$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/e1/0f9f02-c2ad-4ec8-b4d5-dfbfa3fcf021/1/5L6O_sH7A9ivl5rxy6E6CEWnsLo.mft File: 5L6O_sH7A9ivl5rxy6E6CEWnsLo.mft (raw, json) Hash identifier: rqkEA3BKJ8KhioOywfshyZlqB3Ro1WV7zmVgNTM431g= Subject key identifier: BD:1F:B4:D5:77:CB:2C:54:76:58:A4:C6:F1:28:DC:80:DD:35:FE:B9 Authority key identifier: E4:BE:8E:FE:C1:FB:03:D8:AF:97:9A:F1:CB:A1:3A:08:45:A7:B0:BA Certificate issuer: /CN=e4be8efec1fb03d8af979af1cba13a0845a7b0ba Certificate serial: 019A209C960758D964670754C705C4C4544C Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/5L6O_sH7A9ivl5rxy6E6CEWnsLo.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/e1/0f9f02-c2ad-4ec8-b4d5-dfbfa3fcf021/1/5L6O_sH7A9ivl5rxy6E6CEWnsLo.mft Manifest number: 0BF6 Signing time: Sun 26 Oct 2025 13:02:04 +0000 Manifest this update: Sun 26 Oct 2025 13:02:04 +0000 Manifest next update: Mon 27 Oct 2025 13:02:04 +0000 Files and hashes: 1: 2m_CYVmLsPzF7bcN6vIid84YZD8.roa (hash: LBmz6BkcC+hYAgg9NpyTpTiVYvW2FI/a+Z33OiNH3bM=) 2: 4nVbm_9mW8-MAn0I_kGjdBfxhVw.roa (hash: pTL9FLQm2ArdSOx4IvTJl5dYC4wcCTYCswuw3GEGHMQ=) 3: 5L6O_sH7A9ivl5rxy6E6CEWnsLo.crl (hash: m62u1AJBpUVj9m0NWjPfzbqk9dEvIpgcj/9CK4IUb5k=) 4: ASUGNfdEr-zmHuBMKbmczWEEyX0.roa (hash: XbBf6Nfds25faGeda9A9EZrA0jUpRsOTRIO73TfrGdU=) 5: D_RGKNjU3HO1804H_N4lL39f8xU.roa (hash: lQxsMyLpAGFJHo/y+xtaq8v1/ZEVry9ym0LdrZC/Bgk=) 6: Di4BCmfwCebJmpiiwQVl8kD1SGY.roa (hash: YROnCwrXQNQ5Na/T+Qstm6PeSLYo1KpF7+7yHOQYHZY=) 7: IpmNqXNW_slvomPPNDBgUsOEzfM.roa (hash: Pw8rvzKx3ysNgK3+6i7f6vpgrH3WD3WqD3kHoDoxu9U=) 8: IrnZpWugwiVaDWE0Y8y2HTk6myM.roa (hash: hz4dzGEJlp9nAI/PksWqX4be/cNB9cFXoUk0RTppUW4=) 9: UPL7qImi1Ys3kJpNeUneyjua3iE.roa (hash: yEbc7GI9w/HHKG7S49YH0IbZWjyzBWFPN0Ij4so55ao=) 10: Wqi1dLZsHvoMXUpSlZaZNHPgS_4.roa (hash: uMbe0TM0fIuYtnHf63Llp9sJ+CZVXJ/tOzlQU2AOjts=) 11: gqYJ1QlxZp2sfbvxF5yVPiDZ3Dk.roa (hash: +mkHl1F4HLXN9PfWQktZtYiROfsgXfptEmlNuP4F0GM=) 12: hrJ9G8LdPfpuv4HEnlrj0UM1FZI.roa (hash: Ap/wGOk300z33ESWLkwykljx6YcmZDQ+kuaPYGOBuOE=) 13: ip51KpcMdfOcRWLVf2HbT1-y1Tk.roa (hash: w96a29aqdZpAZsW1TalxljppYBFpY8XCQQF21I+O+bg=) 14: qOKY-IzakK8b3r-fGGAM7SuFUFM.roa (hash: 0xmS3lTVgR47MEU89O0ODLmZ+nEhlRcq1hkGVTaLD7U=) 15: u_PvNoZGGKwKo1fIPAvA4pNGOWE.roa (hash: 7nleymXLPmClcPELIrjirAmjx3u5krkfwTmE5v3abBQ=) Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/e1/0f9f02-c2ad-4ec8-b4d5-dfbfa3fcf021/1/5L6O_sH7A9ivl5rxy6E6CEWnsLo.crl rsync://rpki.ripe.net/repository/DEFAULT/e1/0f9f02-c2ad-4ec8-b4d5-dfbfa3fcf021/1/5L6O_sH7A9ivl5rxy6E6CEWnsLo.mft rsync://rpki.ripe.net/repository/DEFAULT/5L6O_sH7A9ivl5rxy6E6CEWnsLo.