$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/e2/ad3044-cdce-46cf-92c9-a954d053994a/1/1g9F98xLaR_UoxwfHAtPYF13pu8.mft File: 1g9F98xLaR_UoxwfHAtPYF13pu8.mft (raw, json) Hash identifier: TrcqJkDgbHRrwgML+bMWFDvNIiFtUFfwuBOwPRgiDe8= Subject key identifier: DF:3E:01:0B:1D:11:69:C2:8A:AE:5B:69:10:07:74:4C:19:34:16:06 Authority key identifier: D6:0F:45:F7:CC:4B:69:1F:D4:A3:1C:1F:1C:0B:4F:60:5D:77:A6:EF Certificate issuer: /CN=d60f45f7cc4b691fd4a31c1f1c0b4f605d77a6ef Certificate serial: 019A2DB1F237FA37934054A9BF0D8C735AC6 Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/1g9F98xLaR_UoxwfHAtPYF13pu8.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/e2/ad3044-cdce-46cf-92c9-a954d053994a/1/1g9F98xLaR_UoxwfHAtPYF13pu8.mft Manifest number: 1705 Signing time: Wed 29 Oct 2025 02:00:27 +0000 Manifest this update: Wed 29 Oct 2025 02:00:27 +0000 Manifest next update: Thu 30 Oct 2025 02:00:27 +0000 Files and hashes: 1: 1g9F98xLaR_UoxwfHAtPYF13pu8.crl (hash: RVXFkm+BRiUxhEQoz70D+BaHkRsquI2jyi8TGjfq/GM=) 2: GMAT5cnP7VsDriW3_zL3dmojRH8.roa (hash: 9OZgqMWwoj0IlbvwNkLekurnPx7RT1aRlKGSPHOL6N4=) 3: IoE67Ac0pXcZcF9gBBC8VKka1vE.roa (hash: kt4XWZcgrYkLHsaAC2c2z5iyqyhmqC0zJwGvhSrnQ3E=) 4: MnG_2GzorHPsXNp5Vum7-rUjReY.roa (hash: D3z8cv+XlClqN6b2gc/ybPBfC33Ewbb6orbavaJ/jxk=) 5: PPMANDrLvF7lVgznicSOoAT3-3U.roa (hash: goEhx/poAjkzaQRi2RGACZSEuEQ6nJJ0p5PoSp7o6bo=) 6: b5u0PP2LUmpbpNJ4qAdIl3s9IjI.roa (hash: 4ZbWUTDO0hiozFSxacFGW2XCjTl1RPjd3yDPIUYji9M=) 7: jfxb2BR-CQiCSpU8DpDydbDz1b0.roa (hash: fObbuEbq3/zFmHWpgeQlp5JFopCYl+4GEGdq5exW77c=) 8: rrmPFSxVt5xEtowDvlnYGvxrH3s.roa (hash: mhHuydqllyBkMxNXx9HLabM7W+Fte6mEhiiQe0n8fRA=) 9: th1p5jE1fl21GfKXyCflURpVpo0.roa (hash: w4pXoPCT9slYbdDvFiyPewBrsldI3f9m6umM8Wv0SkE=) 10: viBgIC4abJYY7C__L2VefsiYSYI.roa (hash: r+Hi34v0Qt4A/ODVfo4uFHb77CXM38aMXnF2F0o4IcY=) 11: xNr5I0Wokl-j2aBAEkjZmpNRVng.roa (hash: epmYMuuR7FlxzNy/fvLKPn2AzgVlFDZhQf7tXXleECM=) Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/e2/ad3044-cdce-46cf-92c9-a954d053994a/1/1g9F98xLaR_UoxwfHAtPYF13pu8.crl rsync://rpki.ripe.net/repository/DEFAULT/e2/ad3044-cdce-46cf-92c9-a954d053994a/1/1g9F98xLaR_UoxwfHAtPYF13pu8.mft rsync://rpki.ripe.net/repository/DEFAULT/1g9F98xLaR_UoxwfHAtPYF13pu8.