$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/fa/a0e01a-9bbc-44ee-98a3-597b6e2492ab/1/u6Nc-KtvPqoq663Z4jc97AiTYl4.mft File: u6Nc-KtvPqoq663Z4jc97AiTYl4.mft (raw, json) Hash identifier: v9ULE1LFcmWHSGCJvnmmHvPn/L5oz7MAXFXoCMv6oIg= Subject key identifier: 2E:FD:18:00:19:59:8A:E3:A6:D1:92:9B:98:CF:52:1F:FB:B8:DC:C4 Authority key identifier: BB:A3:5C:F8:AB:6F:3E:AA:2A:EB:AD:D9:E2:37:3D:EC:08:93:62:5E Certificate issuer: /CN=bba35cf8ab6f3eaa2aebadd9e2373dec0893625e Certificate serial: 019A44A7BFE518DE1374EB42FF89DC0E9554 Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/u6Nc-KtvPqoq663Z4jc97AiTYl4.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/fa/a0e01a-9bbc-44ee-98a3-597b6e2492ab/1/u6Nc-KtvPqoq663Z4jc97AiTYl4.mft Manifest number: 14D6 Signing time: Sun 02 Nov 2025 13:00:35 +0000 Manifest this update: Sun 02 Nov 2025 13:00:35 +0000 Manifest next update: Mon 03 Nov 2025 13:00:35 +0000 Files and hashes: 1: BrzMotRwWum6-plh7okwXahkOEw.roa (hash: KNrByvrRESfQLIHd88NCHYJK86NO5i3vBaQCBV7EA7E=) 2: GtppMOhe-qj4-qKPQwYM7Bndra0.roa (hash: DZ7bcQ1MagW/CKYzAoT3tgdmQpZud4AtQbSCkk/MCKU=) 3: IICQjXJW2EEkB1v0o8BM6izDgbM.roa (hash: 7Xb1rw7YXZ8yAd+5aXbmrrlzp2Uxli0xSynXq48MEYc=) 4: PZNxNz45jwhU2f2Vk-rUkU1xuZQ.roa (hash: F+PZJf4GxvF8kf0ckwm9Pxo9WyYXyL9ytkInNQ2bSTY=) 5: _8UTREX8Q0a63ua_dGhbhojBdUA.roa (hash: DL1eDSZaMbokl5Ydp9t7oF5cl2AwIO6gEepk09/TZDc=) 6: _kZUir8n1AqIU0qtCf0tRxbZpds.roa (hash: i0Gwqdkr5/j/wsvWbuGrhf4MKjNKMEm96rfhCoH477Y=) 7: bLyBa-YU5CTUEUfCcyjMqyKWtCo.roa (hash: +pvmNAe4DVU0G8NksRdtjc76cKcR1QvaqfbXLphvYek=) 8: c7nY0rggG6raEqDRkehzGz_VYtA.roa (hash: EhNdOxX4vcohdV7gKrHWK7+fsvt8pGFZe0311VfzJ1M=) 9: clWD5iSFcHwGMTWctP6MgbhffFI.roa (hash: XeY9jpVy1coomoksHYwsuAsFdSJEnTf0ShOjmRYUnB0=) 10: hEnYun4dBmY4NXRm3bASEYEJDP0.roa (hash: 9ED8ExgB7hEhZTw92vukURu1ltjtyM6wWC7Qc0GRBP4=) 11: tTkbfZxula834alUiiKULvFUhEY.roa (hash: 53gfHOJtFDupMS3Pl17R4clQixHqHEmtoBj+F2KX9dc=) 12: u6Nc-KtvPqoq663Z4jc97AiTYl4.crl (hash: 6SkNHKESy0sIrwiCFJjOS5WTAcGHiXeU7ywgU2vWMhc=) Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/fa/a0e01a-9bbc-44ee-98a3-597b6e2492ab/1/u6Nc-KtvPqoq663Z4jc97AiTYl4.crl rsync://rpki.ripe.net/repository/DEFAULT/fa/a0e01a-9bbc-44ee-98a3-597b6e2492ab/1/u6Nc-KtvPqoq663Z4jc97AiTYl4.mft rsync://rpki.ripe.net/repository/DEFAULT/u6Nc-KtvPqoq663Z4jc97AiTYl4.