$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/0c/d83777-5ba8-4f1e-851c-92819de8a036/1/7XfmuSWzt6eruSiF1V1zPcX6YtI.mft File: 7XfmuSWzt6eruSiF1V1zPcX6YtI.mft (raw, json) Hash identifier: StoDaDyaUATkTbSKos9B7WPNPkDvSL3kAtV1NSbr9os= Subject key identifier: 37:42:67:D2:00:2A:09:2E:2C:F1:31:7C:46:10:86:F9:0B:37:04:88 Authority key identifier: ED:77:E6:B9:25:B3:B7:A7:AB:B9:28:85:D5:5D:73:3D:C5:FA:62:D2 Certificate issuer: /CN=ed77e6b925b3b7a7abb92885d55d733dc5fa62d2 Certificate serial: 019A4E188A0C1501ADFEA1EDE7E03FF28F28 Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/7XfmuSWzt6eruSiF1V1zPcX6YtI.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/0c/d83777-5ba8-4f1e-851c-92819de8a036/1/7XfmuSWzt6eruSiF1V1zPcX6YtI.mft Manifest number: 102E Signing time: Tue 04 Nov 2025 09:00:21 +0000 Manifest this update: Tue 04 Nov 2025 09:00:21 +0000 Manifest next update: Wed 05 Nov 2025 09:00:21 +0000 Files and hashes: 1: 1-CO-fvpLt-7xcDizbV9I34n9dPg.roa (hash: 65azsLcm+e9fC1eLww5W9pplp0n/3BVkvu0yEBHI1/s=) 2: 2SMgTvrgi0QtK86QVDF0HeNX37g.roa (hash: bXncWfdYuf1oB9hHOXL5B9gbBLNuO9YCT7mJOYaH4PA=) 3: 7XfmuSWzt6eruSiF1V1zPcX6YtI.crl (hash: ggfF5+8JhT7QQOCt6y/c7IqDJzfEj5SckaYQhvxf4GI=) 4: 7hd2sIUznI41DIGnvdgKPC_VoHM.roa (hash: 3DEd/e9i/VsK7C0PBuZvR6e5ADJXMsKAg6zB1qI4fVA=) 5: 7s1vlMSfOJKnVeCwaN8pm_OILY0.roa (hash: C7906cZU8aCKXOyLJviN3x2QEg+urUVyv2wDiZLVQrg=) 6: GllXyrQCVpAoVUeLqzuPLHA6iuM.roa (hash: sj/xvHaYGyX/JCJyYziN03CArrbvqUYjlOC14gtyPO0=) 7: HW3yz8X7qxTo7UfeqkWq12X_8DY.roa (hash: Sg386YREgnkLIDryYsuZ5WxU45X+cAEuTL3x1T+HdFI=) 8: H_cb2iywkPGRQSLwNVkOTqdUTug.roa (hash: 2dTUvBGdK5D//WJ0qxOg9jP8DQIrOveZv5qM/ewz0G8=) 9: Rgvu8EMlSRTOVq8D6ZWnIaACnnM.roa (hash: bF3sARn5mB454VweHfQrOsXgNq9FwlfNQVAiUDVNcCM=) 10: THoss3qX9ggNaIx9MssWt8dF9cs.roa (hash: lddYscsC9WWXqXk/CKT6eni3Y6p0rpSS4tBt83PgI6s=) 11: _Mfy4Kst9sDDePWmWOtIuWubLWs.roa (hash: cvaNgH9cPXLtV9CpswHyu4gb3PwQnex2hsIpgXmioos=) 12: _dj93V8CgTr4WtPvkeAuwUmW2TE.roa (hash: ZN3MQ6SbuQBeM8qd6E8KM2I3KZr5yEBWX0GSlucExQY=) 13: fDWbip1-YNcvwFB10wWogqS6hpg.roa (hash: 0bycX6lJtic2qo3rY1WaTtAanYsxsXCfO/8R29cbxyU=) 14: lMG-MbpwKixzG9irxD_nVMIqhAQ.roa (hash: uC6Epy1/dmwLAA2Y1Uy00aYyeSC9OBBxmLjF43DAq6Q=) 15: lryZPvbj4yExvdlOIp2SCrWeSCY.roa (hash: FCRNygfVB0sk9T6/Ss2lAq6vxOZw7f+qQ3cAYEeERzM=) 16: mLyW0Pb3zSMLnJ2LcHvqcLtKvME.roa (hash: 7biTWCMX8dd/Yb4YGy3RGmQNgsca/j6VVKHXZnWFEY4=) 17: ocSPuPJzak2nhLrF7PE9QuyF6_o.roa (hash: S2R+rxn3ei+reQbvszIhMRwiS0WPW2r3/iSwtXY8D2g=) 18: xTPblglr4TYoyJotTqPI-C0T4s4.roa (hash: UiEru9fUaM3d6pVC0GNwD0YrE+8b1bGf05QMBq/rtq0=) 19: y08vt-6XfGq4rmWBd5xWgiqilPE.roa (hash: Aq7IiQBdCPg8kz97DvBqBJmTkJ1OIzksvzSyrjSG9R0=) Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/0c/d83777-5ba8-4f1e-851c-92819de8a036/1/7XfmuSWzt6eruSiF1V1zPcX6YtI.crl rsync://rpki.ripe.net/repository/DEFAULT/0c/d83777-5ba8-4f1e-851c-92819de8a036/1/7XfmuSWzt6eruSiF1V1zPcX6YtI.mft rsync://rpki.ripe.net/repository/DEFAULT/7XfmuSWzt6eruSiF1V1zPcX6YtI.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Wed 05 Nov 2025 09:00:03 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9a:4e:18:8a:0c:15:01:ad:fe:a1:ed:e7:e0:3f:f2:8f:28 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=ed77e6b925b3b7a7abb92885d55d733dc5fa62d2 Validity Not Before: Nov 4 09:00:21 2025 GMT Not After : Nov 5 09:00:21 2025 GMT Subject: CN=374267d2002a092e2cf1317c461086f90b370488 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:e0:18:a1:89:e6:f2:d4:8e:c0:ba:d7:d7:b6:38: 78:ed:2a:3c:00:43:8d:85:fc:36:63:8e:76:fc:9d: bc:5a:b7:ce:ee:47:04:e8:97:34:24:51:56:63:ea: f0:a3:fa:99:bd:b3:27:20:5f:93:51:7c:84:3f:8e: 22:a6:1d:52:1b:79:e0:bc:f8:2a:8b:9d:1b:fd:72: bc:dc:b3:23:b8:b2:83:af:79:81:d6:0c:98:43:08: 4c:1e:6b:d7:9d:40:0f:0e:c3:df:6d:9a:aa:ef:04: 23:44:56:e0:af:8a:70:28:09:1f:b0:c9:90:f7:22: e5:5d:8f:68:f1:32:4c:92:8e:64:02:89:43:c2:82: c9:96:13:4f:9e:fe:0d:d9:dc:dc:e0:1a:e8:41:7a: 5a:87:28:17:cf:44:bd:71:7c:09:a4:0b:f3:ef:88: 6c:26:38:58:db:9d:0d:ea:a7:b7:a3:d8:c9:f2:58: 5f:9a:18:d8:b0:9f:dc:8d:02:d5:9b:03:f5:fa:4c: 0e:67:0d:28:ff:52:90:f2:c8:c4:2a:28:04:7a:37: b1:68:80:7c:f6:fa:90:4d:19:1f:b4:57:f7:91:53: cf:53:32:ef:4a:8f:75:cc:3f:18:ad:41:3c:d1:7b: 8a:21:91:8e:10:79:a3:fa:7a:ad:27:8e:9e:8a:d4: 6c:99 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 37:42:67:D2:00:2A:09:2E:2C:F1:31:7C:46:10:86:F9:0B:37:04:88 X509v3 Authority Key Identifier: keyid:ED:77:E6:B9:25:B3:B7:A7:AB:B9:28:85:D5:5D:73:3D:C5:FA:62:D2 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/7XfmuSWzt6eruSiF1V1zPcX6YtI.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/0c/d83777-5ba8-4f1e-851c-92819de8a036/1/7XfmuSWzt6eruSiF1V1zPcX6YtI.mft X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/0c/d83777-5ba8-4f1e-851c-92819de8a036/1/7XfmuSWzt6eruSiF1V1zPcX6YtI.