$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/e7/b41ab6-b9f3-4b4a-9b7b-1ed10954bd96/1/V1PAYpCjcZlNdXcxhoX1vEpTjUc.mft File: V1PAYpCjcZlNdXcxhoX1vEpTjUc.mft (raw, json) Hash identifier: JdW2WBJkvA52ImPd2iH45NWFo757QojVd49BclmPJcc= Subject key identifier: FB:84:00:94:62:86:EC:02:77:03:D3:E1:E3:B7:AC:EA:11:31:F8:D9 Authority key identifier: 57:53:C0:62:90:A3:71:99:4D:75:77:31:86:85:F5:BC:4A:53:8D:47 Certificate issuer: /CN=5753c06290a371994d7577318685f5bc4a538d47 Certificate serial: 019A6DDB6F7C09F73620700BA1C1B8B1AB55 Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/V1PAYpCjcZlNdXcxhoX1vEpTjUc.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/e7/b41ab6-b9f3-4b4a-9b7b-1ed10954bd96/1/V1PAYpCjcZlNdXcxhoX1vEpTjUc.mft Manifest number: 1312 Signing time: Mon 10 Nov 2025 13:01:28 +0000 Manifest this update: Mon 10 Nov 2025 13:01:28 +0000 Manifest next update: Tue 11 Nov 2025 13:01:28 +0000 Files and hashes: 1: 1-2ze8RFqsfXiBAT11ime5104BjY.roa (hash: 1G/91kNwXr6Euhuawe1vb8XkKyyCivckcaN+MUB7G0c=) 2: 5lDpUUbHXzya0fMquFYbFulqqVs.roa (hash: f1hht89a/wconxQu5KNK8QHufJfhYi0HFOvBnekJIq0=) 3: FHAcQ1hSwnBkPa_1eYwrasvDBAI.roa (hash: UEqpRdrSw3UNWb3wNwi2VW+eLR/IeGW0ScqzLsmeYpU=) 4: FeD_-2NSvz_oTh1LHrP44NqzWIo.roa (hash: M0rfgf8nLa/Z7WmSdsaO8N+Wk6yxPhPTCcsAwupLmJk=) 5: G0XtWDoXmf3g4WPOe4oJBWwD53c.roa (hash: ah5ed8JgyczAK0ktQp/XfJNbJde2PQoHxbYeBWCDQq0=) 6: HlClfikOJrfktj0svDKphR0_6Ic.roa (hash: g1qw7C3eBB8cA1eir2ZaMGGhWvD9jq2Y2uAjecDMYHM=) 7: LXaOacmSywqNlfh5CO5J1YXXGmI.roa (hash: jtQHK2Bwk3+TO9AZet3mFNI8IuZDJg2fZaIIhEkYoQM=) 8: OXCR5eZAjAKFe_5_WqZvsLDsIGw.roa (hash: +dX5GIlPaHoX8hOklKsClO3JcTsDNTNWJiq3yrlcruo=) 9: SVRVY-q0OPWhiL6mBd92R9L5Zm4.roa (hash: dI19F02QJ/eVSmcDcyQsUmklhiicL/qqyQKGyXmUBoc=) 10: V1PAYpCjcZlNdXcxhoX1vEpTjUc.crl (hash: 4/rq5C7iZ9MDlOEVJyo5mGpcIr9qL0WzMzo8IgTPn6o=) 11: Xdc1GXsEPiQ6GE6eHjFDA0ZgS3w.roa (hash: OE+tVEQ0oQcFP5VxqAmEpxiSoF7RE792pp1YSKmB2O0=) 12: ctU4FIR-r7525NdQcQhV07S1InU.roa (hash: AU7Mc04mkVMs25EZU4CCsCrYPVp1VtWzfOi9wTwg8to=) 13: e2eD9qK2hYztM9wMgcHLi8AhZs8.roa (hash: tUPW+7fViLoXv6YzC5FAQqNxsVyrAjo9of3A+F1usKg=) 14: s6UOiaPwRDDgS4GdUQJjrNxDCkA.roa (hash: MfReyFTsbPeeVwKX4SeLCT5vdQejZ0/27SaFtWWlLKo=) 15: valOsPAluNa3RG5X659q6dsU_FA.roa (hash: fkBC+Rvf3Gv+oy6BC36LsnU6WeruMquhW06fi/seA5s=) Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/e7/b41ab6-b9f3-4b4a-9b7b-1ed10954bd96/1/V1PAYpCjcZlNdXcxhoX1vEpTjUc.crl rsync://rpki.ripe.net/repository/DEFAULT/e7/b41ab6-b9f3-4b4a-9b7b-1ed10954bd96/1/V1PAYpCjcZlNdXcxhoX1vEpTjUc.mft rsync://rpki.ripe.net/repository/DEFAULT/V1PAYpCjcZlNdXcxhoX1vEpTjUc.