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Mon 03 Nov 2025 13:00:35 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9a:44:a7:bf:e5:18:de:13:74:eb:42:ff:89:dc:0e:95:54 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=bba35cf8ab6f3eaa2aebadd9e2373dec0893625e Validity Not Before: Nov 2 13:00:35 2025 GMT Not After : Nov 3 13:00:35 2025 GMT Subject: CN=2efd180019598ae3a6d1929b98cf521ffbb8dcc4 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:ab:94:81:3e:25:fd:03:89:d8:dd:e3:0c:b4:21: 9b:37:18:53:79:4e:e0:59:f7:6d:25:cb:d5:51:7c: 99:64:fe:d1:d7:26:72:68:c2:d1:65:10:0e:dd:e7: ec:3f:9b:73:2c:ba:b3:49:71:60:cf:6a:14:47:c8: 00:2d:6e:55:1e:71:c8:65:10:c0:0c:e4:32:59:96: e7:06:d8:91:1a:79:12:f3:72:db:cb:3d:d6:12:da: c4:61:8e:51:56:f3:db:d7:c6:80:dc:29:db:b2:c5: 0e:3c:b1:82:ff:4f:13:3a:a1:1a:6d:1f:00:46:86: 8a:55:13:92:0b:6f:cd:46:a2:d5:3a:f2:4d:48:95: 67:f9:95:aa:a4:8c:14:5d:55:4b:43:a4:80:a5:4a: ea:71:a5:e2:96:03:00:f1:3f:b1:dc:1b:69:46:9c: 83:68:ec:5d:00:4d:6d:f4:79:ec:1c:05:a6:c2:3a: 65:ba:4b:9b:56:c1:a8:a8:24:5a:c9:d2:b4:05:9d: bf:fe:fe:b5:8c:09:66:6b:a2:b2:5a:4c:88:ee:a1: 2e:e8:2c:31:fe:fc:37:6f:a6:1f:3d:e5:a5:38:33: 00:30:32:68:f5:08:87:77:c2:08:ed:7f:26:ea:46: 82:5b:92:90:b0:70:3d:95:fe:63:c7:e7:dc:bb:43: ff:a1 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 2E:FD:18:00:19:59:8A:E3:A6:D1:92:9B:98:CF:52:1F:FB:B8:DC:C4 X509v3 Authority Key Identifier: keyid:BB:A3:5C:F8:AB:6F:3E:AA:2A:EB:AD:D9:E2:37:3D:EC:08:93:62:5E X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/u6Nc-KtvPqoq663Z4jc97AiTYl4.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/fa/a0e01a-9bbc-44ee-98a3-597b6e2492ab/1/u6Nc-KtvPqoq663Z4jc97AiTYl4.mft X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/fa/a0e01a-9bbc-44ee-98a3-597b6e2492ab/1/u6Nc-KtvPqoq663Z4jc97AiTYl4.