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Thu 30 Oct 2025 02:00:27 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9a:2d:b1:f2:37:fa:37:93:40:54:a9:bf:0d:8c:73:5a:c6 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=d60f45f7cc4b691fd4a31c1f1c0b4f605d77a6ef Validity Not Before: Oct 29 02:00:27 2025 GMT Not After : Oct 30 02:00:27 2025 GMT Subject: CN=df3e010b1d1169c28aae5b691007744c19341606 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:eb:f9:b7:9f:d7:91:43:e1:43:f2:e1:bd:71:b6: ac:19:e2:c5:0a:2d:90:73:76:d2:3c:1c:ab:56:c6: 8d:e9:20:28:80:6b:85:fc:26:1d:40:be:9c:59:74: 36:09:31:68:c0:88:b2:a6:c3:d6:b0:7d:60:3d:a5: 04:ec:3f:3c:b9:cc:72:4b:ef:f1:17:8e:5a:32:94: 67:9a:ee:be:69:1f:c3:38:b7:f5:52:94:ff:48:f8: e6:52:46:42:e1:e1:36:44:a5:cb:5b:88:e3:a4:13: 3d:93:85:57:2d:a6:65:11:34:a6:1d:73:2c:7c:19: ee:da:8c:d7:98:b9:9d:21:0a:37:e9:2c:14:fc:8a: 9e:11:c3:45:a5:89:9c:fa:89:89:a2:3d:9e:7f:13: 5a:30:e2:ee:69:23:46:60:62:19:cb:af:31:bb:fa: 51:dc:4d:92:de:85:bd:67:cf:da:44:09:57:b0:f9: a3:43:33:e8:34:78:3b:7d:8f:ff:fd:a3:04:0a:39: d9:6e:55:f4:ee:41:ec:26:fa:14:ff:ff:34:dd:03: 06:ff:06:df:9d:6f:91:12:e1:72:07:e8:90:4a:98: 42:80:2a:32:f0:1b:80:73:e8:35:cb:ab:5c:f9:9c: 91:6a:ef:3b:1d:e4:17:ff:67:b8:a8:fa:47:63:f7: 14:b3 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: DF:3E:01:0B:1D:11:69:C2:8A:AE:5B:69:10:07:74:4C:19:34:16:06 X509v3 Authority Key Identifier: keyid:D6:0F:45:F7:CC:4B:69:1F:D4:A3:1C:1F:1C:0B:4F:60:5D:77:A6:EF X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/1g9F98xLaR_UoxwfHAtPYF13pu8.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/e2/ad3044-cdce-46cf-92c9-a954d053994a/1/1g9F98xLaR_UoxwfHAtPYF13pu8.mft X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/e2/ad3044-cdce-46cf-92c9-a954d053994a/1/1g9F98xLaR_UoxwfHAtPYF13pu8.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 7d:18:7d:15:9a:92:dc:19:04:62:5c:75:11:30:cc:24:99:3d: 3d:ec:74:60:05:ea:65:58:3c:ca:cc:57:32:07:51:a4:75:14: 1c:96:81:ca:31:55:52:db:af:31:a7:65:8f:57:15:f1:33:32: 12:43:eb:69:91:09:ba:78:a8:d4:f2:3b:2d:d5:68:f1:b4:19: c5:b8:26:af:02:da:c2:0d:c6:f3:b5:9f:a8:4f:b7:fb:81:ab: