$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/d1/96436c-f6fa-40ba-a27c-fb1030651067/1/2-arjgxG6EG0TSucawO7ZfViHbE.mft File: 2-arjgxG6EG0TSucawO7ZfViHbE.mft (raw, json) Hash identifier: CqJ8VVp4/6nGjIKk/4WtYUrz+g0IneWtiz5R3mBahJY= Subject key identifier: D5:1F:AF:77:70:36:3D:2D:36:CF:59:8D:C9:6E:FA:6A:F8:A7:1D:1D Authority key identifier: DB:E6:AB:8E:0C:46:E8:41:B4:4D:2B:9C:6B:03:BB:65:F5:62:1D:B1 Certificate issuer: /CN=dbe6ab8e0c46e841b44d2b9c6b03bb65f5621db1 Certificate serial: 019A18059FBB79067CDF5753800CBE195629 Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/2-arjgxG6EG0TSucawO7ZfViHbE.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/d1/96436c-f6fa-40ba-a27c-fb1030651067/1/2-arjgxG6EG0TSucawO7ZfViHbE.mft Manifest number: 170F Signing time: Fri 24 Oct 2025 21:00:12 +0000 Manifest this update: Fri 24 Oct 2025 21:00:12 +0000 Manifest next update: Sat 25 Oct 2025 21:00:12 +0000 Files and hashes: 1: 1F-PLkJeZsd5BhbWomZg7cLPFrk.roa (hash: yrygGJcoXqVH2Jg8Juj5GnPuSpfNJREHSoSijlooIac=) 2: 2-arjgxG6EG0TSucawO7ZfViHbE.crl (hash: 4kts14e5ZSfmeGovn7Jtg2MFE1bSQBVmkpWimiPgTw0=) 3: 28-uwfDVLpaahAp5_g4gOqonJRE.roa (hash: ZiFvqyNcFNQjj1MRiXrgYLhWSDf2EOuub9eyPgFwZ5w=) 4: 3PFyhkeygxSnr9lo2JsKv8zzptA.roa (hash: q1R0erCPFvF5C0+eg74kijSUxdckHy4082+SsXMgLoI=) 5: 5gCvrLecynoNlZqqecgbQQFoRrQ.roa (hash: 9K+m38Q0PxPs98dlo8mOUJqX2gTHhK0yh4taoKPklF4=) 6: Hgi1HuyOIm-pDNTXBi7SDeMMv54.roa (hash: 4I6w4WrI+TeCpJfBFE/CPemODRHx6exn+BxP4Gc/fZ4=) 7: VTFmKW5oJe_aki7x1urblkP0Fyc.roa (hash: 2MZuFdP6pQLocFIUqAzsdUT8olNA1CbFEwyUxslWUHU=) 8: WuMjl-VoG-q9mOfKlozyoU3i5Zc.roa (hash: gMQYLpr2E7Od3N3zIX37zoUdKHUCId0XHkWxbn/9Hs4=) 9: Y-ggvECpJ-TUj9BMaNxFVHCG_mk.roa (hash: yHJbvycQTABXHTmwKw5e8PRSEFVUISxjCDtnqSPXNps=) 10: czt3GQhHtSmOo6RJuvFMFQAKSGo.roa (hash: XJWzfiETobcimR26X1Pa8klzjoq9ZGkjfUnqI+42fs0=) 11: eL6yX2gKmuR54LoAuIUZEONKX3g.roa (hash: Wq/KgDr2vwlpid8VQStYJgjmPQjXNNh76BSl9DIrTcE=) 12: hBf-hoIhETw06OBRpv7F1WdTrE8.roa (hash: LSEM+beBKj2xu4gyMsUhzku59BFOyI6BOdyKq1jM8vA=) 13: ps-3dIi4E3kjzYMhNLY6gSZjzEI.roa (hash: AimvrgTPnFzv1TtjV/eH/9wijMpIF0IeujrL4F6J9qw=) 14: vWlItCBxAXeKE8gJX96SzwOKVyc.roa (hash: Y2Q+VHBMvY4aKyxjSWnm9nXu79hw6C2astvb5J8gRi4=) Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/d1/96436c-f6fa-40ba-a27c-fb1030651067/1/2-arjgxG6EG0TSucawO7ZfViHbE.crl rsync://rpki.ripe.net/repository/DEFAULT/d1/96436c-f6fa-40ba-a27c-fb1030651067/1/2-arjgxG6EG0TSucawO7ZfViHbE.mft rsync://rpki.ripe.net/repository/DEFAULT/2-arjgxG6EG0TSucawO7ZfViHbE.