$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/eb/eee131-bb8c-4887-869b-6fe4d8fed160/1/h0v4BwzuQwXRo4npEPtRArvMGUE.mft File: h0v4BwzuQwXRo4npEPtRArvMGUE.mft (raw, json) Hash identifier: h+GoRgevBB67rkX5VVwuB9ARCEjN0fmXddGrC6fRMV0= Subject key identifier: 0F:8D:A2:CC:3D:93:70:8A:B1:21:96:BE:58:AB:6C:27:41:F0:EF:CD Authority key identifier: 87:4B:F8:07:0C:EE:43:05:D1:A3:89:E9:10:FB:51:02:BB:CC:19:41 Certificate issuer: /CN=874bf8070cee4305d1a389e910fb5102bbcc1941 Certificate serial: 019A0712846BB4E2D79526ADA8CEBC7385BD Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/h0v4BwzuQwXRo4npEPtRArvMGUE.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/eb/eee131-bb8c-4887-869b-6fe4d8fed160/1/h0v4BwzuQwXRo4npEPtRArvMGUE.mft Manifest number: 1077 Signing time: Tue 21 Oct 2025 14:00:45 +0000 Manifest this update: Tue 21 Oct 2025 14:00:45 +0000 Manifest next update: Wed 22 Oct 2025 14:00:45 +0000 Files and hashes: 1: 0OKEEKGhx09vrOl7RYzWo3_wxgQ.roa (hash: bVmqeltj/mUgRyI/UDd3qXuGmM6ZNTUv7NHdJ5Ecm14=) 2: 0na0952KGc1H37d43sfmQKJLL00.roa (hash: corUkZBv/wXf0UWamqTqW2vCXAO7jctIMZRyOPGvfMc=) 3: 0nyuKNwkHdjNx58vqjYZWHgdk04.roa (hash: IJwrVyR1/3bxuDIXcjl0pqsWJYg81ab8+TgzpFzMgak=) 4: 50gtoTdhN9nO756-F4DP2ztZ9co.roa (hash: PoNPNVOdbr6ZQt1a8yzQyLs5SXzvoUcV/tLE/CbCBRA=) 5: 5WW9l5SbU7Xc5dzcJPOjnh-Ti1k.roa (hash: 2mR14FDC49JE9sKTdrARapGEl+mL/ykOGzFFu5F/fQM=) 6: GPQpLDssO6fTD1dGaJR05RFssa4.roa (hash: fp71tS0Tf+vhKpm3TY4BWXK7QdJ3Wg7DCBdUoQ7F5lg=) 7: J9C16lcx8PgyurfKUP9kuPkC8qk.roa (hash: FgZNOU0gXFenPcB6tHkqCpKLWPVhc0a8myZew2TEgCo=) 8: LumIDmC9KaTmO5EmvKNIDB_MJ6I.roa (hash: T1v6ldOgSnHm0ILMw4lezNqfO7yaUlFFJv2DMeUijuQ=) 9: VvF4Vi4FweHBoF6fwzvWsqkmd1g.roa (hash: 0iNsEJDKXYV/LCkoqqh7O11YVgjXO/OY9nxGaKpwAV8=) 10: h0v4BwzuQwXRo4npEPtRArvMGUE.crl (hash: X+FaG627SRN2cQMf4aH1ENh4MF/rFjnDlGhMZhvW2LA=) 11: vevN_FQh1oLDczAFJHEKh5hEOxE.roa (hash: T6+n5imfk+pQSeT5Osi01ihP8snYGAynnv1xpTuEaoU=) 12: xER0K9I9xK8DBLC6KDcI75JR9LY.roa (hash: OqOr60qixfUKi1rv4+JZ/v9458y498eM0Dbfd2dxyz4=) Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/eb/eee131-bb8c-4887-869b-6fe4d8fed160/1/h0v4BwzuQwXRo4npEPtRArvMGUE.crl rsync://rpki.ripe.net/repository/DEFAULT/eb/eee131-bb8c-4887-869b-6fe4d8fed160/1/h0v4BwzuQwXRo4npEPtRArvMGUE.mft rsync://rpki.ripe.net/repository/DEFAULT/h0v4BwzuQwXRo4npEPtRArvMGUE.