$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/10/395328-f461-44b7-b031-3f8b55da1ac4/1/BR8pRi56fafrX0XaeHPxTkA_46s.mft File: BR8pRi56fafrX0XaeHPxTkA_46s.mft (raw, json) Hash identifier: Ra6PeooBWaIbj3BAFO4EaL1a6+R0oYjqHMVqFTjllEA= Subject key identifier: B0:41:F8:08:01:87:66:39:F6:19:BF:FB:65:32:FC:57:75:C1:10:61 Authority key identifier: 05:1F:29:46:2E:7A:7D:A7:EB:5F:45:DA:78:73:F1:4E:40:3F:E3:AB Certificate issuer: /CN=051f29462e7a7da7eb5f45da7873f14e403fe3ab Certificate serial: 019A4EBD53B0D7746D621177F33F306C8EE9 Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/BR8pRi56fafrX0XaeHPxTkA_46s.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/10/395328-f461-44b7-b031-3f8b55da1ac4/1/BR8pRi56fafrX0XaeHPxTkA_46s.mft Manifest number: 031D Signing time: Tue 04 Nov 2025 12:00:21 +0000 Manifest this update: Tue 04 Nov 2025 12:00:21 +0000 Manifest next update: Wed 05 Nov 2025 12:00:21 +0000 Files and hashes: 1: 1OPAOSK7XI2PXkMWLZC__kR6e7o.roa (hash: zgqjLOdmhIKV08eKyZe0XmQH3UqGhIzXdKtUIZFpvvE=) 2: 6SPF9wUKHrZ6dX8XvKxjnVR5gSs.roa (hash: fkqYDZXkVkcORjtoFgL9LCKCeNFqQJ4NJn9PSDeEfBQ=) 3: 8-yw9B2nPkCfG0ri-05wxbzK95I.roa (hash: D9ViM4Gvio4pjQlbZ1UG+yr83bOB/c4pGt/sWMwpAIo=) 4: 8h_JebN18U-DQLa7g_VNQTnzmD4.roa (hash: qaZfGE5JnXlAKOoOZ4NfG/E3st+EoiejWrngTgnqPGg=) 5: BR8pRi56fafrX0XaeHPxTkA_46s.crl (hash: Z7bqCnG5pkDxemBwRm3bHr0YlteAaHF4xOF2m4ClvOk=) 6: ByHPyEaADbbqpeyBTeUJrhmCuYQ.roa (hash: dRJ7Xfhd2IktdnYweUcsqpbKflQdcxF/jmr99tlC1i0=) 7: CNtM8zejZ349bsOx94QsI819vZU.roa (hash: xxnS1MVGHtYdDD2abmYeFD2yf6kRsOETWylSJhltDEE=) 8: ExusXckLrxsZNqKlfCaNi76wyn8.roa (hash: 958U6++7iG9JMRvtU0OfoU8TdGPIQhNtWPh5XYFfc1E=) 9: KBH5_k1ABLmKeJO7l-34IXPXqRs.roa (hash: P/JtMtW3yU+sxA5fXStKTboD+4DMtOGbsll537HWOk4=) 10: O88pJYUrrqVOidkJjEP-5_wS7ww.roa (hash: cvcdBAMQsvb0r0SAZ093g5qXRau0yzmBdmsOPLmPc+M=) 11: OY-GIx9hD1F4OFf4n-y0JK1ANZg.roa (hash: PbCMLXyHRgfKX4P/i6p6IrPplONleRWnbtsOIMdtbRA=) 12: PYLIgBr_BwpwqIBq0uDXjMVCcO0.roa (hash: cKqK7iISq+hHAlg/ZJ1m7UofToF0VF0S/PulOyt8vLw=) 13: T-WQUbMA2opCoWmz9iIpBVDop7w.roa (hash: LxZzYTsPv2oZVsXtK1M9TpzKZjJLXQwZ4LXrHPlJD7Y=) 