$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/d5/86e32b-f067-450f-b67c-3aa150a92ab7/1/rnNsr92267jXx2lD9KJx4DhRCqk.mft File: rnNsr92267jXx2lD9KJx4DhRCqk.mft (raw, json) Hash identifier: AHj/OgHmlc9CLmWwkoe1s3YwTbeZ15Eu2Omd5QhF2ow= Subject key identifier: DC:8C:CC:86:FF:30:13:9B:6E:3A:5B:7F:06:6E:EF:C7:7F:E6:BC:7E Authority key identifier: AE:73:6C:AF:DD:B6:EB:B8:D7:C7:69:43:F4:A2:71:E0:38:51:0A:A9 Certificate issuer: /CN=ae736cafddb6ebb8d7c76943f4a271e038510aa9 Certificate serial: 019A1DD110A691BE223C4AE9E5B9999DCD3C Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/rnNsr92267jXx2lD9KJx4DhRCqk.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/d5/86e32b-f067-450f-b67c-3aa150a92ab7/1/rnNsr92267jXx2lD9KJx4DhRCqk.mft Manifest number: 15B7 Signing time: Sun 26 Oct 2025 00:00:31 +0000 Manifest this update: Sun 26 Oct 2025 00:00:31 +0000 Manifest next update: Mon 27 Oct 2025 00:00:31 +0000 Files and hashes: 1: 1-qo2IZfSQe_p35VuNGg4c_fEmc.roa (hash: ZNytEtjJE3PoSw4fLaCNFgz51wqNOEOmou9bPPKVA2c=) 2: 2ax4rXEQA4dV7JremBmC0hQtaug.roa (hash: R/IKnZobJlpQGcUf505T2eKyq/irMcu2IrwltIWV+u4=) 3: D7oUSyhrzSWYYWl3XhQsUS72Yg4.roa (hash: gFrsONax/RUGkygvJXfVvu2wc5r7m/Z6tusuo2v3M6g=) 4: JOxitDZrH06_7gdJfTN1yzrI7bs.roa (hash: I4I1UDRrHD91eVymVzkfYVMUc8wdJt2DaDwRY1upCck=) 5: OBaSZfmehcZUBqMMFijQNwThNdI.roa (hash: 7APqv18WVWke1FDylnRooW5eMht73lWY6YprLban2L8=) 6: PZIj01LldFateFu3od4_Vnbh84Q.roa (hash: ecoXbiPRWhHOY6nEuRa20dSVzR4wCTgLp8nw9UHReAg=) 7: XukASID4vdHx7vc_ang5UnSgHH8.roa (hash: DxLEWXez2e/d5+PqlJRiByRJ5SsEhSAc9iljhU9E7yk=) 8: j5-XW5coEbjIakLbav-a-xkoxss.roa (hash: 3PeUPnbjaNU5eTMyl99skfbBuUv7EoDvaqaX+1+rQl4=) 9: rnNsr92267jXx2lD9KJx4DhRCqk.crl (hash: xM2NVOnBTdyWmIPF1XXhy6nACnHzUNDmD0eQfSVkneM=) 10: zZkIW74qXtltgoLUxRfnjX8t5Bg.roa (hash: CVMBCJyn+beuTJEHswvGuHQF9hMYEJm+xn7R7IlaPlY=) Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/d5/86e32b-f067-450f-b67c-3aa150a92ab7/1/rnNsr92267jXx2lD9KJx4DhRCqk.crl rsync://rpki.ripe.net/repository/DEFAULT/d5/86e32b-f067-450f-b67c-3aa150a92ab7/1/rnNsr92267jXx2lD9KJx4DhRCqk.mft rsync://rpki.ripe.net/repository/DEFAULT/rnNsr92267jXx2lD9KJx4DhRCqk.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Sun 26 Oct 2025 19:59:02 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9a:1d:d1:10:a6:91:be:22:3c:4a:e9:e5:b9:99:9d:cd:3c Signature Algorithm: sha256WithRSAEncryption Issuer: CN=ae736cafddb6ebb8d7c76943f4a271e038510aa9 Validity Not Before: Oct 26 00:00:31 2025 GMT Not After : Oct 27 00:00:31 2025 GMT Subject: CN=dc8ccc86ff30139b6e3a5b7f066eefc77fe6bc7e Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:8f:eb:e5:45:79:8b:50:69:13:bf:a0:33:82:02: df:2f:3d:5c:f2:bc:de:3a:6c:3c:d1:fc:01:f3:48: 35:64:98:c9:a4:75:b7:79:0c:2a:06:f8:10:20:86: 93:58:fa:8e:ca:7f:82:a9:9f:b0:e5:50:bd:9a:5c: f2:15:f4:a1:53:f5:77:e6:82:34:c5:5f:26:f8:79: 33:65:5c:89:7c:0a:25:f2:7a:68:24:4c:9d:83:45: 32:ae:60:03:55:f6:ee:aa:fc:6e:ce:7f:f8:10:6e: a1:a3:10:db:ce:fa:f3:e3:44:5e:94:43:40:a3:d6: 98:22:5b:d3:3b:91:2f:be:b1:31:b4:bc:49:73:06: 94:cd:e9:a3:94:53:61:9f:2c:28:7c:44:ae:fc:91: 8c:8d:31:aa:81:de:97:75:7e:db:91:db:9d:1d:8e: 96:3f:59:67:5b:0b:51:a1:10:9c:48:38:e7:7b:be: a2:df:b9:55:42:f9:7c:66:45:a6:88:68:19:f7:c4: fd:a5:5c:5a:5a:bb:c8:c3:ae:8b:3c:5e:24:d3:bb: bd:77:45:dd:44:f7:a3:99:8c:a1:0f:8f:d2:4b:c0: 9f:b2:93:14:98:d5:a2:49:8e:af:8e:14:55:73:d0: 9c:27:8f:4c:ad:77:ad:c6:11:e8:d4:c2:01:f3:cb: ca:05 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: DC:8C:CC:86:FF:30:13:9B:6E:3A:5B:7F:06:6E:EF:C7:7F:E6:BC:7E X509v3 Authority Key Identifier: keyid:AE:73:6C:AF:DD:B6:EB:B8:D7:C7:69:43:F4:A2:71:E0:38:51:0A:A9 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/rnNsr92267jXx2lD9KJx4DhRCqk.