$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/e6/587792-bae9-4183-a4b1-ff5f1ad69266/1/s8UbDAY8_BaUP8mkfiyAWZD26q4.mft File: s8UbDAY8_BaUP8mkfiyAWZD26q4.mft (raw, json) Hash identifier: r0JiiaBYDZVaCrEmEbZtYR94hrQvq0nnTdzZ+o/RD+I= Subject key identifier: 46:3A:33:F5:15:C6:DA:FC:53:9D:52:DD:47:1E:D0:B8:E1:E5:C2:75 Authority key identifier: B3:C5:1B:0C:06:3C:FC:16:94:3F:C9:A4:7E:2C:80:59:90:F6:EA:AE Certificate issuer: /CN=b3c51b0c063cfc16943fc9a47e2c805990f6eaae Certificate serial: 019A21ADB984E967F4EDE14BD0F9731B2EFA Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/s8UbDAY8_BaUP8mkfiyAWZD26q4.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/e6/587792-bae9-4183-a4b1-ff5f1ad69266/1/s8UbDAY8_BaUP8mkfiyAWZD26q4.mft Manifest number: 1704 Signing time: Sun 26 Oct 2025 18:00:24 +0000 Manifest this update: Sun 26 Oct 2025 18:00:24 +0000 Manifest next update: Mon 27 Oct 2025 18:00:24 +0000 Files and hashes: 1: 2mMFFVEf9RI7laeK707TbUw9w1o.roa (hash: lJtAZDZI6kWuia4ewbwmh2H0Ib7YOsmGLnMGMcXt0g8=) 2: 63AfX9tGzLI8rOFx7JtlMNOTY9k.roa (hash: MhOy0HHNjwbzh6TENPcem2eo6wIFhE2BTgKzC1N8oTk=) 3: BqnvofScUisQsUQed2MQ6B18GAQ.roa (hash: aF/iFUXhalT+tHSvHf/i2jdL4yddWHGSdcJZMfIy3uE=) 4: DV3PY9YU5zk2EaQYZkZq4p-ZUYM.roa (hash: iyl4yZuKkTsrQs+Y4JJy2vYNDSKm0/gIBzJQSKVyBGM=) 5: FeALzwmlHVBsdnrHTXpUuCdKMKk.roa (hash: LOwvL3odoyBFINMdFWH/VCQRIEFy3WTnNyeQKYYbRfU=) 6: H1-xrUolZhz6fzzg_UIN6T3DPWQ.roa (hash: qIZY0TolKgREye8GEvOpwQsSjnvpT07vwo6n55/XGY4=) 7: TyV9-G3EmDmxesG6kytX3N3gsKY.roa (hash: 5ZTWb+G4Smvs/SR1cTUZYD6dnJkngJRJoyw2KmVLYwM=) 8: UDyJk4Oy_-L1Te8H_oQucf6YjW4.roa (hash: RtdvCTTWOI7dE+z50k0BiFUEbUEH2UCgRme1pMQy/3s=) 9: WjZqJ0NhE5N_q8Z5fvWq8P2vTKU.roa (hash: yqIxBJiLiShm8irHVY2/sGIwoQoJ1y3znhIp9whAo54=) 10: dKsN1qGwEKIQpUTURYKT2umZW2w.roa (hash: tA8mIaQttFCg4VHXuxLgiMZWDalN45RLcJgG64coFpw=) 11: hmD_gbHlASML2ltcjVZUWmwvSYc.roa (hash: 7BK9fS2pKl/VxlRPtn0r5sqSpL1lbttsGsNK/TVCOlc=) 12: kskh1ZO_la7WXFGA4d2IKKXIwWc.roa (hash: PSi/1bSx17DcwOcX0aGn17oACEy8dwOziOStHczOl68=) 13: n4LrIW3mgA8G3axl4csgyTpsp8Q.roa (hash: LNegLtDN4y1dMd1RyuVmBjmyfpzTDjWVARTw/3voBLo=) 14: qfvkeVV0y4MYey-tvY_ef7wx-wY.roa (hash: vszu6nR/oFbgkiJpXSyUxF5kf03wjhbHFgMzPvnqwuM=) 15: s8UbDAY8_BaUP8mkfiyAWZD26q4.crl (hash: I37IxacRpvEXIR+7p7q8fMRuCSEXBBZgj40NUNyEQDE=) Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/e6/587792-bae9-4183-a4b1-ff5f1ad69266/1/s8UbDAY8_BaUP8mkfiyAWZD26q4.crl rsync://rpki.ripe.net/repository/DEFAULT/e6/587792-bae9-4183-a4b1-ff5f1ad69266/1/s8UbDAY8_BaUP8mkfiyAWZD26q4.mft rsync://rpki.ripe.net/repository/DEFAULT/s8UbDAY8_BaUP8mkfiyAWZD26q4.