$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/fd/1ccf25-20de-4b2e-a0e1-de4acf447fae/1/eXmGPOqCrrjp3zhLOapRdvS8-mE.mft File: eXmGPOqCrrjp3zhLOapRdvS8-mE.mft (raw, json) Hash identifier: LuPTF2C9sI2RGrFtCtVjsifMlB0mPbNlPGbqrGfnPZ8= Subject key identifier: D6:C7:8A:6C:F0:36:31:96:27:23:15:7C:C6:DE:74:5B:0C:E6:D8:EE Authority key identifier: 79:79:86:3C:EA:82:AE:B8:E9:DF:38:4B:39:AA:51:76:F4:BC:FA:61 Certificate issuer: /CN=7979863cea82aeb8e9df384b39aa5176f4bcfa61 Certificate serial: 019A285500F953C0994BBC3206E61D65EB79 Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/eXmGPOqCrrjp3zhLOapRdvS8-mE.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/fd/1ccf25-20de-4b2e-a0e1-de4acf447fae/1/eXmGPOqCrrjp3zhLOapRdvS8-mE.mft Manifest number: 171C Signing time: Tue 28 Oct 2025 01:00:50 +0000 Manifest this update: Tue 28 Oct 2025 01:00:50 +0000 Manifest next update: Wed 29 Oct 2025 01:00:50 +0000 Files and hashes: 1: 31B5K7vkAfS9R2wkGuV5dcAnL2Y.roa (hash: O89Ry4yQ6lrE+ydQl9ey5gr4XCsYEJZz/2ZEEVTUklM=) 2: 8rBNukWPHPmFUpvlkGmzTz1-HwA.roa (hash: tMcco5dxWlTIQfy3zxbp0EQ9rOWiTqcDWIU/jeQq+bM=) 3: AuIXsACFZFXiRbUNGuqesbMnYNk.roa (hash: AtCFXdHEG1WMWeYjbN29zoI3CDK+hXSx8POzE7WNroc=) 4: DrV2xA7Yd-hZFiq3pO9rygl2qg0.roa (hash: TVf6eSJU2syGlD0lzcyv3W0pP95vSrCKIhPdX0AUyh0=) 5: GGh-0xxwn6ceElDQMHRGmEsQE-s.roa (hash: P3CSh7y+NvPz/ZjtWmpED7vAzzUGfZNIvd2EgvFxP9s=) 6: NmG_HXr74xhss_g6667RcEUKRLI.roa (hash: w4iJzBXqF4+nBtbBp9H18XsHRW5050KpbO/LhdFePIo=) 7: OeWAQhxz5E883h7RJjR3cmkBM6o.roa (hash: SpK+6FCkO+sEnLY+zrox32fWgUHKX5y3hElZSDHvkaU=) 8: ZVJfIWSCZIVSTo9PXiEHKhrJCaM.roa (hash: REntsWwwRsVHSdpCDEerInchIORTXEiS2eQnOBf/kfw=) 9: eXmGPOqCrrjp3zhLOapRdvS8-mE.crl (hash: ycWdq49ol6Z3lhTRkkq6jeRe2ULAv13ckLVjKcy/zxU=) 10: jRyIBgdtXReJ9oHBVuw4FaEWM-0.roa (hash: ZszsBIs7CJREdsDcllx0N3t5IqBzFvq0JJZ2fLMu8PY=) 11: pGXlBe8mvqpUo_lCHeYFkShv2K8.roa (hash: rjd6cps92Ja94+46vbe5lft5y/2s10gUp3FV0e699LY=) 12: zIH5sPlMx70fyP1Az3Csaj7WyTI.roa (hash: 2aeoW9K+GdEGc7tRsUNmCwR+CPzyrfG3s/F0EGb6/Pk=) Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/fd/1ccf25-20de-4b2e-a0e1-de4acf447fae/1/eXmGPOqCrrjp3zhLOapRdvS8-mE.crl rsync://rpki.ripe.net/repository/DEFAULT/fd/1ccf25-20de-4b2e-a0e1-de4acf447fae/1/eXmGPOqCrrjp3zhLOapRdvS8-mE.mft rsync://rpki.ripe.net/repository/DEFAULT/eXmGPOqCrrjp3zhLOapRdvS8-mE.