$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/e9/129564-f1db-4dc5-8906-6fcdcd5ab660/1/D_gMvf4YNUo8_bov4HmqLrxY3NQ.mft File: D_gMvf4YNUo8_bov4HmqLrxY3NQ.mft (raw, json) Hash identifier: tIFLqcYdH9e/o+wPDB3njsUYB08uGjjujSaKKYrsL0E= Subject key identifier: 44:C0:13:F0:51:0B:ED:C7:D0:EC:CA:5A:A0:9A:AD:7F:52:8F:5C:4A Authority key identifier: 0F:F8:0C:BD:FE:18:35:4A:3C:FD:BA:2F:E0:79:AA:2E:BC:58:DC:D4 Certificate issuer: /CN=0ff80cbdfe18354a3cfdba2fe079aa2ebc58dcd4 Certificate serial: 019A06DB587E649D45A2D3D295AB715CFB0C Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/D_gMvf4YNUo8_bov4HmqLrxY3NQ.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/e9/129564-f1db-4dc5-8906-6fcdcd5ab660/1/D_gMvf4YNUo8_bov4HmqLrxY3NQ.mft Manifest number: 11EF Signing time: Tue 21 Oct 2025 13:00:29 +0000 Manifest this update: Tue 21 Oct 2025 13:00:29 +0000 Manifest next update: Wed 22 Oct 2025 13:00:29 +0000 Files and hashes: 1: 36cneJws6HIb-_f2mS0l66nxLX4.roa (hash: cv3+x1XjkIvksuAO0LUX+L5FwL88LDLqWblnVZ+rq3Q=) 2: 8AuUB3FxiHV1blKo-b6xY84eohk.roa (hash: Kg20ZKTXvW1uV16aDD+SNuojir6sQqoC1ASnSIoi3uI=) 3: ALwZhIzMltcNA93bXSkzknwg_14.roa (hash: 8/oCBG94vIxN2asbJtnpsK13+hX56C8+2PdARaHhKJk=) 4: DEkBy5NY_LBNS4NnY8NdFK8rzcA.roa (hash: +sPTotcuWF+CjCR1a5iOtYDxd/TTy8d8sIEt72jDjC4=) 5: D_gMvf4YNUo8_bov4HmqLrxY3NQ.crl (hash: XY32fMymvlia395QUpoi+fT0JM7zYVDo3x9oV6wt4BY=) 6: E4H11vqlDsWfsKfFnRaByGFpFjE.roa (hash: uk2Eyw6ijxdod6j6CVfKRX8Y6AcwVXdvoKqS9Zsbg6E=) 7: GK6sSI8I6Ck9l0KxlxiTx3CR9nI.roa (hash: Q0nMWgUs5VqHeZOmvrfOcHnb629+mFC+BasITyYx9y4=) 8: MKy6XWAYP3zxh7zwKNcWOiDPR-k.roa (hash: R+XM0slVwo6Gs1r7U5p3g+xfmCVjwikkwCXqqmpC4RI=) 9: P1pvZ_QpHLCNhor-GrDuuGuoxWU.roa (hash: j2Q3VKziFV5MgEQnuqrclJc+B8ndKOKWRmqLDbcpuQk=) 10: TBO-3J5fI4kjR6nBhhGm9Q7Fxxs.roa (hash: GxuPpCFAskC5A0RoCelobXY9HbueDhOq2tEj0W9aVGs=) 11: XDcWQfbkwvZ4pO52-Rl-lOrB_iw.roa (hash: ht+KVJK83F1lQo8Wp6/sNr0N7S9QYHVd5SEP7bnL0Q4=) 12: fegZDjvnxgRurYo7N2dE56doPrs.roa (hash: G1Sc4jTNIBp0OhDx/ZdY4eKnulZIfcXzqIWbYkym44I=) 13: hNPAJBJQcRtE-SJjyoGEKsljmXA.roa (hash: cxILOvyPqMN2Kz+W/9LGBBCgK1NOKrZ4exJ0ZNKhTeQ=) 14: pDnsD5Q1hTzMW2k6uZ4MVh9ZizU.roa (hash: Ug4pqyVy1hepE30KQdlNpPdKYvaVRsEaEW6Bq45BqsI=) 15: rY4Fp-Dk7WkrCbqk7rdEiiNEmj4.roa (hash: rnMK9FKk4H5lXqqOHDb/rM0tbc6UoAnWXexKMf+rh/I=) 16: svu4gQ0pPgVBKQU6339vQZbXEAQ.roa (hash: RAHfZT/d13ig7RU8lQNXL5nHpSOa8CZeRzLwR9xpJH8=) Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/e9/129564-f1db-4dc5-8906-6fcdcd5ab660/1/D_gMvf4YNUo8_bov4HmqLrxY3NQ.crl rsync://rpki.ripe.net/repository/DEFAULT/e9/129564-f1db-4dc5-8906-6fcdcd5ab660/1/D_gMvf4YNUo8_bov4HmqLrxY3NQ.mft rsync://rpki.ripe.net/repository/DEFAULT/D_gMvf4YNUo8_bov4HmqLrxY3NQ.