$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/e0/8cac0c-3426-4f07-af20-cbb95183b27a/1/o20K5eL7_8zgh3Drwgwha5-_lIU.mft File: o20K5eL7_8zgh3Drwgwha5-_lIU.mft (raw, json) Hash identifier: jb7Tlpp2ny4QiaS6Lr14daFLKF3E2Ub7UEM3bxFaHV8= Subject key identifier: 6F:B3:B8:49:F3:63:11:C1:1A:D0:BC:39:F7:33:FC:D2:A7:EB:23:62 Authority key identifier: A3:6D:0A:E5:E2:FB:FF:CC:E0:87:70:EB:C2:0C:21:6B:9F:BF:94:85 Certificate issuer: /CN=a36d0ae5e2fbffcce08770ebc20c216b9fbf9485 Certificate serial: 019A71B89E1CA1B18C886D2840E5D786FD24 Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/o20K5eL7_8zgh3Drwgwha5-_lIU.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/e0/8cac0c-3426-4f07-af20-cbb95183b27a/1/o20K5eL7_8zgh3Drwgwha5-_lIU.mft Manifest number: 1766 Signing time: Tue 11 Nov 2025 07:01:55 +0000 Manifest this update: Tue 11 Nov 2025 07:01:55 +0000 Manifest next update: Wed 12 Nov 2025 07:01:55 +0000 Files and hashes: 1: 1XbIXlsc12j6nm66ObHlANu1FxM.roa (hash: lxZWGjYaWrGULnJUqbEWkt5IyYC/5a04fccF0g2Mp+o=) 2: 2tgBVmzXGxk2dORJHycmoqheNvg.roa (hash: kLmIpYFnCrJEJseq7gvSUWiTbkY+zk+XKRVcxk6gNqA=) 3: 3RFddkozoZGvDJWQRcnS3tQnN6k.roa (hash: KSM4qOmDj4X6PN9gZp6oxzJSTfcXsGzAsnDPsOPcYvo=) 4: 87A59tFx6zF_AoyfTTInJAFnkcA.roa (hash: unw4vIAiAfpS55i1OMoFYw1rzCbyU808aYVca3OlIMc=) 5: DlEN3D6ABTKOQAUtaBMUB9rDXTg.roa (hash: 7Z/Q1II+IY41ZQNrl/gNVuPJHIVrAlLxhLrLlp3uHJ8=) 6: PstjevQSMTfK9Nebc81zBIABSOY.roa (hash: yBGg5RaTCzg2szqA7T42K/slhIoFVty00QDcExnxviw=) 7: YBvNoajDSlWBD9rpf_g7I4GMsIw.roa (hash: Dj39vgxSEEOQgYRsBD+Yi70TljAy8Kf7UHt7BDtlwUU=) 8: fz5OQX3YNuZKli23fQPsHJMHAjg.roa (hash: 2W1jdhiJm6VJW0yfAkLiyNtl6yjC+Bfx3j0Hv8QWt58=) 9: o20K5eL7_8zgh3Drwgwha5-_lIU.crl (hash: varKsWWUdLlkOYOwJTU4lNypo3cr+2t/X/5I/UOqnQY=) 10: uxPuBCLIiL0vvpcp5iG57n6Nxl8.roa (hash: 9FJQPnJf1+iHQwAWGEeso0fULqarFlyxqNgrRoa6pYY=) 11: v8yHhVnQZ24d3Hqq-_MmljsyF-o.roa (hash: ldyVLPmDRLippOD+hn4EjHJmd9dcu8cUfl/mwJelT5M=) 12: vOg7pIai3eYlqI8nGfkYR-448qE.roa (hash: k2twTqEvKHP86X8yabE26RQnv5iqhvXZjH+b4EIuDog=) Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/e0/8cac0c-3426-4f07-af20-cbb95183b27a/1/o20K5eL7_8zgh3Drwgwha5-_lIU.crl rsync://rpki.ripe.net/repository/DEFAULT/e0/8cac0c-3426-4f07-af20-cbb95183b27a/1/o20K5eL7_8zgh3Drwgwha5-_lIU.mft rsync://rpki.ripe.net/repository/DEFAULT/o20K5eL7_8zgh3Drwgwha5-_lIU.