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/d5/86e32b-f067-450f-b67c-3aa150a92ab7/1/rnNsr92267jXx2lD9KJx4DhRCqk.mft X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/d5/86e32b-f067-450f-b67c-3aa150a92ab7/1/rnNsr92267jXx2lD9KJx4DhRCqk.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 15:b6:5a:b8:fa:fe:6c:57:83:cd:84:9f:43:8a:61:5a:d2:82: 6f:cd:c3:fa:cf:2e:2b:89:74:04:11:5b:13:17:88:76:35:73: ec:f9:6e:9c:7e:f9:68:47:74:bd:89:aa:72:25:c6:da:85:e3: 8b:fa:fe:b9:3c:ca:b9:35:18:f2:f7:01:54:44:a7:fb:87:de: 29:16:9b:76:88:c2:dc:17:5c:27:b1:d3:49:1c:46:05:99:e7: 7b:a2:10:db:f6:59:e0:a8:cf:7b:a6:b9:eb:73:98:b1:32:3c: 1c:b9:08:76:92:6d:b1:12:81:59:af:df:ae:34:b1:31:de:a3: eb:45:f3:35:b6:32:20:4a:73:04:cc:aa:c2:bb:45:b2:c7:4d: cb:b8:6c:da:c1:ce:aa:ef:86:2b:54:39:f3:ba:dd:5c:15:73: 26:8b:4e:17:4a:e5:dd:84:b1:cf:1f:e0:61:61:fd:be:41:64: ba:57:cb:55:cb:3c:65:61:1d:82:26:3c:4d:f0:ab:96:f0:cd: 7c:00:6d:9f:51:39:15:cb:54:7b:16:6d:2e:76:a8:8d:83:d1: 15:ee:17:8e:47:5a:af:35:59:b9:87:65:74:2f:55:ac:06:77: d8:60:a2:0f:d8:ad:0d:4a:fc:24:a2:b2:b3:de:27:5b:b4:2f: 30:f8:22:3b -----BEGIN CERTIFICATE----- MIIFFjCCA/6gAwIBAgISAZod0RCmkb4iPErp5bmZnc08MA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKGFlNzM2Y2FmZGRiNmViYjhkN2M3Njk0M2Y0YTI3MWUwMzg1 MTBhYTkwHhcNMjUxMDI2MDAwMDMxWhcNMjUxMDI3MDAwMDMxWjAzMTEwLwYDVQQD EyhkYzhjY2M4NmZmMzAxMzliNmUzYTViN2YwNjZlZWZjNzdmZTZiYzdlMIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAj+vlRXmLUGkTv6AzggLfLz1c8rze Omw80fwB80g1ZJjJpHW3eQwqBvgQIIaTWPqOyn+CqZ+w5VC9mlzyFfShU/V35oI0 xV8m+HkzZVyJfAol8npoJEydg0UyrmADVfbuqvxuzn/4EG6hoxDbzvrz40RelENA o9aYIlvTO5EvvrExtLxJcwaUzemjlFNhnywofESu/JGMjTGqgd6XdX7bkdudHY6W P1lnWwtRoRCcSDjne76i37lVQvl8ZkWmiGgZ98T9pVxaWrvIw66LPF4k07u9d0Xd RPejmYyhD4/SS8CfspMUmNWiSY6vjhRVc9CcJ49MrXetxhHo1MIB88vKBQIDAQAB o4ICIjCCAh4wHQYDVR0OBBYEFNyMzIb/MBObbjpbfwZu78d/5rx+MB8GA1UdIwQY MBaAFK5zbK/dtuu418dpQ/SiceA4UQqpMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvcm5Oc3I5MjI2N2pYeDJsRDlLSng0RGhSQ3FrLmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC9kNS84NmUzMmItZjA2Ny00NTBmLWI2N2Mt M2FhMTUwYTkyYWI3LzEvcm5Oc3I5MjI2N2pYeDJsRDlLSng0RGhSQ3FrLm1mdDCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC9kNS84NmUzMmItZjA2Ny00NTBmLWI2N2MtM2FhMTUwYTkyYWI3 LzEvcm5Oc3I5MjI2N2pYeDJsRDlLSng0RGhSQ3FrLmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAFbZauPr+ bFeDzYSfQ4phWtKCb83D+s8uK4l0BBFbExeIdjVz7PlunH75aEd0vYmqciXG2oXj i/r+uTzKuTUY8vcBVESn+4feKRabdojC3BdcJ7HTSRxGBZnne6IQ2/ZZ4KjPe6a5 63OYsTI8HLkIdpJtsRKBWa/frjSxMd6j60XzNbYyIEpzBMyqwrtFssdNy7hs2sHO qu+GK1Q587rdXBVzJotOF0rl3YSxzx/gYWH9vkFkulfLVcs8ZWEdgiY8TfCrlvDN fABtn1E5FctUexZtLnaojYPRFe4XjkdarzVZuYdldC9VrAZ32GCiD9itDUr8JKKy s94nW7QvMPgiOw== -----END CERTIFICATE-----Generated at Sun Oct 26 03:11:15 2025 by rpki-client