$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/e9/700fd3-c360-48ab-8a06-56129b7dc018/1/CK8JGFi7mWUXZDmcZWXfegg0260.mft File: CK8JGFi7mWUXZDmcZWXfegg0260.mft (raw, json) Hash identifier: 08SKQUHehAVSVNkKPHptTP4t5j0JBBeM0qCcCiK+0XI= Subject key identifier: 4D:9D:31:56:C9:F7:5D:30:85:7A:AD:F3:48:DE:E3:7C:B2:1D:91:74 Authority key identifier: 08:AF:09:18:58:BB:99:65:17:64:39:9C:65:65:DF:7A:08:34:DB:AD Certificate issuer: /CN=08af091858bb99651764399c6565df7a0834dbad Certificate serial: 019A32D84B468822A4A0496EB76874A6BC4E Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/CK8JGFi7mWUXZDmcZWXfegg0260.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/e9/700fd3-c360-48ab-8a06-56129b7dc018/1/CK8JGFi7mWUXZDmcZWXfegg0260.mft Manifest number: 09CB Signing time: Thu 30 Oct 2025 02:00:27 +0000 Manifest this update: Thu 30 Oct 2025 02:00:27 +0000 Manifest next update: Fri 31 Oct 2025 02:00:27 +0000 Files and hashes: 1: 1YffucAnrX0zrPGVUVBeyKH78tE.roa (hash: F+0MkZW1rwniUkgJEFMqZDUVPzIQlWc77ANUG11yVk0=) 2: CK8JGFi7mWUXZDmcZWXfegg0260.crl (hash: 1rGUnc/IlP62s322NDreVuXCcn/vXhHZnOnrIT12P0Y=) 3: HHgp5sq5yc4_sgJa6AXu1wOFQNM.roa (hash: 7azvHrY82JhsqK3mxuoAki0dX0VXyY18Oolw0K+QPEw=) 4: QIYUcsbQNAYJ49MS9GSzg6HzMws.roa (hash: 25Ipjti12DAizEBm/x19xImh3kKTX0L8ySHToWXRDaw=) 5: b6ZEK46tBFQpFeGihP04dAsRVEs.roa (hash: QgioZFeGRbfakufTGnBIdfmvDS/FUhl+3OYWyWgTaL4=) 6: dntaOaxuIDGd8pI8wGTFAJRgyN0.roa (hash: ZmPkwqzAaYGLrLg5+RqVjoLEOwPFE1N2kmesXzCCUwI=) 7: pM8VKNSiqXyxvrYM2CF2U0Iw0pw.roa (hash: fs4sKC29dVzpn86XWfZbe24a1J4GrvjTCH4XsQbkw6c=) 8: qQrVFVU2zYEeKI_c1sPfgRBsdws.roa (hash: Q0Q6+jTPsyoLSIpvRXxP/rur4NZVUawp72Ly9Y4IL/A=) 9: tstTYn_D9Pn-4nRlBfI2UB_WSGg.roa (hash: ZjiObePgXbEPhVg4yY+Q8sRWmDFO/c82OdQ5TNgpPAM=) 10: zEb6SCNh9IA2ZcmgZWwsmTznbFk.roa (hash: tgHdlVCEN4GvD5zc3JRTYHWhACpqWoQ7O4VCFRbyik4=) Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/e9/700fd3-c360-48ab-8a06-56129b7dc018/1/CK8JGFi7mWUXZDmcZWXfegg0260.crl rsync://rpki.ripe.net/repository/DEFAULT/e9/700fd3-c360-48ab-8a06-56129b7dc018/1/CK8JGFi7mWUXZDmcZWXfegg0260.mft rsync://rpki.ripe.net/repository/DEFAULT/CK8JGFi7mWUXZDmcZWXfegg0260.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Fri 31 Oct 2025 01:21:02 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9a:32:d8:4b:46:88:22:a4:a0:49:6e:b7:68:74:a6:bc:4e Signature Algorithm: sha256WithRSAEncryption Issuer: CN=08af091858bb99651764399c6565df7a0834dbad Validity Not Before: Oct 30 02:00:27 2025 GMT Not After : Oct 31 02:00:27 2025 GMT Subject: CN=4d9d3156c9f75d30857aadf348dee37cb21d9174 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:ce:ea:f4:d8:1e:2b:7b:4d:48:8c:61:a4:ad:f9: 80:2d:79:05:c9:c4:e3:52:c7:dc:fc:2d:cb:f3:d0: 43:77:f1:c4:91:ff:fc:ee:80:e9:f8:8b:40:7b:1b: 69:5f:ee:0f:0e:a7:eb:35:de:26:a2:e9:eb:82:b5: f4:15:3d:15:c9:51:d3:a5:6e:12:c1:76:c1:2a:d4: b5:a5:e6:e8:ea:03:c1:73:a6:0f:a2:ad:68:66:96: c9:4a:a4:fc:04:42:d9:bd:fb:24:f8:cb:00:c7:17: e6:49:e8:8d:e9:60:76:3a:02:58:15:a7:8c:b2:b5: 99:84:2e:62:27:e4:20:8e:aa:1d:1b:76:99:f0:7b: 3a:ac:01:b6:c7:c8:b8:b0:ce:86:cd:ba:38:91:82: 91:98:33:50:12:59:2c:88:b6:f6:fc:68:ef:8c:c1: 73:03:f9:ea:30:87:6c:79:82:10:9c:6b:65:03:33: f3:e4:7d:df:f3:ec:92:90:47:1a:31:cf:23:2d:85: 55:d4:6b:bc:83:17:c3:de:a7:de:5e:d0:99:f0:66: 03:83:21:6c:f1:e1:53:d2:31:66:51:86:38:cd:29: e6:c7:52:41:7e:ba:a7:21:42:77:e8:d7:78:bd:47: 95:1d:88:be:ac:cd:96:f3:ac:d6:89:bf:54:77:08: 8b:1f Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 4D:9D:31:56:C9:F7:5D:30:85:7A:AD:F3:48:DE:E3:7C:B2:1D:91:74 X509v3 Authority Key Identifier: keyid:08:AF:09:18:58:BB:99:65:17:64:39:9C:65:65:DF:7A:08:34:DB:AD X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/CK8JGFi7mWUXZDmcZWXfegg0260.