$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/fd/5786ab-067e-440c-b276-1b06d1c704c1/1/09VvB74YTLpS9v3ASegRTSYWwyo.mft File: 09VvB74YTLpS9v3ASegRTSYWwyo.mft (raw, json) Hash identifier: b+E3Fqi0RkmeR0K8IJ/OBBMQOVOFgru5QvyMWHcqXjc= Subject key identifier: 4C:69:46:6F:29:18:2A:3D:91:C8:6C:20:0A:AD:87:08:6C:2A:BC:CD Authority key identifier: D3:D5:6F:07:BE:18:4C:BA:52:F6:FD:C0:49:E8:11:4D:26:16:C3:2A Certificate issuer: /CN=d3d56f07be184cba52f6fdc049e8114d2616c32a Certificate serial: 019A4DE1A3C7EC97161E7E643D5E01171EFC Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/09VvB74YTLpS9v3ASegRTSYWwyo.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/fd/5786ab-067e-440c-b276-1b06d1c704c1/1/09VvB74YTLpS9v3ASegRTSYWwyo.mft Manifest number: 1714 Signing time: Tue 04 Nov 2025 08:00:24 +0000 Manifest this update: Tue 04 Nov 2025 08:00:24 +0000 Manifest next update: Wed 05 Nov 2025 08:00:24 +0000 Files and hashes: 1: 09VvB74YTLpS9v3ASegRTSYWwyo.crl (hash: 9HfBqx66bvMNsuCVRxjJy5QqVjyAqUXs6Un6Tn11fHk=) 2: 4c68WXa89S9GaEZ3betWtfOynEI.roa (hash: fVAp1PUxEqPq1PXw46ujCE/Pw+4uzGlNeTIsndTtQ4g=) 3: 7kfcYNNoB5VB3-_80xlsWN3weyk.roa (hash: 1wJop1mQ6qBQDepGqT5ANO4tx0iRC5GqiIyWQqeZxiY=) 4: Bs0O01jXAqadcOrA_652_6vgquk.roa (hash: hEdFCfeLg1JToe8V2oyy+hkNpnht00+5NYTQRgNDOq8=) 5: KidN7PJCXFwqwby4fVpHaeAhpFY.roa (hash: rFMoYmqrD8lR5TajeeUqUicyuRT28K2jKIN4IFZHnsU=) 6: NYzishm2ogJfRyzy8nT6kXYmzuI.roa (hash: LaEEfSMmtUB1mBqYxGiYK3KhOkpxYURIQoeWj6Zjkz4=) 7: RIPl0ZcnNzCRnoJoRMQdo7FatJo.roa (hash: V51bdAbDUbCCdG4ap1IngeKOzNBFdbTp51TPAvBkqrE=) 8: eKmkaw2M8tueZ_tzxfDI9F6CNcc.roa (hash: fg34CUb41rhu+065E2VZ9qaIx2X2iqQ2jxGQO4GwQe4=) 9: pq2QS5SBDS3pAxrbz1jylBKYb1c.roa (hash: kdt9b8eHxviCcBXo3alD6ToqY7JvOLmYwFiRPu6twu8=) 10: tpxzfABwHA4uTKjODgtKlvT10t8.roa (hash: /uiIY+OMfjw8MyTKZlNYbS4i9kHVxO0uNCEe4Op3YPE=) 11: xz6DVtU3-Ra9kwVQS1hT5B1NgIk.roa (hash: L6obqobAUv8Kf3w8kISkegiNvXZC3M7YbdVJnQVDNRA=) Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/fd/5786ab-067e-440c-b276-1b06d1c704c1/1/09VvB74YTLpS9v3ASegRTSYWwyo.crl rsync://rpki.ripe.net/repository/DEFAULT/fd/5786ab-067e-440c-b276-1b06d1c704c1/1/09VvB74YTLpS9v3ASegRTSYWwyo.mft rsync://rpki.ripe.net/repository/DEFAULT/09VvB74YTLpS9v3ASegRTSYWwyo.