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Mon 27 Oct 2025 12:00:03 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9a:20:9c:96:07:58:d9:64:67:07:54:c7:05:c4:c4:54:4c Signature Algorithm: sha256WithRSAEncryption Issuer: CN=e4be8efec1fb03d8af979af1cba13a0845a7b0ba Validity Not Before: Oct 26 13:02:04 2025 GMT Not After : Oct 27 13:02:04 2025 GMT Subject: CN=bd1fb4d577cb2c547658a4c6f128dc80dd35feb9 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:af:ac:53:1b:b4:4c:bc:ef:22:76:a1:b4:81:9c: a6:de:bf:cd:3d:71:86:21:e1:40:5f:e9:7a:88:1d: 70:af:6b:29:82:bf:8e:68:b3:4f:f3:9b:2f:f7:89: f4:9d:3b:55:a5:78:1b:a2:8d:78:e8:99:f5:a6:88: 42:73:59:cd:3c:1a:4c:15:6e:33:5d:98:96:08:b3: eb:0a:d6:ec:d2:4a:95:be:af:a5:87:ac:11:a5:65: a9:ca:d7:98:72:4b:06:87:c4:7f:37:2c:32:5c:bc: 13:91:ff:5d:06:c5:38:eb:d4:17:5c:2f:3c:93:94: a2:5f:7f:b6:7a:54:a3:5a:16:df:d9:b6:22:02:31: f1:10:8d:a7:01:01:55:6b:8d:3b:6f:ff:e5:85:22: 2d:30:2a:1b:f1:2a:2b:24:fe:05:ed:01:8b:9d:29: 70:2e:d5:35:71:7f:0d:6a:ac:d1:5a:d2:77:63:18: fd:ca:8a:c6:0a:76:85:87:ce:84:68:dc:43:25:e7: 87:8f:90:bb:d2:01:eb:81:6e:be:ae:67:2d:48:92: 72:7e:73:38:24:6f:19:f0:23:33:5a:42:3b:d2:f5: 03:d8:41:d3:77:e8:b5:b9:0d:e6:47:72:9c:6e:55: 23:e8:63:9a:a8:ba:1e:b9:22:b6:5f:11:e0:fd:31: e3:fd Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: BD:1F:B4:D5:77:CB:2C:54:76:58:A4:C6:F1:28:DC:80:DD:35:FE:B9 X509v3 Authority Key Identifier: keyid:E4:BE:8E:FE:C1:FB:03:D8:AF:97:9A:F1:CB:A1:3A:08:45:A7:B0:BA X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/5L6O_sH7A9ivl5rxy6E6CEWnsLo.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/e1/0f9f02-c2ad-4ec8-b4d5-dfbfa3fcf021/1/5L6O_sH7A9ivl5rxy6E6CEWnsLo.mft X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/e1/0f9f02-c2ad-4ec8-b4d5-dfbfa3fcf021/1/5L6O_sH7A9ivl5rxy6E6CEWnsLo.