$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/f2/cc6e99-6e5f-401b-912d-1095544c6c50/1/mc5WmhTC2zdy8jGHzmjmVB7ABI4.mft File: mc5WmhTC2zdy8jGHzmjmVB7ABI4.mft (raw, json) Hash identifier: 6GIc6KwbKZGWcBT0vMmqBwg8Eq0EGkEGRJE0/MnWFkM= Subject key identifier: 32:4D:17:9E:EC:26:7C:A7:12:04:03:3C:AF:B5:4D:33:8A:CF:0F:98 Authority key identifier: 99:CE:56:9A:14:C2:DB:37:72:F2:31:87:CE:68:E6:54:1E:C0:04:8E Certificate issuer: /CN=99ce569a14c2db3772f23187ce68e6541ec0048e Certificate serial: 019A0524012980D650EEB8DE1178D444DD9C Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/mc5WmhTC2zdy8jGHzmjmVB7ABI4.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/f2/cc6e99-6e5f-401b-912d-1095544c6c50/1/mc5WmhTC2zdy8jGHzmjmVB7ABI4.mft Manifest number: 1709 Signing time: Tue 21 Oct 2025 05:00:36 +0000 Manifest this update: Tue 21 Oct 2025 05:00:36 +0000 Manifest next update: Wed 22 Oct 2025 05:00:36 +0000 Files and hashes: 1: 7hlWKm8vTIF0LH1H2oS6Admh1TI.roa (hash: JGgMMA+OZIrWq67kkKcLVk/aNndkz3SnG1R5RYOVvj8=) 2: 8Okcs_WzeZSlRzql6-e5V5V7syA.roa (hash: Bgf74cz9Nwo/ctlxM9vVhY3z4DibfYQP6Uszu31EXc8=) 3: AJpw_2i3EoQNYD9kunMPYOdByi8.roa (hash: 2y+udfjFmNVer5C4pJzKndxIM53KHs0ELdljGNxXclM=) 4: BW-ZjApW-eGpyxFEOc0qqC_7S5k.roa (hash: RqpMiCDIPeUSPd1EPbgHwl0XZwlcr7/eFSWcSxO7pPY=) 5: Ik8Kqt-zKfrsdQjyrAjHXX-mlLc.roa (hash: Zg9C0+0W8n0QIjR6RRPkp/OJIpBk8iu2+syGMIoxQyg=) 6: RYdEtsOojE3SXyShhqAjMIQl9xQ.roa (hash: bxAZYk1bj8j4gGSsg9+CUkCHFq1GRl7baVopFxolE0s=) 7: WBeAt2UOvPgAdfpllYF8DBrXsx8.roa (hash: IGhLKO/rQTI4tOBHJDgWqI73xTyqxuZsgF0ztyC/dOc=) 8: dMlBq16YcIM7-JR7sVrQGjUo5Ts.roa (hash: i7NU7NT4PhY/w3tg6T+Z3qdRHBm2oFSaLm/74+Urx2g=) 9: f4e7IUwG3JkPasx3oPPOpKnw014.roa (hash: oT75cSQjF7ggxHOJOkz6Sxjs0hfilCF0H6NE1nJtUfo=) 10: gxtC8l8oaWA1zjOrZ9ktdsPQQVU.roa (hash: vd/vsDbZHQEzR4RjmLN3O01yjktlXhyMf/QsrpGLKZc=) 11: mNguxrQSssFTgOvDx-TtVJcngJ0.roa (hash: p4yScE1NaP9LVRZLGH/RikX/bIEDOl76JK/45ns5C9Q=) 12: mc5WmhTC2zdy8jGHzmjmVB7ABI4.crl (hash: Icn4NyhpJrQqY4HiewYH9vGP1uv7n4yHfnYJH2tXrds=) 13: tGisfrUmcm7oDtUaKLvnP0jBq0s.roa (hash: nA2OAz9Nlstpul0i0fjQIz6ieEk/T79qTn4SzXVWXBw=) 14: u_mqTybwgy-hqVDwwCNi1Bf-8tI.roa (hash: JZzfV1nFUUQsICoBUJ9//kJmxjSvH3d3D7ybB8QQr/Y=) Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/f2/cc6e99-6e5f-401b-912d-1095544c6c50/1/mc5WmhTC2zdy8jGHzmjmVB7ABI4.crl rsync://rpki.ripe.net/repository/DEFAULT/f2/cc6e99-6e5f-401b-912d-1095544c6c50/1/mc5WmhTC2zdy8jGHzmjmVB7ABI4.mft rsync://rpki.ripe.net/repository/DEFAULT/mc5WmhTC2zdy8jGHzmjmVB7ABI4.