$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/dd/9f09aa-dd5e-4e06-b28e-e871b21790de/1/9zQlckyuJz8pYwYNyGXG8LBCXK0.mft File: 9zQlckyuJz8pYwYNyGXG8LBCXK0.mft (raw, json) Hash identifier: bMhwjjJswBMWupREYa55FwjuaHP0oePhrleQlTFDZKg= Subject key identifier: FE:68:DD:4B:69:04:BB:34:0F:94:BE:18:E9:CB:8D:C6:02:52:EA:D8 Authority key identifier: F7:34:25:72:4C:AE:27:3F:29:63:06:0D:C8:65:C6:F0:B0:42:5C:AD Certificate issuer: /CN=f73425724cae273f2963060dc865c6f0b0425cad Certificate serial: 019A17614D7205EEB9C9C4832FAC9B4E8C5C Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/9zQlckyuJz8pYwYNyGXG8LBCXK0.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/dd/9f09aa-dd5e-4e06-b28e-e871b21790de/1/9zQlckyuJz8pYwYNyGXG8LBCXK0.mft Manifest number: B2 Signing time: Fri 24 Oct 2025 18:00:43 +0000 Manifest this update: Fri 24 Oct 2025 18:00:43 +0000 Manifest next update: Sat 25 Oct 2025 18:00:43 +0000 Files and hashes: 1: 4pRecLSQ-xIl4IPEZzRcqIax3-I.roa (hash: H+a8jrfauVXAPTlOBPXoA0IxSm3rMjg8mh86PIxmueU=) 2: 9zQlckyuJz8pYwYNyGXG8LBCXK0.crl (hash: com/x+T4v1psS9FaTIbiwwKZimv212OKJJsWubEt+cs=) 3: HS9PpWT4FCSSstlIOFCaEuTYhZA.roa (hash: dTpJ+Vqey+wyIsJCiKM1TfllRZ7B3eMpNoAigDi5hoo=) 4: JNDj7IkhbQ_3xrbEz4uAXQ1Yv3Q.roa (hash: Wl0WwrfiuzHjyAyUMW+l+iPzUUYZzp7CP7Vher9u5s8=) 5: TDs3SCHkSwxi2Xb9E5-5lxldSWA.roa (hash: UmMaqKmCtjb0oErlYVHbczcMBZ32+2r0z5hmDOfKCCM=) 6: V6wlyE81nOSUZZNevO5fwFq_yuI.roa (hash: BJWgiCN26bDpqIeJaukxrOIxIn7K1eaqwr8a29JJlYg=) 7: Y6E3ztUNuP-EkxZVJnP3QMV8f34.roa (hash: 5ZMvfHfzXA3N5iMX/egkwzxlZHE1t5ELeXRMtB3b6GA=) 8: g_xhFlxALcLse_-Oj4PBePBZJnY.roa (hash: ZZWn8HGPLGkcu+1b7mxcw+bmNtXcMX/Z/tSj0BCyotA=) 9: kRIa94MWYWrUOVwjc9XA73SAMOA.roa (hash: CLFC01EOAmxOj0g9Emkl9wa15kGO2yyt+4qXoqbGCJI=) 10: wMrCQWEm2lPKU1aAl1mFhi-JWnE.roa (hash: hT7L1jOf2Ub3XumgetpA4h0Ys4xPjaNTHFtmr8cP4hQ=) Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/dd/9f09aa-dd5e-4e06-b28e-e871b21790de/1/9zQlckyuJz8pYwYNyGXG8LBCXK0.crl rsync://rpki.ripe.net/repository/DEFAULT/dd/9f09aa-dd5e-4e06-b28e-e871b21790de/1/9zQlckyuJz8pYwYNyGXG8LBCXK0.mft rsync://rpki.ripe.net/repository/DEFAULT/9zQlckyuJz8pYwYNyGXG8LBCXK0.