$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/dc/c515c9-df08-426c-80e6-0367268ff871/1/CBt6IuUc-5z4QgXkRJmYrVXY8GU.mft File: CBt6IuUc-5z4QgXkRJmYrVXY8GU.mft (raw, json) Hash identifier: 6ac7wI0fO+1j/cfRfXX5JdGabS4VJ9Nno9PNLFCQPAg= Subject key identifier: 57:A2:7E:38:7C:80:01:28:7E:13:30:1F:1D:CD:BC:0A:89:AF:AF:9F Authority key identifier: 08:1B:7A:22:E5:1C:FB:9C:F8:42:05:E4:44:99:98:AD:55:D8:F0:65 Certificate issuer: /CN=081b7a22e51cfb9cf84205e4449998ad55d8f065 Certificate serial: 019A1E756BDA44F0A2EFE1729CCE97D48EDE Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/CBt6IuUc-5z4QgXkRJmYrVXY8GU.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/dc/c515c9-df08-426c-80e6-0367268ff871/1/CBt6IuUc-5z4QgXkRJmYrVXY8GU.mft Manifest number: 172A Signing time: Sun 26 Oct 2025 03:00:03 +0000 Manifest this update: Sun 26 Oct 2025 03:00:03 +0000 Manifest next update: Mon 27 Oct 2025 03:00:03 +0000 Files and hashes: 1: 0EWIFMkHOwPxXxJO-cVVnlFMV9M.roa (hash: H3HRfMwSGiaOC4hjRP3JPpolbe1iEtk1HgVt+tXcFJg=) 2: 1-LzJo-wqbXyMIW7dShaQShecG4A.roa (hash: zk5MBDVPSqfgXloU9IVz77yOOxCyNDA4FFF8iDzvQ0U=) 3: 1Q8S-F04ndhiDn0SGwOoAJvpcJE.roa (hash: C3Etga/0CnN14pA6mDGityRvYUsO547YlA3aweNBuiE=) 4: 1oBdMA7e2Z8U2Zj6DKxZPs9Fxrk.roa (hash: j4/Gl/mQufV5n5quU+YzE8lGK989RzijTqRKBSqxgrU=) 5: 5HzzPzyXFWUltUFIxz7A1OHGi7o.roa (hash: KdXF+S8JaHRcZ3Ivt3Pqt/DXcq9oRCgLGhDICrSfT58=) 6: 8-WV0KFzAJRQQFuP9I6yLavMsag.roa (hash: I9thkkCJIm1PtEdyWstVE+kMoQxLauXSjcbMKnMywsw=) 7: 9NRiEzWNWvOsqkkmj1H_nO4JtIA.roa (hash: M1EfpG0UAk+KXmH4YDb8gbqx8X4cMoL0D3M3L/57Gmk=) 8: CBt6IuUc-5z4QgXkRJmYrVXY8GU.crl (hash: m/hAeCaouZU+f3oYLK5yizDC9hddtpUdLjrB3VfGfOY=) 9: CdZHXMtiuXIYHPmoJY2aErxG8Z8.roa (hash: zau8aloWL7mHqdY4KBJaLbm12+SMJIeq7unHMUAtkpg=) 10: GnVxDQNRy4lZ_6dGRtjVD3G4cHQ.roa (hash: uewNPszrVAmQ8TC2z53P69rsch1KQGC60dIp6JPFrsU=) 11: M4I4vx1xHRyGLzdFv0m3WqQ7kbc.roa (hash: 2EMSvLZ8cjOngMWy3qqLP47J5l90EJ/AMLuHP59YgVk=) 12: XDAdp99VnBF7cnnsQ12OybJrT8Y.roa (hash: RlZg9LpMx3Sn+N/ygBjqDdQQDqiZuazZKwQVgxx0FBg=) 13: tjV22hyfL6sKASeEJo6Ke2cIRMg.roa (hash: j+NWMjI7+Df8SVOaL0Iyl9IZZ4H1LL2E359iqV63je4=) 14: zCJNwAHBT-OuD8JSwLlWmHeq2i0.roa (hash: xxcu2GFnZrIoRaIL254U2SP3O3E+qALgdaalLMmqYoY=) Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/dc/c515c9-df08-426c-80e6-0367268ff871/1/CBt6IuUc-5z4QgXkRJmYrVXY8GU.crl rsync://rpki.ripe.net/repository/DEFAULT/dc/c515c9-df08-426c-80e6-0367268ff871/1/CBt6IuUc-5z4QgXkRJmYrVXY8GU.mft rsync://rpki.ripe.net/repository/DEFAULT/CBt6IuUc-5z4QgXkRJmYrVXY8GU.