a0:13:5e:e3:93:90:91:e0:c3:01:5b:88:18:7f:6e:a2:3c:6b: 47:19:21:3a:eb:29:4d:35:1d:1d:5c:be:70:79:15:35:5c:92: d8:a8:78:ba:21:7e:db:98:cd:b5:84:69:01:c9:a1:0f:3c:b4: c2:7a:9e:b3:98:f1:cb:51:f6:81:cf:a9:90:0f:61:1f:f2:b3: ed:c9:40:a9:63:fa:46:0c:5a:9f:7f:39:9d:3e:2f:8b:c5:80: da:c9:bd:da:09:00:17:ce:bb:7d:95:7b:e0:34:63:6c:cb:7e: 68:eb:32:ae:00:2c:57:8f:b6:43:8a:08:a3:7f:f5:de:85:8b: 6c:dc:8a:24:6c:d3:92:75:f4:06:b8:66:65:09:e2:cc:ad:e2: 47:be:de:b7:ae:ba:a4:8b:77:bf:5d:16:6d:6d:96:c4:95:ea: 49:d9:f5:cd -----BEGIN CERTIFICATE----- MIIFFjCCA/6gAwIBAgISAZotsfI3+jeTQFSpvw2Mc1rGMA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKGQ2MGY0NWY3Y2M0YjY5MWZkNGEzMWMxZjFjMGI0ZjYwNWQ3 N2E2ZWYwHhcNMjUxMDI5MDIwMDI3WhcNMjUxMDMwMDIwMDI3WjAzMTEwLwYDVQQD EyhkZjNlMDEwYjFkMTE2OWMyOGFhZTViNjkxMDA3NzQ0YzE5MzQxNjA2MIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEA6/m3n9eRQ+FD8uG9cbasGeLFCi2Q c3bSPByrVsaN6SAogGuF/CYdQL6cWXQ2CTFowIiypsPWsH1gPaUE7D88ucxyS+/x F45aMpRnmu6+aR/DOLf1UpT/SPjmUkZC4eE2RKXLW4jjpBM9k4VXLaZlETSmHXMs fBnu2ozXmLmdIQo36SwU/IqeEcNFpYmc+omJoj2efxNaMOLuaSNGYGIZy68xu/pR 3E2S3oW9Z8/aRAlXsPmjQzPoNHg7fY///aMECjnZblX07kHsJvoU//803QMG/wbf nW+REuFyB+iQSphCgCoy8BuAc+g1y6tc+ZyRau87HeQX/2e4qPpHY/cUswIDAQAB o4ICIjCCAh4wHQYDVR0OBBYEFN8+AQsdEWnCiq5baRAHdEwZNBYGMB8GA1UdIwQY MBaAFNYPRffMS2kf1KMcHxwLT2Bdd6bvMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvMWc5Rjk4eExhUl9Vb3h3ZkhBdFBZRjEzcHU4LmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC9lMi9hZDMwNDQtY2RjZS00NmNmLTkyYzkt YTk1NGQwNTM5OTRhLzEvMWc5Rjk4eExhUl9Vb3h3ZkhBdFBZRjEzcHU4Lm1mdDCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC9lMi9hZDMwNDQtY2RjZS00NmNmLTkyYzktYTk1NGQwNTM5OTRh LzEvMWc5Rjk4eExhUl9Vb3h3ZkhBdFBZRjEzcHU4LmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAfRh9FZqS 3BkEYlx1ETDMJJk9Pex0YAXqZVg8ysxXMgdRpHUUHJaByjFVUtuvMadlj1cV8TMy EkPraZEJunio1PI7LdVo8bQZxbgmrwLawg3G87WfqE+3+4GroBNe45OQkeDDAVuI GH9uojxrRxkhOuspTTUdHVy+cHkVNVyS2Kh4uiF+25jNtYRpAcmhDzy0wnqes5jx y1H2gc+pkA9hH/Kz7clAqWP6Rgxan385nT4vi8WA2sm92gkAF867fZV74DRjbMt+ aOsyrgAsV4+2Q4oIo3/13oWLbNyKJGzTknX0BrhmZQnizK3iR77et666pIt3v10W bW2WxJXqSdn1zQ== -----END CERTIFICATE-----Generated at Wed Oct 29 11:33:30 2025 by rpki-client