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Wed 22 Oct 2025 14:00:45 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9a:07:12:84:6b:b4:e2:d7:95:26:ad:a8:ce:bc:73:85:bd Signature Algorithm: sha256WithRSAEncryption Issuer: CN=874bf8070cee4305d1a389e910fb5102bbcc1941 Validity Not Before: Oct 21 14:00:45 2025 GMT Not After : Oct 22 14:00:45 2025 GMT Subject: CN=0f8da2cc3d93708ab12196be58ab6c2741f0efcd Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:d9:0a:8d:8b:a4:2a:a7:64:83:1a:e5:25:9e:d8: c8:ad:cf:57:fb:2a:3f:90:07:1c:38:f0:2a:f3:4a: 49:7f:07:c0:c3:73:ad:ca:30:ee:7f:09:16:0e:6e: b8:c2:6c:1d:e9:b9:d8:35:80:4e:54:69:f6:ea:8b: f3:e4:ee:fc:75:71:df:c1:8f:79:ac:f5:65:46:dc: bf:66:8c:40:d4:c6:66:06:39:47:90:6d:e1:69:a7: 86:f5:4e:fc:af:3d:99:28:66:98:26:d4:fe:ac:f7: df:bc:01:6c:9d:75:93:73:42:ff:b6:93:b5:bc:ad: 06:37:70:f6:9b:1f:da:72:0c:58:07:f5:48:57:6e: 10:a6:21:18:77:2a:4d:3c:94:29:6e:04:87:17:30: 46:fd:dd:56:ce:fb:ee:da:b7:12:5d:99:8a:a0:f2: 2d:ad:c0:41:36:ab:48:63:05:6e:86:79:37:a2:9e: 14:65:f0:2b:39:9c:55:a8:d1:d2:f2:16:8f:85:46: 62:c7:86:60:d8:cb:97:08:ae:1a:87:75:73:a1:bf: 57:eb:e2:51:2d:6a:16:92:d9:14:7b:b1:c9:b7:89: 0f:36:80:ff:12:bc:8b:7d:ce:4c:56:27:22:eb:a5: 70:f4:29:a0:6c:01:63:55:09:3e:d1:74:ab:10:2e: 17:7b Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 0F:8D:A2:CC:3D:93:70:8A:B1:21:96:BE:58:AB:6C:27:41:F0:EF:CD X509v3 Authority Key Identifier: keyid:87:4B:F8:07:0C:EE:43:05:D1:A3:89:E9:10:FB:51:02:BB:CC:19:41 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/h0v4BwzuQwXRo4npEPtRArvMGUE.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/eb/eee131-bb8c-4887-869b-6fe4d8fed160/1/h0v4BwzuQwXRo4npEPtRArvMGUE.mft X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/eb/eee131-bb8c-4887-869b-6fe4d8fed160/1/h0v4BwzuQwXRo4npEPtRArvMGUE.