$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/0d/dd8096-14cc-488d-9257-c515f354cc5a/1/rQ2kO0pdPbeLo_d05bMbdwNyAtU.mft File: rQ2kO0pdPbeLo_d05bMbdwNyAtU.mft (raw, json) Hash identifier: x1HU5psJLOI8VtT6hritq9QzPUycLM8tpnQfDFNOUE8= Subject key identifier: 0E:AA:D3:CE:17:27:54:0A:94:B4:CB:49:8F:48:CF:85:58:56:A6:B0 Authority key identifier: AD:0D:A4:3B:4A:5D:3D:B7:8B:A3:F7:74:E5:B3:1B:77:03:72:02:D5 Certificate issuer: /CN=ad0da43b4a5d3db78ba3f774e5b31b77037202d5 Certificate serial: 019A4E1874A0AE221C08F510200668DE0756 Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/rQ2kO0pdPbeLo_d05bMbdwNyAtU.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/0d/dd8096-14cc-488d-9257-c515f354cc5a/1/rQ2kO0pdPbeLo_d05bMbdwNyAtU.mft Manifest number: 1754 Signing time: Tue 04 Nov 2025 09:00:16 +0000 Manifest this update: Tue 04 Nov 2025 09:00:16 +0000 Manifest next update: Wed 05 Nov 2025 09:00:16 +0000 Files and hashes: 1: 0ztpdIPZKD6tLdnP79sm1hMOXpI.roa (hash: V+undJDS0h8d8CYJ+c34sHP0OtxUuBa8a+o8Uohmb0E=) 2: 1oM3GP4XRi0mqDBcN0k0C4RTdHY.roa (hash: Eqko1gSCAK/Ec5hGsjBzpPB0Hmmto77uxcqKM6nkuos=) 3: 4rBl4Xgj-eyO-Qb6KkYRdP_q3yA.roa (hash: 9Fg4JBY24DsNxM7h9nmxlQnxm85kk0BWdXCDra924l8=) 4: 5s050sybnU_qDLTadTW4Cbc1oa4.roa (hash: ul22+y65UhFi/PV4KsevDJSKijOmKuUMMb7YcjmOBq0=) 5: AkuNATViTFoUsLRTBmxq5TZta1U.roa (hash: +ALe8BR6dBzO5s8AWGnd/n4M4kjwqZrGPKmd2bf8aB0=) 6: D-_QiVeAYymMyrqyEwwxZVlJ77w.roa (hash: pLHDIfQfn00HxVAd67SY9GUFCYPJH9fT0t4z495xhcU=) 7: I49sO32imbdn9nfJ0l-il2Ef_jY.roa (hash: k2Ksa8ZIkYwAdo7qnIBXutPiCFJfdjd5EjsrD8efaro=) 8: JWGGkRuJCVyXIJf7U_Tllx9GvLo.roa (hash: q2mwtM0pyYItD49ctwOqLjVJYv5g0mJ64QH0B7oRSCM=) 9: PQ4JRK_v8Rb4S6Y1Hjjg1mh8-RM.roa (hash: 6S6SDi+NoevpWtxjp+Phs+mUreAi/RCvfLId1bbLsWc=) 10: SHESx2HqUfWZxboQ6jP2hImYKmU.roa (hash: OlCdziBdwRc0FY5ejIFVQ8Nt867ISEKKLNxKfPnLzFA=) 11: TevPA31zpqIvq6GeQSDxtNa30UQ.roa (hash: 2nDbpMbvjKPaiiXiHqb4sCzw1FXoCOAaM9XlGLGbhC8=) 12: U2a4Mi5anG6MoVx-kSkOlCHuZ9U.roa (hash: WzVg8UcZ00h0mbpXiGBDaneFB3IZyzn0LFRbQNJ9OXc=) 13: UU4qmywXJeD0s-bEtA06YqQJbXY.roa (hash: U8vbKeUDnyxjI4tldoiMN64co7xQZg9nWw+wDHbmz3c=) 14: bicuo27VbekDKZ2baxGyIAeBOBw.roa (hash: SWEpCpnN+xzcUkxLs6Bt4xTFqOqzIoS1IpAm8o8Z7uw=) 15: cbX3FwOgi9rS1ENe_k5BLCxVdg4.roa (hash: 35j9cePlwM12en+EIoj2uwLnq2TReRAiO2SX/9vwgDk=) 16: icTWsoKn_xk3KExZZn417x-Qv84.roa (hash: o9OMiruJYKHV5Ad+C6iuA4/zkZ1aBjsbg8MEUFVbq0o=) 17: nwRRU278nZ-OoZkxunLEdDGvAcI.roa (hash: XtojZB9yoPUFiPBHYDNCJYd8iy1TyLCfmu2Ry8BmvwU=) 18: rQ2kO0pdPbeLo_d05bMbdwNyAtU.crl (hash: kvAgHvqH6Vozb9JYsTjiu+qisfLtGd4drNeFB6j+GX0=) 19: ya7mSjgbQNkjSkwREdHvHfCPb0I.roa (hash: qGz6FzpRmDdb9Ho0LXX5sUlrsbd9atIt02hL0IbJ65M=) Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/0d/dd8096-14cc-488d-9257-c515f354cc5a/1/rQ2kO0pdPbeLo_d05bMbdwNyAtU.crl rsync://rpki.ripe.net/repository/DEFAULT/0d/dd8096-14cc-488d-9257-c515f354cc5a/1/rQ2kO0pdPbeLo_d05bMbdwNyAtU.mft rsync://rpki.ripe.net/repository/DEFAULT/rQ2kO0pdPbeLo_d05bMbdwNyAtU.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Wed 05 Nov 2025 09:00:03 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9a:4e:18:74:a0:ae:22:1c:08:f5:10:20:06:68:de:07:56 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=ad0da43b4a5d3db78ba3f774e5b31b77037202d5 Validity Not Before: Nov 4 09:00:16 2025 GMT Not After : Nov 5 09:00:16 2025 GMT Subject: CN=0eaad3ce1727540a94b4cb498f48cf855856a6b0 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:cd:db:bc:2f:0f:c4:93:14:25:ad:ee:ed:8e:74: b8:b2:22:a5:3c:8a:13:77:79:2c:a4:58:27:d7:cc: 47:d4:01:67:15:1a:f9:19:f2:7e:d9:4e:9f:6d:9c: a5:b2:be:e7:56:e5:4f:5d:84:d8:50:82:c4:99:9a: 29:48:59:59:30:73:ab:48:fb:1a:5d:2c:82:93:bd: 09:86:45:29:60:58:97:33:18:7c:33:9e:92:17:e0: 49:99:5b:81:d1:fd:88:e4:b7:fc:20:cc:d9:68:f9: a0:0c:a6:54:dc:51:52:c0:03:94:cb:13:a2:ef:2e: 12:a5:9c:ff:8b:7a:29:f2:5f:1a:80:ad:35:26:c1: ad:a6:5c:ea:6e:c9:64:81:bb:d8:86:dc:18:48:15: f3:1f:83:2a:48:bf:ee:e7:22:ef:51:ef:27:e6:94: 74:f2:7b:df:7a:1c:eb:73:bf:55:74:3d:54:bd:e0: f0:80:23:95:b5:6d:0f:58:1d:9c:fb:05:8b:95:0b: cd:e6:eb:37:ee:7d:5a:30:26:4c:74:05:09:f2:96: 84:7e:ca:ee:5c:b0:c9:95:29:64:8c:2c:6a:48:4e: 1d:25:05:e7:ab:31:93:56:a1:ce:2c:1e:15:8e:7f: 64:34:4e:ca:92:89:e8:bf:d2:3c:cd:9c:7e:01:03: a0:8d Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 0E:AA:D3:CE:17:27:54:0A:94:B4:CB:49:8F:48:CF:85:58:56:A6:B0 X509v3 Authority Key Identifier: keyid:AD:0D:A4:3B:4A:5D:3D:B7:8B:A3:F7:74:E5:B3:1B:77:03:72:02:D5 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/rQ2kO0pdPbeLo_d05bMbdwNyAtU.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/0d/dd8096-14cc-488d-9257-c515f354cc5a/1/rQ2kO0pdPbeLo_d05bMbdwNyAtU.mft X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/0d/dd8096-14cc-488d-9257-c515f354cc5a/1/rQ2kO0pdPbeLo_d05bMbdwNyAtU.