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Wed 12 Nov 2025 07:01:55 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9a:71:b8:9e:1c:a1:b1:8c:88:6d:28:40:e5:d7:86:fd:24 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=a36d0ae5e2fbffcce08770ebc20c216b9fbf9485 Validity Not Before: Nov 11 07:01:55 2025 GMT Not After : Nov 12 07:01:55 2025 GMT Subject: CN=6fb3b849f36311c11ad0bc39f733fcd2a7eb2362 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:cc:ca:ae:46:32:e2:b9:93:55:05:78:50:f4:47: c5:ba:ca:91:08:52:e7:ab:bc:e2:43:20:a1:ff:bb: 08:c7:4f:59:a5:28:8d:1e:b5:91:6d:e4:0e:85:a9: 46:55:04:5d:4e:37:dd:29:19:3a:34:c1:c7:ac:8d: c8:04:17:03:73:11:ff:3f:67:15:c9:94:9c:bc:cb: c4:e3:0b:78:40:36:33:f1:c8:73:37:a3:f2:fc:5b: 5a:43:af:7d:ce:5d:ed:87:71:38:84:2b:01:b2:2e: c3:29:d6:58:e4:58:0c:a0:4e:6b:05:97:22:35:a4: eb:5f:28:be:a7:45:d7:03:36:8e:ad:4b:35:5d:f7: 7b:38:54:e4:3b:94:97:a7:23:4c:d0:7f:1e:6d:48: 32:32:a2:55:5d:21:de:09:99:77:9e:74:e3:c2:a0: 12:95:0b:55:49:31:4a:f5:5e:50:ec:cd:10:33:f0: 6b:bf:4a:4b:98:be:31:dc:47:4c:ed:7d:88:61:0b: 39:27:16:ba:4b:ce:74:52:84:9e:d6:f5:d5:a7:89: fe:10:6d:2d:6c:9f:a6:eb:62:ef:1f:45:d3:8f:b9: ae:c1:78:95:df:b6:5d:0a:ca:4a:e1:30:a8:be:4b: d2:b4:01:5c:4f:db:e1:92:fb:97:6a:98:6d:56:3f: d6:a9 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 6F:B3:B8:49:F3:63:11:C1:1A:D0:BC:39:F7:33:FC:D2:A7:EB:23:62 X509v3 Authority Key Identifier: keyid:A3:6D:0A:E5:E2:FB:FF:CC:E0:87:70:EB:C2:0C:21:6B:9F:BF:94:85 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/o20K5eL7_8zgh3Drwgwha5-_lIU.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/e0/8cac0c-3426-4f07-af20-cbb95183b27a/1/o20K5eL7_8zgh3Drwgwha5-_lIU.mft X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/e0/8cac0c-3426-4f07-af20-cbb95183b27a/1/o20K5eL7_8zgh3Drwgwha5-_lIU.