$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/ed/8e8e82-5274-4d2f-8ca0-ab19fcb0ce64/1/4VgI8_khvIw-6ofHWExYTBAAsFE.mft File: 4VgI8_khvIw-6ofHWExYTBAAsFE.mft (raw, json) Hash identifier: D6p/4+aMkwCYqR35KtlcjEmRVT3KljyhYEznLPSLcKE= Subject key identifier: 4D:7A:F4:9C:6A:42:C0:B9:75:4B:F0:6B:BB:3F:18:3F:45:06:FF:E6 Authority key identifier: E1:58:08:F3:F9:21:BC:8C:3E:EA:87:C7:58:4C:58:4C:10:00:B0:51 Certificate issuer: /CN=e15808f3f921bc8c3eea87c7584c584c1000b051 Certificate serial: 019A582E78B4A96665745EF45A47E25EEE41 Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/4VgI8_khvIw-6ofHWExYTBAAsFE.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/ed/8e8e82-5274-4d2f-8ca0-ab19fcb0ce64/1/4VgI8_khvIw-6ofHWExYTBAAsFE.mft Manifest number: 1736 Signing time: Thu 06 Nov 2025 08:00:31 +0000 Manifest this update: Thu 06 Nov 2025 08:00:31 +0000 Manifest next update: Fri 07 Nov 2025 08:00:31 +0000 Files and hashes: 1: 4VgI8_khvIw-6ofHWExYTBAAsFE.crl (hash: TkANNDLMrRwcKLwWzLukojmuohMskPWfKrHOFNzNkIY=) 2: 7hCd_HKEYkXLvNCBLfMsTezcRXs.roa (hash: U6tVugGWrDYmHCXTomFCnYlQyCN2W9AcT+utfrGkYmM=) 3: 7x5HPsZJJU7oLctSDX_VaOPYLzI.roa (hash: uhuBwDP+Oa9qCbvp8OKGgxlY2ye1DhBRDdxJD61Z03g=) 4: BqWFQfCpNOawJLR_2bQgKiWus78.roa (hash: dwDCQUgPm6/+eGPO1V7wb2aMqwp5qzv/WSd8fL7sTv4=) 5: HK9YTPeAPa2mm7JsqVFDcEqWktE.roa (hash: pGFfaceKosL6QVYMO3oG4sR8CNlOKvbDd43IVlI91l4=) 6: SiUykNKTjaApyo1sqndO19rBYAs.roa (hash: jaR1D2Lqsnpc33UxJXomGKoF/S6s6EdMDhOpwvCqmiY=) 7: dsVEniM-PjP3aF57gRKfJeGsuXA.roa (hash: rATVs9dRCK5irdzRkSY1vrtCfxCwPvZoSJA3EPbdN5Q=) 8: jNJogHc9h5lodSxhpjDRYEENUOM.roa (hash: O0aQYdB/pHChDSdymrPe8W/YPJRqMLBI8pg3+YHjgZ8=) 9: pm4iWvL8z96fIGtjxaGjSXeRJT4.roa (hash: ZYVelcX+1GR4HDMDdE6U47zsAh6vEcuxWCIg/8E3uZE=) 10: qeW6k62Ova_Op7BhYtzucMuedHs.roa (hash: iPCOF2sKXY5KaN1yHnhdOMP4cE9n3NAPWSlvKOP6/hY=) 11: qispPpKIlPSWV1rI1EAZQtlT-p0.roa (hash: sBtkCqwyGciPSktKwAiba5P4WFIxvlZFVG+B/hvcwgI=) 12: ttSCm0GX77Lv7F9AG7Ej_PDwc8E.roa (hash: CXBZohUwM39VG497MDaDZEXDgP7mhwxpOgtdpsLOGh4=) 13: xyWS8GMXAK5cHVz0I4kSnXYHwUs.roa (hash: U2goV1mLS2kaWO5TW5yX21b9KWWpNNSkN88rAFVfNXQ=) 14: z1XxJmXXx8uVxhk9CwQJXiPqHzU.roa (hash: EaljD/90P2BfuVNTpmwdBC+zdctwtxvncMDcXLvuk10=) Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/ed/8e8e82-5274-4d2f-8ca0-ab19fcb0ce64/1/4VgI8_khvIw-6ofHWExYTBAAsFE.crl rsync://rpki.ripe.net/repository/DEFAULT/ed/8e8e82-5274-4d2f-8ca0-ab19fcb0ce64/1/4VgI8_khvIw-6ofHWExYTBAAsFE.mft rsync://rpki.ripe.net/repository/DEFAULT/4VgI8_khvIw-6ofHWExYTBAAsFE.