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Sat 25 Oct 2025 15:30:03 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9a:18:05:9f:bb:79:06:7c:df:57:53:80:0c:be:19:56:29 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=dbe6ab8e0c46e841b44d2b9c6b03bb65f5621db1 Validity Not Before: Oct 24 21:00:12 2025 GMT Not After : Oct 25 21:00:12 2025 GMT Subject: CN=d51faf7770363d2d36cf598dc96efa6af8a71d1d Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:de:b8:e7:d7:15:be:ca:2c:ba:13:d7:08:36:c7: ce:2a:92:bc:a0:1d:2b:63:9b:39:6b:ae:48:c7:1e: fe:50:a0:6a:67:f6:b1:90:cc:42:c4:65:ae:2d:87: 61:be:a6:75:bd:91:b2:51:44:50:28:9a:d1:d6:07: ab:79:89:da:bf:3c:01:ad:bd:19:65:cd:e3:a2:6b: 53:33:d6:a4:ce:59:63:f1:61:51:a8:4c:8a:f9:02: 06:9b:b1:e6:2c:6e:3e:31:62:aa:ba:d3:b4:09:ae: 77:0f:51:9a:ea:36:be:e1:a9:ed:a4:b2:b5:a3:91: 4b:f2:7f:65:b4:2f:99:ef:4e:c4:fb:22:48:91:01: 52:3d:6b:1a:1d:2d:5e:8f:f1:ce:e7:26:2d:cc:60: e7:af:59:f8:76:07:e8:87:e4:fb:db:45:2c:cd:3a: 14:98:c9:d8:93:37:f2:65:af:0f:82:dd:ce:6e:06: c7:83:28:24:ad:bf:35:0c:b3:ff:9f:57:f1:4e:cb: 28:1e:d8:f8:03:eb:19:f9:58:fb:ba:77:86:9b:9c: 36:d4:5a:78:2e:ce:73:72:d3:78:f8:9f:b1:a4:77: 66:85:8e:e9:99:35:92:33:aa:4a:e0:33:06:97:84: 82:1b:66:3b:05:2c:7b:79:67:91:4a:fb:d7:12:22: d1:13 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: D5:1F:AF:77:70:36:3D:2D:36:CF:59:8D:C9:6E:FA:6A:F8:A7:1D:1D X509v3 Authority Key Identifier: keyid:DB:E6:AB:8E:0C:46:E8:41:B4:4D:2B:9C:6B:03:BB:65:F5:62:1D:B1 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/2-arjgxG6EG0TSucawO7ZfViHbE.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/d1/96436c-f6fa-40ba-a27c-fb1030651067/1/2-arjgxG6EG0TSucawO7ZfViHbE.mft X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/d1/96436c-f6fa-40ba-a27c-fb1030651067/1/2-arjgxG6EG0TSucawO7ZfViHbE.