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Wed 22 Oct 2025 13:00:29 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9a:06:db:58:7e:64:9d:45:a2:d3:d2:95:ab:71:5c:fb:0c Signature Algorithm: sha256WithRSAEncryption Issuer: CN=0ff80cbdfe18354a3cfdba2fe079aa2ebc58dcd4 Validity Not Before: Oct 21 13:00:29 2025 GMT Not After : Oct 22 13:00:29 2025 GMT Subject: CN=44c013f0510bedc7d0ecca5aa09aad7f528f5c4a Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:c0:45:14:ae:65:99:77:63:fd:81:d1:4a:b6:b9: 97:24:4a:f6:ff:c9:a1:7d:00:c5:a7:e3:a8:cd:05: a4:fb:ce:96:52:23:0f:fa:8d:3e:a3:70:df:04:7b: 4d:98:ed:63:74:a0:a5:69:6f:ff:ad:3f:e8:56:fb: 08:65:d9:99:85:39:95:d8:cb:bf:c1:d8:f7:ee:a5: 83:21:31:b5:70:0b:47:01:da:65:01:75:e3:ee:eb: 2f:fa:ec:ab:94:da:37:84:81:72:78:06:25:0e:94: e5:f9:01:df:7e:5d:cf:6d:1f:4a:57:ac:af:a4:ba: 42:63:b1:97:d3:bd:d2:0d:5b:bb:00:ce:01:21:ae: d3:66:8c:57:b5:46:e0:b3:97:16:ab:5f:17:9f:45: a5:c6:9f:2d:9e:6a:62:38:c7:11:2d:3a:16:67:d5: 57:30:ed:29:2a:5c:de:86:00:00:40:26:09:c9:8e: fa:56:ab:96:07:85:d5:a2:f9:a0:20:8e:c4:60:96: c9:ca:c5:7d:58:3b:4c:d9:c4:43:6a:e8:28:d0:11: 42:93:0d:b9:f3:dc:32:89:b4:95:42:28:9b:37:09: a9:82:3c:e4:23:11:20:14:87:0e:12:5d:6e:5e:31: c1:c2:1f:f1:3c:8a:42:9d:2f:49:f3:ba:a1:41:2c: 93:a5 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 44:C0:13:F0:51:0B:ED:C7:D0:EC:CA:5A:A0:9A:AD:7F:52:8F:5C:4A X509v3 Authority Key Identifier: keyid:0F:F8:0C:BD:FE:18:35:4A:3C:FD:BA:2F:E0:79:AA:2E:BC:58:DC:D4 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/D_gMvf4YNUo8_bov4HmqLrxY3NQ.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/e9/129564-f1db-4dc5-8906-6fcdcd5ab660/1/D_gMvf4YNUo8_bov4HmqLrxY3NQ.mft X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/e9/129564-f1db-4dc5-8906-6fcdcd5ab660/1/D_gMvf4YNUo8_bov4HmqLrxY3NQ.