$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/d1/789caf-c8d2-419e-ae04-691422311729/1/8MEEBBaR3DhPOxqM35XJZijqba8.mft File: 8MEEBBaR3DhPOxqM35XJZijqba8.mft (raw, json) Hash identifier: 4YJxgIS/A4QA8SBbKPWCF/yzb/c48NAu8Wd5Gv5kssE= Subject key identifier: BE:0B:52:D8:1B:FE:15:2A:A5:87:91:D0:43:CB:17:A2:58:EC:3E:2B Authority key identifier: F0:C1:04:04:16:91:DC:38:4F:3B:1A:8C:DF:95:C9:66:28:EA:6D:AF Certificate issuer: /CN=f0c104041691dc384f3b1a8cdf95c96628ea6daf Certificate serial: 019A1918542404345BF6A35381D37DB0375E Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/8MEEBBaR3DhPOxqM35XJZijqba8.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/d1/789caf-c8d2-419e-ae04-691422311729/1/8MEEBBaR3DhPOxqM35XJZijqba8.mft Manifest number: 16A7 Signing time: Sat 25 Oct 2025 02:00:16 +0000 Manifest this update: Sat 25 Oct 2025 02:00:16 +0000 Manifest next update: Sun 26 Oct 2025 02:00:16 +0000 Files and hashes: 1: 1-jVAuwl23O0NOs1-bK6yeNscKls.roa (hash: Uvxs615yu+WEWoRFMHOzorsioWG8H9U4nAbzC8roX+c=) 2: 8MEEBBaR3DhPOxqM35XJZijqba8.crl (hash: NfwYMsKZ5ezKidk4Rhm86yW5WFb9ztJGIW1M45IGPkk=) 3: Hl-LGslDYIhPlAkXHQHVv-RvB0w.roa (hash: O2E13yhrehXyHLH26oeDji6bWmBZEWAoPwvjmCy5UcQ=) 4: KeGOh-2gcusv29keikRHiEVKS4s.roa (hash: QrPYIqt13xYHx5UZtiEmzISVzXSCi7pxjFZqjccXxgI=) 5: PCT5Mgh2BfqwgaWaY02UF5LaLEs.roa (hash: XaBzd5GEKaiXR6sIMeiAlmk2HwlM0MvOxOjSag3QaY4=) 6: asCMHwRsfFwCKLi99bMyFo21krk.roa (hash: utShPNIu2DvLofXXWk5YOZ1a0OQi1aHbqM+BbMHKgoE=) 7: euk47PXoK5T6-tp0xVlaMzoR2zU.roa (hash: ELFMwMZ6NBCdcRDyZO9f72nzLI4WiJG57xVHtBVDcdU=) 8: fs_wxLugKiT_ydUrQOwGSh335rY.roa (hash: Q5dvvgKthsbcb9JzHMCTpI33x4XiWX2kEMaFSL83EKo=) 9: s-NcW6l6hXn5NOmuFXHN7mTAqcY.roa (hash: Ec6KZfarDMvuXKyozJ8ogUajfjL0rcRRpwLDmiHket8=) 10: xs5EMPFexMMDbg6ZozpAr6uWE70.roa (hash: qg/QvTawYThYqecFxjzESCzrgezKdtEVEc1jID0tLZg=) Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/d1/789caf-c8d2-419e-ae04-691422311729/1/8MEEBBaR3DhPOxqM35XJZijqba8.crl rsync://rpki.ripe.net/repository/DEFAULT/d1/789caf-c8d2-419e-ae04-691422311729/1/8MEEBBaR3DhPOxqM35XJZijqba8.mft rsync://rpki.ripe.net/repository/DEFAULT/8MEEBBaR3DhPOxqM35XJZijqba8.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Sun 26 Oct 2025 00:00:03 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9a:19:18:54:24:04:34:5b:f6:a3:53:81:d3:7d:b0:37:5e Signature Algorithm: sha256WithRSAEncryption Issuer: CN=f0c104041691dc384f3b1a8cdf95c96628ea6daf Validity Not Before: Oct 25 02:00:16 2025 GMT Not After : Oct 26 02:00:16 2025 GMT Subject: CN=be0b52d81bfe152aa58791d043cb17a258ec3e2b Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:bf:cb:72:09:67:47:47:6b:2f:0c:4b:4e:9f:bb: 52:1a:85:03:15:97:8a:39:4d:5d:9d:ef:97:f7:cb: 1b:a5:16:56:de:ed:3f:b2:47:1b:ee:35:30:91:0d: 7b:da:cc:a9:1a:8f:35:6a:f6:fc:85:fd:78:7a:f0: ba:5d:a1:72:7a:88:aa:ac:2f:a9:4e:e1:8f:49:cd: f0:6c:6d:54:6d:f5:78:ea:86:e6:4f:5e:dc:07:7a: fa:c3:03:c7:8e:18:59:28:dd:4c:af:a5:ff:7a:05: 29:bd:f9:66:75:d4:71:91:d5:f1:d4:42:65:b0:d1: 33:7b:1f:98:72:9c:ba:66:96:06:da:01:9b:ef:1b: 42:c5:65:9a:59:4f:2f:df:1c:4d:4e:7d:48:7e:84: 8d:61:ea:fe:5b:2a:ff:60:73:f2:8d:c6:47:3a:c0: 3d:3b:b9:b9:a5:e1:fb:12:8d:ae:3e:31:54:56:55: 42:36:35:5e:3b:e7:5c:a6:84:d3:5f:8e:89:91:c3: dc:b9:98:7f:8d:e0:6b:b1:a1:28:92:58:ca:e8:7f: 72:f6:37:e8:e0:5a:64:5e:e7:aa:48:b5:fa:bb:44: a1:28:c3:2f:39:73:75:7e:fd:c0:46:10:b2:28:fc: 04:4b:1b:be:4b:0a:cf:aa:75:72:d3:60:8e:30:8a: 4a:2d Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: BE:0B:52:D8:1B:FE:15:2A:A5:87:91:D0:43:CB:17:A2:58:EC:3E:2B X509v3 Authority Key Identifier: keyid:F0:C1:04:04:16:91:DC:38:4F:3B:1A:8C:DF:95:C9:66:28:EA:6D:AF X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/8MEEBBaR3DhPOxqM35XJZijqba8.