$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/df/01058a-4a82-4818-972d-842858122bbc/1/RklSvBZUQexuLiAQyTPcgw82FzE.mft File: RklSvBZUQexuLiAQyTPcgw82FzE.mft (raw, json) Hash identifier: eezlibap/gEGHXoi30gBih9mo+GjXVN1sv4LOhlw7dY= Subject key identifier: 9D:E0:22:67:0F:AC:AF:A4:11:6A:97:E5:AA:73:F5:82:E4:6F:0B:1C Authority key identifier: 46:49:52:BC:16:54:41:EC:6E:2E:20:10:C9:33:DC:83:0F:36:17:31 Certificate issuer: /CN=464952bc165441ec6e2e2010c933dc830f361731 Certificate serial: 019A71131E2BFB939E0EF5DB593B1B5F48A3 Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/RklSvBZUQexuLiAQyTPcgw82FzE.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/df/01058a-4a82-4818-972d-842858122bbc/1/RklSvBZUQexuLiAQyTPcgw82FzE.mft Manifest number: 0ACA Signing time: Tue 11 Nov 2025 04:01:09 +0000 Manifest this update: Tue 11 Nov 2025 04:01:09 +0000 Manifest next update: Wed 12 Nov 2025 04:01:09 +0000 Files and hashes: 1: 7HWHA8UqwHtsqDMBW-DwrAaDDjM.roa (hash: e8s5o0udkcNi/3gr4/Pby8a6BORkIl6Tk5BcUgdqf98=) 2: 8ZU3bGrm9xWhwMuNBNg_sVSf78w.roa (hash: q1BAPF4hVnnZILV3v3GzNcOP1nX7SZBYfnbCOVjjzwo=) 3: 9-Cs-wlSKolkQOZlHuZ6o38xnW8.roa (hash: /LvilRmKOS6giT5Dw0+bvBLFwH/Vk7jUGiOc4qBQkvY=) 4: CH-MNJ62x7kM2_t2iuWi-Pl441k.roa (hash: HaFXnQzr7MPgH+K0peJzoRzHcSdMpsIno7S1dDVTYls=) 5: CshdLYgm8KyBI5ue0kfqXsT_Uys.roa (hash: DVS6FpXLV5zruadQ+b5hngh4jzKnFCNJRTeuOL+rHMo=) 6: F93HK3zZbjyanEiJSO9cArJniew.roa (hash: wrh+x7Klvcmq0ZMqoDo7aM3datdsQCypsCC/kWY8BG4=) 7: RklSvBZUQexuLiAQyTPcgw82FzE.crl (hash: 212UdvOF3wOh3qouEarkrd/MDSWhRlBhZm3Ae95fsNc=) 8: RocZhE1Sgw4wWmm8LnKO4d7f68w.roa (hash: +rys+d7y9dD2VIYL252iXtWKGL/n4lME4L1WtriVBxI=) 9: U47Wz_LD2xLJywbdswHmPzRJpDo.roa (hash: qCq8pw/dLAXcMlcPqPaGHxhAYIuN8gInNQEcnd7HSIs=) 10: bsJ2xZlOkw1plvuA7l4e3XmHypY.roa (hash: 1vESi505hq9zZ4EhI/OkoYePF4oay9Y9KHYuJ7nDjEk=) 11: cSOzcJuJznyp0-yCo16vcwC-SO4.roa (hash: /BcpV3CpFg+yHnaLyG3CeUoFmA/RLptEV35Vt1SRJwQ=) 12: g8u27N4QItUirByGNIpicNOy82Y.roa (hash: 86XD7A3oPGKMoD9IAzlfVhw0nOpZrI3Tfibq7N31K6c=) 13: mGSm6WnPN8htR3E3SqRmvrkDAW0.roa (hash: ma8SoOibhRfVHVvLv4aSGOKoznJfyTFPs8hixxk0hN8=) 14: ryDPDikJ1i_zY_ss9G41qhvN3jc.roa (hash: h94vj7TMlIg5ainHE5mYHmcUUj3Q1WNeWVzGbaI/3Fg=) 15: s34gFp_Dg8YCv8xU55YOYuR_tp0.roa (hash: 6OSop7WtLWi7lLLdg7yDCXvjXq4AkQqEA6GX04GSf58=) Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/df/01058a-4a82-4818-972d-842858122bbc/1/RklSvBZUQexuLiAQyTPcgw82FzE.crl rsync://rpki.ripe.net/repository/DEFAULT/df/01058a-4a82-4818-972d-842858122bbc/1/RklSvBZUQexuLiAQyTPcgw82FzE.mft rsync://rpki.ripe.net/repository/DEFAULT/RklSvBZUQexuLiAQyTPcgw82FzE.