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Wed 05 Nov 2025 08:00:24 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9a:4d:e1:a3:c7:ec:97:16:1e:7e:64:3d:5e:01:17:1e:fc Signature Algorithm: sha256WithRSAEncryption Issuer: CN=d3d56f07be184cba52f6fdc049e8114d2616c32a Validity Not Before: Nov 4 08:00:24 2025 GMT Not After : Nov 5 08:00:24 2025 GMT Subject: CN=4c69466f29182a3d91c86c200aad87086c2abccd Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:ac:40:ce:dc:8c:6d:88:9f:4a:4b:20:b6:79:83: f2:4b:34:ea:31:c4:02:a4:bb:2a:46:01:98:ea:7d: 27:aa:6d:8a:5f:f8:cc:3b:0e:31:35:37:6c:6e:ac: 13:8d:d7:87:e2:92:1f:6a:59:6d:5b:29:5a:b2:31: 1b:57:6f:a6:75:a3:f8:6c:b7:6c:55:38:da:d5:db: 7d:03:e8:5d:b2:80:37:43:41:a3:14:5a:cc:48:4e: 74:07:6d:6c:a4:44:6a:5d:d2:10:4c:d2:8e:46:61: 39:6d:b5:a6:b2:51:87:f6:a9:ec:8c:0a:ef:27:c8: 22:c3:db:1a:dd:55:af:77:ad:7f:da:f0:c2:a8:6d: 1c:d1:8e:2d:d3:b1:05:99:2d:78:76:35:b9:7a:5c: 10:99:d8:94:18:74:42:d9:81:a9:5d:37:8f:a6:fa: 09:50:a5:d2:a5:d2:a9:d8:0b:d6:a8:1d:7e:15:77: 8e:1c:c2:14:27:58:56:38:4c:fb:3f:06:e3:67:a9: 8a:be:6c:1c:e9:a1:72:82:6f:32:fa:ae:3d:31:b1: 77:92:50:d6:94:b4:5c:51:a7:b0:b4:61:09:57:ab: 9a:fd:bc:fa:cb:f1:22:c1:93:74:f8:89:7c:cd:cf: e4:03:24:df:fa:b4:6f:5c:8f:a0:b9:9a:0b:ab:5b: d5:cb Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 4C:69:46:6F:29:18:2A:3D:91:C8:6C:20:0A:AD:87:08:6C:2A:BC:CD X509v3 Authority Key Identifier: keyid:D3:D5:6F:07:BE:18:4C:BA:52:F6:FD:C0:49:E8:11:4D:26:16:C3:2A X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/09VvB74YTLpS9v3ASegRTSYWwyo.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/fd/5786ab-067e-440c-b276-1b06d1c704c1/1/09VvB74YTLpS9v3ASegRTSYWwyo.mft X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/fd/5786ab-067e-440c-b276-1b06d1c704c1/1/09VvB74YTLpS9v3ASegRTSYWwyo.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 4f:ee:35:08:ed:f1:f8:f2:fd:1a:12:85:58:3e:7c:21:ed:e7: ba:3c:52:a4:0b:a0:05:69:0c:c1:60:41:6a:2e:19:42:c6:5f: 95:ac:4b:48:50:b1:32:80:45:e2:4f:6b:57:a9:f0:82:50:96: c7:95:d2:92:d8:36:a1:6e:28:56:03:23:4f:c3:6e:f9:68:d4: b7:7b:5c:5d:10:98:58:e3:b6:0f:a2:ad:94:16:b4:db:eb:c7: dc:cd:2a:c8:9f:5c:b3:60:80:93:0a:1a:2b:81:79:4b:78:13: 5b:b3:9b:51:22:7c:05:e8:0a:49:58:00:3a:51:2d:0f:5d:b2: 71:29:cc:68:e8:35:9d:95:4e:c5:7c:90:da:d0:e3:fd:4f:dd: 68:e7:6e:49:1d:4c:3a:12:10:62:51:f0:5e:79:76:65:4a:ac: de:55:7e:ae:ea:8c:2c:2b:22:6c:ab:da:6d:18:21:b8:87:15: 7a:b2:a1:a2:75:fa:7a:d8:f0:64:d2:d8:27:c1:58:db:a5:bd: 13:d4:a9:18:c4:ce:fb:fe:a5:31:65:e7:99:81:ac:a0:d5:e8: 4c:4b:e6:70:d6:1f:3c:8e:32:5a:2c:7b:7d:ac:de:6d:a0:1f: 87:9b:e1:1e:9e:1f:98:21:a6:de:f9:c9:e7:54:a2:06:32:59: 8e:a3:5b:aa -----BEGIN CERTIFICATE----- MIIFFjCCA/6gAwIBAgISAZpN4aPH7JcWHn5kPV4BFx78MA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKGQzZDU2ZjA3YmUxODRjYmE1MmY2ZmRjMDQ5ZTgxMTRkMjYx NmMzMmEwHhcNMjUxMTA0MDgwMDI0WhcNMjUxMTA1MDgwMDI0WjAzMTEwLwYDVQQD Eyg0YzY5NDY2ZjI5MTgyYTNkOTFjODZjMjAwYWFkODcwODZjMmFiY2NkMIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEArEDO3IxtiJ9KSyC2eYPySzTqMcQC pLsqRgGY6n0nqm2KX/jMOw4xNTdsbqwTjdeH4pIfalltWylasjEbV2+mdaP4bLds VTja1dt9A+hdsoA3Q0GjFFrMSE50B21spERqXdIQTNKORmE5bbWmslGH9qnsjArv J8giw9sa3VWvd61/2vDCqG0c0Y4t07EFmS14djW5elwQmdiUGHRC2YGpXTePpvoJ UKXSpdKp2AvWqB1+FXeOHMIUJ1hWOEz7PwbjZ6mKvmwc6aFygm8y+q49MbF3klDW lLRcUaewtGEJV6ua/bz6y/EiwZN0+Il8zc/kAyTf+rRvXI+guZoLq1vVywIDAQAB o4ICIjCCAh4wHQYDVR0OBBYEFExpRm8pGCo9kchsIAqthwhsKrzNMB8GA1UdIwQY MBaAFNPVbwe+GEy6Uvb9wEnoEU0mFsMqMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvMDlWdkI3NFlUTHBTOXYzQVNlZ1JUU1lXd3lvLmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC9mZC81Nzg2YWItMDY3ZS00NDBjLWIyNzYt MWIwNmQxYzcwNGMxLzEvMDlWdkI3NFlUTHBTOXYzQVNlZ1JUU1lXd3lvLm1mdDCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC9mZC81Nzg2YWItMDY3ZS00NDBjLWIyNzYtMWIwNmQxYzcwNGMx LzEvMDlWdkI3NFlUTHBTOXYzQVNlZ1JUU1lXd3lvLmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAT+41CO3x +PL9GhKFWD58Ie3nujxSpAugBWkMwWBBai4ZQsZflaxLSFCxMoBF4k9rV6nwglCW x5XSktg2oW4oVgMjT8Nu+WjUt3tcXRCYWOO2D6KtlBa02+vH3M0qyJ9cs2CAkwoa K4F5S3gTW7ObUSJ8BegKSVgAOlEtD12ycSnMaOg1nZVOxXyQ2tDj/U/daOduSR1M OhIQYlHwXnl2ZUqs3lV+ruqMLCsibKvabRghuIcVerKhonX6etjwZNLYJ8FY26W9 E9SpGMTO+/6lMWXnmYGsoNXoTEvmcNYfPI4yWix7fazebaAfh5vhHp4fmCGm3vnJ 51SiBjJZjqNbqg== -----END CERTIFICATE-----Generated at Tue Nov 4 13:35:53 2025 by rpki-client