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Wed 22 Oct 2025 05:00:36 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9a:05:24:01:29:80:d6:50:ee:b8:de:11:78:d4:44:dd:9c Signature Algorithm: sha256WithRSAEncryption Issuer: CN=99ce569a14c2db3772f23187ce68e6541ec0048e Validity Not Before: Oct 21 05:00:36 2025 GMT Not After : Oct 22 05:00:36 2025 GMT Subject: CN=324d179eec267ca71204033cafb54d338acf0f98 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:f9:db:bf:1a:89:e4:dc:b6:f8:c9:ac:4c:d9:26: c6:7d:78:0d:25:0d:f9:10:f4:8e:eb:19:e6:a0:81: 19:09:65:fb:30:f0:41:c9:c5:58:86:72:99:04:a4: bc:3e:27:c3:ec:d6:8c:2a:3b:c1:04:ca:b5:8e:ea: ff:0f:c4:e5:29:8a:1f:30:8d:bd:42:a0:10:37:a7: 1e:f9:2d:f9:a0:7d:4a:34:a5:d6:7e:fb:25:bc:40: f6:c2:58:ef:d7:e0:b7:8a:87:ab:d0:8e:57:cc:66: d6:6a:b2:80:d4:7c:9e:7a:fd:ab:e5:31:ef:dd:28: 20:60:ab:a3:88:d5:93:ce:f8:5c:08:96:4a:87:70: 7f:e1:8c:85:a1:f0:ea:a0:10:10:d5:2d:1e:27:ea: 0b:f7:29:41:a3:a2:09:92:bd:7e:3d:10:59:04:52: 4e:d6:48:ed:19:f9:1a:a9:ce:03:6d:2e:88:d7:b0: 17:86:73:f2:40:06:cd:31:62:64:95:b9:1c:3c:7b: 40:16:65:b9:98:66:8f:ec:7e:6c:1d:02:f6:95:1c: 08:bd:4c:70:5d:f4:9f:0b:34:92:a8:7e:19:b3:3b: d1:7b:cb:e7:29:72:83:f5:bc:fd:bf:9c:55:0d:ea: a7:8b:ff:95:f9:72:05:5e:dc:b1:77:0e:9b:24:d0: de:6d Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 32:4D:17:9E:EC:26:7C:A7:12:04:03:3C:AF:B5:4D:33:8A:CF:0F:98 X509v3 Authority Key Identifier: keyid:99:CE:56:9A:14:C2:DB:37:72:F2:31:87:CE:68:E6:54:1E:C0:04:8E X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/mc5WmhTC2zdy8jGHzmjmVB7ABI4.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/f2/cc6e99-6e5f-401b-912d-1095544c6c50/1/mc5WmhTC2zdy8jGHzmjmVB7ABI4.mft X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/f2/cc6e99-6e5f-401b-912d-1095544c6c50/1/mc5WmhTC2zdy8jGHzmjmVB7ABI4.