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 2a:67:dc:6c:95:b9:64:f3:a3:f3:07:63:5c:c0:d8:26:80:a5: a4:e0:07:86:a9:31:32:04:38:65:b6:87:dd:9f:60:c1:64:ff: fd:47:ed:dc:22:9a:8e:30:ef:7a:cc:19:15:35:bd:c1:4f:0d: 2e:08:94:92:8e:c9:5c:25:7e:ac:c1:d1:99:5e:a7:56:91:ee: 40:4b:34:a7:0c:d4:4d:4d:4c:8d:8f:64:4b:fa:d0:4b:a0:f4: e7:dc:38:06:52:e9:71:6d:cc:af:b7:b9:dc:4a:f4:f3:12:69: e3:c2:4e:0c:9c:ee:1f:2d:5d:e9:c2:0d:78:52:b8:f8:d4:6f: 23:c1:d1:81:91:28:f4:10:fc:0a:31:57:3a:c4:8b:d8:71:73: 81:fa:e5:ff:55:0e:bf:2b:20:3d:9d:e2:8b:cc:0f:20:a7:cf: 15:7a:2c:54:e5:24:81:c1:93:46:1f:e2:aa:03:31:18:50:56: 77:d6:b6:82:19:db:6d:1d:5f:8e:e0:5a:3b:e0:43:9b:a1:aa: 9c:aa:48:20:df:84:48:f7:19:8b:10:2d:e4:c0:9f:f5:c6:dc: 28:9a:18:0f:fc:17:84:13:26:c1:91:92:24:20:af:01:af:c9: 13:e3:e0:ef:22:4d:5a:58:5e:df:35:76:b9:23:c4:37:a6:bd: 46:cf:d3:82 -----BEGIN CERTIFICATE----- MIIFFjCCA/6gAwIBAgISAZognJYHWNlkZwdUxwXExFRMMA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKGU0YmU4ZWZlYzFmYjAzZDhhZjk3OWFmMWNiYTEzYTA4NDVh N2IwYmEwHhcNMjUxMDI2MTMwMjA0WhcNMjUxMDI3MTMwMjA0WjAzMTEwLwYDVQQD EyhiZDFmYjRkNTc3Y2IyYzU0NzY1OGE0YzZmMTI4ZGM4MGRkMzVmZWI5MIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAr6xTG7RMvO8idqG0gZym3r/NPXGG IeFAX+l6iB1wr2spgr+OaLNP85sv94n0nTtVpXgboo146Jn1pohCc1nNPBpMFW4z XZiWCLPrCtbs0kqVvq+lh6wRpWWpyteYcksGh8R/NywyXLwTkf9dBsU469QXXC88 k5SiX3+2elSjWhbf2bYiAjHxEI2nAQFVa407b//lhSItMCob8SorJP4F7QGLnSlw LtU1cX8NaqzRWtJ3Yxj9yorGCnaFh86EaNxDJeeHj5C70gHrgW6+rmctSJJyfnM4 JG8Z8CMzWkI70vUD2EHTd+i1uQ3mR3KcblUj6GOaqLoeuSK2XxHg/THj/QIDAQAB o4ICIjCCAh4wHQYDVR0OBBYEFL0ftNV3yyxUdlikxvEo3IDdNf65MB8GA1UdIwQY MBaAFOS+jv7B+wPYr5ea8cuhOghFp7C6MA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvNUw2T19zSDdBOWl2bDVyeHk2RTZDRVduc0xvLmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC9lMS8wZjlmMDItYzJhZC00ZWM4LWI0ZDUt ZGZiZmEzZmNmMDIxLzEvNUw2T19zSDdBOWl2bDVyeHk2RTZDRVduc0xvLm1mdDCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC9lMS8wZjlmMDItYzJhZC00ZWM4LWI0ZDUtZGZiZmEzZmNmMDIx LzEvNUw2T19zSDdBOWl2bDVyeHk2RTZDRVduc0xvLmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAKmfcbJW5 ZPOj8wdjXMDYJoClpOAHhqkxMgQ4ZbaH3Z9gwWT//Uft3CKajjDveswZFTW9wU8N LgiUko7JXCV+rMHRmV6nVpHuQEs0pwzUTU1MjY9kS/rQS6D059w4BlLpcW3Mr7e5 3Er08xJp48JODJzuHy1d6cINeFK4+NRvI8HRgZEo9BD8CjFXOsSL2HFzgfrl/1UO vysgPZ3ii8wPIKfPFXosVOUkgcGTRh/iqgMxGFBWd9a2ghnbbR1fjuBaO+BDm6Gq nKpIIN+ESPcZixAt5MCf9cbcKJoYD/wXhBMmwZGSJCCvAa/JE+Pg7yJNWlhe3zV2 uSPEN6a9Rs/Tgg== -----END CERTIFICATE-----Generated at Sun Oct 26 16:45:03 2025 by rpki-client