$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/e7/b41ab6-b9f3-4b4a-9b7b-1ed10954bd96/1/V1PAYpCjcZlNdXcxhoX1vEpTjUc.mft File: V1PAYpCjcZlNdXcxhoX1vEpTjUc.mft (raw, json) Hash identifier: fjt+0mQfzOoFTKG5j1pFaEcUkkeewTOlEdkQUpK+q2g= Subject key identifier: 2E:B4:CF:7D:8E:62:8A:BE:FE:65:1B:98:01:6C:85:B8:F5:E8:58:6C Authority key identifier: 57:53:C0:62:90:A3:71:99:4D:75:77:31:86:85:F5:BC:4A:53:8D:47 Certificate issuer: /CN=5753c06290a371994d7577318685f5bc4a538d47 Certificate serial: 019A1AD123E2B4D273463052D3F2DA9A6F19 Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/V1PAYpCjcZlNdXcxhoX1vEpTjUc.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/e7/b41ab6-b9f3-4b4a-9b7b-1ed10954bd96/1/V1PAYpCjcZlNdXcxhoX1vEpTjUc.mft Manifest number: 12E7 Signing time: Sat 25 Oct 2025 10:01:45 +0000 Manifest this update: Sat 25 Oct 2025 10:01:45 +0000 Manifest next update: Sun 26 Oct 2025 10:01:45 +0000 Files and hashes: 1: 1-2ze8RFqsfXiBAT11ime5104BjY.roa (hash: 1G/91kNwXr6Euhuawe1vb8XkKyyCivckcaN+MUB7G0c=) 2: 5lDpUUbHXzya0fMquFYbFulqqVs.roa (hash: f1hht89a/wconxQu5KNK8QHufJfhYi0HFOvBnekJIq0=) 3: FHAcQ1hSwnBkPa_1eYwrasvDBAI.roa (hash: UEqpRdrSw3UNWb3wNwi2VW+eLR/IeGW0ScqzLsmeYpU=) 4: FeD_-2NSvz_oTh1LHrP44NqzWIo.roa (hash: M0rfgf8nLa/Z7WmSdsaO8N+Wk6yxPhPTCcsAwupLmJk=) 5: G0XtWDoXmf3g4WPOe4oJBWwD53c.roa (hash: ah5ed8JgyczAK0ktQp/XfJNbJde2PQoHxbYeBWCDQq0=) 6: HlClfikOJrfktj0svDKphR0_6Ic.roa (hash: g1qw7C3eBB8cA1eir2ZaMGGhWvD9jq2Y2uAjecDMYHM=) 7: LXaOacmSywqNlfh5CO5J1YXXGmI.roa (hash: jtQHK2Bwk3+TO9AZet3mFNI8IuZDJg2fZaIIhEkYoQM=) 8: OXCR5eZAjAKFe_5_WqZvsLDsIGw.roa (hash: +dX5GIlPaHoX8hOklKsClO3JcTsDNTNWJiq3yrlcruo=) 9: SVRVY-q0OPWhiL6mBd92R9L5Zm4.roa (hash: dI19F02QJ/eVSmcDcyQsUmklhiicL/qqyQKGyXmUBoc=) 10: V1PAYpCjcZlNdXcxhoX1vEpTjUc.crl (hash: CN/HMh2uZcUHFp7//U4Gy8Olo7GgXW/+JEWvJw+GrQI=) 11: Xdc1GXsEPiQ6GE6eHjFDA0ZgS3w.roa (hash: OE+tVEQ0oQcFP5VxqAmEpxiSoF7RE792pp1YSKmB2O0=) 12: ctU4FIR-r7525NdQcQhV07S1InU.roa (hash: AU7Mc04mkVMs25EZU4CCsCrYPVp1VtWzfOi9wTwg8to=) 13: e2eD9qK2hYztM9wMgcHLi8AhZs8.roa (hash: tUPW+7fViLoXv6YzC5FAQqNxsVyrAjo9of3A+F1usKg=) 14: s6UOiaPwRDDgS4GdUQJjrNxDCkA.roa (hash: MfReyFTsbPeeVwKX4SeLCT5vdQejZ0/27SaFtWWlLKo=) 15: valOsPAluNa3RG5X659q6dsU_FA.roa (hash: fkBC+Rvf3Gv+oy6BC36LsnU6WeruMquhW06fi/seA5s=) Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/e7/b41ab6-b9f3-4b4a-9b7b-1ed10954bd96/1/V1PAYpCjcZlNdXcxhoX1vEpTjUc.crl rsync://rpki.ripe.net/repository/DEFAULT/e7/b41ab6-b9f3-4b4a-9b7b-1ed10954bd96/1/V1PAYpCjcZlNdXcxhoX1vEpTjUc.mft rsync://rpki.ripe.net/repository/DEFAULT/V1PAYpCjcZlNdXcxhoX1vEpTjUc.