$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/10/290e44-b479-46cf-ab4b-b38e2677b3dc/1/0he0cshBwdaFUKJPGTbSnMbCj2o.mft File: 0he0cshBwdaFUKJPGTbSnMbCj2o.mft (raw, json) Hash identifier: NyRfNCX15n5lt78Azsud7RyOtHHrIFaaG3jaXd3ZwYY= Subject key identifier: 82:B4:E5:B7:25:FE:EB:E3:1E:5A:F3:04:30:DA:DB:AF:DC:C2:06:F7 Authority key identifier: D2:17:B4:72:C8:41:C1:D6:85:50:A2:4F:19:36:D2:9C:C6:C2:8F:6A Certificate issuer: /CN=d217b472c841c1d68550a24f1936d29cc6c28f6a Certificate serial: 019A53083E9F0CC78AADB4BFC9D6E7728C79 Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/0he0cshBwdaFUKJPGTbSnMbCj2o.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/10/290e44-b479-46cf-ab4b-b38e2677b3dc/1/0he0cshBwdaFUKJPGTbSnMbCj2o.mft Manifest number: 1792 Signing time: Wed 05 Nov 2025 08:00:40 +0000 Manifest this update: Wed 05 Nov 2025 08:00:40 +0000 Manifest next update: Thu 06 Nov 2025 08:00:40 +0000 Files and hashes: 1: 0he0cshBwdaFUKJPGTbSnMbCj2o.crl (hash: LC996/Kdna3R1AuZUnW+SzxzkhhhS3AXmKcOe11MpBk=) 2: 0httGqgqnBD-cyBZkV5zP0LpIO4.roa (hash: e5sFUpuEkPspxdtpRMty2JvPNTXvUGFt57BwVt8wTQk=) 3: 20w83vHPyYnLSWr2qqWCmD2gZNY.roa (hash: ClK+X58yEmA5ygXK0mo1ANs6qUTT/V8TWnwZD7Tusy4=) 4: 2s4ghGsMJ4UjziczDpj7_nBo6GE.roa (hash: jn5a6RlzlWn5orrS4JyYzumT++ei7+4zrAsQWhkhOUE=) 5: BBOySe2ApZYQpT0wPGJ7zV8XzsA.roa (hash: N6DdRHz14Xr18smaWB+L/0EFbg9FmP8IrnnkdfkP5sA=) 6: BjUAlonCB1CjmbTY52apZdHRGFk.roa (hash: vBVzlWqlUuZ7F5qeBjljk7LIKAFRXIaJSFWC4T698rw=) 7: DRLbJL7meHAnOmMNiiVi2VhOOMc.roa (hash: Lp9UgdizeLrJK6Zry0u6HD2WAPxw4E+r1wzuyfdMmtU=) 8: DckPkWZfljnAbQqV6SalR6Uqe94.roa (hash: ArN8TuTTCoe+jeefNsTkr92B/haNuKK1frU+GAU9yrI=) 9: Dv1S1YEzH17LpAC-2GG3sT10oCs.roa (hash: hsPpxwvn6cSJNv+yA/RdWENbwgkgG1OHn52ADocHRrc=) 10: EXfTHtw-3BJt59JkT36dPstORFo.roa (hash: MhW4Yoiges2mvr+KewFgpAREQV0Mu5obgGNxi9eeOQc=) 11: FRvZFyOxFoddRwR8NWy2iDyogY8.roa (hash: bzSWZTj+o0faBM1dsh+8mBoLaK0jcFLNse7M1DVkpUs=) 12: G8jjrx8EZbysXI_Z13e_0NqYZdU.roa (hash: GPSkTNwl/L8vVjia7LOR9ahqlqqIZvGFNcWIGIi/vHw=) 13: H5_UEf6RMp0ZMb_Mv4D8iAcwsyU.roa (hash: uonWTKVU8g+mUAIIxQ5x86Iq7w5qOGhQtxDY89kAJIY=) 14: Ib_gkG0OXaC9YGgBGzmQj28oy6Y.roa (hash: Dfa7w0wU+Mwe8FRxusOe5J5w207sEqOGP3MEUAezXaw=) 15: Jp0UMtlRd8ZwvCOhqfD_ADrBKLI.roa (hash: mR/skrtMXmYrNl0WIwSjaGFdp8tWtvYO7SMbQmVqf6A=) 16: MguR744HGmOoEMdrlIzPUQQNYfs.roa (hash: Ve4h+6FdNbKYu9bYvRE5Dbmxn7BK8VvZ01cl79qxeJc=) 17: PcsvqoFss2sjt8KP5dE_s9b5R94.roa (hash: 2VnZlh9WN/gvQzrunwflGg0cw7Ym2P+YsV38lpVH0Gs=) 18: RySOnwd5yNUvkpOdlWzbq8gD58I.roa (hash: pMm1Q5jN9tu+9MZBtGXjdw1riel86JfdVWVMRs8pgEY=) 19: UNh6P6o5iukKyngJ923OKln6euE.roa (hash: N5ex54TauXC69hfaRmQEjxuyvZMfnOJEFnqZWvxkb8A=) 20: XXSSAkKxHIvFb1XDuVgAK48p7oI.roa (hash: p4mx1wVBI5jfCHEyW7RDH/AavCZwfWlBpFNbLCutJY0=) 21: XqDDBjzRqksOqaLkNJqWqkX_q5g.roa (hash: 1giyN8jwNm42lrK4gv4g6LsRanOMpVhR/vHcE0ewcvw=) 22: Y5c3qkFCpv03-ICNcuAXdHgS3cY.roa (hash: XJDCD20D/hEgr09ZL/gnt/32UJp0okrjk8WR5CoxVyQ=) 23: Y6R9BZ4jbo-SeP4MKzTkUzdRmEs.roa (hash: T03e4fff7Y/zXUb0yVVk+lWsYWaY+JCxTDBS+p8Hygw=) 24: _Ja5VSGfVwaP_RssqzUEn4YMRnM.roa (hash: IopLtmpqrddq1TLUa3ph8Vkd8Gg6tUuEa1Mf8B120SY=) 25: dSIvoRbcXmjEhaD-HdyHYcdmt90.roa (hash: JqFQVPXSWhIrd/AlZzo80JSKjqGLV5nybtYrZ/HoQns=) 26: fW0mZX2qVdA0eoUEboZhAE59bUE.roa (hash: stVjqf6xlyz/MOhoo6Rt330zmsp7vd4IC5S2fUEJ5WM=) 27: kqDz7smZzEggwnOtTZ91wrlBE4c.roa (hash: OteTjZY0hrzoBDeoZG9laIbeOhFIt32mklvyy1YBT38=) 28: m9Q0QpkVO1rZKT8wIA-lB6ceYcg.roa (hash: yW9VuP+7IZqfB9uY1adWMtzwRUiSlhz/2UYbCN1BQSU=) 29: oqSgizr5ODUUGjBb8_Wzxokx-xk.roa (hash: Kl53NJDKPjecKCh1ZqXsoFCQIzYfPyjvOORgLlse+gY=) 30: qlt-CjR0Oi0L3lo2PS7A4jbvIUg.roa (hash: iydTkBpS1P6s3+CKe74qws4olK3ajXbhwYqoUw/uhBk=) 31: tdzsaKxsamCWBVwoUkqT8RggY6A.roa (hash: Fv0PNntXjBHiuO1Z367HBdmxJtFfh7CR44dwT354/lw=) 32: wMbP2rODQDC-jcOXAyW7ktyAwFs.roa (hash: 9dxgb9cFX2rvzK0yUiEPPHMObwlTuLCycMbvyIulqKU=) 33: yNK_se_8Y1MH-IyQZOfpZj_aArA.roa (hash: Y/8odYpFkGDQCB6ybQitBRTCfwLFaWn7M7svPHhRrhA=) 34: z4dbT2rdI1MPHPzn2a4SSpvkt3E.roa (hash: pftbqIKgzEeVO9sl0LAVO5XHYPxIgJ6YwaN9JqNCTzk=) Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/10/290e44-b479-46cf-ab4b-b38e2677b3dc/1/0he0cshBwdaFUKJPGTbSnMbCj2o.crl rsync://rpki.ripe.net/repository/DEFAULT/10/290e44-b479-46cf-ab4b-b38e2677b3dc/1/0he0cshBwdaFUKJPGTbSnMbCj2o.mft rsync://rpki.ripe.net/repository/DEFAULT/0he0cshBwdaFUKJPGTbSnMbCj2o.