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 86:11:a4:71:7e:16:31:88:75:56:fe:69:bb:cd:fe:bc:ab:4a: 49:b1:92:ed:d8:a1:51:13:01:f3:a7:09:35:91:f9:10:32:35: fc:94:81:85:45:41:b9:a4:57:5c:d8:af:e1:77:0d:51:7a:84: bf:72:ef:e5:5c:75:fc:b2:df:6b:ac:e5:25:35:35:3f:0f:a7: 10:48:ef:68:31:f1:ca:a4:51:c2:3c:d4:27:93:8e:3f:8c:e6: 95:d6:ea:3b:6d:ed:88:a7:e8:94:f3:99:70:26:06:54:fd:b1: 27:da:e6:a8:af:5c:04:36:3c:b5:a2:05:82:5a:0c:ba:0a:7b: 12:0b:c8:97:a3:30:b4:45:60:33:04:18:4e:70:ee:73:0c:30: be:cb:2f:cf:d0:e0:16:2d:35:78:e7:b2:59:2c:c2:0b:f2:86: 8a:16:23:e0:76:41:e4:00:82:53:1d:92:98:35:41:77:76:9d: b2:9d:94:72:38:d4:d4:05:8b:e9:35:5a:05:cb:ad:15:91:c9: 2a:65:88:b6:f0:5a:f8:5c:da:34:64:84:2b:34:54:86:7e:34: 1b:15:c9:79:30:68:ff:58:e5:87:62:f0:fb:95:97:76:cd:0e: 8f:fd:7b:17:df:59:bb:13:e0:62:56:af:99:b2:25:21:ea:a1: 98:09:c3:37 -----BEGIN CERTIFICATE----- MIIFFjCCA/6gAwIBAgISAZoFJAEpgNZQ7rjeEXjURN2cMA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKDk5Y2U1NjlhMTRjMmRiMzc3MmYyMzE4N2NlNjhlNjU0MWVj MDA0OGUwHhcNMjUxMDIxMDUwMDM2WhcNMjUxMDIyMDUwMDM2WjAzMTEwLwYDVQQD EygzMjRkMTc5ZWVjMjY3Y2E3MTIwNDAzM2NhZmI1NGQzMzhhY2YwZjk4MIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEA+du/Gonk3Lb4yaxM2SbGfXgNJQ35 EPSO6xnmoIEZCWX7MPBBycVYhnKZBKS8PifD7NaMKjvBBMq1jur/D8TlKYofMI29 QqAQN6ce+S35oH1KNKXWfvslvED2wljv1+C3ioer0I5XzGbWarKA1Hyeev2r5THv 3SggYKujiNWTzvhcCJZKh3B/4YyFofDqoBAQ1S0eJ+oL9ylBo6IJkr1+PRBZBFJO 1kjtGfkaqc4DbS6I17AXhnPyQAbNMWJklbkcPHtAFmW5mGaP7H5sHQL2lRwIvUxw XfSfCzSSqH4ZszvRe8vnKXKD9bz9v5xVDeqni/+V+XIFXtyxdw6bJNDebQIDAQAB o4ICIjCCAh4wHQYDVR0OBBYEFDJNF57sJnynEgQDPK+1TTOKzw+YMB8GA1UdIwQY MBaAFJnOVpoUwts3cvIxh85o5lQewASOMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvbWM1V21oVEMyemR5OGpHSHptam1WQjdBQkk0LmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC9mMi9jYzZlOTktNmU1Zi00MDFiLTkxMmQt MTA5NTU0NGM2YzUwLzEvbWM1V21oVEMyemR5OGpHSHptam1WQjdBQkk0Lm1mdDCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC9mMi9jYzZlOTktNmU1Zi00MDFiLTkxMmQtMTA5NTU0NGM2YzUw LzEvbWM1V21oVEMyemR5OGpHSHptam1WQjdBQkk0LmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAhhGkcX4W MYh1Vv5pu83+vKtKSbGS7dihURMB86cJNZH5EDI1/JSBhUVBuaRXXNiv4XcNUXqE v3Lv5Vx1/LLfa6zlJTU1Pw+nEEjvaDHxyqRRwjzUJ5OOP4zmldbqO23tiKfolPOZ cCYGVP2xJ9rmqK9cBDY8taIFgloMugp7EgvIl6MwtEVgMwQYTnDucwwwvssvz9Dg Fi01eOeyWSzCC/KGihYj4HZB5ACCUx2SmDVBd3adsp2UcjjU1AWL6TVaBcutFZHJ KmWItvBa+FzaNGSEKzRUhn40GxXJeTBo/1jlh2Lw+5WXds0Oj/17F99ZuxPgYlav mbIlIeqhmAnDNw== -----END CERTIFICATE-----Generated at Tue Oct 21 13:21:15 2025 by rpki-client