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Mon 27 Oct 2025 18:00:24 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9a:21:ad:b9:84:e9:67:f4:ed:e1:4b:d0:f9:73:1b:2e:fa Signature Algorithm: sha256WithRSAEncryption Issuer: CN=b3c51b0c063cfc16943fc9a47e2c805990f6eaae Validity Not Before: Oct 26 18:00:24 2025 GMT Not After : Oct 27 18:00:24 2025 GMT Subject: CN=463a33f515c6dafc539d52dd471ed0b8e1e5c275 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:bb:0b:ef:24:6a:bb:f9:68:35:f8:3d:b5:f5:e2: 11:97:2f:ca:dc:83:69:f8:a2:6a:91:e6:69:f9:e0: 85:23:b1:67:f6:67:7b:27:27:8a:46:1e:36:56:f0: eb:a9:d8:b0:d5:c1:be:df:33:13:70:94:c8:80:af: be:ab:7c:91:ca:23:24:7d:34:44:28:04:93:90:0e: 28:63:38:b3:cb:55:d0:05:b9:94:36:5d:35:90:08: 24:03:80:86:5a:eb:1f:fc:58:aa:2c:dd:39:a5:83: d0:39:91:6f:e9:c6:ae:a6:24:d5:3c:54:5e:9c:cd: fd:b7:b0:5c:f2:5d:3a:f9:07:61:b7:52:22:55:99: bb:61:ac:2d:5c:33:90:b7:81:c2:98:13:c2:6c:9d: 6d:95:52:3c:37:60:ec:08:76:3a:d4:57:e7:e7:73: 35:27:fb:3b:09:7d:96:39:63:df:fe:1a:70:2a:2d: 90:f1:d3:49:93:52:0c:cc:95:28:e1:73:b0:76:0a: c8:ca:c0:9c:f2:af:08:b9:4c:a8:27:07:de:4f:ee: 86:01:d8:81:0f:94:1c:9d:3f:4f:c1:51:a9:fa:bd: 59:84:f3:3c:3e:c6:34:38:22:28:f7:40:ab:05:c8: 84:58:32:ec:05:49:f7:5f:25:95:2b:fd:80:94:e5: f6:a5 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 46:3A:33:F5:15:C6:DA:FC:53:9D:52:DD:47:1E:D0:B8:E1:E5:C2:75 X509v3 Authority Key Identifier: keyid:B3:C5:1B:0C:06:3C:FC:16:94:3F:C9:A4:7E:2C:80:59:90:F6:EA:AE X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/s8UbDAY8_BaUP8mkfiyAWZD26q4.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/e6/587792-bae9-4183-a4b1-ff5f1ad69266/1/s8UbDAY8_BaUP8mkfiyAWZD26q4.mft X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/e6/587792-bae9-4183-a4b1-ff5f1ad69266/1/s8UbDAY8_BaUP8mkfiyAWZD26q4.