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Thu 06 Nov 2025 08:00:40 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9a:53:08:3e:9f:0c:c7:8a:ad:b4:bf:c9:d6:e7:72:8c:79 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=d217b472c841c1d68550a24f1936d29cc6c28f6a Validity Not Before: Nov 5 08:00:40 2025 GMT Not After : Nov 6 08:00:40 2025 GMT Subject: CN=82b4e5b725feebe31e5af30430dadbafdcc206f7 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:c9:25:0a:f1:06:e6:49:73:79:ed:f0:4e:0a:2c: 12:b1:14:23:ac:8e:0d:52:08:66:bd:18:51:9c:97: 97:c1:72:96:a1:f5:bb:f3:39:77:61:ea:c3:ab:bc: 17:42:e7:ce:5f:d8:f0:ff:d8:7e:d5:74:38:35:f1: 54:96:bb:e5:3b:e4:9a:2b:19:3f:c0:ee:dd:38:bf: af:9a:49:a1:08:a8:ea:ec:7c:e4:0d:aa:01:08:7d: 9c:75:11:81:4c:3c:34:77:f0:78:ae:72:77:02:f9: b4:29:cc:4b:01:1c:82:6f:9f:6a:1f:d8:ad:94:ae: 4a:77:ba:1f:5a:e7:51:12:37:78:f7:91:11:f6:19: 80:7a:47:1b:14:fb:09:ec:16:d4:64:81:f5:1e:ec: 6f:92:b6:65:89:20:d8:ff:85:11:a8:14:f2:5e:90: c8:4e:2d:22:46:76:98:23:6f:b4:cd:d1:51:72:85: 3e:2e:ad:83:22:c8:34:9f:0c:f7:d7:f1:38:0e:1c: 8e:f8:42:1e:b3:65:f9:15:f7:1c:da:d8:c7:37:cf: db:69:86:ab:c7:f2:8c:17:da:14:d0:71:c3:94:a9: 69:08:d9:34:ba:97:0d:aa:6f:e6:5f:7d:83:db:ab: 42:cc:ee:13:26:18:1e:87:9c:4d:cb:94:4d:87:71: f4:ed Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 82:B4:E5:B7:25:FE:EB:E3:1E:5A:F3:04:30:DA:DB:AF:DC:C2:06:F7 X509v3 Authority Key Identifier: keyid:D2:17:B4:72:C8:41:C1:D6:85:50:A2:4F:19:36:D2:9C:C6:C2:8F:6A X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/0he0cshBwdaFUKJPGTbSnMbCj2o.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/10/290e44-b479-46cf-ab4b-b38e2677b3dc/1/0he0cshBwdaFUKJPGTbSnMbCj2o.mft X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/10/290e44-b479-46cf-ab4b-b38e2677b3dc/1/0he0cshBwdaFUKJPGTbSnMbCj2o.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 3f:06:74:76:41:be:72:20:23:7f:da:3f:92:1f:71:83:10:1b: bf:11:75:fa:b7:46:cb:65:35:39:8f:78:00:02:64:56:f1:83: a6:80:c6:d1:c4:a1:fb:58:61:c3:16:ce:58:72:33:a6:f1:40: 55:fb:1c:e5:f9:5f:d7:7a:72:11:d8:70:81:cf:e0:9b:a1:d8: 38:b3:ab:07:a2:40:74:98:49:c7:64:95:e6:e1:69:88:c3:74: 31:35:89:06:cc:c7:5b:50:66:b6:93:68:5c:0a:43:e2:96:76: 