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 4f:3f:28:f0:00:55:4f:1d:7d:dd:ee:1c:8a:f8:33:6a:ae:e8: a6:c8:f9:45:3a:59:71:25:77:b5:dc:09:23:b0:28:22:e3:2e: b1:9e:6d:4f:39:41:ee:3a:a1:43:ae:b5:e6:cc:d5:53:2b:43: dc:12:ec:c7:7d:4d:a5:df:60:5e:73:3d:ce:68:5f:9e:4a:3f: 7b:70:1b:5c:18:f3:e7:ae:ab:21:cb:d3:13:11:8e:6a:e9:ad: c9:2f:51:fd:9a:7e:25:7c:d7:36:ba:d7:30:01:05:a2:7b:ae: da:f9:aa:0a:71:58:20:f0:37:95:fa:52:99:f9:83:46:8d:b3: 40:80:09:18:dc:e7:66:b6:e8:9e:fa:6f:c6:ee:bd:fb:dc:09: aa:40:06:a5:e4:a5:c8:8a:fa:6e:d6:58:7b:35:4f:97:a8:bf: 16:1c:c3:58:52:c2:2e:79:86:26:18:d3:a9:2e:07:a0:de:05: f5:5f:5e:85:02:39:03:48:4a:30:05:85:93:3f:4d:13:89:65: ff:ec:2c:61:f5:f0:91:d5:ca:31:13:65:b9:71:3c:d7:01:85: 8a:54:31:85:47:6a:79:3c:9f:15:18:04:21:56:56:ea:f4:40: 97:e9:8b:83:f3:c1:43:dd:a8:b8:fc:c0:ed:10:82:3f:ce:ee: 88:76:e0:4d -----BEGIN CERTIFICATE----- MIIFFjCCA/6gAwIBAgISAZpEp7/lGN4TdOtC/4ncDpVUMA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKGJiYTM1Y2Y4YWI2ZjNlYWEyYWViYWRkOWUyMzczZGVjMDg5 MzYyNWUwHhcNMjUxMTAyMTMwMDM1WhcNMjUxMTAzMTMwMDM1WjAzMTEwLwYDVQQD EygyZWZkMTgwMDE5NTk4YWUzYTZkMTkyOWI5OGNmNTIxZmZiYjhkY2M0MIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAq5SBPiX9A4nY3eMMtCGbNxhTeU7g WfdtJcvVUXyZZP7R1yZyaMLRZRAO3efsP5tzLLqzSXFgz2oUR8gALW5VHnHIZRDA DOQyWZbnBtiRGnkS83Lbyz3WEtrEYY5RVvPb18aA3CnbssUOPLGC/08TOqEabR8A RoaKVROSC2/NRqLVOvJNSJVn+ZWqpIwUXVVLQ6SApUrqcaXilgMA8T+x3BtpRpyD aOxdAE1t9HnsHAWmwjplukubVsGoqCRaydK0BZ2//v61jAlma6KyWkyI7qEu6Cwx /vw3b6YfPeWlODMAMDJo9QiHd8II7X8m6kaCW5KQsHA9lf5jx+fcu0P/oQIDAQAB o4ICIjCCAh4wHQYDVR0OBBYEFC79GAAZWYrjptGSm5jPUh/7uNzEMB8GA1UdIwQY MBaAFLujXPirbz6qKuut2eI3PewIk2JeMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvdTZOYy1LdHZQcW9xNjYzWjRqYzk3QWlUWWw0LmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC9mYS9hMGUwMWEtOWJiYy00NGVlLTk4YTMt NTk3YjZlMjQ5MmFiLzEvdTZOYy1LdHZQcW9xNjYzWjRqYzk3QWlUWWw0Lm1mdDCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC9mYS9hMGUwMWEtOWJiYy00NGVlLTk4YTMtNTk3YjZlMjQ5MmFi LzEvdTZOYy1LdHZQcW9xNjYzWjRqYzk3QWlUWWw0LmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEATz8o8ABV Tx193e4civgzaq7opsj5RTpZcSV3tdwJI7AoIuMusZ5tTzlB7jqhQ6615szVUytD 3BLsx31Npd9gXnM9zmhfnko/e3AbXBjz566rIcvTExGOaumtyS9R/Zp+JXzXNrrX MAEFonuu2vmqCnFYIPA3lfpSmfmDRo2zQIAJGNznZrbonvpvxu69+9wJqkAGpeSl yIr6btZYezVPl6i/FhzDWFLCLnmGJhjTqS4HoN4F9V9ehQI5A0hKMAWFkz9NE4ll /+wsYfXwkdXKMRNluXE81wGFilQxhUdqeTyfFRgEIVZW6vRAl+mLg/PBQ92ouPzA 7RCCP87uiHbgTQ== -----END CERTIFICATE-----Generated at Sun Nov 2 22:48:21 2025 by rpki-client