$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/07/e6f4e4-68bb-4496-90c7-aa859e192b16/1/EFa81Cb9h81vQUfhMyFtAxErGBs.mft File: EFa81Cb9h81vQUfhMyFtAxErGBs.mft (raw, json) Hash identifier: Wf8qITitNdjm9IGlCP7VXbjdPZL6ufnHDNJE1VWLE8U= Subject key identifier: 59:AB:A8:8B:97:79:D5:B8:66:12:62:53:48:55:4A:D7:7C:3B:F2:44 Authority key identifier: 10:56:BC:D4:26:FD:87:CD:6F:41:47:E1:33:21:6D:03:11:2B:18:1B Certificate issuer: /CN=1056bcd426fd87cd6f4147e133216d03112b181b Certificate serial: 019A4E862B4B342F736A9FDFD13ABABD5E99 Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/EFa81Cb9h81vQUfhMyFtAxErGBs.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/07/e6f4e4-68bb-4496-90c7-aa859e192b16/1/EFa81Cb9h81vQUfhMyFtAxErGBs.mft Manifest number: 1756 Signing time: Tue 04 Nov 2025 11:00:06 +0000 Manifest this update: Tue 04 Nov 2025 11:00:06 +0000 Manifest next update: Wed 05 Nov 2025 11:00:06 +0000 Files and hashes: 1: 0gM9nO8aCfkT81wAB6FtCesEwDg.roa (hash: Lfwi2k/qzNFayxWwQOnJuaS4g7hdO3qEEZMxYRqe+is=) 2: AsrOt557l1h00n6pkVtft6a66aI.roa (hash: P8uIuV8VH7SkMIwGpury+3xmBvggRtyitJUCcK4sKeY=) 3: EFa81Cb9h81vQUfhMyFtAxErGBs.crl (hash: p7GRUupAH9LGPOcOtmEKg8K97xTXVKPFVxNqalmSzlA=) 4: ETcH2IvsrV9frQQAiGHCydePvXc.roa (hash: vnxbYaqSpCvvPsvgeAGAJuaPg4alEmcLbxdQJvK4GFI=) 5: G1PI32vXIbkXgcKhQ0SHmsA-Lnw.roa (hash: 7Y963vtn61281jo1Uj8ZuCZ+/NEGmwjvGvcRTIydNM4=) 6: QhSInFK1aIon1BhkEHNijO-f4ik.roa (hash: awcccSlGjZ1xO51njQcexLk1s7JWly1aPOUdo8QDEfg=) 7: TJXWLM_f1SLJ9QLRgKk5eWFWRWg.roa (hash: U09rnHXYuOIiTSo58nsYq7oF2UX+cCeIr2J6otu7qE0=) 8: WWtCrJTOa2fdz1x4NrejDaidA4c.roa (hash: bNRJCU/5ggmed8Sa2EXYIbSVMg5Nfmrhzw8GYsZOcgY=) 9: Z_JTTR_RtMnZmrz0g3I9FM7FzwM.roa (hash: 4Ba7poo6V+UgmXHewWiewkdScmWDep4KBpX3aJD/l2M=) 10: _hMBChRNkf58hpBhY7tv3hze2PY.roa (hash: yasJknKp5lFegxLDOt4vURuuinaYS7fHqYEy4jDR1Qk=) 11: f7e24_kc_woNPGchU49zRaiPPtg.roa (hash: rsVGF94CsaYZyejnnB2G7Jx9MOV3cb8+8hyyFUvoFDk=) 12: hdB-JXdXye4ZBva1IafIEMe8-fA.roa (hash: NcBvrxIc56CrHKnTnl6Gzon98z/sEiBJxakbHIp45Y8=) 13: iDLarbunVi4QHQ-mD5gPnXZLLrg.roa (hash: 0KfJ1SYAPy0ibP4+GzP2AbbTBvoTg6YZ3wuLem0KL9c=) 14: ms8CGFdvCmpl6u_shB2ITMZflkk.roa (hash: XKgbOtBoDSU8HddYbwjY08NVy8DQA+018YQ8iR/G36o=) 15: oQmDS9OyWmw4qbX_RxUyk824228.roa (hash: joHFOvFR7JuSQIoicIyGEGjOCGSkIauTU5jH7oWWLJA=) 16: uPfCG3rKdmw_ESsxus2J0PQvAYY.roa (hash: Y6IHm1JnqtpPIYHUAQK6pMCeN6ioWtARVl2avIWApWo=) 17: w3JXIRcbr6KwnMwme1orx9slU8I.roa (hash: VFCCyy87daugzyIA/V3roqMFDyUsgWDtMgKdLSeZBKc=) 18: zwifaiebir_mFla_bV8p6ToycZs.roa (hash: zS1PueeTX8MO1e9jnmRW3mU76xzsId0nLWB1WA/rYBQ=) Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/07/e6f4e4-68bb-4496-90c7-aa859e192b16/1/EFa81Cb9h81vQUfhMyFtAxErGBs.crl rsync://rpki.ripe.net/repository/DEFAULT/07/e6f4e4-68bb-4496-90c7-aa859e192b16/1/EFa81Cb9h81vQUfhMyFtAxErGBs.mft rsync://rpki.ripe.net/repository/DEFAULT/EFa81Cb9h81vQUfhMyFtAxErGBs.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Wed 05 Nov 2025 09:00:03 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9a:4e:86:2b:4b:34:2f:73:6a:9f:df:d1:3a:ba:bd:5e:99 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=1056bcd426fd87cd6f4147e133216d03112b181b Validity Not Before: Nov 4 11:00:06 2025 GMT Not After : Nov 5 11:00:06 2025 GMT Subject: CN=59aba88b9779d5b86612625348554ad77c3bf244 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:bd:90:5a:d9:4d:2f:d9:13:4f:04:b0:6b:38:c6: 57:9e:e4:57:34:14:81:14:fd:9a:5e:89:b9:9e:97: 1e:9b:6a:c3:7e:c5:ad:cf:1d:73:32:44:3b:c5:fb: 0f:50:41:9f:ea:7e:e2:f9:7d:95:b3:05:ab:9e:9b: 21:b3:b4:f7:21:a8:b7:f7:94:8a:93:f0:b8:37:3d: 22:6d:a0:fa:0f:99:35:d7:f1:30:a3:3f:ae:55:c7: 47:06:19:6a:c2:e3:43:c5:21:d7:9f:05:b5:51:c9: a6:ee:da:a9:8a:83:43:13:ee:9c:ca:37:fc:17:99: 53:7c:20:bc:34:d5:16:da:92:51:e7:22:74:d1:61: 44:34:5c:18:ea:0d:07:c7:73:13:4e:7d:ed:e6:0a: ca:6e:54:75:79:06:28:5f:7f:1d:1a:44:74:e1:df: 8c:e2:12:93:90:bc:3d:1f:e4:02:c6:6b:40:f1:f0: 7d:2a:df:13:02:e7:e6:83:b5:df:bc:85:15:99:a9: ab:f3:d6:a4:6a:7c:96:09:76:aa:e6:b3:8d:9f:83: ab:f8:32:61:b9:7b:5f:ec:c4:07:91:c7:30:c4:e5: 4c:ef:ba:7f:bb:36:5f:2f:67:5f:f6:75:44:3a:bc: dd:52:16:28:9e:d0:ae:a2:8e:6f:14:45:94:4e:ce: 5e:85 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 59:AB:A8:8B:97:79:D5:B8:66:12:62:53:48:55:4A:D7:7C:3B:F2:44 X509v3 Authority Key Identifier: keyid:10:56:BC:D4:26:FD:87:CD:6F:41:47:E1:33:21:6D:03:11:2B:18:1B X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/EFa81Cb9h81vQUfhMyFtAxErGBs.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/07/e6f4e4-68bb-4496-90c7-aa859e192b16/1/EFa81Cb9h81vQUfhMyFtAxErGBs.mft X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/07/e6f4e4-68bb-4496-90c7-aa859e192b16/1/EFa81Cb9h81vQUfhMyFtAxErGBs.