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Wed 29 Oct 2025 01:00:50 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9a:28:55:00:f9:53:c0:99:4b:bc:32:06:e6:1d:65:eb:79 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=7979863cea82aeb8e9df384b39aa5176f4bcfa61 Validity Not Before: Oct 28 01:00:50 2025 GMT Not After : Oct 29 01:00:50 2025 GMT Subject: CN=d6c78a6cf03631962723157cc6de745b0ce6d8ee Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:8a:97:27:0f:80:b0:43:c8:e6:11:e6:13:2c:ae: e7:e1:e4:89:73:2f:bd:09:af:85:10:f6:b0:10:98: bc:08:7c:f9:70:7d:0b:83:b0:f4:4e:8b:3c:5e:0d: 5f:13:b0:c3:7c:55:af:3c:71:b1:1f:02:4e:0e:8f: b6:4f:16:86:eb:5b:f3:89:36:c1:9b:63:d5:8b:e7: be:8e:f2:e2:96:38:69:ec:ea:34:4a:83:3c:21:04: 5c:3e:04:30:75:52:15:19:8c:d0:23:7e:65:6c:63: 9c:e8:9f:e6:7a:8b:33:17:37:0a:5f:f2:bb:69:e3: b4:bb:ce:0d:2e:71:a9:72:3f:72:79:bc:39:f0:9c: 9b:04:5d:92:f5:84:7e:c1:e9:e2:6c:d6:5f:e7:bd: b6:d9:d7:99:ff:7c:f9:d8:3e:2e:72:1a:e4:7a:d5: 93:99:81:c4:c3:f9:08:d6:74:17:99:c9:12:3d:ca: b5:46:f2:68:81:cc:00:08:a9:3d:5f:53:ea:06:24: c6:65:b2:5c:fe:07:a0:22:5d:04:aa:c3:91:b9:de: ad:17:4b:5f:39:df:0a:65:1a:67:5d:c0:3a:f2:9a: cc:ad:94:99:97:36:db:7c:7e:f8:c2:96:9a:55:43: 70:39:3b:0d:f9:5a:7c:ee:90:dd:d1:93:a8:cb:ad: 04:d9 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: D6:C7:8A:6C:F0:36:31:96:27:23:15:7C:C6:DE:74:5B:0C:E6:D8:EE X509v3 Authority Key Identifier: keyid:79:79:86:3C:EA:82:AE:B8:E9:DF:38:4B:39:AA:51:76:F4:BC:FA:61 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/eXmGPOqCrrjp3zhLOapRdvS8-mE.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/fd/1ccf25-20de-4b2e-a0e1-de4acf447fae/1/eXmGPOqCrrjp3zhLOapRdvS8-mE.mft X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/fd/1ccf25-20de-4b2e-a0e1-de4acf447fae/1/eXmGPOqCrrjp3zhLOapRdvS8-mE.