27:cd:ec:35:b9:b4:ab:f0:73:08:f6:23:18:e0:f7:fe:f6:42: c1:88:1e:6f:59:37:fa:4d:82:42:99:f8:b7:ab:21:4b:e7:e2: 09:28:e3:04:19:f6:95:48:3f:b4:6a:cd:91:ef:dc:44:88:14: 21:99:b0:7c:04:38:d4:09:4f:91:fc:c9:dd:7c:50:1d:6f:62: a3:d3:3d:cd:ea:f5:44:6f:ea:4f:27:cc:d4:29:77:0a:d7:4e: 92:ec:91:14:b1:43:b1:97:df:04:2f:5b:0c:7c:b0:5d:ed:4b: 2a:e4:32:f6:9e:61:51:ad:8c:c4:3b:18:74:f8:23:37:77:2d: b1:1b:83:e0:2d:80:ce:45:66:a3:dd:86:62:2d:62:96:c6:90: 9e:67:cc:b4 -----BEGIN CERTIFICATE----- MIIFFjCCA/6gAwIBAgISAZpTCD6fDMeKrbS/ydbncox5MA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKGQyMTdiNDcyYzg0MWMxZDY4NTUwYTI0ZjE5MzZkMjljYzZj MjhmNmEwHhcNMjUxMTA1MDgwMDQwWhcNMjUxMTA2MDgwMDQwWjAzMTEwLwYDVQQD Eyg4MmI0ZTViNzI1ZmVlYmUzMWU1YWYzMDQzMGRhZGJhZmRjYzIwNmY3MIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAySUK8QbmSXN57fBOCiwSsRQjrI4N UghmvRhRnJeXwXKWofW78zl3YerDq7wXQufOX9jw/9h+1XQ4NfFUlrvlO+SaKxk/ wO7dOL+vmkmhCKjq7HzkDaoBCH2cdRGBTDw0d/B4rnJ3Avm0KcxLARyCb59qH9it lK5Kd7ofWudREjd495ER9hmAekcbFPsJ7BbUZIH1HuxvkrZliSDY/4URqBTyXpDI Ti0iRnaYI2+0zdFRcoU+Lq2DIsg0nwz31/E4DhyO+EIes2X5Ffcc2tjHN8/baYar x/KMF9oU0HHDlKlpCNk0upcNqm/mX32D26tCzO4TJhgeh5xNy5RNh3H07QIDAQAB o4ICIjCCAh4wHQYDVR0OBBYEFIK05bcl/uvjHlrzBDDa26/cwgb3MB8GA1UdIwQY MBaAFNIXtHLIQcHWhVCiTxk20pzGwo9qMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvMGhlMGNzaEJ3ZGFGVUtKUEdUYlNuTWJDajJvLmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC8xMC8yOTBlNDQtYjQ3OS00NmNmLWFiNGIt YjM4ZTI2NzdiM2RjLzEvMGhlMGNzaEJ3ZGFGVUtKUEdUYlNuTWJDajJvLm1mdDCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC8xMC8yOTBlNDQtYjQ3OS00NmNmLWFiNGItYjM4ZTI2NzdiM2Rj LzEvMGhlMGNzaEJ3ZGFGVUtKUEdUYlNuTWJDajJvLmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAPwZ0dkG+ ciAjf9o/kh9xgxAbvxF1+rdGy2U1OY94AAJkVvGDpoDG0cSh+1hhwxbOWHIzpvFA Vfsc5flf13pyEdhwgc/gm6HYOLOrB6JAdJhJx2SV5uFpiMN0MTWJBszHW1BmtpNo XApD4pZ2J83sNbm0q/BzCPYjGOD3/vZCwYgeb1k3+k2CQpn4t6shS+fiCSjjBBn2 lUg/tGrNke/cRIgUIZmwfAQ41AlPkfzJ3XxQHW9io9M9zer1RG/qTyfM1Cl3CtdO kuyRFLFDsZffBC9bDHywXe1LKuQy9p5hUa2MxDsYdPgjN3ctsRuD4C2AzkVmo92G Yi1ilsaQnmfMtA== -----END CERTIFICATE-----Generated at Wed Nov 5 16:59:29 2025 by rpki-client