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 51:98:9c:77:77:36:3c:48:d4:62:7f:11:00:81:ff:a2:c9:ec: 28:5e:94:b6:d4:54:97:4a:16:3a:70:64:8f:5b:01:9f:5c:fb: 70:93:13:9c:d4:ab:40:8f:e0:e4:0c:b2:2c:1b:27:49:40:c3: 10:9b:34:61:77:e4:8c:ea:64:f6:9e:9e:af:79:90:1e:5c:03: a9:ce:67:7b:f1:e8:f5:dc:2f:93:02:6a:32:15:3e:e6:76:0c: 66:76:c0:7f:be:7e:b6:06:99:76:80:ee:21:27:a0:54:da:0d: 4d:f1:13:da:0a:8b:5b:24:fc:52:2c:ef:fa:57:60:a5:91:9d: ce:2e:9a:48:96:c7:39:dd:e5:2d:99:dd:dc:3b:fd:8f:87:35: 9f:6b:80:0a:aa:e3:89:fc:74:8f:31:7b:1b:3f:a7:68:d2:cc: cc:8c:54:32:6a:c6:83:24:93:3a:4a:a4:c9:5b:a1:ec:2d:0a: 2f:eb:36:7a:b4:5d:9e:36:5b:41:56:3c:b7:33:e7:9b:61:7b: 21:68:47:98:ef:f3:2f:dd:f7:8c:e6:be:bf:db:5d:f7:ff:da: 99:df:c5:bc:16:88:30:7e:41:52:67:be:d4:b9:ad:98:68:6c: 77:45:98:49:fb:a2:df:f7:31:6d:b5:ea:71:b2:51:f6:a7:c4: 9a:ef:0b:69 -----BEGIN CERTIFICATE----- MIIFFjCCA/6gAwIBAgISAZpOGIoMFQGt/qHt5+A/8o8oMA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKGVkNzdlNmI5MjViM2I3YTdhYmI5Mjg4NWQ1NWQ3MzNkYzVm YTYyZDIwHhcNMjUxMTA0MDkwMDIxWhcNMjUxMTA1MDkwMDIxWjAzMTEwLwYDVQQD EygzNzQyNjdkMjAwMmEwOTJlMmNmMTMxN2M0NjEwODZmOTBiMzcwNDg4MIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEA4Bihieby1I7AutfXtjh47So8AEON hfw2Y452/J28WrfO7kcE6Jc0JFFWY+rwo/qZvbMnIF+TUXyEP44iph1SG3ngvPgq i50b/XK83LMjuLKDr3mB1gyYQwhMHmvXnUAPDsPfbZqq7wQjRFbgr4pwKAkfsMmQ 9yLlXY9o8TJMko5kAolDwoLJlhNPnv4N2dzc4BroQXpahygXz0S9cXwJpAvz74hs JjhY250N6qe3o9jJ8lhfmhjYsJ/cjQLVmwP1+kwOZw0o/1KQ8sjEKigEejexaIB8 9vqQTRkftFf3kVPPUzLvSo91zD8YrUE80XuKIZGOEHmj+nqtJ46eitRsmQIDAQAB o4ICIjCCAh4wHQYDVR0OBBYEFDdCZ9IAKgkuLPExfEYQhvkLNwSIMB8GA1UdIwQY MBaAFO135rkls7enq7kohdVdcz3F+mLSMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvN1hmbXVTV3p0NmVydVNpRjFWMXpQY1g2WXRJLmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC8wYy9kODM3NzctNWJhOC00ZjFlLTg1MWMt OTI4MTlkZThhMDM2LzEvN1hmbXVTV3p0NmVydVNpRjFWMXpQY1g2WXRJLm1mdDCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC8wYy9kODM3NzctNWJhOC00ZjFlLTg1MWMtOTI4MTlkZThhMDM2 LzEvN1hmbXVTV3p0NmVydVNpRjFWMXpQY1g2WXRJLmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAUZicd3c2 PEjUYn8RAIH/osnsKF6UttRUl0oWOnBkj1sBn1z7cJMTnNSrQI/g5AyyLBsnSUDD EJs0YXfkjOpk9p6er3mQHlwDqc5ne/Ho9dwvkwJqMhU+5nYMZnbAf75+tgaZdoDu ISegVNoNTfET2gqLWyT8Uizv+ldgpZGdzi6aSJbHOd3lLZnd3Dv9j4c1n2uACqrj ifx0jzF7Gz+naNLMzIxUMmrGgySTOkqkyVuh7C0KL+s2erRdnjZbQVY8tzPnm2F7 IWhHmO/zL933jOa+v9td9//amd/FvBaIMH5BUme+1LmtmGhsd0WYSfui3/cxbbXq cbJR9qfEmu8LaQ== -----END CERTIFICATE-----Generated at Tue Nov 4 10:46:33 2025 by rpki-client