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Sun 26 Oct 2025 08:33:03 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9a:1a:d1:23:e2:b4:d2:73:46:30:52:d3:f2:da:9a:6f:19 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=5753c06290a371994d7577318685f5bc4a538d47 Validity Not Before: Oct 25 10:01:45 2025 GMT Not After : Oct 26 10:01:45 2025 GMT Subject: CN=2eb4cf7d8e628abefe651b98016c85b8f5e8586c Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:9f:1f:f1:0c:ae:33:c1:33:71:f2:18:1f:ef:38: cb:2c:45:fd:97:ca:c9:ed:81:56:71:e3:8d:02:7e: f0:06:c8:fe:1b:21:bf:e4:45:74:1c:97:fb:b3:24: 77:3b:45:0b:ef:1e:07:d0:eb:83:db:c7:04:ab:a3: 72:fe:17:0d:4d:3d:cf:8c:a5:ab:3a:9a:32:18:26: 04:95:9c:20:c2:04:16:47:3a:7b:98:da:45:f6:dc: 4a:b2:40:19:8f:1f:da:5c:c3:ce:5f:84:fb:ed:d5: 64:4e:58:12:c5:79:44:2e:ac:fe:1d:f2:42:87:41: 44:a7:90:6d:0e:55:9c:35:ee:bb:e0:fa:ed:7f:70: 99:2e:b4:7b:1c:2a:c2:19:78:a3:23:49:5a:4d:a4: 66:68:f7:3a:20:eb:56:b9:2a:e5:65:c1:43:de:d5: f2:4d:c6:66:70:14:4b:1c:13:a8:ec:64:d8:22:3a: ee:e8:6a:99:c6:91:86:bc:cb:fb:30:f5:f7:72:d2: 63:f5:f4:30:f6:83:31:e6:6d:df:11:67:68:77:03: 35:19:0d:aa:40:9c:f7:4a:26:4f:19:57:24:de:a2: a1:f6:3e:45:75:67:a7:68:ab:cb:98:d9:11:7a:83: 2b:d9:b3:90:d4:8f:87:ec:b6:5b:bf:f5:97:82:79: 2d:9d Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 2E:B4:CF:7D:8E:62:8A:BE:FE:65:1B:98:01:6C:85:B8:F5:E8:58:6C X509v3 Authority Key Identifier: keyid:57:53:C0:62:90:A3:71:99:4D:75:77:31:86:85:F5:BC:4A:53:8D:47 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/V1PAYpCjcZlNdXcxhoX1vEpTjUc.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/e7/b41ab6-b9f3-4b4a-9b7b-1ed10954bd96/1/V1PAYpCjcZlNdXcxhoX1vEpTjUc.mft X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/e7/b41ab6-b9f3-4b4a-9b7b-1ed10954bd96/1/V1PAYpCjcZlNdXcxhoX1vEpTjUc.