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 45:67:0e:85:16:5a:a4:19:9a:f1:f6:91:03:b8:10:21:24:73: 7f:a1:d8:cd:83:10:f7:db:18:d8:65:9b:28:27:6b:a9:4c:68: bb:92:41:19:16:08:a3:49:d4:0a:9c:24:c0:fd:26:a4:68:e7: 1a:3d:81:35:21:2b:4d:15:6a:c3:e7:e1:e0:ef:85:06:a2:33: a6:cd:4f:e6:c6:98:8f:43:1d:f7:9b:00:5a:a9:d1:8b:ea:5f: bb:02:e5:86:a3:a9:f7:eb:0d:57:1a:75:ae:b5:50:38:cf:83: 33:b0:9c:71:25:18:e1:0d:28:cf:65:4c:53:fe:63:63:a2:be: ea:4d:2f:f5:4e:ff:20:12:45:ac:56:8e:9e:05:7d:fb:19:7d: 2a:7c:8a:2c:ce:33:c0:26:c9:a9:17:89:78:15:1d:bc:7c:ef: 22:4b:9c:95:8e:0c:c8:f8:c9:95:16:50:37:cc:b1:f3:d7:02: 79:3b:5c:2f:0d:dc:69:41:b1:e7:e2:4b:f9:fa:4f:08:85:2e: 5d:03:fb:29:a7:19:85:e1:8c:3c:a2:57:bd:ae:ab:13:21:aa: 27:28:34:43:5c:f7:3d:76:2d:69:9a:05:f4:f2:67:0f:9e:ee: 97:43:cb:06:b4:83:fc:a6:6c:a5:04:ef:29:f3:69:ba:1e:2f: 2f:80:7a:af -----BEGIN CERTIFICATE----- MIIFFjCCA/6gAwIBAgISAZpOGHSgriIcCPUQIAZo3gdWMA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKGFkMGRhNDNiNGE1ZDNkYjc4YmEzZjc3NGU1YjMxYjc3MDM3 MjAyZDUwHhcNMjUxMTA0MDkwMDE2WhcNMjUxMTA1MDkwMDE2WjAzMTEwLwYDVQQD EygwZWFhZDNjZTE3Mjc1NDBhOTRiNGNiNDk4ZjQ4Y2Y4NTU4NTZhNmIwMIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAzdu8Lw/EkxQlre7tjnS4siKlPIoT d3kspFgn18xH1AFnFRr5GfJ+2U6fbZylsr7nVuVPXYTYUILEmZopSFlZMHOrSPsa XSyCk70JhkUpYFiXMxh8M56SF+BJmVuB0f2I5Lf8IMzZaPmgDKZU3FFSwAOUyxOi 7y4SpZz/i3op8l8agK01JsGtplzqbslkgbvYhtwYSBXzH4MqSL/u5yLvUe8n5pR0 8nvfehzrc79VdD1UveDwgCOVtW0PWB2c+wWLlQvN5us37n1aMCZMdAUJ8paEfsru XLDJlSlkjCxqSE4dJQXnqzGTVqHOLB4Vjn9kNE7Kkonov9I8zZx+AQOgjQIDAQAB o4ICIjCCAh4wHQYDVR0OBBYEFA6q084XJ1QKlLTLSY9Iz4VYVqawMB8GA1UdIwQY MBaAFK0NpDtKXT23i6P3dOWzG3cDcgLVMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvclEya08wcGRQYmVMb19kMDViTWJkd055QXRVLmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC8wZC9kZDgwOTYtMTRjYy00ODhkLTkyNTct YzUxNWYzNTRjYzVhLzEvclEya08wcGRQYmVMb19kMDViTWJkd055QXRVLm1mdDCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC8wZC9kZDgwOTYtMTRjYy00ODhkLTkyNTctYzUxNWYzNTRjYzVh LzEvclEya08wcGRQYmVMb19kMDViTWJkd055QXRVLmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEARWcOhRZa pBma8faRA7gQISRzf6HYzYMQ99sY2GWbKCdrqUxou5JBGRYIo0nUCpwkwP0mpGjn Gj2BNSErTRVqw+fh4O+FBqIzps1P5saYj0Md95sAWqnRi+pfuwLlhqOp9+sNVxp1 rrVQOM+DM7CccSUY4Q0oz2VMU/5jY6K+6k0v9U7/IBJFrFaOngV9+xl9KnyKLM4z wCbJqReJeBUdvHzvIkuclY4MyPjJlRZQN8yx89cCeTtcLw3caUGx5+JL+fpPCIUu XQP7KacZheGMPKJXva6rEyGqJyg0Q1z3PXYtaZoF9PJnD57ul0PLBrSD/KZspQTv KfNpuh4vL4B6rw== -----END CERTIFICATE-----Generated at Tue Nov 4 17:56:23 2025 by rpki-client