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Sun 26 Oct 2025 19:59:02 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9a:1e:75:6b:da:44:f0:a2:ef:e1:72:9c:ce:97:d4:8e:de Signature Algorithm: sha256WithRSAEncryption Issuer: CN=081b7a22e51cfb9cf84205e4449998ad55d8f065 Validity Not Before: Oct 26 03:00:03 2025 GMT Not After : Oct 27 03:00:03 2025 GMT Subject: CN=57a27e387c8001287e13301f1dcdbc0a89afaf9f Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:eb:a9:29:a5:d1:53:21:9a:56:34:b2:48:e7:8e: 06:19:05:e6:d0:9f:55:f1:6e:71:4b:22:f4:14:fa: 30:c1:6d:57:9e:9e:4d:98:2d:9e:68:46:c9:1c:09: 80:70:9a:f9:2a:9b:2d:b6:d2:72:be:da:3a:e1:48: 70:b4:bc:ab:c7:a3:49:0a:9d:5e:1a:4b:61:68:0e: b4:05:3e:92:fb:20:7f:49:ce:7a:2c:3d:df:0c:b2: 5d:60:84:c7:c9:0c:13:c4:0e:1c:fc:8d:01:eb:14: 89:64:bc:79:60:55:38:71:a4:63:5f:3f:70:99:7f: 5d:87:84:12:dc:1c:29:77:2c:3d:35:73:3a:e3:a4: 84:fb:8a:a9:54:1a:57:11:d9:0f:f4:3e:d8:20:2c: 13:65:a0:de:89:f7:59:5b:7b:b3:d6:29:38:07:f7: d3:60:a8:3f:09:58:6a:8c:c9:f8:54:ee:83:ae:f4: 60:34:bc:06:6e:54:70:7a:10:1e:ba:c8:83:46:3a: 0e:6c:b9:5b:7b:5c:41:de:a1:af:d7:9e:77:02:02: 31:6b:73:55:35:6d:3c:a7:88:80:22:f0:41:04:b1: 33:93:5c:d1:68:59:ee:6b:4b:3a:11:e5:b4:ba:2c: b6:22:1d:fb:3c:35:06:a9:c7:2d:24:fc:d4:8c:b7: c5:e9 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 57:A2:7E:38:7C:80:01:28:7E:13:30:1F:1D:CD:BC:0A:89:AF:AF:9F X509v3 Authority Key Identifier: keyid:08:1B:7A:22:E5:1C:FB:9C:F8:42:05:E4:44:99:98:AD:55:D8:F0:65 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/CBt6IuUc-5z4QgXkRJmYrVXY8GU.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/dc/c515c9-df08-426c-80e6-0367268ff871/1/CBt6IuUc-5z4QgXkRJmYrVXY8GU.mft X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/dc/c515c9-df08-426c-80e6-0367268ff871/1/CBt6IuUc-5z4QgXkRJmYrVXY8GU.