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 09:0b:d3:8f:e8:8d:94:cb:f9:94:81:43:df:ff:a0:e9:fc:dd: 4d:d2:5f:7c:15:44:c2:6d:38:44:da:f1:74:a2:70:c8:54:cf: 32:32:97:a6:1e:06:27:9d:17:d8:40:81:48:99:67:ec:4f:a6: 5b:69:47:a2:51:ad:08:5b:1c:eb:f6:88:86:31:39:52:8a:83: de:46:3b:a0:d2:c7:e3:78:9d:56:85:23:64:f7:d6:b8:cf:dc: a5:e8:35:8e:43:90:cf:8d:28:36:58:b0:c2:ae:b0:a2:2f:46: e0:7d:65:bf:59:dc:79:1a:72:8d:62:cd:ed:c8:30:2d:03:06: a5:b8:1e:4b:d7:49:bd:a4:55:0a:4e:b7:76:83:ab:cc:09:63: e6:c6:7f:83:b7:d2:0f:10:21:12:b7:f9:bd:08:e6:24:ed:db: c6:c2:a3:2c:5d:37:78:34:3e:24:73:84:42:65:06:c0:d9:2a: 88:fd:ea:66:60:45:95:ce:2e:3a:a9:36:08:7b:af:5c:19:31: 2b:56:8b:ac:57:8d:d8:f7:13:23:07:cb:92:88:86:8a:48:d4: ea:52:2b:ba:6e:46:d7:d2:aa:8c:f0:7f:c3:b2:c0:d5:34:e0: 83:ef:1e:af:20:58:e3:2c:1f:b0:fb:a4:9f:4e:d3:c3:45:6e: 84:39:cd:0a -----BEGIN CERTIFICATE----- MIIFFjCCA/6gAwIBAgISAZpxuJ4cobGMiG0oQOXXhv0kMA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKGEzNmQwYWU1ZTJmYmZmY2NlMDg3NzBlYmMyMGMyMTZiOWZi Zjk0ODUwHhcNMjUxMTExMDcwMTU1WhcNMjUxMTEyMDcwMTU1WjAzMTEwLwYDVQQD Eyg2ZmIzYjg0OWYzNjMxMWMxMWFkMGJjMzlmNzMzZmNkMmE3ZWIyMzYyMIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAzMquRjLiuZNVBXhQ9EfFusqRCFLn q7ziQyCh/7sIx09ZpSiNHrWRbeQOhalGVQRdTjfdKRk6NMHHrI3IBBcDcxH/P2cV yZScvMvE4wt4QDYz8chzN6Py/FtaQ699zl3th3E4hCsBsi7DKdZY5FgMoE5rBZci NaTrXyi+p0XXAzaOrUs1Xfd7OFTkO5SXpyNM0H8ebUgyMqJVXSHeCZl3nnTjwqAS lQtVSTFK9V5Q7M0QM/Brv0pLmL4x3EdM7X2IYQs5Jxa6S850UoSe1vXVp4n+EG0t bJ+m62LvH0XTj7muwXiV37ZdCspK4TCovkvStAFcT9vhkvuXaphtVj/WqQIDAQAB o4ICIjCCAh4wHQYDVR0OBBYEFG+zuEnzYxHBGtC8Ofcz/NKn6yNiMB8GA1UdIwQY MBaAFKNtCuXi+//M4Idw68IMIWufv5SFMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvbzIwSzVlTDdfOHpnaDNEcndnd2hhNS1fbElVLmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC9lMC84Y2FjMGMtMzQyNi00ZjA3LWFmMjAt Y2JiOTUxODNiMjdhLzEvbzIwSzVlTDdfOHpnaDNEcndnd2hhNS1fbElVLm1mdDCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC9lMC84Y2FjMGMtMzQyNi00ZjA3LWFmMjAtY2JiOTUxODNiMjdh LzEvbzIwSzVlTDdfOHpnaDNEcndnd2hhNS1fbElVLmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEACQvTj+iN lMv5lIFD3/+g6fzdTdJffBVEwm04RNrxdKJwyFTPMjKXph4GJ50X2ECBSJln7E+m W2lHolGtCFsc6/aIhjE5UoqD3kY7oNLH43idVoUjZPfWuM/cpeg1jkOQz40oNliw wq6woi9G4H1lv1nceRpyjWLN7cgwLQMGpbgeS9dJvaRVCk63doOrzAlj5sZ/g7fS DxAhErf5vQjmJO3bxsKjLF03eDQ+JHOEQmUGwNkqiP3qZmBFlc4uOqk2CHuvXBkx K1aLrFeN2PcTIwfLkoiGikjU6lIrum5G19KqjPB/w7LA1TTgg+8eryBY4ywfsPuk n07Tw0VuhDnNCg== -----END CERTIFICATE-----Generated at Tue Nov 11 14:03:49 2025 by rpki-client