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/d1/789caf-c8d2-419e-ae04-691422311729/1/8MEEBBaR3DhPOxqM35XJZijqba8.mft X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/d1/789caf-c8d2-419e-ae04-691422311729/1/8MEEBBaR3DhPOxqM35XJZijqba8.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 2e:e6:3c:ff:3f:3b:da:ec:16:dd:5a:b3:6f:e6:35:8f:1e:11: 3c:8b:d5:69:02:26:d5:69:a8:80:3a:87:4a:e3:c5:f9:30:eb: 88:fb:20:30:05:fb:1d:6f:80:51:c8:3e:e3:7c:bb:17:c5:7d: a5:60:0c:40:ad:a0:e5:6c:3b:44:55:91:2f:47:a4:c4:92:f7: 5f:fd:1f:47:08:95:01:ef:b2:22:5e:83:b9:e1:92:c4:5f:d9: ed:d7:c2:4e:09:94:d3:a1:f9:04:78:5a:1f:f3:84:d1:20:5c: 0a:a6:d4:12:fc:b8:65:c5:a0:a7:59:3f:3c:f4:4f:94:9b:80: 7e:c8:01:13:02:0d:b9:d1:49:ad:8c:3f:53:3a:8f:16:21:9c: 15:27:2f:12:54:88:98:7c:3e:6f:d0:94:9c:a9:b5:73:21:cb: 4d:e9:2e:88:c3:23:7e:77:7e:e0:c0:0a:e4:45:30:3d:91:8a: 29:15:ca:aa:bf:3c:1c:ad:5d:93:19:f2:83:8a:58:3e:f8:83: d9:e7:c2:32:93:71:d3:97:19:11:4d:b0:26:20:fe:21:a1:ad: b6:c0:a5:f4:69:91:c4:5a:39:51:07:d2:00:09:eb:d0:8f:08: e8:e3:64:67:22:2c:e1:49:b0:81:f0:8e:06:21:f1:e8:39:3a: 00:8e:ad:06 -----BEGIN CERTIFICATE----- MIIFFjCCA/6gAwIBAgISAZoZGFQkBDRb9qNTgdN9sDdeMA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKGYwYzEwNDA0MTY5MWRjMzg0ZjNiMWE4Y2RmOTVjOTY2Mjhl YTZkYWYwHhcNMjUxMDI1MDIwMDE2WhcNMjUxMDI2MDIwMDE2WjAzMTEwLwYDVQQD EyhiZTBiNTJkODFiZmUxNTJhYTU4NzkxZDA0M2NiMTdhMjU4ZWMzZTJiMIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAv8tyCWdHR2svDEtOn7tSGoUDFZeK OU1dne+X98sbpRZW3u0/skcb7jUwkQ172sypGo81avb8hf14evC6XaFyeoiqrC+p TuGPSc3wbG1UbfV46obmT17cB3r6wwPHjhhZKN1Mr6X/egUpvflmddRxkdXx1EJl sNEzex+Ycpy6ZpYG2gGb7xtCxWWaWU8v3xxNTn1IfoSNYer+Wyr/YHPyjcZHOsA9 O7m5peH7Eo2uPjFUVlVCNjVeO+dcpoTTX46JkcPcuZh/jeBrsaEokljK6H9y9jfo 4FpkXueqSLX6u0ShKMMvOXN1fv3ARhCyKPwESxu+SwrPqnVy02COMIpKLQIDAQAB o4ICIjCCAh4wHQYDVR0OBBYEFL4LUtgb/hUqpYeR0EPLF6JY7D4rMB8GA1UdIwQY MBaAFPDBBAQWkdw4TzsajN+VyWYo6m2vMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvOE1FRUJCYVIzRGhQT3hxTTM1WEpaaWpxYmE4LmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC9kMS83ODljYWYtYzhkMi00MTllLWFlMDQt NjkxNDIyMzExNzI5LzEvOE1FRUJCYVIzRGhQT3hxTTM1WEpaaWpxYmE4Lm1mdDCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC9kMS83ODljYWYtYzhkMi00MTllLWFlMDQtNjkxNDIyMzExNzI5 LzEvOE1FRUJCYVIzRGhQT3hxTTM1WEpaaWpxYmE4LmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEALuY8/z87 2uwW3Vqzb+Y1jx4RPIvVaQIm1WmogDqHSuPF+TDriPsgMAX7HW+AUcg+43y7F8V9 pWAMQK2g5Ww7RFWRL0ekxJL3X/0fRwiVAe+yIl6DueGSxF/Z7dfCTgmU06H5BHha H/OE0SBcCqbUEvy4ZcWgp1k/PPRPlJuAfsgBEwINudFJrYw/UzqPFiGcFScvElSI mHw+b9CUnKm1cyHLTekuiMMjfnd+4MAK5EUwPZGKKRXKqr88HK1dkxnyg4pYPviD 2efCMpNx05cZEU2wJiD+IaGttsCl9GmRxFo5UQfSAAnr0I8I6ONkZyIs4UmwgfCO BiHx6Dk6AI6tBg== -----END CERTIFICATE-----Generated at Sat Oct 25 09:25:48 2025 by rpki-client