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 28:0a:00:d1:1e:70:42:56:08:42:3b:ef:8d:3e:63:a7:83:4b: 0a:66:ce:25:2e:ea:6a:78:a1:e4:74:ae:d2:1a:88:51:e5:ba: 68:a0:18:84:42:b5:21:d6:ee:ce:01:b5:96:57:6e:99:c2:ff: 13:fe:b9:7b:c5:4f:a1:28:f9:5d:7c:a8:82:f5:71:a4:ab:1c: 5f:77:cf:84:f5:d5:1e:2d:ea:37:c6:4f:59:01:6b:41:08:99: c5:2a:a3:ba:ad:38:aa:2f:5b:ea:3e:43:ed:96:36:5d:a8:c7: 67:06:01:f2:74:cd:0c:b2:2f:b0:e5:35:7b:30:64:d7:bd:17: 7d:13:4b:76:df:a5:8a:aa:8c:01:6b:1a:f9:f4:77:7c:6a:b0: cb:d3:de:74:ca:74:af:c5:49:43:27:43:1f:55:bb:48:3e:5a: ac:82:bf:18:0c:bc:1f:d3:aa:ae:f1:e0:64:5a:d2:a1:74:9b: 74:22:f2:a4:1c:da:6e:48:f7:c2:40:03:6e:42:72:19:6c:e9: 1b:b1:92:5e:3c:10:6d:3e:f2:0d:30:73:f4:19:fe:b2:a5:2a: b2:86:4e:80:79:f2:8d:cc:68:92:52:93:eb:1f:5f:72:0e:61: 48:dc:e0:81:0a:cd:12:9a:f0:ee:87:91:ac:bd:64:e0:b6:a6: f7:ff:68:07 -----BEGIN CERTIFICATE----- MIIFFjCCA/6gAwIBAgISAZohrbmE6Wf07eFL0PlzGy76MA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKGIzYzUxYjBjMDYzY2ZjMTY5NDNmYzlhNDdlMmM4MDU5OTBm NmVhYWUwHhcNMjUxMDI2MTgwMDI0WhcNMjUxMDI3MTgwMDI0WjAzMTEwLwYDVQQD Eyg0NjNhMzNmNTE1YzZkYWZjNTM5ZDUyZGQ0NzFlZDBiOGUxZTVjMjc1MIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAuwvvJGq7+Wg1+D219eIRly/K3INp +KJqkeZp+eCFI7Fn9md7JyeKRh42VvDrqdiw1cG+3zMTcJTIgK++q3yRyiMkfTRE KASTkA4oYzizy1XQBbmUNl01kAgkA4CGWusf/FiqLN05pYPQOZFv6caupiTVPFRe nM39t7Bc8l06+Qdht1IiVZm7YawtXDOQt4HCmBPCbJ1tlVI8N2DsCHY61Ffn53M1 J/s7CX2WOWPf/hpwKi2Q8dNJk1IMzJUo4XOwdgrIysCc8q8IuUyoJwfeT+6GAdiB D5QcnT9PwVGp+r1ZhPM8PsY0OCIo90CrBciEWDLsBUn3XyWVK/2AlOX2pQIDAQAB o4ICIjCCAh4wHQYDVR0OBBYEFEY6M/UVxtr8U51S3Uce0Ljh5cJ1MB8GA1UdIwQY MBaAFLPFGwwGPPwWlD/JpH4sgFmQ9uquMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvczhVYkRBWThfQmFVUDhta2ZpeUFXWkQyNnE0LmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC9lNi81ODc3OTItYmFlOS00MTgzLWE0YjEt ZmY1ZjFhZDY5MjY2LzEvczhVYkRBWThfQmFVUDhta2ZpeUFXWkQyNnE0Lm1mdDCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC9lNi81ODc3OTItYmFlOS00MTgzLWE0YjEtZmY1ZjFhZDY5MjY2 LzEvczhVYkRBWThfQmFVUDhta2ZpeUFXWkQyNnE0LmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAKAoA0R5w QlYIQjvvjT5jp4NLCmbOJS7qanih5HSu0hqIUeW6aKAYhEK1IdbuzgG1lldumcL/ E/65e8VPoSj5XXyogvVxpKscX3fPhPXVHi3qN8ZPWQFrQQiZxSqjuq04qi9b6j5D 7ZY2XajHZwYB8nTNDLIvsOU1ezBk170XfRNLdt+liqqMAWsa+fR3fGqwy9PedMp0 r8VJQydDH1W7SD5arIK/GAy8H9OqrvHgZFrSoXSbdCLypBzabkj3wkADbkJyGWzp G7GSXjwQbT7yDTBz9Bn+sqUqsoZOgHnyjcxoklKT6x9fcg5hSNzggQrNEprw7oeR rL1k4Lam9/9oBw== -----END CERTIFICATE-----Generated at Mon Oct 27 01:06:59 2025 by rpki-client