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Fri 07 Nov 2025 06:00:03 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9a:58:2e:78:b4:a9:66:65:74:5e:f4:5a:47:e2:5e:ee:41 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=e15808f3f921bc8c3eea87c7584c584c1000b051 Validity Not Before: Nov 6 08:00:31 2025 GMT Not After : Nov 7 08:00:31 2025 GMT Subject: CN=4d7af49c6a42c0b9754bf06bbb3f183f4506ffe6 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:c2:8a:fb:48:c6:30:33:e1:ad:52:67:79:52:fc: 91:47:91:48:9a:55:be:fc:f9:a6:89:52:46:00:a6: ed:0f:e5:2f:d8:75:41:c8:1d:ae:72:e5:81:e6:92: 51:3f:0f:87:36:9a:b3:6b:37:0d:7e:92:3e:16:1a: 03:9a:c2:e2:89:09:d2:d2:2d:36:8c:b4:8f:d8:76: 2a:a9:28:d7:8d:dd:6b:59:76:37:1e:47:f0:22:38: 30:10:92:e1:fc:db:45:d9:4c:90:8c:c9:03:f0:dd: 0d:74:ca:5e:37:01:54:31:78:ca:8f:4f:8f:23:cd: ee:bc:5a:67:fe:5e:f6:20:31:3b:b8:1a:69:a3:24: 8d:0f:ff:cb:2c:45:e6:01:89:8c:73:ed:93:c4:a4: 2b:42:5d:a6:63:da:c2:1f:00:b8:92:6a:ef:b7:7c: 50:be:db:59:33:72:f3:eb:5a:6a:17:9d:1f:26:73: 28:0e:30:d8:ad:aa:b1:08:e9:fd:58:be:18:0b:a6: 38:ca:f5:b1:e0:f9:ed:b1:16:a3:f2:3a:aa:e6:94: 87:9f:ae:9a:3c:a9:79:3f:e1:cf:af:e8:23:92:d8: f8:a0:74:41:fc:10:e5:2b:de:db:af:43:fe:82:c5: 4e:1c:29:c1:85:90:a8:21:4c:1e:34:6b:28:b6:a1: f1:a1 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 4D:7A:F4:9C:6A:42:C0:B9:75:4B:F0:6B:BB:3F:18:3F:45:06:FF:E6 X509v3 Authority Key Identifier: keyid:E1:58:08:F3:F9:21:BC:8C:3E:EA:87:C7:58:4C:58:4C:10:00:B0:51 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/4VgI8_khvIw-6ofHWExYTBAAsFE.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/ed/8e8e82-5274-4d2f-8ca0-ab19fcb0ce64/1/4VgI8_khvIw-6ofHWExYTBAAsFE.mft X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/ed/8e8e82-5274-4d2f-8ca0-ab19fcb0ce64/1/4VgI8_khvIw-6ofHWExYTBAAsFE.