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Tue 11 Nov 2025 13:01:28 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9a:6d:db:6f:7c:09:f7:36:20:70:0b:a1:c1:b8:b1:ab:55 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=5753c06290a371994d7577318685f5bc4a538d47 Validity Not Before: Nov 10 13:01:28 2025 GMT Not After : Nov 11 13:01:28 2025 GMT Subject: CN=fb8400946286ec027703d3e1e3b7acea1131f8d9 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:c4:4d:45:7e:b8:fa:4e:68:fb:f1:d6:1d:2c:90: 09:a3:14:85:a2:4a:98:89:fb:b4:fc:5f:87:27:e0: 17:87:e5:1f:c7:d0:99:63:f3:0f:a0:81:fa:b1:12: c3:c5:60:11:e7:da:34:c1:d4:9f:64:7e:f5:cb:1b: e0:5c:f8:46:30:0c:87:bf:93:36:89:20:06:c3:20: a1:d1:ae:e0:bb:5c:b2:db:ba:d3:77:1b:7c:98:0e: cd:79:74:c8:b1:3c:2f:62:fc:d0:18:51:79:f8:6a: ee:ec:0b:c4:80:10:ed:51:f5:fe:58:9e:0b:1d:e7: 0e:7c:58:39:32:79:72:9d:13:1e:0f:e5:32:b5:5e: 05:1b:12:da:99:ad:45:34:48:e0:22:43:4b:4e:28: 86:5a:a0:a7:ac:9d:9f:d1:00:77:46:e0:f8:26:b7: 25:b9:cf:02:c3:b7:3e:8b:a7:9d:b3:3d:6a:54:75: 9a:27:2d:2d:62:f0:eb:29:c0:f9:d7:c1:e3:26:47: eb:45:e7:61:aa:96:cb:e5:a9:79:4e:ae:f9:3f:36: 1b:e7:23:a9:76:fc:98:fc:94:f0:57:81:62:c5:79: b1:b4:2a:34:24:5f:de:0f:3b:f6:8c:24:c4:57:50: 57:b9:a6:7e:d4:13:26:72:5e:e8:43:8f:f5:1c:59: 68:bb Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: FB:84:00:94:62:86:EC:02:77:03:D3:E1:E3:B7:AC:EA:11:31:F8:D9 X509v3 Authority Key Identifier: keyid:57:53:C0:62:90:A3:71:99:4D:75:77:31:86:85:F5:BC:4A:53:8D:47 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/V1PAYpCjcZlNdXcxhoX1vEpTjUc.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/e7/b41ab6-b9f3-4b4a-9b7b-1ed10954bd96/1/V1PAYpCjcZlNdXcxhoX1vEpTjUc.mft X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/e7/b41ab6-b9f3-4b4a-9b7b-1ed10954bd96/1/V1PAYpCjcZlNdXcxhoX1vEpTjUc.