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 26:1e:34:65:17:0a:7d:50:e1:ff:f3:bd:a8:ff:5e:3d:e5:b7: 22:c7:8a:7a:8b:09:99:c6:ff:85:66:6a:36:9c:bb:85:60:f1: e0:92:b4:db:83:0e:f2:1f:66:ad:a7:02:b8:b5:fb:2b:8a:c3: 17:32:1e:55:90:86:7d:c7:72:36:27:7c:a5:c8:90:7f:19:c2: 58:2d:2c:9e:b1:3d:b6:55:79:23:4c:3c:e2:fe:19:fb:ad:8e: cd:1c:37:af:d6:68:6c:e3:d2:f2:4b:4b:b2:fe:81:cd:6b:e2: 52:1b:b2:07:26:b5:56:45:ef:8a:16:08:1f:c8:a1:80:c4:b4: 02:cc:4e:db:d1:7f:5f:fc:93:1c:6e:b6:d5:5a:f5:ab:a9:32: da:56:08:f3:05:31:ad:25:00:77:4a:17:58:5f:ee:9f:b7:02: 94:94:fb:6e:d5:2e:ca:90:2e:61:7e:c1:07:bf:43:70:f5:c0: 32:0e:17:39:f3:28:e3:64:05:b5:e5:5d:bc:48:2f:ad:a9:7a: f5:cf:81:7d:81:4c:40:e2:00:81:94:fb:e4:e8:e4:9f:9b:e0: 66:1e:4d:b9:22:6f:89:9a:69:9e:2a:6f:b9:dc:24:15:1b:94: 9b:f0:f1:dd:9f:08:ec:f8:19:d9:70:e8:af:65:7c:dd:98:79: fd:47:04:bd -----BEGIN CERTIFICATE----- MIIFFjCCA/6gAwIBAgISAZoHEoRrtOLXlSatqM68c4W9MA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKDg3NGJmODA3MGNlZTQzMDVkMWEzODllOTEwZmI1MTAyYmJj YzE5NDEwHhcNMjUxMDIxMTQwMDQ1WhcNMjUxMDIyMTQwMDQ1WjAzMTEwLwYDVQQD EygwZjhkYTJjYzNkOTM3MDhhYjEyMTk2YmU1OGFiNmMyNzQxZjBlZmNkMIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEA2QqNi6Qqp2SDGuUlntjIrc9X+yo/ kAccOPAq80pJfwfAw3OtyjDufwkWDm64wmwd6bnYNYBOVGn26ovz5O78dXHfwY95 rPVlRty/ZoxA1MZmBjlHkG3haaeG9U78rz2ZKGaYJtT+rPffvAFsnXWTc0L/tpO1 vK0GN3D2mx/acgxYB/VIV24QpiEYdypNPJQpbgSHFzBG/d1Wzvvu2rcSXZmKoPIt rcBBNqtIYwVuhnk3op4UZfArOZxVqNHS8haPhUZix4Zg2MuXCK4ah3Vzob9X6+JR LWoWktkUe7HJt4kPNoD/EryLfc5MVici66Vw9CmgbAFjVQk+0XSrEC4XewIDAQAB o4ICIjCCAh4wHQYDVR0OBBYEFA+Nosw9k3CKsSGWvlirbCdB8O/NMB8GA1UdIwQY MBaAFIdL+AcM7kMF0aOJ6RD7UQK7zBlBMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvaDB2NEJ3enVRd1hSbzRucEVQdFJBcnZNR1VFLmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC9lYi9lZWUxMzEtYmI4Yy00ODg3LTg2OWIt NmZlNGQ4ZmVkMTYwLzEvaDB2NEJ3enVRd1hSbzRucEVQdFJBcnZNR1VFLm1mdDCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC9lYi9lZWUxMzEtYmI4Yy00ODg3LTg2OWItNmZlNGQ4ZmVkMTYw LzEvaDB2NEJ3enVRd1hSbzRucEVQdFJBcnZNR1VFLmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAJh40ZRcK fVDh//O9qP9ePeW3IseKeosJmcb/hWZqNpy7hWDx4JK024MO8h9mracCuLX7K4rD FzIeVZCGfcdyNid8pciQfxnCWC0snrE9tlV5I0w84v4Z+62OzRw3r9ZobOPS8ktL sv6BzWviUhuyBya1VkXvihYIH8ihgMS0AsxO29F/X/yTHG621Vr1q6ky2lYI8wUx rSUAd0oXWF/un7cClJT7btUuypAuYX7BB79DcPXAMg4XOfMo42QFteVdvEgvral6 9c+BfYFMQOIAgZT75Ojkn5vgZh5NuSJviZppnipvudwkFRuUm/Dx3Z8I7PgZ2XDo r2V83Zh5/UcEvQ== -----END CERTIFICATE-----Generated at Tue Oct 21 17:18:18 2025 by rpki-client