14: V6Fx8HKW5vYtwoUl9-FGq139rH4.roa (hash: VbwVmnD3kf6YOoUlp8nFzAYfvI3kHMT1G3evyq8grxI=) 15: ZAO9zOgwcnH7CVr3zg-zAmkFmEU.roa (hash: jzMcOQPGwbHcpf5AaSFTbx4J1lBs/EwoqM2RnhLe/64=) 16: a6Y4aK3dcMkVOhxaPCkj4tv_r9o.roa (hash: AjkSxRf4m/hDIVmcEg8Nz3dPC++vr47UARhugAtRJG4=) 17: bfi17XKfoQv_Pklhy_iWS-yvXWo.roa (hash: 05HfZ+6uBWn/eosoqV+13/r9i72s/MRFf2Ny+SGpO7c=) 18: bkj_9Heh0C9FpUqLrf65_9tMX1o.roa (hash: bkX0VT2UTOwEY8RRSJ6fL2Rs1tekiUyjrTzbnadeNds=) 19: boJmz216E2pVUR2unuNVUplfhyM.roa (hash: i+zLjdL9F/qjZdj6l1k7yZCeKyy95BgZFZ1ZAYbGuBs=) 20: f2D3UV4sYjo4Otohoy79vFEF0Ag.roa (hash: KRgW361Frr8F6yZbGVOnQ7xVzqdchF195Wcn12RxysE=) 21: fZcssnMM-oyAkfiWcEwQiIqtu5U.roa (hash: 9OgIxc3uOeDLvKMHACKvgXGx2POImcau/RInqulO5p0=) 22: gicegBW5Q1xikkf_SLe1-6lH06U.roa (hash: pqN+I3n4dBN3SZnpQPA/6vzrG5l7HojgVKb3SXvaH9M=) 23: iuwR3gymafKwUArlmGbUUJNbSa8.roa (hash: EtXzdV3cLqZcZzSgtMiBpL5x/7d8YbZUcgnJOjOuNu0=) 24: kNKW14Dxh4X2xbIOHRvhO-4tzcE.roa (hash: ENDHKI6G3Ef3eUled5c74JZlLpucyibX5X1QKlCy8/E=) 25: kP1MLzfrQwWk1GVdDlBjhCK5JJM.roa (hash: +NDOnTtKyng4Xa7G5fvhPU29tORd7PYP5BmWYtRjBxk=) 26: mN1SF0jqXFbA77Cv4kSAFM7eMrI.roa (hash: bd+gRbyeXkhCADuawPp6Y7Zl70oz5JVqv5T2uQOkFmM=) 27: nE08znyGEROzN-ZPpvH871B_YXc.roa (hash: rvo0J7csjKxABmc7ZJ4UjX/IGGVkIizjnr+3tXbkjRg=) 28: uSds6b4A3ugi6DIsYb_3dWNiNEs.roa (hash: yRT8HJyCOSty+M33PAxjUyOR0ZiSFhtIqLi0qhNHK+g=) 29: vZmH2bvHl1nSGW5nMPLYnxBlkRU.roa (hash: JOoXAeAAIZEiWY0Rg+/OZMN4l51Mdx07GGAUcyh78VU=) 30: x_kmwuaD2Uv2HFLODCKAcngkZmI.roa (hash: YzInZ8+3078RATQFSI7n9ucYtfrzyFiROEAN+YuWwao=) 31: yA3UMDG2NorD0yXtnnE6FrjVIhg.roa (hash: JySOvmeafpb1h5Z9vGr3Dw7i3K7yP3Q/urfaVB0miMw=) Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/10/395328-f461-44b7-b031-3f8b55da1ac4/1/BR8pRi56fafrX0XaeHPxTkA_46s.crl rsync://rpki.ripe.net/repository/DEFAULT/10/395328-f461-44b7-b031-3f8b55da1ac4/1/BR8pRi56fafrX0XaeHPxTkA_46s.mft rsync://rpki.ripe.net/repository/DEFAULT/BR8pRi56fafrX0XaeHPxTkA_46s.