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 59:fb:ef:e5:e0:0e:3b:1d:85:0a:4a:c6:54:44:82:27:99:d1: 03:cb:61:2a:b8:09:3c:4e:d0:31:d9:bc:82:e8:89:0b:f5:f9: 44:4e:a0:8b:93:0c:3c:d4:d7:39:69:f9:a0:a5:e0:c5:b6:ce: d7:c6:3a:b6:51:c4:c8:31:14:68:ab:5f:a2:92:b7:97:e6:94: 7f:34:0d:da:bf:a0:99:59:e2:c0:53:13:7e:7c:37:16:63:5b: 9e:77:b8:3a:c1:d7:27:62:8e:b3:bb:2e:68:b4:aa:0c:d7:63: 4e:ad:22:f9:de:4a:ca:1f:32:12:37:69:05:c1:ff:48:d4:bf: 90:c8:98:1b:1c:8f:0d:e0:11:a1:23:3a:89:07:93:26:59:6e: 42:39:c9:7b:bd:28:2b:99:90:01:2e:80:14:d9:20:d7:4b:38: 3c:18:74:f4:b8:9a:64:0b:ae:cf:ac:32:2d:e3:71:26:98:d2: 7c:81:cd:19:5d:c8:3b:55:ae:50:c6:44:9f:71:7e:18:d0:ae: d9:8c:9b:4c:12:74:af:19:55:83:33:37:97:f4:f8:a6:56:17: f2:ad:a3:d0:70:be:f7:cf:9f:70:46:ee:e0:61:82:7e:e1:97: d7:67:cb:fa:fd:0d:8e:ce:04:ff:43:e4:2b:50:77:c2:38:34: 20:83:7c:21 -----BEGIN CERTIFICATE----- MIIFFjCCA/6gAwIBAgISAZooVQD5U8CZS7wyBuYdZet5MA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKDc5Nzk4NjNjZWE4MmFlYjhlOWRmMzg0YjM5YWE1MTc2ZjRi Y2ZhNjEwHhcNMjUxMDI4MDEwMDUwWhcNMjUxMDI5MDEwMDUwWjAzMTEwLwYDVQQD EyhkNmM3OGE2Y2YwMzYzMTk2MjcyMzE1N2NjNmRlNzQ1YjBjZTZkOGVlMIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAipcnD4CwQ8jmEeYTLK7n4eSJcy+9 Ca+FEPawEJi8CHz5cH0Lg7D0Tos8Xg1fE7DDfFWvPHGxHwJODo+2TxaG61vziTbB m2PVi+e+jvLiljhp7Oo0SoM8IQRcPgQwdVIVGYzQI35lbGOc6J/meoszFzcKX/K7 aeO0u84NLnGpcj9yebw58JybBF2S9YR+wenibNZf57222deZ/3z52D4uchrketWT mYHEw/kI1nQXmckSPcq1RvJogcwACKk9X1PqBiTGZbJc/gegIl0EqsORud6tF0tf Od8KZRpnXcA68prMrZSZlzbbfH74wpaaVUNwOTsN+Vp87pDd0ZOoy60E2QIDAQAB o4ICIjCCAh4wHQYDVR0OBBYEFNbHimzwNjGWJyMVfMbedFsM5tjuMB8GA1UdIwQY MBaAFHl5hjzqgq646d84SzmqUXb0vPphMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvZVhtR1BPcUNycmpwM3poTE9hcFJkdlM4LW1FLmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC9mZC8xY2NmMjUtMjBkZS00YjJlLWEwZTEt ZGU0YWNmNDQ3ZmFlLzEvZVhtR1BPcUNycmpwM3poTE9hcFJkdlM4LW1FLm1mdDCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC9mZC8xY2NmMjUtMjBkZS00YjJlLWEwZTEtZGU0YWNmNDQ3ZmFl LzEvZVhtR1BPcUNycmpwM3poTE9hcFJkdlM4LW1FLmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAWfvv5eAO Ox2FCkrGVESCJ5nRA8thKrgJPE7QMdm8guiJC/X5RE6gi5MMPNTXOWn5oKXgxbbO 18Y6tlHEyDEUaKtfopK3l+aUfzQN2r+gmVniwFMTfnw3FmNbnne4OsHXJ2KOs7su aLSqDNdjTq0i+d5Kyh8yEjdpBcH/SNS/kMiYGxyPDeARoSM6iQeTJlluQjnJe70o K5mQAS6AFNkg10s4PBh09LiaZAuuz6wyLeNxJpjSfIHNGV3IO1WuUMZEn3F+GNCu 2YybTBJ0rxlVgzM3l/T4plYX8q2j0HC+98+fcEbu4GGCfuGX12fL+v0Njs4E/0Pk K1B3wjg0IIN8IQ== -----END CERTIFICATE-----Generated at Tue Oct 28 11:30:01 2025 by rpki-client