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Wed 12 Nov 2025 04:01:09 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9a:71:13:1e:2b:fb:93:9e:0e:f5:db:59:3b:1b:5f:48:a3 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=464952bc165441ec6e2e2010c933dc830f361731 Validity Not Before: Nov 11 04:01:09 2025 GMT Not After : Nov 12 04:01:09 2025 GMT Subject: CN=9de022670facafa4116a97e5aa73f582e46f0b1c Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:a2:9d:f0:57:a8:df:36:4d:6b:bf:f6:bd:69:db: 19:f8:a8:a4:e7:a5:7d:a6:86:a9:8b:21:38:5c:05: 2e:a8:dd:f0:33:aa:55:41:18:ee:3a:99:9e:d5:9a: 62:76:09:59:37:b3:55:d5:94:8d:3f:28:26:a4:32: 0a:ab:01:0d:32:40:47:7a:2f:07:51:47:c4:88:85: 4b:e9:ff:ad:11:68:59:c7:f0:23:83:f2:90:ca:80: 27:0b:49:85:87:9d:31:f3:ce:81:43:68:98:d4:9a: 20:a0:a6:f0:e7:46:73:72:2d:bc:38:ce:5c:b9:a9: 1e:f8:07:78:92:d0:62:f6:bf:f6:a7:10:cc:14:89: d8:03:e3:bd:44:1c:6d:61:ff:15:80:9c:4d:c3:4a: c5:5d:8b:bb:86:f7:9a:43:9f:1e:19:a1:34:46:f5: 07:2e:a0:1c:06:50:77:92:0f:c5:a5:3a:25:f3:6c: 03:d6:13:87:9f:83:94:7f:ee:2d:5a:c5:fd:89:bf: a0:a1:4f:b7:32:b1:67:25:3c:e1:c2:b9:8a:08:57: f5:ff:a1:66:81:a9:5c:eb:19:3f:a8:dd:71:af:00: 4c:00:cc:84:77:05:d8:aa:b6:c1:ce:96:86:fb:bb: ff:8e:29:70:d4:3c:71:a4:b6:52:db:6c:0e:db:c1: 6a:ff Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 9D:E0:22:67:0F:AC:AF:A4:11:6A:97:E5:AA:73:F5:82:E4:6F:0B:1C X509v3 Authority Key Identifier: keyid:46:49:52:BC:16:54:41:EC:6E:2E:20:10:C9:33:DC:83:0F:36:17:31 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/RklSvBZUQexuLiAQyTPcgw82FzE.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/df/01058a-4a82-4818-972d-842858122bbc/1/RklSvBZUQexuLiAQyTPcgw82FzE.mft X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/df/01058a-4a82-4818-972d-842858122bbc/1/RklSvBZUQexuLiAQyTPcgw82FzE.