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 38:d5:a9:03:61:83:f8:fa:01:af:a2:08:a8:37:b2:78:5b:03: fb:d5:42:99:37:69:b4:41:71:34:59:3f:7a:fd:07:c5:77:7a: fb:52:ea:02:24:cb:cb:bb:a4:24:ec:df:51:c5:e4:f1:76:bf: 52:c1:94:29:03:57:ef:2a:03:7f:07:d8:96:ca:c5:a7:3e:c7: 51:b8:c1:c2:7a:c3:61:58:0e:4f:f0:54:09:c1:d1:a5:e3:28: 7b:47:8c:08:ac:1c:e6:c3:6b:47:54:d9:77:0e:c5:cf:05:cf: 46:29:25:d8:1c:12:f4:54:1c:2d:fc:b0:ed:b1:34:b9:e9:8c: d2:10:9b:09:12:b8:34:4c:20:ac:fc:49:8c:9f:44:fb:de:a0: e5:c6:8e:0b:4d:16:02:7f:d1:8c:70:3e:b0:1c:d5:85:63:ad: fb:72:ea:e1:de:83:0e:5e:73:9a:94:cf:f7:fd:8a:81:e4:57: ea:79:08:6d:d5:80:1c:7a:74:23:35:45:12:dc:d1:9b:12:37: a9:7f:99:10:65:ba:ad:9e:11:d0:a3:f3:35:b1:da:0a:2e:c3: f2:d4:c2:7b:95:2b:d3:39:49:b5:6d:85:6e:22:0d:b1:3d:56: 73:81:73:df:94:fa:6c:14:83:c4:7b:6e:de:60:a8:ef:a8:75: a2:f5:e3:7f -----BEGIN CERTIFICATE----- MIIFFjCCA/6gAwIBAgISAZoa0SPitNJzRjBS0/Lamm8ZMA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKDU3NTNjMDYyOTBhMzcxOTk0ZDc1NzczMTg2ODVmNWJjNGE1 MzhkNDcwHhcNMjUxMDI1MTAwMTQ1WhcNMjUxMDI2MTAwMTQ1WjAzMTEwLwYDVQQD EygyZWI0Y2Y3ZDhlNjI4YWJlZmU2NTFiOTgwMTZjODViOGY1ZTg1ODZjMIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAnx/xDK4zwTNx8hgf7zjLLEX9l8rJ 7YFWceONAn7wBsj+GyG/5EV0HJf7syR3O0UL7x4H0OuD28cEq6Ny/hcNTT3PjKWr OpoyGCYElZwgwgQWRzp7mNpF9txKskAZjx/aXMPOX4T77dVkTlgSxXlELqz+HfJC h0FEp5BtDlWcNe674Prtf3CZLrR7HCrCGXijI0laTaRmaPc6IOtWuSrlZcFD3tXy TcZmcBRLHBOo7GTYIjru6GqZxpGGvMv7MPX3ctJj9fQw9oMx5m3fEWdodwM1GQ2q QJz3SiZPGVck3qKh9j5FdWenaKvLmNkReoMr2bOQ1I+H7LZbv/WXgnktnQIDAQAB o4ICIjCCAh4wHQYDVR0OBBYEFC60z32OYoq+/mUbmAFshbj16FhsMB8GA1UdIwQY MBaAFFdTwGKQo3GZTXV3MYaF9bxKU41HMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvVjFQQVlwQ2pjWmxOZFhjeGhvWDF2RXBUalVjLmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC9lNy9iNDFhYjYtYjlmMy00YjRhLTliN2It MWVkMTA5NTRiZDk2LzEvVjFQQVlwQ2pjWmxOZFhjeGhvWDF2RXBUalVjLm1mdDCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC9lNy9iNDFhYjYtYjlmMy00YjRhLTliN2ItMWVkMTA5NTRiZDk2 LzEvVjFQQVlwQ2pjWmxOZFhjeGhvWDF2RXBUalVjLmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAONWpA2GD +PoBr6IIqDeyeFsD+9VCmTdptEFxNFk/ev0HxXd6+1LqAiTLy7ukJOzfUcXk8Xa/ UsGUKQNX7yoDfwfYlsrFpz7HUbjBwnrDYVgOT/BUCcHRpeMoe0eMCKwc5sNrR1TZ dw7FzwXPRikl2BwS9FQcLfyw7bE0uemM0hCbCRK4NEwgrPxJjJ9E+96g5caOC00W An/RjHA+sBzVhWOt+3Lq4d6DDl5zmpTP9/2KgeRX6nkIbdWAHHp0IzVFEtzRmxI3 qX+ZEGW6rZ4R0KPzNbHaCi7D8tTCe5Ur0zlJtW2FbiINsT1Wc4Fz35T6bBSDxHtu 3mCo76h1ovXjfw== -----END CERTIFICATE-----Generated at Sat Oct 25 14:35:56 2025 by rpki-client