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 57:de:46:bb:25:17:be:d4:9f:43:89:bc:dc:49:d5:c4:a1:38: 75:04:53:e8:e3:9d:fa:08:b0:02:fe:51:ef:4f:00:d2:88:c1: 7f:ad:2a:70:eb:df:53:70:08:48:f9:4d:af:36:7c:65:86:d1: 9d:1c:f6:93:65:1f:27:fd:f3:c6:e7:db:35:f5:42:32:e8:70: 28:ff:9a:ca:df:1c:7a:c7:98:1d:54:48:f2:3b:b7:2d:6a:89: 74:98:1b:5e:3b:eb:4e:64:4c:ee:7c:1c:c6:cb:3d:ae:4c:ae: 46:ab:ba:40:88:4b:2f:60:94:d8:21:04:6d:3a:b4:99:36:b7: 36:52:5f:21:e3:dd:8c:c0:f8:6e:06:65:13:3e:8b:99:82:89: 5a:85:6f:97:a6:8e:b3:6a:4c:f9:01:6b:3b:14:f2:d5:9e:c4: 94:80:ef:35:74:e9:01:5f:9c:3f:fd:7e:cd:2f:d5:c5:21:d0: 9a:1d:3c:23:d9:1e:30:bb:33:f7:42:98:64:f6:8c:98:e7:4b: 06:e4:fd:45:ba:2a:b6:59:66:b7:31:7d:c8:dc:a0:a6:3f:07: a0:2d:84:f9:34:be:a8:b9:9f:50:11:5c:d9:31:7a:2e:64:9c: 03:34:9f:6b:9f:74:be:b0:f4:16:bd:9b:76:f9:da:9b:da:2e: fc:ec:8a:df -----BEGIN CERTIFICATE----- MIIFFjCCA/6gAwIBAgISAZpYLni0qWZldF70WkfiXu5BMA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKGUxNTgwOGYzZjkyMWJjOGMzZWVhODdjNzU4NGM1ODRjMTAw MGIwNTEwHhcNMjUxMTA2MDgwMDMxWhcNMjUxMTA3MDgwMDMxWjAzMTEwLwYDVQQD Eyg0ZDdhZjQ5YzZhNDJjMGI5NzU0YmYwNmJiYjNmMTgzZjQ1MDZmZmU2MIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAwor7SMYwM+GtUmd5UvyRR5FImlW+ /PmmiVJGAKbtD+Uv2HVByB2ucuWB5pJRPw+HNpqzazcNfpI+FhoDmsLiiQnS0i02 jLSP2HYqqSjXjd1rWXY3HkfwIjgwEJLh/NtF2UyQjMkD8N0NdMpeNwFUMXjKj0+P I83uvFpn/l72IDE7uBppoySND//LLEXmAYmMc+2TxKQrQl2mY9rCHwC4kmrvt3xQ vttZM3Lz61pqF50fJnMoDjDYraqxCOn9WL4YC6Y4yvWx4PntsRaj8jqq5pSHn66a PKl5P+HPr+gjktj4oHRB/BDlK97br0P+gsVOHCnBhZCoIUweNGsotqHxoQIDAQAB o4ICIjCCAh4wHQYDVR0OBBYEFE169JxqQsC5dUvwa7s/GD9FBv/mMB8GA1UdIwQY MBaAFOFYCPP5IbyMPuqHx1hMWEwQALBRMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvNFZnSThfa2h2SXctNm9mSFdFeFlUQkFBc0ZFLmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC9lZC84ZThlODItNTI3NC00ZDJmLThjYTAt YWIxOWZjYjBjZTY0LzEvNFZnSThfa2h2SXctNm9mSFdFeFlUQkFBc0ZFLm1mdDCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC9lZC84ZThlODItNTI3NC00ZDJmLThjYTAtYWIxOWZjYjBjZTY0 LzEvNFZnSThfa2h2SXctNm9mSFdFeFlUQkFBc0ZFLmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAV95GuyUX vtSfQ4m83EnVxKE4dQRT6OOd+giwAv5R708A0ojBf60qcOvfU3AISPlNrzZ8ZYbR nRz2k2UfJ/3zxufbNfVCMuhwKP+ayt8ceseYHVRI8ju3LWqJdJgbXjvrTmRM7nwc xss9rkyuRqu6QIhLL2CU2CEEbTq0mTa3NlJfIePdjMD4bgZlEz6LmYKJWoVvl6aO s2pM+QFrOxTy1Z7ElIDvNXTpAV+cP/1+zS/VxSHQmh08I9keMLsz90KYZPaMmOdL BuT9RboqtllmtzF9yNygpj8HoC2E+TS+qLmfUBFc2TF6LmScAzSfa590vrD0Fr2b dvnam9ou/OyK3w== -----END CERTIFICATE-----Generated at Thu Nov 6 13:05:44 2025 by rpki-client