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/e9/700fd3-c360-48ab-8a06-56129b7dc018/1/CK8JGFi7mWUXZDmcZWXfegg0260.mft X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/e9/700fd3-c360-48ab-8a06-56129b7dc018/1/CK8JGFi7mWUXZDmcZWXfegg0260.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 8b:0c:39:7d:70:28:7c:74:c2:8f:c3:ee:c5:1d:57:e6:af:04: eb:7a:35:c4:a4:e1:72:b4:b9:35:15:ef:6f:c6:9a:18:c6:a5: 3d:d5:34:03:cc:bb:f0:a0:bf:9a:27:6a:1c:55:52:92:98:ee: 0d:37:aa:0e:a6:a5:54:0b:f3:a7:12:8f:89:e4:6a:0d:86:d5: 3f:e3:fc:d4:e1:7b:88:97:29:c7:69:3e:59:e7:90:92:ad:67: aa:65:01:a8:5f:bd:bb:3d:75:a6:50:bd:d8:ca:ae:1d:24:bc: e4:ba:5a:3e:1d:75:ea:d8:e8:03:e5:50:a6:87:1a:44:a5:ba: 49:db:e0:28:c3:30:13:11:a5:36:65:35:ef:ce:a0:03:0f:9b: 5a:10:b2:59:de:fe:58:bd:59:82:9b:f9:d1:d5:e5:a4:72:d7: ce:0c:67:8e:75:e8:ae:87:d1:4f:4c:68:7b:66:06:2d:41:6f: 6d:c4:96:d6:24:2e:7a:cc:96:46:37:51:e1:3d:e8:69:57:dd: e2:39:a4:8c:ab:22:7f:15:1f:bd:26:c9:c1:42:7f:38:2c:a8: a0:22:73:db:f8:ea:74:51:0c:ca:74:b1:ed:10:b0:d8:c4:a9: 15:3f:a3:c9:6d:a3:4d:7c:d8:41:32:da:29:15:f0:43:c0:eb: 07:d8:fd:74 -----BEGIN CERTIFICATE----- MIIFFjCCA/6gAwIBAgISAZoy2EtGiCKkoElut2h0prxOMA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKDA4YWYwOTE4NThiYjk5NjUxNzY0Mzk5YzY1NjVkZjdhMDgz NGRiYWQwHhcNMjUxMDMwMDIwMDI3WhcNMjUxMDMxMDIwMDI3WjAzMTEwLwYDVQQD Eyg0ZDlkMzE1NmM5Zjc1ZDMwODU3YWFkZjM0OGRlZTM3Y2IyMWQ5MTc0MIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAzur02B4re01IjGGkrfmALXkFycTj Usfc/C3L89BDd/HEkf/87oDp+ItAextpX+4PDqfrNd4mounrgrX0FT0VyVHTpW4S wXbBKtS1pebo6gPBc6YPoq1oZpbJSqT8BELZvfsk+MsAxxfmSeiN6WB2OgJYFaeM srWZhC5iJ+QgjqodG3aZ8Hs6rAG2x8i4sM6Gzbo4kYKRmDNQElksiLb2/GjvjMFz A/nqMIdseYIQnGtlAzPz5H3f8+ySkEcaMc8jLYVV1Gu8gxfD3qfeXtCZ8GYDgyFs 8eFT0jFmUYY4zSnmx1JBfrqnIUJ36Nd4vUeVHYi+rM2W86zWib9UdwiLHwIDAQAB o4ICIjCCAh4wHQYDVR0OBBYEFE2dMVbJ910whXqt80je43yyHZF0MB8GA1UdIwQY MBaAFAivCRhYu5llF2Q5nGVl33oINNutMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvQ0s4SkdGaTdtV1VYWkRtY1pXWGZlZ2cwMjYwLmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC9lOS83MDBmZDMtYzM2MC00OGFiLThhMDYt NTYxMjliN2RjMDE4LzEvQ0s4SkdGaTdtV1VYWkRtY1pXWGZlZ2cwMjYwLm1mdDCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC9lOS83MDBmZDMtYzM2MC00OGFiLThhMDYtNTYxMjliN2RjMDE4 LzEvQ0s4SkdGaTdtV1VYWkRtY1pXWGZlZ2cwMjYwLmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAiww5fXAo fHTCj8PuxR1X5q8E63o1xKThcrS5NRXvb8aaGMalPdU0A8y78KC/midqHFVSkpju DTeqDqalVAvzpxKPieRqDYbVP+P81OF7iJcpx2k+WeeQkq1nqmUBqF+9uz11plC9 2MquHSS85LpaPh116tjoA+VQpocaRKW6SdvgKMMwExGlNmU1786gAw+bWhCyWd7+ WL1Zgpv50dXlpHLXzgxnjnXorofRT0xoe2YGLUFvbcSW1iQuesyWRjdR4T3oaVfd 4jmkjKsifxUfvSbJwUJ/OCyooCJz2/jqdFEMynSx7RCw2MSpFT+jyW2jTXzYQTLa KRXwQ8DrB9j9dA== -----END CERTIFICATE-----Generated at Thu Oct 30 05:50:05 2025 by rpki-client