d6: 89:c4:50:5f:5c:ae:7f:20:76:88:f2:69:93:bf:62: d2:3a:90:0c:da:e0:21:5f:ed:3f:72:ad:5a:c7:5c: 09:5c:cc:3a:36:85:c7:ac:35:cc:d8:c2:b2:93:33: 85:54:f5:6f:d0:16:4f:5c:8d:e0:4b:30:80:61:8f: 54:d0:4d:5f:f4:f8:79:a0:a7:38:46:cb:30:e3:a5: 50:41:06:b7:72:c4:2b:78:e6:89:2b:fa:4d:51:ba: 44:29:c5:f4:8a:6c:dc:d5:b1:a1:4b:63:a6:9d:ea: 8c:e5 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 08:16:E4:7E:E9:B7:C6:24:2B:59:23:BE:51:0B:14:A3:58:0B:84:D8 X509v3 Authority Key Identifier: keyid:EF:57:C2:D9:D9:3A:C7:CF:9B:2F:17:CA:A7:85:9B:69:85:B3:9B:9D X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/71fC2dk6x8-bLxfKp4WbaYWzm50.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/d0/1e04b8-1031-43f9-9667-8e6f878db5f4/1/71fC2dk6x8-bLxfKp4WbaYWzm50.mft X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/d0/1e04b8-1031-43f9-9667-8e6f878db5f4/1/71fC2dk6x8-bLxfKp4WbaYWzm50.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 92:7c:2f:40:1c:46:3a:25:43:5a:42:26:a5:ce:81:c1:3c:5f: c4:95:df:98:af:a7:04:58:4b:70:c6:69:82:28:81:10:e7:ef: f7:3b:35:bb:96:04:0a:01:27:5f:66:7f:60:01:da:22:87:2f: a5:58:ce:4d:be:a5:2c:ef:fe:ec:6c:ae:2c:39:c0:c2:aa:0d: 66:06:ea:52:ec:ac:b4:70:73:04:5d:87:1f:ec:19:8b:f7:6e: 90:23:27:66:0b:df:02:9c:ce:09:1e:9b:a6:22:61:0a:c1:c9: 20:23:c2:03:af:85:31:c6:00:ae:ec:39:86:f3:d0:10:51:ef: 45:93:32:68:2c:4b:95:e2:fa:29:d7:21:0b:b6:25:03:4b:78: ff:8f:7d:72:00:aa:17:de:52:72:0c:d6:eb:97:ed:d4:21:82: a1:14:93:5d:10:0f:2a:2e:83:1c:dc:a7:28:e5:c4:84:f0:69: ee:cd:e7:db:43:0f:d6:08:11:8b:08:97:a9:25:b4:21:57:5f: 0f:0d:94:a2:8a:86:c1:1f:7f:f5:80:62:4a:09:b2:43:3a:fc: 24:0d:6f:3f:52:4d:65:06:cf:55:8d:9c:f6:7c:19:22:f8:8f: d8:9e:11:0e:df:28:7d:ef:26:90:34:35:c9:fe:e0:e3:da:c9: 22:3a:85:9a -----BEGIN CERTIFICATE----- MIIFFjCCA/6gAwIBAgISAZoEtjDmYqlOiszKn54wIKvXMA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKGVmNTdjMmQ5ZDkzYWM3Y2Y5YjJmMTdjYWE3ODU5YjY5ODVi MzliOWQwHhcNMjUxMDIxMDMwMDQwWhcNMjUxMDIyMDMwMDQwWjAzMTEwLwYDVQQD EygwODE2ZTQ3ZWU5YjdjNjI0MmI1OTIzYmU1MTBiMTRhMzU4MGI4NGQ4MIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAwSjTD/q+gB1O7O/Rdw3N12aXa458 5NUvIcZrze2rEKqOSUwDPGP1HZBjUZbKFG7bJ8j+oHBuD6vhArR25xctqZkoatAg VGA3DbVpH4rsjQgqkCdmcNt0EP5/yZNWQOTgBrXr5vchd1xISGbNvkdk0pefhRxN NRCIpgtPDwZH+m3T8mur/HcO1iHSPblvcfwZyi1TVtaJxFBfXK5/IHaI8mmTv2LS OpAM2uAhX+0/cq1ax1wJXMw6NoXHrDXM2MKykzOFVPVv0BZPXI3gSzCAYY9U0E1f 9Ph5oKc4Rssw46VQQQa3csQreOaJK/pNUbpEKcX0imzc1bGhS2OmneqM5QIDAQAB o4ICIjCCAh4wHQYDVR0OBBYEFAgW5H7pt8YkK1kjvlELFKNYC4TYMB8GA1UdIwQY MBaAFO9XwtnZOsfPmy8XyqeFm2mFs5udMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvNzFmQzJkazZ4OC1iTHhmS3A0V2JhWVd6bTUwLmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC9kMC8xZTA0YjgtMTAzMS00M2Y5LTk2Njct OGU2Zjg3OGRiNWY0LzEvNzFmQzJkazZ4OC1iTHhmS3A0V2JhWVd6bTUwLm1mdDCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC9kMC8xZTA0YjgtMTAzMS00M2Y5LTk2NjctOGU2Zjg3OGRiNWY0 LzEvNzFmQzJkazZ4OC1iTHhmS3A0V2JhWVd6bTUwLmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAknwvQBxG OiVDWkImpc6BwTxfxJXfmK+nBFhLcMZpgiiBEOfv9zs1u5YECgEnX2Z/YAHaIocv pVjOTb6lLO/+7GyuLDnAwqoNZgbqUuystHBzBF2HH+wZi/dukCMnZgvfApzOCR6b piJhCsHJICPCA6+FMcYAruw5hvPQEFHvRZMyaCxLleL6KdchC7YlA0t4/499cgCq F95ScgzW65ft1CGCoRSTXRAPKi6DHNynKOXEhPBp7s3n20MP1ggRiwiXqSW0IVdf Dw2UooqGwR9/9YBiSgmyQzr8JA1vP1JNZQbPVY2c9nwZIviP2J4RDt8ofe8mkDQ1 yf7g49rJIjqFmg== -----END CERTIFICATE-----Generated at Tue Oct 21 06:23:54 2025 by rpki-client