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption b9:01:a6:90:c1:83:99:f6:26:32:ab:26:2e:95:a1:3f:93:bb: a6:62:df:d5:f7:22:04:81:d6:67:41:67:f5:76:49:73:26:92: 81:d8:e2:bf:c6:f8:25:71:30:89:f0:53:42:df:d8:bf:4a:9e: 8b:b1:fa:da:21:7a:7e:85:4b:ba:15:69:63:26:94:7a:d9:b1: 0b:df:fb:cd:bd:45:33:fd:47:58:5a:5d:f9:2c:c1:69:78:36: cb:3d:11:4d:d2:2e:72:9d:2c:ef:a3:3c:2e:dc:2b:31:d0:1d: 32:e6:95:8b:d7:7e:d7:6d:95:b4:f2:12:e5:e6:f7:65:7b:2a: 94:e9:82:77:1e:01:c1:a4:f5:98:83:66:a3:b5:21:03:ea:00: 46:d3:55:11:0d:89:05:65:5d:5a:5e:88:e6:4c:6a:75:04:44: 3c:b1:47:cc:f9:e6:9d:6e:20:f5:2e:0f:6f:69:b1:20:d7:3c: 12:32:80:9d:5e:5b:e6:64:27:42:39:a3:41:c3:4f:86:19:e9: 2d:bc:97:e7:cf:fb:82:2a:74:a5:ca:d4:c1:65:f7:a1:1c:0f: b2:ea:fd:66:f2:05:bd:fc:a2:16:e6:22:10:93:09:f6:b1:c8: ee:dc:40:d1:6d:5a:e4:ba:e4:b6:02:60:66:4f:23:78:84:c4: 9a:60:17:28 -----BEGIN CERTIFICATE----- MIIFFjCCA/6gAwIBAgISAZpxEx4r+5OeDvXbWTsbX0ijMA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKDQ2NDk1MmJjMTY1NDQxZWM2ZTJlMjAxMGM5MzNkYzgzMGYz NjE3MzEwHhcNMjUxMTExMDQwMTA5WhcNMjUxMTEyMDQwMTA5WjAzMTEwLwYDVQQD Eyg5ZGUwMjI2NzBmYWNhZmE0MTE2YTk3ZTVhYTczZjU4MmU0NmYwYjFjMIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAop3wV6jfNk1rv/a9adsZ+Kik56V9 poapiyE4XAUuqN3wM6pVQRjuOpme1ZpidglZN7NV1ZSNPygmpDIKqwENMkBHei8H UUfEiIVL6f+tEWhZx/Ajg/KQyoAnC0mFh50x886BQ2iY1JogoKbw50Zzci28OM5c uake+Ad4ktBi9r/2pxDMFInYA+O9RBxtYf8VgJxNw0rFXYu7hveaQ58eGaE0RvUH LqAcBlB3kg/FpTol82wD1hOHn4OUf+4tWsX9ib+goU+3MrFnJTzhwrmKCFf1/6Fm galc6xk/qN1xrwBMAMyEdwXYqrbBzpaG+7v/jilw1DxxpLZS22wO28Fq/wIDAQAB o4ICIjCCAh4wHQYDVR0OBBYEFJ3gImcPrK+kEWqX5apz9YLkbwscMB8GA1UdIwQY MBaAFEZJUrwWVEHsbi4gEMkz3IMPNhcxMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvUmtsU3ZCWlVRZXh1TGlBUXlUUGNndzgyRnpFLmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC9kZi8wMTA1OGEtNGE4Mi00ODE4LTk3MmQt ODQyODU4MTIyYmJjLzEvUmtsU3ZCWlVRZXh1TGlBUXlUUGNndzgyRnpFLm1mdDCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC9kZi8wMTA1OGEtNGE4Mi00ODE4LTk3MmQtODQyODU4MTIyYmJj LzEvUmtsU3ZCWlVRZXh1TGlBUXlUUGNndzgyRnpFLmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAuQGmkMGD mfYmMqsmLpWhP5O7pmLf1fciBIHWZ0Fn9XZJcyaSgdjiv8b4JXEwifBTQt/Yv0qe i7H62iF6foVLuhVpYyaUetmxC9/7zb1FM/1HWFpd+SzBaXg2yz0RTdIucp0s76M8 LtwrMdAdMuaVi9d+122VtPIS5eb3ZXsqlOmCdx4BwaT1mINmo7UhA+oARtNVEQ2J BWVdWl6I5kxqdQREPLFHzPnmnW4g9S4Pb2mxINc8EjKAnV5b5mQnQjmjQcNPhhnp LbyX58/7gip0pcrUwWX3oRwPsur9ZvIFvfyiFuYiEJMJ9rHI7txA0W1a5LrktgJg Zk8jeITEmmAXKA== -----END CERTIFICATE-----Generated at Tue Nov 11 12:48:32 2025 by rpki-client