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 47:13:4a:ef:cd:d0:9e:03:3e:c0:43:e6:03:17:e8:d8:d6:4d: c6:f1:87:7d:14:6d:65:ae:6c:0a:80:fa:10:08:a8:56:aa:8f: fd:50:cd:84:62:fa:92:82:f4:ce:4a:38:d9:ab:37:10:71:51: 43:34:e9:3c:2b:d9:8f:3d:05:b3:eb:0e:58:ec:07:39:34:df: 6c:2f:16:ee:d3:62:c7:0b:79:b0:53:f6:07:05:57:c5:80:ca: 61:5e:ed:ca:97:f0:45:2e:74:18:89:ad:ba:9a:e6:6d:8d:aa: da:a0:c6:59:63:6d:8b:a8:df:e2:86:79:59:1c:63:0c:e6:b1: 2f:f0:0f:b4:89:24:d0:06:bc:61:8e:83:53:3a:70:05:99:65: 28:80:d0:f3:06:36:28:25:8c:86:41:46:1d:b1:a2:11:f7:b9: 58:ac:06:47:84:f0:bf:c0:87:cb:62:ff:a0:0a:de:2e:95:5a: fc:c7:09:1b:96:21:5f:a5:da:4b:ea:92:f4:e5:49:ca:04:b2: 25:af:8e:a2:86:c0:9c:ec:49:6c:49:b9:50:5e:0a:7c:e5:cc: 21:b9:e5:10:db:67:15:fe:0f:a4:31:d2:62:9e:15:a3:e0:03: 8d:37:79:42:3a:c8:c0:83:fa:2f:80:47:6c:82:5d:d1:91:4d: eb:d3:3c:fb -----BEGIN CERTIFICATE----- MIIFFjCCA/6gAwIBAgISAZoG21h+ZJ1FotPSlatxXPsMMA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKDBmZjgwY2JkZmUxODM1NGEzY2ZkYmEyZmUwNzlhYTJlYmM1 OGRjZDQwHhcNMjUxMDIxMTMwMDI5WhcNMjUxMDIyMTMwMDI5WjAzMTEwLwYDVQQD Eyg0NGMwMTNmMDUxMGJlZGM3ZDBlY2NhNWFhMDlhYWQ3ZjUyOGY1YzRhMIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAwEUUrmWZd2P9gdFKtrmXJEr2/8mh fQDFp+OozQWk+86WUiMP+o0+o3DfBHtNmO1jdKClaW//rT/oVvsIZdmZhTmV2Mu/ wdj37qWDITG1cAtHAdplAXXj7usv+uyrlNo3hIFyeAYlDpTl+QHffl3PbR9KV6yv pLpCY7GX073SDVu7AM4BIa7TZoxXtUbgs5cWq18Xn0Wlxp8tnmpiOMcRLToWZ9VX MO0pKlzehgAAQCYJyY76VquWB4XVovmgII7EYJbJysV9WDtM2cRDaugo0BFCkw25 89wyibSVQiibNwmpgjzkIxEgFIcOEl1uXjHBwh/xPIpCnS9J87qhQSyTpQIDAQAB o4ICIjCCAh4wHQYDVR0OBBYEFETAE/BRC+3H0OzKWqCarX9Sj1xKMB8GA1UdIwQY MBaAFA/4DL3+GDVKPP26L+B5qi68WNzUMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvRF9nTXZmNFlOVW84X2JvdjRIbXFMcnhZM05RLmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC9lOS8xMjk1NjQtZjFkYi00ZGM1LTg5MDYt NmZjZGNkNWFiNjYwLzEvRF9nTXZmNFlOVW84X2JvdjRIbXFMcnhZM05RLm1mdDCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC9lOS8xMjk1NjQtZjFkYi00ZGM1LTg5MDYtNmZjZGNkNWFiNjYw LzEvRF9nTXZmNFlOVW84X2JvdjRIbXFMcnhZM05RLmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEARxNK783Q ngM+wEPmAxfo2NZNxvGHfRRtZa5sCoD6EAioVqqP/VDNhGL6koL0zko42as3EHFR QzTpPCvZjz0Fs+sOWOwHOTTfbC8W7tNixwt5sFP2BwVXxYDKYV7typfwRS50GImt uprmbY2q2qDGWWNti6jf4oZ5WRxjDOaxL/APtIkk0Aa8YY6DUzpwBZllKIDQ8wY2 KCWMhkFGHbGiEfe5WKwGR4Twv8CHy2L/oAreLpVa/McJG5YhX6XaS+qS9OVJygSy Ja+OoobAnOxJbEm5UF4KfOXMIbnlENtnFf4PpDHSYp4Vo+ADjTd5QjrIwIP6L4BH bIJd0ZFN69M8+w== -----END CERTIFICATE-----Generated at Tue Oct 21 22:25:33 2025 by rpki-client