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 09:e8:c3:a1:31:80:a6:98:5c:a3:be:e3:84:90:01:47:23:22: c8:71:ec:66:24:8b:04:fd:25:5f:57:f2:49:c2:ee:e7:2a:d3: 0f:fb:55:44:fd:ba:e8:7b:4e:b0:cd:ff:cc:9b:2a:e3:53:fb: fa:ec:80:7d:69:6f:e6:6a:e5:9f:2d:b9:1f:a5:a6:d8:dc:72: 44:aa:c6:23:49:d3:7f:75:45:c3:65:8f:6a:42:8e:80:c1:5d: 6c:7c:a1:27:9a:dd:3b:d0:6b:69:21:ac:29:e6:b0:7a:36:81: 34:74:ab:03:26:41:ec:93:07:1d:ba:25:a7:d1:36:6e:31:a2: ae:20:48:9e:3d:61:5e:d1:ec:39:85:2a:1c:2b:ba:3d:79:ad: 4b:04:f7:94:2a:40:9d:43:35:da:48:59:7d:7b:24:37:df:16: 53:48:2c:47:90:bc:12:45:41:29:80:33:e7:a1:77:1f:ff:3b: 28:ff:ad:90:c9:f1:bc:40:3d:af:75:b1:08:dc:ee:5a:6e:25: 12:4e:ef:ba:8b:78:86:c6:d7:5f:80:8e:58:68:ba:f0:ac:03: 0e:04:d0:2c:50:4c:d5:7b:16:92:d9:89:67:e5:fe:89:06:34: fc:d1:c0:66:23:ee:10:62:ce:43:22:3f:b8:dd:83:2e:28:a7: 4b:be:fe:54 -----BEGIN CERTIFICATE----- MIIFFjCCA/6gAwIBAgISAZpt2298Cfc2IHALocG4satVMA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKDU3NTNjMDYyOTBhMzcxOTk0ZDc1NzczMTg2ODVmNWJjNGE1 MzhkNDcwHhcNMjUxMTEwMTMwMTI4WhcNMjUxMTExMTMwMTI4WjAzMTEwLwYDVQQD EyhmYjg0MDA5NDYyODZlYzAyNzcwM2QzZTFlM2I3YWNlYTExMzFmOGQ5MIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAxE1Ffrj6Tmj78dYdLJAJoxSFokqY ifu0/F+HJ+AXh+Ufx9CZY/MPoIH6sRLDxWAR59o0wdSfZH71yxvgXPhGMAyHv5M2 iSAGwyCh0a7gu1yy27rTdxt8mA7NeXTIsTwvYvzQGFF5+Gru7AvEgBDtUfX+WJ4L HecOfFg5MnlynRMeD+UytV4FGxLama1FNEjgIkNLTiiGWqCnrJ2f0QB3RuD4Jrcl uc8Cw7c+i6edsz1qVHWaJy0tYvDrKcD518HjJkfrRedhqpbL5al5Tq75PzYb5yOp dvyY/JTwV4FixXmxtCo0JF/eDzv2jCTEV1BXuaZ+1BMmcl7oQ4/1HFlouwIDAQAB o4ICIjCCAh4wHQYDVR0OBBYEFPuEAJRihuwCdwPT4eO3rOoRMfjZMB8GA1UdIwQY MBaAFFdTwGKQo3GZTXV3MYaF9bxKU41HMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvVjFQQVlwQ2pjWmxOZFhjeGhvWDF2RXBUalVjLmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC9lNy9iNDFhYjYtYjlmMy00YjRhLTliN2It MWVkMTA5NTRiZDk2LzEvVjFQQVlwQ2pjWmxOZFhjeGhvWDF2RXBUalVjLm1mdDCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC9lNy9iNDFhYjYtYjlmMy00YjRhLTliN2ItMWVkMTA5NTRiZDk2 LzEvVjFQQVlwQ2pjWmxOZFhjeGhvWDF2RXBUalVjLmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEACejDoTGA pphco77jhJABRyMiyHHsZiSLBP0lX1fyScLu5yrTD/tVRP266HtOsM3/zJsq41P7 +uyAfWlv5mrlny25H6Wm2NxyRKrGI0nTf3VFw2WPakKOgMFdbHyhJ5rdO9BraSGs KeawejaBNHSrAyZB7JMHHbolp9E2bjGiriBInj1hXtHsOYUqHCu6PXmtSwT3lCpA nUM12khZfXskN98WU0gsR5C8EkVBKYAz56F3H/87KP+tkMnxvEA9r3WxCNzuWm4l Ek7vuot4hsbXX4COWGi68KwDDgTQLFBM1XsWktmJZ+X+iQY0/NHAZiPuEGLOQyI/ uN2DLiinS77+VA== -----END CERTIFICATE-----Generated at Mon Nov 10 17:35:56 2025 by rpki-client