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 8f:5e:aa:3c:56:97:db:46:3b:42:40:da:7e:3e:bb:b9:df:4c: 3d:b0:ca:3f:b2:67:65:a2:06:4b:08:ef:f4:53:cc:e7:9a:69: 02:bf:d4:0f:ad:c9:f2:44:d5:da:7c:8d:d9:dc:80:24:2d:37: db:2f:a6:7e:a0:ea:ef:1a:61:64:d0:ed:46:66:8b:15:52:72: 8f:c7:39:d9:04:f4:9e:29:f7:db:30:ae:13:9b:21:1e:90:60: 55:9f:db:b3:11:c7:bc:cf:f9:a9:c7:0a:44:74:8e:2a:0d:f2: 44:e4:99:b6:a7:24:ed:68:9f:0f:5c:4f:c0:e5:e1:21:db:28: 83:94:52:1a:c0:37:b5:9c:99:0f:37:f7:94:2b:09:69:f6:49: 34:01:4f:28:08:07:5f:d9:c4:bd:8e:60:b5:f4:41:c4:de:1e: ef:43:c6:d2:47:dd:b9:18:54:12:c6:42:f8:26:54:57:5b:bc: 2c:4c:14:bc:6d:9b:eb:82:1c:1d:9a:07:b3:36:57:e3:a0:8d: 39:12:1f:d8:1d:18:fc:78:9d:8a:0c:a5:84:7e:63:73:31:54: 6d:cb:3f:68:46:ba:98:94:2b:89:a5:42:21:9c:39:b7:da:ea: f7:f4:43:3e:be:be:53:2b:85:b6:3d:48:b6:a5:ff:4d:bc:7d: 9c:16:45:5d -----BEGIN CERTIFICATE----- MIIFFjCCA/6gAwIBAgISAZpOhitLNC9zap/f0Tq6vV6ZMA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKDEwNTZiY2Q0MjZmZDg3Y2Q2ZjQxNDdlMTMzMjE2ZDAzMTEy YjE4MWIwHhcNMjUxMTA0MTEwMDA2WhcNMjUxMTA1MTEwMDA2WjAzMTEwLwYDVQQD Eyg1OWFiYTg4Yjk3NzlkNWI4NjYxMjYyNTM0ODU1NGFkNzdjM2JmMjQ0MIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAvZBa2U0v2RNPBLBrOMZXnuRXNBSB FP2aXom5npcem2rDfsWtzx1zMkQ7xfsPUEGf6n7i+X2VswWrnpshs7T3Iai395SK k/C4Nz0ibaD6D5k11/Ewoz+uVcdHBhlqwuNDxSHXnwW1Ucmm7tqpioNDE+6cyjf8 F5lTfCC8NNUW2pJR5yJ00WFENFwY6g0Hx3MTTn3t5grKblR1eQYoX38dGkR04d+M 4hKTkLw9H+QCxmtA8fB9Kt8TAufmg7XfvIUVmamr89akanyWCXaq5rONn4Or+DJh uXtf7MQHkccwxOVM77p/uzZfL2df9nVEOrzdUhYontCuoo5vFEWUTs5ehQIDAQAB o4ICIjCCAh4wHQYDVR0OBBYEFFmrqIuXedW4ZhJiU0hVStd8O/JEMB8GA1UdIwQY MBaAFBBWvNQm/YfNb0FH4TMhbQMRKxgbMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvRUZhODFDYjloODF2UVVmaE15RnRBeEVyR0JzLmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC8wNy9lNmY0ZTQtNjhiYi00NDk2LTkwYzct YWE4NTllMTkyYjE2LzEvRUZhODFDYjloODF2UVVmaE15RnRBeEVyR0JzLm1mdDCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC8wNy9lNmY0ZTQtNjhiYi00NDk2LTkwYzctYWE4NTllMTkyYjE2 LzEvRUZhODFDYjloODF2UVVmaE15RnRBeEVyR0JzLmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAj16qPFaX 20Y7QkDafj67ud9MPbDKP7JnZaIGSwjv9FPM55ppAr/UD63J8kTV2nyN2dyAJC03 2y+mfqDq7xphZNDtRmaLFVJyj8c52QT0nin32zCuE5shHpBgVZ/bsxHHvM/5qccK RHSOKg3yROSZtqck7WifD1xPwOXhIdsog5RSGsA3tZyZDzf3lCsJafZJNAFPKAgH X9nEvY5gtfRBxN4e70PG0kfduRhUEsZC+CZUV1u8LEwUvG2b64IcHZoHszZX46CN ORIf2B0Y/HidigylhH5jczFUbcs/aEa6mJQriaVCIZw5t9rq9/RDPr6+UyuFtj1I tqX/Tbx9nBZFXQ== -----END CERTIFICATE-----Generated at Tue Nov 4 16:40:11 2025 by rpki-client