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 74:a8:7d:b2:df:ba:6a:60:6a:94:a2:0e:d9:e2:ea:78:f0:55: 85:3b:12:e8:67:dd:b1:10:c6:2c:9e:38:7e:1d:9c:dd:a8:fd: 29:02:34:a8:65:ab:b8:97:68:0c:3d:52:bb:9d:68:9c:c4:66: ab:db:02:97:53:b0:c2:29:f0:51:ce:a1:aa:2b:ed:16:df:c0: ce:69:43:58:98:c4:b0:b6:8b:3c:6f:3a:21:fa:6c:e3:62:4b: 47:0a:f0:fd:14:32:38:f2:28:2e:d5:d7:89:a4:99:2d:a2:5e: cf:f5:8e:0e:44:e5:e0:e4:ee:5b:0d:5f:8a:9a:61:ea:0d:9e: c0:59:dc:03:ff:b8:2a:e6:bc:2f:5c:f6:f6:70:1a:c4:c1:73: 7f:39:44:3f:26:d1:51:91:4d:2f:fb:9e:ab:b6:9a:e1:27:07: b6:d3:49:50:d0:99:d3:18:25:63:99:6a:24:68:cb:fd:da:6b: 8f:41:d5:24:06:90:20:a7:c0:4e:a7:95:b6:41:0e:65:e6:7f: 0b:4b:c8:cc:dd:3a:74:75:01:dd:ae:18:91:14:12:22:ea:9d: 0d:4a:4b:2c:d3:ca:35:2f:f9:60:af:8a:49:fc:99:c9:31:cc: da:d4:02:d9:53:eb:1e:6d:e5:6f:04:e6:3b:fa:95:6f:f4:5d: 22:83:b6:2a -----BEGIN CERTIFICATE----- MIIFFjCCA/6gAwIBAgISAZoedWvaRPCi7+FynM6X1I7eMA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKDA4MWI3YTIyZTUxY2ZiOWNmODQyMDVlNDQ0OTk5OGFkNTVk OGYwNjUwHhcNMjUxMDI2MDMwMDAzWhcNMjUxMDI3MDMwMDAzWjAzMTEwLwYDVQQD Eyg1N2EyN2UzODdjODAwMTI4N2UxMzMwMWYxZGNkYmMwYTg5YWZhZjlmMIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEA66kppdFTIZpWNLJI544GGQXm0J9V 8W5xSyL0FPowwW1Xnp5NmC2eaEbJHAmAcJr5KpstttJyvto64UhwtLyrx6NJCp1e GkthaA60BT6S+yB/Sc56LD3fDLJdYITHyQwTxA4c/I0B6xSJZLx5YFU4caRjXz9w mX9dh4QS3Bwpdyw9NXM646SE+4qpVBpXEdkP9D7YICwTZaDeifdZW3uz1ik4B/fT YKg/CVhqjMn4VO6DrvRgNLwGblRwehAeusiDRjoObLlbe1xB3qGv1553AgIxa3NV NW08p4iAIvBBBLEzk1zRaFnua0s6EeW0uiy2Ih37PDUGqcctJPzUjLfF6QIDAQAB o4ICIjCCAh4wHQYDVR0OBBYEFFeifjh8gAEofhMwHx3NvAqJr6+fMB8GA1UdIwQY MBaAFAgbeiLlHPuc+EIF5ESZmK1V2PBlMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvQ0J0Nkl1VWMtNXo0UWdYa1JKbVlyVlhZOEdVLmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC9kYy9jNTE1YzktZGYwOC00MjZjLTgwZTYt MDM2NzI2OGZmODcxLzEvQ0J0Nkl1VWMtNXo0UWdYa1JKbVlyVlhZOEdVLm1mdDCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC9kYy9jNTE1YzktZGYwOC00MjZjLTgwZTYtMDM2NzI2OGZmODcx LzEvQ0J0Nkl1VWMtNXo0UWdYa1JKbVlyVlhZOEdVLmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAdKh9st+6 amBqlKIO2eLqePBVhTsS6GfdsRDGLJ44fh2c3aj9KQI0qGWruJdoDD1Su51onMRm q9sCl1OwwinwUc6hqivtFt/AzmlDWJjEsLaLPG86Ifps42JLRwrw/RQyOPIoLtXX iaSZLaJez/WODkTl4OTuWw1fipph6g2ewFncA/+4Kua8L1z29nAaxMFzfzlEPybR UZFNL/ueq7aa4ScHttNJUNCZ0xglY5lqJGjL/dprj0HVJAaQIKfATqeVtkEOZeZ/ C0vIzN06dHUB3a4YkRQSIuqdDUpLLNPKNS/5YK+KSfyZyTHM2tQC2VPrHm3lbwTm O/qVb/RdIoO2Kg== -----END CERTIFICATE-----Generated at Sun Oct 26 04:35:19 2025 by rpki-client