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Wed 05 Nov 2025 12:00:21 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9a:4e:bd:53:b0:d7:74:6d:62:11:77:f3:3f:30:6c:8e:e9 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=051f29462e7a7da7eb5f45da7873f14e403fe3ab Validity Not Before: Nov 4 12:00:21 2025 GMT Not After : Nov 5 12:00:21 2025 GMT Subject: CN=b041f80801876639f619bffb6532fc5775c11061 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:99:12:58:39:74:24:8a:73:da:55:3c:c9:c3:86: be:0c:5f:36:67:b0:7e:db:b9:5c:12:65:9a:a1:46: 5b:6d:94:1a:b8:9e:5d:e8:61:df:1a:8f:cd:95:82: 25:5b:de:ff:fc:db:54:27:7f:2a:6d:d6:99:c6:78: 8d:11:23:28:f4:58:bd:71:d9:b2:f8:55:d8:53:a7: de:25:c4:54:bb:ab:b3:a3:c9:b6:09:45:86:61:0f: c5:a7:bf:71:11:66:da:e8:7b:42:fd:bf:19:be:06: 8d:73:42:43:0f:26:44:f8:88:ad:30:2d:ab:74:4a: 18:74:e6:50:47:01:7f:2b:3e:8a:24:45:7f:5e:c3: 83:eb:19:f7:3e:45:66:3e:c5:92:4e:3a:61:84:43: 3b:69:bc:8f:ff:30:f6:ab:0f:98:61:da:69:24:25: 1a:82:4b:c8:24:91:ab:cd:22:4f:72:eb:aa:a1:5b: 49:37:66:ac:ca:cd:7f:b4:3c:c5:f1:96:b7:da:48: da:8d:41:f1:bf:3d:fa:c8:f4:5d:5f:dd:fa:4f:7d: 27:2d:8a:a2:23:49:76:58:53:69:b6:23:37:9b:ca: ba:bf:f3:57:4a:ca:a6:72:45:9e:a8:80:1a:48:a0: c0:d1:7d:88:af:bd:fd:46:77:5b:f5:f3:65:7a:3a: 1a:f9 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: B0:41:F8:08:01:87:66:39:F6:19:BF:FB:65:32:FC:57:75:C1:10:61 X509v3 Authority Key Identifier: keyid:05:1F:29:46:2E:7A:7D:A7:EB:5F:45:DA:78:73:F1:4E:40:3F:E3:AB X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/BR8pRi56fafrX0XaeHPxTkA_46s.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/10/395328-f461-44b7-b031-3f8b55da1ac4/1/BR8pRi56fafrX0XaeHPxTkA_46s.mft X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/10/395328-f461-44b7-b031-3f8b55da1ac4/1/BR8pRi56fafrX0XaeHPxTkA_46s.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 41:ea:93:04:cf:dd:90:fb:99:0b:7f:ca:61:c5:03:4a:ac:6d: e9:af:43:79:5d:94:60:78:fd:59:bc:2b:4c:cc:73:ad:12:0b: 8a:61:5b:67:55:1a:c2:9d:8a:16:32:8c:18:05:8f:76:af:2b: ff:73:06:7f:0f:d0:e3:de:b7:66:b7:b2:43:df:ac:28:72:8c: c1:78:f6:33:02:8a:12:d4:0c:5d:f7:19:e7:2c:84:1f:82:bc: 25:3a:fd:b1:21:0a:58:ea:ab:c0:48:0b:c0:d9:1f:5c:2e:0b: 0b:17:3a:0c:12:fd:e0:2d:80:7d:a5:92:25:bd:0d:fc:e0:41: b1:c0:ce:a6:19:cc:79:8e:3e:5a:62:d2:4e:74:40:36:e5:db: a9:b9:99:ab:2f:33:d4:c6:d3:00:16:cd:ae:2c:5b:7f:06:1a: 71:e2:a9:c8:41:81:0e:af:95:fd:62:71:df:24:4a:7f:c6:7d: 3c:6e:f1:c6:b9:3f:af:a9:d2:f3:14:86:30:64:66:1e:3d:7d: 8a:de:e7:44:3d:8b:b9:bd:c3:0e:1e:9b:ae:db:90:cf:53:ad: 02:35:b7:a2:cc:d3:02:4c:f7:e9:77:4c:3b:23:6c:93:88:74: 82:1e:ed:de:32:4b:cf:e3:ef:f4:1f:13:47:e1:29:6c:05:c8: 5f:e9:c7:49 -----BEGIN CERTIFICATE----- MIIFFjCCA/6gAwIBAgISAZpOvVOw13RtYhF38z8wbI7pMA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKDA1MWYyOTQ2MmU3YTdkYTdlYjVmNDVkYTc4NzNmMTRlNDAz ZmUzYWIwHhcNMjUxMTA0MTIwMDIxWhcNMjUxMTA1MTIwMDIxWjAzMTEwLwYDVQQD EyhiMDQxZjgwODAxODc2NjM5ZjYxOWJmZmI2NTMyZmM1Nzc1YzExMDYxMIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAmRJYOXQkinPaVTzJw4a+DF82Z7B+ 27lcEmWaoUZbbZQauJ5d6GHfGo/NlYIlW97//NtUJ38qbdaZxniNESMo9Fi9cdmy +FXYU6feJcRUu6uzo8m2CUWGYQ/Fp79xEWba6HtC/b8ZvgaNc0JDDyZE+IitMC2r dEoYdOZQRwF/Kz6KJEV/XsOD6xn3PkVmPsWSTjphhEM7abyP/zD2qw+YYdppJCUa gkvIJJGrzSJPcuuqoVtJN2asys1/tDzF8Za32kjajUHxvz36yPRdX936T30nLYqi I0l2WFNptiM3m8q6v/NXSsqmckWeqIAaSKDA0X2Ir739Rndb9fNlejoa+QIDAQAB o4ICIjCCAh4wHQYDVR0OBBYEFLBB+AgBh2Y59hm/+2Uy/Fd1wRBhMB8GA1UdIwQY MBaAFAUfKUYuen2n619F2nhz8U5AP+OrMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvQlI4cFJpNTZmYWZyWDBYYWVIUHhUa0FfNDZzLmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC8xMC8zOTUzMjgtZjQ2MS00NGI3LWIwMzEt M2Y4YjU1ZGExYWM0LzEvQlI4cFJpNTZmYWZyWDBYYWVIUHhUa0FfNDZzLm1mdDCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC8xMC8zOTUzMjgtZjQ2MS00NGI3LWIwMzEtM2Y4YjU1ZGExYWM0 LzEvQlI4cFJpNTZmYWZyWDBYYWVIUHhUa0FfNDZzLmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAQeqTBM/d kPuZC3/KYcUDSqxt6a9DeV2UYHj9WbwrTMxzrRILimFbZ1Uawp2KFjKMGAWPdq8r /3MGfw/Q4963ZreyQ9+sKHKMwXj2MwKKEtQMXfcZ5yyEH4K8JTr9sSEKWOqrwEgL wNkfXC4LCxc6DBL94C2AfaWSJb0N/OBBscDOphnMeY4+WmLSTnRANuXbqbmZqy8z 1MbTABbNrixbfwYaceKpyEGBDq+V/WJx3yRKf8Z9PG7xxrk/r6nS8xSGMGRmHj19 it7nRD2Lub3DDh6brtuQz1OtAjW3oszTAkz36XdMOyNsk4h0gh7t3jJLz+Pv9B8T R+EpbAXIX+nHSQ== -----END CERTIFICATE-----Generated at Tue Nov 4 20:19:41 2025 by rpki-client