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Sat 25 Oct 2025 15:30:03 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9a:17:61:4d:72:05:ee:b9:c9:c4:83:2f:ac:9b:4e:8c:5c Signature Algorithm: sha256WithRSAEncryption Issuer: CN=f73425724cae273f2963060dc865c6f0b0425cad Validity Not Before: Oct 24 18:00:43 2025 GMT Not After : Oct 25 18:00:43 2025 GMT Subject: CN=fe68dd4b6904bb340f94be18e9cb8dc60252ead8 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:a4:4e:cc:47:75:a8:01:75:3f:7a:31:73:78:b1: 06:49:b7:cd:a7:ad:2a:1b:d2:02:b2:0b:68:b7:39: 5a:c0:70:33:c9:6d:ea:5e:11:ae:f2:2a:d6:6a:b9: 8f:73:83:a9:ef:38:c2:98:75:5a:b4:8c:e1:bc:b2: 98:b0:a4:26:57:81:6b:f8:02:e9:8d:b9:ed:72:13: d2:ec:17:f4:07:1a:fb:85:2d:33:58:81:ad:7c:46: 29:19:c7:66:ca:49:ef:70:d5:18:39:a5:19:52:05: 5c:f0:05:0b:82:97:ba:3f:33:e8:19:08:e4:25:e5: 36:b3:74:bd:41:64:a9:8b:87:54:6d:a8:13:ab:08: 0a:20:38:52:c5:d8:24:1a:8e:c9:15:5d:52:d1:0d: 34:66:b0:9a:fb:d9:f4:86:5c:57:f2:b4:f9:4a:a4: 90:de:b2:35:7d:2f:a3:a9:64:13:55:d0:f8:bb:b2: 67:22:7b:f0:2a:eb:7f:bb:2f:60:8d:8e:8f:12:9c: 7e:97:df:52:e3:b8:fb:c9:56:ee:1a:9f:c2:4b:e7: c1:56:30:1f:69:4d:2e:74:07:de:91:fd:9e:cd:39: 2e:7d:1d:af:33:42:26:5f:6f:21:09:51:30:92:a1: 1d:83:c0:c7:7e:d0:37:84:29:86:e4:3f:a7:ae:82: 85:0d Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: FE:68:DD:4B:69:04:BB:34:0F:94:BE:18:E9:CB:8D:C6:02:52:EA:D8 X509v3 Authority Key Identifier: keyid:F7:34:25:72:4C:AE:27:3F:29:63:06:0D:C8:65:C6:F0:B0:42:5C:AD X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/9zQlckyuJz8pYwYNyGXG8LBCXK0.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/dd/9f09aa-dd5e-4e06-b28e-e871b21790de/1/9zQlckyuJz8pYwYNyGXG8LBCXK0.mft X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/dd/9f09aa-dd5e-4e06-b28e-e871b21790de/1/9zQlckyuJz8pYwYNyGXG8LBCXK0.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption b0:d7:7f:32:06:c3:5c:4f:20:2e:ec:fa:08:3a:b3:ab:e1:c7: ec:37:27:b5:6b:d1:2d:50:9c:00:59:5f:ad:ea:b9:4a:87:71: 14:0b:06:52:d4:3e:8d:97:ee:7f:83:80:5f:0e:06:7e:df:5c: 41:c5:4b:28:f3:c0:81:0b:46:b8:fb:b2:c3:6a:56:7b:1d:3d: a8:e9:1b:7e:76:73:0a:14:b7:92:1c:86:81:22:97:ef:dd:a1: 54:03:a6:be:99:91:6d:91:cb:0c:92:a1:93:62:f7:12:dd:d9: d8:75:a0:4a:dc:30:8d:b8:f1:9f:d7:7c:4f:32:68:db:be:9d: e2:08:f5:d1:32:0f:61:26:69:df:cf:04:3e:eb:4a:ec:e5:d4: 1c:06:82:0b:63:6f:2f:59:d9:fb:da:7f:71:70:a8:7c:19:52: 66:27:8e:c3:06:a6:5f:31:c4:a3:3e:f4:4d:12:48:e4:dd:16: 30:c6:35:bc:d5:fd:e1:42:86:4c:d5:88:ab:4f:44:45:ba:34: 6a:c8:06:71:1d:cb:5b:dc:21:a0:78:1f:f8:86:9e:e1:69:67: 25:a3:37:6d:35:ca:de:be:2e:64:db:85:e3:58:02:1f:2f:1a: 1b:43:e3:b6:fc:f6:62:41:0c:e0:24:2c:db:23:0e:12:9c:83: a3:82:cc:ff -----BEGIN CERTIFICATE----- MIIFFjCCA/6gAwIBAgISAZoXYU1yBe65ycSDL6ybToxcMA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKGY3MzQyNTcyNGNhZTI3M2YyOTYzMDYwZGM4NjVjNmYwYjA0 MjVjYWQwHhcNMjUxMDI0MTgwMDQzWhcNMjUxMDI1MTgwMDQzWjAzMTEwLwYDVQQD EyhmZTY4ZGQ0YjY5MDRiYjM0MGY5NGJlMThlOWNiOGRjNjAyNTJlYWQ4MIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEApE7MR3WoAXU/ejFzeLEGSbfNp60q G9ICsgtotzlawHAzyW3qXhGu8irWarmPc4Op7zjCmHVatIzhvLKYsKQmV4Fr+ALp jbntchPS7Bf0Bxr7hS0zWIGtfEYpGcdmyknvcNUYOaUZUgVc8AULgpe6PzPoGQjk JeU2s3S9QWSpi4dUbagTqwgKIDhSxdgkGo7JFV1S0Q00ZrCa+9n0hlxX8rT5SqSQ 3rI1fS+jqWQTVdD4u7JnInvwKut/uy9gjY6PEpx+l99S47j7yVbuGp/CS+fBVjAf aU0udAfekf2ezTkufR2vM0ImX28hCVEwkqEdg8DHftA3hCmG5D+nroKFDQIDAQAB o4ICIjCCAh4wHQYDVR0OBBYEFP5o3UtpBLs0D5S+GOnLjcYCUurYMB8GA1UdIwQY MBaAFPc0JXJMric/KWMGDchlxvCwQlytMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvOXpRbGNreXVKejhwWXdZTnlHWEc4TEJDWEswLmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC9kZC85ZjA5YWEtZGQ1ZS00ZTA2LWIyOGUt ZTg3MWIyMTc5MGRlLzEvOXpRbGNreXVKejhwWXdZTnlHWEc4TEJDWEswLm1mdDCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC9kZC85ZjA5YWEtZGQ1ZS00ZTA2LWIyOGUtZTg3MWIyMTc5MGRl LzEvOXpRbGNreXVKejhwWXdZTnlHWEc4TEJDWEswLmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAsNd/MgbD XE8gLuz6CDqzq+HH7DcntWvRLVCcAFlfreq5SodxFAsGUtQ+jZfuf4OAXw4Gft9c QcVLKPPAgQtGuPuyw2pWex09qOkbfnZzChS3khyGgSKX792hVAOmvpmRbZHLDJKh k2L3Et3Z2HWgStwwjbjxn9d8TzJo276d4gj10TIPYSZp388EPutK7OXUHAaCC2Nv L1nZ+9p/cXCofBlSZieOwwamXzHEoz70TRJI5N0WMMY1vNX94UKGTNWIq09ERbo0 asgGcR3LW9whoHgf+Iae4WlnJaM3bTXK3r4uZNuF41gCHy8aG0Pjtvz2YkEM4CQs 2yMOEpyDo4LM/w== -----END CERTIFICATE-----Generated at Fri Oct 24 23:48:53 2025 by rpki-client