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption ba:4d:4d:a8:8b:e1:f0:3f:88:64:19:c9:d7:5c:a7:dd:28:28: b3:88:e2:9a:48:e3:9b:b7:a9:48:62:7b:76:54:d5:15:12:c2: 5a:dd:3e:c8:87:8a:1f:f0:b9:86:22:6a:cf:3c:49:a0:f0:e5: 78:ae:7d:55:50:47:a1:a5:7d:2b:ca:39:6f:07:0c:df:a6:fb: e9:12:e1:59:07:c6:94:48:be:ac:cb:e8:40:38:79:a4:7f:8e: 42:7c:25:f5:97:2b:c4:20:10:e6:a5:4e:b8:b5:2e:cc:3c:1f: 0b:cd:1c:f6:5b:6f:55:bc:ed:1f:aa:e1:02:d8:73:3d:16:80: 30:9b:30:77:ca:5f:2d:b9:40:74:3b:e5:a7:6b:be:95:b5:fe: d2:dd:11:08:e5:ad:f3:43:b9:d8:10:1c:e4:e4:b7:5a:b9:dc: 78:72:5d:bf:40:ef:67:aa:26:1c:a8:f5:fa:c4:1a:a1:14:54: a4:25:c1:3a:dc:90:2f:4e:7f:a8:bf:a4:82:04:ba:d4:65:4d: 18:62:84:a8:fc:d4:26:2b:56:50:88:a1:5f:8d:4e:99:56:46: b6:12:fb:1e:54:85:1c:03:63:e2:28:8b:b9:57:ac:6c:a1:30: d1:fc:98:b3:fc:dd:1f:88:7c:47:dd:eb:95:9d:e5:64:bc:3a: e4:1a:25:b5 -----BEGIN CERTIFICATE----- MIIFFjCCA/6gAwIBAgISAZoYBZ+7eQZ831dTgAy+GVYpMA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKGRiZTZhYjhlMGM0NmU4NDFiNDRkMmI5YzZiMDNiYjY1ZjU2 MjFkYjEwHhcNMjUxMDI0MjEwMDEyWhcNMjUxMDI1MjEwMDEyWjAzMTEwLwYDVQQD EyhkNTFmYWY3NzcwMzYzZDJkMzZjZjU5OGRjOTZlZmE2YWY4YTcxZDFkMIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEA3rjn1xW+yiy6E9cINsfOKpK8oB0r Y5s5a65Ixx7+UKBqZ/axkMxCxGWuLYdhvqZ1vZGyUURQKJrR1gereYnavzwBrb0Z Zc3jomtTM9akzllj8WFRqEyK+QIGm7HmLG4+MWKqutO0Ca53D1Ga6ja+4antpLK1 o5FL8n9ltC+Z707E+yJIkQFSPWsaHS1ej/HO5yYtzGDnr1n4dgfoh+T720UszToU mMnYkzfyZa8Pgt3ObgbHgygkrb81DLP/n1fxTssoHtj4A+sZ+Vj7uneGm5w21Fp4 Ls5zctN4+J+xpHdmhY7pmTWSM6pK4DMGl4SCG2Y7BSx7eWeRSvvXEiLREwIDAQAB o4ICIjCCAh4wHQYDVR0OBBYEFNUfr3dwNj0tNs9Zjclu+mr4px0dMB8GA1UdIwQY MBaAFNvmq44MRuhBtE0rnGsDu2X1Yh2xMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvMi1hcmpneEc2RUcwVFN1Y2F3TzdaZlZpSGJFLmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC9kMS85NjQzNmMtZjZmYS00MGJhLWEyN2Mt ZmIxMDMwNjUxMDY3LzEvMi1hcmpneEc2RUcwVFN1Y2F3TzdaZlZpSGJFLm1mdDCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC9kMS85NjQzNmMtZjZmYS00MGJhLWEyN2MtZmIxMDMwNjUxMDY3 LzEvMi1hcmpneEc2RUcwVFN1Y2F3TzdaZlZpSGJFLmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAuk1NqIvh 8D+IZBnJ11yn3Sgos4jimkjjm7epSGJ7dlTVFRLCWt0+yIeKH/C5hiJqzzxJoPDl eK59VVBHoaV9K8o5bwcM36b76RLhWQfGlEi+rMvoQDh5pH+OQnwl9ZcrxCAQ5qVO uLUuzDwfC80c9ltvVbztH6rhAthzPRaAMJswd8pfLblAdDvlp2u+lbX+0t0RCOWt 80O52BAc5OS3WrnceHJdv0DvZ6omHKj1+sQaoRRUpCXBOtyQL05/qL+kggS61GVN GGKEqPzUJitWUIihX41OmVZGthL7HlSFHANj4iiLuVesbKEw0fyYs/zdH4h8R93r lZ3lZLw65BoltQ== -----END CERTIFICATE-----Generated at Sat Oct 25 01:08:44 2025 by rpki-client